last executing test programs: 12m13.207623018s ago: executing program 3 (id=3152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_delrule={0x40, 0x21, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7, 0x2}, [@FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e22}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) 12m12.910382096s ago: executing program 3 (id=3157): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 12m12.532168648s ago: executing program 3 (id=3162): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r0, 0x0, 0x0) 12m12.275499503s ago: executing program 3 (id=3166): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12m11.074264903s ago: executing program 3 (id=3185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12m10.897931984s ago: executing program 4 (id=3188): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e21, 0xffff8000, @mcast1, 0x8}, {0xa, 0xffff, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, {[0x6, 0x3cecb818, 0x101, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) 12m10.671123947s ago: executing program 4 (id=3191): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xb3, @loopback, 0x7fffffff}}]}, 0x60}}, 0x10) 12m10.398388213s ago: executing program 4 (id=3195): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x219) 12m10.237138662s ago: executing program 4 (id=3196): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jEuNssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9njnn85Hsn/fMmTnPnHnOmf3t+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vm72U7Usy+p/8r82Z9kL6v/eOLE5X/bqGz1CAAAAYLV+lf/93C1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0Q1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39Lh9vMftS3bAEhuLn8fkD7Y9/+fmYpdmt2aj+W3b29zr8dqGoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fmd9W2/O4raGGra1tT5DfvbY8TiGWtjH25u2tfiY0U9em038/GePHf+7C8/e3q723A1Nj1eMc8e2+jg/EZYUY61lG9I+ieMcahjn1javyXDTOGv5/er/bh3nc8sc5/DiMNdV62s+ng3l//5uvp9GGn+sl/bT1rDsF3dlWXZ5cdit6yzZVjaUbWpaMrT4+owXM7L+GPWp9OJsZEXz9M5lzNN6ndnePE9bj4n4+t8Z7jfSYQyNL9NPPj7W8Lr/cuFa5mlUf9adjpXWObjWx0q/zME4L76bP+kn2s7B7eH5P3Z35znYdu60mYPpeTfMwW295uDQ2HA+5vQi1PL7LM7BXU3rD+dbquX1mbu7z8GpC6fPTc1/9GP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU4Xf1/j3u5/m7KhdAxsC/suHgP3tKzbOFUXvji25Px7rcfheJfjcHPLumt9HI60Prna+hyQS+d0cWy8u77Tx68MZR2Osfz12bn64zA974bjcKThOGz7ntLmOBxZxnFYX+fczuV9zzLS8KfdGDq/F6xuDm5umIOt34+0zsG1/n6kX+bgeJgX39/Z+b1gaxjvE5Mr/X5kONvU9KY6tPh0w7mnviR9vz9+IC/t5uUd9RtuGssuzs+ev//RYxcunN+VhbIuXtIwV1rn66aG55Qtma9DK56vh+de/sQdbZZvDvtq/L76X+MdX6v6Onvv7/5a5e9u7fdn09LdWShrbL33Z7t38/r+HMuyz3/r4w9/47HPv67j/qz3m5+YWv334qkvbTj/jnY4/8a+//lie+mhHh8eHSmO3+G0d0abzsfNL9VIfu6q5dt+bmp55+PR8Ge9z8e3djkfb2lZd63Px6OtTy6ej2u9ftqxOq2v53iYJ6emu5+P6+ts2b3SOTmyZE42HmN3hVoL+/9VoVNIp/CGudNp3qZtjYyMhuc1ErfQPE/3NK0/Gnqz+rae2h2+KUyjXN483XFXsf5ww/2i9ZqnEy3rrvU8TT/76jRPa71++nZtWl/P8TAvbt3TfZ7W13l67+rPnRvjPxvOnWO95uDo8Fh9zKNpEubn+2xhY5yD92fHs7PZqWwmv3Usn0+1fFuTDyzvXDkW/qz3uXJLlzm4o2XdtZ6D6X2s09yrjSx98mug9fUcD/PiyQe6z8H6Oq/ffw3fuzYtaT5X7ghL0joN37u2/nyt08+87mjZTddrroyEcX5rf/efzdbXOXVgpX1m9/10b1hyU5v91Hr8djqmZrL12U9bwjifPdB5P9XHU1/ncweXOZ8OZ1l26cMP5j/vDb9fuXTxe19t+r1Lu9/pXPrwgz994Yl/Xsn4ARh8zxdlU/Fe1/BDtOX8/h8AAAAYCLHvHwo10f8DAABAacS+P/6v8ET/DwAAAKUR+/6RUJMy9P9/3HuVLa9/du75S1lK5i8E8fa0Gx4q1osZ1+nw9cTCovryB788+9//dGl5wxvKsuyXD/1R2/W3PBTHVZgI47z6hublS3z1vmVt++gjl9J2G/PrXwiPH5/PcqdBuwjudJZlX7/lM/l2Jt53Ja9PP3Q0rw9ffuLx+jrPHSy+jvd/5iXF+n8dwr+HTxxruv8zYT/8KNTpt7TfH/F+X7nyqq3737O4vXi/2rab86f95PuLx42fk/PZx4v1437uNP5vfPqpr9TXf/SV7cd/aaj9+J8Kj/vlUP/nZcX6ja9B/et4v0+G8cftxfvd/6Vvth3/1U8V6597Y7He0VDj9neEr7e/8dm5xv31aO1Y0/PK3lSsF7c//b0/zW+Pjxcfv3X840euNO2P1vnx9L8XjzPVsn5cHrcT/WPL9uuP0zg/4/af+pOjTfu51/avPvzMy+qP27r9e1vWO/fhnfn2Fx+v+ROb/uaTn2m7vTiew/9wrun5HH5nOI7D9p98f5iP4fb/vVo8XuunKxx9Z/P5J67/hc2Xmp5P9OafF9u/+pqTed0wvnHTTS944c2XX1Hfd1n23Q3F4/Xa/sm/Pds0/i/eVuyPeHvM6Lduv5O4/fMfmTxzdv7i3Ezaq4/dkn92zluL8cTx3hLOra1fHzl74QOz5yemJ6azbKK8H6F3zb4U6k+Lcrn72gtLzqA7Hwmv5x1/+fVNd//bp+Py/3h3sfzKW4r3rXvCep8NyzeH129l21/qyTtvy4/v2tNhhAtLPy94NbZu//GBZa0Ynn/r9wVxvp976Qfy/VC/LX/fiMf1Ksf/g5nicb4W9utC+GTmbbctbq9x/fjZCFfeVRzvq95/4TQXX9e/D6/3235UPH4cV3y+Pwjfx3xzS/P5Ls6Pr10aan38/FM8LofzSXa5uD2uFff3leduazu8+Dkk2eXb86//LD3O7St6mp3Mf3R+6tTcmYuPTl2Ynb8wNf/Rjx05ffbimQtH8s/yPPLBLnf9q3uyLFs8P23Kz08zs/v2ZvnZ6mxRrrNVjD+32vGfe+T4zP7pu2dmTxy7eOLCI+dmz588Pj9/fHZm/u5jJ07MfqTX/edmDu3afXDP/t2TJ+dmDh04eHDPwcm5M2frwygG1cO+6Q9Nnjl/JL/L/KG9B3c98MDe6cnTZ2dmD+2fnp682Ov++XvTZP3efzh5fvbUsQtzp2cn5+c+Nnto18F9+3b3/DTA0+dOzE9Mnb94Zuri/Oz5qeK5TFzIF9ff+3rdn3Ka/8/i+9lWteKD+LJ33LsvfT5r3Zc/3vGhilVaPkD02fBZNN9+0bkDy/k69v2joSZl6P8BAACAXOz7x0JN9P8AAABQGrHv3xBqov8HAACA0oh9/3io6b8EVKT/L13+f8ulZW1f/l/+v3F/yf9XLP//rn7L/xfnC/n/tbHa/L38fyD/L/+f8vNjWZatT37++oxf/l/+nxup3/L/se/fmGV+/w8AAAAlFfv+TaEm+n8AAAAojdj33xRqov8HAACA0oh9/wtCTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r+T4hOh5f/np7IbmJ9fi/GvMP9/eS3HfwPy/xsbv5D/px/1W/4/9v0vDDWpSP8PAAAAVRD7/ptDTfT/AAAAUBqx778l1ET/DwAAAKUR+/7NoSYV6f/l/1eV/0+ZK/n/5vHL/zeT/w/zQf5f/n8dyP93J//fg/z/Db1+/qCP3/X/5f9Zqt/y/7Hvf1GoSUX6fwAAACit0cV/xr7/xaEm+n8AAADoPyPXdrfY978k1GRJ/3+NGwAAAABuuNj335q1BMEr8vt/+X/X/5f/l/+X/2+//eXn/4cz+f/+If/fnfx/D/L/8v/Vzf+PZ/L/XAf9lv/P+/5sPHtpqElF+n8AAACogtj33xZqov8HAACA0oh9//8LNdH/AwAAQGnEvn9LqElF+n/5/9Lk/3/R+NLJ/8v/d9u+/L/r/5eZ/H938v89yP/L/1c3/+/6/1wX/Zb/j33/7aEmFen/AQAAoApi339HqIn+HwAAAEoj9v3/P9RE/w8AAAClEfv+raEmFen/5f/7PP8fk6Ou/y//L//fl/n/cfn/viP/3538fw/y//L/8v/y/6ypfsv/x77/ZaEmFen/AQAAoApi3//yUBP9PwAAAJRG7PtfEWqi/wcAAIDSiH3/RKhJRfr/leT/a5fl/zu5ztf/H1vG9f+byP/L/3fbvvy/6/+Xmfx/d/L/Pcj/y//L/8v/s6b6Lf8f+/47Q00q0v8DAABAFcS+f1uoif4fAAAASiP2/XeFmuj/AQAAoDRi37891KQi/b/r/w9E/j+T/5f/l/+X/5f/Xx75/+7k/3uQ/5f/l/+X/2dNrXH+f6h14Urz/7Hvf2WoSUX6fwAAAKiC2PffHWqi/wcAAIDSiH3/PaEm+n8AAAAojdj37wg1qUj/L/8v/y//L/8v/99++/L/g0n+vzv5/x7k/+X/5f/l/1lT/Xb9/9j3vyrUpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/b6iJ/h8AAABKI/b9k6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/dyf/34P8v/y//L/8P2uq3/L/se+/L9SkIv0/AAAAVEHs++8PNdH/AwAAQGnEvn8q1ET/DwAAAKUR+/7pUJOK9P/y//L/8v/y/yvK/79i8XHl/wvy//1F/r87+f8e5P/l/294/n9U/p9S6bf8f+z7d4WaVKT/BwAAgCqIff/uUBP9PwAAAJRG7Pv3hJro/wEAAKA0Yt+/N9SkIv2//L/8v/y//L/r/7ffvvz/YJL/727t8//xKcr/y//L/7v+v/w/S/Vb/j/2/Q+EmlSk/wcAAIAqiH3/vlAT/T8AAACURuz794ea6P8BAACgNGLffyDUpCL9v/y//L/8v/y//H/77cv/Dyb5/+5c/7+Hlvz/WHhfkv+X/x+E/H99bsn/02/6Lf8f+/6DoSYV6f8BAACgCmLf/+pQE/0/AAAAlEbs+38t1ET/DwAAAKUR+/5fDzWpSP8v/y//L/8v/9/v+f8x+X/5/xWQ/+9O/r8H1/+X/x/g/L/r/9OP+i3/H/v+Q6EmFen/AQAAoApi3/8boSb6fwAAACiN2Pe/JtRE/w8AAAClEfv+w6EmFen/5f/XKf8fF8r/y//L/7v+v/z/dSX/3538fw/y//L/8v/y/6ypfsv/x77/taEmFen/AQAAoApi3/9gqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/9aEmFen/5f9d///G5/9Hm8Yu/794P/n/gvy//P9KyP93J//fg/y//L/8v/w/a6rf8v+x739DqElF+n8AAACogtj3vzHURP8PAAAApRH7/jeFmuj/AQAAoDRi3//mUJOK9P/y//L/Nz7/7/r/8v8F+X/5/7Ug/9/dYOb/67tR/j+T/+/78cv/y/+zVL/l/2Pf/5uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bwk10f8DAABAacS+/62hJhXp/+X/5f/l/+X/5f/bb1/+fzDJ/3c3YPn/X90clrv+f0H+v7/Hv9L8/0jL19cl///DTvn/hQ2t95f/53rot/x/7PvfFmpSkf4fAAAAqiD2/W8PNdH/AwAAQGnEvv8doSb6fwAAACiN2Pf/VqhJRfp/+f/6OBbTy/L/8v/5Avl/+X/5/4El/9/dgOX/w/X/5f8j+f/+Hr/r/8v/s1S/5f9j3//OUJOK9P8AAABQBbHvfzjURP8PAAAApRH7/neFmuj/AQAAoDRi3//uUJOK9P/y/67/L/8v/y//33778v+DaW3y/8Py//L/8v/y//2R//8v+X8GW7/l/2Pf/0ioSUX6fwAAAKiC2Pe/J9RE/w8AAAClEfv+3w410f8DAABAacS+/72hJhXp/+X/ByX/PyH/v8L8/1hYJv8v/y//Xy2u/9/d1u0/7pysbCT/L/8v/98f+X/X/2fA9Vv+P/b97ws1WX7/P77sNQEAAIAbIvb9vxNqUpHf/wMAAEAVxL7/d0NN9P8AAABQGrHv/71Qk9L1/59ru1T+f1Dy/67/n7n+v/x/y/OR/5f/b2f98v/xzDNw+X/X/+9G/l/+X/6/Y/5/qMf95f9pp9/y/7Hv//1Qk9L1/wAAAFBdse9/f6iJ/h8AAAAGQrv/k90q9v1HQk30/wAAAFAase8/GmpSkf5f/l/+X/6/T/P/f7HtX7//nbcf3SX/L/8v/78i63r9//rBP3jX/5f/70b+X/5f/t/1/1lT/Zb/j33/sVCTxcbvrS7wDwAAAIMt9v1/EGpSkd//AwAAQBXEvv94qIn+HwAAAEoj9v0zoSYV6f/l/+X/5f/7NP8/wNf/j/tjkPL/kxsGKP8fT7ry/22ta/7/PYs5cfn/leb/x9oubc3/1+T/m8j/r3j8386yTP5f/p8bqN/y/7Hvnw01qUj/DwAAAFUQ+v6hE0VdvEH/DwAAAKUR+/6ToSb6fwAAACiN2Pd/INSkIv2//L/8v/y//L/r/7ffft/m/13/vyv5/+76J//fnuv/y/8P8vjl/+X/Warf8v+x758LNalI/w8AAABVEPv+D4aa6P8BAACgNGLf/6FQE/0/APwfe/fRZFl93nH8Nm6KnqJMubzxwgu890tgYdb2C/CCjRd2lctlg22cE4OzEso5IAkFFFAACaGEhLJACQllIQnlLIQykmpU0/08z3Q4fW43fW/fc///z2fhh2nouRerC/jRfOcAADQjd/9fxi2d7H/9v/5f/6//1/8Pv77+fz3p/8fp/+fQ/+v/9f/6fxZqav1/7v6/ils62f8AAADQg9z9V8ct9j8AAAA0I3f/NXGL/Q8AAADNyN3/13HLWu7/jQePWwnq//X/zfb/f6D/P+z19f/6/5bp/8fp/+c4rf7/spn+fwlW/f5P0P8/NNP/06ip9f+5+/8mblnL/Q8AAAAMyd3/t3GL/Q8AAADNyN1/bdxi/wMAAEAzcvf/XdzSyf7f1/9vzPrs/zPj1f+31P9f6PU3Z/r/Pa+v/9f/t+x0+//rz/+VT/+v//f8/6D/9/x//T/7Ta3/z93/93FLJ/sfAAAAepC7/x/iFvsfAAAAmpG7/x/jFvsfAAAAmpG7/5/ilk72/wSf/7/9P4Ln/+/8WP+/kP7f8//3vb7+X//fsr6f/78194/oqf+/9r5Lr37o9t+94zivr//X/+v/9f8s1tT6/9z9/xy3dLL/AQAAoAe5+/8lbrH/AQAAoBm5+/81brH/AQAAYA2dGfxo7v5/i1s62f8T7P933pf+f5v+/xT7/y39v/5f/9+Cvvv/+Xrq/x/J63fS/w//Q/EE+vmTWtj7v2mm/9f/syBT6/9z9/973NLJ/gcAAIAe5O7/j7jF/gcAAIDpGvoPsUfk7r8ubrH/AQAAoBm5+8/GLZ3sf/3/8vv/X+n/16P/9/x//b/+vwn6/3H6/zn66P8Ppf/3/H/9P4s2tf4/d//1cUsn+x8AAAB6kLv/P+MW+x8AAACakbv/v+IW+x8AAACakbv/v+OWTva//t/z//X/+n/9//Dr6//Xk/5/nP5/Dv3/Sfv5i/X/+n/9P7sds/9/eOQv2wvp/3P3/0/c0sn+BwAAgB7k7v/fuMX+BwAAgGbk7v+/uMX+BwAAgGbk7v//uKWT/a//1//r/0/Y/1924efprv8/+KW3Tf8/TP9/OvT/4ybT/29sDn5Y/7/2/b/n/+v/9f/sMbXn/+fuf1Tc0sn+BwAAgB7k7n903DKy/4/9L/MBAACAlcrd/5i4xff/AQAAYO1ldZa7/7FxSyf7X/+v/9f/e/6/5/8Pv/5Y/3/Hrven/58W/f+4yfT/h9D/6//X+f3r//X/HDS1/j93/+Pilk72PwAAAPQgd/8NcYv9DwAAAM3I3f/4uMX+BwAAgGbk7n9C3NLJ/h/u/y/8fv3/0ej/975//f/w18ei+v/8GfX/o/3/lZ7/3yf9/zj9/xz6f/2//v+w/v/MvM/X/zNkav1/7v4nxi2d7H8AAADoQe7+J8Ut9j8AAAA0I3f/k+MW+x8AAACakbv/KXFLJ/vf8//1//r/9ev/Pf9/xyqf/z879f5/U/9/RPr/cfr/OfT/+n/9//jz/0d+FQD9P0Om1v/n7n9q3NLJ/gcAAIAe5O5/Wtxi/wMAAMB62P3fDuz/D0pD7v6nxy32PwAAADQjd/8z4pZ29v/oszr1//p//b/+X/8//PrT6v89//+o9P/j9P9z6P+X0c9vNtb/33jY50+h/79u2f3/CP0/Q/b0/3de+Piq+v/c/c+MW9rZ/wAAANC93P3PilvsfwAAAGhG7v5nxy32PwAAADQjd/9z4pZO9v/S+/+RX31A/6//1//r//X/+v9F0/+P0//Pof/3/H/P/9f/s1B7+v9dVtX/5+5/btzSyf4HAACAHuTuf17cYv8DAABAM3L33xi32P8AAADQjNz9z49bOtn/nv+v/9f/6//1/8Ovr/9fTyfq7y/S/xf9v/5f/6//1/+zAFPr/3P3vyBu6WT/AwAAQA9y978wbrH/AQAAoBm5+2+KW+x/AAAAaEbu/hfFLZ3sf/3/cvv//Lj+X/8/0//r//X/p6Lb5/9vDP2d6KBD+v97/vzsH+39iP5f/6//1//r/zmi3xr5fZPo/89d+KfL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/zXHLMff/WPMw7MHLj/0pS6D/9/x//b/+X/8//Pr6//XUbf9/RJ7/P4f+X/+v/9f/s1CT6P93/Th3/8viFt//BwAAgGbk7n953GL/AwAAQDNy978ibrH/AQAAoBm5+18Zt3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n2Od+v+bT9D/bw5/eNX9/Emt+v3r//X/HDS1/j93/y1xSyf7HwAAAHqQu/9VcYv9DwAAAM3I3f/quMX+BwAAgGbk7n9N3NLJ/tf/6//1//p//f/w6+v/15P+f5z+fzab3TryBob6/3OXTLP/9/z/yb1//b/+n4Om1v/n7n9t3NLJ/gcAAIAe5O6/NW6x/wEAAKAZuftvi1vsfwAAAGhG7v7XxS2d7H/9v/5f/6//X0D/v6ev1f8P0/+fDv3/OP3/HOv0/H/9/+Tev/5f/89BU+v/c/e/Pm7pZP8DAABAD3L33x632P8AAADQjNz9b4hb7H8AAABoRu7+O+KWTva//l//r//X/3v+//Dr6//X0/L6/5n+X/+v/59D/6//1/+z39T6/9z9b4xbOtn/AAAA0IPc/W+KW+x/AAAAaEbu/jfHLfY/AAAANCN3/1vilk72v/5f/7/dz8cb0P/r/2cr6//P/zVI/6//PznP/x+n/59D/6//1//r/1mo4f7/upX1/7n73xq3dLL/AQAAoAe5+++MW+x/AAAAaEbu/rfFLfY/AAAANCN3/9vjlk72v/5f/7/3+f+zmf5f/+/5/ztOof/fmun/F07/P07/P4f+v83+/6JZQ/3/mUM/X//PFE3t+f+5+++KWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADQjd/+74pZO9r/+X/+/t//3/P/tD+j/9f+e/7+29P/j9P9z6P/b7P89/1//z8pMrf/P3f/uuKWT/Q8AAAA9yN3/nrjF/gcAAIBm5O5/b9xi/wMAAEAzcve/L27pZP/r//X/+n/9v/5/+PX1/+tJ/z9O/z+H/l//r//X/7NQU+v/c/e/P27pZP8DAABAD3L33x232P8AAADQjNz998Qt9j8AAAA0I3f/B+KWTva//l//r/9fz/5/S/+v/9f/D5pK/3/FFX94r/5f/6//1//r//X/vZta/5+7/4NxSyf7HwAAAHqQu/9DcYv9DwAAAM3I3f/huMX+BwAAgGbk7v9I3NLJ/j/Y/1882ylUdwz1/9Go6f930f/vff/6/+GvD8//1//r/5dvKv2/5/8/svev/9f/r/P7P1b//3sHP1//T4um1v/n7r83bulk/wMAAEAPcvd/NG6x/wEAAKAZufs/FrfY/wAAANCM3P33xS2d7H/P/9f/6//1//r/4dfX/68n/f84/f8c+n/9v+f/X/Onv6H/Z3Gm1v/n7v943NLJ/gcAAIAe5O7/RNxi/wMAAEAzcvd/Mm6x/wEAAKAZufs/Fbd0sv/1//p//f8S+v/N4a8P/b/+X/+/fPr/cfr/sv9PbUc//f/W0AdX3c+f1Krf/5L6/7su9fx/1tjU+v/c/Z+OWzrZ/wAAANCD3P2fiVvsfwAAAGhG7v7Pxi32PwAAADQjd//n4pZO9r/+v/H+//wPuu///8Tz//e9vv5f/98y/X/+HX2Y/n+Ofvr/Qavu59f9/Tfz/H/9Pws0tf4/d//9cUsn+x8AAAB6kLv/83GL/Q8AAADNyN3/hbjF/gcAAIBm5O7/YtzSyf7X/zfe/+97/v/GrMf+fwXP/z/k60P/r//X/y+f/n+c/n8O/b/+X/+v/2ehptb/5+5/YGOzy/0PAAAA6+qPf/8v7j/qH/vA9v/dmn0pbrlydu6I38YGAAAAJu787t/YnM2+vP0j3/8HAACAFuXu/0rc0sn+1//31f/3+fz/Jfb/519Y/6//1/9Piv5/3Ar6/63jvD/9v/5/nd+//l//z0FT6/9z9381btk1/DaP/WcJAAAATEnu/q/FLZ18/x8AAAB6kLv/63HLgf3vlwMEAACAdZW7/xtxSyff/9f/T7z/ny2p/48/Tv+/w/P/9f9Dr6//X0/6/3En7P/PbXj+v/5/hP5f/6//Z7+p9f+5+78Zt3Sy/wEAAKBRe/6NQu7+b8Ut9j8AAAA0I3f/t+MW+x8AAACakbv/O3FLJ/tf/3/q/X+m6kt8/v+Z+i3P/++8/79ha/D19f/6/5bp/8et4Pn/+v+9P7/+f4l2vf9L9P/6f6Zhav1/7v7vxi2d7H8AAADoQe7+78Ut9j8AAAA0I3f/9+MW+x8AAACakbv/wfPnN/vb/yvp/+Mn6bT/P97z/4/Y///2ZXtfe+7z//X/ffT/h7x+O/3/71x69u6r/uy2W/T/XHCa/X9+Lej/9f/6/x0T6v89/1//z0Qsvv/f3PPB4/b/27t/tjX7QdzSyf4HAACAHuTufyhusf8BAACgGbn7fxi32P8AAADQjNz9P4pbOtn/nv/fRv+/3zr2//n/6xX0/2cfcf9/ZjabraT/z6a49/7f8//1/wd5/v84/f8c+n/9v/5f/89CLb7/3/vB4/b/uft/HLd0sv8BAACgB7n7fxK35P7fOPa/ugcAAAAmJnf/T+MW3/8HAACAZuTu/1nc0sn+1//r/6fS/yfP/7/weW09//+qilP77P8vr9/S/y+X/n+c/n8O/b/+X/+v/2ehptb/5+7/edzSyf4HAACAHuTufzhusf8BAACgGbn7fxG32P8AAADQjNz9v4xbOtn/+v9W+/8s4vX/+v+p9P+e/+/5/6dD/z9O/z+H/n/N+//4gpnp//X/TMXU+v/c/b8OAAD//5W8bEE=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12m10.170210636s ago: executing program 3 (id=3197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 12m9.889688423s ago: executing program 32 (id=3197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 12m8.512494873s ago: executing program 4 (id=3206): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 12m7.88641437s ago: executing program 4 (id=3212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 12m7.36831814s ago: executing program 33 (id=3212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 2.304436745s ago: executing program 5 (id=13331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x8, 0x0, 0xfffff010}]}, 0x10) 2.201289181s ago: executing program 1 (id=13333): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x9) 2.103439186s ago: executing program 5 (id=13334): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.925611487s ago: executing program 1 (id=13337): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/75, 0x8e, 0x0) 1.883289589s ago: executing program 6 (id=13338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a, 0x0]}}}, 0x4e}]}) 1.610977956s ago: executing program 1 (id=13341): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xff, 0x1, 0x1}) 1.596480106s ago: executing program 6 (id=13343): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 1.444457255s ago: executing program 2 (id=13345): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x80000000}) 1.381700229s ago: executing program 0 (id=13346): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0xa, @pix_mp={0x8, 0x0, 0x34324d59, 0x9, 0x9, [{0x1, 0xffffffff}, {0x8, 0xffff}, {0x2, 0x5}, {0x6, 0x6}, {0x7, 0x400}, {0x6, 0x5}, {0x6, 0x8}, {0x9e2}], 0x4, 0x10, 0x3}}) 1.319971822s ago: executing program 6 (id=13347): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='nodecompose,decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000003000000400,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=macceltic,\x00', @ANYRES8, @ANYRESOCT], 0x44, 0x6fd, &(0x7f0000000500)="$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") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB='osx.com.apple.Finde'], 0x0, 0x0) 1.200610929s ago: executing program 2 (id=13348): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x27, 0xa, 0x2, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x38414762}) 1.127306114s ago: executing program 0 (id=13349): r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000021c0)) 942.927274ms ago: executing program 5 (id=13350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000301010100000000000000000a0000000c001980080001000200000018000180140001"], 0x38}}, 0x0) 907.779167ms ago: executing program 6 (id=13351): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id, 0x80, 0x0}}], 0x2, 0x0) 895.258617ms ago: executing program 0 (id=13352): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x9, 0x0, 0x0, 0x81}) 874.404219ms ago: executing program 2 (id=13353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x4c804) 731.951587ms ago: executing program 1 (id=13354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) 682.87469ms ago: executing program 0 (id=13355): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000cc0)=0x3, 0x12) 623.208073ms ago: executing program 5 (id=13356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0x1}}}, 0x24}}, 0x0) 594.943415ms ago: executing program 6 (id=13357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 531.206729ms ago: executing program 2 (id=13358): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb0, &(0x7f0000000000), &(0x7f0000000240)=0x4) 484.542751ms ago: executing program 1 (id=13359): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 404.116666ms ago: executing program 0 (id=13360): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 278.031973ms ago: executing program 1 (id=13361): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 277.510603ms ago: executing program 2 (id=13362): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0x1, 0x7}) 277.346694ms ago: executing program 5 (id=13363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x19}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 277.293174ms ago: executing program 6 (id=13364): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xff, 0x1, 0x1}) 44.912067ms ago: executing program 5 (id=13365): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) 44.242317ms ago: executing program 2 (id=13366): open(&(0x7f0000000140)='./file0\x00', 0xc2, 0xcd) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='devices'}]}) 0s ago: executing program 0 (id=13367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): 877.384517][T24972] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 877.391894][T28856] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 877.425020][T24972] usb 7-1: USB disconnect, device number 36 [ 877.434416][T28856] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 878.804602][T28912] netlink: 'syz.5.11108': attribute type 21 has an invalid length. [ 879.145972][T28924] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 879.300904][T28928] loop6: detected capacity change from 0 to 256 [ 879.342334][T28929] netlink: 'syz.0.11117': attribute type 10 has an invalid length. [ 879.391210][T28928] FAT-fs (loop6): Directory bread(block 64) failed [ 879.402196][T28928] FAT-fs (loop6): Directory bread(block 65) failed [ 879.409363][T28928] FAT-fs (loop6): Directory bread(block 66) failed [ 879.430795][T28929] team0: Port device macvlan0 added [ 879.451426][T28928] FAT-fs (loop6): Directory bread(block 67) failed [ 879.483208][T28928] FAT-fs (loop6): Directory bread(block 68) failed [ 879.509557][T28928] FAT-fs (loop6): Directory bread(block 69) failed [ 879.532224][T28933] netlink: 'syz.5.11119': attribute type 8 has an invalid length. [ 879.540406][T28928] FAT-fs (loop6): Directory bread(block 70) failed [ 879.540448][T28928] FAT-fs (loop6): Directory bread(block 71) failed [ 879.540621][T28928] FAT-fs (loop6): Directory bread(block 72) failed [ 879.622815][T28928] FAT-fs (loop6): Directory bread(block 73) failed [ 880.545194][T28962] loop2: detected capacity change from 0 to 4096 [ 880.631606][T28962] ntfs3: loop2: ino=3, Correct links count -> 2. [ 880.743599][T28962] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 881.179371][T28983] x_tables: duplicate entry at hook 1 [ 881.346511][T28979] loop5: detected capacity change from 0 to 4096 [ 881.409385][T28979] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 881.499397][T28995] loop6: detected capacity change from 0 to 512 [ 881.624266][T28995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 881.643323][T28995] ext4 filesystem being mounted at /1521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.946191][T11442] EXT4-fs (loop6): unmounting filesystem. [ 882.296266][T29020] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 882.813189][T29040] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.127426][T29054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11174'. [ 883.261487][ T26] audit: type=1326 audit(2000000100.280:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29057 comm="syz.0.