last executing test programs: 1m55.319165289s ago: executing program 3 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1m55.037344104s ago: executing program 3 (id=999): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m54.468109882s ago: executing program 3 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="10005e80040002"], 0x2c}}, 0x0) 1m54.222209136s ago: executing program 3 (id=1007): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c0) lsetxattr(&(0x7f0000000200)='./bus\x00', &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000800)='\x00', 0x1, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 1m53.737887673s ago: executing program 3 (id=1010): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x31) 1m41.057707158s ago: executing program 3 (id=1075): r0 = open(&(0x7f0000000080)='./file1\x00', 0x109042, 0x9c) r1 = syz_ublk_setup_io_uring(0x14ca, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000280)={0x0, 0x8d17, 0x8, 0x3, 0x1e9, 0x0, r0}, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x941f, 0x2000, 0x3, 0x1b0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d7, 0x2000, 0x1, 0x2b3, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14eb, 0x0, 0x3, 0x299, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20b7, 0x140, 0x1, 0x2ff}}], 0x4, &(0x7f0000002280)={0x2e, 0x90, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x2, 0x38f, 0x0, 0x0}}, &(0x7f0000002300)) 1m40.600814295s ago: executing program 32 (id=1075): r0 = open(&(0x7f0000000080)='./file1\x00', 0x109042, 0x9c) r1 = syz_ublk_setup_io_uring(0x14ca, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000280)={0x0, 0x8d17, 0x8, 0x3, 0x1e9, 0x0, r0}, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x941f, 0x2000, 0x3, 0x1b0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d7, 0x2000, 0x1, 0x2b3, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14eb, 0x0, 0x3, 0x299, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20b7, 0x140, 0x1, 0x2ff}}], 0x4, &(0x7f0000002280)={0x2e, 0x90, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x2, 0x38f, 0x0, 0x0}}, &(0x7f0000002300)) 1m19.253355383s ago: executing program 4 (id=1194): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="cbb8121a40fe4051bbc002233c22462f446e34ae20f85431b7274d609a0e951dd75e27ad83bf53fc", 0x28}], 0x1}}], 0x1, 0x804) 1m18.970807797s ago: executing program 4 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2400, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000940)={0x2}) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m18.640765992s ago: executing program 4 (id=1198): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 1m17.922849693s ago: executing program 4 (id=1202): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x4216}}]}, 0x1, 0x1535, &(0x7f00000001c0)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000100)='2', 0xfffffe16, 0x8000c5e) 1m17.356354102s ago: executing program 4 (id=1205): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m16.453753536s ago: executing program 4 (id=1210): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m15.751236246s ago: executing program 33 (id=1210): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.873910061s ago: executing program 6 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1f}]}}]}, 0x44}}, 0x4040010) 16.456208717s ago: executing program 6 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54020000", @ANYRES16=r1, @ANYBLOB="050000000000feff01004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000080026006c0900000500240002"], 0x254}}, 0x0) 16.164171781s ago: executing program 6 (id=1659): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000004c0)=0x2) 15.873872856s ago: executing program 6 (id=1662): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 15.206579546s ago: executing program 6 (id=1671): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c986", 0xe}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035", 0x15}], 0x4}}], 0x3, 0x0) 14.372731549s ago: executing program 6 (id=1677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x8fa6, 0x1, "86"}, 0x9) 13.705450059s ago: executing program 34 (id=1677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x8fa6, 0x1, "86"}, 0x9) 4.796606546s ago: executing program 1 (id=1735): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180)) 4.50856256s ago: executing program 1 (id=1739): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) chown(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xee01, 0x0) lchown(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 4.100651877s ago: executing program 5 (id=1743): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.850873681s ago: executing program 5 (id=1744): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 3.748783362s ago: executing program 2 (id=1745): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4e, 0xfffffffffffffffd, 0x100000000007, 0xdb4e, 0x3, 0x2, 0xa2, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0xa, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c5210}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.635922094s ago: executing program 2 (id=1747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0xfffffffffffffffc, 0x4, 0x0, 0x125, 0x5}) 3.534104946s ago: executing program 5 (id=1748): unshare(0x22020600) r0 = syz_io_uring_setup(0x113f, &(0x7f0000000080)={0x0, 0x7011, 0x80, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0xc1c41}, &(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x35ce, 0x1, 0x1, 0x0, 0x0) 3.189954351s ago: executing program 5 (id=1749): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x2, "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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x1, 0x1}) 3.189389421s ago: executing program 2 (id=1750): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fstat(r1, &(0x7f00000002c0)) 2.897651045s ago: executing program 2 (id=1751): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 2.812767657s ago: executing program 5 (id=1752): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000140)='./bus\x00') 2.314941084s ago: executing program 0 (id=1754): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@commit={'commit', 0x3d, 0x82f7}}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x1, 0x456, &(0x7f0000000d80)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmmsg$sock(r0, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) 2.102303487s ago: executing program 2 (id=1755): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x402, @remote, 0x3}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3, @local, 0x100}], 0x48) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x4e27, 0xfffff922, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="b1", 0x1}], 0x1}}], 0x1, 0x400c04d) 1.803701982s ago: executing program 2 (id=1756): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000042bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000740)='V', 0x1) 1.711401534s ago: executing program 0 (id=1757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.508679107s ago: executing program 1 (id=1758): setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, &(0x7f0000001140)) 1.508444197s ago: executing program 0 (id=1759): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file7\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x13, 0x152d, &(0x7f0000004bc0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\'], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xf8605615c65aaad7, 0x0, 0x0, 0x0, 0x0) 1.040394234s ago: executing program 0 (id=1760): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r0) 812.428427ms ago: executing program 1 (id=1761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r2}, 0xc) 528.659151ms ago: executing program 1 (id=1762): write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @val={0x3, 0x1, 0x8, 0x6aea, 0x16, 0xc}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0xaa, "cb", "990526", 0x9300}}}}}}, 0x28) r0 = socket$inet6(0xa, 0x3, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xfbec}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 499.792852ms ago: executing program 5 (id=1763): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xe24283a1, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 377.090094ms ago: executing program 1 (id=1764): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) 339.160235ms ago: executing program 0 (id=1765): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 0s ago: executing program 0 (id=1766): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x100) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) kernel console output (not intermixed with test programs): [ 227.482115][ T7307] EXT4-fs (loop4): 1 truncate cleaned up [ 227.488601][ T7307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.594977][ T4625] usb 2-1: USB disconnect, device number 13 [ 227.686502][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 227.698933][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 227.848846][ T7317] loop2: detected capacity change from 0 to 512 [ 227.887290][ T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.895381][ T14] usb 1-1: config 0 has no interface number 0 [ 227.902484][ T7317] EXT4-fs: inline encryption not supported [ 227.919353][ T14] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 227.942274][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.952152][ T7317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c198, mo2=0002] [ 227.955548][ T7316] loop4: detected capacity change from 0 to 4096 [ 227.979411][ T7317] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1031: corrupted in-inode xattr [ 228.014253][ T14] usb 1-1: Product: syz [ 228.027244][ T14] usb 1-1: Manufacturer: syz [ 228.027878][ T7317] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1031: couldn't read orphan inode 15 (err -117) [ 228.042460][ T14] usb 1-1: SerialNumber: syz [ 228.059348][ T7317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 228.095431][ T14] usb 1-1: config 0 descriptor?? [ 228.318571][ T7316] overlayfs: upper fs does not support tmpfile. [ 228.359040][ T7316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.373365][ T14] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 228.402663][ T14] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 228.405154][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 228.423825][ T14] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 228.429498][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 228.438804][ T7316] overlayfs: conflicting lowerdir path [ 228.462922][ T14] usb 1-1: media controller created [ 228.518792][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.682122][ T14] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 228.779613][ T14] usb 1-1: USB disconnect, device number 9 [ 228.893378][ T4280] EXT4-fs error: 36 callbacks suppressed [ 228.893404][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.168316][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.230261][ T4280] EXT4-fs warning: 13 callbacks suppressed [ 229.230278][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 229.266845][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.421314][ T7339] loop2: detected capacity change from 0 to 512 [ 229.454960][ T7339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.496498][ T7339] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.565512][ T7339] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1041: Invalid block bitmap block 0 in block_group 0 [ 229.575188][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.601841][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 229.622888][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.681509][ T7339] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 229.753837][ T7339] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1041: attempt to clear invalid blocks 983261 len 1 [ 229.834903][ T7339] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1041: Invalid inode table block 0 in block_group 0 [ 229.844331][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.873777][ T7339] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 229.911696][ T7339] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 229.911703][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 229.912053][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 229.981576][ T7339] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1041: Invalid inode table block 0 in block_group 0 [ 230.009501][ T7339] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 230.052688][ T7339] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.1041: mark_inode_dirty error [ 230.082020][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.118493][ T7339] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 230.134219][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 230.152198][ T7339] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1041: Invalid inode table block 0 in block_group 0 [ 230.165774][ T7339] EXT4-fs (loop2): 1 truncate cleaned up [ 230.166579][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 230.176206][ T7339] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.187952][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.208949][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.380067][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.404786][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 230.427793][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 230.433132][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 230.461414][ T14] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 230.478255][ T14] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 230.531253][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 230.554522][ T14] usb 1-1: config 1 has no interface number 0 [ 230.577393][ T14] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.611312][ T14] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.686566][ T14] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 230.695744][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.729448][ T7372] loop4: detected capacity change from 0 to 24 [ 230.735947][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 230.757662][ T14] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 230.959300][ T14] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 231.027906][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 231.256988][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 231.399092][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 231.444203][ T32] usb 1-1: USB disconnect, device number 10 [ 231.455240][ T32] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 231.589575][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 232.273912][ T7396] loop2: detected capacity change from 0 to 256 [ 233.387797][ T7412] loop2: detected capacity change from 0 to 512 [ 233.458158][ T7412] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1074: inode has both inline data and extents flags [ 233.474464][ T7412] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1074: couldn't read orphan inode 15 (err -117) [ 233.486716][ T4625] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.502915][ T7412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.625714][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 233.688905][ T4625] usb 5-1: Using ep0 maxpacket: 8 [ 233.696021][ T4625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.718712][ T4625] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.734779][ T4625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.753423][ T4625] usb 5-1: config 0 descriptor?? [ 233.942222][ T4280] EXT4-fs error: 51 callbacks suppressed [ 233.942239][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.968927][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.991375][ T4625] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 234.052522][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.072619][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.133245][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.153272][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.174639][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.180031][ T4625] usb 5-1: USB disconnect, device number 13 [ 234.242623][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.262740][ T4280] EXT4-fs warning: 23 callbacks suppressed [ 234.262756][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.280805][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.341216][ T4280] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.360999][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.373103][ T4280] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /180/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.393999][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.441645][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.490914][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.543062][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.593813][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.645180][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.712716][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.783375][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 234.834767][ T4280] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 236.464454][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 236.588214][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.656915][ T7421] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 236.685092][ T7421] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1076'. [ 236.828851][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.028624][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.125152][ T7430] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1082'. [ 237.195136][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.516152][ T7420] loop2: detected capacity change from 0 to 40427 [ 237.559228][ T7420] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 237.585161][ T7420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 237.621058][ T7420] F2FS-fs (loop2): invalid crc value [ 237.655242][ T7420] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 237.876174][ T7420] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 237.883458][ T7420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 237.887826][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.926713][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.937246][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.952617][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.960447][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.968560][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.044986][ T7420] syz.2.1078: attempt to access beyond end of device [ 238.044986][ T7420] loop2: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 238.080538][ T7420] syz.2.1078: attempt to access beyond end of device [ 238.080538][ T7420] loop2: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 238.162153][ T4281] syz-executor: attempt to access beyond end of device [ 238.162153][ T4281] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.558794][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 238.664033][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.673688][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.689392][ T7440] device bridge_slave_0 entered promiscuous mode [ 238.732668][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.740598][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.749291][ T7440] device bridge_slave_1 entered promiscuous mode [ 238.808578][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.849542][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.991655][ T7440] team0: Port device team_slave_0 added [ 239.027615][ T7440] team0: Port device team_slave_1 added [ 239.147837][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.155515][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.181795][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.231576][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.245740][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.278885][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.303778][ T9] device hsr_slave_0 left promiscuous mode [ 239.314583][ T9] device hsr_slave_1 left promiscuous mode [ 239.323646][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.331395][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.342512][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.353541][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.361911][ T9] device bridge_slave_1 left promiscuous mode [ 239.371612][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.384417][ T9] device bridge_slave_0 left promiscuous mode [ 239.390931][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.438445][ T9] device veth1_macvtap left promiscuous mode [ 239.445275][ T9] device veth0_macvtap left promiscuous mode [ 239.460056][ T9] device veth1_vlan left promiscuous mode [ 239.466284][ T9] device veth0_vlan left promiscuous mode [ 240.025756][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 240.293414][ T9] team0 (unregistering): Port device team_slave_1 removed [ 240.346851][ T9] team0 (unregistering): Port device team_slave_0 removed [ 240.399256][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.458039][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.841461][ T9] bond0 (unregistering): Released all slaves [ 241.012636][ T7440] device hsr_slave_0 entered promiscuous mode [ 241.027326][ T7440] device hsr_slave_1 entered promiscuous mode [ 241.033977][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.041819][ T7440] Cannot create hsr debugfs directory [ 241.343202][ T7440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.355925][ T7440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.374886][ T7440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.399497][ T7440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.545254][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.577441][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.594005][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.605899][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.631816][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.646185][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.655294][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.662933][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.682365][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.696005][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.714126][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.733585][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.740911][ T6300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.758175][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.787394][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.805790][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.824928][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.834408][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.852132][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.865563][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.888392][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.917206][ T7440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.930213][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.948189][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.096758][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 242.321928][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.331235][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.354074][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.839003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.848097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.875570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.883985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.896014][ T7440] device veth0_vlan entered promiscuous mode [ 242.905100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.913069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.925459][ T7440] device veth1_vlan entered promiscuous mode [ 242.957303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.966839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.981017][ T7440] device veth0_macvtap entered promiscuous mode [ 242.998247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.014883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.026708][ T7440] device veth1_macvtap entered promiscuous mode [ 243.044762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.054262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.066974][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.078469][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.088974][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.100509][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.110838][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.121630][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.132414][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.143145][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.154888][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.169002][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.183503][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.199072][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.209736][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.220163][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.231547][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.241692][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.252857][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.263025][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.277951][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.289469][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.303768][ T7440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.312850][ T7440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.325670][ T7440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.344002][ T7440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.355163][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.376310][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.503350][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.518396][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.532394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.569361][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.577672][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.586869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.176520][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 244.722009][ T7546] loop2: detected capacity change from 0 to 32768 [ 244.803773][ T7546] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 244.848796][ T7546] (syz.2.1086,7546,0):ocfs2_double_lock:1188 ERROR: status = -2 [ 245.054324][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 245.556628][ T7560] nr0: tun_chr_ioctl cmd 1074025677 [ 245.562337][ T7560] nr0: linktype set to 774 [ 245.735481][ T7572] loop4: detected capacity change from 0 to 64 [ 245.979018][ T4275] hfs: request for non-existent node 131072 in B*Tree [ 246.256484][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 246.261960][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 246.448461][ T7588] loop5: detected capacity change from 0 to 2048 [ 246.606281][ T7588] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 246.654977][ T7597] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 246.662240][ T7588] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.979341][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 246.981280][ T7607] syz.2.1114[7607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.985322][ T7607] syz.2.1114[7607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.240951][ T7573] loop0: detected capacity change from 0 to 40427 [ 247.347863][ T7573] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 247.355986][ T7573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 247.402813][ T7573] F2FS-fs (loop0): invalid crc value [ 247.466659][ T4322] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 247.501488][ T7573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 247.631177][ T7628] loop2: detected capacity change from 0 to 128 [ 247.672416][ T7628] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 247.686522][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 247.693426][ T4322] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 