last executing test programs: 2m57.048101125s ago: executing program 1 (id=2): syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f3200000be550020080000198c3b790000c19e57fc847c52a1695a251b480e31f9126b9b0b247df0690ca7d757194d0335d8e8a065e069e1290c00000000000000988309e751e0eec20f77"], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) 2m56.566811171s ago: executing program 1 (id=8): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 2m56.078844069s ago: executing program 1 (id=13): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x403, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) 2m54.430438953s ago: executing program 1 (id=27): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) memfd_secret(0x80000) 2m53.984925729s ago: executing program 32 (id=27): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) memfd_secret(0x80000) 1m37.035101158s ago: executing program 4 (id=591): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r0, 0x409, 0x8) pwrite64(r0, &(0x7f0000000000)="48ed", 0x2, 0x3) 1m36.976627939s ago: executing program 4 (id=592): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@nested={0x4, 0x2}]}, 0x18}}, 0x20040010) 1m36.91701227s ago: executing program 4 (id=593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) msync(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x6) 1m36.722401353s ago: executing program 4 (id=594): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)={[{@umask}, {@type={'type', 0x3d, "ee149ac3"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m36.442338997s ago: executing program 4 (id=596): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x4054, 0xabe, 0xb, 0xa, 0xffffff80, 0x81}) 1m35.945777805s ago: executing program 4 (id=598): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0x5, 0xfffffff9, 0x103, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x800, 0x0, 0x19, 0x8}) 1m35.701415568s ago: executing program 33 (id=598): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0x5, 0xfffffff9, 0x103, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x800, 0x0, 0x19, 0x8}) 3.42054486s ago: executing program 5 (id=1284): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010006, &(0x7f0000006600)={[{@errors_continue}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@nointegrity}, {@nodiscard}, {@nointegrity}, {@usrquota}, {@nodiscard}, {@noquota}]}, 0x1, 0x626d, &(0x7f0000000380)="$eJzs3cuOHFcZB/Cv+jaXYMfKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffvLMj/7+p+GZ//7lVv+NScvdvv3b//z17qNvLwAAAHRRWZZlkT7mn4yIQfpsDwA8/fLrf5nk29VzV2/OWX/UarVavYB1XTne3XoREZv1dar3DA7HA8CC2YxP2u4CLZJ/pw0i4pm2OwHMtaLtDnAk7j+4s16kfIv668HaTns+F2RP/pvF7vUdk6bTNM8xmdXjayv68dyE/qzMqA/zJOffa+Z/Zad9lJY76vxnZVL+o51Lnzon599v5t/w9OTfG5t/V+X8B4fKvy9/AAAAAACYY/nv/ydaPv679PibciD7Hf9dm1EfAAAAAAAAAOBJO+z4f4PG+H+7jP8HAAAAc6v6rF753fGHt036Lrbq9stFxLHG8kDHpItlVtvuBwAAAAAAAAAAAAB0yWDnHN7LRcQwIo6trpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJq9eHqY3PWH7VarVaPq+vK8e7Wi4jYrK9TvWcwHD8ALJjN+KTtLtAi+XfaICJeaLsTwFwr2u4AR+L+gzvrRcq3qL8epPHd87kge/LfLLbXy+uPm07TPMdkVo+vrejHcxP68/yM+jBPcv69Zv5XdtpHabnHz7/c82fCts4xmpR/tZ0nWuhP23L+/Wb+DUe9/8/KVvTG5t9VOf/BofLvyx8AAAAAAOZY/vv/ibk6/jt61M2Zar/jv2tj1zi6vgAAAAAAAADAk3L/wZ31fN1rPv7/hTHLuf7z6ZTzL+TfSTn/XiP/rzaW69fm7739MP9/P7iz/sdb//p8nh40/6U8U6RHVpEeEUW6p2KQpo+zdZ+1NeyPqnsaFr3+IJ3zUw7fjWtxPTbi7J5le+n/42H7uT3tVU+H2+1lf6f9/J72wW57Xv/CnvZhOruoXMntp2M9fh7X453t9qptacr2L09pL6e05/z79v9OyvkPaj9V/qupvWhMK/c+6n1mv69Px93PW9e++JuzR785U21Ff3fb6qrte6mF/mz/nzwzil/e3Lhx+vbVW7dunIs02XPr+UiTJyznP0w/u8//L++05+f9+v5676PRofOfF1sxmJj/y7X5antfmXHf2pDzH6WfnP87qX38/r/I+U/e/19toT8AAAAAAAAAAAAAAACwn7Isty8RfSsiLqbrf9q6NhMAmK38+l8m+fZZ1f0Z359aveB1MWf9eVL10kGW/7Scm/6q1Qtb15XjvVkvIuJv9XWq9wy/HvfLAIB59mlE/LPtTtAa+XdY/r6/anqq7c4AM3Xzgw9/evX69Y0bN9vuCQAAAAAAAADwqPL4n2u18Z9PlWV5t7HcnvFf3461xx3/c5BndgcYnTBQdf/w27Sfrd6o36sNN/5iTBr/e7g7t9/434Mp9zec0j6a0r40pX15SvvYCz1qcv4v1sY7PxURJxvDr3dh/NfmmPddkPN/qfZ4rvL/SmO5ev7l7xc5/96e/M/cev8XZ25+8OFr196/+t7Gexs/u3Du3NkLFy9eunTpzLvXrm+c3fm3xR4frZx/HvvaeaDdkvPPmcu/W3L+X0q1/Lsl5//lVMu/W3L++f2e/Lsl558/+8i/W3L+r6Ra/t2S8/9aquXfLTn/V1Mt/27J+X891fLvlpz/a6mWf7fk/E+nWv7dkvM/k+oD5r9y1P1iNnL++QiX/b9bcv75zAb5d0vO/3yq5d8tOf8LqZZ/t+T8X0+1/Lsl5/+NVMu/W3L+F1Mt/27J+X8z1fLvlpz/pVTLv1ty/t9Ktfy7Jef/7VTLv1ty/m+kWv7dkvP/Tqrl3y05/++mWv7dkvP/Xqrl3y05/zdTLf9uefj9/2bMmDGTZ9p+ZgIAAAAAAAAAAAAAmmZxOnHb2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lu7GLnO+n7gZ9a767UDiYGQv5O/AxvHhJBssms78QttigmvDW8lEAp9wXa9a7Pg2MZrl0Aj2TRQImFUVNE2XLQFhNrcVKQSF7QClAvUCqkStFLpDaJC5SKqAgpIlWgF2WrOeZ5nZ2bnZde7Xp855/OR7J935pw5z5x5ztn57fo7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWt3yurlPNbIsa/7J/9qWZS9o/nvL5Lb8tldf7RECAAAAa/XL/O/nrks3HFrBSi3L/NPLvvPVxcXFxey9m/507HOLi+mOySwb25xl+X3RUz98X6N1meCxbKIx0vL1yIDNbxpw/+iA+8cG3D8+4P7NA+6fGHD/sh2wzJbi5zH5g+3K/7mt2KXZ9dlYft+uLms91tg8MhJ/lpNr5Ossjh3P5rOT2Vw207Z8sWwjX/7rtzS39eYsbmukZVs7mjPkp48ei2NohH28q21bS48Z/fi12eTPfvrosb8+9+yN3erA3dD2eMU4b9/ZHOcnwi3FWBvZ5rRP4jhHWsa5o8trsqltnI18vea/O8f53ArHuWlpmBuq8zWfyEbyf38330+jrT/WS/tpR7jt57dmWXZxadidyyzbVjaSbW27ZWTp9ZkoZmTzMZpT6cXZ6Krm6S0rmKfNOrurfZ52HhPx9b8lrDfaYwytL9OPPz7e8rr/YvFy5mnUfNa9jpXOObjex0pZ5mCcF9/Nn/TjXefgrvD8H72t9xzsOne6zMH0vFvm4M5Bc3BkfFM+5vQiNPJ1lubg7rblN+VbauT1mdv6z8Hpcw+fmV746Mfumn/46Im5E3On9u7ePbN3374DBw5MH58/OTdT/H2Ze7v8tmYj6RjYGfZdPAZe2bFs61Rd/OL4svPv5R6HE32Ow20dy673cTja+eQaG3NALp/TxbHx7uZOn7g0kvU4xvLX5461H4fpebcch6Mtx2HX7yldjsPRFRyHzWXO3LGy9yyjLX+6jaH394K1zcFtLXOw8/1I5xxc7/cjZZmDE2FefP+O3t8LdoTxPj612vcjm5bNwfR0w7mneUt6vz9xIC/d5uVNzTuuGc/OL8ydvfuRo+fOnd2dhbIhXtIyVzrn69aW55Qtm68jq56vh+Zf9vhNXW7fFvbVxF3NvyZ6vlbNZe65u/9rlX93674/227dk4WyzjZ6f3b7bt7cn+NZ9vlvffzBbzz6+df13J/NfvMT02t/Lx760sXChfwxxnqcf2Pf/3yxvfRQj20aGy2O301p74y1nY/bX6rR/NzVyLf93PTKzsdj4c9Gn4+v73M+3t6x7Hqfj8c6n1w8HzcG/bRjbTpfz4kwT07O9D8fN5fZvme1c3K07/n41lAbYf+/KnQKqS9qmTu95m3a1ujoWHheo3EL7fN0b9vyY6E3a27ryT3hTWEa5crm6e23Fstvalkv2qh5Otmx7HrP0/Szr17ztDHop2+Xp/P1nAjz4vq9/edpc5mn71n7uXNL/GfLe9fxQXNwbNN4c8xjaRLm5/tscUucg3dnx7LT2clsNr93PJ9PjXxbU/eu7Fw5Hv5s9Llye585eHvHsus9B9PPV3vNvcbo8ie/Djpfz4kwL564t/8cbC7z+v3r+9719nBLWqblvWvnz9d6/czrpo7ddKXmymgY57f29//ZbHOZkwdW22f23093hluu6bKfOo/fXsfUbLYx+2l7GOezB3rvp+Z4mst87uAK59OhLMsufPj+/Oe94fcrF85/76ttv3fp9judCx++/ycvPP6Pqxk/AMPv+aJsLb7XtfxmaiW//wcAAACGQuz7R0JN9P8AAABQGbHvj/8rPNH/AwAAQGXEvn801KQK/f8fDl5k++ufnX/+QpaS+eFDE1JmLu2GB4rlYsZ1Jnw9ubikefv9X57773+4sLLhjWRZ9osH/qDr8tsfiOMqTIZxPvWG9tuX+epdK9r2kYcupO225te/EB4/Pp+VToNuEdyZLMu+ft1n8u1Mvu9SXp9+4EheH7z4+GPNZZ47WHwd13/mJcXyfxHCv4eOH21b/5mwH34U6sxbuu+PuN5XLr1qx/73LG0vrtfYeW3+tJ94f/G48XNyPvtYsXzcz73G/41PP/mV5vKPvKL7+C+MdB//k+Fxvxzq/9xcLN/6GjS/jut9Mow/bi+ud/eXvtl1/E99qlj+zBuL5Y6EGrd/e/h61xufnW/dX480jrY9r+xNxXJx+zPf++P8/vh48fE7xz9x+FLb/uicH0//a/E40x3Lx9vjdqK/79h+83Fa52fc/pN/dKRtPw/a/lMPPnNz83E7t39nx3JnPnxHvv2lx2v/xKa//ORnum4vjufQ355pez6H3hmO47D9J94f5mO4/3+fKh6v89MVjryz/fwTl//Ctgttzyd688+K7T/1mhN53TyxZes1L3jhtRdf3tx3WfbdzcXjDdr+ib863Tb+L95Q7I94f8zod26/l7j9sx+ZOnV64fz8bNqrj16Xf3bOW4vxxPFeF86tnV8fPn3uA3NnJ2cmZ7JssrofoXfZvhTqT4pysf/Si8vOoHc8FF7Pm/7861tv+5dPx9v//d3F7ZfeUnzfemVY7rPh9m3h9Vvd9pd74pYb8uO78XQY4eLyzwteix27/uvAihYMz7/zfUGc72de+oF8PzTvy79vxON6jeP/wWzxOF8L+3UxfDLzzhuWtte6fPxshEvvKo73Ne+/cJqLr+vfhNf7bT8qHj+OKz7fH4T3Md/c3n6+i/PjaxdGOh8//xSPi+F8kl0s7o9Lxf196bkbug4vfg5JdvHG/Os/SY9z46qeZi8LH12YPjl/6vwj0+fmFs5NL3z0Y4cfPn3+1LnD+Wd5Hv7goPWXzk9b8/PT7Ny+e7L8bHW6KFfY1R7/mYeOze6fuW127vjR88fPPXRm7uyJYwsLx+ZmF247evz43EcGrT8/e9/uPQf37t8zdWJ+9r4DBw/uPTg1f+p0cxjFoAbYN/OhqVNnD+erLNx3z8Hd9957z8zUw6dn5+7bPzMzdX7Q+vn3pqnm2r8/dXbu5NFz8w/PTS3Mf2zuvt0H9+3bM/DTAB8+c3xhcvrs+VPT5xfmzk4Xz2XyXH5z83vfoPWppoX/KN7PdmoUH8SXvePOfenzWZu+/PGeD1Us0vEBos+Gz6L59ovOHFjJ17HvHws1qUL/DwAAAORi3z8eaqL/BwAAgMqIff/mUBP9PwAAAFRG7PsnQk3/JaAm/X/l8v/bL6xo+/L/8v+t+0v+v2b5/3eVLf9fnC9S/j/Lspvl/y/bWvP31cv/j7Z9Jf8/gPy//L/8v/w/66ps+f/Y92/JMr//BwAAgIqKff/WUBP9PwAAAFRG7PuvCTXR/wMAAEBlxL7/BaEmNen/5f/l/+X/5f/l/7tv/6rl/13/f03k//uT/x9A/n86q1f+/+J6jv8q5P+3tH4h/08ZlS3/H/v+F4aa1KT/BwAAgCHW+6cGHWLff22oif4fAAAAKiP2/deFmuj/AQAAoDJi378t1KQm/b/8/5ry/ylzJf/fPn75/3by/2E+yP/L/28A+f/+5P8HkP93/f/hyv+3kf+njMqW/499/4tCTWrS/wMAAEAdxL7/xaEm+n8AAAAon9HLWy32/S8JNVnW/1/mBgAAAICrLvb912cdQfCa/P5f/t/1/+X/5f/l/7tvf+X5/02Z/H95yP/3J/8/gPy//L/8/6ry/42WNwHy/3RTtvx/3vdnE9lLQ01q0v8DAABAHcS+/4ZQE/0/AAAAVEbs+/9fqIn+HwAAACoj9v3bQ01q0v/L/1cm///z1pdO/l/+v9/25f9d/7/K5P/7k/8fQP5f/l/+3/X/WVdly//Hvv/GUJOa9P8AAABQB7HvvynURP8PAAAAlRH7/v8faqL/BwAAgMqIff+OUJOa9P/y/yXP/8fkqOv/y//L/5cy/z8h/1868v/9yf8PIP8v/y//L//Puipb/j/2/TeHmtSk/wcAAIA6iH3/y0JN9P8AAABQGbHvf3moif4fAAAAKiP2/ZPZv7XfUZP+fzX5/8ZF+f9ervD1/8dXcP3/NvL/8v/9ti//7/r/VSb/35/8/wDy//L/8v/y/6yrsuX/J/O1JrJbQk1q0v8DAABAHcS+f2eoif4fAAAAKiP2/beGmuj/AQAAoDJi378r1KQm/b/r/w9F/j+T/5f/l/+X/5f/Xxn5//7k/weQ/5f/l/+X/2ddlS3/H/v+V4Sa1KT/BwAAgDqIff9toSb6fwAAAKiM2Pe/MtRE/w8AAACVEfv+20NNatL/y//L/8v/y//L/3ffvvz/cJL/70/+fwD5f/l/+X/5f9ZV2fL/se9/VahJTfp/AAAAqIPY998RaqL/BwAAgMqIff+doSb6fwAAAKiM2PdPhZrUpP+X/5f/l/+X/5f/7759+f/hJP/fn/z/APL/8v/y//L/rKuy5f9j339XqElN+n8AAACog9j33x1qov8HAACAyoh9/3Soif4fAAAAKiP2/TOhJjXp/+X/5f/l/+X/V5X/f/nS48r/F+T/y0X+vz/5/wHk/+X/r3r+f0z+n0opW/4/9v27Q01q0v8DAABAHcS+f0+oif4fAAAAKiP2/XtDTfT/AAAAUBmx778n1KQm/X+V8v/5M5D/b1tP/l/+v9v2Xf9f/r/K5P/7W//8f3yK8v/y//L/rv8v/89yZcv/x77/3lCTmvT/AAAAUAex798XaqL/BwAAgMqIff/+UBP9PwAAAFRG7PsPhJrUpP+vUv6/WFH+PytR/j+S/y/I/8v/y/9fefL//bn+/wDy//L/Q5z/b84t+X/Kpmz5/9j3Hww1qUn/DwAAAHUQ+/5Xh5ro/wEAAKAyYt//K6Em+n8AAACojNj3/2qoSU36f/l/+X/X/5f/L3v+f1z+X/5/FeT/+5P/H0D+X/5/iPP/rv9PGZUt/x/7/vtCTWrS/wMAAEAdxL7/10JN9P8AAABQGbHvf02oif4fAAAAKiP2/YdCTWrS/w9v/n+8xxMqaf4/3ij/L/8v/+/6//L/V9S65P//Tv5f/l/+X/5f/l/+n/VQtvx/7PtfG2pSk/4fAAAA6iD2/feHmuj/AQAAoDJi3/+6UBP9PwAAAFRG7PtfH2pSk/5/ePP/vZ5QSfP/Nbn+/9hl5f/H2sYu/7+0nvx/Qf5f/n81XP+/P/n/AeT/5f/l/+X/WVdly//Hvv8NoSY16f8BAACgDmLf/8ZQE/0/AAAAVEbs+98UaqL/BwAAgMqIff+bQ01q0v/L/8v/u/6//L/8f/fty/8PJ/n//uT/B5D/l/+X/5f/Z12VLf8f+/5fDzWpSf8PAAAAdRD7/gdCTfT/AAAAUBmx739LqIn+HwAAACoj9v1vDTWpSf8v/y//L/8v/y//33378v/DSf6/vyHL///y2nC7/H9B/r/c419t/n+04+srkv//Ya/8/+LmzvXl/7kSypb/j33/20JNatL/AwAAQB3Evv/toSb6fwAAAKiM2Pe/I9RE/w8AAACVEfv+3wg1qUn/L//fHMdSeln+X/4/v0H+X/5f/n9oyf/3N2T5f9f/7yD/X+7xu/6//D/LlS3/H/v+d4aa1KT/BwAAgDqIff+DoSb6fwAAAKiM2Pe/K9RE/w8AAACVEfv+d4ea1KT/l/93/X/5f/l/+f/u25f/H07y//3J/w8g/y//X7b8/3/K/zPcypb/j33/Q6EmNen/AQAAoA5i3/+eUBP9PwAAAFRG7Pt/M9RE/w8AAACVEfv+94aa1KT/l/8flvz/pPz/KvP/4+E2+X/5f/n/epH/70/+fwD5f/n/suX/y3j9/4nu68v/003Z8v+x739fqMnK+/8eRwAAAABQFrHv/61Qk5r8/h8AAADqIPb9vx1qov8HAACAyoh9/++EmtSk/5f/H5b8v+v/Z67/L//f8Xzk/+X/u9m4/H8888j/y//L/0fy/zXJ//cg/083Zcv/x77/d0NNatL/AwAAQB3Evv/9oSb6fwAAABgK3f5PdqfY9x8ONdH/AwAAQGXEvv9IqElN+n/5f/l/+f+S5v//bOc/f/87bz+yW/5f/l/+f1U29Pr/zYPf9f/l/+X/E/l/+X/5fzqVLf8f+/6joSZLjd9bXeAfAAAAhlvs+38v1KQmv/8HAACAOoh9/7FQE/0/AAAAVEbs+2dDTWrS/8v/y//L/5c0/z/E1/+P+2OY8v9Tm4co/x9PuvL/XW1o/v89Szlx+f/V5v/Hu97amf9vyP+3kf9f9fi/nWWZ/L/8P1dR2fL/se+fCzWpSf8PAAAAdRD6/pHjRV26Q/8PAAAAlRH7/hOhJvp/AAAAqIzY938g1KQm/b/8v/y//L/8v+v/d99+afP/rv/fl/x/f+XJ/3fn+v/y/8M8fvl/+X+WK1v+P/b986EmNen/AQAAoA5i3//BUBP9PwAAAFRG7Ps/FGqi/wcAAIDKiH3/yVCTmvT/8v/y//L/8v/y/923/3/s3cezpmWZx/H3QFN0D0XN7GYxi3HvyoUrFrJwpX+ACzYutMqySlAxJxpzxJwDBlQMGEARE5gDmFDMomLOATNqtQV9XVef0+c5z3tO93vO+zz3/fks5sKGnvcw1QP+aL596//nSf8/Tv+/hP5f/6//1/+zUlPr/3P3PyRu6WT/AwAAQA9y918Yt9j/AAAA0Izc/RfFLfY/AAAANCN3/0Pjlk72v/5f/99s/38v/f9On6//1/+3TP8/Tv+/hP5f/6//1/+zUlPr/3P3Pyxu6WT/AwAAQA9y9z88brH/AQAAoBm5+y+OW+x/AAAAaEbu/kfELZ3s/5P6/41Fn/1/Zrz6/5b6f+//7/j5+n/9f8sOtv+/9M6/8un/9f/6/6D/1//r/znZ1Pr/3P2PjFs62f8AAADQg9z9j4pb7H8AAABoRu7+R8ct9j8AAAA0I3f/Y+KWTva/9/+9/z+t/v8M/b/+X/+v/z8t3v8f11P/f/Et51x4+7X/d91ePl//r//X/+v/Wa2p9f+5+x8bt3Sy/wEAAKAHufsfF7fY/wAAANCM3P2Pj1vsfwAAAJihI4Pfmrv/CXFLJ/tf/6//n1b/v8b3/w9Psv/P39T/6//1/7uk/x/XU/9/Kp+v/9f/6//1/6zW1Pr/3P1PjFs62f8AAADQg9z9T4pb7H8AAACYrqF/EXtE7v5L4hb7HwAAAJqRu/9o3NLJ/tf/73///2/9/zz6f+//6//1/03Q/4/T/y+h/9f/6//1/6zU1Pr/3P2Xxi2d7H8AAADoQe7+J8ct9j8AAAA0I3f/U+IW+x8AAACakbv/qXFLJ/tf/+/9f/1/z/3/PeP36P+HPl//P0/6/3HT7f+P/3+W/n/2/f9Z+n/9v/6fzfbY/98x8pftlfT/ufufFrd0sv8BAACgB7n7nx632P8AAADQjNz9z4hb7H8AAABoRu7+Z8Ytnex//b/+X//fc/9/mu//b/+hdxf9/zD9/8HQ/4+bTP+/cWjwm/X/6+7/j/239//1//p/Vmlq7//n7n9W3NLJ/gcAAIAe5O5/dtwysv/3/A/zAQAAgLXK3f+cuMXP/wMAAMDsZXWWu/+5cUsn+1//r//X/+v/T7n/7/j9/+s2fX36/2nR/4+bTP+/A/3/uvv/9fbzc//69f/6f7abWv+fu/95cUsn+x8AAAB6kLv/srjF/gcAAIBm5O5/ftxi/wMAAEAzcve/IG7pZP8P9/8nfr/+f3f0/1u/fv3/8I+PVfX/+b9R/z/a/5/v/f8+6f/H6f+X0P/r//X/O/X/R5Z9f/0/Q6bW/+fuf2Hc0sn+BwAAgB7k7n9R3GL/AwAAQDNy9784brH/AQAAoBm5+18St3Sy/73/r//X/8+v/5/H+//bM8GW3v9fHHj/f0j/v0v6/3H6/yX0/5v6+Y2F/r/j/v/cHd7/H/lVAPT/DJla/5+7/6VxSyf7HwAAAHqQu/9lcYv9DwAAAPOw+d8dOPlfKA25+18et9j/AAAA0Izc/a+IW9rZ/6Nvder/9f/6f/1/o+//N9b/e/9/t/T/4/T/S+j/96OfP9RY/3/5Tt9/Cv3/Jfv3/v89ln1//T9DtvT/15/49nX1/7n7Xxm3tLP/AQAAoHu5+18Vt9j/AAAA0Izc/a+OW+x/AAAAaEbu/tfELZ3s/33v/0d+9QH9v/5f/6//1//r/1dN/z9O/7+E/n+t7+fP/eufQv+/svf/9f+syJb+f5N19f+5+18bt3Sy/wEAAKAHuftfF7fY/wAAANCM3P2Xxy32PwAAADQjd//r45ZO9r/3//X/+n/9v/5/+PP1//N0Wv39Gfr/ov/X/+v/9f/6f1Zgav1/7v43xC2d7H8AAADoQe7+N8Yt9j8AAAA0I3f/m+IW+x8AAACakbv/irilk/2v/9/f/j+/Xf+v/1/o//X/+v8D0e37/xtDfyfabof+/6YHHb3v1m/R/+v/9f/6f/0/u/Q/I79vEv3/sRP/7TJ3/5vjlk72PwAAAPQgd/9b4hb7HwAAAJqRu/+tcYv9DwAAAM3I3X9l3LLH/T/WPEyZ/t/7//p//b/+f/jz9f/z1G3/v0ve/19C/6//1//nD0f9Pysxif5/03/O3f+2uMXP/wMAAEAzcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/8f/nz9/zzp/8fp/5eYU/9/5Wn0/4eGv3nd/fzpWvfX30j/7/1/Vmpq/X/u/qvilk72PwAAAPQgd/+74hb7HwAAAJqRu//dcYv9DwAAAM3I3f+euKWT/a//1//r//X/+v/hz9f/z5P+f5z+f7FYXD3yBQz1/8fOnmb/7/3/yX39+n/9P9tNrf/P3f/euKWT/Q8AAAA9yN1/ddxi/wMAAEAzcvdfE7fY/wAAANCM3P3vi1s62f/6f/2//l//r/8f/nz9/zzp/8fp/5eY0/v/+v/Jff36f/0/202t/8/d//64pZP9DwAAAD3I3X9t3GL/AwAAQDNy938gbrH/AQAAoBm5+6+LWzrZ//p//b/+X/8/q/7/TP2//n/c/vX/C/2//l//v4T+X/+v/+dkU+v/c/d/MG7pZP8DAABAD3L3fyhusf8BAACgGbn7Pxy32P8AAADQjNz9H4lbOtn/+n/9v/5f/z+r/t/7//r/Jbz/P07/v4T+X/+v/9f/s1LD/f8la+v/c/d/NG7pZP8DAABAD3L3Xx+32P8AAADQjNz9N8Qt9j8AAAA0I3f/x+KWTva//l//v7X/Xyz0//p//f9xY/3/4dX0/4cX+v+V29f+/4qI0fX/+n/9/6DJ9v9nLBrq/4/s+P31/0zR1N7/z93/8bilk/0PAAAAPcjd/4m4xf4HAACAZuTu/2TcYv8DAABAM3L3fypu6WT/6//1/97/1//r/4c/3/v/8+T9/3H6/yX0/232/97/1/+zNjf81/FfX+xk6+r/c/d/Om7pZP8DAABAD3L3fyZusf8BAACgGbn7Pxu32P8AAADQjNz9n4tbOtn/+n/9v/5f/6//H/58/f886f/H6f+X0P/r//X/+n9Wamrv/+fu/3zc0sn+BwAAgB7k7r8xbrH/AQAAoBm5+2+KW+x/AAAAaEbu/i/ELZ3sf/2//l//P8/+/7D+X/+v/x80lf7/vPPuc7P+X/+v/9f/6//1/72bWv+fu/+LcUsn+x8AAAB6kLv/S3GL/Q8AAADNyN3/5bjF/gcAAIBm5O7/StzSyf7f3v+ftTheqB431P9Ho6b/30T/v/Xr1/8P//jw/r/+X/+//6bS/3v//9S+fv2//n/OX/+e+v+7bf/++n9aNLX+P3f/zXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvyVu6WT/e/9f/6//1//r/4c/X/8/T/r/cfr/JfT/+n/v/1/0gDP1/6zO1Pr/3P1fj1s62f8AAADQg9z934hb7H8AAABoRu7+b8Yt9j8AAAA0I3f/t+KWTva//l//r//X/+v/hz9f/z9P+v9x+v9y8p/acf30/4eHvnHd/fzpWvfX30z/7/1/Vmhq/X/u/m/HLZ3sfwAAAOhB7v7vxC32PwAAADQjd/934xb7HwAAAJqRu/97cUsn+1//r/9vv/+/v/7/pM/X/+v/W6b/z7+jD9P/L9FP/z9o3f383L9+/b/+n+2m1v/n7r81bulk/wMAAEAPcvd/P26x/wEAAKAZuft/ELfY/wAAANCM3P0/jFs62f/6/776/41Fj/2/9//1//r/nuj/x+n/l9D/6//1//p/Vmpq/X/u/ts2DnW5/wEAAGCu7nf3B9+62z/2trv+5+HFj+KW8xfHdvnT2AAAAMDE3bn7Nw4tFj++6z/5+X8AAABoUe7+n8Qtnex//X9f/X+f7//r//X/+v+e6P/H6f+X0P/r/3f6+o/p/5d9f/0/Q6bW/+fu/2ncsmn4HdrznyUAAAAwJbn7fxa3dPLz/wAAANCD3P0/j1u27X+/HCAAAADMVe7+X8Qts/35/3P39Efr/yfe/y/2qf+PP07/f5z+X/8/9Pn6/3nS/487zf7/2Ib+X/8/oun+3/v/+n9OydT6/9z9v4xbZrv/AQAAgMViseWfKOTu/1XcYv8DAABAM3L3/zpusf8BAACgGbn7fxO3dLL/9f8H3v9nqr6P7/8fqd/y/n/n/f9lhwc/X/+v/2+Z/n9c3+//33v5k876/1b6/7P1//p/pmFq/X/u/t/GLZ3sfwAAAOhB7v7fxS32PwAAADQjd//v4xb7HwAAAJqRu/8PcUsn+1//P/H3/0+p/9/F+//6/z76/x0+v53+/3/POXrjBQ+85ir9PyccZP+fPxb0/3Pp/3dB/99K/+/9f/0/E7H6/n/rL+Wy1/4/d/8f45ZO9j8AAAD0IHf/7XGL/Q8AAADNyN3/p7jF/gcAAIBm5O7/c9zSyf7X/+v/p9L/5/+t19D/Hz3l/v/IYrFYS/+fTXHv/b/3//X/23n/f5z+fwn9v/5f/6//Z6VW3/9v/ca99v+5+/8St3Sy/wEAAKAHufv/Grfk/t/Y8z+6BwAAACYmd//f4hY//w8AAADNyN3/97ilk/2v/9f/T6X/T97/P/H92nr//4KKU/vs//+/fkv/v7/0/+P0/0vo//X/+n/9Pys1tf4/d/8/4pZO9j8AAAD0IHf/HXGL/Q8AAADNyN3/z7jF/gcAAIBm5O7/V9zSyf7X/7fa/2cRr//X/0+l//f+v/f/D4b+f5z+fwn9v/5f/6//Z6Wm1v/n7v9PAAAA//8si2f+") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 