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 883.310866][ T26] audit: type=1326 audit(2000000100.300:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29057 comm="syz.0.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 883.471028][ T26] audit: type=1326 audit(2000000100.310:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29057 comm="syz.0.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 883.510100][ T26] audit: type=1326 audit(2000000100.320:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29057 comm="syz.0.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 883.535580][ T26] audit: type=1326 audit(2000000100.320:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29057 comm="syz.0.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 883.615475][T29067] netlink: 'syz.0.11181': attribute type 2 has an invalid length. [ 883.831379][ T26] audit: type=1326 audit(2000000100.850:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29072 comm="syz.0.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 883.944006][ T26] audit: type=1326 audit(2000000100.910:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29072 comm="syz.0.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 884.073574][ T26] audit: type=1326 audit(2000000100.910:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29072 comm="syz.0.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 884.171467][T29080] loop0: detected capacity change from 0 to 1024 [ 884.172168][ T26] audit: type=1326 audit(2000000100.910:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29072 comm="syz.0.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 884.422588][T10682] hfsplus: b-tree write err: -5, ino 4 [ 884.803153][ T8833] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 885.005271][ T8833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.029404][ T8833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 885.066588][ T8833] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 885.069882][T29110] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11200'. [ 885.095338][ T8833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.118376][ T8833] usb 6-1: config 0 descriptor?? [ 885.122870][T29114] netlink: 'syz.1.11201': attribute type 5 has an invalid length. [ 885.156276][T29110] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11200'. [ 885.542673][ T8833] Bluetooth: Can't get version to change to load ram patch err [ 885.560881][ T8833] Bluetooth: Loading patch file failed [ 885.573222][ T8833] ath3k: probe of 6-1:0.0 failed with error -71 [ 885.610546][ T8833] usb 6-1: USB disconnect, device number 32 [ 886.207316][T29145] loop0: detected capacity change from 0 to 1764 [ 886.326976][T29145] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 886.586753][T29156] netlink: 'syz.2.11221': attribute type 30 has an invalid length. [ 886.623185][T29156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11221'. [ 886.632501][T29156] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 886.693333][T29156] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 886.767122][T29164] netlink: 'syz.1.11225': attribute type 3 has an invalid length. [ 887.229799][T29181] loop5: detected capacity change from 0 to 256 [ 887.331347][T29181] FAT-fs (loop5): Directory bread(block 64) failed [ 887.359281][T29181] FAT-fs (loop5): Directory bread(block 65) failed [ 887.393564][T29181] FAT-fs (loop5): Directory bread(block 66) failed [ 887.412628][T29181] FAT-fs (loop5): Directory bread(block 67) failed [ 887.461090][T29181] FAT-fs (loop5): Directory bread(block 68) failed [ 887.505070][T29181] FAT-fs (loop5): Directory bread(block 69) failed [ 887.533189][T29181] FAT-fs (loop5): Directory bread(block 70) failed [ 887.583623][T29181] FAT-fs (loop5): Directory bread(block 71) failed [ 887.590339][T29181] FAT-fs (loop5): Directory bread(block 72) failed [ 887.647367][T29188] loop0: detected capacity change from 0 to 8192 [ 887.654183][T29181] FAT-fs (loop5): Directory bread(block 73) failed [ 887.710590][T29188] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 887.760035][T29194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11239'. [ 887.798702][T29188] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 887.834340][T29188] FAT-fs (loop0): Filesystem has been set read-only [ 887.867122][T29188] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 887.897805][T29188] FAT-fs (loop0): error, clusters badly computed (3 != 2) [ 887.918891][T29188] FAT-fs (loop0): error, clusters badly computed (4 != 3) [ 888.347761][T29210] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 888.463261][T24972] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 888.503805][T29214] tmpfs: Bad value for 'nr_inodes' [ 888.665573][T24972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.683115][T24972] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 888.703556][T24972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.724405][T24972] usb 6-1: config 0 descriptor?? [ 889.159488][T24972] usb 6-1: USB disconnect, device number 33 [ 889.490417][T29249] mkiss: ax0: crc mode is auto. [ 889.703141][T24972] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 889.913163][T24972] usb 7-1: Using ep0 maxpacket: 32 [ 889.941771][T24972] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 889.968717][T24972] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 890.006864][T24972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.039076][T24972] usb 7-1: Product: syz [ 890.073260][T24972] usb 7-1: Manufacturer: syz [ 890.078032][T24972] usb 7-1: SerialNumber: syz [ 890.099740][T24972] usb 7-1: config 0 descriptor?? [ 890.124198][T29247] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 890.146715][T24972] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input45 [ 890.486000][T24972] usb 7-1: USB disconnect, device number 37 [ 890.492097][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 890.654937][T29282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11282'. [ 891.501323][ T26] audit: type=1326 audit(2000000108.520:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29310 comm="syz.0.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 891.602144][ T26] audit: type=1326 audit(2000000108.580:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29310 comm="syz.0.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 891.727542][ T26] audit: type=1326 audit(2000000108.580:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29310 comm="syz.0.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 891.819862][ T26] audit: type=1326 audit(2000000108.580:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29310 comm="syz.0.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced1d9aeb9 code=0x7ffc0000 [ 892.702800][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11319'. [ 892.737987][T29362] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 892.924511][T29365] netlink: 'syz.0.11324': attribute type 29 has an invalid length. [ 892.982714][T29365] netlink: 'syz.0.11324': attribute type 29 has an invalid length. [ 893.308826][T29379] netlink: 'syz.0.11330': attribute type 5 has an invalid length. [ 893.986030][T29372] loop5: detected capacity change from 0 to 32768 [ 894.013651][T29372] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.11327 (29372) [ 894.046559][T29372] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 894.088640][T29372] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 894.134543][T29372] BTRFS info (device loop5): force zlib compression, level 3 [ 894.142023][T29372] BTRFS info (device loop5): force clearing of disk cache [ 894.217710][T29372] BTRFS info (device loop5): disabling tree log [ 894.258492][T29372] BTRFS info (device loop5): enabling disk space caching [ 894.272225][T29372] BTRFS info (device loop5): disk space caching is enabled [ 894.550309][T29372] BTRFS info (device loop5): enabling ssd optimizations [ 894.849459][T11379] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 895.453260][T12993] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 895.565324][T29466] loop0: detected capacity change from 0 to 16 [ 895.592558][T29466] erofs: (device loop0): mounted with root inode @ nid 36. [ 895.653414][T12993] usb 7-1: Using ep0 maxpacket: 32 [ 895.670280][T12993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 895.712732][T12993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 895.750728][T12993] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 895.760605][T12993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.769090][T12993] usb 7-1: Product: syz [ 895.774214][T12993] usb 7-1: Manufacturer: syz [ 895.778883][T12993] usb 7-1: SerialNumber: syz [ 895.786319][T12993] usb 7-1: config 0 descriptor?? [ 895.795972][T12993] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input47 [ 895.964886][T29474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11367'. [ 896.033849][T12993] usb 7-1: USB disconnect, device number 38 [ 896.361404][T29486] loop0: detected capacity change from 0 to 2048 [ 896.380916][T29486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 896.691711][T29498] netlink: 'syz.1.11377': attribute type 2 has an invalid length. [ 896.730588][T29498] netlink: 'syz.1.11377': attribute type 1 has an invalid length. [ 896.745564][T29502] loop6: detected capacity change from 0 to 256 [ 896.897264][T29502] FAT-fs (loop6): Directory bread(block 64) failed [ 896.928715][T29502] FAT-fs (loop6): Directory bread(block 65) failed [ 896.963639][T29502] FAT-fs (loop6): Directory bread(block 66) failed [ 896.986351][T29502] FAT-fs (loop6): Directory bread(block 67) failed [ 897.027382][T29502] FAT-fs (loop6): Directory bread(block 68) failed [ 897.053085][T29502] FAT-fs (loop6): Directory bread(block 69) failed [ 897.060851][T29502] FAT-fs (loop6): Directory bread(block 70) failed [ 897.068080][T29502] FAT-fs (loop6): Directory bread(block 71) failed [ 897.075309][T29502] FAT-fs (loop6): Directory bread(block 72) failed [ 897.081880][T29502] FAT-fs (loop6): Directory bread(block 73) failed [ 897.179934][T29514] xt_connbytes: Forcing CT accounting to be enabled [ 897.213242][T29514] xt_NFQUEUE: number of total queues is 0 [ 897.787929][T29528] loop6: detected capacity change from 0 to 4096 [ 897.854886][T29528] ntfs: volume version 3.1. [ 897.918765][T29538] loop5: detected capacity change from 0 to 256 [ 897.967942][T29468] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 898.019594][T29538] FAT-fs (loop5): Directory bread(block 64) failed [ 898.043056][T29538] FAT-fs (loop5): Directory bread(block 65) failed [ 898.049754][T29538] FAT-fs (loop5): Directory bread(block 66) failed [ 898.125631][T10686] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 898.170960][T29538] FAT-fs (loop5): Directory bread(block 67) failed [ 898.181209][T29538] FAT-fs (loop5): Directory bread(block 68) failed [ 898.193050][T29468] usb 1-1: Using ep0 maxpacket: 16 [ 898.211491][T29538] FAT-fs (loop5): Directory bread(block 69) failed [ 898.219509][T29468] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 898.247208][T29538] FAT-fs (loop5): Directory bread(block 70) failed [ 898.275690][T29538] FAT-fs (loop5): Directory bread(block 71) failed [ 898.282395][T29538] FAT-fs (loop5): Directory bread(block 72) failed [ 898.285206][T29468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.333219][T29468] usb 1-1: Product: syz [ 898.337459][T29468] usb 1-1: Manufacturer: syz [ 898.351671][T29538] FAT-fs (loop5): Directory bread(block 73) failed [ 898.382970][T29468] usb 1-1: SerialNumber: syz [ 898.417621][T29543] loop6: detected capacity change from 0 to 1024 [ 898.644696][T29468] snd-usb-audio: probe of 1-1:222.0 failed with error -71 [ 898.690792][T29468] usb 1-1: USB disconnect, device number 47 [ 898.702803][T29548] loop2: detected capacity change from 0 to 256 [ 898.717324][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.839205][T29548] FAT-fs (loop2): Directory bread(block 64) failed [ 898.879658][T29548] FAT-fs (loop2): Directory bread(block 65) failed [ 898.926918][T29548] FAT-fs (loop2): Directory bread(block 66) failed [ 898.963775][T29548] FAT-fs (loop2): Directory bread(block 67) failed [ 898.988971][T29548] FAT-fs (loop2): Directory bread(block 68) failed [ 899.021847][T29548] FAT-fs (loop2): Directory bread(block 69) failed [ 899.039262][T29548] FAT-fs (loop2): Directory bread(block 70) failed [ 899.059449][T29548] FAT-fs (loop2): Directory bread(block 71) failed [ 899.093195][T29548] FAT-fs (loop2): Directory bread(block 72) failed [ 899.099820][T29548] FAT-fs (loop2): Directory bread(block 73) failed [ 899.226609][T29559] netlink: 'syz.6.11409': attribute type 1 has an invalid length. [ 899.502105][T29569] netlink: 'syz.6.11413': attribute type 15 has an invalid length. [ 899.535190][T29569] netlink: 666 bytes leftover after parsing attributes in process `syz.6.11413'. [ 899.576207][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11416'. [ 900.065355][T29591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11424'. [ 900.190879][T29595] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 900.255801][T29599] loop0: detected capacity change from 0 to 256 [ 900.368035][T29599] FAT-fs (loop0): Directory bread(block 64) failed [ 900.375064][T29599] FAT-fs (loop0): Directory bread(block 65) failed [ 900.381762][T29599] FAT-fs (loop0): Directory bread(block 66) failed [ 900.444369][T29599] FAT-fs (loop0): Directory bread(block 67) failed [ 900.466713][T29599] FAT-fs (loop0): Directory bread(block 68) failed [ 900.503557][T29599] FAT-fs (loop0): Directory bread(block 69) failed [ 900.510309][T29599] FAT-fs (loop0): Directory bread(block 70) failed [ 900.541869][T29599] FAT-fs (loop0): Directory bread(block 71) failed [ 900.569246][T29599] FAT-fs (loop0): Directory bread(block 72) failed [ 900.611507][T29599] FAT-fs (loop0): Directory bread(block 73) failed [ 901.071600][T29615] loop6: detected capacity change from 0 to 4096 [ 901.116934][T29615] ntfs3: loop6: ino=3, Correct links count -> 2. [ 901.205848][T29615] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 901.258028][T29601] loop5: detected capacity change from 0 to 32768 [ 901.293148][T29468] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 901.483400][T29468] usb 3-1: Using ep0 maxpacket: 16 [ 901.490570][T29468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 901.530342][T29468] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 901.576103][T29468] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 901.616834][T29468] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 901.652977][T29468] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 901.703095][T29468] usb 3-1: config 1 interface 0 has no altsetting 0 [ 901.710614][T29468] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 901.730370][T29468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.776319][T29468] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 901.905752][T29631] loop5: detected capacity change from 0 to 4096 [ 902.022482][T29631] ntfs: volume version 3.1. [ 902.044467][T29468] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 902.074393][T29468] usb 3-1: USB disconnect, device number 61 [ 902.241968][T29623] loop0: detected capacity change from 0 to 32768 [ 902.311805][ T46] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 902.330076][T29623] JBD2: Ignoring recovery information on journal [ 902.418229][T29638] netlink: 'syz.6.11447': attribute type 3 has an invalid length. [ 902.491148][T29623] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 902.743258][T29649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11451'. [ 902.766710][T29651] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.859067][ T4279] ocfs2: Unmounting device (7,0) on (node local) [ 903.603095][T24972] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 903.772554][T29672] loop6: detected capacity change from 0 to 8192 [ 903.793051][T24972] usb 