last executing test programs: 2m8.943298748s ago: executing program 2 (id=793): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff8105", 0x18}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000008020"], 0x24}}, 0x0) 2m8.691102565s ago: executing program 2 (id=796): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x2040400) fcntl$setpipe(r0, 0x8, 0x80000000) 2m8.366923684s ago: executing program 2 (id=810): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) close_range(r0, r0, 0x0) 2m8.022691753s ago: executing program 2 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 2m7.656759713s ago: executing program 2 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 2m7.023899051s ago: executing program 2 (id=817): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@nodioread_nolock}, {@noblock_validity}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@stripe={'stripe', 0x3d, 0x4}}, {@errors_remount}]}, 0xe, 0x634, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 2m6.68936214s ago: executing program 32 (id=817): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@nodioread_nolock}, {@noblock_validity}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@stripe={'stripe', 0x3d, 0x4}}, {@errors_remount}]}, 0xe, 0x634, &(0x7f0000000740)="$eJzs3c9rG1ceAPDvSJZjJ951suwum7DLGvaQwBLHyobN7l42yR42h8AGNodSeoiJ7dRE+UHsQO0G4kAPLbRQSq+l5NJ/oPeSe3sqhba3ngtpKSltaUtURho5sizZimNJjufzgbHmvRnpva9GT/Nmxk8TQG5NpH8KEQcjHl1MIsablo1FfeFEtt7Db25fSqckqtX/f51EkuU11k+yx31ZYiQiPj4T8Zvi+nIXlpavTFeqdXciji1evXFsYWn56PzV6cuzl2evlY//48TJqX+WT5S3Jc592ePZc//74xuvvPj3uU8qR5M4FRdKL89ESxzbZSIm4lEWYnP+UEScTGfavC/Pml0QQq4Vs89jKSJ+H+NRrKXqxmP+9YFWDuipajGiCuRUov1DTjX6AY1j++6Ogy/0uFfSPw9O1w+A1sc/VD83EiO1Y6O9D5OmI6Oh2rmN/dtQflrGz7cPvZNOseY8xPerW2doG8rpZOVuRPyhXfxJrW77a5Gm8RfW1COJiKmIGM7q95+nqEPSNN+L8zAb2Wr8hYg4lT2m+We2WP5ES7rf8QOQT/dPZzvylTT1eP+X9j0a/Z9Y1/+pXxtq3XdtxaD3f537f439/UjtHHmhpR+W9lnOt3/JUmvGF6+dfatT+c39v3RKy2/0Bfvhwd2IQy3xv5oGm/V/0viTNts/XeXiqe7K+O+nX53ttGzQ8VfvRRxue/zzuFeazrVenxzNlpVPlI/NzVdmp+p/25bxwYcvvNep/EHHn27/vR3ib9r+hdbnpe/JjS7LeP/8vaudlo1tGn/hy+Gkfrw5nOW8NL24eLMcMZycy1apX8iq5R/fuC6NdRqvkcZ/5C/t2/+az//dta8z2vjK7MKN56487LRsK9u/6WLyo2qXdegkjX9m8+2/rv2neW+upu5sWMZ3z9/6U6dlG8U/+pSxAQAAAAAAQN4Uatdgk8Lk6nyhMDlZHy/729hbqFxfWPzr3PVb12YijtT+H7JUaFzpHq+nkzRdzv4ftpE+3pL+W0QciIi3i6O19OSl65WZQQcPAAAAAAAAAAAAAAAAAAAAO8S+bPx/4z7V3xbr4/+BnOjlDeaAnU37h/yqtf91t3gC8sD+H/JL+4f80v4hv7R/yC/tH/JL+4f80v4hv7R/AAAAANiVDvz5/udJRKz8a7Q2pYazZUYEwe5WGnQFgIEpdrneRz2uB9B/q5f+dfYhd7rq//+Y/Thg76sDDEDSLrPWOahu3Pjvt30mAAAAAAAAAAAAANADhw+2H/+fGBsMu55hf5Bf3Y7/396nAjuBn/6H/HKMD2w2in+k0wLj/wEAAAAAAAAAAACgb8ZqU1KYzMYCj0WhMDkZ8auI2B+lZG6+MjsVEb+OiM+KpT1pujzoSgMAAAAAAAAAAAAAAAAAAMAus7C0fGW6Upm92Tzz07qcXTczHk05jbug9qH0f8cTPiuSPrwbSXYHuCxnNCJW1ylFPGmdezezJ/vYPs3rDC0sLSc/VGuSiJXYOQG2iet3w/WI+16fTb86hnv3rQQAAAAAAAAAAAAAAAAAAPnUNPa4vUPv9rlGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB/j+//37uZQccIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADybfgkAAP//9Zg2mA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 6.220089579s ago: executing program 5 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0xb0}, 0x40824) 6.083607313s ago: executing program 5 (id=1978): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xc, "fe967c2f"}, @local=@item_012={0x1, 0x2, 0x1, 's'}]}}, 0x0}, 0x0) 4.482199827s ago: executing program 1 (id=1990): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000002740)=ANY=[], 0x1, 0x616a, &(0x7f0000009780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 3.930046402s ago: executing program 5 (id=1994): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x554e, &(0x7f0000008740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 3.895681993s ago: executing program 4 (id=1995): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe, 0x160, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYCF1b5jTjp/fshKanIU+wn7kH41v+O4PLmVsk5O/d1mDHgywHLP7DfQvsG0Hm9R0BJihlLY/dMfldyaZuKugMspsbe6+nu5VHD5+5fwrl/oNo0sz+hDVsFdmZfDowl1uzafWVU3VmxULhSTGXN3i87xd2++iX0e/wXoH2+gz8PovkXf0Ofin469+ab6sYMP537DTDZ/+6+8NMg0oN6rVkaL2WuG5gZrQ3WbCCPyGyaiSEEEIIIYQQQgghhBBCCCGEEOKqOwkAAP//fK1Sxw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.581134571s ago: executing program 4 (id=1997): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 3.27488297s ago: executing program 1 (id=2000): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f00000001c0), 0x0) 2.834354322s ago: executing program 1 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) 2.596437518s ago: executing program 4 (id=2005): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 2.304842666s ago: executing program 1 (id=2008): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='decompose,nobarrier,nls=cp865,\x00'], 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) 2.226663239s ago: executing program 4 (id=2009): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000680)={0x2d, 0x8, 0x5, 0xffffffffffffffff, 0x403, 0x5}) 2.094131352s ago: executing program 0 (id=2011): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x560e, 0x0) 1.923357467s ago: executing program 0 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x7, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x24000040) 1.755447261s ago: executing program 4 (id=2014): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000000140)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@nodiscard}, {@errors_continue}, {@errors_continue}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61e2, &(0x7f00000063c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLUauu74D+Jm9ee1AYiCkTmpg45gQkk12bSe+0KaYcG24lUAo9ILtetdmwTe8dgk0kk0DJRJGRRVtw0NbQKjNS0UeeKAVoDygVkiVoH2gL4gKlYeoCiggVYIK2GrO+f//OzM7O7Nrj9dnzvl8pOSXnTkz58yZM7P73c13DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACtbn3t/CcbWZY1/8n/tTXLntf8781TW/PLXnWttxAAAAC4Ur/M//3cDemCg2u4Ucsy//rSb39laWlpKXvP6F+Of3ZpKV0xlWXjm7Isvy566gfvbbQuEzyWTTZGWr4e6bP60T7Xj/W5frzP9RN9rt/U5/rJPtev2AErbC5+H5Pf2c78P7cWuzS7MRvPr9vZ5VaPNTaNjMTf5eQa+W2Wxo9lC9mJbD6bbVu+WLaRL/+1W5vrelMW1zXSsq7tzSPkJ48ejdvQCPt4Z9u6lu8z+tFrsqmf/uTRo39/7tmbu82+u6Ht/ortvGNHczs/Hi4ptrWRbUr7JG7nSMt2bu/ynIy2bWcjv13zvzu387k1bufo8mZuqM7nfDIbyf/7O/l+Gmv9tV7aT9vDZT+7Lcuyi8ub3bnMinVlI9mWtktGlp+fyeKIbN5H81B6YTa2ruP01jUcp805t7P9OO18TcTn/9Zwu7FVtqH1afrRxyZanvdfLF3OcRo1H/Vqr5XOY3DQr5WyHIPxuPhO/qAf73oM7gyP/9HbVz8Gux47XY7B9LhbjsEd/Y7BkYnRfJvTk9DIb7N8DO5qW340X1Mjn8/c3vsYnDl38szM4kc+evfCySPH54/Pn9qza9fsnr179+/fP3Ns4cT8bPHvy9zb5bclG0mvgR1h38XXwCs6lm09VJe+MLHi/fdyX4eTPV6HWzuWHfTrcKzzwTU25gW58pguXhvvau70yUsj2Sqvsfz5ufPKX4fpcbe8DsdaXoddv6d0eR2OreF12FzmzJ1r+5llrOWfbtuw+veCKzsGt7Ycg50/j3Qeg4P+eaQsx+BkOC6+d+fq3wu2h+19fHq9P4+MrjgG08MN7z3NS9LP+5P789HtuLylecV1E9n5xfmz9zxy5Ny5s7uyMDbEi1qOlc7jdUvLY8pWHK8j6z5eDy689PFbuly+Neyrybub/5pc9blqLnPvPb2fq/y7W/f92Xbp7iyMAdvo/dntu3lzf05k2ee++bGHvv7o51676v5s5s2Pz1z5z+Ipl7a8/46v8v4bc/+vivWlu3psdHyseP2Opr0z3vZ+3P5UjeXvXY183c/NrO39eDz8s9Hvxzf2eD/e1rHsoN+PxzsfXHw/bvT7bceV6Xw+J8NxcmK29/txc5ltu9d7TI71fD++LcxG2P+vDEkh5aKWY2e14zata2xsPDyusbiG9uN0T9vy4yGbNdf15O7wQ2HayrUdp3fcViw/2nK7aKOO06mOZQd9nKbffa12nDb6/fbt8nQ+n5PhuLhxT+/jtLnM0/de+Xvn5vifLe+dE/2OwfHRieY2j6eDMH+/z5Y2x2Pwnuxodjo7kc3l107kx1MjX9f0fWt7r5wI/2z0e+W2HsfgHR3LDvoYTN/HVjv2GmMrH/wAdD6fk+G4eOK+3sdgc5nX7Rvsz653hEvSMi0/u3b+fm2133nd0rGbrtaxMha285v7ev9utrnMif3rzZm999Nd4ZLruuynztfvaq+puWxj9tO2sJ3P7l99PzW3p7nMZw+s8Xg6mGXZhQ89kP++N/x95cL5736l7e8u3f6mc+FDD/z4+cf+ZT3bD8Dw+1UxthTf61r+MrWWv/8DAAAAQyHm/pEwE/kfAAAAKiPm/vh/hSfyPwAAAFRGzP1jYSZVyP9/2n+Rba97duFXF7LUzF8K4vVpNzxYLBc7rrPh66mlZc3LH/jS/P/+84W1bd5IlmW/ePBPui6/7cG4XYWpsJ1Pvb798hW+cvea1n344Qtpva399c+H+4+PZ62HQbcK7myWZV+74dP5eqbeeymfTz94OJ8PXXz8seYyzx0ovo63f+ZFxfJ/E8q/B48dabv9M2E//DDM2Td33x/xdl++9Mrt+969vL54u8aO6/OH/cT7ivuNn5PzmceK5eN+Xm37v/6pJ7/cXP6Rl3ff/gsj3bf/yXC/Xwrz5y8plm99Dppfx9t9Imx/XF+83T1f/EbX7X/qk8XyZ95QLHc4zLj+O8LXO9/w7ELr/nqkcaTtcWVvLJaL65/97p/n18f7i/ffuf2Thy617Y/O4+Pp/yjuZ6Zj+Xh5XE/0Tx3rb95P6/EZ1//knx1u28/91v/UQ8+8pHm/neu/q2O5Mx+6M1//8v21f2LT337i013XF7fn4D+eaXs8B98RXsdh/U+8LxyP4fr/e6q4v85PVzj8jvb3n7j857deaHs80Zt+Wqz/qVcfz+emyc1brnve86+/+LLmvsuy72wq7q/f+o//3em27f/CTcX+iNfHjn7n+lcT13/2w9OnTi+eX5hLe/XRG/LPznlLsT1xe28I762dXx86fe7982enZqdms2yquh+hd9m+GOaPi3Gx99JLK95B73w4PJ+3/PXXttz+75+Kl//nu4rLL725+L71irDcZ8LlW8Pzt771r/TErTflr+/G02ELl1Z+XvCV2L7zf/avacHw+Dt/LojH+5kXvz/fD83r8u8b8XV9hdv//bnifr4a9utS+GTmHTctr691+fjZCJfeWbzer3j/hbe5+Lz+Q3i+3/rD4v7jdsXH+/3wc8w3trW/38Xj46sXRjrvP/8Uj4vh/SS7WFwfl4r7+9JzN3XdvPg5JNnFm/Ov/yLdz83repirWfzI4syJhVPnH5k5N794bmbxIx89dPL0+VPnDuWf5XnoA/1uv/z+tCV/f5qb33tvlr9bnS7GVXatt//Mw0fn9s3ePjd/7Mj5Y+cePjN/9vjRxcWj83OLtx85dmz+w/1uvzB3/67dB/bs2z19fGHu/v0HDuw5ML1w6nRzM4qN6mPv7AenT509lN9k8f57D+y67757Z6dPnp6bv3/f7Oz0+X63z783TTdv/cfTZ+dPHDm3cHJ+enHho/P37zqwd+/uvp8GePLMscWpmbPnT82cX5w/O1M8lqlz+cXN7339bk81Lf5X8fNsp0bxQXzZ2+/amz6ftelLH1v1ropFOj5A9NnwWTTfesGZ/Wv5Oub+8TCTKuR/AAAAIBdz/0SYifwPAAAAlRFz/6YwE/kfAAAAKiPm/skw0/8SUJP8X7n+/7YLa1q//r/+f+v+0v+vWf//nWXr/xfvF/r/g3Gl/Xv9/0D/X/9f/1//X/+fAShb/z/m/s1Z5u//AAAAUFEx928JM5H/AQAAoDJi7r8uzET+BwAAgMqIuf95YSY1yf/6//r/+v/6//r/3dev/z+c9P970//vQ/9/JqtX///iILf/GvT/N7d+of9PGZWt/x9z//PDTGqS/wEAAKAOYu6/PsxE/gcAAIDKiLn/hjAT+R8AAAAqI+b+rWEmNcn/+v9X1P9PnSv9//bt1/9vp/8fjgf9f/3/DaD/35v+fx/6/87/P1z9/zb6/5RR2fr/Mfe/IMykJvkfAAAA6iDm/heGmcj/AAAAUD5jl3ezmPtfFGayIv9f5goAAACAay7m/huzjiJ4Tf7+r//v/P/6//r/+v/d17/2/v9opv9fHvr/ven/96H/r/+v/6//z0CVrf+f5/5sMntxmElN8j8AAADUQcz9N4WZyP8AAABQGTH3/1qYifwPAAAAlRFz/7Ywk5rkf/3/yvT/f9b61On/6//3Wr/+v/P/V5n+f2/6/33o/+v/6//r/zNQZev/x9x/c5hJTfI/AAAA1EHM/beEmcj/AAAAUBkx9/96mIn8DwAAAJURc//2MJOa5H/9/5L3/2Nz1Pn/9f/1/0vZ/5/U/y8d/f/e9P/70P/X/9f/1/9noMrW/4+5/yVhJjXJ/wAAAFAHMfe/NMxE/gcAAIDKiLn/ZWEm8j8AAABURsz9U2EmNcn/6+n/Ny7q/6/mKp//f2IN5/9vo/+v/99r/fr/zv9fZfr/ven/96H/r/+v/6//z0CVrf8fc/+tYSY1yf8AAABQBzH37wgzkf8BAACgMmLuvy3MRP4HAACAyoi5f2eYSU3yv/P/D0X/P9P/1//X/9f/1/9fG/3/3vT/+9D/1//X/9f/Z6DK1v+Puf/lYSY1yf8AAABQBzH33x5mIv8DAABAZcTc/4owE/kfAAAAKiPm/jvCTGqS//X/9f/1//X/9f+7r1//fzjp//em/9+H/r/+v/6//j8DVbb+f8z9rwwzqUn+BwAAgDqIuf/OMBP5HwAAACoj5v67wkzkfwAAAKiMmPunw0xqkv/1//X/9f/1//X/u69f/3846f/3pv/fh/6//r/+v/4/A1W2/n/M/XeHmdQk/wMAAEAdxNx/T5iJ/A8AAACVEXP/TJiJ/A8AAACVEXP/bJhJTfK//r/+v/6//v+6+v8vW75f/f+C/n+56P/31t7/73y1tdD/1//X/79G/f/x6vX/f97xRkKtlK3/H3P/rjCTmuR/AAAAqIOY+3eHmcj/AAAAUBkx9+8JM5H/AQAAoDJi7r83zKQm+V//X/9f/1//3/n/u69f/3846f/3Nvjz/8eHqP+v/6//7/z/zv/PSmXr/8fcf1+YSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf7X/9f/1//X/9f/775+/f/hpP/f2+D7/87/r/+/TP//2vb/m8eW/j9lU7b+f8z9B8JMapL/AQAAoA5i7n9VmIn8DwAAAJURc/9vhJnI/wAAAFAZMff/ZphJTfJ/z/7/qP6//r/+v/7/te//T+j/6/+vg/5/b/r/fej/6/8Pcf/f+f8po7L1/2Puvz/MpCb5HwAAAOog5v7fCjOR/wEAAKAyYu5/dZiJ/A8AAACVEXP/wTCTmuR/5//foP5/vFD/X/9f/9/5//X/r6qO/v266f8H+v/6//r/+v/6/wxA2fr/Mfe/JsykJvkfAAAA6iDm/gfCTOR/AAAAqIyY+18bZiL/AwAAQGXE3P+6MJOa5H/9f+f/v/b9//G2bdf/X76d/n9B/1//fz2c/783/f8+9P/1//X/9f8ZqLL1/2Puf32YSU3yPwAAANRBzP1vCDOR/wEAAKAyYu5/Y5iJ/A8AAACVEXP/m8JMapL/9f/1/699/9/5//X/C/r/+v+DoP/fm/5/H/r/+v/6//r/DFTZ+v8x9/92mElN8j8AAADUQcz9D4aZyP8AAABQGTH3vznMRP4HAACAyoi5/y1hJjXJ//r/+v/6//r/+v/d16//P5z0/3sbsv7/L68Pl+v/F/T/y7396+3/j3V8fVX6/z9Yrf+/tKnz9vr/XA1l6//H3P/WMJOa5H8AAACog5j73xZmIv8DAABAZcTc//YwE/kfAAAAKiPm/t8JM6lJ/tf/b27HcntZ/1//P79A/1//X/9/aOn/9zZk/X/n/++g/1/u7Xf+f/1/Vipb/z/m/neEmdQk/wMAAEAdxNz/UJiJ/A8AAACVEXP/O8NM5H8AAACojJj73xVmUpP8r//v/P/6//r/+v/d16//P5z0/3vT/+9D/1//v2z9///W/2e4la3/H3P/w2EmNcn/AAAAUAcx9787zET+BwAAgMqIuf93w0zkfwAAAKiMmPvfE2ZSk/yv/z8s/f8p/f919v8nwmX6//r/+v/1ov/fm/5/H/r/+v9l6/87/z9Drmz9/5j73xtmsvb8P7nmJQEAAIBrIub+3wszqcnf/wEAAKAOYu7//TAT+R8AAAAqI+b+PwgzqUn+1/8flv6/8/9nzv+v/9/xePT/9f+72bj+f3zn0f/X/9f/j/T/9f/1/+lUtv5/zP1/GGZSk/wPAAAAdRBz//vCTOR/AAAAGArd/p/sTjH3Hwozkf8BAACgMmLuPxxmUpP8r/+v/6//X9L+/1/t+Lfvfftth3fp/+v/6/+vy4ae/7/54nf+f/1//f9E/1//X/+fTmXr/8fcfyTMZDn4vcUJ/gEAAGC4xdz/R2EmNfn7PwAAANRBzP1Hw0zkfwAAAKiMmPvnwkxqkv/1//X/9f9L2v8f4vP/x/0xTP3/6U1D1P+Pb7r6/11taP//3cs9cf3/9fb/J7pe2tn/b+j/t9H/X/f2fyvLMv1//X+uobL1/2Punw8zqUn+BwAAgDoIuX/kWDGXr5D/AQAAoDJi7j8eZiL/AwAAQGXE3P/+MJOa5H/9f/1//X/9f+f/777+0vb/nf+/J/3/3srT/+/O+f/1/4d5+/X/9f9ZqWz9/5j7F8JMapL/AQAAoA5i7v9AmIn8DwAAAJURc/8Hw0zkfwAAAKiMmPtPhJnUJP/r/+v/6//r/+v/d1+//v9w0v/vTf+/D/1//X/9f/1/Bqps/f+Y+0+GmdQk/wMAAP/P3n18WV6ndRy/hdXSfdi4c+FC9/4JLGStf4ALNi70HI8LUDEnGnPEnANmMWAARUyYE0xihsnDzDA5ByYzM6fnQD3P0xV+9btV3beqfvf7vF4Ln6GG9haePuCH5s0X6CB3/11xi/0PAAAAw8jdf3fcYv8DAADAMHL3f3Pc0mT/6//1/8P2/1+l/z/u8/X/+v+R6f/n6f/X0P/r//X/+n82amn9f+7+b4lbmux/AAAA6CB3/7fGLfY/AAAADCN3/z1xi/0PAAAAw8jd/21xS5P9f6j/31n17P8z49X/j9T/e///2M/X/+v/R3a+/f99L/yZT/+v/9f/B/2//l//z2FL6/9z93973NJk/wMAAEAHufu/I26x/wEAAGAYufu/M26x/wEAAGAYufu/K25psv+9/+/9f/2//l//P/35+v/t5P3/eZ36/3uevu2u5x79ssdO8/n6f/2//l//z2Ytrf/P3f/dcUuT/Q8AAAAd5O7/nrjF/gcAAIBh5O7/3rjF/gcAAIAtdGXyq7n7vy9uabL/9f/6f/1/9P+X9f/6f/3/CPT/8zr1/zfy+fp//b/+X//PZi2t/8/d//1xS5P9DwAAAB3k7v+BuMX+BwAAgOWa+gexZ+Tuvzdusf8BAABgGLn7r8YtTfa//v/s+//P6/+3o//3/r/+X/8/BP3/PP3/Gvp//b/+X//PRi2t/8/df1/c0mT/AwAAQAe5+38wbrH/AQAAYBi5+38obrH/AQAAYBi5+384bmmy//X/3v/X/+v/9f/Tn6//3076/3n6/zX0/zfbz1/S/+v/9f/sd8r+//mZP21vpP/P3f8jcUuT/Q8AAAAd5O7/0bjF/gcAAIBh5O7/sbjF/gcAAIBh5O7/8bilyf7X/+v/9f/6/xvu/4/+1HuR/n+a/v986P/nLab/39md/LL+f+v7f+//6//1/xywtPf/c/f/RNzSZP8DAABAB7n7fzJumdn/p/6b+QAAAMCFyt3/U3GLX/8HAACArZfVWe7+n45bmux//b/+X/+v//f+//Tnz/X/j+37/vT/y6L/n7eY/v8Y+n/9/zZ///p//T9HLa3/z93/M3FLk/0PAAAAHeTuvz9usf8BAABgGLn7fzZusf8BAABgGLn7fy5uabL/p/v/6/+9/v9k9P8Hv3/9//TPj031//m/Uf8/2//f4f3/nvT/8/T/a+j/9f/6/+P6/yvrfrz+nylL6/9z9/983NJk/wMAAEAHuft/IW6x/wEAAGAYuft/MW6x/wEAAGAYuft/KW5psv+9/6//1/9vX//v/f89F/n+/+rc+/9d/f8J6f/n6f/X0P/r//X/8+//z/xbAPT/TFla/5+7/5fjlib7HwAAADrI3f8rcYv9DwAAANth/z87cPgfKA25+381brH/AQAAYBi5+38tbhln/8++1an/1//r//X/+v/pz19W/+/9/5PS/8/T/6+h/z+Lfn53sP7/geN+/BL6/3vPuv+fof9nyoH+//HrX7+o/j93/6/HLePsfwAAAGgvd/9vxC32PwAAAAwjd/9vxi32PwAAAAwjd/9vxS1N9v+Z9/8z//YB/b/+X/+v/9f/6/83Tf8/T/+/hv7f+//e/9f/s1EH+v99Lqr/z93/23FLk/0PAAAAHeTu/524xf4HAACAYeTufyBusf8BAABgGLn7fzduabL/vf+v/9f/6//1/9Ofr//fTjfV39+i/y/6f/2//l//r/9nA5bW/+fu/724pcn+BwAAgA5y9/9+3GL/AwAAwDBy9/9B3GL/AwAAwDBy9/9h3NJk/+v/z7b/z6/r//X/K/2//l//fy7avv+/M/VXoqOO6f+f/MarX3PwK/p//b/+X/+v/+eEvmTmv1tE/3/t+v93mbv/j+KWJvsfAAAAOsjd/8dxi/0PAAAAw8jd/ydxi/0PAAAAw8jd/2Dccsr9P9c8LJn+3/v/+n/9/77+/9JK/6//33Jt+/8T8v7/Gvp//f+W9v/XbtX/s0yL6P/3/Xbu/j+NW/z6PwAAAAwjd/+fxS32PwAAAAwjd/+fxy32PwAAAAwjd/9fxC1N9r/+X/+v/9f/e/9/+vP1/9tJ/z9P/7/GNvX/D95E/787/eWL7udv1kV//97/1/9z1NL6/9z9D8UtTfY/AAAAdJC7/y/jFvsfAAAAhpG7/6/iFvsfAAAAhpG7/6/jlib7X//fsv+/pP/X/+v/9f+j0v/P0/+vVquHZ76Bqf7/2q3L7P+9/7+471//r//nqKX1/7n7/yZuabL/AQAAoIPc/Q/HLfY/AAAADCN3/yNxi/0PAAAAw8jd/7dxS5P9r/9v2f97/1//r//X/w9L/z9P/7/GNr3/r/9f3Pev/9f/c9TS+v/c/X8XtzTZ/wAAANBB7v5H4xb7HwAAAIaRu//v4xb7HwAAAIaRu/+xuKXJ/tf/6//1//p//f/051f/f2Xvt/X/2+Hs+v+V/l//r/9fQ/+v/9f/c9jS+v/c/f8QtzTZ/wAAANBB7v5/jFvsfwAAABhG7v5/ilvsfwAAABhG7v5/jlua7H/9v/5f/6//1/9Pf773/7eT9//n6f/X0P/r//X/+n82arr/v/fC+v/c/f8StzTZ/wAAANBB7v7H4xb7HwAAAIaRu/9f4xb7HwAAAIaRu//f4pYm+1//r/8/2P+vVvp//b/+f8859P+XV/r/jdP/z9P/r6H/H7P/v2U1UP9/5dgfr/9niZb2/n/u/n+PW5rsfwAAAOggd/9/xC32PwAAAAwjd/9/xi32PwAAAAwjd/9/xS1N9r/+X//v/X/9v/5/+vO9/7+d9P/z9P9r6P/H7P+9/6//58Isrf/P3f/fcUuT/Q8AAAAd5O7/n7jF/gcAAIBh5O7/37jF/gcAAIBh5O7/v7ilyf7X/+v/9f/6f/3/9Ofr/7eT/n/exvv/L16tVvp//X/Q/+v/9f8ctrT+P3f//8ctTfY/AAAAdJC7/4m4xf4HAACAYeTufzJusf8BAABgGLn7XxK3NNn/+n/9v/5/O/v/y/p//b/+f9JS+v/bb//qp1r0/97/1//vo//X/+v/OWxp/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAAMPI3f/yuMX+BwAAgGHk7n9F3NJk/x/t/y+t9grVPVP9fzRq+v999P8Hv3/9//TPD+//6//1/2dvKf1/m/f/9f/6/330/6fo/7/i6I/X/zOipfX/ufufilua7H8AAADoIHf/K+MW+x8AAACGkbv/VXGL/Q8AAADDyN3/dNzSZP97/1//r//X/+v/pz9f/7+d9P/z9P9r6P/1/97/v/vrv0j/z+Ysrf/P3f/quKXJ/gcAAIAOcve/Jm6x/wEAAGAYuftfG7fY/wAAADCM3P2vi1ua7H/9v/5f/6//1/9Pf77+fzvp/+fp/8vhP7Q9ffr/y1NfvOh+/mZd9Pc/TP/v/X82aGn9f+7+18ctTfY/AAAAdJC7/w1xi/0PAAAAw8jd/8a4xf4HAACAYeTuf1Pc0mT/6//1/+P3/1+n/z/0+fp//f/I9P/5V/Rp+v81+vT/ky66n9/271//r//nqKX1/7n7n4lbmux/AAAA6CB3/5vjFvsfAAAAhpG7/y1xi/0PAAAAw8jd/9a4pcn+1//36v93Vh37f+//6//1/53o/+fp/9fQ/+v/9f/6fzZqaf1/7v5nd3Zb7n8AAADYVl/7ld/0zEl/32df/J+XV2+LW+5YXTvhL2MDAAAAC/fC7t/ZXa3e/uJv+fV/AAAAGFHu/nfELU32v/6/V//f8/1//b/+X//fif5/nv5/Df2//l//r/9no5bW/+fuf2fcsm/47Z76jxIAAABYktz974pbmvz6PwAAAHSQu//dccuR/e9fBwgAAADbKnf/e+KWJr/+r/9feP+/OqP+P34//f8e/b/+f+rz9f/bSf8/7yb7/2s7+n/9/wz9v/5f/89hS+v/c/e/N25psv8BAABgUAf+jkLu/vfFLfY/AAAADCN3//vjFvsfAAAAhpG7/wNxS5P9r/8/9/4/U/UzfP//Sv0n7/837//vvzz5+Qf6/5X+X/8/Fv3/PO//r6H/H6X/v1X/r/9nGZbW/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAMIzc/R+OW+x/AAAAGEbu/o/ELU32v/5/4e//31D/f4L3//X/Pfr/Yz5/nPf/v/S2q0/c+Q2PPKT/57rz7P/z54L+X/+v/9+zoP7f+//6fxZi8/3/7oEvnrb/z93/0bilyf4HAACADnL3Pxe32P8AAAAwjNz9H4tb7H8AAAAYRu7+j8ctTfa//l//v5T+P/9vfQH9/9Ub7v+vrFarC+n/synu3v97/1//f5T3/+fp/9fQ/+v/9f/6fzZq8/3/wS+etv/P3f+JuKXJ/gcAAIAOcvd/Mm7J/b9z6r91DwAAACxM7v5PxS1+/R8AAACGkbv/03FLk/2v/9f/L6X/T97/v/7jxnr//86KU3v2/19e/0n/f7b0//P0/2vo//X/+n/9Pxu1tP4/d/9n4pYm+x8AAAA6yN3/fNxi/wMAAMAwcvd/Nm6x/wEAAGAYufs/F7c02f/6/1H7/yzi9f/6/6X0/97/9/7/+dD/z9P/r6H/1//r//X/bNTS+v/c/V8IAAD//y1gdxA=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.748297302s