3.394177001s ago: executing program 3 (id=1285): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="da42720f", 0x4}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="88"], 0x88}}], 0x1, 0x44040) 3.215538423s ago: executing program 3 (id=1286): syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f0000000040)='./file3\x00', 0x1000cc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x4442, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ftruncate(r0, 0x2ababb3a) 2.263340157s ago: executing program 5 (id=1288): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5420) 1.999121271s ago: executing program 0 (id=1290): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x7, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) 1.850393813s ago: executing program 5 (id=1292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 1.697611645s ago: executing program 2 (id=1293): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000300)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) 1.603037107s ago: executing program 0 (id=1294): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.570181957s ago: executing program 5 (id=1295): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0), 0x7, 0x4ba, &(0x7f0000002040)="$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") chdir(&(0x7f0000000100)='./file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 1.525906578s ago: executing program 3 (id=1296): setuid(0xee00) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x48000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.304140741s ago: executing program 2 (id=1297): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000300)={[{@force}, {@type={'type', 0x3d, "6c588757"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.222430032s ago: executing program 0 (id=1298): bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x95af67255d5c6b14}, 0x18) r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x4080, &(0x7f00000008c0)=@nl=@unspec, 0x80) 1.081563684s ago: executing program 0 (id=1299): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 940.183676ms ago: executing program 5 (id=1300): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00"], 0x114}], 0x1}, 0x0) 826.728798ms ago: executing program 0 (id=1301): r0 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="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", 0x111, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={'streebog256\x00'}}) 750.871579ms ago: executing program 2 (id=1302): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6e6140, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 633.516471ms ago: executing program 3 (id=1303): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x200000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf7ff}}, 0x80, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000000)=""/245, &(0x7f00000003c0)=0xf5) 529.477023ms ago: executing program 0 (id=1304): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 446.876344ms ago: executing program 2 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x0) 446.053934ms ago: executing program 5 (id=1306): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140)={[{@filestreams}, {@noquota}, {@nouuid}, {@pquota}, {@bsdgroups}, {@dax}, {@sysvgroups}, {@attr2}, {@dax_always}]}, 0x1, 0x9799, &(0x7f0000009780)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x0, 0x0, 0xd}, {0xffffffff, 0x0, 0x0, 0x20000000002, 0x0, 0xfffffffffffffff9}]}) 346.731855ms ago: executing program 3 (id=1307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d83d3a12388a8", 0x1b}], 0x2) 254.062206ms ago: executing program 2 (id=1308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) 41.525719ms ago: executing program 2 (id=1309): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x48) 0s ago: executing program 3 (id=1310): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2ea, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) sync() kernel console output (not intermixed with test programs): cting invalid altsetting 0 [ 141.078292][ T5834] usbtest: probe of 4-1:220.1 failed with error -22 [ 141.086287][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.096185][ T5882] usb 3-1: Product: syz [ 141.107818][ T5834] usb 4-1: USB disconnect, device number 6 [ 141.113920][ T5882] usb 3-1: Manufacturer: syz [ 141.118580][ T5882] usb 3-1: SerialNumber: syz [ 141.154024][ T5882] usb 3-1: config 0 descriptor?? [ 141.187960][ T28] audit: type=1400 audit(1752816229.265:9): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 141.336605][ T2203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.349910][ T2203] usb 5-1: config 0 descriptor?? [ 141.566374][ T2203] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 141.581358][ T2203] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 141.796655][ T5882] usb 3-1: Firmware version (0.0) predates our first public release. [ 141.807678][ T2203] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 141.815713][ T2203] [drm] Initialized udl on minor 2 [ 141.822047][ T5882] usb 3-1: Please update to version 0.2 or newer [ 141.933871][ T5882] usb 3-1: USB disconnect, device number 7 [ 141.967777][ T2203] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 141.993350][ T2203] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 142.004547][ T967] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.030225][ T967] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.039474][ T967] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 142.067562][ T2203] usb 5-1: USB disconnect, device number 4 [ 142.161928][ T7002] loop3: detected capacity change from 0 to 32768 [ 142.185354][ T7002] (syz.3.331,7002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.211252][ T7002] (syz.3.331,7002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.246198][ T7002] JBD2: Ignoring recovery information on journal [ 142.306580][ T7002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.493207][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 142.653788][ T7008] netlink: 19 bytes leftover after parsing attributes in process `syz.4.334'. [ 142.686220][ T7010] gretap0: entered promiscuous mode [ 142.692293][ T7010] vlan3: entered promiscuous mode [ 142.826910][ T7014] loop3: detected capacity change from 0 to 512 [ 142.871725][ T7014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.909773][ T7014] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.043496][ T7023] loop2: detected capacity change from 0 to 2048 [ 143.178309][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.776712][ T7042] loop4: detected capacity change from 0 to 128 [ 143.893141][ T7042] syz.4.345: attempt to access beyond end of device [ 143.893141][ T7042] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 144.513856][ T7058] netlink: 14 bytes leftover after parsing attributes in process `syz.4.352'. [ 144.918987][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.019462][ T7058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.044835][ T5844] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 145.063235][ T7075] loop0: detected capacity change from 0 to 512 [ 145.071927][ T5844] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 145.083696][ T7058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.096053][ T5844] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 145.098111][ T7075] EXT4-fs (loop0): filesystem is read-only [ 145.119898][ T7075] EXT4-fs (loop0): filesystem is read-only [ 145.136518][ T5834] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.149101][ T7058] bond0 (unregistering): Released all slaves [ 145.155549][ T7075] EXT4-fs (loop0): orphan cleanup on readonly fs [ 145.155685][ T5844] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 145.169766][ T7075] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.362: bad orphan inode 16 [ 145.185510][ T7075] ext4_test_bit(bit=15, block=3) = 0 [ 145.189993][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.197647][ T5834] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 145.198817][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.303528][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.320696][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.334704][ T7077] fido_id[7077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.363894][ T5834] usb 4-1: config 0 descriptor?? [ 145.774215][ T7090] loop4: detected capacity change from 0 to 512 [ 145.834460][ T7092] capability: warning: `syz.2.369' uses deprecated v2 capabilities in a way that may be insecure [ 145.846267][ T5834] aquacomputer_d5next 0003:0C70:F00B.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 145.894899][ T7090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.936378][ T7090] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.048652][ T2203] usb 4-1: USB disconnect, device number 7 [ 146.107427][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.155268][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 146.173545][ T7098] fido_id[7098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 146.203056][ T7097] loop0: detected capacity change from 0 to 4096 [ 146.271223][ T7097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.319185][ T7097] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.370: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 146.345459][ T7097] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.370: directory missing '..' [ 146.411549][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.438051][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.373'. [ 146.623715][ T7109] loop0: detected capacity change from 0 to 256 [ 146.634200][ T7109] exfat: Deprecated parameter 'namecase' [ 146.654764][ T7109] exfat: Deprecated parameter 'namecase' [ 146.687754][ T7109] exfat: Deprecated parameter 'utf8' [ 146.728566][ T7109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 146.858259][ T28] audit: type=1800 audit(1752816234.938:10): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.374" name="bus" dev="loop0" ino=1048628 res=0 errno=0 [ 147.767645][ T7123] loop0: detected capacity change from 0 to 32768 [ 147.826774][ T7133] loop4: detected capacity change from 0 to 1024 [ 147.850749][ T7123] find_entry called with index = 0 [ 147.871869][ T7123] read_mapping_page failed! [ 147.898171][ T7123] ERROR: (device loop0): txCommit: [ 147.898171][ T7123] [ 147.924564][ T7133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.979636][ T7126] loop3: detected capacity change from 0 to 32768 [ 147.989213][ T7126] XFS: attr2 mount option is deprecated. [ 148.094047][ T7126] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.115521][ T7131] loop2: detected capacity change from 0 to 32768 [ 148.144812][ T7131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.386 (7131) [ 148.180692][ T7131] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.247138][ T7131] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 148.255876][ T7131] BTRFS info (device loop2): using free space tree [ 148.320721][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.359986][ T7126] XFS (loop3): Ending clean mount [ 148.426920][ T7131] BTRFS info (device loop2): enabling ssd optimizations [ 148.456905][ T7131] BTRFS info (device loop2): auto enabling async discard [ 148.668443][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.919424][ T7170] loop4: detected capacity change from 0 to 1024 [ 148.964118][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.127601][ T28] audit: type=1800 