1-1: Using ep0 maxpacket: 32 [ 903.800144][T24972] usb 1-1: config 2 has an invalid interface number: 157 but max is 0 [ 903.815590][T29672] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 903.833153][T24972] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 903.865762][T29672] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 903.873452][T24972] usb 1-1: config 2 has no interface number 0 [ 903.895365][T24972] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 903.914172][T29672] FAT-fs (loop6): Filesystem has been set read-only [ 903.930171][T29672] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 903.943141][T24972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.951324][ T26] audit: type=1326 audit(2000000120.970:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.5.11467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 903.983051][T29672] FAT-fs (loop6): error, clusters badly computed (3 != 2) [ 904.002394][T24972] usb 1-1: Product: syz [ 904.011685][T24972] usb 1-1: Manufacturer: syz [ 904.027359][T29672] FAT-fs (loop6): error, clusters badly computed (4 != 3) [ 904.035018][T24972] usb 1-1: SerialNumber: syz [ 904.040323][ T26] audit: type=1326 audit(2000000120.970:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.5.11467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 904.072386][T24972] imon 1-1:2.157: unable to register, err -19 [ 904.166045][ T26] audit: type=1326 audit(2000000120.970:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.5.11467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 904.188551][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.282115][ T8833] usb 1-1: USB disconnect, device number 48 [ 904.343783][ T26] audit: type=1326 audit(2000000120.970:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.5.11467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 904.453372][ T26] audit: type=1326 audit(2000000120.970:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.5.11467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 904.506146][T29691] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11471'. [ 904.884351][T29705] loop6: detected capacity change from 0 to 8 [ 905.031674][T29707] ipt_rpfilter: unknown options [ 905.406955][T29722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11486'. [ 905.858623][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11494'. [ 905.895526][T29740] loop6: detected capacity change from 0 to 256 [ 905.983202][T29743] netlink: 'syz.2.11497': attribute type 2 has an invalid length. [ 906.074999][T29747] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11499'. [ 906.340930][T29755] autofs4:pid:29755:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 907.431361][T29765] loop6: detected capacity change from 0 to 32768 [ 907.503195][T28709] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 907.519844][T29765] XFS (loop6): Mounting V5 Filesystem [ 907.704946][T29765] XFS (loop6): Ending clean mount [ 907.712702][T29808] loop5: detected capacity change from 0 to 512 [ 907.713427][T28709] usb 2-1: Using ep0 maxpacket: 32 [ 907.755111][T28709] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 907.773287][T29765] XFS (loop6): Quotacheck needed: Please wait. [ 907.789832][T28709] usb 2-1: config 0 has no interface number 0 [ 907.812100][T29808] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 907.835881][T28709] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 907.862546][T29808] ext4 filesystem being mounted at /1652/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.873098][T28709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.901593][T28709] usb 2-1: Product: syz [ 907.929401][T28709] usb 2-1: Manufacturer: syz [ 907.963077][T28709] usb 2-1: SerialNumber: syz [ 907.991297][T28709] usb 2-1: config 0 descriptor?? [ 908.006735][T29815] Cannot find del_set index 3 as target [ 908.027486][T28709] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 908.047104][T28709] usb 2-1: selecting invalid altsetting 1 [ 908.058348][T28709] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 908.074713][T29765] XFS (loop6): Quotacheck: Done. [ 908.082714][T11379] EXT4-fs (loop5): unmounting filesystem. [ 908.123739][T28709] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 908.159851][T28709] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 908.209547][T28709] usb 2-1: media controller created [ 908.268885][T28709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.358187][T11442] XFS (loop6): Unmounting Filesystem [ 908.590575][T29827] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11534'. [ 908.659753][T28709] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 908.773354][T28709] usb 2-1: USB disconnect, device number 50 [ 908.792818][T29831] loop0: detected capacity change from 0 to 736 [ 908.846204][T29833] loop5: detected capacity change from 0 to 128 [ 908.965811][ T5881] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 909.189038][T29843] netlink: 'syz.2.11541': attribute type 10 has an invalid length. [ 909.253154][T29843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11541'. [ 909.283939][T29843] bridge0: port 3(veth0_vlan) entered blocking state [ 909.290861][T29843] bridge0: port 3(veth0_vlan) entered disabled state [ 909.360010][T29843] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 909.458281][T29849] netlink: 'syz.0.11544': attribute type 30 has an invalid length. [ 909.567352][T29853] loop5: detected capacity change from 0 to 256 [ 909.786813][T29855] loop2: detected capacity change from 0 to 2048 [ 909.879300][T29855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.835558][T29898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 910.842947][T29898] IPv6: NLM_F_CREATE should be set when creating new route [ 910.850389][T29898] IPv6: NLM_F_CREATE should be set when creating new route [ 911.370982][T29917] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 911.378602][T29917] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 911.673092][T12993] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 911.701927][ T26] audit: type=1326 audit(2000000128.720:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29928 comm="syz.1.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 911.777456][ T26] audit: type=1326 audit(2000000128.740:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29928 comm="syz.1.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 911.799983][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.864932][T12993] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 911.873107][ T26] audit: type=1326 audit(2000000128.740:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29928 comm="syz.1.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 911.873152][ T26] audit: type=1326 audit(2000000128.740:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29928 comm="syz.1.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 911.965538][T12993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.976502][T12993] usb 3-1: config 0 has no interface number 0 [ 912.008327][T12993] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 912.039161][T12993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.063502][T12993] usb 3-1: Product: syz [ 912.077265][T12993] usb 3-1: Manufacturer: syz [ 912.091183][T12993] usb 3-1: SerialNumber: syz [ 912.106985][T12993] usb 3-1: config 0 descriptor?? [ 912.163712][T12993] hub 3-1:0.31: bad descriptor, ignoring hub [ 912.190181][T12993] hub: probe of 3-1:0.31 failed with error -5 [ 912.205060][T12993] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 912.242056][T12993] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 912.272278][T12993] usb 3-1: Failed to create links for entity 6 [ 912.302822][T12993] usb 3-1: Failed to register entities (-22). [ 912.375994][T12993] usb 3-1: USB disconnect, device number 62 [ 912.505211][T29951] device bridge6 entered promiscuous mode [ 912.733479][T29467] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 912.933175][T29467] usb 6-1: Using ep0 maxpacket: 32 [ 912.940893][T29467] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 912.973094][T29467] usb 6-1: config 0 has no interface number 1 [ 912.992074][T29945] loop6: detected capacity change from 0 to 32768 [ 913.000809][T29467] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 913.034165][T29467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.082421][T29467] usb 6-1: Product: syz [ 913.092373][T29467] usb 6-1: Manufacturer: syz [ 913.133708][T29467] usb 6-1: SerialNumber: syz [ 913.144921][T29945] XFS (loop6): Mounting V5 Filesystem [ 913.175319][T29467] usb 6-1: config 0 descriptor?? [ 913.283540][T29467] viperboard 6-1:0.61: version 0.00 found at bus 006 address 034 [ 913.374925][T29467] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 913.433018][T29467] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 913.498889][T29945] XFS (loop6): Ending clean mount [ 913.520398][T29467] viperboard 6-1:0.0: version 0.00 found at bus 006 address 034 [ 913.650683][T29467] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 913.681392][T29467] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 913.731235][T29467] usb 6-1: USB disconnect, device number 34 [ 913.744327][T11442] XFS (loop6): Unmounting Filesystem [ 914.121261][T29993] bond0: (slave gretap0): Error: Device type is different from other slaves [ 914.342505][T24972] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 914.410838][T30000] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 914.535867][T24972] usb 2-1: unable to get BOS descriptor or descriptor too short [ 914.553824][T24972] usb 2-1: not running at top speed; connect to a high speed hub [ 914.562813][T24972] usb 2-1: config 97 has an invalid interface number: 135 but max is 0 [ 914.594618][T24972] usb 2-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 914.633197][T24972] usb 2-1: config 97 has no interface number 0 [ 914.639462][T24972] usb 2-1: config 97 interface 135 has no altsetting 0 [ 914.675217][T24972] usb 2-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=8b.d4 [ 914.703166][T24972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.733159][T24972] usb 2-1: Product: syz [ 914.737425][T24972] usb 2-1: Manufacturer: syz [ 914.762477][T24972] usb 2-1: SerialNumber: syz [ 914.986448][T24972] usb 2-1: USB disconnect, device number 51 [ 915.023980][T30017] netlink: 'syz.6.11622': attribute type 4 has an invalid length. [ 915.031903][T30017] netlink: 'syz.6.11622': attribute type 3 has an invalid length. [ 915.077633][T30017] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11622'. [ 916.990599][T30097] loop5: detected capacity change from 0 to 64 [ 917.103591][T30097] Trying to free block not in datazone [ 917.240543][T30104] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11667'. [ 917.302178][T30108] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.303575][T30104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11667'. [ 917.358500][T30104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11667'. [ 918.133693][T30139] ubi: mtd0 is already attached to ubi5 [ 918.163142][T30140] loop5: detected capacity change from 0 to 256 [ 918.283065][T30143] loop2: detected capacity change from 0 to 64 [ 918.978338][T30162] netlink: 296 bytes leftover after parsing attributes in process `syz.0.11696'. [ 919.067595][T30168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11698'. [ 919.272193][T30173] loop6: detected capacity change from 0 to 4096 [ 919.339324][T30177] QAT: failed to copy from user. [ 919.375615][T30178] loop0: detected capacity change from 0 to 512 [ 919.399703][T30179] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 919.430300][T30173] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 919.466743][T30178] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 919.519210][T30173] Remounting filesystem read-only [ 919.574827][T30178] FAT-fs (loop0): error, invalid access to FAT (entry 0x000000c8) [ 920.229958][T30203] loop5: detected capacity change from 0 to 512 [ 920.282605][T30203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 920.291534][T29467] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 920.308359][T30203] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 920.343161][T29468] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 920.439124][T30203] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3852: comm syz.5.11715: Allocating blocks 41-42 which overlap fs metadata [ 920.484283][T30203] Quota error (device loop5): write_blk: dquota write failed [ 920.491746][T30203] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 920.525738][T29467] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 920.548007][T30203] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 920.560218][T29467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.568937][T30203] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.11715: Failed to acquire dquot type 1 [ 920.582242][T29468] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 920.614452][T29468] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 920.634509][T30203] EXT4-fs error (device loop5): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 920.652875][T29467] usb 7-1: config 0 descriptor?? [ 920.658723][T29468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.724117][T29468] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 920.756115][T30203] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.11715: corrupted inode contents [ 920.795024][T30223] netlink: 'syz.0.11723': attribute type 2 has an invalid length. [ 920.803232][T30223] netlink: 'syz.0.11723': attribute type 1 has an invalid length. [ 920.820199][T30203] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #12: comm syz.5.11715: mark_inode_dirty error [ 920.861098][T30203] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.11715: corrupted inode contents [ 920.901466][T30203] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.11715: mark_inode_dirty error [ 920.949546][T30203] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.11715: corrupted inode contents [ 920.988734][T30203] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 921.013722][T30203] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.11715: corrupted inode contents [ 921.043552][T30203] EXT4-fs error (device loop5): ext4_truncate:4318: inode #12: comm syz.5.11715: mark_inode_dirty error [ 921.063717][T30203] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 921.084239][T30203] EXT4-fs (loop5): 1 truncate cleaned up [ 921.090000][T30203] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 921.098975][T29467] ath6kl: Failed to submit usb control message: -71 [ 921.099016][T29467] ath6kl: unable to send the bmi data to the device: -71 [ 921.099030][T29467] ath6kl: Unable to send get target info: -71 [ 921.119780][T29467] ath6kl: Failed to init ath6kl core: -71 [ 921.220393][T29467] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 921.258342][T29467] usb 7-1: USB disconnect, device number 39 [ 921.409852][T11379] EXT4-fs (loop5): unmounting filesystem. [ 921.450917][ T1381] block nbd0: Attempted send on invalid socket [ 921.457466][ T1381] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 921.478051][T30235] loop2: detected capacity change from 0 to 4096 [ 921.486544][T30235] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 921.503907][T10686] Quota error (device loop5): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 921.547067][T10686] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 1 [ 921.635353][T30235] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 921.772274][T30242] loop0: detected capacity change from 0 to 256 [ 921.804638][T29468] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 921.825124][T10680] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 921.834248][T21356] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 921.844539][T21356] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 921.868289][T21356] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 921.916044][T10683] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 921.973924][T21356] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 921.984635][T21356] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 922.016727][T29468] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 922.041996][T29468] stv0680 2-1:4.0: last error: 85, command = 0x7f [ 922.071576][T29468] usb 2-1: USB disconnect, device number 52 [ 922.256107][T30253] loop0: detected capacity change from 0 to 512 [ 922.328112][T30253] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 922.346622][T30253] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 922.399532][T30253] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 922.418315][T30253] System zones: 0-2, 18-18, 34-35 [ 922.429529][T30253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 922.489851][T30259] loop2: detected capacity change from 0 to 4096 [ 922.568243][T30253] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (20000) [ 922.578492][T30261] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 922.627989][T30259] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 922.694963][T30266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11743'. [ 922.764562][T30259] Remounting filesystem read-only [ 922.794262][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 923.439948][T30289] tc_dump_action: action bad kind [ 923.617372][T30293] netlink: 'syz.6.11757': attribute type 2 has an invalid length. [ 923.673116][T30293] netlink: 'syz.6.11757': attribute type 1 has an invalid length. [ 924.068717][ T26] audit: type=1326 audit(2000000141.090:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.5.11766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 924.167020][ T26] audit: type=1326 audit(2000000141.150:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.5.11766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 924.296659][ T26] audit: type=1326 audit(2000000141.150:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.5.11766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 924.367109][T30319] Error parsing options; rc = [-22] [ 924.383399][ T26] audit: type=1326 audit(2000000141.150:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.5.11766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 924.494170][ T26] audit: type=1326 audit(2000000141.150:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.5.11766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 924.578692][ T26] audit: type=1326 audit(2000000141.150:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.5.11766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7729b9aeb9 code=0x7ffc0000 [ 924.608628][T30328] loop6: detected capacity change from 0 to 16 [ 924.634367][T30328] erofs: (device loop6): mounted with root inode @ nid 36. [ 924.704635][ T4272] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 924.717740][T30321] loop5: detected capacity change from 0 to 4096 [ 924.728245][T30328] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 924.874923][T30321] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 925.063166][T30339] netlink: 'syz.1.11779': attribute type 15 has an invalid length. [ 925.071153][T30339] netlink: 666 bytes leftover after parsing attributes in process `syz.1.11779'. [ 925.182303][T11379] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 925.298030][T30342] loop0: detected capacity change from 0 to 4096 [ 925.360338][T30342] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 925.859040][T30365] loop5: detected capacity change from 0 to 256 [ 925.964183][T30365] FAT-fs (loop5): Directory bread(block 64) failed [ 925.970822][T30365] FAT-fs (loop5): Directory bread(block 65) failed [ 926.039365][T30365] FAT-fs (loop5): Directory bread(block 66) failed [ 926.083675][T30365] FAT-fs (loop5): Directory bread(block 67) failed [ 926.090465][T30365] FAT-fs (loop5): Directory bread(block 68) failed [ 926.143374][T30365] FAT-fs (loop5): Directory bread(block 69) failed [ 926.160407][T30365] FAT-fs (loop5): Directory bread(block 70) failed [ 926.170509][T30365] FAT-fs (loop5): Directory bread(block 71) failed [ 926.187571][T30365] FAT-fs (loop5): Directory bread(block 72) failed [ 926.200092][T30365] FAT-fs (loop5): Directory bread(block 73) failed [ 926.237127][T30371] loop2: detected capacity change from 0 to 4096 [ 926.343222][T30371] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 926.519780][T30381] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.594673][T21356] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 926.790795][T30389] tc_dump_action: action bad kind [ 927.043028][ T8833] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 927.144047][T30403] loop5: detected capacity change from 0 to 16 [ 927.194284][T30403] erofs: (device loop5): mounted with root inode @ nid 36. [ 927.234959][ T8833] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 927.255080][ T8833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.267111][ T8833] usb 3-1: config 0 has no interface number 0 [ 927.267419][ T4272] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 927.280659][ T8833] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 927.294167][T30403] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 927.330753][T30410] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11824'. [ 927.345225][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 927.345242][ T26] audit: type=1800 audit(2000000144.370:465): pid=30403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11812" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 927.383180][ T8833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.471458][ T8833] usb 3-1: Product: syz [ 927.493689][ T8833] usb 3-1: Manufacturer: syz [ 927.498383][ T8833] usb 3-1: SerialNumber: syz [ 927.526744][ T8833] usb 3-1: config 0 descriptor?? [ 927.783300][ T8833] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 927.789739][ T8833] usb 3-1: No valid video chain found. [ 927.851009][ T8833] usb 3-1: USB disconnect, device number 63 [ 928.046850][T30432] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11826'. [ 928.133146][T30435] misc userio: No port type given on /dev/userio [ 928.853785][T30460] netlink: 212 bytes leftover after parsing attributes in process `syz.1.11840'. [ 928.873062][T29468] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 929.072984][T29468] usb 7-1: Using ep0 maxpacket: 16 [ 929.080079][T29468] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 929.113084][T29468] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 929.141327][T30446] loop5: detected capacity change from 0 to 32768 [ 929.152994][T29468] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 929.162735][T29468] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 929.233598][T29468] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 929.258645][T30446] JBD2: Ignoring recovery information on journal [ 929.292999][T29468] usb 7-1: config 1 interface 0 has no altsetting 0 [ 929.299704][T29468] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 929.353007][T29468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.374197][T30446] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 929.390916][T29468] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 929.641747][T29468] ums-sddr09: probe of 7-1:1.0 failed with error -22 [ 929.654257][T11379] ocfs2: Unmounting device (7,5) on (node local) [ 929.683179][T29468] usb 7-1: USB disconnect, device number 40 [ 929.794330][T30458] loop0: detected capacity change from 0 to 32768 [ 930.643025][ T8833] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 930.835282][ T8833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.868680][ T8833] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 930.893467][ T8833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.920488][ T8833] usb 1-1: config 0 descriptor?? [ 931.089262][T30516] autofs4:pid:30516:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 931.162261][ T8833] ath6kl: Failed to submit usb control message: -71 [ 931.171266][ T8833] ath6kl: unable to send the bmi data to the device: -71 [ 931.222999][ T8833] ath6kl: Unable to send get target info: -71 [ 931.237588][ T8833] ath6kl: Failed to init ath6kl core: -71 [ 931.353522][ T8833] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 931.391114][ T8833] usb 1-1: USB disconnect, device number 49 [ 931.567670][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.734911][T30539] misc userio: No port type given on /dev/userio [ 931.895145][T30543] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 932.436871][T30537] loop2: detected capacity change from 0 to 32768 [ 932.519220][T30537] ea_get: invalid extended attribute [ 932.568868][T30537] ffff888053a7a830: 04 00 00 00 .... [ 933.144793][T30579] loop2: detected capacity change from 0 to 8 [ 933.220477][T30579] SQUASHFS error: Unable to read inode 0xa7 [ 933.896825][T30596] netlink: 'syz.0.11902': attribute type 10 has an invalid length. [ 933.918060][T30596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11902'. [ 933.945921][T30596] bridge0: port 3(veth0_vlan) entered blocking state [ 933.962162][T30596] bridge0: port 3(veth0_vlan) entered disabled state [ 933.994749][T30596] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 934.055121][T10686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 934.074581][T10686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 934.105137][T10686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 934.115309][T30580] loop5: detected capacity change from 0 to 32768 [ 934.193543][T30580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.11904 (30580) [ 934.294638][T30580] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 934.346596][T30580] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 934.386536][T30580] BTRFS info (device loop5): using free space tree [ 934.468513][T30586] loop6: detected capacity change from 0 to 32768 [ 934.521515][T30586] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.11896 (30586) [ 934.622619][T30586] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 934.687486][T30586] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 934.703162][T30586] BTRFS info (device loop6): force zlib compression, level 3 [ 934.710667][T30586] BTRFS info (device loop6): force clearing of disk cache [ 934.734785][T30580] BTRFS info (device loop5): enabling ssd optimizations [ 934.776142][T30624] loop2: detected capacity change from 0 to 8192 [ 934.785296][T30624] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 934.798436][T30624] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 934.808233][T30624] REISERFS (device loop2): using ordered data mode [ 934.815130][T30624] reiserfs: using flush barriers [ 934.815873][T30586] BTRFS info (device loop6): disabling tree log [ 934.824856][T30624] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 934.863063][T30586] BTRFS info (device loop6): enabling disk space caching [ 934.870181][T30586] BTRFS info (device loop6): disk space caching is enabled [ 934.918467][T30624] REISERFS (device loop2): checking transaction log (loop2) [ 934.967256][T30624] REISERFS (device loop2): Using r5 hash to sort names [ 935.110363][T11379] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 935.220959][T30586] BTRFS info (device loop6): enabling ssd optimizations [ 935.874893][T11442] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 935.920402][T30621] loop0: detected capacity change from 0 to 40427 [ 935.995397][T30621] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 936.065551][T30621] F2FS-fs (loop0): invalid crc value [ 936.111464][T30621] F2FS-fs (loop0): Found nat_bits in checkpoint [ 936.424367][T30621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 936.576231][T30621] syz.0.11920: attempt to access beyond end of device [ 936.576231][T30621] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 936.775639][ T4279] syz-executor: attempt to access beyond end of device [ 936.775639][ T4279] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 936.796581][ T22] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 936.985463][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.018382][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 937.035088][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.061523][ T22] usb 3-1: config 0 descriptor?? [ 937.159340][ T26] audit: type=1326 audit(2000000154.180:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30684 comm="syz.6.11926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 937.287126][ T22] ath6kl: Failed to submit usb control message: -71 [ 937.306693][ T26] audit: type=1326 audit(2000000154.200:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30684 comm="syz.6.11926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 937.313360][ T22] ath6kl: unable to send the bmi data to the device: -71 [ 937.379665][ T22] ath6kl: Unable to send get target info: -71 [ 937.404347][ T22] ath6kl: Failed to init ath6kl core: -71 [ 937.448115][ T26] audit: type=1326 audit(2000000154.200:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30684 comm="syz.6.11926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 937.475087][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.517610][ T26] audit: type=1326 audit(2000000154.200:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30684 comm="syz.6.11926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 937.644387][ T22] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 937.665665][ T22] usb 3-1: USB disconnect, device number 64 [ 938.008570][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11936'. [ 938.036489][T30709] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 938.043010][T30709] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 938.994338][T30745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11954'. [ 940.686183][T30774] loop0: detected capacity change from 0 to 32768 [ 940.714018][T30774] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.11970 (30774) [ 940.750686][T30774] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 940.820864][T30774] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 940.893133][T30774] BTRFS info (device loop0): force zlib compression, level 3 [ 940.900605][T30774] BTRFS info (device loop0): force clearing of disk cache [ 940.973433][T30774] BTRFS info (device loop0): disabling tree log [ 940.998192][T30774] BTRFS info (device loop0): enabling disk space caching [ 941.027749][T30774] BTRFS info (device loop0): disk space caching is enabled [ 941.288620][T30774] BTRFS info (device loop0): enabling ssd optimizations [ 941.533274][ T4279] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 941.782659][ T4382] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4382) [ 941.884627][T30845] bond0: (slave gretap0): Error: Device type is different from other slaves [ 943.253071][T28709] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 943.463139][T28709] usb 1-1: Using ep0 maxpacket: 32 [ 943.470442][T28709] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.502987][T28709] usb 1-1: config 0 has no interface number 0 [ 943.537714][T28709] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 943.557271][T28709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.586227][T28709] usb 1-1: Product: syz [ 943.596370][T28709] usb 1-1: Manufacturer: syz [ 943.606487][T28709] usb 1-1: SerialNumber: syz [ 943.617520][T28709] usb 1-1: config 0 descriptor?? [ 943.641177][T28709] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 943.680685][T28709] usb 1-1: selecting invalid altsetting 1 [ 943.697071][T28709] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 943.734164][T28709] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 943.783365][T28709] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 943.802071][T28709] usb 1-1: media controller created [ 943.886997][T28709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.921313][T30880] loop2: detected capacity change from 0 to 32768 [ 943.990725][T30880] gfs2: Invalid block size [ 944.171347][T28709] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 944.312462][T28709] usb 1-1: USB disconnect, device number 50 [ 945.254172][T30942] MTD: Couldn't look up './bus': -15 [ 946.400788][T30936] loop6: detected capacity change from 0 to 32768 [ 946.443701][T30936] gfs2: Invalid block size [ 948.894858][T31029] loop2: detected capacity change from 0 to 32768 [ 949.493304][T31074] loop2: detected capacity change from 0 to 164 [ 950.335488][T31100] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.12116'. [ 950.536125][T31075] loop6: detected capacity change from 0 to 32768 [ 950.576535][T31075] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.12104 (31075) [ 950.590534][T31109] loop0: detected capacity change from 0 to 164 [ 950.649512][T31075] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 950.713057][T31075] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 950.766003][T31075] BTRFS info (device loop6): setting nodatasum [ 950.772292][T31075] BTRFS info (device loop6): using free space tree [ 951.233914][T31075] BTRFS info (device loop6): enabling ssd optimizations [ 951.386927][ T8837] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 951.583172][ T8837] usb 6-1: Using ep0 maxpacket: 32 [ 951.592730][ T8837] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 951.643233][ T8837] usb 6-1: config 0 has no interface number 0 [ 951.653049][T11442] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 951.674034][ T8837] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 951.704618][ T8837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.712694][ T8837] usb 6-1: Product: syz [ 951.743549][ T8837] usb 6-1: Manufacturer: syz [ 951.748236][ T8837] usb 6-1: SerialNumber: syz [ 951.791078][ T8837] usb 6-1: config 0 descriptor?? [ 951.835211][ T8837] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 951.902975][ T8837] usb 6-1: selecting invalid altsetting 1 [ 951.908820][ T8837] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 951.936250][T31157] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 951.941156][T31155] ptrace attach of "./syz-executor exec"[4279] was attempted by "./syz-executor exec"[31155] [ 952.043789][ T8837] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 952.083626][ T8837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 952.101878][ T8837] usb 6-1: media controller created [ 952.203917][ T8837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.512054][ T8837] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 952.648579][ T8837] usb 6-1: USB disconnect, device number 35 [ 953.111917][T31180] 8021q: VLANs not supported on hsr0 [ 953.324992][T31190] loop6: detected capacity change from 0 to 256 [ 953.424752][T31190] FAT-fs (loop6): Directory bread(block 64) failed [ 953.472734][T31166] loop0: detected capacity change from 0 to 32768 [ 953.492241][T31190] FAT-fs (loop6): Directory bread(block 65) failed [ 953.523409][T31190] FAT-fs (loop6): Directory bread(block 66) failed [ 953.530018][T31190] FAT-fs (loop6): Directory bread(block 67) failed [ 953.536817][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12149'. [ 953.596989][T31190] FAT-fs (loop6): Directory bread(block 68) failed [ 953.609724][T31196] loop5: detected capacity change from 0 to 512 [ 953.618430][T31190] FAT-fs (loop6): Directory bread(block 69) failed [ 953.632623][T31190] FAT-fs (loop6): Directory bread(block 70) failed [ 953.649649][T31190] FAT-fs (loop6): Directory bread(block 71) failed [ 953.690407][T31190] FAT-fs (loop6): Directory bread(block 72) failed [ 953.700331][T31196] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.12150: bad orphan inode 15 [ 953.719638][T31190] FAT-fs (loop6): Directory bread(block 73) failed [ 953.733430][T31196] ext4_test_bit(bit=14, block=5) = 0 [ 953.738802][T31196] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 