247.716878][ T7573] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 247.723998][ T7573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.728575][ T4322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.756631][ T7628] hpfs: filesystem error: improperly stopped [ 247.779455][ T7628] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 247.801125][ T4322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.814052][ T7625] loop1: detected capacity change from 0 to 4096 [ 247.821265][ T7628] hpfs: You really don't want any checks? You are crazy... [ 247.831329][ T4322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.849394][ T7628] hpfs: hpfs_map_sector(): read error [ 247.858199][ T4322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.877603][ T7628] hpfs: code page support is disabled [ 247.883888][ T7628] hpfs: hpfs_map_4sectors(): unaligned read [ 247.909533][ T7625] ntfs: volume version 3.1. [ 247.920320][ T4322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.927154][ T7573] syz.0.1102: attempt to access beyond end of device [ 247.927154][ T7573] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.931317][ T7628] hpfs: hpfs_map_4sectors(): unaligned read [ 247.950727][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.007987][ T7573] syz.0.1102: attempt to access beyond end of device [ 248.007987][ T7573] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 248.033181][ T7628] hpfs: filesystem error: unable to find root dir [ 248.043005][ T7625] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 248.144579][ T7625] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 248.156468][ T4324] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 248.221665][ T4322] usb 5-1: GET_CAPABILITIES returned 0 [ 248.227997][ T4322] usbtmc 5-1:16.0: can't read capabilities [ 248.358670][ T4324] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 248.373295][ T4324] usb 6-1: config 127 has no interface number 0 [ 248.390427][ T4324] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 248.420846][ T4324] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 248.466409][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.474549][ T4324] usb 6-1: Product: syz [ 248.500260][ T4324] usb 6-1: Manufacturer: syz [ 248.504941][ T4324] usb 6-1: SerialNumber: syz [ 248.543530][ T7629] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 248.556496][ T4322] usb 5-1: USB disconnect, device number 14 [ 249.010350][ T7629] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 249.126444][ T4322] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 249.233055][ T7647] loop4: detected capacity change from 0 to 512 [ 249.236484][ T4324] asix 6-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 249.329949][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 249.342777][ T7647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.367433][ T4322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.395727][ T7647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 249.398556][ T4322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.413405][ T7647] System zones: 1-2, 4-12, 8-8 [ 249.438070][ T4324] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 249.461599][ T4324] asix 6-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 249.487450][ T7647] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1126: iget: bad i_size value: 38620345925642 [ 249.541044][ T4322] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 249.566621][ T7647] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1126: couldn't read orphan inode 15 (err -117) [ 249.578879][ T4324] asix: probe of 6-1:127.57 failed with error -71 [ 249.597017][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.616975][ T7634] loop2: detected capacity change from 0 to 32768 [ 249.618631][ T4324] usb 6-1: USB disconnect, device number 2 [ 249.663276][ T7647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 249.682830][ T4322] usb 2-1: SerialNumber: syz [ 249.723042][ T4322] usb 2-1: 0:2 : does not exist [ 249.748320][ T7634] XFS (loop2): Mounting V5 Filesystem [ 249.772106][ T7647] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1126: bg 0: block 5: invalid block bitmap [ 249.890045][ T7647] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28 [ 249.914351][ T7634] XFS (loop2): Ending clean mount [ 250.068356][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 250.300302][ T4281] XFS (loop2): Unmounting Filesystem [ 250.431843][ T7650] loop0: detected capacity change from 0 to 40427 [ 250.514442][ T7650] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 250.536486][ T4322] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 250.566504][ T7650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 250.633889][ T4322] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 250.654100][ T7650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.695343][ T4322] usb 2-1: USB disconnect, device number 14 [ 250.872788][ T7650] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 250.891604][ T7650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 250.973991][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.388970][ T26] audit: type=1800 audit(1782306353.147:21): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1127" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 251.475597][ T7690] netlink: 'syz.4.1133': attribute type 10 has an invalid length. [ 251.567040][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.651226][ T7690] device bridge_slave_1 left promiscuous mode [ 251.666722][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.685602][ T7690] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 251.972934][ T7706] loop2: detected capacity change from 0 to 128 [ 252.043205][ T7675] loop5: detected capacity change from 0 to 40427 [ 252.093993][ T7675] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 252.133317][ T7675] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 252.162557][ T7675] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 252.206667][ T7675] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 252.249964][ T7675] F2FS-fs (loop5): invalid crc value [ 252.301236][ T7675] F2FS-fs (loop5): Found nat_bits in checkpoint [ 252.332557][ T7716] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1140'. [ 252.476913][ T6300] kworker/u4:8: attempt to access beyond end of device [ 252.476913][ T6300] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 252.495193][ T7675] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 252.549910][ T7675] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 252.975205][ T7731] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.993453][ T7440] syz-executor: attempt to access beyond end of device [ 252.993453][ T7440] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.017298][ T7730] delete_channel: no stack [ 253.408533][ T7739] loop0: detected capacity change from 0 to 8 [ 254.358206][ T7764] loop0: detected capacity change from 0 to 128 [ 254.392655][ T7764] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 254.532313][ T7764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.079729][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 255.701645][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.708058][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.735743][ T7811] loop5: detected capacity change from 0 to 128 [ 255.990497][ T4322] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 256.024240][ T4300] kworker/u4:5: attempt to access beyond end of device [ 256.024240][ T4300] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 256.186647][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 256.194157][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 256.232604][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1178'. [ 256.236425][ T4322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 256.244521][ T7825] netlink: 'syz.5.1177': attribute type 11 has an invalid length. [ 256.293941][ T4322] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 256.312814][ T7825] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1177'. [ 256.317694][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.371471][ T4322] usb 5-1: config 0 descriptor?? [ 256.479112][ T7830] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 256.724669][ T7836] loop1: detected capacity change from 0 to 256 [ 256.795650][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.823326][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.853892][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.896819][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.906813][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.926952][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.954369][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 256.984809][ T4322] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 257.058865][ T4322] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 257.279586][ T7846] netem: change failed [ 257.319100][ T4322] lenovo 0003:17EF:6047.000C: Failed to switch middle button: -71 [ 257.350367][ T4322] lenovo 0003:17EF:6047.000C: Fn-lock setting failed: -71 [ 257.371495][ T4322] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 257.418696][ T4322] usb 5-1: USB disconnect, device number 15 [ 257.464537][ T7848] loop0: detected capacity change from 0 to 512 [ 257.638993][ T7848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 257.769917][ T7848] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.894144][ T7851] fido_id[7851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 258.101378][ T7844] loop5: detected capacity change from 0 to 40427 [ 258.145003][ T7844] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 258.166621][ T7844] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 258.182421][ T7844] F2FS-fs (loop5): invalid crc value [ 258.254652][ T7844] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 258.469828][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 258.522782][ T7844] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 258.555972][ T7844] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 258.669596][ T7875] loop2: detected capacity change from 0 to 512 [ 258.739999][ T7875] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 258.770422][ T7844] syz.5.1185: attempt to access beyond end of device [ 258.770422][ T7844] loop5: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 258.812012][ T7875] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 258.838330][ T7844] syz.5.1185: attempt to access beyond end of device [ 258.838330][ T7844] loop5: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 259.007871][ T7879] loop0: detected capacity change from 0 to 1024 [ 259.070885][ T7440] syz-executor: attempt to access beyond end of device [ 259.070885][ T7440] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.196676][ T7884] loop2: detected capacity change from 0 to 128 [ 259.233858][ T7884] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 259.306468][ T7884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.395648][ T26] audit: type=1800 audit(1782306361.147:22): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1195" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 259.799661][ T7895] loop4: detected capacity change from 0 to 256 [ 259.878843][ T7895] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 260.666685][ T7917] futex_wake_op: syz.2.1208 tries to shift op by -1; fix this program [ 260.930391][ T7920] loop2: detected capacity change from 0 to 128 [ 261.026149][ T7920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 261.053005][ T7920] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.178454][ T7920] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop2' because it doesn't have stable inode numbers [ 261.364665][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 261.525003][ T4339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.550879][ T7926] loop1: detected capacity change from 0 to 256 [ 261.603192][ T7926] exfat: Deprecated parameter 'namecase' [ 261.654094][ T7926] exfat: Deprecated parameter 'namecase' [ 261.714465][ T7912] loop5: detected capacity change from 0 to 40427 [ 261.770229][ T7912] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 261.793180][ T7926] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 261.832161][ T7912] F2FS-fs (loop5): invalid crc value [ 261.877940][ T7912] F2FS-fs (loop5): Found nat_bits in checkpoint [ 261.918533][ T4339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.108565][ T7912] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 262.119155][ T4339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.376204][ T4339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.623951][ T7440] syz-executor: attempt to access beyond end of device [ 262.623951][ T7440] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.900594][ T7899] loop0: detected capacity change from 0 to 40427 [ 263.026900][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.038442][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.047524][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.067272][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.075970][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.083862][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.488064][ T7948] Bluetooth: MGMT ver 1.22 [ 263.913973][ T7952] loop0: detected capacity change from 0 to 4096 [ 264.274658][ T7952] ntfs: volume version 3.1. [ 264.331058][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 264.363584][ T7973] loop5: detected capacity change from 0 to 256 [ 264.399776][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 264.415479][ T7973] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 264.504259][ T7952] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 264.548037][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 264.555661][ T14] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.555863][ T7973] exFAT-fs (loop5): hint_cluster is invalid (17) [ 264.617163][ T14] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.652102][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.676070][ T14] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 264.681047][ T7952] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 