audit(1752816237.209:11): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.391" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 149.501150][ T7176] loop3: detected capacity change from 0 to 256 [ 149.582604][ T7176] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 149.718363][ T28] audit: type=1800 audit(1752816237.810:12): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.390" name="file1" dev="loop3" ino=1048629 res=0 errno=0 [ 149.961061][ T7187] loop4: detected capacity change from 0 to 2048 [ 150.036767][ T7187] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 150.109201][ T7187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.129972][ T7188] loop2: detected capacity change from 0 to 4096 [ 150.217398][ T7188] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 150.380033][ T7188] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 150.436625][ T7188] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 150.567705][ T7188] ntfs3: loop2: ino=5, "/" directory corrupted [ 150.752967][ T7205] loop3: detected capacity change from 0 to 512 [ 150.797066][ T7205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.845373][ T7205] EXT4-fs (loop3): 1 truncate cleaned up [ 150.875385][ T7205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.007550][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.897358][ T7235] netlink: 4692 bytes leftover after parsing attributes in process `syz.4.417'. [ 152.110112][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 152.215643][ T7243] loop2: detected capacity change from 0 to 128 [ 152.289203][ T7243] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.364032][ T7250] loop0: detected capacity change from 0 to 256 [ 152.423547][ T7243] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.570531][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.817948][ T7257] loop0: detected capacity change from 0 to 1024 [ 152.968756][ T28] audit: type=1804 audit(1752816241.051:13): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.427" name="/newroot/108/file0/bus" dev="loop0" ino=26 res=1 errno=0 [ 153.092110][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 153.201589][ T7252] loop3: detected capacity change from 0 to 32768 [ 153.247475][ T7252] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.425 (7252) [ 153.264879][ T7241] loop4: detected capacity change from 0 to 32768 [ 153.312236][ T7252] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.323182][ T7252] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 153.333862][ T7252] BTRFS info (device loop3): using free space tree [ 153.357853][ T7241] JBD2: Ignoring recovery information on journal [ 153.445103][ T7252] BTRFS info (device loop3): enabling ssd optimizations [ 153.452579][ T7252] BTRFS info (device loop3): auto enabling async discard [ 153.501830][ T7241] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 153.717065][ T5974] ocfs2: Unmounting device (7,4) on (node local) [ 153.724803][ T5787] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.693859][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.781107][ T28] audit: type=1326 audit(1752816242.862:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 154.811311][ T28] audit: type=1326 audit(1752816242.892:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 154.838098][ T28] audit: type=1326 audit(1752816242.922:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 154.863900][ T28] audit: type=1326 audit(1752816242.922:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 154.883708][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 154.906739][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 154.928845][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 154.929978][ T28] audit: type=1326 audit(1752816242.922:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 154.961230][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.961259][ T9] usb 5-1: Product: syz [ 154.961275][ T9] usb 5-1: Manufacturer: syz [ 154.961290][ T9] usb 5-1: SerialNumber: syz [ 154.999858][ T9] usb 5-1: config 0 descriptor?? [ 155.015499][ T28] audit: type=1326 audit(1752816242.942:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 155.048984][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 155.069498][ T9] usb 5-1: setting power ON [ 155.079941][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 155.088096][ T28] audit: type=1326 audit(1752816242.972:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 155.112994][ T28] audit: type=1326 audit(1752816242.972:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf518e9a9 code=0x7ffc0000 [ 155.139414][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.151340][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 155.160913][ T9] usb 5-1: media controller created [ 155.187972][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.213944][ T9] usb 5-1: selecting invalid altsetting 6 [ 155.220322][ T9] usb 5-1: digital interface selection failed (-22) [ 155.227633][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 155.238091][ T9] usb 5-1: setting power OFF [ 155.244720][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 155.252001][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 155.261783][ T9] (NULL device *): no alternate interface [ 155.281538][ T7293] dvb-usb: bulk message failed: -22 (3/0) [ 155.303597][ T7293] cxusb: i2c rd: len=143 is too big! [ 155.303597][ T7293] [ 155.318096][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 155.337956][ T9] usb 5-1: USB disconnect, device number 5 [ 155.943958][ T28] audit: type=1326 audit(1752816244.033:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.4.441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f387c38e9a9 code=0x0 [ 156.635680][ T7317] loop2: detected capacity change from 0 to 32768 [ 156.654548][ T7317] (syz.2.444,7317,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.680362][ T7317] (syz.2.444,7317,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.737720][ T7317] JBD2: Ignoring recovery information on journal [ 156.793065][ T7317] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.057460][ T5841] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.159568][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 157.264974][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 157.274881][ T5841] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 157.294667][ T5841] usb 4-1: config 0 has no interface number 0 [ 157.295563][ T7327] loop0: detected capacity change from 0 to 40427 [ 157.314050][ T5841] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 157.332454][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.338649][ T7327] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 157.360869][ T5841] usb 4-1: Product: syz [ 157.365595][ T7327] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.371937][ T5841] usb 4-1: Manufacturer: syz [ 157.393590][ T5841] usb 4-1: SerialNumber: syz [ 157.405286][ T5841] usb 4-1: config 0 descriptor?? [ 157.405507][ T7327] F2FS-fs (loop0): invalid crc value [ 157.442345][ T5841] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 157.464363][ T7327] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.640409][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 157.673896][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 157.682755][ T7327] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 157.694823][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 157.702264][ T7327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.727460][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 157.763438][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 157.785233][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 157.812503][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 157.832477][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 157.862571][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 157.892571][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 157.922620][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 157.942569][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 157.960227][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 157.983471][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 158.032057][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 158.064615][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 158.093289][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 158.132269][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 158.172795][ T5841] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 158.206454][ T5841] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 158.308250][ T5841] usb 4-1: USB disconnect, device number 8 [ 158.335344][ T2203] kernel write not supported for file /vcs (pid: 2203 comm: kworker/1:3) [ 158.808678][ T7358] tipc: Started in network mode [ 158.818767][ T7358] tipc: Node identity , cluster identity 4711 [ 158.983053][ T7362] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 159.464798][ T7376] loop4: detected capacity change from 0 to 2048 [ 159.534590][ T7376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.790465][ T7388] loop3: detected capacity change from 0 to 1024 [ 159.898561][ T7391] loop4: detected capacity change from 0 to 1024 [ 159.921204][ T28] audit: type=1804 audit(1752816248.005:23): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.474" name="/newroot/114/file0/bus" dev="loop3" ino=26 res=1 errno=0 [ 160.074696][ T1120] hfsplus: b-tree write err: -5, ino 4 [ 160.096434][ T7391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.264853][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.410998][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.621242][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 160.647102][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.663613][ T9] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 160.681947][ T9] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 160.703293][ T9] usb 3-1: config 17 has no interface number 0 [ 160.709575][ T9] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 160.725610][ T9] usb 3-1: config 17 interface 8 has no altsetting 0 [ 160.737438][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 160.764902][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.778895][ T9] usb 3-1: Product: syz [ 160.809420][ T9] usb 3-1: Manufacturer: syz [ 160.818488][ T9] usb 3-1: SerialNumber: syz [ 160.837118][ T7409] loop3: detected capacity change from 0 to 4096 [ 160.860750][ T7409] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 160.942974][ T7409] ntfs3: loop3: Failed to load $Extend (-22). [ 160.953086][ T7409] ntfs3: loop3: Failed to initialize $Extend. [ 161.064049][ T9] usb 3-1: selecting invalid altsetting 0 [ 161.124018][ T2203] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.130858][ T9] usb 3-1: USB disconnect, device number 8 [ 161.321442][ T2203] usb 5-1: Using ep0 maxpacket: 32 [ 161.335655][ T2203] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 161.349381][ T2203] usb 5-1: config 0 has no interface number 0 [ 161.373580][ T2203] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 161.388915][ T2203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.397188][ T2203] usb 5-1: Product: syz [ 161.408839][ T2203] usb 5-1: Manufacturer: syz [ 161.413760][ T2203] usb 5-1: SerialNumber: syz [ 161.424958][ T2203] usb 5-1: config 0 descriptor?? [ 161.540254][ T5834] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.742190][ T5834] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.757687][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.782813][ T5834] usb 4-1: config 0 descriptor?? [ 161.825991][ T7425] loop2: detected capacity change from 0 to 1024 [ 161.849892][ T7425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.869535][ T2203] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 161.893089][ T2203] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 161.929043][ T7425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.934519][ T7423] loop0: detected capacity change from 0 to 40427 [ 161.962128][ T2203] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 161.983712][ T7423] F2FS-fs (loop0): invalid crc value [ 162.008964][ T2203] usb 5-1: USB disconnect, device number 6 [ 162.017092][ T5834] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 162.027735][ T5834] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 162.193192][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.238256][ T5834] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 162.259052][ T7423] F2FS-fs (loop0): Start checkpoint disabled! [ 162.283300][ T5834] [drm] Initialized udl on minor 2 [ 162.316007][ T7423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 162.424092][ T5834] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.450386][ T5834] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 162.463192][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.474162][ T5834] usb 4-1: USB disconnect, device number 9 [ 162.489962][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 162.704363][ T7436] loop2: detected capacity change from 0 to 64 [ 162.950632][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.159647][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 163.168705][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.186255][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.197826][ T5841] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 163.207766][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.220964][ T5841] usb 5-1: config 0 descriptor?? [ 163.367466][ T7453] loop2: detected capacity