953.874014][T31196] EXT4-fs error (device loop5): __ext4_new_inode:1075: comm syz.5.12150: reserved inode found cleared - inode=1 [ 954.126048][T11379] EXT4-fs (loop5): unmounting filesystem. [ 954.291702][T31210] 8021q: VLANs not supported on hsr0 [ 954.563230][T31220] binder: 31219:31220 ioctl c0306201 200000004a40 returned -14 [ 954.893409][T31233] lo speed is unknown, defaulting to 1000 [ 954.921014][T31233] lo speed is unknown, defaulting to 1000 [ 954.954619][T31233] lo speed is unknown, defaulting to 1000 [ 954.988079][T31233] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 955.055217][T31233] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 955.122438][T31233] lo speed is unknown, defaulting to 1000 [ 955.131218][T31233] lo speed is unknown, defaulting to 1000 [ 955.138130][T31239] loop5: detected capacity change from 0 to 1024 [ 955.139261][T31233] lo speed is unknown, defaulting to 1000 [ 955.152090][T31233] lo speed is unknown, defaulting to 1000 [ 955.165446][T31233] lo speed is unknown, defaulting to 1000 [ 955.323785][T10680] hfsplus: b-tree write err: -5, ino 4 [ 955.542166][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12178'. [ 956.561249][T31285] netlink: 'syz.0.12195': attribute type 6 has an invalid length. [ 956.859340][T31300] loop6: detected capacity change from 0 to 16 [ 956.909634][T31300] erofs: (device loop6): mounted with root inode @ nid 36. [ 956.966663][T31300] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 957.033510][ T4272] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 957.045047][T31300] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 957.123181][ T26] audit: type=1800 audit(2000000174.150:470): pid=31300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12203" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 957.364909][T31314] UBIFS error (pid: 31314): cannot open "(null)", error -22 [ 957.498313][T31321] netlink: 'syz.2.12211': attribute type 6 has an invalid length. [ 957.896733][T31331] netlink: 'syz.1.12217': attribute type 21 has an invalid length. [ 957.940293][T31331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12217'. [ 958.214341][T31308] loop5: detected capacity change from 0 to 32768 [ 958.253861][T31308] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.12205 (31308) [ 958.333186][T31308] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 958.394087][T31308] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 958.429036][T31308] BTRFS info (device loop5): setting nodatasum [ 958.442380][T31347] loop0: detected capacity change from 0 to 512 [ 958.463355][T31308] BTRFS info (device loop5): using free space tree [ 958.514753][T31347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 958.532571][T31347] ext4 filesystem being mounted at /2477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.630335][T31347] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #12: comm syz.0.12226: corrupted xattr block 6 [ 958.758507][T31370] dlm: non-version read from control device 0 [ 958.864252][T31308] BTRFS info (device loop5): enabling ssd optimizations [ 958.901872][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 959.154255][T11379] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 959.593080][T31344] loop2: detected capacity change from 0 to 32768 [ 960.078808][T31401] loop0: detected capacity change from 0 to 512 [ 960.103735][T31402] dlm: non-version read from control device 0 [ 960.367636][T31412] loop2: detected capacity change from 0 to 16 [ 960.453811][T31412] erofs: (device loop2): mounted with root inode @ nid 36. [ 960.524716][T31412] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-22] [ 960.842178][T31427] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12255'. [ 960.873035][T31427] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12255'. [ 961.011790][T31433] loop5: detected capacity change from 0 to 512 [ 961.013512][T31434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.533195][T29468] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 961.748470][T29468] usb 7-1: Using ep0 maxpacket: 16 [ 961.759965][T29468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 961.802390][T29468] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 961.844646][T29468] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 961.905106][T29468] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 961.933161][T29468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.961804][T29468] usb 7-1: Product: syz [ 961.982064][T29468] usb 7-1: Manufacturer: syz [ 961.996246][T29468] usb 7-1: SerialNumber: syz [ 962.033847][T29468] usb 7-1: config 0 descriptor?? [ 962.039676][T31442] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 962.053756][T31442] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 962.064303][T31466] netlink: 'syz.0.12275': attribute type 12 has an invalid length. [ 962.074641][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 962.102201][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 962.118780][T29468] port100 7-1:0.0: NFC: Could not get supported command types [ 962.298763][T28709] usb 7-1: USB disconnect, device number 41 [ 962.383787][T31477] loop2: detected capacity change from 0 to 512 [ 962.413533][T31477] EXT4-fs: Ignoring removed bh option [ 962.436439][T31477] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 962.465764][T31477] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 962.513472][T31477] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 962.544260][T31477] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 962.633993][T31477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 962.666919][T31477] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.12280: bg 0: block 353: padding at end of block bitmap is not set [ 962.864120][T21356] EXT4-fs (loop2): unmounting filesystem. [ 963.403366][ T8833] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 963.593452][ T8833] usb 6-1: Using ep0 maxpacket: 8 [ 963.603995][ T8833] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 963.636431][T31520] netlink: 'syz.1.12301': attribute type 12 has an invalid length. [ 963.644516][ T8833] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 963.644547][ T8833] usb 6-1: Product: syz [ 963.644564][ T8833] usb 6-1: Manufacturer: syz [ 963.644581][ T8833] usb 6-1: SerialNumber: syz [ 963.666291][ T8833] usb 6-1: config 0 descriptor?? [ 963.698222][ T8833] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 963.892458][ T8833] gspca_zc3xx: reg_w_i err -71 [ 963.897615][ T8833] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 963.919323][ T8833] usb 6-1: USB disconnect, device number 36 [ 964.610524][T31557] loop0: detected capacity change from 0 to 256 [ 964.712667][T31560] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12320'. [ 964.737555][T31557] FAT-fs (loop0): Directory bread(block 64) failed [ 964.773277][T31557] FAT-fs (loop0): Directory bread(block 65) failed [ 964.780033][T31557] FAT-fs (loop0): Directory bread(block 66) failed [ 964.823019][T31557] FAT-fs (loop0): Directory bread(block 67) failed [ 964.829844][T31557] FAT-fs (loop0): Directory bread(block 68) failed [ 964.891938][T31557] FAT-fs (loop0): Directory bread(block 69) failed [ 964.931183][T31557] FAT-fs (loop0): Directory bread(block 70) failed [ 964.954369][T31557] FAT-fs (loop0): Directory bread(block 71) failed [ 964.983211][T31557] FAT-fs (loop0): Directory bread(block 72) failed [ 965.000129][T31557] FAT-fs (loop0): Directory bread(block 73) failed [ 965.647819][T31587] loop2: detected capacity change from 0 to 16 [ 965.673408][T31587] erofs: (device loop2): mounted with root inode @ nid 36. [ 965.687864][T31589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12334'. [ 965.726801][T31585] loop6: detected capacity change from 0 to 4096 [ 965.733615][T31587] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 965.778288][T31585] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 965.990538][T31585] ntfs3: loop6: failed to convert "c46c" to cp850 [ 966.110786][T31601] loop2: detected capacity change from 0 to 256 [ 966.123419][T31600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12339'. [ 966.163271][T31597] loop5: detected capacity change from 0 to 2048 [ 966.206864][T31597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 966.253207][T31601] FAT-fs (loop2): Directory bread(block 64) failed [ 966.260028][T31601] FAT-fs (loop2): Directory bread(block 65) failed [ 966.323309][T31601] FAT-fs (loop2): Directory bread(block 66) failed [ 966.360669][T31601] FAT-fs (loop2): Directory bread(block 67) failed [ 966.391185][T31601] FAT-fs (loop2): Directory bread(block 68) failed [ 966.433390][T31601] FAT-fs (loop2): Directory bread(block 69) failed [ 966.440141][T31601] FAT-fs (loop2): Directory bread(block 70) failed [ 966.496912][T31601] FAT-fs (loop2): Directory bread(block 71) failed [ 966.574562][T31601] FAT-fs (loop2): Directory bread(block 72) failed [ 966.581261][T31601] FAT-fs (loop2): Directory bread(block 73) failed [ 966.983361][ T8831] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 967.175681][ T8831] usb 6-1: Using ep0 maxpacket: 32 [ 967.186947][ T8831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.225804][ T8831] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 967.243516][ T8831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.253539][T31631] loop2: detected capacity change from 0 to 1024 [ 967.283352][T31631] EXT4-fs: Ignoring removed orlov option [ 967.285360][ T8831] usb 6-1: config 0 descriptor?? [ 967.324736][ T8831] usb 6-1: bad CDC descriptors [ 967.354611][T31628] loop6: detected capacity change from 0 to 4096 [ 967.389587][T31628] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 967.444043][T31631] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 967.557383][T28709] usb 6-1: USB disconnect, device number 37 [ 967.804110][T31644] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 967.865025][T21356] EXT4-fs (loop2): unmounting filesystem. [ 968.513498][T31668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12369'. [ 968.524439][T31667] netlink: 'syz.0.12368': attribute type 1 has an invalid length. [ 968.552540][T31667] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12368'. [ 968.687590][T31672] netlink: 'syz.1.12373': attribute type 1 has an invalid length. [ 968.806231][T31680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12377'. [ 968.854049][T31680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12377'. [ 969.250865][T31695] loop6: detected capacity change from 0 to 256 [ 969.293655][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12385'. [ 969.337969][T31699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12386'. [ 969.394802][T31695] FAT-fs (loop6): Directory bread(block 64) failed [ 969.401451][T31695] FAT-fs (loop6): Directory bread(block 65) failed [ 969.433942][T31695] FAT-fs (loop6): Directory bread(block 66) failed [ 969.463290][T31695] FAT-fs (loop6): Directory bread(block 67) failed [ 969.469998][T31695] FAT-fs (loop6): Directory bread(block 68) failed [ 969.523032][T31695] FAT-fs (loop6): Directory bread(block 69) failed [ 969.529729][T31695] FAT-fs (loop6): Directory bread(block 70) failed [ 969.639833][T31695] FAT-fs (loop6): Directory bread(block 71) failed [ 969.683206][T31695] FAT-fs (loop6): Directory bread(block 72) failed [ 969.693424][T31695] FAT-fs (loop6): Directory bread(block 73) failed [ 969.758478][T31704] loop2: detected capacity change from 0 to 4096 [ 969.814636][T31704] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 970.513208][T31731] netlink: 'syz.0.12402': attribute type 1 has an invalid length. [ 970.693291][T31736] loop6: detected capacity change from 0 to 1024 [ 970.700563][T31736] EXT4-fs: Ignoring removed orlov option [ 970.844481][T31736] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 970.952464][T31741] loop0: detected capacity change from 0 to 4096 [ 971.009283][T31741] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 971.086228][T11442] EXT4-fs (loop6): unmounting filesystem. [ 971.304978][T31759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12414'. [ 971.356332][T31755] loop2: detected capacity change from 0 to 4096 [ 971.399088][T31755] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 971.453056][ T8833] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 971.633238][ T8833] usb 6-1: Using ep0 maxpacket: 8 [ 971.639716][ T26] audit: type=1326 audit(2000000188.660:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31765 comm="syz.1.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 971.641226][ T8833] usb 6-1: unable to get BOS descriptor set [ 971.741209][ T8833] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 971.753072][ T26] audit: type=1326 audit(2000000188.730:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31765 comm="syz.1.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 971.783108][ T8833] usb 6-1: config 0 has no interface number 0 [ 971.791806][ T8833] usb 6-1: config 0 interface 125 has no altsetting 0 [ 971.809941][ T26] audit: type=1326 audit(2000000188.730:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31765 comm="syz.1.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 971.814091][T31755] ntfs: (device loop2): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 971.855730][ T8833] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 971.869509][ T26] audit: type=1326 audit(2000000188.730:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31765 comm="syz.1.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 971.903240][ T8833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.911319][ T8833] usb 6-1: Product: syz [ 971.919302][ T8833] usb 6-1: Manufacturer: syz [ 971.933553][ T8833] usb 6-1: SerialNumber: syz [ 971.940240][ T8833] usb 6-1: config 0 descriptor?? [ 971.947405][T31755] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 971.959681][ T8833] hub 6-1:0.125: bad descriptor, ignoring hub [ 971.974027][ T8833] hub: probe of 6-1:0.125 failed with error -5 [ 971.985021][ T8833] usb 6-1: Found UVC 0.00 device syz (17dc:0202) [ 971.990289][T31755] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 972.003763][ T8837] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 972.023102][ T8833] usb 6-1: No valid video chain found. [ 972.063009][T31755] ntfs: volume version 3.1. [ 972.122266][T31755] ntfs: (device loop2): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 972.139058][T31755] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 972.193203][ T8837] usb 1-1: Using ep0 maxpacket: 32 [ 972.209575][ T8837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.238883][T31774] loop6: detected capacity change from 0 to 2048 [ 972.246204][ T8837] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 972.267273][ T8837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.296686][ T8831] usb 6-1: USB disconnect, device number 38 [ 972.318537][ T8837] usb 1-1: config 0 descriptor?? [ 972.344281][ T8837] usb 1-1: bad CDC descriptors [ 972.349403][T31778] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 972.360650][T31774] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 972.390594][T31774] Remounting filesystem read-only [ 972.574663][ T8831] usb 1-1: USB disconnect, device number 51 [ 973.131049][T31794] netlink: 'syz.2.12431': attribute type 3 has an invalid length. [ 973.184622][T31794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12431'. [ 973.526126][T31811] loop2: detected capacity change from 0 to 2048 [ 973.582338][T31811] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 973.625049][T31811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 973.634452][T31804] xt_CT: No such helper "pptp" [ 974.192722][T31831] netlink: 'syz.0.12449': attribute type 3 has an invalid length. [ 974.258655][T31831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12449'. [ 974.564480][T31847] loop2: detected capacity change from 0 to 1024 [ 974.656110][T31847] hfsplus: extend alloc file! (8192,512,17039360) [ 975.163946][T31869] loop6: detected capacity change from 0 to 512 [ 975.210153][T31869] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 975.221600][T31869] ext4 filesystem being mounted at /1768/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.281720][T11442] EXT4-fs (loop6): unmounting filesystem. [ 975.988881][T31896] loop6: detected capacity change from 0 to 4096 [ 976.088276][T31896] ntfs3: loop6: MFT: r=b, expect seq=b instead of 1ff! [ 976.105742][T31896] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 976.166359][T31896] ntfs3: loop6: Failed to load $Extend. [ 976.500927][T31922] device wlan0 entered promiscuous mode [ 976.524641][T31922] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 977.060842][T31937] block device autoloading is deprecated and will be removed. [ 978.149083][T31982] loop6: detected capacity change from 0 to 256 [ 978.220505][T31982] exfat: Deprecated parameter 'utf8' [ 978.310479][T31982] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 978.752226][T32001] device wlan0 entered promiscuous mode [ 978.771135][T32001] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 979.008317][T32006] loop6: detected capacity change from 0 to 4096 [ 979.044119][T32006] __ntfs_warning: 1 callbacks suppressed [ 979.044135][T32006] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 979.416051][T32006] ntfs: (device loop6): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 979.466015][T32006] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 979.527813][T32006] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 979.603533][T32006] ntfs: volume version 3.1. [ 979.638945][T32006] ntfs: (device loop6): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 979.693597][T32006] ntfs: (device loop6): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 979.714451][T32006] ntfs: (device loop6): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 979.953330][ T8837] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 