264.706544][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.752655][ T14] usb 3-1: config 0 descriptor?? [ 264.916541][ T5270] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 265.107567][ T5270] usb 2-1: Using ep0 maxpacket: 8 [ 265.127275][ T5270] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 265.136664][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 265.167408][ T5270] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 265.196039][ T14] smartjoyplus 0003:6666:8804.000D: unknown main item tag 0x1 [ 265.234459][ T14] smartjoyplus 0003:6666:8804.000D: unknown main item tag 0x6 [ 265.246525][ T5270] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.276457][ T14] smartjoyplus 0003:6666:8804.000D: item fetching failed at offset 4/5 [ 265.284917][ T5270] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 265.305776][ T14] smartjoyplus 0003:6666:8804.000D: parse failed [ 265.312525][ T14] smartjoyplus: probe of 0003:6666:8804.000D failed with error -22 [ 265.333557][ T5270] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 265.378513][ T5270] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.430150][ T5270] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.441828][ T4625] usb 3-1: USB disconnect, device number 11 [ 265.463957][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.517457][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.549940][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.580365][ T7943] device bridge_slave_0 entered promiscuous mode [ 265.622457][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.656519][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.675281][ T7943] device bridge_slave_1 entered promiscuous mode [ 265.730482][ T5270] usb 2-1: GET_CAPABILITIES returned 0 [ 265.736089][ T5270] usbtmc 2-1:16.0: can't read capabilities [ 265.809437][ T7993] loop5: detected capacity change from 0 to 256 [ 265.894282][ T7993] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 266.008281][ T32] usb 2-1: USB disconnect, device number 15 [ 266.168926][ T7997] __sock_release: fasync list not empty! [ 266.364184][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.381190][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.474045][ T7943] team0: Port device team_slave_0 added [ 266.613221][ T126] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 266.638217][ T126] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 266.710289][ T126] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.04 Device [syz0] on syz1 [ 266.747486][ T8009] vcan0: tx drop: invalid da for name 0x00000000000000a4 [ 266.832603][ T7943] team0: Port device team_slave_1 added [ 266.973696][ T4339] device hsr_slave_0 left promiscuous mode [ 267.058360][ T4339] device hsr_slave_1 left promiscuous mode [ 267.071864][ T8017] program syz.5.1243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.093301][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.112591][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.167128][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.174176][ T8012] fido_id[8012]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.175220][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.226466][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 267.269214][ T4339] batman_adv: batadv0: Interface deactivated: macvtap1 [ 267.276189][ T4339] batman_adv: batadv0: Removing interface: macvtap1 [ 267.350110][ T4339] device bridge_slave_0 left promiscuous mode [ 267.376912][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.979625][ T8033] loop5: detected capacity change from 0 to 4096 [ 268.036227][ T8033] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 268.305978][ T26] audit: type=1800 audit(1782306370.057:23): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1248" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 268.516643][ T5270] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 268.557255][ T8053] netlink: 'syz.2.1254': attribute type 11 has an invalid length. [ 268.579636][ T4339] device batadv_slave_0 left promiscuous mode [ 268.626239][ T4339] device veth1_macvtap left promiscuous mode [ 268.645748][ T4339] device veth0_macvtap left promiscuous mode [ 268.656231][ T4339] device veth1_vlan left promiscuous mode [ 268.668751][ T4339] device veth0_vlan left promiscuous mode [ 268.706441][ T5270] usb 1-1: Using ep0 maxpacket: 16 [ 268.713775][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.750953][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.786668][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.826938][ T5270] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.853066][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.893101][ T5270] usb 1-1: config 0 descriptor?? [ 269.296547][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 269.368297][ T5270] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input19 [ 269.384722][ T5270] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 269.639513][ T4625] usb 1-1: USB disconnect, device number 11 [ 269.928798][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 269.987806][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 270.045538][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.109092][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.196624][ T4339] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 270.723112][ T4339] bond0 (unregistering): Released all slaves [ 271.008517][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.015551][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.183608][ T7943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.288317][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.295339][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.318618][ T8084] program syz.1.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.376745][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 271.454564][ T7943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.678322][ T7943] device hsr_slave_0 entered promiscuous mode [ 271.728919][ T7943] device hsr_slave_1 entered promiscuous mode [ 272.155007][ T8102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1272'. [ 272.337052][ T4326] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 272.500569][ T7943] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.546615][ T4326] usb 6-1: Using ep0 maxpacket: 16 [ 272.553860][ T4326] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 272.584301][ T7943] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 272.586416][ T4326] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 272.634052][ T7943] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 272.656914][ T4326] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 272.706028][ T7943] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 272.706377][ T4326] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.767977][ T4326] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 272.806592][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.835563][ T4326] usb 6-1: Product: syz [ 272.859802][ T4326] usb 6-1: Manufacturer: syz [ 272.864499][ T4326] usb 6-1: SerialNumber: syz [ 272.927476][ T4326] usb 6-1: config 0 descriptor?? [ 273.035411][ T8090] loop0: detected capacity change from 0 to 32768 [ 273.162132][ T4326] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 273.199864][ T3624] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.230691][ T8090] XFS (loop0): Mounting V5 Filesystem [ 273.259059][ T3624] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.338786][ T3624] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.393619][ T3624] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.436524][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.464966][ T8090] XFS (loop0): Ending clean mount [ 273.505325][ T4393] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.528697][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.557603][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.583874][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.591175][ T3624] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.619404][ T8099] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.689661][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.733614][ T3624] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.749543][ T4326] usb 6-1: USB disconnect, device number 3 [ 273.754021][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.787190][ T4282] XFS (loop0): Unmounting Filesystem [ 273.803476][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.810743][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.887140][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.906315][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.945504][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.975402][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.982630][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.032830][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.075384][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.093875][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.113833][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.146033][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.155229][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.188890][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.229940][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.255169][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.271860][ T7943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.284213][ T7943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.299054][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.318183][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.519702][ T26] audit: type=1400 audit(1782306376.277:24): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A202020202020202034303936206B420A4B65726E656C5061676553697A653A202020202020202034206B420A4D4D555061676553697A653A202020202020202020202034206B420A5273733A2020202020202020202020202020202020203634206B420A5073733A2020202020202020202020202020202020203332206B420A5073735F44697274793A2020202020202020202020203332206B420A5368617265645F436C65616E3A2020202020202020202030206B420A5368617265645F44697274793A2020202020202020203634206B420A507269766174655F436C65616E3A20202020202020202030206B pid=8131 comm="syz.5.1278" [ 274.649915][ T8128] loop1: detected capacity change from 0 to 4096 [ 274.979351][ T26] audit: type=1800 audit(1782306376.737:25): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1277" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 275.136088][ T8148] device batadv_slave_1 entered promiscuous mode [ 275.185903][ T8147] device batadv_slave_1 left promiscuous mode [ 275.267458][ T8122] loop2: detected capacity change from 0 to 40427 [ 275.317241][ T8122] F2FS-fs (loop2): invalid crc value [ 275.374592][ T8122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.424262][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.451160][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.493723][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.599553][ T8160] loop1: detected capacity change from 0 to 128 [ 275.675159][ T8160] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 275.711905][ T8122] F2FS-fs (loop2): Start checkpoint disabled! [ 275.775831][ T8122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 275.939407][ T8167] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 276.029753][ T8122] F2FS-fs (loop2): Skipping Checkpoint. Checkpoints currently disabled. [ 276.080270][ T8172] loop0: detected capacity change from 0 to 1024 [ 276.454882][ T8179] program syz.1.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.524810][ T8182] loop0: detected capacity change from 0 to 256 [ 276.896292][ T8190] IPv6: Can't replace route, no match found [ 277.147174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.181006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.242677][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.254435][ T8201] loop2: detected capacity change from 0 to 2048 [ 277.268077][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.310057][ T7943] device veth0_vlan entered promiscuous mode [ 277.322328][ T8201] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 277.337734][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.346693][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.380938][ T7943] device veth1_vlan entered promiscuous mode [ 277.393447][ T8201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.483314][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.516144][ T8207] loop0: detected capacity change from 0 to 128 [ 277.524591][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.564996][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.584140][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.640473][ T7943] device veth0_macvtap entered promiscuous mode [ 277.681964][ T7943] device veth1_macvtap entered promiscuous mode [ 277.784078][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.845828][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.884394][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.932184][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.975155][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.017209][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.024808][ T8189] loop5: detected capacity change from 0 to 32768 [ 278.034578][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.060850][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.084074][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.101693][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.114703][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.126469][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.140715][ T8189] XFS (loop5): Mounting V5 Filesystem [ 278.154563][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.196158][ T8189] XFS (loop5): Ending clean mount [ 278.214217][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.241190][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.273157][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.304084][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.330483][ T7440] XFS (loop5): Unmounting Filesystem [ 278.338406][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.354481][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1301'. [ 