change from 0 to 16 [ 163.392968][ T7453] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.460382][ T28] audit: type=1800 audit(1752816251.557:24): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.501" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 163.641893][ T7459] loop3: detected capacity change from 0 to 512 [ 163.646058][ T5841] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 163.658609][ T5841] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 163.667496][ T5841] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 163.678093][ T5841] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 163.688279][ T5841] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 163.907711][ T5841] usb 5-1: USB disconnect, device number 7 [ 164.284887][ T7477] loop2: detected capacity change from 0 to 256 [ 164.348296][ T7477] FAT-fs (loop2): Directory bread(block 64) failed [ 164.361435][ T7477] FAT-fs (loop2): Directory bread(block 65) failed [ 164.371614][ T7477] FAT-fs (loop2): Directory bread(block 66) failed [ 164.378354][ T7477] FAT-fs (loop2): Directory bread(block 67) failed [ 164.385679][ T7477] FAT-fs (loop2): Directory bread(block 68) failed [ 164.392421][ T7477] FAT-fs (loop2): Directory bread(block 69) failed [ 164.399567][ T7477] FAT-fs (loop2): Directory bread(block 70) failed [ 164.406173][ T7477] FAT-fs (loop2): Directory bread(block 71) failed [ 164.413276][ T7477] FAT-fs (loop2): Directory bread(block 72) failed [ 164.421268][ T7477] FAT-fs (loop2): Directory bread(block 73) failed [ 164.526544][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 164.638772][ T5841] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.771980][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 164.831499][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 164.870573][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.893214][ T5841] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 164.902985][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.925465][ T5841] usb 4-1: config 0 descriptor?? [ 165.044086][ T5834] IPVS: starting estimator thread 0... [ 165.178938][ T7496] IPVS: using max 17 ests per chain, 40800 per kthread [ 165.291787][ T7503] loop4: detected capacity change from 0 to 64 [ 165.386798][ T5841] apple 0003:05AC:024B.000C: fixing up MacBook JIS keyboard report descriptor [ 165.402669][ T5841] apple 0003:05AC:024B.000C: item fetching failed at offset 2/69 [ 165.412849][ T5841] apple 0003:05AC:024B.000C: parse failed [ 165.419403][ T5841] apple: probe of 0003:05AC:024B.000C failed with error -22 [ 165.432028][ T7503] syz.4.526: attempt to access beyond end of device [ 165.432028][ T7503] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 165.454893][ T7503] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 165.504926][ T7503] Trying to free block not in datazone [ 165.602688][ T5834] usb 4-1: USB disconnect, device number 10 [ 165.757265][ T7511] loop4: detected capacity change from 0 to 512 [ 165.797578][ T7511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.881985][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.048320][ T7509] loop2: detected capacity change from 0 to 32768 [ 166.056763][ T7515] loop4: detected capacity change from 0 to 4096 [ 166.095376][ T7516] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.153958][ T7509] find_entry called with index = 0 [ 166.172967][ T7509] read_mapping_page failed! [ 166.184338][ T7509] ERROR: (device loop2): txCommit: [ 166.184338][ T7509] [ 167.092477][ T7525] loop4: detected capacity change from 0 to 32768 [ 167.133768][ T7525] JBD2: Ignoring recovery information on journal [ 167.201785][ T7525] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 167.400976][ T5974] ocfs2: Unmounting device (7,4) on (node local) [ 167.518053][ T7545] loop3: detected capacity change from 0 to 4096 [ 167.600222][ T7545] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 167.739313][ T7551] overlayfs: conflicting options: nfs_export=on,index=off [ 168.568366][ T7573] loop2: detected capacity change from 0 to 256 [ 168.585778][ T7573] exfat: Deprecated parameter 'utf8' [ 168.601560][ T7573] exfat: Deprecated parameter 'utf8' [ 168.662043][ T7573] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 169.111664][ T7585] loop2: detected capacity change from 0 to 4096 [ 169.156790][ T7585] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.189383][ T7585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.352522][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.896082][ T5803] Bluetooth: hci3: command tx timeout [ 169.987217][ T5841] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 170.188376][ T5841] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 170.200475][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.214350][ T5841] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.224498][ T5841] usb 3-1: config 1 has no interface number 1 [ 170.235044][ T5841] usb 3-1: string descriptor 0 read error: -22 [ 170.252301][ T5841] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.275115][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.309710][ T5841] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.330309][ T5841] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.363099][ T5841] usb 3-1: MIDIStreaming interface descriptor not found [ 170.534450][ T5841] usb 3-1: USB disconnect, device number 9 [ 170.578374][ T7625] loop3: detected capacity change from 0 to 4096 [ 170.870573][ T7630] loop3: detected capacity change from 0 to 64 [ 170.934485][ T7630] syz.3.582: attempt to access beyond end of device [ 170.934485][ T7630] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 170.954366][ T7630] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 170.972723][ T7632] loop4: detected capacity change from 0 to 256 [ 171.055900][ T7632] FAT-fs (loop4): Directory bread(block 64) failed [ 171.062551][ T7632] FAT-fs (loop4): Directory bread(block 65) failed [ 171.070774][ T7630] Trying to free block not in datazone [ 171.087497][ T7632] FAT-fs (loop4): Directory bread(block 66) failed [ 171.099907][ T7632] FAT-fs (loop4): Directory bread(block 67) failed [ 171.125568][ T7632] FAT-fs (loop4): Directory bread(block 68) failed [ 171.134410][ T7632] FAT-fs (loop4): Directory bread(block 69) failed [ 171.141961][ T7632] FAT-fs (loop4): Directory bread(block 70) failed [ 171.149818][ T7632] FAT-fs (loop4): Directory bread(block 71) failed [ 171.168617][ T7632] FAT-fs (loop4): Directory bread(block 72) failed [ 171.185526][ T7632] FAT-fs (loop4): Directory bread(block 73) failed [ 171.504262][ T7643] loop4: detected capacity change from 0 to 64 [ 171.615184][ T5841] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.625313][ T5834] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.815146][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 171.823452][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.827330][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.835402][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.846276][ T5834] usb 3-1: config 6 has an invalid interface number: 3 but max is 2 [ 171.859623][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.860768][ T5834] usb 3-1: config 6 has an invalid interface number: 255 but max is 2 [ 171.882902][ T5841] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.899536][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.901787][ T5834] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 171.935816][ T5841] usb 4-1: config 0 descriptor?? [ 171.942821][ T5834] usb 3-1: config 6 has no interface number 0 [ 171.960398][ T5834] usb 3-1: config 6 has no interface number 1 [ 171.989680][ T5834] usb 3-1: too many endpoints for config 6 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 172.029678][ T5834] usb 3-1: config 6 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 172.063543][ T7653] loop4: detected capacity change from 0 to 1024 [ 172.063568][ T7655] loop0: detected capacity change from 0 to 64 [ 172.070958][ T5834] usb 3-1: config 6 interface 2 has no altsetting 0 [ 172.106016][ T5834] usb 3-1: config 6 interface 255 has no altsetting 0 [ 172.121577][ T7655] syz.0.595: attempt to access beyond end of device [ 172.121577][ T7655] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 172.179611][ T5834] usb 3-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 172.189674][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.216082][ T5834] usb 3-1: Product: syz [ 172.225153][ T7655] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 172.233891][ T5834] usb 3-1: Manufacturer: syz [ 172.244342][ T5834] usb 3-1: SerialNumber: syz [ 172.275313][ T5974] hfsplus: bad catalog entry type [ 172.370896][ T7655] Trying to free block not in datazone [ 172.379972][ T5841] plantronics 0003:047F:FFFF.000D: report is too long [ 172.387808][ T5841] plantronics 0003:047F:FFFF.000D: item 0 4 0 8 parsing failed [ 172.408554][ T5841] plantronics 0003:047F:FFFF.000D: parse failed [ 172.449276][ T5841] plantronics: probe of 0003:047F:FFFF.000D failed with error -22 [ 172.501467][ T5834] usb 3-1: selecting invalid altsetting 0 [ 172.509401][ T5834] usb 3-1: Could not set interface, error -22 [ 172.554399][ T5834] usb 3-1: USB disconnect, device number 10 [ 172.625326][ T5844] usb 4-1: USB disconnect, device number 11 [ 172.646863][ T1098] hfsplus: b-tree write err: -5, ino 4 [ 172.778669][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.899778][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.038415][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.093860][ T7661] loop0: detected capacity change from 0 to 1024 [ 173.194078][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.488337][ T7670] loop0: detected capacity change from 0 to 2048 [ 173.510919][ T7670] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 173.571208][ T7673] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.582865][ T7670] syz.0.605: attempt to access beyond end of device [ 173.582865][ T7670] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 174.003634][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.025626][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.046079][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.078067][ T7681] loop3: detected capacity change from 0 to 1024 [ 174.097616][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.115485][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.124589][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.270538][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 175.165926][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 175.680909][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.708584][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.716800][ T7679] bridge_slave_0: entered allmulticast mode [ 175.727117][ T7679] bridge_slave_0: entered promiscuous mode [ 175.743509][ T2203] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.770372][ T12] hsr_slave_0: left promiscuous mode [ 175.788038][ T12] hsr_slave_1: left promiscuous mode [ 175.820175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.833511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.852094][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.872180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.894257][ T12] bridge_slave_1: left allmulticast mode [ 175.901563][ T12] bridge_slave_1: left promiscuous mode [ 175.907992][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.920878][ T12] bridge_slave_0: left allmulticast mode [ 175.933508][ T12] bridge_slave_0: left promiscuous mode [ 175.939318][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.953418][ T2203] usb 4-1: Using ep0 maxpacket: 16 [ 175.971856][ T2203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.994482][ T2203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.011657][ T12] veth1_macvtap: left promiscuous mode [ 176.017733][ T2203] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 176.023498][ T12] veth0_macvtap: left promiscuous mode [ 176.043116][ T12] veth1_vlan: left promiscuous mode [ 176.048522][ T12] veth0_vlan: left promiscuous mode [ 176.051183][ T2203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.075767][ T2203] usb 4-1: config 0 descriptor?? [ 176.213469][ T5796] Bluetooth: hci3: command tx timeout [ 176.511396][ T7718] loop2: detected capacity change from 0 to 40427 [ 176.535998][ T2203] nzxt-kraken2 0003:1E71:170E.000E: unknown main item tag 0x0 [ 176.556870][ T2203] nzxt-kraken2 0003:1E71:170E.000E: unknown main item tag 0x0 [ 176.570481][ T2203] nzxt-kraken2 0003:1E71:170E.000E: item fetching failed at offset 4/5 [ 176.572179][ T7718] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 176.585219][ T2203] nzxt-kraken2 0003:1E71:170E.000E: hid parse failed with -22 [ 176.611598][ T7718] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 176.621240][ T2203] nzxt-kraken2: probe of 0003:1E71:170E.000E failed with error -22 [ 176.703493][ T7718] F2FS-fs (loop2): invalid crc value [ 176.779619][ T5834] usb 4-1: USB disconnect, device number 12 [ 176.917023][ T7718] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 176.928649][ T7718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.520870][ T12] team0 (unregistering): Port device team_slave_1 removed [ 177.761238][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.297021][ T5796] Bluetooth: hci3: command tx timeout [ 178.451084][ T7746] loop0: detected capacity change from 0 to 32768 [ 178.481316][ T7746] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.551158][ T7742] loop3: detected capacity