980.154882][ T8837] usb 6-1: config 255 has an invalid interface number: 215 but max is 0 [ 980.175095][ T8837] usb 6-1: config 255 has no interface number 0 [ 980.181476][ T8837] usb 6-1: config 255 interface 215 has no altsetting 0 [ 980.227485][ T8837] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7d.01 [ 980.257220][ T8837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.287603][ T8837] usb 6-1: Product: syz [ 980.291853][ T8837] usb 6-1: Manufacturer: syz [ 980.322960][ T8837] usb 6-1: SerialNumber: syz [ 980.555745][ T8837] usb 6-1: NFC: intf ffff88807c663000 id ffffffff8d405220 [ 980.577614][ T8837] usb 6-1: USB disconnect, device number 39 [ 982.414045][T32088] loop2: detected capacity change from 0 to 32768 [ 982.523266][ T8837] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 982.713091][ T8837] usb 1-1: Using ep0 maxpacket: 16 [ 982.720120][ T8837] usb 1-1: config 0 has no interfaces? [ 982.735333][ T8837] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 982.775224][ T8837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.823170][ T8837] usb 1-1: Product: syz [ 982.833324][ T8837] usb 1-1: Manufacturer: syz [ 982.856519][ T8837] usb 1-1: SerialNumber: syz [ 982.890622][ T8837] r8152-cfgselector 1-1: config 0 descriptor?? [ 983.123037][ T8837] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 983.348361][ T8831] usb 1-1: USB disconnect, device number 52 [ 983.500600][T32149] netlink: 666 bytes leftover after parsing attributes in process `syz.2.12605'. [ 983.687752][T32157] loop5: detected capacity change from 0 to 512 [ 983.723969][T32157] EXT4-fs: Ignoring removed orlov option [ 983.767223][T32157] EXT4-fs (loop5): orphan cleanup on readonly fs [ 983.787295][T32157] EXT4-fs error (device loop5): ext4_find_extent:900: inode #4: comm syz.5.12609: inode has invalid extent depth: 7 [ 983.822987][T32157] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 983.883240][T32157] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 983.953070][T32157] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 983.959771][T32157] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 984.085850][T32157] EXT4-fs error (device loop5): ext4_lookup:1855: inode #2: comm syz.5.12609: 'file0' linked to parent dir [ 984.234088][T11379] EXT4-fs (loop5): unmounting filesystem. [ 984.674438][T32179] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12619'. [ 984.874526][T32184] netlink: 'syz.5.12621': attribute type 39 has an invalid length. [ 984.882599][T32184] netlink: 'syz.5.12621': attribute type 33 has an invalid length. [ 984.933327][T32184] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12621'. [ 984.942836][T32187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12622'. [ 985.511182][T32211] loop6: detected capacity change from 0 to 64 [ 985.644979][T32211] Trying to free block not in datazone [ 985.650567][T32211] Trying to free block not in datazone [ 985.722693][T32211] Trying to free block not in datazone [ 985.735955][T32221] netlink: 'syz.2.12639': attribute type 8 has an invalid length. [ 985.739413][T32211] Trying to free block not in datazone [ 985.758439][T32221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.765214][T32211] minix_free_block (loop6:6): bit already cleared [ 985.787213][T32211] Trying to free block not in datazone [ 985.808842][T32211] Trying to free block not in datazone [ 986.768594][T32256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12657'. [ 986.831810][T32259] tmpfs: Bad value for 'mpol' [ 986.999525][T32261] netlink: 'syz.2.12659': attribute type 27 has an invalid length. [ 987.024307][T32261] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 987.240734][T32270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12663'. [ 987.342219][T32274] loop0: detected capacity change from 0 to 164 [ 987.753335][T32283] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 988.443543][T32305] netlink: 'syz.2.12680': attribute type 32 has an invalid length. [ 988.706363][T32316] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 988.742976][ T8837] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 988.896524][T32318] team0: Port device team_slave_0 removed [ 988.909748][T32318] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 988.973165][ T8837] usb 1-1: Using ep0 maxpacket: 8 [ 988.982807][ T8837] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 989.021819][ T8837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.050417][ T8837] usb 1-1: Product: syz [ 989.063014][ T8837] usb 1-1: Manufacturer: syz [ 989.083092][ T8837] usb 1-1: SerialNumber: syz [ 989.089777][ T8837] usb 1-1: config 0 descriptor?? [ 989.304423][T32332] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 989.326051][ T8837] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 989.547557][ T8837] usb write operation failed. (-71) [ 989.572858][ T8837] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 989.603431][ T8837] dvbdev: DVB: registering new adapter (Terratec H7) [ 989.610261][ T8837] usb 1-1: media controller created [ 989.647593][ T8837] usb read operation failed. (-71) [ 989.680225][ T8837] usb write operation failed. (-71) [ 989.714895][ T8837] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 989.738680][ T8837] usb 1-1: USB disconnect, device number 53 [ 990.058373][T32360] IPv6: sit1: Disabled Multicast RS [ 990.145820][T32362] loop6: detected capacity change from 0 to 256 [ 990.195063][T32362] FAT-fs (loop6): "posix" option is obsolete, not supported now [ 990.512702][T32370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12713'. [ 990.626218][T32377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12716'. [ 990.673025][T32377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12716'. [ 990.715880][T32377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12716'. [ 990.763034][T32377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12716'. [ 991.039774][T32391] befs: (nbd1): No write support. Marking filesystem read-only [ 991.090432][ T52] block nbd1: Attempted send on invalid socket [ 991.096841][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.106427][T32391] befs: (nbd1): unable to read superblock [ 991.332066][T32402] loop0: detected capacity change from 0 to 1024 [ 991.459729][T32402] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 991.561850][T32402] hfsplus: filesystem is marked journaled, leaving read-only. [ 992.294527][T32434] netlink: 'syz.5.12745': attribute type 15 has an invalid length. [ 992.322336][T32434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12745'. [ 992.471068][T32441] netlink: 'syz.2.12747': attribute type 3 has an invalid length. [ 992.783136][T32451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12753'. [ 993.006453][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.297075][T32469] openvswitch: netlink: Message has 4 unknown bytes. [ 993.450771][T32476] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.502550][T32477] device  entered promiscuous mode [ 993.630516][T32481] kAFS: unparsable volume name [ 994.423291][T32512] sctp: [Deprecated]: syz.2.12783 (pid 32512) Use of int in max_burst socket option. [ 994.423291][T32512] Use struct sctp_assoc_value instead [ 994.439292][T32511] QAT: Invalid ioctl 1075883590 [ 994.466282][T32511] QAT: Invalid ioctl 1075883590 [ 994.471373][T32511] QAT: Invalid ioctl 1075883590 [ 994.510199][T32511] QAT: Invalid ioctl 1075883590 [ 994.515790][T32514] netlink: 176 bytes leftover after parsing attributes in process `syz.6.12784'. [ 994.533270][T32511] QAT: Invalid ioctl 1075883590 [ 994.555120][T32511] QAT: Invalid ioctl 1075883590 [ 994.560287][T32511] QAT: Invalid ioctl 1075883590 [ 994.622633][T32511] QAT: Invalid ioctl 1075883590 [ 994.653049][T32511] QAT: Invalid ioctl 1075883590 [ 994.658067][T32511] QAT: Invalid ioctl 1075883590 [ 995.206309][T32533] device sit0 left promiscuous mode [ 995.333745][ T8831] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 995.534961][ T8831] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 995.551829][T32547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12801'. [ 995.571064][ T8831] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 995.590508][ T8831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.659939][ T8831] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 996.029625][T32567] device sit0 entered promiscuous mode [ 996.064114][T32567] netlink: 'syz.5.12810': attribute type 1 has an invalid length. [ 996.082433][T32567] netlink: 'syz.5.12810': attribute type 3 has an invalid length. [ 996.123225][T28709] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 996.299725][T32573] netlink: 'syz.2.12813': attribute type 39 has an invalid length. [ 996.308438][T32573] netlink: 'syz.2.12813': attribute type 33 has an invalid length. [ 996.317470][T32573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12813'. [ 996.334884][T28709] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 996.352060][T28709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.377487][T28709] usb 7-1: config 0 descriptor?? [ 996.798892][T28709] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f [ 996.811430][T28709] hackrf 7-1:0.0: Could not detect board [ 996.830625][T28709] hackrf: probe of 7-1:0.0 failed with error -71 [ 996.852852][T28709] usb 7-1: USB disconnect, device number 42 [ 996.966049][ T8831] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 996.984985][ T8831] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 997.010370][T32592] netlink: 'syz.5.12822': attribute type 5 has an invalid length. [ 997.032628][ T8831] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 997.059792][ T8831] usb 2-1: USB disconnect, device number 53 [ 997.066514][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12822'. [ 998.041540][T32626] netlink: 'syz.6.12839': attribute type 21 has an invalid length. [ 998.063013][T32626] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12839'. [ 998.082712][T32626] netlink: 'syz.6.12839': attribute type 4 has an invalid length. [ 998.113314][T32626] netlink: 'syz.6.12839': attribute type 5 has an invalid length. [ 998.139691][T32626] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12839'. [ 998.323159][T28709] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 998.531194][T28709] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 998.547055][T28709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.578995][T28709] usb 1-1: config 0 descriptor?? [ 998.612760][T32645] loop5: detected capacity change from 0 to 64 [ 999.015189][T28709] [drm:udl_init] *ERROR* Selecting channel failed [ 999.084435][T28709] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 999.091995][T28709] [drm] Initialized udl on minor 2 [ 999.135284][T28709] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 999.163417][T28709] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 999.200559][T28709] usb 1-1: USB disconnect, device number 54 [ 999.214900][T32661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12856'. [ 999.228892][T29468] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 999.251686][T29468] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 999.280338][T29468] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 999.426143][T32664] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 999.445452][T32664] overlayfs: overlapping lowerdir path [ 999.948883][T32683] loop2: detected capacity change from 0 to 1764 [ 1001.254743][T32735] loop5: detected capacity change from 0 to 8 [ 1001.261729][T32735] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1001.296971][ T4382] udevd[4382]: incorrect cramfs checksum on /dev/loop5 [ 1001.427343][T32735] cramfs: bad data blocksize 4294950552 [ 1001.439154][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1001.451780][T32741] loop6: detected capacity change from 0 to 1764 [ 1001.468646][T32735] cramfs: bad data blocksize 4294950552 [ 1001.501017][ T4382] udevd[4382]: incorrect cramfs checksum on /dev/loop5 [ 1001.510103][ T26] audit: type=1800 audit(2000000218.530:475): pid=32735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.12893" name="file2" dev="loop5" ino=16732 res=0 errno=0 [ 1002.182994][ T8831] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1002.276487][T32767] loop5: detected capacity change from 0 to 128 [ 1002.404902][ T8831] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.422375][ T303] loop0: detected capacity change from 0 to 2048 [ 1002.437935][ T8831] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1002.460690][ T8831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.520385][ T303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1002.553076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1002.572711][ T8831] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1002.621523][ T307] loop5: detected capacity change from 0 to 256 [ 1002.853065][T28711] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1003.063275][T28711] usb 2-1: Using ep0 maxpacket: 16 [ 1003.070721][T28711] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1003.099467][T28711] usb 2-1: config 1 has no interface number 0 [ 1003.133952][T28711] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1003.173219][T28711] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1003.209737][T28711] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1003.219701][ T317] netlink: 'syz.5.12918': attribute type 1 has an invalid length. [ 1003.230338][T28711] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1003.242618][ T317] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.12918'. [ 1003.273305][T28711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.293125][T28711] usb 2-1: Product: syz [ 1003.297380][T28711] usb 2-1: Manufacturer: syz [ 1003.322479][T28711] usb 2-1: SerialNumber: syz [ 1003.354864][ T305] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1003.376948][ T305] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1003.598967][T28711] aqc111: probe of 2-1:1.105 failed with error -71 [ 1003.648833][T28711] usb 2-1: USB disconnect, device number 54 [ 1003.670018][ T330] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1003.691635][ T330] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1003.742723][ T330] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1003.787022][ T330] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1003.847719][ T8831] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1003.863482][ T8831] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1003.882175][ T8831] stv0680 7-1:4.0: last error: 86, command = 0x78 [ 1003.910449][ T8831] usb 7-1: USB disconnect, device number 43 [ 1004.666982][ T357] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1004.743272][ T357] overlayfs: conflicting options: userxattr,redirect_dir=off [ 1005.065125][ T372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12944'. [ 1005.091325][ T373] netlink: 'syz.0.12943': attribute type 8 has an invalid length. [ 1005.113104][ T373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1005.380875][ T382] SET target dimension over the limit! [ 1005.612354][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12954'. [ 1006.043807][ T408] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1006.169180][ T415] netlink: 'syz.6.12964': attribute type 27 has an invalid length. [ 1006.253899][ T417] befs: (nbd2): No write support. Marking filesystem read-only [ 1006.261846][ T1381] block nbd2: Attempted send on invalid socket [ 1006.268549][ T1381] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.277816][ T417] befs: (nbd2): unable to read superblock [ 1006.293377][ T415] C: renamed from team_slave_0 [ 1006.813108][ T442] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 1006.824877][ T440] tmpfs: Bad value for 'mpol' [ 1006.837685][ T26] audit: type=1326 audit(2000000223.860:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=441 comm="syz.2.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1006.923244][ T26] audit: type=1326 audit(2000000223.900:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=441 comm="syz.2.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1007.027226][ T26] audit: type=1326 audit(2000000223.900:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=441 comm="syz.2.