278.360729][ T7943] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.386683][ T7943] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.451770][ T7943] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.489433][ T7943] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.543907][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.560030][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.569115][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.602995][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.622175][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.633331][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.944478][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.976518][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.990629][ T8244] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1307'. [ 279.030706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.081029][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.113885][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.157952][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.191641][ T8249] netlink: 'syz.1.1308': attribute type 3 has an invalid length. [ 279.307942][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 279.813779][ T8265] loop2: detected capacity change from 0 to 4096 [ 280.226488][ T4625] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 280.320293][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 280.396423][ T4281] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 280.445015][ T4625] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.484913][ T4625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.517301][ T4625] usb 6-1: config 0 descriptor?? [ 280.547605][ T4625] cp210x 6-1:0.0: cp210x converter detected [ 280.715740][ T8286] loop2: detected capacity change from 0 to 1024 [ 280.864193][ T8261] loop1: detected capacity change from 0 to 32768 [ 280.934863][ T4625] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 280.974285][ T59] hfsplus: b-tree write err: -5, ino 25 [ 280.982193][ T8261] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 280.991228][ T59] hfsplus: b-tree write err: -5, ino 4 [ 280.997392][ T4625] usb 6-1: cp210x converter now attached to ttyUSB0 [ 280.997955][ T59] hfsplus: b-tree write err: -5, ino 2 [ 281.010748][ T59] hfsplus: b-tree write err: -5, ino 20 [ 281.111174][ T8261] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 281.184193][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1323'. [ 281.188000][ T14] usb 6-1: USB disconnect, device number 4 [ 281.205276][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1323'. [ 281.251834][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 281.356025][ T14] cp210x 6-1:0.0: device disconnected [ 281.442518][ T8261] XFS (loop1): ro->rw transition prohibited on norecovery mount [ 281.576535][ T4273] XFS (loop1): Unmounting Filesystem [ 281.793240][ T8297] loop0: detected capacity change from 0 to 32768 [ 281.988702][ T8297] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 282.371104][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 282.414417][ T8331] loop5: detected capacity change from 0 to 64 [ 282.555731][ T8331] hfs: bad catalog entry type 0 [ 282.772170][ T8332] loop6: detected capacity change from 0 to 4096 [ 282.887516][ T8332] EXT4-fs (loop6): Test dummy encryption mode enabled [ 282.987608][ T8332] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 283.029440][ T8332] overlayfs: failed to resolve './bus': -2 [ 283.339695][ T7943] EXT4-fs (loop6): unmounting filesystem. [ 283.393365][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'. [ 283.533815][ T8363] program syz.6.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.836443][ T5270] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.026460][ T5270] usb 2-1: Using ep0 maxpacket: 32 [ 284.039211][ T5270] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.056381][ T5270] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 284.066170][ T5270] usb 2-1: config 0 interface 0 has no altsetting 0 [ 284.089273][ T5270] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 284.106397][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.114722][ T5270] usb 2-1: Product: syz [ 284.136426][ T5270] usb 2-1: Manufacturer: syz [ 284.141114][ T5270] usb 2-1: SerialNumber: syz [ 284.149480][ T5270] usb 2-1: config 0 descriptor?? [ 284.190564][ T8360] device bond0 entered promiscuous mode [ 284.224548][ T8360] device bond_slave_0 entered promiscuous mode [ 284.267206][ T8360] device bond_slave_1 entered promiscuous mode [ 284.289355][ T8360] device batadv0 entered promiscuous mode [ 284.307498][ T8360] device hsr1 entered promiscuous mode [ 284.321327][ T8360] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 284.329433][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 284.605507][ T5270] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 284.886528][ T4322] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 284.949048][ T8393] loop0: detected capacity change from 0 to 1024 [ 285.041661][ T5270] usb 2-1: USB disconnect, device number 16 [ 285.081617][ T4322] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 285.106921][ T4322] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.140367][ T6300] hfsplus: b-tree write err: -5, ino 25 [ 285.146186][ T6300] hfsplus: b-tree write err: -5, ino 4 [ 285.149510][ T4322] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.179973][ T6300] hfsplus: b-tree write err: -5, ino 2 [ 285.202074][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 285.232603][ T4322] usb 3-1: Product: syz [ 285.262957][ T4322] usb 3-1: Manufacturer: syz [ 285.277976][ T4322] usb 3-1: SerialNumber: syz [ 285.319238][ T4322] usb 3-1: config 0 descriptor?? [ 285.358103][ T4322] usb 3-1: selecting invalid altsetting 0 [ 285.657766][ T4322] usb 3-1: USB disconnect, device number 12 [ 285.977638][ T8421] loop5: detected capacity change from 0 to 16 [ 285.984787][ T8421] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 286.683856][ T8432] loop6: detected capacity change from 0 to 4096 [ 287.003326][ T8415] loop1: detected capacity change from 0 to 32768 [ 287.055979][ T8415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1362 (8415) [ 287.182691][ T8415] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.222888][ T8415] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 287.289832][ T8415] BTRFS info (device loop1): turning on sync discard [ 287.333476][ T8415] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 287.360618][ T7943] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 287.394595][ T8415] BTRFS info (device loop1): use zstd compression, level 3 [ 287.404526][ T7943] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 287.435398][ T8415] BTRFS info (device loop1): turning on async discard [ 287.458687][ T8415] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 287.519293][ T8415] BTRFS info (device loop1): trying to use backup root at mount time [ 287.549852][ T8415] BTRFS info (device loop1): enabling auto defrag [ 287.570935][ T8415] BTRFS info (device loop1): using free space tree [ 287.856270][ T4339] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 287.912927][ T8482] loop2: detected capacity change from 0 to 8 [ 287.928688][ T8482] SQUASHFS error: Failed to read block 0x260685: -5 [ 287.976988][ T8415] BTRFS error (device loop1): failed to load root extent [ 287.984125][ T8415] BTRFS warning (device loop1): try to load backup roots slot 1 [ 288.006444][ T8482] SQUASHFS error: Unable to read metadata cache entry [260685] [ 288.014101][ T8482] SQUASHFS error: Unable to read directory block [260685:0] [ 288.042530][ T8443] loop5: detected capacity change from 0 to 32768 [ 288.061293][ T4339] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 288.151160][ T8415] BTRFS warning (device loop1): couldn't read tree root [ 288.158813][ T8415] BTRFS warning (device loop1): try to load backup roots slot 2 [ 288.170578][ T8415] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 288.183327][ T8443] XFS (loop5): Mounting V5 Filesystem [ 288.189901][ T8415] BTRFS warning (device loop1): couldn't read tree root [ 288.197270][ T8415] BTRFS warning (device loop1): try to load backup roots slot 3 [ 288.227244][ T8415] BTRFS info (device loop1): rebuilding free space tree [ 288.351434][ T8415] BTRFS info (device loop1): checking UUID tree [ 288.432779][ T8443] XFS (loop5): Ending clean mount [ 288.473074][ T8443] XFS (loop5): Quotacheck needed: Please wait. [ 288.496579][ T126] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 288.630301][ T8443] XFS (loop5): Quotacheck: Done. [ 288.707907][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 288.731804][ T126] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.777117][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.796409][ T126] usb 7-1: Product: syz [ 288.800646][ T126] usb 7-1: Manufacturer: syz [ 288.805274][ T126] usb 7-1: SerialNumber: syz [ 288.909145][ T126] r8152-cfgselector 7-1: config 0 descriptor?? [ 288.971981][ T7440] XFS (loop5): Unmounting Filesystem [ 289.161537][ T126] r8152-cfgselector 7-1: Needed 2 retries to read version [ 289.374929][ T126] r8152-cfgselector 7-1: Unknown version 0x0000 [ 289.391566][ T4273] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.410938][ T126] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 290.248196][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 290.336442][ T4624] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 290.588503][ T4624] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 290.622127][ T4624] usb 3-1: config 0 has no interface number 0 [ 290.637147][ T4624] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.687380][ T4624] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 290.720412][ T4624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.763802][ T4624] usb 3-1: Product: syz [ 290.776636][ T4624] usb 3-1: Manufacturer: syz [ 290.786008][ T4624] usb 3-1: SerialNumber: syz [ 290.811355][ T4624] usb 3-1: config 0 descriptor?? [ 290.851849][ T8561] loop1: detected capacity change from 0 to 256 [ 290.866298][ T4624] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 290.895272][ T8561] exfat: Deprecated parameter 'utf8' [ 290.923204][ T8561] exfat: Deprecated parameter 'namecase' [ 290.940778][ T8561] exfat: Deprecated parameter 'namecase' [ 290.984172][ T8561] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 291.026575][ T4324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 291.119594][ T4633] usb 3-1: USB disconnect, device number 13 [ 291.129590][ T4633] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 291.226524][ T4324] usb 7-1: Using ep0 maxpacket: 32 [ 291.233615][ T4324] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.283082][ T4324] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.338597][ T4324] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.369141][ T4324] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 291.398132][ T4324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.421780][ T4324] usb 7-1: Product: syz [ 291.426111][ T4324] usb 7-1: Manufacturer: syz [ 291.462231][ T4324] usb 7-1: SerialNumber: syz [ 291.497394][ T4324] usb 7-1: config 0 descriptor?? [ 291.926076][ T4324] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 292.056435][ T4624] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.256855][ T4624] usb 1-1: Using ep0 maxpacket: 16 [ 292.265435][ T4624] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.315418][ T4624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.342135][ T4624] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 292.366964][ T4322] usb 7-1: USB disconnect, device number 3 [ 292.381087][ T4624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.420471][ T4624] usb 1-1: config 0 descriptor?? [ 292.455144][ T8604] loop5: detected capacity change from 0 to 512 [ 292.523157][ T8604] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 292.606456][ T8604] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1420: inode #15: comm syz.5.1420: iget: illegal inode # [ 292.663182][ T8604] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1420: couldn't read orphan inode 15 (err -117) [ 292.747798][ T8604] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 292.847832][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 292.850657][ T4624] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 293.036788][ T8615] loop2: detected capacity change from 0 to 4096 [ 293.088774][ T8620] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1423'. [ 293.133819][ T8615] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 293.321346][ T4633] usb 1-1: USB disconnect, device number 12 [ 293.414780][ T8618] fido_id[8618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 293.430828][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 293.505493][ T8629] loop5: detected capacity change from 0 to 512 [ 293.548720][ T8629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 293.624714][ T8629] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 293.636715][ T8629] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.086562][ T4633] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 294.286533][ T4633] usb 3-1: Using ep0 maxpacket: 8 [ 294.294405][ T4633] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 294.315692][ T4633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.356273][ T26] audit: type=1800 audit(1782306396.107:26): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1426" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 294.402434][ T4633] pvrusb2: Hardware description: Terratec Grabster AV400 [ 294.415323][ T8643] loop1: detected capacity change from 0 to 8192 [ 294.428494][ T4633] pvrusb2: ********** [ 294.436812][ T4633] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 294.480665][ T4633] pvrusb2: Important functionality might not be entirely working. [ 294.487906][ T8643] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.513239][ T4633] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 294.544021][ T4633] pvrusb2: ********** [ 294.612075][ T2311] pvrusb2: Invalid write control endpoint [ 294.616863][ T8655] loop6: detected capacity change from 0 to 512 [ 294.678999][ T8655] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 