change from 0 to 40427 [ 178.566903][ T7742] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 178.583825][ T7746] XFS (loop0): Ending clean mount [ 178.611642][ T7742] F2FS-fs (loop3): invalid crc value [ 178.626173][ T7746] XFS (loop0): Quotacheck needed: Please wait. [ 178.699638][ T7742] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.764771][ T7746] XFS (loop0): Quotacheck: Done. [ 178.868867][ T7742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.984741][ T5788] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.077360][ T5787] syz-executor: attempt to access beyond end of device [ 179.077360][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.102113][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 179.326052][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.333868][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.341148][ T7679] bridge_slave_1: entered allmulticast mode [ 179.356167][ T7679] bridge_slave_1: entered promiscuous mode [ 179.533598][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.536491][ T7766] loop2: detected capacity change from 0 to 256 [ 179.564478][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.758383][ T7679] team0: Port device team_slave_0 added [ 179.792959][ T7679] team0: Port device team_slave_1 added [ 179.931504][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.938782][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.968477][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.001831][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.031023][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.085197][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.288796][ T12] IPVS: stop unused estimator thread 0... [ 180.300773][ T7679] hsr_slave_0: entered promiscuous mode [ 180.363573][ T7679] hsr_slave_1: entered promiscuous mode [ 180.381378][ T5796] Bluetooth: hci3: command tx timeout [ 180.388141][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.406110][ T7679] Cannot create hsr debugfs directory [ 181.226026][ T7679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.245902][ T7679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.267807][ T7679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.292040][ T7679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.641006][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.706554][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.755628][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.762900][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.814404][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.821666][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.451565][ T5796] Bluetooth: hci3: command tx timeout [ 182.488644][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.101915][ T7850] loop3: detected capacity change from 0 to 32768 [ 183.157669][ T7846] loop2: detected capacity change from 0 to 32768 [ 183.220235][ T7850] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.273024][ T7846] read_mapping_page failed! [ 183.320841][ T112] read_mapping_page failed! [ 183.461251][ T7679] veth0_vlan: entered promiscuous mode [ 183.511780][ T7679] veth1_vlan: entered promiscuous mode [ 183.531854][ T7850] XFS (loop3): Ending clean mount [ 183.557337][ T7850] XFS (loop3): Quotacheck needed: Please wait. [ 183.632330][ T7679] veth0_macvtap: entered promiscuous mode [ 183.693903][ T7850] XFS (loop3): Quotacheck: Done. [ 183.714393][ T7679] veth1_macvtap: entered promiscuous mode [ 183.824196][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.889170][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.923595][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.965570][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.029812][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.054215][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.086238][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.098462][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.138540][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.183897][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.218865][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.248844][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.258720][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.299627][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.331811][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.390502][ T7679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.408771][ T7679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.420020][ T7679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.429834][ T7679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.681309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.708786][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.751962][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.779215][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.439323][ T7921] tipc: Enabling of bearer rejected, media not registered [ 186.544530][ T7908] loop2: detected capacity change from 0 to 40427 [ 186.648263][ T7908] F2FS-fs (loop2): invalid crc value [ 186.714361][ T7908] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.799235][ T7958] netlink: 277 bytes leftover after parsing attributes in process `syz.5.673'. [ 186.816892][ T7956] loop3: detected capacity change from 0 to 4096 [ 186.897534][ T7908] F2FS-fs (loop2): Start checkpoint disabled! [ 186.953384][ T7908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 187.002959][ T7965] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.172883][ T28] audit: type=1800 audit(1752816275.268:25): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.657" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 187.259599][ T7908] syz.2.657: attempt to access beyond end of device [ 187.259599][ T7908] loop2: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 187.312244][ T7970] netlink: 'syz.0.676': attribute type 28 has an invalid length. [ 187.748969][ T7983] loop3: detected capacity change from 0 to 256 [ 187.905915][ T7983] FAT-fs (loop3): Directory bread(block 64) failed [ 187.913973][ T1084] kworker/u4:7: attempt to access beyond end of device [ 187.913973][ T1084] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.937499][ T7983] FAT-fs (loop3): Directory bread(block 65) failed [ 187.950101][ T7983] FAT-fs (loop3): Directory bread(block 66) failed [ 187.974331][ T7983] FAT-fs (loop3): Directory bread(block 67) failed [ 188.009801][ T1084] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 188.014575][ T7983] FAT-fs (loop3): Directory bread(block 68) failed [ 188.031825][ T1084] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 188.051608][ T7983] FAT-fs (loop3): Directory bread(block 69) failed [ 188.062804][ T7983] FAT-fs (loop3): Directory bread(block 70) failed [ 188.070335][ T7983] FAT-fs (loop3): Directory bread(block 71) failed [ 188.077460][ T7983] FAT-fs (loop3): Directory bread(block 72) failed [ 188.095290][ T7983] FAT-fs (loop3): Directory bread(block 73) failed [ 189.066528][ T5834] IPVS: starting estimator thread 0... [ 189.186664][ T8017] IPVS: using max 18 ests per chain, 43200 per kthread [ 189.225352][ T8024] loop2: detected capacity change from 0 to 128 [ 189.283301][ T8024] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 190.014751][ T8045] netlink: 'syz.2.700': attribute type 3 has an invalid length. [ 190.023254][ T8045] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 190.043542][ T8045] netlink: 192 bytes leftover after parsing attributes in process `syz.2.700'. [ 190.064152][ T8045] NCSI netlink: No device for ifindex 0 [ 190.218865][ T8012] loop3: detected capacity change from 0 to 32768 [ 190.304334][ T8012] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.316236][ T8012] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.403648][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.434650][ T8012] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 190.589670][ T8012] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 190.653028][ T8057] loop5: detected capacity change from 0 to 4096 [ 190.698335][ T8057] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 190.910908][ T28] audit: type=1800 audit(1752816279.020:26): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.703" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 191.692221][ T8080] loop2: detected capacity change from 0 to 256 [ 191.727656][ T8082] loop0: detected capacity change from 0 to 1024 [ 191.758029][ T8082] hfsplus: unable to parse mount options [ 191.780000][ T8080] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 191.816211][ T8082] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 191.873389][ T8082] CIFS mount error: No usable UNC path provided in device string! [ 191.873389][ T8082] [ 191.905644][ T8082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 192.192946][ T8093] loop3: detected capacity change from 0 to 128 [ 192.240556][ T8093] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.297965][ T8093] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.367965][ T8093] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.398375][ T8093] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.715: No space for directory leaf checksum. Please run e2fsck -D. [ 192.414456][ T8093] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.715: checksumming directory block 0 [ 192.621593][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.642756][ T8072] loop5: detected capacity change from 0 to 32768 [ 192.677542][ T8107] syz.0.718 (8107): /proc/8107/oom_adj is deprecated, please use /proc/8107/oom_score_adj instead. [ 192.701661][ T8072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.709 (8072) [ 192.761782][ T8072] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.802028][ T8072] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 192.825398][ T8072] BTRFS info (device loop5): using free space tree [ 192.937253][ T8072] BTRFS info (device loop5): enabling ssd optimizations [ 192.979113][ T8072] BTRFS info (device loop5): auto enabling async discard [ 193.286901][ T7679] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.312946][ T8140] usb usb1: check_ctrlrecip: process 8140 (syz.0.723) requesting ep 01 but needs 81 [ 193.936400][ T8155] loop2: detected capacity change from 0 to 2048 [ 194.063571][ T8155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.148205][ T8155] MPI: mpi too large (113288 bits) [ 194.236062][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.340518][ T8171] devpts: called with bogus options [ 194.531179][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.784779][ T5834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.989460][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.002777][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'. [ 195.021884][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.054025][ T5834] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 195.063137][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.106647][ T5834] usb 4-1: config 0 descriptor?? [ 195.326174][ T8204] loop5: detected capacity change from 0 to 1024 [ 195.483062][ T8203] syz.5.747: attempt to access beyond end of device [ 195.483062][ T8203] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 195.513938][ T8203] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 195.562011][ T5834] stadia 0003:18D1:9400.000F: item fetching failed at offset 4/5 [ 195.586357][ T8203] hfsplus: unable to mark blocks free: error -5 [ 195.592672][ T8203] hfsplus: can't free extent [ 195.602557][ T5834] stadia 0003:18D1:9400.000F: parse failed [ 195.623545][ T5834] stadia: probe of 0003:18D1:9400.000F failed with error -22 [ 195.673997][ T8215] xt_hashlimit: max too large, truncated to 1048576 [ 195.707056][ T8215] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 195.848405][ T5834] usb 4-1: USB disconnect, device number 13 [ 196.773627][ T8247] usb usb8: usbfs: process 8247 (syz.2.760) did not claim interface 0 before use [ 196.999455][ T8227] loop5: detected capacity change from 0 to 32768 [ 197.036696][ T8227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.755 (8227) [ 197.064613][ T8227] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.118457][ T8227] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 197.143424][ T8227] BTRFS info (device loop5): using free space tree [ 197.252742][ T8227] BTRFS info (device loop5): enabling ssd optimizations [ 197.259770][ T8227] BTRFS info (device loop5): auto enabling async discard [ 197.510307][ T7679] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.530452][ T8250] loop3: detected capacity change from 0 to 32768 [ 197.842467][ T8280] loop5: detected capacity change from 0 to 512 [ 197.942651][ T8282] loop2: detected capacity change from 0 to 64 [ 197.984082][ T8280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.014416][ T8280] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.153406][ T8280] EXT4-fs warning (device loop5): ext4_group_extend:1897: can't read last block, resize aborted [ 198.251657][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.417603][ T28] audit: type=1326 audit(1752816286.524:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.5.771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfd4d8e9a9 code=0x0 [ 198.503655][ T8290] loop2: detected capacity change from 0 to 4096 [ 198.574035][ T8290] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 198.592402][ T8290] ntfs3: loop2: Failed to load $Extend (-22). [ 198.598646][ T8290] ntfs3: loop2: Failed