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1007.063605][ T447] netlink: 'syz.5.12981': attribute type 4 has an invalid length. [ 1007.139499][ T26] audit: type=1326 audit(2000000223.900:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=441 comm="syz.2.12978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1007.411802][ T463] xt_hashlimit: size too large, truncated to 1048576 [ 1007.453818][ T463] xt_hashlimit: invalid interval [ 1007.620018][ T469] loop2: detected capacity change from 0 to 16 [ 1007.678145][ T469] erofs: (device loop2): mounted with root inode @ nid 36. [ 1007.787161][ T469] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1007.825676][ T4272] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192] [ 1007.846488][ T469] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096] [ 1007.943187][ T26] audit: type=1800 audit(2000000224.970:480): pid=469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12992" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 1008.003808][ T476] netlink: 'syz.5.12996': attribute type 32 has an invalid length. [ 1008.012063][ T477] netlink: 'syz.1.12995': attribute type 21 has an invalid length. [ 1008.042357][ T477] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12995'. [ 1008.153243][ T477] netlink: 'syz.1.12995': attribute type 5 has an invalid length. [ 1008.173274][ T477] netlink: 'syz.1.12995': attribute type 6 has an invalid length. [ 1008.212991][ T477] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12995'. [ 1008.341243][ T455] loop0: detected capacity change from 0 to 32768 [ 1008.472656][ T455] XFS (loop0): Mounting V5 Filesystem [ 1008.677485][ T455] XFS (loop0): Ending clean mount [ 1008.760442][ T455] XFS (loop0): Quotacheck needed: Please wait. [ 1008.904117][ T455] XFS (loop0): Quotacheck: Done. [ 1008.932079][ T507] loop2: detected capacity change from 0 to 64 [ 1009.101240][ T507] Trying to free block not in datazone [ 1009.137880][ T4279] XFS (loop0): Unmounting Filesystem [ 1009.196411][ T511] netlink: 'syz.5.13007': attribute type 27 has an invalid length. [ 1009.277589][ T511] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1010.213116][ T532] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13018'. [ 1010.222271][ T532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13018'. [ 1010.293810][ T532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13018'. [ 1010.314648][ T532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13018'. [ 1010.493175][ T542] netlink: 'syz.0.13023': attribute type 3 has an invalid length. [ 1010.906033][ T559] netlink: 476 bytes leftover after parsing attributes in process `syz.1.13031'. [ 1010.907609][ T562] loop2: detected capacity change from 0 to 16 [ 1010.957249][ T562] erofs: (device loop2): mounted with root inode @ nid 36. [ 1011.047914][ T562] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1011.170453][ T562] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 1011.206986][ T562] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1011.754568][ T590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13045'. [ 1011.795997][ T590] netlink: 7 bytes leftover after parsing attributes in process `syz.1.13045'. [ 1011.929461][ T597] usb usb8: usbfs: process 597 (syz.6.13048) did not claim interface 0 before use [ 1012.418300][ T612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13055'. [ 1012.465091][ T612] netlink: zone id is out of range [ 1012.477950][ T612] netlink: zone id is out of range [ 1012.490173][ T615] xt_hashlimit: size too large, truncated to 1048576 [ 1012.517577][ T612] netlink: zone id is out of range [ 1012.537823][ T612] netlink: zone id is out of range [ 1012.575240][ T615] xt_hashlimit: invalid interval [ 1012.583443][ T612] netlink: zone id is out of range [ 1012.588765][ T612] netlink: zone id is out of range [ 1012.620201][ T612] netlink: zone id is out of range [ 1012.641964][ T612] netlink: zone id is out of range [ 1012.652981][ T612] netlink: zone id is out of range [ 1012.673020][ T612] netlink: zone id is out of range [ 1012.900339][ T626] loop0: detected capacity change from 0 to 16 [ 1012.953126][ T8836] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1012.963716][ T626] erofs: (device loop0): mounted with root inode @ nid 36. [ 1013.022268][ T626] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1013.059083][ T4272] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192] [ 1013.075067][ T626] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096] [ 1013.113170][ T26] audit: type=1800 audit(2000000230.140:481): pid=626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13062" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 1013.143148][ T8836] usb 7-1: Using ep0 maxpacket: 16 [ 1013.150580][ T8836] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 1013.191112][ T8836] usb 7-1: config 1 has no interface number 0 [ 1013.233099][ T8836] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1013.273026][ T8836] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1013.298080][ T8836] usb 7-1: config 1 interface 105 has no altsetting 0 [ 1013.363082][ T8836] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1013.372243][ T8836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.440460][ T8836] usb 7-1: Product: syz [ 1013.462120][ T8836] usb 7-1: Manufacturer: syz [ 1013.473436][ T8836] usb 7-1: SerialNumber: syz [ 1013.493954][ T646] xt_ecn: cannot match TCP bits for non-tcp packets [ 1013.516834][ T618] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1013.535022][ T618] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1013.617240][ T648] loop5: detected capacity change from 0 to 128 [ 1013.672366][ T648] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1013.730134][ T650] netlink: 'syz.0.13073': attribute type 10 has an invalid length. [ 1013.736263][ T648] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1013.753487][T28709] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1013.782559][ T8836] aqc111: probe of 7-1:1.105 failed with error -71 [ 1013.806321][ T648] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1013.831686][ T8836] usb 7-1: USB disconnect, device number 44 [ 1013.944223][T11379] EXT4-fs (loop5): unmounting filesystem. [ 1013.952949][T28709] usb 2-1: Using ep0 maxpacket: 16 [ 1013.960144][T28709] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1013.979110][T28709] usb 2-1: config 252 has no interface number 0 [ 1014.013180][T28709] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1014.063162][T28709] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1014.110902][T28709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.132296][T28709] usb 2-1: Product: syz [ 1014.138708][T28709] usb 2-1: Manufacturer: syz [ 1014.152944][T28709] usb 2-1: SerialNumber: syz [ 1014.192197][ T661] loop2: detected capacity change from 0 to 4096 [ 1014.205798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1014.215677][T28709] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1014.273732][ T661] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1014.293288][ T661] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1014.343171][ T661] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1014.386289][ T666] loop0: detected capacity change from 0 to 4096 [ 1014.403014][ T661] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1014.434542][ T6421] usb 2-1: Failed to submit usb control message: -71 [ 1014.442734][T28709] usb 2-1: USB disconnect, device number 55 [ 1014.455825][ T666] ntfs3: loop0: ino=3, Correct links count -> 2. [ 1014.462374][ T6421] usb 2-1: unable to send the bmi data to the device: -71 [ 1014.497147][ T661] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1014.497540][ T6421] usb 2-1: unable to get target info from device [ 1014.556637][ T668] loop5: detected capacity change from 0 to 2048 [ 1014.569191][ T6421] usb 2-1: could not get target info (-71) [ 1014.584660][ T661] ntfs: volume version 3.1. [ 1014.614036][ T6421] usb 2-1: could not probe fw (-71) [ 1014.641641][ T661] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1014.682433][ T661] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1014.704616][ T668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1014.746029][ T668] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1014.814001][ T661] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1014.843476][ T661] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1015.034883][T11379] EXT4-fs (loop5): unmounting filesystem. [ 1015.295405][ T685] loop0: detected capacity change from 0 to 16 [ 1015.338132][ T685] erofs: (device loop0): mounted with root inode @ nid 36. [ 1015.385333][ T685] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1015.439671][ T685] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 1015.479145][ T685] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1015.729031][ T698] loop5: detected capacity change from 0 to 256 [ 1015.844149][ T698] exfat: Deprecated parameter 'utf8' [ 1015.927484][ T698] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 1016.063242][ T711] x_tables: duplicate underflow at hook 2 [ 1016.131033][ T713] loop6: detected capacity change from 0 to 128 [ 1016.207999][ T713] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1016.285720][ T713] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1016.300048][ T713] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1016.455007][T11442] EXT4-fs (loop6): unmounting filesystem. [ 1016.620409][ T726] loop6: detected capacity change from 0 to 256 [ 1017.159437][ T745] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13116'. [ 1017.401972][ T759] loop0: detected capacity change from 0 to 8 [ 1017.483380][ T759] SQUASHFS error: Failed to read block 0x636: -5 [ 1017.523286][ T759] SQUASHFS error: Unable to read metadata cache entry [634] [ 1017.542209][ T761] netlink: 676 bytes leftover after parsing attributes in process `syz.5.13123'. [ 1017.903549][ T778] loop2: detected capacity change from 0 to 24 [ 1018.273703][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1018.273728][ T26] audit: type=1326 audit(2000000235.300:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=791 comm="syz.6.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1018.363263][ T26] audit: type=1326 audit(2000000235.300:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=791 comm="syz.6.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1018.433179][ T795] futex_wake_op: syz.0.13139 tries to shift op by 32; fix this program [ 1018.493251][ T26] audit: type=1326 audit(2000000235.340:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=791 comm="syz.6.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1018.593033][ T26] audit: type=1326 audit(2000000235.340:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=791 comm="syz.6.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1018.692718][ T26] audit: type=1326 audit(2000000235.340:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=791 comm="syz.6.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1018.839176][ T810] loop5: detected capacity change from 0 to 2048 [ 1018.847259][ T811] loop6: detected capacity change from 0 to 2048 [ 1018.881808][ T810] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1018.942517][ T811] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1019.024711][ T811] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1019.053188][ T8837] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1019.194436][T11442] EXT4-fs (loop6): unmounting filesystem. [ 1019.276980][ T8837] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1019.292020][ T8837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.327615][ T8837] usb 3-1: Product: syz [ 1019.347099][ T8837] usb 3-1: Manufacturer: syz [ 1019.351778][ T8837] usb 3-1: SerialNumber: syz [ 1019.384370][ T8837] usb 3-1: config 0 descriptor?? [ 1019.417807][ T8837] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1019.541834][ T832] loop6: detected capacity change from 0 to 4096 [ 1019.633090][ T832] ntfs3: loop6: ino=3, Correct links count -> 2. [ 1019.810233][ T8837] gspca_sunplus: reg_w_riv err -71 [ 1019.815943][ T8837] sunplus: probe of 3-1:0.0 failed with error -71 [ 1019.854456][ T8837] usb 3-1: USB disconnect, device number 65 [ 1019.874807][ T26] audit: type=1326 audit(2000000236.900:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=837 comm="syz.1.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 1019.974464][ T26] audit: type=1326 audit(2000000236.960:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=837 comm="syz.1.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 1020.100292][ T26] audit: type=1326 audit(2000000236.960:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=837 comm="syz.1.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 1020.174197][ T26] audit: type=1326 audit(2000000236.960:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=837 comm="syz.1.13159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddb9aeb9 code=0x7ffc0000 [ 1020.625471][ T828] loop5: detected capacity change from 0 to 32768 [ 1020.767748][ T828] XFS (loop5): Mounting V5 Filesystem [ 1020.858190][ T828] XFS (loop5): Ending clean mount [ 1020.869490][ T828] XFS (loop5): Quotacheck needed: Please wait. [ 1020.983585][ T828] XFS (loop5): Quotacheck: Done. [ 1021.132497][ T868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1021.151565][T11379] XFS (loop5): Unmounting Filesystem [ 1021.183052][ T840] loop0: detected capacity change from 0 to 32768 [ 1021.274199][ T840] jfs_lookup: iget failed on inum 4 [ 1021.721557][ T891] loop6: detected capacity change from 0 to 1024 [ 1021.790774][ T891] EXT4-fs: Ignoring removed mblk_io_submit option [ 1021.870232][ T891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1021.879672][ T896] netlink: 'syz.1.13182': attribute type 21 has an invalid length. [ 1021.897661][ T891] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1021.938330][ T896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13182'. [ 1021.965973][ T891] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1022.007841][ T891] EXT4-fs: Ignoring removed mblk_io_submit option [ 1022.037990][ T891] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1022.079790][ T891] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1022.254626][T11442] EXT4-fs (loop6): unmounting filesystem. [ 1022.535499][ T920] device bond3 entered promiscuous mode [ 1022.561140][ T920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1022.870841][ T931] netlink: 760 bytes leftover after parsing attributes in process `syz.1.13193'. [ 1023.376636][ T945] device netdevsim0 left promiscuous mode [ 1023.626067][ T915] loop2: detected capacity change from 0 to 40427 [ 1023.675147][ T915] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x3ffff [ 1023.714128][ T915] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x364 [ 1023.783385][ T915] F2FS-fs (loop2): invalid crc value [ 1023.829093][ T915] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1023.931226][ T969] netlink: 'syz.5.13210': attribute type 1 has an invalid length. [ 1023.991431][ T969] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13210'. [ 1024.013735][ T915] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x18f/0x360 [ 1024.101472][ T915] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1024.157006][ T975] autofs4:pid:975:autofs_fill_super: called with bogus options [ 1024.249382][ T915] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=30303030, run fsck to fix. [ 1024.624680][ T986] x_tables: unsorted entry at hook 3 [ 1025.119491][ T26] audit: type=1326 audit(2000000242.130:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1008 comm="syz.6.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1025.142286][ T1010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13227'. [ 1025.169210][ T1010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13227'. [ 1025.189005][ T26] audit: type=1326 audit(2000000242.140:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1008 comm="syz.6.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1025.283784][ T26] audit: type=1326 audit(2000000242.140:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1008 comm="syz.6.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1025.367227][ T26] audit: type=1326 audit(2000000242.140:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1008 comm="syz.6.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7c79aeb9 code=0x7ffc0000 [ 1025.771535][ T1035] loop6: detected capacity change from 0 to 1764 [ 1025.848973][ T1035] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1025.927575][ T1039] loop2: detected capacity change from 0 to 64 [ 1026.453066][ T1024] loop5: detected capacity change from 0 to 32768 [ 1026.503271][ T1024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.13231 (1024) [ 1026.584693][ T1024] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1026.646123][ T1024] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1026.686690][ T1024] BTRFS info (device loop5): using free space tree [ 1027.103343][ T1024] BTRFS info (device loop5): enabling ssd optimizations [ 1027.282283][T11379] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1027.334700][ T1090] IPv6: sit4: Disabled Multicast RS [ 1027.826561][ T1103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13259'. [ 1028.023938][ T1100] netlink: 136 bytes leftover after parsing attributes in process `syz.6.13258'. [ 1028.072970][ T1100] net_ratelimit: 111 callbacks suppressed [ 1028.072990][ T1100] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1028.543093][ T8836] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1028.733111][ T8836] usb 3-1: Using ep0 maxpacket: 8 [ 1028.740684][ T8836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.794902][ T8836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.807405][ T8836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.823486][ T8836] usb 3-1: Product: syz [ 1028.852936][ T8836] usb 3-1: Manufacturer: syz [ 1028.873512][ T8836] usb 3-1: SerialNumber: syz [ 1028.899541][ T8836] usb 3-1: bad CDC descriptors [ 1028.949293][ T1136] netlink: 188 bytes leftover after parsing attributes in process `syz.6.13276'. [ 1029.122610][ T8831] usb 3-1: USB disconnect, device number 66 [ 1029.185388][ T1145] loop6: detected capacity change from 0 to 512 [ 1029.238622][ T1145] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1029.258242][ T1145] ext4 filesystem being mounted at /1931/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.471678][ T1156] loop0: detected capacity change from 0 to 16 [ 1029.516952][ T1156] erofs: (device loop0): mounted with root inode @ nid 36. [ 1029.541536][ T1156] syz.0.13283: attempt to access beyond end of device [ 1029.541536][ T1156] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1029.588197][T11442] EXT4-fs (loop6): unmounting filesystem. [ 1029.635237][ T1156] syz.0.13283: attempt to access beyond end of device [ 1029.635237][ T1156] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1029.718455][ T26] audit: type=1800 audit(2000000246.740:495): pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13283" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1030.346480][ T1183] openvswitch: netlink: Message has 1 unknown bytes. [ 1030.906261][ T1196] netlink: 'syz.5.13302': attribute type 15 has an invalid length. [ 1031.302714][ T1179] loop0: detected capacity change from 0 to 32768 [ 1031.426553][ T1179] XFS (loop0): Mounting V5 Filesystem [ 1031.654737][ T1179] XFS (loop0): Ending clean mount [ 1031.861770][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.874660][ T4279] XFS (loop0): Unmounting Filesystem [ 1032.495320][ T1252] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13326'. [ 1032.573631][ T1252] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13326'. [ 1032.582762][ T1252] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13326'. [ 1033.194049][ T26] audit: type=1326 audit(2000000250.220:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1280 comm="syz.2.