294.736869][ T8655] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1434: inode #15: comm syz.6.1434: iget: illegal inode # [ 294.753353][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 294.790562][ T8655] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1434: couldn't read orphan inode 15 (err -117) [ 294.872583][ T8655] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 294.917108][ T8636] pvrusb2: Invalid write control endpoint [ 294.974415][ T4633] usb 3-1: USB disconnect, device number 14 [ 295.057813][ T8664] loop5: detected capacity change from 0 to 512 [ 295.090674][ T8664] EXT4-fs: Ignoring removed i_version option [ 295.113026][ T2311] pvrusb2: Invalid write control endpoint [ 295.142727][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 295.162509][ T8664] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 295.174553][ T7943] EXT4-fs (loop6): unmounting filesystem. [ 295.211639][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 295.292989][ T8664] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1444: invalid indirect mapped block 32768 (level 2) [ 295.314481][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 295.376246][ T8664] EXT4-fs (loop5): 1 orphan inode deleted [ 295.382474][ T8664] EXT4-fs (loop5): 1 truncate cleaned up [ 295.388657][ T8664] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 295.406405][ T2311] pvrusb2: Device being rendered inoperable [ 295.420802][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 295.436812][ T8664] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.1444: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 295.468318][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 295.527084][ T2311] pvrusb2: Attached sub-driver cx25840 [ 295.553673][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 295.595059][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 295.686793][ T5270] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 295.705904][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 295.896507][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 295.918759][ T5270] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.960019][ T5270] usb 1-1: config 0 has no interface number 0 [ 295.966192][ T5270] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.001510][ T8685] loop1: detected capacity change from 0 to 256 [ 296.026458][ T5270] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.063405][ T8685] exfat: Deprecated parameter 'namecase' [ 296.095829][ T5270] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 296.126714][ T8685] exfat: Deprecated parameter 'namecase' [ 296.146489][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.164117][ T5270] usb 1-1: config 0 descriptor?? [ 296.222950][ T8685] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 296.294342][ T8688] loop2: detected capacity change from 0 to 4096 [ 296.317911][ T8688] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 296.749051][ T8671] loop6: detected capacity change from 0 to 32768 [ 296.789571][ T8671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1437 (8671) [ 296.802150][ T5270] uclogic 0003:28BD:0094.0011: failed retrieving string descriptor #100: -71 [ 296.816813][ T5270] uclogic 0003:28BD:0094.0011: failed retrieving pen parameters: -71 [ 296.825050][ T5270] uclogic 0003:28BD:0094.0011: pen probing failed: -71 [ 296.870052][ T5270] uclogic 0003:28BD:0094.0011: failed probing parameters: -71 [ 296.896658][ T5270] uclogic: probe of 0003:28BD:0094.0011 failed with error -71 [ 296.941831][ T5270] usb 1-1: USB disconnect, device number 13 [ 296.977329][ T8700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1447'. [ 296.992718][ T8671] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.018553][ T8671] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 297.069109][ T8671] BTRFS info (device loop6): turning on sync discard [ 297.107048][ T8671] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 297.143349][ T8671] BTRFS info (device loop6): use zstd compression, level 3 [ 297.207085][ T8671] BTRFS info (device loop6): turning on async discard [ 297.214041][ T8671] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 297.298351][ T8671] BTRFS info (device loop6): trying to use backup root at mount time [ 297.337754][ T8671] BTRFS info (device loop6): enabling auto defrag [ 297.364769][ T8671] BTRFS info (device loop6): using free space tree [ 297.705280][ T59] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 297.768159][ T8671] BTRFS error (device loop6): failed to load root extent [ 297.775301][ T8671] BTRFS warning (device loop6): try to load backup roots slot 1 [ 297.788395][ T41] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 297.865147][ T8671] BTRFS warning (device loop6): couldn't read tree root [ 297.874127][ T8671] BTRFS warning (device loop6): try to load backup roots slot 2 [ 297.893902][ T8671] BTRFS error (device loop6): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 297.950754][ T8671] BTRFS warning (device loop6): couldn't read tree root [ 297.973768][ T8671] BTRFS warning (device loop6): try to load backup roots slot 3 [ 298.024907][ T8671] BTRFS info (device loop6): rebuilding free space tree [ 298.060123][ T8671] BTRFS info (device loop6): checking UUID tree [ 298.309879][ T8758] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 298.309879][ T8758] The task syz.0.1460 (8758) triggered the difference, watch for misbehavior. [ 298.572055][ T7943] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.720093][ T4361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (4361) [ 299.079337][ T8777] input: syz1 as /devices/virtual/input/input21 [ 299.221724][ T8779] loop0: detected capacity change from 0 to 256 [ 299.288585][ T8779] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.364988][ T8779] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 299.474967][ T8779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 299.705990][ T8791] loop2: detected capacity change from 0 to 1024 [ 299.862873][ C0] operation not supported error, dev loop2, sector 32 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 300.375084][ T8801] loop6: detected capacity change from 0 to 4096 [ 300.438192][ T8801] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 301.209999][ T8797] loop0: detected capacity change from 0 to 32768 [ 301.267055][ T8797] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 301.355772][ T8823] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1483'. [ 301.486607][ T4634] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 301.651774][ T4544] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 301.658376][ T8827] loop6: detected capacity change from 0 to 8 [ 301.686540][ T4634] usb 6-1: Using ep0 maxpacket: 32 [ 301.692774][ T8811] loop1: detected capacity change from 0 to 32768 [ 301.693862][ T4634] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.749741][ T4634] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 301.780783][ T4634] usb 6-1: config 0 interface 0 has no altsetting 0 [ 301.792073][ T4634] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 301.803496][ T4634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.824871][ T4634] usb 6-1: Product: syz [ 301.832388][ T4634] usb 6-1: Manufacturer: syz [ 301.846084][ T4634] usb 6-1: SerialNumber: syz [ 301.855309][ T4634] usb 6-1: config 0 descriptor?? [ 301.938727][ T8811] XFS (loop1): Mounting V5 Filesystem [ 302.079490][ T8811] XFS (loop1): Ending clean mount [ 302.299892][ T4273] XFS (loop1): Unmounting Filesystem [ 302.348132][ T4634] gs_usb 6-1:0.0: Configuring for 158 interfaces [ 302.750145][ T4634] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 302.784216][ T4634] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 302.831653][ T4634] gs_usb: probe of 6-1:0.0 failed with error -71 [ 302.923696][ T4634] usb 6-1: USB disconnect, device number 5 [ 302.981045][ T8854] loop0: detected capacity change from 0 to 32768 [ 303.055019][ T8854] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 303.077156][ T8854] JBD2: Ignoring recovery information on journal [ 303.139625][ T8854] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 303.225074][ T8854] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 303.242542][ T8854] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 303.252613][ T8854] OCFS2: File system is now read-only. [ 303.258201][ T8854] (syz.0.1490,8854,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 303.267172][ T8854] (syz.0.1490,8854,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 303.275123][ T8854] (syz.0.1490,8854,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 303.283695][ T8854] (syz.0.1490,8854,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 303.292362][ T8854] (syz.0.1490,8854,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 303.300982][ T8854] (syz.0.1490,8854,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 303.310092][ T8854] (syz.0.1490,8854,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 303.318965][ T8854] (syz.0.1490,8854,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 303.327741][ T8854] (syz.0.1490,8854,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 303.337440][ T8854] (syz.0.1490,8854,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 303.347207][ T8854] (syz.0.1490,8854,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 303.356030][ T8854] (syz.0.1490,8854,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 303.365783][ T8854] (syz.0.1490,8854,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 303.375115][ T8854] (syz.0.1490,8854,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 303.384499][ T8854] (syz.0.1490,8854,0):ocfs2_symlink:1911 ERROR: status = -30 [ 303.392079][ T8854] (syz.0.1490,8854,0):ocfs2_symlink:2065 ERROR: status = -30 [ 303.759161][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 303.837452][ T8872] device macvlan0 entered promiscuous mode [ 303.906629][ T8872] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 303.933534][ T8877] loop1: detected capacity change from 0 to 2048 [ 303.955336][ T8872] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 303.965391][ T8877] EXT4-fs: Ignoring removed i_version option [ 304.027895][ T4633] kernel write not supported for file /sequencer (pid: 4633 comm: kworker/1:15) [ 304.097638][ T8877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 304.172851][ T8877] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.276428][ T4633] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 304.324381][ T8877] fs-verity: sha512 using implementation "sha512-avx2" [ 304.424413][ T8893] loop5: detected capacity change from 0 to 256 [ 304.475805][ T8893] exfat: Deprecated parameter 'namecase' [ 304.494693][ T4633] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 304.507000][ T8893] exfat: Deprecated parameter 'namecase' [ 304.525362][ T4633] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 304.551252][ T4633] usb 1-1: Product: syz [ 304.563784][ T8893] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 304.567106][ T4633] usb 1-1: Manufacturer: syz [ 304.632623][ T4633] usb 1-1: SerialNumber: syz [ 304.645330][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 304.672761][ T4633] usb 1-1: config 0 descriptor?? [ 304.713944][ T4633] ch341 1-1:0.0: ch341-uart converter detected [ 305.253364][ T8887] loop2: detected capacity change from 0 to 40427 [ 305.286690][ T8887] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 305.309846][ T8887] F2FS-fs (loop2): invalid crc value [ 305.348138][ T8887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 305.470806][ T8887] F2FS-fs (loop2): recover fsync data on readonly fs [ 305.517502][ T8887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 305.528038][ T4633] usb 1-1: failed to send control message: -71 [ 305.534311][ T4633] ch341-uart: probe of ttyUSB0 failed with error -71 [ 305.567969][ T4633] usb 1-1: USB disconnect, device number 14 [ 305.649883][ T4633] ch341 1-1:0.0: device disconnected [ 305.722417][ T8922] loop5: detected capacity change from 0 to 512 [ 305.808715][ T8922] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 305.968246][ T8922] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.1510: bg 0: bad block bitmap checksum [ 306.162832][ T8900] loop6: detected capacity change from 0 to 32768 [ 306.318626][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 306.418344][ T8940] device macvlan0 entered promiscuous mode [ 306.460203][ T8940] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 306.476498][ T8940] netlink: 'syz.0.1512': attribute type 2 has an invalid length. [ 306.546200][ T8900] XFS (loop6): Mounting V5 Filesystem [ 306.669783][ T8900] XFS (loop6): Ending clean mount [ 306.700209][ T8900] XFS (loop6): Quotacheck needed: Please wait. [ 306.847312][ T8900] XFS (loop6): Quotacheck: Done. [ 306.912297][ T8953] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1516'. [ 307.171246][ T7943] XFS (loop6): Unmounting Filesystem [ 307.664799][ T8967] MPI: mpi too large (16392 bits) [ 307.900607][ T8972] loop2: detected capacity change from 0 to 1024 [ 308.061807][ T8946] loop5: detected capacity change from 0 to 32768 [ 308.980272][ T9004] loop1: detected capacity change from 0 to 256 [ 309.033784][ T9004] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 309.640654][ T9017] loop0: detected capacity change from 0 to 512 [ 309.849109][ T9017] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1541: bg 0: block 473: padding at end of block bitmap is not set [ 309.907716][ T9022] loop5: detected capacity change from 0 to 2048 [ 309.965176][ T9022] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 310.033261][ T9017] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 310.103517][ T46] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 310.103612][ T9017] EXT4-fs (loop0): 1 orphan inode deleted [ 310.129719][ T9017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.143530][ T9017] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.186511][ T46] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 310.395890][ T46] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 310.433509][ T46] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 310.456223][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 310.516778][ T46] EXT4-fs (loop5): This should not happen!! Data will be lost [ 310.516778][ T46] [ 310.548548][ T46] EXT4-fs (loop5): Total free blocks count 0 [ 310.568116][ T46] EXT4-fs (loop5): Free/Dirty block details [ 310.588209][ T46] EXT4-fs (loop5): free_blocks=4096 [ 310.604804][ T46] EXT4-fs (loop5): dirty_blocks=512 [ 310.623310][ T46] EXT4-fs (loop5): Block reservation details [ 310.644156][ T46] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 310.668686][ T46] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 310.793464][ T9048] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 311.367408][ T9069] input: syz0 as /devices/virtual/input/input22 [ 311.387614][ T9067] loop5: detected capacity change from 0 to 2048 [ 311.399581][ T9067] EXT4-fs: Ignoring removed i_version option [ 311.558023][ T9067] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 311.579056][ T9075] loop6: detected capacity change from 0 to 2048 [ 311.589320][ T9067] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.664751][ T9075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 311.680886][ T9075] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.789049][ T9075] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1560: bg 0: block 345: padding at end of block bitmap is not set [ 311.824686][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 311.882316][ T9075] fs-verity (loop6, inode 13): Error -28 writing Merkle tree block 0 [ 311.926175][ T9075] fs-verity (loop6, inode 13): Error -28 building Merkle tree [ 312.045410][ T9087] Bluetooth: MGMT ver 1.22 [ 312.063204][ T7943] EXT4-fs (loop6): unmounting filesystem. [ 312.824804][ T9120] loop6: detected capacity change from 0 to 64 [ 312.970875][ T9120] syz.6.1578: attempt to access beyond end of device [ 312.970875][ T9120] loop6: rw=2049, sector=412, nr_sectors = 2 limit=64 [ 312.999118][ T9120] Buffer I/O error on dev loop6, logical block 206, lost async page write [ 313.740237][ T9143] loop6: detected capacity change from 0 to 256 [ 313.878339][ T9146] loop5: detected capacity change from 0 to 1024 [ 313.997632][ T9146] EXT4-fs: Ignoring removed orlov option [ 314.041228][ T9151] program syz.6.