ago: executing program 0 (id=2015): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000002c0)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.658656934s ago: executing program 1 (id=2016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.518391288s ago: executing program 3 (id=2017): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 1.368160502s ago: executing program 5 (id=2018): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) 1.270289285s ago: executing program 3 (id=2019): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000200010078", 0x7) 1.0796067s ago: executing program 0 (id=2020): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r1) 1.018793702s ago: executing program 3 (id=2021): sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3902feff"], 0x14}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c) 750.945029ms ago: executing program 3 (id=2022): unshare(0x20060400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) 621.476392ms ago: executing program 0 (id=2023): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x10) accept4$inet(r0, 0x0, 0x0, 0x800) 526.571765ms ago: executing program 3 (id=2024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000ac0)={0x50, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 405.025929ms ago: executing program 0 (id=2025): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000030c0)={0x765, {"a2e3ad21ed0d09f91b48090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f390068090890e0878f0e1ac6e7049b074a959b669a240d5b67f3988f7ef319520100ffe8d178718c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000095802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1bb5a7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b7293ffff00009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 286.972212ms ago: executing program 1 (id=2026): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCGETA(r0, 0x8926, &(0x7f0000000140)) 281.254702ms ago: executing program 5 (id=2027): unshare(0x26020480) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/pid_for_children\x00') pread64(r0, 0x0, 0x0, 0x200) 222.860084ms ago: executing program 3 (id=2028): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3, 0x0, 0xd}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000180)) 603.14µs ago: executing program 4 (id=2029): io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0xb01f, 0x5601}]) 0s ago: executing program 5 (id=2030): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") mkdir(&(0x7f0000000400)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') kernel console output (not intermixed with test programs): ting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.524852][ T6768] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 175.550290][ T6781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.583703][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'. [ 176.884975][ T6820] tipc: Started in network mode [ 176.899262][ T6820] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 176.911953][ T4312] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.915827][ T6820] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 176.939623][ T6820] tipc: Enabled bearer , priority 10 [ 177.101700][ T4312] usb 6-1: Using ep0 maxpacket: 16 [ 177.109499][ T4312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.161741][ T4312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.192062][ T4312] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 177.201177][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.273861][ T4312] usb 6-1: config 0 descriptor?? [ 177.545537][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 177.671094][ T6840] loop4: detected capacity change from 0 to 2048 [ 177.696975][ T6810] loop3: detected capacity change from 0 to 32768 [ 177.727843][ T6840] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.730238][ T4312] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 177.751713][ T6837] netlink: set zone limit has 4 unknown bytes [ 177.768948][ T4312] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 177.793682][ T6810] JBD2: Ignoring recovery information on journal [ 177.819540][ T6842] loop0: detected capacity change from 0 to 512 [ 177.846619][ T4312] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 177.879522][ T6845] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.963192][ T4312] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 177.970340][ T4312] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 177.984681][ T4312] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 178.007125][ T4312] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71). [ 178.024800][ T4312] usb 6-1: USB disconnect, device number 2 [ 178.037629][ T6842] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.988: invalid indirect mapped block 10 (level 1) [ 178.055767][ T5090] tipc: Node number set to 1 [ 178.079443][ T6810] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 178.188107][ T6842] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.988: invalid indirect mapped block 8 (level 1) [ 178.277863][ T6842] EXT4-fs (loop0): 1 truncate cleaned up [ 178.305341][ T6842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.385278][ T6855] fido_id[6855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 178.618342][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 178.679487][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 178.877213][ T6871] loop1: detected capacity change from 0 to 1024 [ 179.284185][ T11] hfsplus: b-tree write err: -5, ino 25 [ 179.290166][ T11] hfsplus: b-tree write err: -5, ino 4 [ 179.307552][ T11] hfsplus: b-tree write err: -5, ino 2 [ 179.439440][ T6883] loop5: detected capacity change from 0 to 1024 [ 179.461485][ T6046] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.682320][ T6046] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 179.733346][ T6046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.763739][ T6046] usb 1-1: Product: syz [ 179.767986][ T6046] usb 1-1: Manufacturer: syz [ 179.794194][ T6046] usb 1-1: SerialNumber: syz [ 179.825328][ T6046] usb 1-1: config 0 descriptor?? [ 179.850687][ T6896] loop3: detected capacity change from 0 to 512 [ 179.870698][ T6046] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 179.891018][ T6896] EXT4-fs: Ignoring removed nobh option [ 179.931269][ T6896] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.043415][ T6896] EXT4-fs (loop3): orphan cleanup on readonly fs [ 180.071327][ T6896] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 180.111024][ T6896] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1003: attempt to clear invalid blocks 2 len 1 [ 180.145409][ T6894] loop4: detected capacity change from 0 to 4096 [ 180.165815][ T6896] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.243436][ T6896] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1003: invalid indirect mapped block 1819239214 (level 0) [ 180.331943][ T6896] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1003: invalid indirect mapped block 1819239214 (level 1) [ 180.368025][ T6907] loop1: detected capacity change from 0 to 512 [ 180.466979][ T6046] gspca_sunplus: reg_w_riv err -71 [ 180.470731][ T4272] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 180.472554][ T6896] EXT4-fs (loop3): 1 truncate cleaned up [ 180.472591][ T6896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.481899][ T6046] sunplus: probe of 1-1:0.0 failed with error -71 [ 180.515297][ T6046] usb 1-1: USB disconnect, device number 4 [ 180.532650][ T6896] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 180.564195][ T4272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 180.588337][ T6907] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1007: inode #1: comm syz.1.1007: iget: illegal inode # [ 180.711543][ T6907] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1007: error while reading EA inode 1 err=-117 [ 180.743320][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 180.755785][ T6907] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1007: inode #1: comm syz.1.1007: iget: illegal inode # [ 180.839396][ T6907] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1007: error while reading EA inode 1 err=-117 [ 180.896502][ T6907] EXT4-fs (loop1): 1 orphan inode deleted [ 180.921229][ T6907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.950799][ T6916] loop3: detected capacity change from 0 to 16 [ 181.220497][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 181.458623][ T6930] loop1: detected capacity change from 0 to 512 [ 181.490242][ T6932] netlink: 'syz.3.1015': attribute type 9 has an invalid length. [ 181.539735][ T6930] EXT4-fs: Ignoring removed bh option [ 181.581742][ T6905] F2FS-fs (loop5): invalid crc value [ 181.628414][ T6905] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 181.630455][ T6930] EXT4-fs (loop1): 1 truncate cleaned up [ 181.742628][ T6930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.864849][ T6905] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 181.899253][ T6905] F2FS-fs (loop5): Start checkpoint disabled! [ 181.938785][ T6905] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 181.987883][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 182.011003][ T6943] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.4.1018: corrupted xattr block 95 [ 182.102340][ T6943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1018: bg 0: block 7: invalid block bitmap [ 182.159850][ T6949] netlink: 'syz.3.1020': attribute type 4 has an invalid length. [ 182.168076][ T6949] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 182.210767][ T6943] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 182.221691][ T6949] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1020'. [ 182.242324][ T6943] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2916: inode #11: comm syz.4.1018: corrupted xattr block 95 [ 182.288871][ T6943] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 182.301192][ T6943] EXT4-fs (loop4): 1 orphan inode deleted [ 182.311101][ T6943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 182.334251][ T46] kworker/u4:3: attempt to access beyond end of device [ 182.334251][ T46] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.602260][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 182.807107][ T6959] set_capacity_and_notify: 2 callbacks suppressed [ 182.807128][ T6959] loop0: detected capacity change from 0 to 4096 [ 182.896906][ T6966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.216881][ T6970] device geneve2 entered promiscuous mode [ 183.786130][ T6987] loop0: detected capacity change from 0 to 4096 [ 183.804516][ T6990] loop1: detected capacity change from 0 to 256 [ 183.811675][ T4309] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.876963][ T6990] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 184.001502][ T4309] usb 5-1: Using ep0 maxpacket: 16 [ 184.018232][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.080671][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.136467][ T4309] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 184.176565][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.205813][ T4275] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 184.207833][ T4309] usb 5-1: config 0 descriptor?? [ 184.253263][ T4275] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 184.687646][ T4309] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 184.711817][ T4309] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 184.741587][ T4309] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 184.748803][ T4309] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 184.777017][ T4309] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 184.822986][ T4309] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 184.892232][ T4309] corsair 0003:1B1C:1B02.0007: Failed to get K90 initial state (error -71). [ 184.929418][ T4309] usb 5-1: USB disconnect, device number 5 [ 185.217691][ T7014] fido_id[7014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 185.330581][ T6997] loop3: detected capacity change from 0 to 32768 [ 185.340891][ T7017] loop1: detected capacity change from 0 to 4096 [ 185.367531][ T7017] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 185.399028][ T6995] loop5: detected capacity change from 0 to 32768 [ 185.585222][ T6995] XFS (loop5): Mounting V5 Filesystem [ 185.652779][ T7024] device sit0 entered promiscuous mode [ 185.671702][ T6995] XFS (loop5): Ending clean mount [ 185.688953][ T7024] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 185.727973][ T7024] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1047'. [ 186.023799][ T6367] XFS (loop5): Unmounting Filesystem [ 186.232105][ T7011] loop0: detected capacity change from 0 to 40427 [ 186.246339][ T7039] loop1: detected capacity change from 0 to 256 [ 186.273405][ T7011] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 186.331628][ T7011] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 186.341563][ T7039] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.387575][ T7011] F2FS-fs (loop0): invalid crc value [ 186.460358][ T7011] F2FS-fs (loop0): Found nat_bits in checkpoint [ 186.480957][ T7039] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 186.585576][ T7039] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.711886][ T7011] F2FS-fs (loop0): Start checkpoint disabled! [ 186.744745][ T7011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 187.255480][ T46] kworker/u4:3: attempt to access beyond end of device [ 187.255480][ T46] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.384525][ T7064] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1063'. [ 187.927099][ T7082] loop5: detected capacity change from 0 to 128 [ 187.938860][ T7083] netlink: 'syz.3.1072': attribute type 28 has an invalid length. [ 187.951728][ T4276] Bluetooth: hci0: command 0x1405 tx timeout [ 188.246175][ T7089] loop4: detected capacity change from 0 to 4096 [ 188.320023][ T7096] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.562288][ T7102] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1078'. [ 189.766421][ T7139] loop0: detected capacity change from 0 to 4096 [ 189.840596][ T7147] loop4: detected capacity change from 0 to 4096 [ 189.894637][ T7147] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 189.908184][ T7139] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 189.971498][ T5093] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.024484][ T7139] ntfs3: loop0: failed to convert "0080" to cp1250 [ 190.048519][ T7139] ntfs3: loop0: failed to convert name for inode 1e. [ 190.173905][ T5093] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.209520][ T5093] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.241247][ T5093] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.304393][ T5093] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 190.342144][ T5093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.387465][ T5093] usb 2-1: Product: syz [ 190.401508][ T5093] usb 2-1: Manufacturer: syz [ 190.406200][ T5093] usb 2-1: SerialNumber: syz [ 190.416881][ T7137] loop3: detected capacity change from 0 to 32768 [ 190.439819][ T5093] usb 2-1: selecting invalid altsetting 1 [ 190.489490][ T5093] usb 2-1: unit 