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1033.254011][ T1283] tmpfs: Bad value for 'mpol' [ 1033.293197][ T26] audit: type=1326 audit(2000000250.250:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1280 comm="syz.2.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1033.372946][ T26] audit: type=1326 audit(2000000250.250:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1280 comm="syz.2.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1033.486132][ T26] audit: type=1326 audit(2000000250.250:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1280 comm="syz.2.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc059aeb9 code=0x7ffc0000 [ 1033.870414][ T1302] loop6: detected capacity change from 0 to 1024 [ 1034.000936][ T1302] hfsplus: xattr searching failed [ 1034.144770][T10688] hfsplus: b-tree write err: -5, ino 4 [ 1034.233417][ T1308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13350'. [ 1034.242631][ T1308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13350'. [ 1034.738306][ T1329] loop0: detected capacity change from 0 to 64 [ 1034.824035][ T1329] hfs: unable to locate alternate MDB [ 1034.829557][ T1329] hfs: continuing without an alternate MDB [ 1035.050062][T10683] [ 1035.052468][T10683] ====================================================== [ 1035.059523][T10683] WARNING: possible circular locking dependency detected [ 1035.066595][T10683] syzkaller #0 Not tainted [ 1035.071046][T10683] ------------------------------------------------------ [ 1035.078100][T10683] kworker/u4:14/10683 is trying to acquire lock: [ 1035.084476][T10683] ffff888029fa4ef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1035.095352][T10683] [ 1035.095352][T10683] but task is already holding lock: [ 1035.102764][T10683] ffff88805fcfc0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1035.112161][T10683] [ 1035.112161][T10683] which lock already depends on the new lock. [ 1035.112161][T10683] [ 1035.122592][T10683] [ 1035.122592][T10683] the existing dependency chain (in reverse order) is: [ 1035.131638][T10683] [ 1035.131638][T10683] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 1035.139574][T10683] __mutex_lock+0x12d/0xaf0 [ 1035.144629][T10683] hfs_find_init+0x15b/0x1d0 [ 1035.149768][T10683] hfs_extend_file+0x35d/0x13f0 [ 1035.155172][T10683] hfs_bmap_reserve+0x103/0x420 [ 1035.160578][T10683] hfs_cat_create+0x204/0x8e0 [ 1035.165809][T10683] hfs_mkdir+0x68/0xe0 [ 1035.170435][T10683] vfs_mkdir+0x387/0x570 [ 1035.175219][T10683] do_mkdirat+0x1d8/0x440 [ 1035.180095][T10683] __x64_sys_mkdirat+0x85/0x90 [ 1035.185404][T10683] do_syscall_64+0x4c/0xa0 [ 1035.190369][T10683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.196811][T10683] [ 1035.196811][T10683] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1035.206057][T10683] __lock_acquire+0x2d07/0x7d10 [ 1035.211467][T10683] lock_acquire+0x1bb/0x4a0 [ 1035.216546][T10683] __mutex_lock+0x12d/0xaf0 [ 1035.221601][T10683] hfs_extend_file+0xfb/0x13f0 [ 1035.226916][T10683] hfs_bmap_reserve+0x103/0x420 [ 1035.232324][T10683] __hfs_ext_write_extent+0x1fa/0x470 [ 1035.238260][T10683] hfs_ext_write_extent+0x17b/0x200 [ 1035.244047][T10683] hfs_write_inode+0xd8/0xa20 [ 1035.249283][T10683] __writeback_single_inode+0x75b/0x1160 [ 1035.255476][T10683] writeback_sb_inodes+0xb30/0x1850 [ 1035.261226][T10683] wb_writeback+0x482/0xd50 [ 1035.266275][T10683] wb_workfn+0x423/0xee0 [ 1035.271074][T10683] process_one_work+0x8a2/0x1160 [ 1035.276568][T10683] worker_thread+0xaa2/0x1270 [ 1035.281791][T10683] kthread+0x29d/0x330 [ 1035.286421][T10683] ret_from_fork+0x1f/0x30 [ 1035.291417][T10683] [ 1035.291417][T10683] other info that might help us debug this: [ 1035.291417][T10683] [ 1035.301673][T10683] Possible unsafe locking scenario: [ 1035.301673][T10683] [ 1035.309152][T10683] CPU0 CPU1 [ 1035.314539][T10683] ---- ---- [ 1035.319929][T10683] lock(&tree->tree_lock/1); [ 1035.324639][T10683] lock(&HFS_I(tree->inode)->extents_lock); [ 1035.333184][T10683] lock(&tree->tree_lock/1); [ 1035.340448][T10683] lock(&HFS_I(tree->inode)->extents_lock); [ 1035.346464][T10683] [ 1035.346464][T10683] *** DEADLOCK *** [ 1035.346464][T10683] [ 1035.354629][T10683] 3 locks held by kworker/u4:14/10683: [ 1035.360107][T10683] #0: ffff888144275938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1035.370768][T10683] #1: ffffc90003ea7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1035.382640][T10683] #2: ffff88805fcfc0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1035.392427][T10683] [ 1035.392427][T10683] stack backtrace: [ 1035.398357][T10683] CPU: 1 PID: 10683 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1035.406104][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1035.416183][T10683] Workqueue: writeback wb_workfn (flush-7:0) [ 1035.422223][T10683] Call Trace: [ 1035.425620][T10683] [ 1035.428580][T10683] dump_stack_lvl+0x188/0x24e [ 1035.433288][T10683] ? load_image+0x400/0x400 [ 1035.437821][T10683] ? show_regs_print_info+0x12/0x12 [ 1035.443056][T10683] ? print_circular_bug+0x12b/0x1a0 [ 1035.448292][T10683] check_noncircular+0x296/0x330 [ 1035.453275][T10683] ? look_up_lock_class+0x75/0x140 [ 1035.458416][T10683] ? add_chain_block+0x940/0x940 [ 1035.463386][T10683] ? lockdep_lock+0xf1/0x1f0 [ 1035.468007][T10683] ? unwind_next_frame+0x1880/0x20b0 [ 1035.473328][T10683] ? _find_first_zero_bit+0xcf/0x100 [ 1035.478649][T10683] __lock_acquire+0x2d07/0x7d10 [ 1035.483544][T10683] ? ret_from_fork+0x1f/0x30 [ 1035.488175][T10683] ? ret_from_fork+0x1f/0x30 [ 1035.492814][T10683] ? verify_lock_unused+0x140/0x140 [ 1035.498053][T10683] ? stack_trace_save+0xa6/0xf0 [ 1035.502935][T10683] ? stack_trace_snprint+0xf0/0xf0 [ 1035.508170][T10683] ? check_noncircular+0x189/0x330 [ 1035.513323][T10683] ? add_chain_block+0x940/0x940 [ 1035.518299][T10683] lock_acquire+0x1bb/0x4a0 [ 1035.522835][T10683] ? hfs_extend_file+0xfb/0x13f0 [ 1035.527921][T10683] ? __might_sleep+0xd0/0xd0 [ 1035.532553][T10683] ? read_lock_is_recursive+0x10/0x10 [ 1035.537969][T10683] __mutex_lock+0x12d/0xaf0 [ 1035.542636][T10683] ? hfs_extend_file+0xfb/0x13f0 [ 1035.547614][T10683] ? verify_lock_unused+0x140/0x140 [ 1035.552878][T10683] ? hfs_extend_file+0xfb/0x13f0 [ 1035.557855][T10683] ? mutex_lock_nested+0x10/0x10 [ 1035.562836][T10683] ? __stack_depot_save+0x421/0x460 [ 1035.568085][T10683] hfs_extend_file+0xfb/0x13f0 [ 1035.572886][T10683] ? hfs_ext_write_extent+0x14e/0x200 [ 1035.578285][T10683] ? hfs_write_inode+0xd8/0xa20 [ 1035.583259][T10683] ? hfs_get_block+0xc50/0xc50 [ 1035.588056][T10683] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1035.594421][T10683] ? rcu_is_watching+0x11/0xa0 [ 1035.599223][T10683] ? trace_contention_end+0x5f/0x170 [ 1035.604539][T10683] ? memset+0x1e/0x40 [ 1035.608546][T10683] ? hfs_brec_find+0x197/0x500 [ 1035.613339][T10683] hfs_bmap_reserve+0x103/0x420 [ 1035.618227][T10683] __hfs_ext_write_extent+0x1fa/0x470 [ 1035.623630][T10683] hfs_ext_write_extent+0x17b/0x200 [ 1035.628857][T10683] ? verify_lock_unused+0x140/0x140 [ 1035.634090][T10683] ? hfs_ext_keycmp+0x310/0x310 [ 1035.638975][T10683] ? writeback_sb_inodes+0x46b/0x1850 [ 1035.644380][T10683] hfs_write_inode+0xd8/0xa20 [ 1035.649096][T10683] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1035.654502][T10683] ? __writeback_single_inode+0x4ae/0x1160 [ 1035.660426][T10683] ? __lock_acquire+0x7d10/0x7d10 [ 1035.665482][T10683] ? do_raw_spin_lock+0x128/0x2f0 [ 1035.670714][T10683] ? __rwlock_init+0x140/0x140 [ 1035.675506][T10683] __writeback_single_inode+0x75b/0x1160 [ 1035.681170][T10683] writeback_sb_inodes+0xb30/0x1850 [ 1035.686415][T10683] ? queue_io+0x5a0/0x5a0 [ 1035.690780][T10683] ? rcu_is_watching+0x11/0xa0 [ 1035.695591][T10683] wb_writeback+0x482/0xd50 [ 1035.700129][T10683] ? percpu_ref_tryget+0x250/0x250 [ 1035.705317][T10683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1035.711330][T10683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1035.716565][T10683] wb_workfn+0x423/0xee0 [ 1035.720936][T10683] ? inode_wait_for_writeback+0x220/0x220 [ 1035.726784][T10683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1035.732798][T10683] ? read_lock_is_recursive+0x10/0x10 [ 1035.738206][T10683] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1035.744125][T10683] ? _raw_spin_unlock+0x40/0x40 [ 1035.749004][T10683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1035.754234][T10683] ? process_one_work+0x7b0/0x1160 [ 1035.759375][T10683] process_one_work+0x8a2/0x1160 [ 1035.764357][T10683] ? worker_detach_from_pool+0x240/0x240 [ 1035.770023][T10683] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1035.775162][T10683] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1035.780731][T10683] ? kthread_data+0x4b/0xc0 [ 1035.785266][T10683] worker_thread+0xaa2/0x1270 [ 1035.789980][T10683] kthread+0x29d/0x330 [ 1035.794076][T10683] ? worker_clr_flags+0x1a0/0x1a0 [ 1035.799216][T10683] ? kthread_blkcg+0xd0/0xd0 [ 1035.803846][T10683] ret_from_fork+0x1f/0x30 [ 1035.808312][T10683] [ 1035.977119][T10683] hfs: new node 0 already hashed? [ 1035.982567][T10683] ------------[ cut here ]------------ [ 1035.988158][T10683] WARNING: CPU: 1 PID: 10683 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 1035.997537][T10683] Modules linked in: [ 1036.001471][T10683] CPU: 1 PID: 10683 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1036.009273][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1036.019438][T10683] Workqueue: writeback wb_workfn (flush-7:0) [ 1036.025513][T10683] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1036.031208][T10683] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1036.050920][T10683] RSP: 0018:ffffc90003ea6e80 EFLAGS: 00010246 [ 1036.057063][T10683] RAX: 000000000000001f RBX: ffff88805fcfc0e0 RCX: 0384b948c65c4d00 [ 1036.065103][T10683] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1036.073153][T10683] RBP: 0000000000000000 R08: ffffc90003ea6b87 R09: 1ffff920007d4d70 [ 1036.081162][T10683] R10: dffffc0000000000 R11: fffff520007d4d71 R12: 0000000000000000 [ 1036.089203][T10683] R13: ffff88805fcfc000 R14: ffff888028be1000 R15: dffffc0000000000 [ 1036.097257][T10683] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1036.106279][T10683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1036.112937][T10683] CR2: 00007fdc7c9e3ad8 CR3: 0000000078a44000 CR4: 00000000003506e0 [ 1036.120958][T10683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1036.129030][T10683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1036.137085][T10683] Call Trace: [ 1036.140408][T10683] [ 1036.143410][T10683] hfs_bmap_alloc+0x53d/0x5d0 [ 1036.148146][T10683] ? hfs_bmap_reserve+0x420/0x420 [ 1036.153256][T10683] ? rcu_is_watching+0x11/0xa0 [ 1036.158081][T10683] hfs_btree_inc_height+0xfd/0xac0 [ 1036.163275][T10683] ? hfs_brec_insert+0x6f6/0xbd0 [ 1036.168267][T10683] ? hfs_brec_insert+0xbd0/0xbd0 [ 1036.173299][T10683] ? do_raw_spin_unlock+0x11d/0x230 [ 1036.178566][T10683] hfs_brec_insert+0x744/0xbd0 [ 1036.183424][T10683] ? hfs_brec_keylen+0x350/0x350 [ 1036.188421][T10683] __hfs_ext_write_extent+0x2a1/0x470 [ 1036.193881][T10683] hfs_ext_write_extent+0x17b/0x200 [ 1036.199142][T10683] ? verify_lock_unused+0x140/0x140 [ 1036.204426][T10683] ? hfs_ext_keycmp+0x310/0x310 [ 1036.209347][T10683] ? writeback_sb_inodes+0x46b/0x1850 [ 1036.214816][T10683] hfs_write_inode+0xd8/0xa20 [ 1036.219553][T10683] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1036.225023][T10683] ? __writeback_single_inode+0x4ae/0x1160 [ 1036.230883][T10683] ? __lock_acquire+0x7d10/0x7d10 [ 1036.235987][T10683] ? do_raw_spin_lock+0x128/0x2f0 [ 1036.241065][T10683] ? __rwlock_init+0x140/0x140 [ 1036.245897][T10683] __writeback_single_inode+0x75b/0x1160 [ 1036.251576][T10683] writeback_sb_inodes+0xb30/0x1850 [ 1036.256868][T10683] ? queue_io+0x5a0/0x5a0 [ 1036.261266][T10683] ? rcu_is_watching+0x11/0xa0 [ 1036.266113][T10683] wb_writeback+0x482/0xd50 [ 1036.270669][T10683] ? percpu_ref_tryget+0x250/0x250 [ 1036.275848][T10683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1036.281874][T10683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1036.287167][T10683] wb_workfn+0x423/0xee0 [ 1036.291459][T10683] ? inode_wait_for_writeback+0x220/0x220 [ 1036.297291][T10683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1036.303374][T10683] ? read_lock_is_recursive+0x10/0x10 [ 1036.308812][T10683] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1036.314803][T10683] ? _raw_spin_unlock+0x40/0x40 [ 1036.319689][T10683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1036.324966][T10683] ? process_one_work+0x7b0/0x1160 [ 1036.330126][T10683] process_one_work+0x8a2/0x1160 [ 1036.335177][T10683] ? worker_detach_from_pool+0x240/0x240 [ 1036.340864][T10683] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1036.345988][T10683] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1036.351593][T10683] ? kthread_data+0x4b/0xc0 [ 1036.356206][T10683] worker_thread+0xaa2/0x1270 [ 1036.360935][T10683] kthread+0x29d/0x330 [ 1036.365092][T10683] ? worker_clr_flags+0x1a0/0x1a0 [ 1036.370161][T10683] ? kthread_blkcg+0xd0/0xd0 [ 1036.374824][T10683] ret_from_fork+0x1f/0x30 [ 1036.379324][T10683] [ 1036.382398][T10683] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1036.389723][T10683] CPU: 1 PID: 10683 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1036.397460][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1036.407532][T10683] Workqueue: writeback wb_workfn (flush-7:0) [ 1036.413542][T10683] Call Trace: [ 1036.416829][T10683] [ 1036.419771][T10683] dump_stack_lvl+0x188/0x24e [ 1036.424481][T10683] ? memcpy+0x3c/0x60 [ 1036.428494][T10683] ? show_regs_print_info+0x12/0x12 [ 1036.433727][T10683] ? load_image+0x400/0x400 [ 1036.438281][T10683] panic+0x2e5/0x730 [ 1036.442222][T10683] ? bpf_jit_dump+0xd0/0xd0 [ 1036.446763][T10683] ? ret_from_fork+0x1f/0x30 [ 1036.451434][T10683] __warn+0x2f8/0x4f0 [ 1036.455426][T10683] ? hfs_bnode_create+0x37a/0x400 [ 1036.460477][T10683] ? hfs_bnode_create+0x37a/0x400 [ 1036.465538][T10683] report_bug+0x2ba/0x4f0 [ 1036.469891][T10683] ? hfs_bnode_create+0x37a/0x400 [ 1036.474943][T10683] handle_bug+0x3a/0x70 [ 1036.479119][T10683] exc_invalid_op+0x16/0x40 [ 1036.483659][T10683] asm_exc_invalid_op+0x16/0x20 [ 1036.488546][T10683] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1036.494211][T10683] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1036.514031][T10683] RSP: 0018:ffffc90003ea6e80 EFLAGS: 00010246 [ 1036.520221][T10683] RAX: 000000000000001f RBX: ffff88805fcfc0e0 RCX: 0384b948c65c4d00 [ 1036.528216][T10683] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1036.536328][T10683] RBP: 0000000000000000 R08: ffffc90003ea6b87 R09: 1ffff920007d4d70 [ 1036.544417][T10683] R10: dffffc0000000000 R11: fffff520007d4d71 R12: 0000000000000000 [ 1036.552426][T10683] R13: ffff88805fcfc000 R14: ffff888028be1000 R15: dffffc0000000000 [ 1036.560448][T10683] hfs_bmap_alloc+0x53d/0x5d0 [ 1036.565182][T10683] ? hfs_bmap_reserve+0x420/0x420 [ 1036.570250][T10683] ? rcu_is_watching+0x11/0xa0 [ 1036.575090][T10683] hfs_btree_inc_height+0xfd/0xac0 [ 1036.580236][T10683] ? hfs_brec_insert+0x6f6/0xbd0 [ 1036.585215][T10683] ? hfs_brec_insert+0xbd0/0xbd0 [ 1036.590183][T10683] ? do_raw_spin_unlock+0x11d/0x230 [ 1036.595496][T10683] hfs_brec_insert+0x744/0xbd0 [ 1036.600296][T10683] ? hfs_brec_keylen+0x350/0x350 [ 1036.605278][T10683] __hfs_ext_write_extent+0x2a1/0x470 [ 1036.610681][T10683] hfs_ext_write_extent+0x17b/0x200 [ 1036.615906][T10683] ? verify_lock_unused+0x140/0x140 [ 1036.621224][T10683] ? hfs_ext_keycmp+0x310/0x310 [ 1036.626104][T10683] ? writeback_sb_inodes+0x46b/0x1850 [ 1036.631568][T10683] hfs_write_inode+0xd8/0xa20 [ 1036.636279][T10683] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1036.641683][T10683] ? __writeback_single_inode+0x4ae/0x1160 [ 1036.647522][T10683] ? __lock_acquire+0x7d10/0x7d10 [ 1036.652581][T10683] ? do_raw_spin_lock+0x128/0x2f0 [ 1036.657628][T10683] ? __rwlock_init+0x140/0x140 [ 1036.662412][T10683] __writeback_single_inode+0x75b/0x1160 [ 1036.668112][T10683] writeback_sb_inodes+0xb30/0x1850 [ 1036.673366][T10683] ? queue_io+0x5a0/0x5a0 [ 1036.677729][T10683] ? rcu_is_watching+0x11/0xa0 [ 1036.682530][T10683] wb_writeback+0x482/0xd50 [ 1036.687069][T10683] ? percpu_ref_tryget+0x250/0x250 [ 1036.692217][T10683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1036.698240][T10683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1036.703470][T10683] wb_workfn+0x423/0xee0 [ 1036.707748][T10683] ? inode_wait_for_writeback+0x220/0x220 [ 1036.713501][T10683] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1036.719508][T10683] ? read_lock_is_recursive+0x10/0x10 [ 1036.724910][T10683] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1036.730828][T10683] ? _raw_spin_unlock+0x40/0x40 [ 1036.735701][T10683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1036.740926][T10683] ? process_one_work+0x7b0/0x1160 [ 1036.746064][T10683] process_one_work+0x8a2/0x1160 [ 1036.751038][T10683] ? worker_detach_from_pool+0x240/0x240 [ 1036.756706][T10683] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1036.761839][T10683] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1036.767413][T10683] ? kthread_data+0x4b/0xc0 [ 1036.771951][T10683] worker_thread+0xaa2/0x1270 [ 1036.776670][T10683] kthread+0x29d/0x330 [ 1036.780760][T10683] ? worker_clr_flags+0x1a0/0x1a0 [ 1036.785812][T10683] ? kthread_blkcg+0xd0/0xd0 [ 1036.790444][T10683] ret_from_fork+0x1f/0x30 [ 1036.794903][T10683] [ 1036.798523][T10683] Kernel Offset: disabled [ 1036.802905][T10683] Rebooting in 86400 seconds..