to initialize $Extend. [ 199.083776][ T8305] raw_sendmsg: syz.2.777 forgot to set AF_INET. Fix it! [ 199.768129][ T8307] loop3: detected capacity change from 0 to 32768 [ 199.812131][ T8307] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 199.900559][ T8307] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 200.213853][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 200.372714][ T8316] loop5: detected capacity change from 0 to 32768 [ 200.396544][ T8316] XFS: noikeep mount option is deprecated. [ 200.513048][ T8316] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.777056][ T8316] XFS (loop5): Ending clean mount [ 200.802926][ T8316] XFS (loop5): Quotacheck needed: Please wait. [ 200.942896][ T8316] XFS (loop5): Quotacheck: Done. [ 201.107784][ T7679] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.134357][ T8328] loop0: detected capacity change from 0 to 32768 [ 201.162644][ T8328] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.787 (8328) [ 201.252612][ T8328] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 201.314135][ T8328] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 201.386997][ T8328] BTRFS info (device loop0): using free space tree [ 201.478172][ T8368] loop5: detected capacity change from 0 to 512 [ 201.486841][ T8368] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.667307][ T8368] EXT4-fs (loop5): 1 truncate cleaned up [ 201.708118][ T8368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.746214][ T8328] BTRFS info (device loop0): enabling ssd optimizations [ 201.774773][ T8328] BTRFS info (device loop0): auto enabling async discard [ 201.991521][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.405418][ T5788] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 203.259404][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.462349][ T8433] vcan0: MTU too low for tipc bearer [ 203.467753][ T8433] tipc: Enabling of bearer rejected, failed to enable media [ 203.487526][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.516820][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.537066][ T9] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 203.566953][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.593925][ T9] usb 6-1: config 0 descriptor?? [ 203.777720][ T8408] loop3: detected capacity change from 0 to 32768 [ 203.862016][ T8408] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 204.037811][ T9] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 204.092660][ T9] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 204.105697][ T8435] loop2: detected capacity change from 0 to 32768 [ 204.120583][ T9] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 204.141050][ T8408] XFS (loop3): Ending clean mount [ 204.156604][ T9] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 204.204766][ T9] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 204.251588][ T9] greenasia 0003:0E8F:0012.0010: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 204.307651][ T9] greenasia 0003:0E8F:0012.0010: no inputs found [ 204.369245][ T9] usb 6-1: USB disconnect, device number 2 [ 204.435297][ T5787] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 204.635538][ T8456] fido_id[8456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 204.958562][ T2203] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 205.195606][ T2203] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.238332][ T2203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.268316][ T2203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.308528][ T2203] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.359587][ T2203] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.379810][ T2203] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.408418][ T2203] usb 4-1: Manufacturer: syz [ 205.423974][ T2203] usb 4-1: config 0 descriptor?? [ 205.429752][ T8462] loop2: detected capacity change from 0 to 128 [ 205.476832][ T8462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 205.495742][ T8462] System zones: 1-3, 19-19, 35-36 [ 205.510066][ T8462] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.555197][ T8462] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.771377][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.893339][ T2203] appleir 0003:05AC:8243.0011: item fetching failed at offset 0/1 [ 205.923154][ T2203] appleir 0003:05AC:8243.0011: parse failed [ 205.938217][ T2203] appleir: probe of 0003:05AC:8243.0011 failed with error -22 [ 206.149066][ T2203] usb 4-1: USB disconnect, device number 14 [ 206.180338][ T8452] loop0: detected capacity change from 0 to 65536 [ 206.244394][ T8452] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 206.256938][ T8487] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 206.344451][ T8452] XFS (loop0): Ending clean mount [ 206.402659][ T8452] XFS (loop0): Quotacheck needed: Please wait. [ 206.529780][ T8452] XFS (loop0): Quotacheck: Done. [ 206.568726][ T8476] loop2: detected capacity change from 0 to 32768 [ 206.873347][ T5788] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 207.003954][ T8494] loop5: detected capacity change from 0 to 4096 [ 207.314425][ T8500] netlink: 204 bytes leftover after parsing attributes in process `syz.2.831'. [ 207.359766][ T8500] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 207.457767][ T28] audit: type=1800 audit(1752816295.569:28): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.827" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 207.754122][ T8507] loop3: detected capacity change from 0 to 1764 [ 208.563600][ T8505] loop2: detected capacity change from 0 to 32768 [ 208.677868][ T8505] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.935458][ T8505] XFS (loop2): Ending clean mount [ 209.045250][ T8505] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 209.286712][ T5786] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.541952][ T8568] loop5: detected capacity change from 0 to 2048 [ 209.596957][ T8568] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.680180][ T8571] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.169489][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 210.467987][ T8591] trusted_key: encrypted_key: insufficient parameters specified [ 210.663953][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.864'. [ 210.885571][ T2203] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.076437][ T2203] usb 3-1: Using ep0 maxpacket: 8 [ 211.100617][ T2203] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 211.130505][ T2203] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 211.172272][ T2203] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 211.212303][ T2203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.431200][ T8614] support for cryptoloop has been removed. Use dm-crypt instead. [ 211.467982][ T2203] usb 3-1: string descriptor 0 read error: -71 [ 211.549125][ T2203] usb 3-1: USB disconnect, device number 11 [ 211.772409][ T8593] loop0: detected capacity change from 0 to 32768 [ 211.820326][ T8593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.862 (8593) [ 211.876990][ T8593] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.909628][ T8593] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 211.927020][ T8593] BTRFS info (device loop0): turning on sync discard [ 211.944041][ T8593] BTRFS info (device loop0): use zlib compression, level 3 [ 211.965278][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 211.987843][ T8593] BTRFS info (device loop0): turning off barriers [ 212.021764][ T8593] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.044028][ T8593] BTRFS info (device loop0): trying to use backup root at mount time [ 212.075138][ T8593] BTRFS info (device loop0): enabling auto defrag [ 212.091943][ T8593] BTRFS info (device loop0): max_inline at 0 [ 212.094467][ T8601] loop5: detected capacity change from 0 to 40427 [ 212.111298][ T8593] BTRFS info (device loop0): using free space tree [ 212.154993][ T8601] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 212.181701][ T8601] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 212.233317][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 212.257683][ T8593] BTRFS error (device loop0): failed to load root extent [ 212.265412][ T8593] BTRFS warning (device loop0): try to load backup roots slot 1 [ 212.276135][ T1084] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 212.348489][ T8601] F2FS-fs (loop5): Found nat_bits in checkpoint [ 212.382569][ T8593] BTRFS warning (device loop0): couldn't read tree root [ 212.410193][ T8593] BTRFS warning (device loop0): try to load backup roots slot 2 [ 212.434015][ T1084] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 212.448264][ T8593] BTRFS warning (device loop0): couldn't read tree root [ 212.463866][ T8593] BTRFS warning (device loop0): try to load backup roots slot 3 [ 212.493469][ T8601] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 212.524685][ T8601] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 212.538525][ T8593] BTRFS info (device loop0): enabling ssd optimizations [ 212.583137][ T8593] BTRFS info (device loop0): rebuilding free space tree [ 212.744179][ T8593] BTRFS info (device loop0): checking UUID tree [ 212.880875][ T8601] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 213.090341][ T5788] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.342376][ T8617] loop3: detected capacity change from 0 to 40427 [ 213.432560][ T8617] F2FS-fs (loop3): invalid crc value [ 213.523481][ T8617] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.864114][ T8617] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 213.976539][ T8675] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 213.991923][ T28] audit: type=1800 audit(1752816302.112:29): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.869" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 214.005947][ T8675] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 214.061583][ T8675] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 214.077571][ T8675] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 214.109104][ T8675] comedi comedi3: 8255: I/O port conflict (0x40088d6,4) [ 214.114405][ T5787] syz-executor: attempt to access beyond end of device [ 214.114405][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.124749][ T8675] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 214.154238][ T8675] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 214.154775][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 214.195970][ T8675] comedi comedi3: 8255: I/O port conflict (0x100810,4) [ 214.202950][ T8675] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 214.290802][ T8675] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 214.335288][ T8675] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 214.374620][ T8675] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 214.381179][ T8675] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 214.421715][ T8675] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 214.450837][ T8675] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 214.471695][ T8675] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 214.478513][ T8675] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 214.496132][ T8675] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 214.502827][ T8687] bridge1: entered promiscuous mode [ 214.508629][ T8675] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 214.545351][ T8687] bridge1: entered allmulticast mode [ 214.564845][ T8687] team0: Port device bridge1 added [ 214.852471][ T8698] loop0: detected capacity change from 0 to 512 [ 214.952182][ T8701] loop5: detected capacity change from 0 to 256 [ 215.044985][ T8698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.105564][ T8701] FAT-fs (loop5): Directory bread(block 64) failed [ 215.131183][ T8701] FAT-fs (loop5): Directory bread(block 65) failed [ 215.142645][ T8701] FAT-fs (loop5): Directory bread(block 66) failed [ 215.152957][ T8701] FAT-fs (loop5): Directory bread(block 67) failed [ 215.162425][ T8701] FAT-fs (loop5): Directory bread(block 68) failed [ 215.203477][ T8701] FAT-fs (loop5): Directory bread(block 69) failed [ 215.210210][ T8701] FAT-fs (loop5): Directory bread(block 70) failed [ 215.252456][ T8701] FAT-fs (loop5): Directory bread(block 71) failed [ 215.261133][ T8701] FAT-fs (loop5): Directory bread(block 72) failed [ 215.283499][ T8701] FAT-fs (loop5): Directory bread(block 73) failed [ 215.343527][ T2203] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 215.418396][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.540732][ T2203] usb 3-1: Using ep0 maxpacket: 16 [ 215.556318][ T2203] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.571832][ T2203] usb 3-1: config 0 has no interface number 0 [ 215.588421][ T2203] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.617179][ T2203] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.648088][ T2203] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 215.663394][ T2203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.711655][ T2203] usb 3-1: config 0 descriptor?? [ 216.162741][ T2203] hid (null): invalid report_count 1405183649 [ 216.268644][ T8710] loop3: detected capacity change from 0 to 32768 [ 216.365120][ T2203] uclogic 0003:28BD:0071.0012: failed retrieving string descriptor #100: -71 [ 216.380191][ T2203] uclogic 0003:28BD:0071.0012: failed retrieving pen parameters: -71 [ 216.394859][ T2203] uclogic 0003:28BD:0071.0012: pen probing failed: -71 [ 216.402300][ T2203] uclogic 0003:28BD:0071.0012: failed probing parameters: -71 [ 216.428269][ T2203] uclogic: probe of 0003:28BD:0071.0012 failed with error -71 [ 216.432933][ T8710] syz.3.880: attempt to access beyond end of device [ 216.432933][ T8710] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 216.457809][ T2203] usb 3-1: USB disconnect, device number 12 [ 216.478873][ T8710] lbmIODone: I/O error in JFS log [ 216.501501][ T8710] *** Log Format Error ! *** [ 216.570273][ T8710] lmLogInit: exit(-22) [ 216.583279][ T8710] lmLogOpen: exit(-22) [ 216.626897][ T28] audit: type=1326 audit(1752816304.743:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.5.