6 not found! [ 190.819101][ T7150] loop5: detected capacity change from 0 to 32768 [ 190.951597][ T7150] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 191.061775][ T7169] loop0: detected capacity change from 0 to 16 [ 191.074625][ T5093] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 191.082489][ T7169] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 191.194274][ T4259] udevd[4259]: incorrect cramfs checksum on /dev/loop0 [ 191.266790][ T5093] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 191.324945][ T5093] usb 2-1: USB disconnect, device number 7 [ 191.340524][ T6367] ocfs2: Unmounting device (7,5) on (node local) [ 191.353603][ T4259] udevd[4259]: incorrect cramfs checksum on /dev/loop0 [ 191.391757][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 191.397948][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 191.412516][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 191.584366][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.794996][ T7174] loop4: detected capacity change from 0 to 4096 [ 191.919334][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1113'. [ 191.971200][ T26] audit: type=1800 audit(1777410212.091:31): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1108" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 192.253631][ T7193] netlink: 'syz.1.1116': attribute type 29 has an invalid length. [ 192.302289][ T7193] netlink: 'syz.1.1116': attribute type 29 has an invalid length. [ 192.335998][ T7197] netlink: 'syz.1.1116': attribute type 29 has an invalid length. [ 192.561491][ T5093] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.708019][ T7206] loop5: detected capacity change from 0 to 512 [ 192.746035][ T7180] loop0: detected capacity change from 0 to 32768 [ 192.753058][ T5093] usb 5-1: Using ep0 maxpacket: 16 [ 192.760234][ T5093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.781130][ T5093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.794644][ T5093] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.809057][ T5093] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.822067][ T7206] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 192.839280][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.877137][ T7180] find_entry called with index = 0 [ 192.901346][ T5093] usb 5-1: config 0 descriptor?? [ 192.939509][ T7180] read_mapping_page failed! [ 192.961734][ T7180] ERROR: (device loop0): txCommit: [ 192.961734][ T7180] [ 193.343113][ T5093] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 193.350685][ T5093] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 193.387592][ T5093] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 193.421435][ T5093] microsoft 0003:045E:07DA.0008: unknown main item tag 0x5 [ 193.451518][ T5093] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 193.460922][ T5093] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 193.481423][ T5093] microsoft 0003:045E:07DA.0008: no inputs found [ 193.491722][ T5093] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 193.507151][ T7211] loop3: detected capacity change from 0 to 256 [ 193.585503][ T7211] FAT-fs (loop3): Directory bread(block 64) failed [ 193.638085][ T5093] usb 5-1: USB disconnect, device number 6 [ 193.644247][ T7211] FAT-fs (loop3): Directory bread(block 65) failed [ 193.681652][ T7211] FAT-fs (loop3): Directory bread(block 66) failed [ 193.688283][ T7211] FAT-fs (loop3): Directory bread(block 67) failed [ 193.723558][ T7204] loop1: detected capacity change from 0 to 32768 [ 193.731632][ T7211] FAT-fs (loop3): Directory bread(block 68) failed [ 193.742257][ T7211] FAT-fs (loop3): Directory bread(block 69) failed [ 193.769304][ T7211] FAT-fs (loop3): Directory bread(block 70) failed [ 193.806085][ T7211] FAT-fs (loop3): Directory bread(block 71) failed [ 193.818486][ T7204] XFS (loop1): Mounting V5 Filesystem [ 193.824443][ T7211] FAT-fs (loop3): Directory bread(block 72) failed [ 193.831026][ T7211] FAT-fs (loop3): Directory bread(block 73) failed [ 193.940757][ T7204] XFS (loop1): Ending clean mount [ 193.999907][ T7204] XFS (loop1): Quotacheck needed: Please wait. [ 194.016611][ T7214] fido_id[7214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.030104][ T7230] loop5: detected capacity change from 0 to 2048 [ 194.188629][ T7204] XFS (loop1): Quotacheck: Done. [ 194.212061][ T7233] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.442305][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.442418][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538249][ T7233] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 194.566329][ T4267] XFS (loop1): Unmounting Filesystem [ 194.569767][ T7233] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 194.661808][ T7233] Remounting filesystem read-only [ 194.670514][ T6367] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 195.200511][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1137'. [ 195.262077][ T7252] netlink: 'syz.5.1137': attribute type 1 has an invalid length. [ 195.585999][ T7265] loop1: detected capacity change from 0 to 164 [ 195.660499][ T7274] loop3: detected capacity change from 0 to 128 [ 195.759693][ T7274] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.911556][ T7274] hpfs: filesystem error: improperly stopped [ 195.917735][ T7274] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 196.024802][ T7272] loop5: detected capacity change from 0 to 8192 [ 196.078577][ T7274] hpfs: You really don't want any checks? You are crazy... [ 196.099997][ T7274] hpfs: Code page index out of array [ 196.118247][ T7272] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.156519][ T7274] hpfs: code page support is disabled [ 196.208588][ T7272] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 196.219668][ T7274] hpfs: hpfs_map_4sectors(): unaligned read [ 196.224061][ T7272] REISERFS (device loop5): using ordered data mode [ 196.233788][ T7272] reiserfs: using flush barriers [ 196.260737][ T7272] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 196.272309][ T7274] hpfs: hpfs_map_4sectors(): unaligned read [ 196.307388][ T7272] REISERFS (device loop5): checking transaction log (loop5) [ 196.368379][ T7274] hpfs: filesystem error: unable to find root dir [ 196.375772][ T7272] REISERFS (device loop5): Using r5 hash to sort names [ 196.413131][ T7272] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 196.501087][ T7272] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 196.591643][ T4270] Bluetooth: hci0: command 0x1405 tx timeout [ 197.496153][ T7319] Bluetooth: MGMT ver 1.22 [ 198.021978][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 198.093126][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 198.271005][ T7349] loop1: detected capacity change from 0 to 256 [ 198.382101][ T7349] FAT-fs (loop1): Directory bread(block 64) failed [ 198.388723][ T7349] FAT-fs (loop1): Directory bread(block 65) failed [ 198.421548][ T7349] FAT-fs (loop1): Directory bread(block 66) failed [ 198.438479][ T7349] FAT-fs (loop1): Directory bread(block 67) failed [ 198.481647][ T7349] FAT-fs (loop1): Directory bread(block 68) failed [ 198.517207][ T7349] FAT-fs (loop1): Directory bread(block 69) failed [ 198.532199][ T7349] FAT-fs (loop1): Directory bread(block 70) failed [ 198.571546][ T7349] FAT-fs (loop1): Directory bread(block 71) failed [ 198.591725][ T7349] FAT-fs (loop1): Directory bread(block 72) failed [ 198.614279][ T7349] FAT-fs (loop1): Directory bread(block 73) failed [ 199.022693][ T7331] loop4: detected capacity change from 0 to 32768 [ 199.134145][ T7331] JBD2: Ignoring recovery information on journal [ 199.260157][ T7331] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 199.535821][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 199.581311][ T7346] loop5: detected capacity change from 0 to 32768 [ 199.720003][ T7375] loop3: detected capacity change from 0 to 4096 [ 199.756027][ T7346] XFS (loop5): Mounting V5 Filesystem [ 199.761113][ T7381] loop1: detected capacity change from 0 to 4096 [ 199.872914][ T7357] loop0: detected capacity change from 0 to 32768 [ 199.954917][ T7357] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 199.963797][ T7389] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.988203][ T26] audit: type=1800 audit(1777410220.111:32): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1182" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 200.038375][ T7346] XFS (loop5): Ending clean mount [ 200.062759][ T7357] JBD2: Ignoring recovery information on journal [ 200.279641][ T7357] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 200.367903][ T7346] syz.5.1172 (7346) used greatest stack depth: 20336 bytes left [ 200.579839][ T6367] XFS (loop5): Unmounting Filesystem [ 200.685805][ T4275] ocfs2: Unmounting device (7,0) on (node local) [ 200.731469][ T5093] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.931759][ T5093] usb 4-1: Using ep0 maxpacket: 16 [ 200.938846][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.997030][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.023660][ T5093] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 201.079773][ T5093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.124743][ T5093] usb 4-1: Product: syz [ 201.136576][ T5093] usb 4-1: Manufacturer: syz [ 201.161813][ T5093] usb 4-1: SerialNumber: syz [ 201.191112][ T5093] usb 4-1: config 0 descriptor?? [ 201.452068][ T5093] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 201.625255][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 201.694270][ T7426] loop0: detected capacity change from 0 to 1024 [ 201.837360][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 201.842556][ T7428] loop4: detected capacity change from 0 to 2048 [ 201.844847][ T5093] imon:send_packet: packet tx failed (-71) [ 201.858076][ T7426] hfsplus: bad catalog entry type [ 201.881550][ T5093] imon 4-1:0.0: panel buttons/knobs setup failed [ 202.002355][ T7428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.011560][ T7428] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.074274][ T4313] hfsplus: b-tree write err: -5, ino 25 [ 202.107047][ T4313] hfsplus: b-tree write err: -5, ino 4 [ 202.135498][ T4313] hfsplus: b-tree write err: -5, ino 2 [ 202.192097][ T7428] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1197: bg 0: block 345: padding at end of block bitmap is not set [ 202.251506][ T5093] rc_core: IR keymap rc-imon-pad not found [ 202.257643][ T5093] Registered IR keymap rc-empty [ 202.291148][ T7428] EXT4-fs (loop4): Remounting filesystem read-only [ 202.318489][ T5093] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 202.367365][ T5093] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.429623][ T5093] imon:send_packet: packet tx failed (-71) [ 202.456283][ T5093] imon 4-1:0.0: remote input dev register failed [ 202.491578][ T5093] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 202.609116][ T5093] imon 4-1:0.0: unable to initialize intf0, err 0 [ 202.616505][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 202.644747][ T5093] imon:imon_probe: failed to initialize context! [ 202.709642][ T5093] imon 4-1:0.0: unable to register, err -19 [ 202.736540][ T5093] usb 4-1: USB disconnect, device number 7 [ 202.907864][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 202.928443][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 203.020151][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 203.081786][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 203.714148][ T7493] loop3: detected capacity change from 0 to 256 [ 203.834335][ T7493] FAT-fs (loop3): Directory bread(block 64) failed [ 203.841207][ T7493] FAT-fs (loop3): Directory bread(block 65) failed [ 203.896423][ T7493] FAT-fs (loop3): Directory bread(block 66) failed [ 203.949518][ T7493] FAT-fs (loop3): Directory bread(block 67) failed [ 203.972905][ T7493] FAT-fs (loop3): Directory bread(block 68) failed [ 203.979611][ T7493] FAT-fs (loop3): Directory bread(block 69) failed [ 204.031742][ T7493] FAT-fs (loop3): Directory bread(block 70) failed [ 204.038454][ T7493] FAT-fs (loop3): Directory bread(block 71) failed [ 204.055077][ T7500] loop0: detected capacity change from 0 to 512 [ 204.091541][ T7493] FAT-fs (loop3): Directory bread(block 72) failed [ 204.150124][ T7493] FAT-fs (loop3): Directory bread(block 73) failed [ 204.199451][ T7500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.284798][ T7509] loop1: detected capacity change from 0 to 1024 [ 204.288784][ T7500] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.357851][ T7509] hfsplus: bad catalog entry type [ 204.578068][ T7500] EXT4-fs: Ignoring removed orlov option [ 204.622643][ T7500] EXT4-fs: Ignoring removed bh option [ 204.632027][ T7500] EXT4-fs: can't change dax mount option while remounting [ 204.646755][ T62] hfsplus: b-tree write err: -5, ino 25 [ 204.667217][ T62] hfsplus: b-tree write err: -5, ino 4 [ 204.751619][ T62] hfsplus: b-tree write err: -5, ino 2 [ 204.865604][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 205.644793][ T7549] loop0: detected capacity change from 0 to 256 [ 205.736543][ T7547] loop4: detected capacity change from 0 to 2048 [ 205.763210][ T7549] FAT-fs (loop0): Directory bread(block 64) failed [ 205.803903][ T7549] FAT-fs (loop0): Directory bread(block 65) failed [ 205.820883][ T7547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.850935][ T7549] FAT-fs (loop0): Directory bread(block 66) failed [ 205.899590][ T7549] FAT-fs (loop0): Directory bread(block 67) failed [ 205.971724][ T7549] FAT-fs (loop0): Directory bread(block 68) failed [ 205.998620][ T7549] FAT-fs (loop0): Directory bread(block 69) failed [ 206.015720][ T7549] FAT-fs (loop0): Directory bread(block 70) failed [ 206.087339][ T7549] FAT-fs (loop0): Directory bread(block 71) failed [ 206.125079][ T7549] FAT-fs (loop0): Directory bread(block 72) failed [ 206.158343][ T7549] FAT-fs (loop0): Directory bread(block 73) failed [ 206.191986][ T7562] loop3: detected capacity change from 0 to 64 [ 206.219962][ T7565] netlink: 'syz.5.1245': attribute type 10 has an invalid length. [ 206.368719][ T7565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.458868][ T7565] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.501626][ T7567] netlink: 'syz.5.1245': attribute type 10 has an invalid length. [ 206.536472][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1245'. [ 206.567956][ T7567] device batadv0 entered promiscuous mode [ 206.580158][ T7569] loop1: detected capacity change from 0 to 2048 [ 206.626134][ T7567] bond0: (slave batadv0): Releasing backup interface [ 206.672932][ T7567] bridge0: port 3(batadv0) entered blocking state [ 206.708290][ T7567] bridge0: port 3(batadv0) entered disabled state [ 206.732384][ T7569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.741030][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1247'. [ 206.775913][ T7569] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.958099][ T7569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1246: bg 0: block 345: padding at end of block bitmap is not set [ 207.051802][ T7569] EXT4-fs (loop1): Remounting filesystem read-only [ 207.202874][ T62] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 207.212899][ T62] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 207.273845][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 207.475222][ T4270] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 207.484366][ T4270] Bluetooth: hci0: Injecting HCI hardware error event [ 207.495187][ T4276] Bluetooth: hci0: hardware error 0x00 [ 207.938995][ T7618] loop4: detected capacity change from 0 to 512 [ 208.018949][ T7618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.127917][ T7618] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.191667][ T5091] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.378737][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 208.385402][ T5091] usb 1-1: Using ep0 maxpacket: 8 [ 