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.080453][ T9146] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 314.188123][ T9146] EXT4-fs (loop5): shut down requested (1) [ 314.293535][ T9134] loop0: detected capacity change from 0 to 32768 [ 314.308785][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 314.855847][ T9168] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 315.031862][ T9174] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x1) [ 315.263417][ T9178] loop5: detected capacity change from 0 to 1024 [ 315.720832][ T9188] input: syz0 as /devices/virtual/input/input23 [ 315.859368][ T9192] input: syz0 as /devices/virtual/input/input24 [ 316.325507][ T9202] loop2: detected capacity change from 0 to 256 [ 316.365987][ T9202] exfat: Deprecated parameter 'utf8' [ 316.416944][ T9202] exfat: Deprecated parameter 'namecase' [ 316.422702][ T9202] exfat: Deprecated parameter 'utf8' [ 316.530401][ T9202] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 316.652422][ T9202] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 317.140610][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.147117][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.973509][ T9249] loop5: detected capacity change from 0 to 64 [ 318.095225][ T9249] gfs2: path_lookup on c::: returned error -2 [ 318.124037][ T9253] loop2: detected capacity change from 0 to 1024 [ 318.187575][ T9253] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.338291][ T9253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 318.357666][ T9253] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.384811][ T9253] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.1634: lblock 0 mapped to illegal pblock 0 (length 1) [ 318.388203][ T9262] loop1: detected capacity change from 0 to 1024 [ 318.406748][ T9262] EXT4-fs: Ignoring removed oldalloc option [ 318.412713][ T9262] EXT4-fs: Ignoring removed orlov option [ 318.468681][ T9253] EXT4-fs (loop2): Remounting filesystem read-only [ 318.538847][ T9262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.547516][ T4322] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 318.760607][ T4322] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.779405][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 318.790647][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.830625][ T4322] usb 7-1: Product: syz [ 318.848254][ T4322] usb 7-1: Manufacturer: syz [ 318.872390][ T4322] usb 7-1: SerialNumber: syz [ 318.894144][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 318.923390][ T4322] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.953775][ T9273] loop2: detected capacity change from 0 to 512 [ 318.998141][ T9273] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.093727][ T4322] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.142734][ T9273] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 319.173733][ T9273] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 319.179169][ T9245] loop0: detected capacity change from 0 to 32768 [ 319.186602][ T9278] loop1: detected capacity change from 0 to 512 [ 319.222222][ T9273] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1639: Failed to acquire dquot type 1 [ 319.247273][ T9245] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 319.279955][ T9278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 319.313751][ T9273] EXT4-fs (loop2): 1 truncate cleaned up [ 319.347679][ T9273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 319.402968][ T9278] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.1640: Bad quota inum: 2, type: 1 [ 319.464834][ T9278] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 319.486092][ T9273] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.1639: deleted inode referenced: 12 [ 319.639716][ T9290] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 319.712175][ T9290] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.1640: Bad quota inum: 2, type: 1 [ 319.728258][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 319.769900][ T9290] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 319.784189][ T4361] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 319.815344][ T5270] usb 7-1: USB disconnect, device number 4 [ 320.074716][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 320.293539][ T9302] loop0: detected capacity change from 0 to 1024 [ 320.385089][ T26] audit: type=1800 audit(1782306422.137:27): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1647" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 320.422763][ T4322] usb 7-1: Service connection timeout for: 256 [ 320.445848][ T4322] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 320.498553][ T4322] ath9k_htc: Failed to initialize the device [ 320.507444][ T5270] usb 7-1: ath9k_htc: USB layer deinitialized [ 321.215993][ T9329] loop5: detected capacity change from 0 to 16 [ 321.222603][ T4634] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 321.264582][ T9331] netlink: 540 bytes leftover after parsing attributes in process `syz.6.1656'. [ 321.287445][ T9329] erofs: (device loop5): mounted with root inode @ nid 36. [ 321.340437][ T9329] syz.5.1655: attempt to access beyond end of device [ 321.340437][ T9329] loop5: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 321.404537][ T9329] syz.5.1655: attempt to access beyond end of device [ 321.404537][ T9329] loop5: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 321.429789][ T4634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.451790][ T4634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.481381][ T4634] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 321.497802][ T4634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.507338][ T26] audit: type=1800 audit(1782306423.267:28): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1655" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 321.546635][ T4634] usb 1-1: config 0 descriptor?? [ 321.625028][ T9339] binder: 9338:9339 ioctl c0306201 200000000080 returned -14 [ 321.838826][ T9345] loop6: detected capacity change from 0 to 512 [ 321.867897][ T9345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.940018][ T9345] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1662: inode #1: comm syz.6.1662: iget: illegal inode # [ 321.959052][ T9345] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1662: error while reading EA inode 1 err=-117 [ 321.980343][ T4634] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x5 [ 322.000223][ T4634] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 322.080254][ T9345] EXT4-fs (loop6): 1 orphan inode deleted [ 322.086079][ T9345] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 322.189212][ T4634] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 322.206432][ T4634] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 322.220814][ T4634] pyra: probe of 0003:1E7D:2CF6.0012 failed with error -71 [ 322.238449][ T4634] usb 1-1: USB disconnect, device number 15 [ 322.384538][ T7943] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 322.476688][ T7943] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 322.552760][ T7943] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 322.635524][ T9360] fido_id[9360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 322.909445][ T9369] raw_sendmsg: syz.5.1673 forgot to set AF_INET. Fix it! [ 322.979750][ T9372] loop0: detected capacity change from 0 to 512 [ 323.102783][ T7943] EXT4-fs (loop6): unmounting filesystem. [ 323.555326][ T4300] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.843961][ T9364] loop2: detected capacity change from 0 to 32768 [ 323.867442][ T4300] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.108382][ T4300] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.384019][ T9391] loop1: detected capacity change from 0 to 1024 [ 324.404565][ T4300] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.259354][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.296914][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.316734][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.328384][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.336014][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.343824][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.721879][ T9422] loop5: detected capacity change from 0 to 512 [ 325.764745][ T9422] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.825056][ T9422] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 325.913687][ T9422] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 325.939951][ T9422] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1693: Failed to acquire dquot type 1 [ 326.096184][ T9422] EXT4-fs (loop5): 1 truncate cleaned up [ 326.121860][ T9422] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 326.169255][ T9422] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.1693: deleted inode referenced: 12 [ 326.221435][ T9437] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1696'. [ 326.313937][ T7440] EXT4-fs (loop5): unmounting filesystem. [ 326.862666][ T9413] chnl_net:caif_netlink_parms(): no params data found [ 327.075399][ T26] audit: type=1326 audit(1782306428.827:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.144401][ T26] audit: type=1326 audit(1782306428.837:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.208688][ T26] audit: type=1326 audit(1782306428.837:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.328142][ T26] audit: type=1326 audit(1782306428.837:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.432726][ T26] audit: type=1326 audit(1782306428.837:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.456580][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 327.498131][ T26] audit: type=1326 audit(1782306428.837:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.534713][ T26] audit: type=1326 audit(1782306428.857:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.566221][ T26] audit: type=1326 audit(1782306428.857:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.5.1702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07d9ce59 code=0x7ffc0000 [ 327.637469][ T9471] loop5: detected capacity change from 0 to 16 [ 327.671244][ T9471] erofs: (device loop5): mounted with root inode @ nid 36. [ 327.759543][ T9474] loop1: detected capacity change from 0 to 512 [ 327.880013][ T9474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 327.921913][ T9474] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.009373][ T9474] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 328.105344][ T9474] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1706: Failed to acquire dquot type 0 [ 328.175148][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.194219][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.225603][ T9413] device bridge_slave_0 entered promiscuous mode [ 328.247998][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 328.379022][ T4300] device hsr_slave_0 left promiscuous mode [ 328.423280][ T4300] device hsr_slave_1 left promiscuous mode [ 328.425288][ T9489] program syz.0.