208.393681][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.445857][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.486610][ T5091] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.521141][ T7631] loop5: detected capacity change from 0 to 8192 [ 208.531462][ T5091] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 208.561547][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.615901][ T5091] usb 1-1: config 0 descriptor?? [ 208.622111][ T7631] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.649099][ T7631] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 208.658673][ T7631] REISERFS (device loop5): using ordered data mode [ 208.665504][ T7631] reiserfs: using flush barriers [ 208.672646][ T7631] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.689639][ T7631] REISERFS (device loop5): checking transaction log (loop5) [ 208.760731][ T7638] loop1: detected capacity change from 0 to 2048 [ 208.864481][ T7647] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.883133][ T7631] REISERFS (device loop5): Using r5 hash to sort names [ 208.937624][ T7631] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 209.036274][ T5091] dragonrise 0003:0079:0006.0009: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 209.089009][ T5091] dragonrise 0003:0079:0006.0009: no inputs found [ 209.122403][ T5091] dragonrise 0003:0079:0006.0009: force feedback init failed [ 209.283084][ T5091] usb 1-1: USB disconnect, device number 5 [ 209.551639][ T4276] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 209.704930][ T7653] fido_id[7653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 210.128413][ T7670] loop1: detected capacity change from 0 to 512 [ 210.235064][ T7670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.242855][ T7646] loop4: detected capacity change from 0 to 32768 [ 210.256032][ T7670] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.403355][ T7670] EXT4-fs: Ignoring removed orlov option [ 210.439750][ T7670] EXT4-fs: Ignoring removed bh option [ 210.503142][ T7670] EXT4-fs: can't change dax mount option while remounting [ 210.692339][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 210.885731][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1287'. [ 211.229829][ T7661] loop5: detected capacity change from 0 to 32768 [ 211.390348][ T7666] loop3: detected capacity change from 0 to 32768 [ 211.464558][ T7666] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 211.512807][ T7666] JBD2: Ignoring recovery information on journal [ 211.600865][ T7697] loop4: detected capacity change from 0 to 4096 [ 211.731191][ T7666] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 212.021443][ T4272] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 212.072432][ T4272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 212.074769][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 212.131706][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 212.140858][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 212.261721][ T7710] netlink: 'syz.1.1294': attribute type 13 has an invalid length. [ 213.341178][ T7742] loop0: detected capacity change from 0 to 4096 [ 213.353429][ T7751] loop4: detected capacity change from 0 to 64 [ 213.473933][ T7751] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 213.652862][ T4275] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 213.659387][ T4275] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 213.685941][ T7756] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1312'. [ 213.975725][ T7766] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1314'. [ 214.029924][ T7766] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1314'. [ 214.042246][ T7768] loop1: detected capacity change from 0 to 128 [ 214.107100][ T7768] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 214.215653][ T7768] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.307744][ T7768] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.1317: checksumming directory block 0 [ 214.409623][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 214.709567][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1322'. [ 214.865006][ T7746] loop3: detected capacity change from 0 to 32768 [ 215.041059][ T7746] XFS (loop3): Mounting V5 Filesystem [ 215.060814][ T7799] netlink: 'syz.5.1328': attribute type 28 has an invalid length. [ 215.149087][ T7803] loop4: detected capacity change from 0 to 256 [ 215.277459][ T7803] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 215.313098][ T7746] XFS (loop3): Ending clean mount [ 215.353752][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 215.393368][ T26] audit: type=1400 audit(1777410235.521:33): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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loop3): Unmounting Filesystem [ 216.400314][ T7815] loop5: detected capacity change from 0 to 32768 [ 216.432883][ T7815] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1332 (7815) [ 216.533891][ T7815] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.545567][ T7815] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 216.611812][ T7815] BTRFS info (device loop5): using free space tree [ 216.919369][ T7864] xt_l2tp: invalid flags combination: c [ 216.925581][ T7815] BTRFS info (device loop5): enabling ssd optimizations [ 217.172956][ T7872] loop1: detected capacity change from 0 to 256 [ 217.329632][ T7876] cifs: Unknown parameter 'h}#úä [ 217.329632][ T7876] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 217.329632][ T7876] SÃȘØÈžZ§6ŸÂ' [ 217.434250][ T7878] loop4: detected capacity change from 0 to 128 [ 217.502933][ T7878] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 217.588083][ T7878] hpfs: filesystem error: improperly stopped [ 217.607774][ T7878] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 217.649123][ T7878] hpfs: You really don't want any checks? You are crazy... [ 217.658311][ T6367] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.675600][ T7882] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1354'. [ 217.688223][ T7878] hpfs: Code page index out of array [ 217.694151][ T7878] hpfs: code page support is disabled [ 217.714393][ T7884] tipc: Enabling of bearer rejected, failed to enable media [ 217.716935][ T7878] hpfs: hpfs_map_4sectors(): unaligned read [ 217.800568][ T7878] hpfs: hpfs_map_4sectors(): unaligned read [ 217.833566][ T7878] hpfs: filesystem error: unable to find root dir [ 217.886767][ T7878] hpfs: hpfs_map_4sectors(): unaligned read [ 218.454538][ T7901] loop0: detected capacity change from 0 to 128 [ 218.505617][ T7901] FAT-fs (loop0): Directory bread(block 288) failed [ 218.539868][ T7901] FAT-fs (loop0): Directory bread(block 289) failed [ 218.557478][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 218.578123][ T7901] FAT-fs (loop0): Directory bread(block 290) failed [ 218.601585][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 218.617587][ T7901] FAT-fs (loop0): Directory bread(block 291) failed [ 218.632271][ T7901] FAT-fs (loop0): Directory bread(block 292) failed [ 218.681486][ T7901] FAT-fs (loop0): Directory bread(block 293) failed [ 218.688203][ T7901] FAT-fs (loop0): Directory bread(block 294) failed [ 218.741638][ T7901] FAT-fs (loop0): Directory bread(block 295) failed [ 218.967884][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 219.156003][ T7920] loop5: detected capacity change from 0 to 1024 [ 219.184789][ T7920] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.235750][ T7920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.342401][ T7920] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.1372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 219.370060][ T7920] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1372: couldn't read orphan inode 11 (err -117) [ 219.385140][ T7920] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.475130][ T6367] EXT4-fs (loop5): unmounting filesystem. [ 219.767475][ T26] audit: type=1326 audit(1777410239.891:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 219.814778][ T26] audit: type=1326 audit(1777410239.921:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 219.841635][ T26] audit: type=1326 audit(1777410239.921:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 219.871723][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.913889][ T26] audit: type=1326 audit(1777410239.921:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 219.979370][ T26] audit: type=1326 audit(1777410239.921:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 220.063226][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 220.092751][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.136971][ T7] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 220.141732][ T26] audit: type=1326 audit(1777410239.921:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 220.165241][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.168603][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.199061][ T7] usb 5-1: Product: syz [ 220.219796][ T7] usb 5-1: Manufacturer: syz [ 220.246596][ T26] audit: type=1326 audit(1777410239.921:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 220.247720][ T7] usb 5-1: SerialNumber: syz [ 220.268971][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.329309][ T26] audit: type=1326 audit(1777410239.921:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff045d9cdd9 code=0x7ffc0000 [ 220.351689][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.497365][ T7] empeg 5-1:1.0: empeg converter detected [ 220.698768][ T7] usb 5-1: empeg converter now attached to ttyUSB0 [ 220.912907][ T7949] loop0: detected capacity change from 0 to 32768 [ 221.005863][ T7949] XFS (loop0): Mounting V5 Filesystem [ 221.017142][ T7972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 221.041687][ T7] usb 5-1: USB disconnect, device number 7 [ 221.052052][ T7] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 221.071286][ T7] empeg 5-1:1.0: device disconnected [ 221.081810][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 221.110280][ T7975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1394'. [ 221.202847][ T7982] loop3: detected capacity change from 0 to 256 [ 221.216719][ T7982] FAT-fs (loop3): bogus logical sector size 128 [ 221.224042][ T7982] FAT-fs (loop3): Can't find a valid FAT filesystem [ 221.246639][ T7980] xt_l2tp: invalid flags combination: c [ 221.287439][ T7949] XFS (loop0): Ending clean mount [ 221.507029][ T4275] XFS (loop0): Unmounting Filesystem [ 221.637147][ T7988] loop5: detected capacity change from 0 to 2048 [ 221.744046][ T7988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.844455][ T26] audit: type=1800 audit(1777410241.971:42): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1399" name="file2" dev="loop5" ino=1416 res=0 errno=0 [ 222.397244][ T8007] loop5: detected capacity change from 0 to 1024 [ 222.639992][ T7990] loop3: detected capacity change from 0 to 32768 [ 222.646671][ T26] audit: type=1326 audit(1777410242.761:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 222.702703][ T26] audit: type=1326 audit(1777410242.781:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 222.794936][ T7990] JBD2: Ignoring recovery information on journal [ 222.888790][ T26] audit: type=1326 audit(1777410242.781:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 222.981206][ T7990] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 223.037725][ T26] audit: type=1326 audit(1777410242.781:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 223.194717][ T26] audit: type=1326 audit(1777410242.781:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 223.298861][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 223.342653][ T26] audit: type=1326 audit(1777410242.781:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 223.423409][ T26] audit: type=1326 audit(1777410242.781:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 223.546038][ T26] audit: type=1326 audit(1777410242.781:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 223.547115][ T8038] CIFS: iocharset name too long [ 223.568680][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.663615][ T8042] loop5: detected capacity change from 0 to 128 [ 223.674386][ T26] audit: type=1326 audit(1777410242.781:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 223.725349][ T8042] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.775052][ T8042] hpfs: filesystem error: improperly stopped [ 223.781228][ T8042] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.844641][ T8042] hpfs: You really don't want any checks? You are crazy... [ 223.932111][ T8042] hpfs: hpfs_map_sector(): read error [ 223.937818][ T8042] hpfs: code page support is disabled [ 223.982268][ T8042] hpfs: hpfs_map_4sectors(): unaligned read [ 223.989466][ T8042] hpfs: hpfs_map_4sectors(): unaligned read [ 224.047406][ T8042] hpfs: filesystem error: unable to find root dir [ 224.258213][ T8054] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 224.856213][ T8067] loop4: detected capacity change from 0 to 2048 [ 224.952093][ T8067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.352614][ T8077] loop4: detected capacity change from 0 to 8 [ 225.381301][ T8056] loop0: detected capacity change from 0 to 32768 [ 225.488307][ T8061] loop5: detected capacity change from 0 to 32768 [ 225.707021][ T8061] UFO tlock:0xffffc9000288a090 [ 226.279562][ T8100] tipc: Started in network mode [ 226.311855][ T8100] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 226.324902][ T8097] loop3: detected capacity change from 0 to 2048 [ 226.364481][ T8100] tipc: Enabling of bearer rejected, failed to enable media [ 226.401184][ T8097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.446748][ T8105] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.126913][ T8129] loop4: detected capacity change from 0 to 16 [ 227.193852][ T8129] erofs: (device loop4): mounted with root inode @ nid 36. [ 227.229208][ T8129] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 227.324258][ T8129] syz.4.1460: attempt to access beyond end of device [ 227.324258][ T8129] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 227.376245][ T8129] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 227.411731][ T8129] syz.4.1460: attempt to access beyond end of device [ 227.411731][ T8129] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 227.438204][ T8139] loop0: detected capacity change from 0 to 512 [ 227.438817][ T8129] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 227.460431][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 227.460448][ T26] audit: type=1800 audit(1777410247.581:71): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1460" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 227.486637][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.546428][ T8139] EXT4-fs: Ignoring removed nobh option [ 227.583005][ T8139] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 227.598610][ T8139] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 227.607463][ T8139] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.1463: inode has both inline data and extents flags [ 227.715901][ T8139] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1463: couldn't read orphan inode 13 (err -117) [ 227.772032][ T8139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.883119][ T8152] loop5: detected capacity change from 0 to 512 [ 227.922022][ T8152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.935518][ T8154] loop4: detected capacity change from 0 to 1024 [ 227.985077][ T8152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 228.010947][ T8154] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 228.032624][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 228.101844][ T8160] loop3: detected capacity change from 0 to 4096 [ 228.114796][ T8152] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.187915][ T6367] EXT4-fs (loop5): unmounting filesystem. [ 228.269762][ T8160] ntfs3: loop3: failed to convert "0080" to koi8-ru [ 228.344356][ T8160] ntfs3: loop3: failed to convert name for inode 1e. [ 228.498970][ T8168] netlink: 'syz.4.1474': attribute type 5 has an invalid length. [ 228.806351][ T8176] loop1: detected capacity change from 0 to 2048 [ 228.858660][ T8176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.972016][ T26] audit: type=1800 audit(1777410249.101:72): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1478" name="file2" dev="loop1" ino=1416 res=0 errno=0 [ 229.208990][ T8189] loop3: detected capacity change from 0 to 512 [ 229.264425][ T8189] EXT4-fs: Ignoring removed nobh option [ 229.315489][ T8189] EXT4-fs (loop3): orphan cleanup on readonly fs [ 229.442426][ T8189] EXT4-fs warning (device loop3): ext4_xattr_inode_get:492: inode #11: comm syz.3.1484: ea_inode file size=4294967295 entry size=6 [ 229.491857][ T8189] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 229.532416][ T8189] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1484: corrupted inode contents [ 229.601657][ T8189] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.1484: mark_inode_dirty error [ 229.641948][ T8189] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1484: corrupted inode contents [ 229.699340][ T8189] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2945: inode #15: comm syz.3.1484: mark_inode_dirty error [ 229.761451][ T8189] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2948: inode #15: comm syz.3.1484: mark inode dirty (error -117) [ 229.807386][ T8189] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 229.825123][ T8189] EXT4-fs (loop3): 1 orphan inode deleted [ 229.871563][ T8189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 230.224342][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 230.275158][ T8180] loop4: detected capacity change from 0 to 40427 [ 230.329806][ T8180] F2FS-fs (loop4): invalid crc value [ 230.392929][ T8180] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.411556][ T8217] loop3: detected capacity change from 0 to 16 [ 230.447133][ T8217] erofs: (device loop3): mounted with root inode @ nid 36. [ 230.587171][ T8180] F2FS-fs (loop4): Start checkpoint disabled! [ 230.647816][ T8180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 230.830432][ T8227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.283091][ T9] kworker/u4:0: attempt to access beyond end of device [ 231.283091][ T9] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 231.430594][ T8234] set_capacity_and_notify: 1 callbacks suppressed [ 231.430613][ T8234] loop5: detected capacity change from 0 to 16 [ 231.482842][ T8236] netlink: 'syz.1.1505': attribute type 7 has an invalid length. [ 231.490778][ T8236] netlink: 'syz.1.1505': attribute type 8 has an invalid length. [ 231.505401][ T8234] erofs: (device loop5): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 231.521992][ T8238] loop3: detected capacity change from 0 to 128 [ 231.529814][ T8238] EXT4-fs: Ignoring removed nobh option [ 231.586787][ T8238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.727666][ T8238] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.931764][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 232.349602][ T8260] loop0: detected capacity change from 0 to 16 [ 232.468112][ T8260] erofs: (device loop0): mounted with root inode @ nid 36. [ 232.470932][ T8264] loop5: detected capacity change from 0 to 256 [ 232.497855][ T8260] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 232.557297][ T8260] syz.0.1515: attempt to access beyond end of device [ 232.557297][ T8260] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 232.604317][ T8264] FAT-fs (loop5): Directory bread(block 64) failed [ 232.635896][ T8260] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 232.656639][ T8264] FAT-fs (loop5): Directory bread(block 65) failed [ 232.689757][ T8260] syz.0.1515: attempt to access beyond end of device [ 232.689757][ T8260] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 232.711590][ T8264] FAT-fs (loop5): Directory bread(block 66) failed [ 232.741629][ T8264] FAT-fs (loop5): Directory bread(block 67) failed [ 232.748332][ T8264] FAT-fs (loop5): Directory bread(block 68) failed [ 232.748861][ T8260] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 232.774763][ T8273] loop3: detected capacity change from 0 to 512 [ 232.811183][ T8264] FAT-fs (loop5): Directory bread(block 69) failed [ 232.829158][ T8273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.844593][ T8264] FAT-fs (loop5): Directory bread(block 70) failed [ 232.862476][ T26] audit: type=1800 audit(1777410252.991:73): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1515" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 232.870503][ T8264] FAT-fs (loop5): Directory bread(block 71) failed [ 232.920277][ T8273] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.930762][ T8277] Bluetooth: MGMT ver 1.22 [ 232.948541][ T8264] FAT-fs (loop5): Directory bread(block 72) failed [ 232.979516][ T8264] FAT-fs (loop5): Directory bread(block 73) failed [ 232.993889][ T8273] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 233.023269][ T8273] EXT4-fs (loop3): 1 truncate cleaned up [ 233.051612][ T8273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 233.237664][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 233.351153][ T8285] loop1: detected capacity change from 0 to 512 [ 233.422251][ T8285] EXT4-fs: Ignoring removed nobh option [ 233.461162][ T8285] EXT4-fs (loop1): orphan cleanup on readonly fs [ 233.603498][ T8285] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.1526: ea_inode file size=4294967295 entry size=6 [ 233.644951][ T8298] netlink: 'syz.5.1530': attribute type 21 has an invalid length. [ 233.681037][ T8285] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 233.704200][ T8285] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1526: corrupted inode contents [ 233.707304][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1530'. [ 233.718178][ T8285] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #15: comm syz.1.1526: mark_inode_dirty error [ 233.766207][ T8285] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1526: corrupted inode contents [ 233.822457][ T8285] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2945: inode #15: comm syz.1.1526: mark_inode_dirty error [ 233.854950][ T8285] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2948: inode #15: comm syz.1.1526: mark inode dirty (error -117) [ 233.860187][ T8303] loop4: detected capacity change from 0 to 128 [ 233.892086][ T8285] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 233.906859][ T8303] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 233.935211][ T8303] hpfs: filesystem error: improperly stopped [ 233.941883][ T8285] EXT4-fs (loop1): 1 orphan inode deleted [ 233.954048][ T8303] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 233.968766][ T8285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.987879][ T8303] hpfs: You really don't want any checks? You are crazy... [ 234.041492][ T8303] hpfs: Code page index out of array [ 234.055044][ T8303] hpfs: code page support is disabled [ 234.081489][ T8303] hpfs: hpfs_map_4sectors(): unaligned read [ 234.087571][ T8303] hpfs: hpfs_map_4sectors(): unaligned read [ 234.178038][ T8303] hpfs: filesystem error: unable to find root dir [ 234.294322][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 234.795851][ T26] audit: type=1326 audit(1777410254.921:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.4.1542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687439cdd9 code=0x0 [ 234.817693][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.090256][ T8300] loop0: detected capacity change from 0 to 40427 [ 235.100358][ T8300] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 235.122011][ T8300] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 235.187565][ T8300] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.238179][ T8338] loop3: detected capacity change from 0 to 512 [ 235.350366][ T8300] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 235.361557][ T8300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.504418][ T8338] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1547: corrupted inode contents [ 235.521963][ T8338] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #16: comm syz.3.1547: mark_inode_dirty error [ 235.535387][ T8331] loop1: detected capacity change from 0 to 32768 [ 235.564743][ T8338] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1547: corrupted inode contents [ 235.601054][ T8338] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1547: mark_inode_dirty error [ 235.620321][ T8338] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1547: corrupted inode contents [ 235.641174][ T8338] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 235.660973][ T8331] XFS (loop1): Mounting V5 Filesystem [ 235.661280][ T8338] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1547: corrupted inode contents [ 235.676422][ T8350] EXT4-fs: Ignoring removed nobh option [ 235.770320][ T8338] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.1547: mark_inode_dirty error [ 235.778561][ T8331] XFS (loop1): Ending clean mount [ 235.783322][ T8350] EXT4-fs (loop5): orphan cleanup on readonly fs [ 235.805402][ T8350] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.1549: ea_inode file size=4294967295 entry size=6 [ 235.823537][ T5091] XFS (loop1): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 235.840113][ T8350] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1549: corrupted inode contents [ 235.852937][ T5091] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 235.854102][ T8338] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 235.865040][ T5091] XFS (loop1): Unmount and run xfs_repair [ 235.880624][ T5091] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 235.891106][ T8350] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1549: mark_inode_dirty error [ 235.906905][ T5091] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 235.921814][ T8338] EXT4-fs (loop3): 1 truncate cleaned up [ 235.928129][ T8338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.939970][ T5091] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 235.949699][ T5091] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 235.958857][ T8350] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1549: corrupted inode contents [ 236.005030][ T8338] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.019556][ T8350] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2945: inode #15: comm syz.5.1549: mark_inode_dirty error [ 236.042454][ T5091] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 236.068109][ T5091] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 236.083689][ T8350] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2948: inode #15: comm syz.5.1549: mark inode dirty (error -117) [ 236.131156][ T5091] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.154242][ T5091] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.173500][ T5091] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.183158][ T8350] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 236.204560][ T8331] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 236.218682][ T26] audit: type=1800 audit(1777410256.351:75): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1547" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 236.250090][ T8350] EXT4-fs (loop5): 1 orphan inode deleted [ 236.271654][ T8331] XFS (loop1): Failed to initialize disk quotas. [ 236.278968][ T8350] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.423144][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 236.440540][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 236.481475][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 236.545966][ T4267] XFS (loop1): Unmounting Filesystem [ 236.613339][ T6367] EXT4-fs (loop5): unmounting filesystem. [ 236.767408][ T26] audit: type=1326 audit(1777410256.891:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329679cdd9 code=0x7ffc0000 [ 236.848646][ T26] audit: type=1326 audit(1777410256.931:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f329675d60e code=0x7ffc0000 [ 236.871124][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.938072][ T26] audit: type=1326 audit(1777410256.931:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f329675d60e code=0x7ffc0000 [ 237.046144][ T26] audit: type=1326 audit(1777410256.931:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329679cdd9 code=0x7ffc0000 [ 237.050936][ T8373] tmpfs: Too few inodes for current use [ 237.069067][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.176627][ T26] audit: type=1326 audit(1777410256.951:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f329679cdd9 code=0x7ffc0000 [ 237.255156][ T26] audit: type=1326 audit(1777410256.951:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329679cdd9 code=0x7ffc0000 [ 237.423039][ T8382] netlink: 'syz.5.1561': attribute type 7 has an invalid length. [ 237.455942][ T8382] netlink: 'syz.5.1561': attribute type 8 has an invalid length. [ 237.491461][ T8382] netlink: 'syz.5.1561': attribute type 13 has an invalid length. [ 237.511572][ T8378] netlink: 'syz.5.1561': attribute type 7 has an invalid length. [ 237.532880][ T8378] netlink: 'syz.5.1561': attribute type 8 has an invalid length. [ 237.540689][ T8378] netlink: 'syz.5.1561': attribute type 13 has an invalid length. [ 237.551787][ T5974] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 237.725560][ T8363] set_capacity_and_notify: 1 callbacks suppressed [ 237.725577][ T8363] loop4: detected capacity change from 0 to 32768 [ 237.753618][ T5974] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 237.788039][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.817856][ T5974] usb 4-1: config 0 descriptor?? [ 237.865086][ T5974] cp210x 4-1:0.0: cp210x converter detected [ 238.120441][ T8400] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 238.297980][ T8402] loop0: detected capacity change from 0 to 512 [ 238.347967][ T8402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.464919][ T5974] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 238.472953][ T5974] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 238.481185][ T5974] usb 4-1: cp210x converter now attached to ttyUSB0 [ 238.496649][ T5974] usb 4-1: USB disconnect, device number 8 [ 238.575097][ T5974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.590602][ T5974] cp210x 4-1:0.0: device disconnected [ 238.658978][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 238.946319][ T8419] loop1: detected capacity change from 0 to 8192 [ 238.988261][ T8419] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 239.001982][ T8419] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 239.012493][ T8419] REISERFS (device loop1): using ordered data mode [ 239.019084][ T8419] reiserfs: using flush barriers [ 239.034728][ T8419] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.106986][ T8419] REISERFS (device loop1): checking transaction log (loop1) [ 239.177613][ T8419] REISERFS (device loop1): Using r5 hash to sort names [ 239.199027][ T8419] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 239.268854][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1584'. [ 239.871695][ T8446] loop1: detected capacity change from 0 to 16 [ 239.903315][ T8446] erofs: (device loop1): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 240.183969][ T8451] tipc: Enabling of bearer rejected, failed to enable media [ 240.211122][ T8426] loop4: detected capacity change from 0 to 32768 [ 240.242435][ T8426] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1581 (8426) [ 240.307565][ T8426] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.353044][ T8426] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 240.388762][ T8426] BTRFS info (device loop4): using free space tree [ 240.753118][ T8426] BTRFS info (device loop4): enabling ssd optimizations [ 241.277117][ T8490] loop0: detected capacity change from 0 to 512 [ 241.350150][ T8490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.428305][ T8490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.532425][ T8490] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 241.633529][ T8490] EXT4-fs (loop0): 1 truncate cleaned up [ 241.639299][ T8490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.793302][ T8477] loop1: detected capacity change from 0 to 32768 [ 241.808256][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 242.121234][ T8506] loop0: detected capacity change from 0 to 2048 [ 242.280038][ T8506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 242.318796][ T8513] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 242.360906][ T8506] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.361671][ T4272] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 242.823142][ T8499] loop3: detected capacity change from 0 to 40427 [ 242.855279][ T8499] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 242.888272][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 242.919009][ T8499] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.001644][ T8499] F2FS-fs (loop3): invalid crc value [ 243.070824][ T8499] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 243.325114][ T8499] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 243.347563][ T8499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.406110][ T8523] f2fs_ckpt-7:3: attempt to access beyond end of device [ 243.406110][ T8523] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.428908][ T8538] loop1: detected capacity change from 0 to 512 [ 243.456381][ T8537] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1610'. [ 243.483715][ T8538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.554611][ T8538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.691546][ T8538] EXT4-fs (loop1): 1 truncate cleaned up [ 243.697273][ T8538] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.855960][ T8552] loop4: detected capacity change from 0 to 128 [ 243.910659][ T8552] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 244.023062][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 244.448406][ T8558] loop1: detected capacity change from 0 to 4096 [ 244.499675][ T8565] xt_l2tp: unknown flags: 51 [ 244.550116][ T8571] loop3: detected capacity change from 0 to 2048 [ 244.554557][ T8558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 244.568710][ T8571] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.635138][ T8561] loop4: detected capacity change from 0 to 8192 [ 244.653380][ T8561] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.685426][ T8561] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 244.696575][ T8561] FAT-fs (loop4): Filesystem has been set read-only [ 244.706996][ T8561] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 244.719394][ T8571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.753830][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 244.801493][ T8561] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 246.451606][ T8614] sp0: Synchronizing with TNC [ 246.455505][ T8617] loop0: detected capacity change from 0 to 128 [ 246.550391][ T8617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.631571][ T8617] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.663397][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.757930][ T8597] loop5: detected capacity change from 0 to 32768 [ 246.791037][ T8597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1643 (8597) [ 246.792374][ T8617] EXT4-fs error (device loop0): swap_inode_boot_loader:378: inode #5: comm syz.0.1652: iget: checksum invalid [ 246.844470][ T8597] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.877266][ T8597] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 246.926935][ T8597] BTRFS info (device loop5): setting nodatasum [ 246.950270][ T8597] BTRFS info (device loop5): force zlib compression, level 3 [ 246.978080][ T8597] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 247.015145][ T8597] BTRFS info (device loop5): use lzo compression, level 0 [ 247.054729][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 247.060697][ T8597] BTRFS info (device loop5): turning on flush-on-commit [ 247.084434][ T8597] BTRFS info (device loop5): enabling auto defrag [ 247.087940][ T8611] loop3: detected capacity change from 0 to 32768 [ 247.091030][ T8597] BTRFS info (device loop5): max_inline at 4096 [ 247.117662][ T8597] BTRFS info (device loop5): using free space tree [ 247.346181][ T8637] loop0: detected capacity change from 0 to 164 [ 247.449014][ T8637] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 247.516713][ T8597] BTRFS info (device loop5): enabling ssd optimizations [ 247.881689][ T6367] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.258125][ T8665] autofs4:pid:8665:autofs_fill_super: called with bogus options [ 248.571269][ T8649] loop3: detected capacity change from 0 to 32768 [ 248.597421][ T8649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1658 (8649) [ 248.609331][ T8668] loop1: detected capacity change from 0 to 8192 [ 248.659416][ T8668] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.692227][ T8668] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 248.713283][ T8675] loop5: detected capacity change from 0 to 64 [ 248.725691][ T8668] REISERFS (device loop1): using ordered data mode [ 248.733751][ T8668] reiserfs: using flush barriers [ 248.752799][ T8668] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.772147][ T8668] REISERFS (device loop1): checking transaction log (loop1) [ 248.800046][ T8649] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.821004][ T8649] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 248.860983][ T8649] BTRFS info (device loop3): using free space tree [ 249.072347][ T8689] netlink: 194188 bytes leftover after parsing attributes in process `syz.5.1671'. [ 249.083585][ T8689] netlink: zone id is out of range [ 249.089061][ T8689] netlink: zone id is out of range [ 249.095691][ T8689] netlink: zone id is out of range [ 249.101187][ T8689] netlink: zone id is out of range [ 249.106731][ T8689] netlink: zone id is out of range [ 249.112634][ T8689] netlink: zone id is out of range [ 249.118343][ T8689] netlink: zone id is out of range [ 249.129727][ T8689] netlink: zone id is out of range [ 249.135601][ T8689] netlink: zone id is out of range [ 249.140895][ T8689] netlink: zone id is out of range [ 249.302479][ T8649] BTRFS info (device loop3): enabling ssd optimizations [ 249.350999][ T8668] REISERFS (device loop1): Using tea hash to sort names [ 249.374159][ T8668] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 249.451557][ T8668] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 249.464289][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 249.464307][ T26] audit: type=1326 audit(1777410269.591:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.5.1673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f329679cdd9 code=0x0 [ 249.536636][ T8702] netlink: 'syz.4.1672': attribute type 2 has an invalid length. [ 249.611776][ T4273] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.208365][ T8716] ubi31: attaching mtd0 [ 250.560895][ T8725] loop5: detected capacity change from 0 to 1024 [ 250.665308][ T8725] hfsplus: bad catalog entry type [ 250.868239][ T4336] hfsplus: b-tree write err: -5, ino 25 [ 250.874021][ T8734] loop0: detected capacity change from 0 to 256 [ 250.909294][ T4336] hfsplus: b-tree write err: -5, ino 4 [ 250.919071][ T4336] hfsplus: b-tree write err: -5, ino 2 [ 250.969281][ T8734] FAT-fs (loop0): Directory bread(block 64) failed [ 251.012387][ T8734] FAT-fs (loop0): Directory bread(block 65) failed [ 251.033654][ T8734] FAT-fs (loop0): Directory bread(block 66) failed [ 251.065459][ T8734] FAT-fs (loop0): Directory bread(block 67) failed [ 251.081673][ T8734] FAT-fs (loop0): Directory bread(block 68) failed [ 251.102191][ T8734] FAT-fs (loop0): Directory bread(block 69) failed [ 251.131607][ T8734] FAT-fs (loop0): Directory bread(block 70) failed [ 251.138228][ T8734] FAT-fs (loop0): Directory bread(block 71) failed [ 251.169045][ T8734] FAT-fs (loop0): Directory bread(block 72) failed [ 251.186212][ T8734] FAT-fs (loop0): Directory bread(block 73) failed [ 251.362609][ T8742] loop5: detected capacity change from 0 to 24 [ 251.389760][ T8742] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 251.475961][ T8742] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 251.753611][ T8718] loop4: detected capacity change from 0 to 40427 [ 251.798048][ T8748] loop5: detected capacity change from 0 to 256 [ 251.823870][ T8718] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 251.839178][ T8718] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 251.880598][ T8718] F2FS-fs (loop4): invalid crc value [ 251.908069][ T8748] FAT-fs (loop5): Directory bread(block 64) failed [ 251.953474][ T8748] FAT-fs (loop5): Directory bread(block 65) failed [ 251.955665][ T8718] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.982948][ T8748] FAT-fs (loop5): Directory bread(block 66) failed [ 251.989665][ T8748] FAT-fs (loop5): Directory bread(block 67) failed [ 252.051560][ T8748] FAT-fs (loop5): Directory bread(block 68) failed [ 252.075907][ T8748] FAT-fs (loop5): Directory bread(block 69) failed [ 252.102432][ T8748] FAT-fs (loop5): Directory bread(block 70) failed [ 252.119452][ T8748] FAT-fs (loop5): Directory bread(block 71) failed [ 252.144207][ T8748] FAT-fs (loop5): Directory bread(block 72) failed [ 252.184254][ T8730] loop3: detected capacity change from 0 to 40427 [ 252.187622][ T8748] FAT-fs (loop5): Directory bread(block 73) failed [ 252.250080][ T8730] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 252.260562][ T8718] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 252.301999][ T8718] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.321178][ T8730] F2FS-fs (loop3): invalid crc value [ 252.433003][ T8730] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.671993][ T8730] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.842659][ T8768] loop5: detected capacity change from 0 to 64 [ 253.059704][ T4273] syz-executor: attempt to access beyond end of device [ 253.059704][ T4273] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.201489][ T4309] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.401462][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 253.409208][ T4309] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 253.430305][ T8779] exfat: Deprecated parameter 'namecase' [ 253.469471][ T8779] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 253.499397][ T4309] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 253.545748][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.545818][ T8781] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 253.608742][ T4309] usb 1-1: Product: syz [ 253.626778][ T4309] usb 1-1: Manufacturer: syz [ 253.633406][ T8781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.646470][ T4309] usb 1-1: SerialNumber: syz [ 253.700313][ T4309] usb 1-1: config 0 descriptor?? [ 253.742380][ T4309] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 253.791291][ T4309] usb 1-1: setting power ON [ 253.798145][ T4309] dvb-usb: bulk message failed: -22 (2/0) [ 253.824337][ T4309] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.853133][ T4272] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 253.880440][ T4272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 253.888669][ T4309] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 253.908831][ T4309] usb 1-1: media controller created [ 253.939598][ T8771] dvb-usb: bulk message failed: -22 (3/0) [ 253.992169][ T8771] cxusb: i2c wr: len=79 is too big! [ 253.992169][ T8771] [ 254.030567][ T4309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.139973][ T4309] usb 1-1: selecting invalid altsetting 6 [ 254.167253][ T4309] usb 1-1: digital interface selection failed (-22) [ 254.185031][ T4309] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 254.216271][ T4309] usb 1-1: setting power OFF [ 254.221619][ T4309] dvb-usb: bulk message failed: -22 (2/0) [ 254.238684][ T4309] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 254.292260][ T4309] (NULL device *): no alternate interface [ 254.358536][ T4309] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 254.400192][ T4309] usb 1-1: USB disconnect, device number 6 [ 254.561555][ T4308] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 254.686059][ T5091] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.741425][ T4308] usb 6-1: Using ep0 maxpacket: 32 [ 254.753237][ T4308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.797591][ T4308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.808669][ T4308] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 254.822712][ T8809] set_capacity_and_notify: 3 callbacks suppressed [ 254.822730][ T8809] loop1: detected capacity change from 0 to 256 [ 254.836057][ T4308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.855539][ T4308] usb 6-1: config 0 descriptor?? [ 254.881465][ T5091] usb 5-1: Using ep0 maxpacket: 16 [ 254.899649][ T5091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.921213][ T5091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.947085][ T5091] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.967642][ T5091] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.977439][ T5091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.010461][ T8809] FAT-fs (loop1): Directory bread(block 64) failed [ 255.037925][ T8809] FAT-fs (loop1): Directory bread(block 65) failed [ 255.049369][ T5091] usb 5-1: config 0 descriptor?? [ 255.066801][ T8809] FAT-fs (loop1): Directory bread(block 66) failed [ 255.080399][ T8809] FAT-fs (loop1): Directory bread(block 67) failed [ 255.099094][ T8809] FAT-fs (loop1): Directory bread(block 68) failed [ 255.105922][ T8809] FAT-fs (loop1): Directory bread(block 69) failed [ 255.113556][ T8809] FAT-fs (loop1): Directory bread(block 70) failed [ 255.120908][ T8809] FAT-fs (loop1): Directory bread(block 71) failed [ 255.128636][ T8809] FAT-fs (loop1): Directory bread(block 72) failed [ 255.135931][ T8809] FAT-fs (loop1): Directory bread(block 73) failed [ 255.284856][ T8819] loop0: detected capacity change from 0 to 1024 [ 255.303797][ T4308] ft260 0003:0403:6030.000A: item fetching failed at offset 0/2 [ 255.332310][ T4308] ft260 0003:0403:6030.000A: failed to parse HID [ 255.339047][ T4308] ft260: probe of 0003:0403:6030.000A failed with error -22 [ 255.491180][ T5091] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 255.562497][ T5091] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 255.572005][ T8823] loop3: detected capacity change from 0 to 1024 [ 255.603154][ T5091] microsoft 0003:045E:07DA.000B: no inputs found [ 255.632089][ T5091] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 255.655925][ T8823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 255.683219][ T5091] usb 6-1: USB disconnect, device number 3 [ 255.688605][ T8823] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.747277][ T8823] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 1: comm syz.3.1730: lblock 1 mapped to illegal pblock 1 (length 5) [ 255.748654][ T4310] usb 5-1: USB disconnect, device number 8 [ 255.824446][ T8827] loop1: detected capacity change from 0 to 4096 [ 255.873902][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880308][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.895996][ T8827] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 255.940069][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 255.977521][ T8831] fido_id[8831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 256.156301][ T8827] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 256.242344][ T8827] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 256.298351][ T8840] net_ratelimit: 2012 callbacks suppressed [ 256.298371][ T8840] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 256.448117][ T4267] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 256.482412][ T4267] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 256.713516][ T8850] loop5: detected capacity change from 0 to 2048 [ 256.762243][ T8854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1742'. [ 256.852459][ T8850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 256.860203][ T8860] syz.4.1745 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 257.047428][ T8864] loop0: detected capacity change from 0 to 1024 [ 257.140344][ T6367] EXT4-fs (loop5): unmounting filesystem. [ 257.146069][ T8868] loop3: detected capacity change from 0 to 128 [ 257.180766][ T8864] hfsplus: bad catalog entry type [ 257.224870][ T8868] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 257.316542][ T26] audit: type=1326 audit(1777410277.441:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 257.318280][ T8868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.407326][ T26] audit: type=1326 audit(1777410277.441:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 257.436407][ T26] audit: type=1326 audit(1777410277.491:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 257.466339][ T11] hfsplus: b-tree write err: -5, ino 25 [ 257.470814][ T8875] loop4: detected capacity change from 0 to 512 [ 257.480665][ T11] hfsplus: b-tree write err: -5, ino 4 [ 257.496745][ T11] hfsplus: b-tree write err: -5, ino 2 [ 257.513093][ T8874] loop5: detected capacity change from 0 to 2048 [ 257.523334][ T8875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 257.582662][ T8874] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 257.590154][ T26] audit: type=1326 audit(1777410277.491:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 257.615885][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.666296][ T8875] EXT4-fs (loop4): 1 truncate cleaned up [ 257.703107][ T8874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.716953][ T8875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.759144][ T26] audit: type=1326 audit(1777410277.491:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 257.883003][ T26] audit: type=1326 audit(1777410277.501:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 257.997343][ T8880] loop1: detected capacity change from 0 to 4096 [ 258.001418][ T26] audit: type=1326 audit(1777410277.501:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 258.046025][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 258.047604][ T8880] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 258.090142][ T26] audit: type=1326 audit(1777410277.501:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 258.120884][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 258.173467][ T8884] netlink: 'syz.3.1755': attribute type 14 has an invalid length. [ 258.244507][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 258.279102][ T8880] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 258.746547][ T8893] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 258.887992][ T26] audit: type=1800 audit(1777410279.011:92): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1759" name="file2" dev="loop3" ino=31 res=0 errno=0 [ 259.053024][ T62] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 259.456182][ T8912] SQUASHFS error: lzo decompression failed, data probably corrupt [ 259.501412][ T8912] SQUASHFS error: Failed to read block 0x91: -5 [ 259.507809][ T8912] SQUASHFS error: Unable to read metadata cache entry [8f] [ 259.542214][ T8912] SQUASHFS error: Unable to read inode 0x11f [ 260.552669][ T8946] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 260.807662][ T8958] bond0: option ad_select: unable to set because the bond device is up [ 261.194180][ T8972] set_capacity_and_notify: 4 callbacks suppressed [ 261.194198][ T8972] loop5: detected capacity change from 0 to 64 [ 262.006828][ T8994] device ipvlan2 entered promiscuous mode [ 262.080536][ T8998] loop3: detected capacity change from 0 to 256 [ 262.176342][ T8959] loop4: detected capacity change from 0 to 40427 [ 262.250566][ T8959] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 262.304089][ T8959] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.352500][ T8959] F2FS-fs (loop4): invalid crc value [ 262.371142][ T9004] loop1: detected capacity change from 0 to 512 [ 262.426887][ T9004] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 262.438516][ T8959] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 262.542828][ T9004] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 262.594222][ T9004] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 262.654514][ T9004] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 262.662959][ T8959] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 262.682297][ T9004] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 262.699732][ T8959] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 262.700700][ T9004] EXT4-fs (loop1): failed to initialize system zone (-117) [ 262.741528][ T9004] EXT4-fs (loop1): mount failed [ 262.832605][ T9005] f2fs_ckpt-7:4: attempt to access beyond end of device [ 262.832605][ T9005] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.071634][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 263.625535][ T9030] loop0: detected capacity change from 0 to 4096 [ 263.652893][ T9030] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 263.773255][ T9030] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 263.788083][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1825'. [ 263.827362][ T9030] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 263.935424][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1818'. [ 264.040628][ T4275] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 264.053843][ T4275] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 264.614682][ T9047] loop1: detected capacity change from 0 to 8192 [ 264.662850][ T9047] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.380991][ T9074] loop5: detected capacity change from 0 to 4096 [ 265.411735][ T9074] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 265.517073][ T9074] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 265.763563][ T4310] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 265.994158][ T4310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 266.032141][ T4310] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 266.067512][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.099742][ T4310] usb 2-1: config 0 descriptor?? [ 266.203518][ T9072] loop4: detected capacity change from 0 to 32768 [ 266.387898][ T26] audit: type=1326 audit(1777410286.511:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.5.1855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f329679cdd9 code=0x0 [ 266.730184][ T4310] usb 2-1: string descriptor 0 read error: -71 [ 266.743515][ T4310] uclogic 0003:5543:004D.000C: failed retrieving string descriptor #200: -71 [ 266.779336][ T4310] uclogic 0003:5543:004D.000C: failed retrieving pen parameters: -71 [ 266.806794][ T4310] uclogic 0003:5543:004D.000C: failed probing pen v2 parameters: -71 [ 266.834171][ T4310] uclogic 0003:5543:004D.000C: failed probing parameters: -71 [ 266.858428][ T4310] uclogic: probe of 0003:5543:004D.000C failed with error -71 [ 266.919664][ T4310] usb 2-1: USB disconnect, device number 8 [ 267.380457][ T9121] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1865'. [ 267.421534][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 267.588825][ T9129] loop1: detected capacity change from 0 to 8 [ 267.670717][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 268.023340][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 268.077528][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 268.107323][ T9141] netlink: 'syz.1.1875': attribute type 19 has an invalid length. [ 268.108566][ T9139] loop3: detected capacity change from 0 to 4096 [ 268.131254][ T9141] netlink: 'syz.1.1875': attribute type 20 has an invalid length. [ 268.157438][ T9147] device ipvlan2 entered promiscuous mode [ 268.169048][ T9139] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 268.391449][ T9139] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 268.432841][ T9139] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 268.594999][ T4273] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 268.612914][ T4273] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 268.641197][ T9156] loop0: detected capacity change from 0 to 4096 [ 268.712410][ T9156] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 268.812175][ T9156] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 268.943308][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 269.305155][ T9180] bridge0: Device is already in use. [ 270.167717][ T9197] loop4: detected capacity change from 0 to 32768 [ 270.191215][ T9197] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 270.200239][ T9197] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 270.253572][ T9197] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 270.269984][ T4314] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 270.281402][ T4314] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 270.354468][ T4314] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms [ 270.372720][ T4314] gfs2: fsid=syz:syz.0: jid=0: Done [ 270.381069][ T9197] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 270.699230][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 270.708976][ T9218] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1910'. [ 270.982292][ T9228] loop1: detected capacity change from 0 to 8 [ 271.065707][ T9228] cramfs: bad data blocksize 3959421443 [ 271.107333][ T9228] cramfs: bad data blocksize 4294965915 [ 271.126099][ T9228] cramfs: bad data blocksize 802397048 [ 271.151983][ T9228] cramfs: bad data blocksize 4294742353 [ 271.168891][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'. [ 271.183166][ T9228] cramfs: bad data blocksize 3367320904 [ 271.202117][ T9228] cramfs: bad data blocksize 859179931 [ 271.221512][ T9228] cramfs: bad data blocksize 3436389781 [ 271.249527][ T9228] cramfs: bad data blocksize 4294365136 [ 271.269731][ T9228] cramfs: bad data blocksize 4294967040 [ 271.297476][ T9235] loop5: detected capacity change from 0 to 512 [ 271.301522][ T9228] cramfs: bad data blocksize 3959421443 [ 271.331781][ T26] audit: type=1800 audit(1777410291.461:94): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1916" name="file2" dev="loop1" ino=268 res=0 errno=0 [ 271.399392][ T9235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 271.484222][ T9235] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.650247][ T6367] EXT4-fs (loop5): unmounting filesystem. [ 271.704288][ T9246] netlink: 'syz.1.1923': attribute type 298 has an invalid length. [ 271.746272][ T9215] loop0: detected capacity change from 0 to 32768 [ 272.283169][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1933'. [ 272.622328][ T26] audit: type=1326 audit(1777410292.751:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 272.731905][ T26] audit: type=1326 audit(1777410292.751:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 272.791690][ T1202] block nbd1: Attempted send on invalid socket [ 272.798639][ T1202] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 272.814711][ T9280] vxfs: unable to read disk superblock at 1 [ 272.824014][ T1202] block nbd1: Attempted send on invalid socket [ 272.830244][ T1202] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 272.839633][ T9280] vxfs: unable to read disk superblock at 8 [ 272.845834][ T9280] vxfs: can't find superblock. [ 272.851629][ T26] audit: type=1326 audit(1777410292.751:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 272.933416][ T26] audit: type=1326 audit(1777410292.751:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 272.958052][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1942'. [ 272.961127][ T26] audit: type=1326 audit(1777410292.751:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 272.989592][ T4310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 272.990143][ T26] audit: type=1326 audit(1777410292.751:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 272.990182][ T26] audit: type=1326 audit(1777410292.751:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687439cdd9 code=0x7ffc0000 [ 273.182749][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.183058][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 273.210533][ T4310] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 273.210569][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.210611][ T4310] usb 1-1: Product: syz [ 273.210628][ T4310] usb 1-1: Manufacturer: syz [ 273.210644][ T4310] usb 1-1: SerialNumber: syz [ 273.214044][ T4310] usb 1-1: config 0 descriptor?? [ 273.363288][ T9294] loop5: detected capacity change from 0 to 256 [ 273.448442][ T9294] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 273.629989][ T26] audit: type=1800 audit(1777410293.751:102): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1945" name="file1" dev="loop5" ino=1048798 res=0 errno=0 [ 273.632854][ T4310] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 273.632887][ T4310] airspy 1-1:0.0: Could not detect board [ 273.632952][ T4310] airspy: probe of 1-1:0.0 failed with error -71 [ 273.640093][ T4310] usb 1-1: USB disconnect, device number 7 [ 274.090127][ T9286] tty tty2: ldisc open failed (-12), clearing slot 1 [ 274.270555][ T9292] loop3: detected capacity change from 0 to 131072 [ 274.280830][ T9292] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 274.288741][ T9292] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 274.296456][ T9292] F2FS-fs (loop3): QUOTA feature is enabled, so ignore jquota_fmt [ 274.304576][ T9292] F2FS-fs (loop3): inline_xattr_size option should be set with inline_xattr option [ 274.405554][ T9299] loop5: detected capacity change from 0 to 256 [ 274.472671][ T9289] loop1: detected capacity change from 0 to 40427 [ 274.488385][ T9301] device erspan1 entered promiscuous mode [ 274.515827][ T9289] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 274.544944][ T9299] FAT-fs (loop5): Directory bread(block 64) failed [ 274.567853][ T9289] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 274.586338][ T9299] FAT-fs (loop5): Directory bread(block 65) failed [ 274.617814][ T9289] F2FS-fs (loop1): invalid crc value [ 274.628366][ T9299] FAT-fs (loop5): Directory bread(block 66) failed [ 274.648413][ T9299] FAT-fs (loop5): Directory bread(block 67) failed [ 274.677035][ T9299] FAT-fs (loop5): Directory bread(block 68) failed [ 274.699845][ T9289] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.728704][ T9299] FAT-fs (loop5): Directory bread(block 69) failed [ 274.755326][ T9305] loop4: detected capacity change from 0 to 4096 [ 274.774564][ T9299] FAT-fs (loop5): Directory bread(block 70) failed [ 274.802748][ T9299] FAT-fs (loop5): Directory bread(block 71) failed [ 274.814197][ T9299] FAT-fs (loop5): Directory bread(block 72) failed [ 274.838913][ T9305] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 274.841460][ T9299] FAT-fs (loop5): Directory bread(block 73) failed [ 274.892606][ T9305] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 274.932101][ T9289] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 274.939328][ T9289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 274.990303][ T9305] ntfs: volume version 3.1. [ 275.470894][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 275.534674][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 275.618595][ T9323] loop0: detected capacity change from 0 to 512 [ 275.663585][ T9323] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 275.754154][ T9323] EXT4-fs (loop0): orphan cleanup on readonly fs [ 275.767218][ T9323] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.1959: Block bitmap for bg 0 marked uninitialized [ 275.791539][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 275.794628][ T9325] loop4: detected capacity change from 0 to 512 [ 275.907475][ T9323] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 275.935183][ T9323] EXT4-fs (loop0): 1 orphan inode deleted [ 275.941006][ T9323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 275.987824][ T9325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 276.001477][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 276.008606][ T27] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.022873][ T27] usb 6-1: config 0 has no interface number 0 [ 276.032397][ T27] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 276.037473][ T9325] ext4 filesystem being mounted at /356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 276.051386][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.082824][ T9323] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 276.092430][ T27] usb 6-1: Product: syz [ 276.096685][ T27] usb 6-1: Manufacturer: syz [ 276.101496][ T27] usb 6-1: SerialNumber: syz [ 276.110215][ T9323] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 276.126092][ T9323] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.1959: Block bitmap for bg 0 marked uninitialized [ 276.149962][ T27] usb 6-1: config 0 descriptor?? [ 276.162211][ T27] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 276.214334][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 276.322821][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 276.483989][ T9333] loop0: detected capacity change from 0 to 64 [ 276.531773][ T9315] loop3: detected capacity change from 0 to 32768 [ 276.620377][ T9315] JBD2: Ignoring recovery information on journal [ 276.662934][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 276.673219][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 276.683476][ T9338] netlink: 'syz.1.1958': attribute type 15 has an invalid length. [ 276.784856][ T27] gspca_spca1528: reg_w err -71 [ 276.811612][ T27] spca1528: probe of 6-1:0.1 failed with error -71 [ 276.831936][ T4310] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 276.841127][ T27] usb 6-1: USB disconnect, device number 4 [ 276.876364][ T9315] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 276.951731][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 277.031555][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 277.033460][ T4310] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 277.033491][ T4310] usb 5-1: config 0 has no interface number 0 [ 277.035871][ T4310] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 277.035903][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.035925][ T4310] usb 5-1: Product: syz [ 277.035942][ T4310] usb 5-1: Manufacturer: syz [ 277.035958][ T4310] usb 5-1: SerialNumber: syz [ 277.038029][ T4310] usb 5-1: config 0 descriptor?? [ 277.042719][ T4310] smsc95xx v2.0.0 [ 277.117977][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 277.432035][ T9356] loop1: detected capacity change from 0 to 512 [ 277.458911][ T9356] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 277.506766][ T9356] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1970: Invalid inode bitmap blk 4 in block_group 0 [ 277.525259][ T9356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 277.656525][ T4310] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 277.693035][ T4310] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 277.751508][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 277.760840][ T4310] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 277.799005][ T4310] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 277.832679][ T4310] usb 5-1: USB disconnect, device number 9 [ 278.325718][ T9384] loop4: detected capacity change from 0 to 256 [ 278.339877][ T9384] exfat: Deprecated parameter 'namecase' [ 278.345849][ T9384] exfat: Deprecated parameter 'utf8' [ 278.367740][ T9384] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 278.403135][ T4310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 278.427730][ T4314] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 278.576277][ T5974] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.591666][ T4310] usb 4-1: Using ep0 maxpacket: 32 [ 278.605316][ T4310] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 278.611621][ T9386] loop4: detected capacity change from 0 to 8192 [ 278.622112][ T4310] usb 4-1: config 0 has no interface number 0 [ 278.629193][ T4314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.635822][ T4310] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 278.644136][ T4314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.660916][ T4310] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.671904][ T4314] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 278.682007][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.690432][ T9386] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 278.710509][ T4310] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.717548][ T4314] usb 6-1: config 0 descriptor?? [ 278.732630][ T9386] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 278.749330][ T4310] usb 4-1: config 0 interface 196 has no altsetting 0 [ 278.752957][ T9386] REISERFS (device loop4): using ordered data mode [ 278.768880][ T4310] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 278.769717][ T9386] reiserfs: using flush barriers [ 278.808842][ T9386] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.810628][ T5974] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.827084][ T9386] REISERFS (device loop4): checking transaction log (loop4) [ 278.860162][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.860829][ T9386] REISERFS (device loop4): Using rupasov hash to sort names [ 278.875981][ T9386] REISERFS (device loop4): using 3.5.x disk format [ 278.882943][ T4310] usb 4-1: Product: syz [ 278.884862][ T9386] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.887270][ T4310] usb 4-1: Manufacturer: syz [ 278.900392][ T9386] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.912456][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.929483][ T5974] usb 1-1: Product: syz [ 278.934032][ T4310] usb 4-1: SerialNumber: syz [ 278.939768][ T5974] usb 1-1: Manufacturer: syz [ 278.961413][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 278.961433][ T26] audit: type=1326 audit(1777410299.071:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 278.961594][ T9386] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.967618][ T26] audit: type=1326 audit(1777410299.071:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 279.025737][ T4310] usb 4-1: config 0 descriptor?? [ 279.030904][ T5974] usb 1-1: SerialNumber: syz [ 279.036435][ T9375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.074456][ T5974] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 279.133009][ T26] audit: type=1326 audit(1777410299.071:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 279.150012][ T9386] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 279.158236][ T26] audit: type=1326 audit(1777410299.081:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 279.173061][ T4314] isku 0003:1E7D:319C.000D: collection stack underflow [ 279.213177][ T5279] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.227749][ T4314] isku 0003:1E7D:319C.000D: item 0 4 0 12 parsing failed [ 279.236311][ T9386] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 279.253196][ T4314] isku 0003:1E7D:319C.000D: parse failed [ 279.266261][ T4314] isku: probe of 0003:1E7D:319C.000D failed with error -22 [ 279.271446][ T26] audit: type=1326 audit(1777410299.081:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1439cdd9 code=0x7ffc0000 [ 279.520504][ T4310] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 279.550683][ T4310] ipheth: probe of 4-1:0.196 failed with error -22 [ 279.656392][ T4310] usb 6-1: USB disconnect, device number 5 [ 279.762127][ T9399] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1989'. [ 279.849179][ T5974] usb 4-1: USB disconnect, device number 9 [ 280.018773][ T4314] usb 1-1: USB disconnect, device number 8 [ 280.050091][ T9403] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 280.281684][ T5279] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 280.289435][ T5279] ath9k_htc: Failed to initialize the device [ 280.309707][ T9409] loop4: detected capacity change from 0 to 16 [ 280.316056][ T4314] usb 1-1: ath9k_htc: USB layer deinitialized [ 280.361081][ T9409] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 280.520505][ T9397] loop1: detected capacity change from 0 to 32768 [ 280.606489][ T26] audit: type=1800 audit(1777410300.731:109): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1990" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 280.643297][ T9397] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 280.643297][ T9397] [ 280.694168][ T9397] ERROR: (device loop1): remounting filesystem as read-only [ 280.714005][ T9397] ialloc: diAlloc returned -5! [ 280.797849][ T9415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1998'. [ 280.896286][ T9417] loop3: detected capacity change from 0 to 1024 [ 280.979177][ T9413] loop4: detected capacity change from 0 to 8192 [ 281.036099][ T9413] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.156829][ T9413] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 281.163601][ T4342] hfsplus: b-tree write err: -5, ino 25 [ 281.166949][ T9413] REISERFS (device loop4): using ordered data mode [ 281.178571][ T9413] reiserfs: using flush barriers [ 281.190007][ T4342] hfsplus: b-tree write err: -5, ino 4 [ 281.211807][ T9413] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.213026][ T4342] hfsplus: b-tree write err: -5, ino 2 [ 281.272574][ T9413] REISERFS (device loop4): checking transaction log (loop4) [ 281.321688][ T9413] REISERFS (device loop4): Using r5 hash to sort names [ 281.329016][ T9413] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 281.447990][ T26] audit: type=1804 audit(1777410301.571:110): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1997" name="/newroot/366/file1/file1" dev="loop4" ino=2 res=1 errno=0 [ 281.454131][ T9425] netlink: 'syz.1.2003': attribute type 27 has an invalid length. [ 281.827243][ T9407] loop5: detected capacity change from 0 to 40427 [ 281.847412][ T9407] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 281.891428][ T9407] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 281.946341][ T9407] F2FS-fs (loop5): invalid crc value [ 281.998508][ T9407] F2FS-fs (loop5): Found nat_bits in checkpoint [ 282.010587][ T9439] loop4: detected capacity change from 0 to 512 [ 282.067861][ T9442] loop1: detected capacity change from 0 to 1024 [ 282.177731][ T9439] EXT4-fs (loop4): 1 truncate cleaned up [ 282.191496][ T9439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.274506][ T9439] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 45 (only 1 groups) [ 282.301745][ T9407] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 282.308890][ T9407] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 282.403775][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 282.564689][ T9455] loop0: detected capacity change from 0 to 256 [ 282.630430][ T9455] exfat: Deprecated parameter 'utf8' [ 282.657218][ T9455] exfat: Deprecated parameter 'utf8' [ 282.687707][ T9455] exfat: Deprecated parameter 'namecase' [ 282.701447][ T9455] exfat: Deprecated parameter 'namecase' [ 282.751884][ T6367] syz-executor: attempt to access beyond end of device [ 282.751884][ T6367] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.773887][ T9455] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 282.992426][ T9463] Bluetooth: MGMT ver 1.22 [ 283.209146][ T9465] RDS: rds_bind could not find a transport for feff::, load rds_tcp or rds_rdma? [ 283.502655][ T9471] loop5: detected capacity change from 0 to 16 [ 283.557524][ T9471] erofs: (device loop5): mounted with root inode @ nid 36. [ 283.617820][ T9471] syz.5.2018: attempt to access beyond end of device [ 283.617820][ T9471] loop5: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 283.680076][ T9471] syz.5.2018: attempt to access beyond end of device [ 283.680076][ T9471] loop5: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 283.709626][ T9459] loop4: detected capacity change from 0 to 32768 [ 283.838986][ T9459] read_mapping_page failed! [ 283.876316][ T9459] ERROR: (device loop4): txCommit: [ 283.876316][ T9459] [ 284.002884][ T9480] mkiss: ax0: crc mode is auto. [ 284.117142][ T107] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 284.117451][ T107] ------------[ cut here ]------------ [ 284.117459][ T107] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 284.117481][ T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 284.117500][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 284.117519][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.117530][ T107] RIP: 0010:txUnlock+0xc87/0xcb0 [ 284.117560][ T107] Code: ff 4d 2e 07 0f 0b e8 98 05 8e fe 48 c7 c7 00 4a c6 8a 48 c7 c6 f9 45 c6 8a ba a4 03 00 00 48 c7 c1 e0 56 c6 8a e8 d9 4d 2e 07 <0f> 0b e8 72 05 8e fe 48 c7 c7 00 4a c6 8a 48 c7 c6 f9 45 c6 8a ba [ 284.117577][ T107] RSP: 0018:ffffc90002d17d28 EFLAGS: 00010246 [ 284.117596][ T107] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 92b52ccc317b2f00 [ 284.117611][ T107] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 284.117624][ T107] RBP: ffffc9000288a090 R08: ffffc90002d17a27 R09: 1ffff920005a2f44 [ 284.117639][ T107] R10: dffffc0000000000 R11: fffff520005a2f45 R12: ffff88801cf68c98 [ 284.117653][ T107] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888027f59094 [ 284.117667][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 284.117683][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.117698][ T107] CR2: 0000001b2fb22ff8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 284.117717][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.117729][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.117742][ T107] Call Trace: [ 284.117749][ T107] [ 284.117762][ T107] ? lockdep_hardirqs_on+0x94/0x140 [ 284.117797][ T107] jfs_lazycommit+0x56a/0xa70 [ 284.117823][ T107] ? txFreelock+0x5a0/0x5a0 [ 284.117845][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 284.117866][ T107] ? do_task_dead+0xd0/0xd0 [ 284.117890][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 284.117912][ T107] ? __kthread_parkme+0x162/0x1c0 [ 284.117940][ T107] kthread+0x29d/0x330 [ 284.117956][ T107] ? txFreelock+0x5a0/0x5a0 [ 284.117976][ T107] ? kthread_blkcg+0xd0/0xd0 [ 284.117993][ T107] ret_from_fork+0x1f/0x30 [ 284.118025][ T107] [ 284.118031][ T107] Modules linked in: [ 284.118043][ T107] ---[ end trace 0000000000000000 ]--- [ 284.118051][ T107] RIP: 0010:txUnlock+0xc87/0xcb0 [ 284.118074][ T107] Code: ff 4d 2e 07 0f 0b e8 98 05 8e fe 48 c7 c7 00 4a c6 8a 48 c7 c6 f9 45 c6 8a ba a4 03 00 00 48 c7 c1 e0 56 c6 8a e8 d9 4d 2e 07 <0f> 0b e8 72 05 8e fe 48 c7 c7 00 4a c6 8a 48 c7 c6 f9 45 c6 8a ba [ 284.118090][ T107] RSP: 0018:ffffc90002d17d28 EFLAGS: 00010246 [ 284.118108][ T107] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 92b52ccc317b2f00 [ 284.118123][ T107] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 284.118136][ T107] RBP: ffffc9000288a090 R08: ffffc90002d17a27 R09: 1ffff920005a2f44 [ 284.118150][ T107] R10: dffffc0000000000 R11: fffff520005a2f45 R12: ffff88801cf68c98 [ 284.118166][ T107] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888027f59094 [ 284.118180][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 284.118198][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.118212][ T107] CR2: 0000001b2fb22ff8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 284.118230][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.118242][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.118257][ T107] Kernel panic - not syncing: Fatal exception [ 284.118780][ T107] Kernel Offset: disabled [ 284.467109][ T107] Rebooting in 86400 seconds..