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.439427][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.456715][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.474424][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.494193][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.502341][ T4324] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 328.522232][ T4300] device bridge_slave_1 left promiscuous mode [ 328.536543][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.590231][ T4300] device bridge_slave_0 left promiscuous mode [ 328.609734][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.686545][ T4324] usb 6-1: Using ep0 maxpacket: 32 [ 328.703900][ T4324] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.745313][ T4324] usb 6-1: config 0 has no interface number 0 [ 328.764604][ T4324] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.801110][ T4324] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.831950][ T4324] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 328.856409][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.880386][ T4300] device veth1_macvtap left promiscuous mode [ 328.897742][ T4324] usb 6-1: config 0 descriptor?? [ 328.915449][ T4300] device veth0_macvtap left promiscuous mode [ 328.968639][ T4300] device veth1_vlan left promiscuous mode [ 328.998819][ T4300] device veth0_vlan left promiscuous mode [ 329.522207][ T4324] uclogic 0003:28BD:0094.0013: pen parameters not found [ 329.530470][ T4324] uclogic 0003:28BD:0094.0013: interface is invalid, ignoring [ 329.539981][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 329.672850][ T9500] loop0: detected capacity change from 0 to 32768 [ 329.736147][ T4324] usb 6-1: USB disconnect, device number 6 [ 329.779950][ T9500] JBD2: Ignoring recovery information on journal [ 329.844710][ T9500] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 329.875708][ T9500] JBD2: bad block at offset 32 [ 329.923421][ T9500] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 330.101558][ T9500] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 330.156855][ T9500] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 330.198236][ T9500] OCFS2: File system is now read-only. [ 330.226573][ T9500] (syz.0.1715,9500,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 330.276794][ T9500] (syz.0.1715,9500,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 330.316514][ T9500] (syz.0.1715,9500,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 330.332184][ T9500] (syz.0.1715,9500,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 330.376259][ T9500] (syz.0.1715,9500,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 330.399097][ T9500] (syz.0.1715,9500,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 330.428105][ T9500] (syz.0.1715,9500,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 330.446429][ T9500] (syz.0.1715,9500,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 330.455971][ T9500] (syz.0.1715,9500,1):ocfs2_symlink:1864 ERROR: status = -5 [ 330.470896][ T9500] (syz.0.1715,9500,1):ocfs2_symlink:2065 ERROR: status = -5 [ 330.640261][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 330.851224][ T9529] loop0: detected capacity change from 0 to 512 [ 330.872355][ T9529] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.920584][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 330.991798][ T9529] __quota_error: 12 callbacks suppressed [ 330.991819][ T9529] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 331.010107][ T9529] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 331.010757][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 331.019609][ T9529] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1724: Failed to acquire dquot type 1 [ 331.030602][ T9529] EXT4-fs (loop0): 1 truncate cleaned up [ 331.044454][ T9529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.115933][ T9529] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1724: deleted inode referenced: 12 [ 331.168041][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.209706][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 331.303364][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.625856][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 331.867081][ T4300] bond0 (unregistering): Released all slaves [ 331.985256][ T9413] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.992492][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.000936][ T9413] device bridge_slave_1 entered promiscuous mode [ 332.070137][ T9413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.170384][ T9413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.330001][ T9413] team0: Port device team_slave_0 added [ 332.395461][ T9413] team0: Port device team_slave_1 added [ 332.465006][ T9548] input: syz0 as /devices/virtual/input/input25 [ 332.813743][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.836479][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.947405][ T9413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.999764][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.055507][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.194724][ T9413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.696850][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 333.742407][ T9413] device hsr_slave_0 entered promiscuous mode [ 333.884035][ T9413] device hsr_slave_1 entered promiscuous mode [ 334.664841][ T9413] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.703360][ T9413] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.766924][ T9413] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.811484][ T9413] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.823297][ T9570] loop1: detected capacity change from 0 to 32768 [ 334.901977][ T9570] (syz.1.1739,9570,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 334.928861][ T9607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 334.986433][ T9570] (syz.1.1739,9570,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.072180][ T9607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 335.079943][ T9570] JBD2: Ignoring recovery information on journal [ 335.245070][ T9570] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 335.265560][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.333791][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.377732][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.385813][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.467270][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.501124][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.522529][ T9620] loop0: detected capacity change from 0 to 512 [ 335.566549][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.573750][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.582928][ T9620] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 335.611866][ T9620] EXT4-fs (loop0): can't mount with commit=33527, fs mounted w/o journal [ 335.680356][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.718346][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.744197][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.751433][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.837217][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.889088][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.967600][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.997155][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.039078][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.105653][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.106081][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 336.149581][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.178362][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.182978][ T9634] loop0: detected capacity change from 0 to 256 [ 336.207472][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.227071][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.236969][ T4624] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 336.269245][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.291600][ T9634] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 336.307939][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.319856][ T9413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.438268][ T4624] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 336.454743][ T9608] loop5: detected capacity change from 0 to 40427 [ 336.459599][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 336.513424][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.542016][ T9608] F2FS-fs (loop5): invalid crc value [ 336.551899][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 336.598132][ T9608] F2FS-fs (loop5): Found nat_bits in checkpoint [ 336.605271][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 336.625689][ T4624] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 66 [ 336.742522][ T4624] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 336.764567][ T9608] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 336.792826][ T4624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.835713][ T9608] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 336.852294][ T4624] usb 3-1: Product: syz [ 336.896754][ T4624] usb 3-1: Manufacturer: syz [ 336.906768][ T4624] usb 3-1: SerialNumber: syz [ 336.953879][ T4624] usb 3-1: config 0 descriptor?? [ 337.101226][ T7440] syz-executor: attempt to access beyond end of device [ 337.101226][ T7440] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.221651][ T4624] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 337.260170][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.276593][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.328248][ T9413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.517941][ T9627] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 337.568486][ T4633] usb 3-1: USB disconnect, device number 15 [ 337.699686][ T9668] loop0: detected capacity change from 0 to 64 [ 338.032334][ T46] ------------[ cut here ]------------ [ 338.038078][ T46] kernel BUG at fs/hfs/inode.c:449! [ 338.053601][ T46] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 338.059745][ T46] CPU: 1 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 338.067155][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.077249][ T46] Workqueue: writeback wb_workfn (flush-7:0) [ 338.083282][ T46] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 338.088869][ T46] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 91 2e 87 ff e9 43 fe ff ff e8 d7 06 36 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 338.108600][ T46] RSP: 0018:ffffc90000b773a0 EFLAGS: 00010293 [ 338.114706][ T46] RAX: ffffffff824c1a39 RBX: ffff888074d12218 RCX: ffff88801d6b1e00 [ 338.122721][ T46] RDX: 0000000000000000 RSI: ffffffff8cd25960 RDI: 0000000000000000 [ 338.130726][ T46] RBP: ffffc90000b77530 R08: ffff88801d6b1e00 R09: 0000000000000003 [ 338.138743][ T46] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 338.146835][ T46] R13: 1ffff9200016ee78 R14: 0000000000000000 R15: ffff888074d121d8 [ 338.154846][ T46] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 338.163812][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.170429][ T46] CR2: 00007fc5b86b2000 CR3: 000000005b65f000 CR4: 00000000003506e0 [ 338.178448][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.186455][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.194462][ T46] Call Trace: [ 338.197768][ T46] [ 338.200738][ T46] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 338.206155][ T46] ? __writeback_single_inode+0x4bc/0x1170 [ 338.212054][ T46] ? __rwlock_init+0x140/0x140 [ 338.216859][ T46] __writeback_single_inode+0x76c/0x1170 [ 338.222538][ T46] writeback_sb_inodes+0xad5/0x17f0 [ 338.227800][ T46] ? queue_io+0x570/0x570 [ 338.232174][ T46] ? move_expired_inodes+0x722/0x770 [ 338.237515][ T46] ? rcu_is_watching+0x11/0xa0 [ 338.242340][ T46] ? queue_io+0x37a/0x570 [ 338.246785][ T46] wb_writeback+0x470/0xd40 [ 338.251432][ T46] ? percpu_ref_tryget+0x250/0x250 [ 338.256591][ T46] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 338.262620][ T46] ? __lock_acquire+0x7bd0/0x7bd0 [ 338.267700][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 338.272951][ T46] wb_workfn+0x423/0xee0 [ 338.277251][ T46] ? inode_wait_for_writeback+0x220/0x220 [ 338.283016][ T46] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 338.289065][ T46] ? __lock_acquire+0x7bd0/0x7bd0 [ 338.294161][ T46] ? read_lock_is_recursive+0x10/0x10 [ 338.299587][ T46] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 338.305620][ T46] ? _raw_spin_unlock+0x40/0x40 [ 338.308515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.310501][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 338.323908][ T46] ? process_one_work+0x7b4/0x1160 [ 338.329073][ T46] process_one_work+0x8ab/0x1160 [ 338.331473][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.334036][ T46] ? worker_detach_from_pool+0x240/0x240 [ 338.334066][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 338.352821][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 338.358421][ T46] ? wq_worker_running+0x97/0x190 [ 338.363485][ T46] worker_thread+0xaf5/0x12a0 [ 338.368139][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.368201][ T46] kthread+0x29d/0x330 [ 338.379603][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.379891][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 338.392610][ T46] ? kthread_blkcg+0xd0/0xd0 [ 338.397252][ T46] ret_from_fork+0x1f/0x30 [ 338.400072][ T9413] device veth0_vlan entered promiscuous mode [ 338.401695][ T46] [ 338.410822][ T46] Modules linked in: [ 338.413297][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.437715][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.455909][ T46] ---[ end trace 0000000000000000 ]--- [ 338.461517][ T46] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 338.471545][ T9413] device veth1_vlan entered promiscuous mode [ 338.478668][ T46] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 91 2e 87 ff e9 43 fe ff ff e8 d7 06 36 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 338.513567][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.522435][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 338.530405][ T46] RSP: 0018:ffffc90000b773a0 EFLAGS: 00010293 [ 338.538682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.545534][ T46] RAX: ffffffff824c1a39 RBX: ffff888074d12218 RCX: ffff88801d6b1e00 [ 338.557382][ T46] RDX: 0000000000000000 RSI: ffffffff8cd25960 RDI: 0000000000000000 [ 338.559377][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.565425][ T46] RBP: ffffc90000b77530 R08: ffff88801d6b1e00 R09: 0000000000000003 [ 338.583432][ T46] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 338.587575][ T9413] device veth0_macvtap entered promiscuous mode [ 338.598331][ T46] R13: 1ffff9200016ee78 R14: 0000000000000000 R15: ffff888074d121d8 [ 338.607293][ T46] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 338.612683][ T9413] device veth1_macvtap entered promiscuous mode [ 338.616752][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.629483][ T46] CR2: 00007fe5791f1368 CR3: 000000007e7e0000 CR4: 00000000003506f0 [ 338.638470][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.652426][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.652995][ T9413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.661340][ T46] Kernel panic - not syncing: Fatal exception [ 338.671614][ T46] Kernel Offset: disabled [ 338.682011][ T46] Rebooting in 86400 seconds..