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd4d8e9a9 code=0x7fc00000 [ 217.244906][ T8746] netlink: 64 bytes leftover after parsing attributes in process `syz.5.894'. [ 217.256278][ T8744] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.895'. [ 217.569670][ T8754] loop5: detected capacity change from 0 to 512 [ 217.603245][ T8754] EXT4-fs: Ignoring removed i_version option [ 217.609314][ T8754] EXT4-fs: Ignoring removed nobh option [ 217.670261][ T8754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.747298][ T8754] EXT4-fs (loop5): 1 truncate cleaned up [ 217.754973][ T8754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.863237][ T8720] loop0: detected capacity change from 0 to 65536 [ 217.937132][ T8720] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 217.975443][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.173329][ T8720] XFS (loop0): Ending clean mount [ 218.205458][ T8720] XFS (loop0): Quotacheck needed: Please wait. [ 218.256475][ T5834] kernel write not supported for file /input/event2 (pid: 5834 comm: kworker/0:3) [ 218.374864][ T8720] XFS (loop0): Quotacheck: Done. [ 218.632623][ T5788] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 218.708268][ T8749] loop3: detected capacity change from 0 to 32768 [ 218.852035][ T8749] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.230401][ T8749] XFS (loop3): Ending clean mount [ 219.456332][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.554065][ T8781] loop2: detected capacity change from 0 to 32768 [ 219.637237][ T8781] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 219.787811][ T8781] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.098507][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 220.154267][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 220.909851][ T8841] netlink: 100 bytes leftover after parsing attributes in process `syz.2.924'. [ 220.961079][ T5841] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 221.143407][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.163039][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 221.174663][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 221.188209][ T5841] usb 4-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 221.198154][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.211469][ T5841] usb 4-1: config 0 descriptor?? [ 221.225633][ T8835] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.310496][ T8839] loop5: detected capacity change from 0 to 40427 [ 221.342536][ T8839] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x7 [ 221.356820][ T8839] F2FS-fs (loop5): invalid crc value [ 221.364896][ T8839] F2FS-fs (loop5): Found nat_bits in checkpoint [ 221.420804][ T5849] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 221.441379][ T8839] F2FS-fs (loop5): Start checkpoint disabled! [ 221.459790][ T8839] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 221.620623][ T11] kworker/u4:0: attempt to access beyond end of device [ 221.620623][ T11] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 221.631715][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 221.635794][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 221.653757][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 221.657684][ T5849] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 221.676981][ T5841] hid-generic 0003:046D:E104.0013: unbalanced collection at end of report description [ 221.688395][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.708456][ T5841] hid-generic: probe of 0003:046D:E104.0013 failed with error -22 [ 221.717150][ T5849] usb 3-1: Product: syz [ 221.725243][ T5849] usb 3-1: Manufacturer: syz [ 221.750230][ T5849] usb 3-1: SerialNumber: syz [ 221.770760][ T5849] usb 3-1: config 0 descriptor?? [ 221.789324][ T5849] usbtouchscreen: probe of 3-1:0.0 failed with error -32 [ 221.901957][ T5849] usb 4-1: USB disconnect, device number 15 [ 222.002874][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.927'. [ 222.026919][ T967] usb 3-1: USB disconnect, device number 13 [ 222.335078][ T8851] loop5: detected capacity change from 0 to 32768 [ 222.379477][ T8851] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 222.511554][ T7679] ocfs2: Unmounting device (7,5) on (node local) [ 223.181416][ T8855] loop3: detected capacity change from 0 to 32768 [ 223.218769][ T8855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.929 (8855) [ 223.256701][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.935'. [ 223.273062][ T8855] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.318145][ T8855] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 223.347482][ T8855] BTRFS info (device loop3): metadata ratio 2 [ 223.365859][ T8855] BTRFS info (device loop3): allowing degraded mounts [ 223.386048][ T8855] BTRFS info (device loop3): force zlib compression, level 3 [ 223.414496][ T8855] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.444900][ T8855] BTRFS info (device loop3): use zstd compression, level 3 [ 223.479419][ T8855] BTRFS info (device loop3): force clearing of disk cache [ 223.486759][ T8855] BTRFS info (device loop3): max_inline at 0 [ 223.522988][ T8855] BTRFS info (device loop3): using free space tree [ 223.541930][ T8875] loop5: detected capacity change from 0 to 1024 [ 223.738864][ T8855] BTRFS info (device loop3): enabling ssd optimizations [ 223.789509][ T8855] BTRFS info (device loop3): rebuilding free space tree [ 223.950873][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.942'. [ 224.263309][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.466722][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop3 scanned by udevd (5790) [ 225.290769][ T8931] loop0: detected capacity change from 0 to 512 [ 225.306015][ T8931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.364404][ T8931] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.958: bg 0: block 5: invalid block bitmap [ 225.445153][ T8931] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 225.454086][ T8933] loop5: detected capacity change from 0 to 1764 [ 225.502941][ T8931] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.958: invalid indirect mapped block 3 (level 2) [ 225.568949][ T8931] EXT4-fs (loop0): 2 truncates cleaned up [ 225.609698][ T8931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.712125][ T8931] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.958: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 225.840517][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.232714][ T8948] loop0: detected capacity change from 0 to 4096 [ 226.520367][ T8946] loop5: detected capacity change from 0 to 32768 [ 226.703347][ T8945] loop3: detected capacity change from 0 to 32768 [ 226.861696][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.970'. [ 227.586019][ T8975] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 227.651608][ T8979] loop2: detected capacity change from 0 to 1024 [ 227.814828][ T1143] hfsplus: b-tree write err: -5, ino 4 [ 227.823312][ T8983] loop3: detected capacity change from 0 to 256 [ 228.054339][ T8989] loop5: detected capacity change from 0 to 128 [ 228.638533][ T8987] loop2: detected capacity change from 0 to 32768 [ 228.668210][ T8987] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.984 (8987) [ 228.735786][ T8987] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.760747][ T8987] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 228.796873][ T8987] BTRFS info (device loop2): using free space tree [ 228.925451][ T8987] BTRFS info (device loop2): enabling ssd optimizations [ 228.954015][ T8987] BTRFS info (device loop2): auto enabling async discard [ 229.152133][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.810268][ T9006] loop5: detected capacity change from 0 to 40427 [ 229.872041][ T9006] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 229.916057][ T9006] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 229.992194][ T9006] F2FS-fs (loop5): Found nat_bits in checkpoint [ 230.031368][ T9041] loop3: detected capacity change from 0 to 1024 [ 230.163853][ T9041] hfsplus: bad catalog entry type [ 230.174672][ T9006] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 230.182706][ T9046] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1004'. [ 230.208726][ T9006] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 230.310929][ T12] hfsplus: b-tree write err: -5, ino 4 [ 230.457798][ T7679] syz-executor: attempt to access beyond end of device [ 230.457798][ T7679] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 230.493743][ T9048] loop2: detected capacity change from 0 to 2048 [ 230.501978][ T7679] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 230.547712][ T9048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.682187][ T9054] loop3: detected capacity change from 0 to 1024 [ 230.851289][ T1143] hfsplus: b-tree write err: -5, ino 4 [ 231.235436][ T5834] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 231.424194][ T9071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1016'. [ 231.454870][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 231.468428][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.480566][ T5834] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 231.500193][ T5834] usb 4-1: config 13 has no interface number 0 [ 231.516484][ T5834] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 231.539354][ T5834] usb 4-1: config 13 interface 50 has no altsetting 0 [ 231.567777][ T5834] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 231.585155][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.593227][ T5834] usb 4-1: Product: syz [ 231.615279][ T5834] usb 4-1: Manufacturer: syz [ 231.622989][ T5834] usb 4-1: SerialNumber: syz [ 231.652619][ T9058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 231.813089][ T9082] loop2: detected capacity change from 0 to 64 [ 231.905316][ T5834] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 231.912375][ T5834] usb 4-1: MIDIStreaming interface descriptor not found [ 231.925706][ T5849] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 231.986466][ T5834] usb 4-1: USB disconnect, device number 16 [ 231.991143][ T9084] loop2: detected capacity change from 0 to 1024 [ 232.050730][ T9084] hfsplus: bad catalog entry type [ 232.103097][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.125669][ T42] hfsplus: b-tree write err: -5, ino 4 [ 232.129945][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 232.154558][ T5849] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 232.176008][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.225745][ T5849] usb 6-1: config 0 descriptor?? [ 232.355669][ T9088] loop2: detected capacity change from 0 to 256 [ 232.385392][ T9088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 232.685528][ T5849] thrustmaster 0003:044F:B65A.0014: hidraw0: USB HID v0.03 Device [HID 044f:b65a] on usb-dummy_hcd.5-1/input0 [ 232.723160][ T5849] thrustmaster 0003:044F:B65A.0014: no inputs found [ 232.897438][ T9] usb 6-1: USB disconnect, device number 3 [ 233.091558][ T9090] loop2: detected capacity change from 0 to 32768 [ 233.109826][ T9090] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.1025 (9090) [ 233.159445][ T9090] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 233.179693][ T9090] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.210961][ T9090] BTRFS info (device loop2): using free space tree [ 233.273077][ T9115] loop3: detected capacity change from 0 to 256 [ 233.309055][ T9090] BTRFS info (device loop2): enabling ssd optimizations [ 233.338042][ T9090] BTRFS info (device loop2): auto enabling async discard [ 233.527552][ T5786] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 234.077586][ T9132] loop3: detected capacity change from 0 to 128 [ 234.125657][ T9132] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 234.176064][ T9132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.019206][ T9123] loop0: detected capacity change from 0 to 40427 [ 235.076925][ T9145] loop5: detected capacity change from 0 to 2048 [ 235.097606][ T9123] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 235.120802][ T9123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 235.172099][ T9123] F2FS-fs (loop0): invalid crc value [ 235.185324][ T9145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.209863][ T9123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.313537][ T967] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.334227][ T9123] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 235.341350][ T9123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.353726][ T5862] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.533496][ T967] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.556034][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 235.563167][ T967] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 235.567239][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.601095][ T967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.603175][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.617104][ T967] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 235.631397][ T967] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 235.653897][ T5862] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 235.670315][ T1084] kworker/u4:7: attempt to access beyond end of device [ 235.670315][ T1084] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 235.680074][ T967] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.685368][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.702049][ T967] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.721153][ T5862] usb 3-1: config 0 descriptor?? [ 235.753219][ T967] usb 4-1: Product: syz [ 235.757470][ T967] usb 4-1: Manufacturer: syz [ 235.800360][ T967] cdc_wdm 4-1:1.0: skipping garbage [ 235.823575][ T967] cdc_wdm 4-1:1.0: skipping garbage [ 235.843909][ T967] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 235.849910][ T967] cdc_wdm 4-1:1.0: Unknown control protocol [ 236.114659][ T2203] usb 4-1: USB disconnect, device number 17 [ 236.164449][ T5862] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 236.272920][ T5862] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf3 found [ 236.296201][ T5862] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf4 found [ 236.455069][ T2203] usb 3-1: USB disconnect, device number 14 [ 236.960865][ T9177] loop5: detected capacity change from 0 to 4096 [ 237.034901][ T9177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.120166][ T9177] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 237.370888][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.418176][ T9232] bridge0: port 3(syz_tun) entered blocking state [ 239.441375][ T9232] bridge0: port 3(syz_tun) entered disabled state [ 239.458485][ T9232] syz_tun: entered allmulticast mode [ 239.501919][ T9232] syz_tun: entered promiscuous mode [ 239.512439][ T9232] bridge0: port 3(syz_tun) entered blocking state [ 239.519917][ T9232] bridge0: port 3(syz_tun) entered forwarding state [ 239.904541][ T9226] loop2: detected capacity change from 0 to 32768 [ 239.971298][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'. [ 240.007056][ T9226] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.021294][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1082'. [ 240.039633][ T9230] loop3: detected capacity change from 0 to 32768 [ 240.088589][ T9238] netlink: 'syz.5.1082': attribute type 6 has an invalid length. [ 240.199518][ T9226] XFS (loop2): Ending clean mount [ 240.254777][ T9226] XFS (loop2): Quotacheck needed: Please wait. [ 240.263445][ T9230] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 240.458484][ T9250] loop5: detected capacity change from 0 to 4096 [ 240.467018][ T9226] XFS (loop2): Quotacheck: Done. [ 240.530096][ T9250] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 240.575127][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 240.694034][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.023516][ T9250] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 241.244700][ T42] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 241.280456][ T7679] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 241.307448][ T9237] loop0: detected capacity change from 0 to 32768 [ 241.320323][ T7679] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 241.330844][ T2203] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 241.356256][ T9237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1081 (9237) [ 241.358103][ T7679] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 241.386049][ T9256] loop2: detected capacity change from 0 to 512 [ 241.415741][ T9256] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1085: bad orphan inode 11 [ 241.429406][ T9237] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.442130][ T1143] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 241.494246][ T9237] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 241.509091][ T9256] ext4_test_bit(bit=10, block=4) = 1 [ 241.550245][ T9256] is_bad_inode(inode)=0 [ 241.554701][ T9237] BTRFS info (device loop0): using free space tree [ 241.572562][ T2203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 241.596466][ T2203] usb 4-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 241.610260][ T9256] NEXT_ORPHAN(inode)=2080374784 [ 241.615178][ T9256] max_ino=32 [ 241.618506][ T9256] i_nlink=0 [ 241.640718][ T2203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.642642][ T9256] EXT4-fs (loop2): 1 truncate cleaned up [ 241.672357][ T2203] usb 4-1: config 0 descriptor?? [ 241.678348][ T9254] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.721893][ T9256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.820240][ T9237] BTRFS info (device loop0): enabling ssd optimizations [ 241.853775][ T9237] BTRFS info (device loop0): auto enabling async discard [ 242.012903][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.119726][ T2203] ntrig 0003:1B96:000E.0016: unbalanced delimiter at end of report description [ 242.164077][ T2203] ntrig 0003:1B96:000E.0016: parse failed [ 242.172701][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.190765][ T2203] ntrig: probe of 0003:1B96:000E.0016 failed with error -22 [ 242.364135][ T9] usb 4-1: USB disconnect, device number 18 [ 242.418674][ T5790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5790) [ 242.578652][ T9283] nbd: must specify a size in bytes for the device [ 243.039572][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 243.199614][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.241933][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.263906][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.294831][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.327023][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 243.356857][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.380307][ T9] usb 3-1: config 0 descriptor?? [ 243.419339][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 243.443736][ T5849] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.459493][ T5849] usb 6-1: config 0 has no interface number 0 [ 243.476668][ T5849] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 243.496175][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.519135][ T5849] usb 6-1: Product: syz [ 243.523476][ T5849] usb 6-1: Manufacturer: syz [ 243.548622][ T5849] usb 6-1: SerialNumber: syz [ 243.556867][ T5849] usb 6-1: config 0 descriptor?? [ 243.573280][ T5849] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 243.589267][ T5849] usb 6-1: selecting invalid altsetting 1 [ 243.599191][ T5849] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 243.628283][ T5849] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.653478][ T5849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 243.673712][ T5849] usb 6-1: media controller created [ 243.725546][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.813373][ T9293] loop3: detected capacity change from 0 to 32768 [ 243.854546][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.876129][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.885969][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.891229][ T9293] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.905183][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.913972][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.934680][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.963936][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 243.985840][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 244.006067][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 244.014740][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 244.024611][ T9293] XFS (loop3): Ending clean mount [ 244.027100][ T9] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 244.059508][ T9] hid-rmi 0003:06CB:81A7.0017: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 244.075821][ T9] usb 3-1: USB disconnect, device number 15 [ 244.076952][ T9293] XFS (loop3): Quotacheck needed: Please wait. [ 244.205300][ T9293] XFS (loop3): Quotacheck: Done. [ 244.362231][ T9303] fido_id[9303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 244.432786][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.445235][ T9288] loop0: detected capacity change from 0 to 65536 [ 244.490181][ T9288] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 244.583451][ T9288] XFS (loop0): Ending clean mount [ 244.848640][ T5849] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 244.864778][ T5788] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 244.884630][ T5849] zl10353_read_register: readreg error (reg=127, ret==-110) [ 244.915218][ T9291] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 245.028649][ T5849] usb 6-1: USB disconnect, device number 4 [ 245.100805][ T9320] sp0: Synchronizing with TNC [ 245.389425][ T9323] loop2: detected capacity change from 0 to 4096 [ 245.586483][ T9326] loop3: detected capacity change from 0 to 512 [ 245.624718][ T9326] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.644827][ T9323] ntfs3: loop2: failed to convert "0080" to cp862 [ 245.656920][ T9326] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1102: bad orphan inode 131083 [ 245.657058][ T9323] ntfs3: loop2: failed to convert name for inode 1e. [ 245.718960][ T9326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.922739][ T9334] loop5: detected capacity change from 0 to 256 [ 245.967676][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.070153][ T9334] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 246.105850][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 246.187270][ T9340] loop0: detected capacity change from 0 to 128 [ 246.365969][ T9343] loop2: detected capacity change from 0 to 512 [ 246.379047][ T9343] EXT4-fs: Ignoring removed i_version option [ 246.427955][ T9343] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1109: corrupted in-inode xattr: overlapping e_value [ 246.510201][ T9343] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1109: couldn't read orphan inode 15 (err -117) [ 246.550455][ T9350] loop5: detected capacity change from 0 to 128 [ 246.566792][ T9343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.604044][ T9350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.669387][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.679300][ T9350] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.910345][ T7679] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.376579][ T9370] loop3: detected capacity change from 0 to 1024 [ 247.555499][ T9372] loop5: detected capacity change from 0 to 512 [ 247.559411][ T9376] loop2: detected capacity change from 0 to 1024 [ 247.643259][ T9376] hfsplus: bad catalog entry type [ 247.679759][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 247.693415][ T9378] loop0: detected capacity change from 0 to 4096 [ 247.714428][ T9372] EXT4-fs (loop5): 1 orphan inode deleted [ 247.746153][ T9372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.747329][ T1120] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 247.762051][ T9372] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.891216][ T1120] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 1 [ 247.894716][ T9382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.089645][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.364156][ T9394] loop5: detected capacity change from 0 to 512 [ 248.444751][ T9394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11d, mo2=0002] [ 248.510515][ T9394] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.1127: corrupted in-inode xattr: e_value size too large [ 248.596307][ T9394] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1127: couldn't read orphan inode 15 (err -117) [ 248.664985][ T9394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.678829][ T9386] loop3: detected capacity change from 0 to 32768 [ 248.721915][ T28] audit: type=1800 audit(1752816336.859:31): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1127" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 248.798996][ T9386] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.872199][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.927946][ T9415] loop2: detected capacity change from 0 to 2048 [ 248.957351][ T9415] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 249.067107][ T9415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.079547][ T9386] XFS (loop3): Ending clean mount [ 249.292057][ T5787] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.965017][ T9437] loop5: detected capacity change from 0 to 64 [ 250.077809][ T9440] loop2: detected capacity change from 0 to 1024 [ 250.129309][ T9440] EXT4-fs: Ignoring removed i_version option [ 250.143584][ T9442] program syz.3.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.187034][ T28] audit: type=1804 audit(1752816338.320:32): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1142" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=21 res=1 errno=0 [ 250.262236][ T9440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.323075][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1147'. [ 250.439328][ T9450] loop5: detected capacity change from 0 to 1024 [ 250.441876][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.720217][ T9458] loop3: detected capacity change from 0 to 1024 [ 250.779406][ T9458] hfsplus: bad catalog entry type [ 250.930025][ T12] hfsplus: b-tree write err: -5, ino 4 [ 251.129555][ T9463] loop0: detected capacity change from 0 to 4096 [ 251.138362][ T9463] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 251.260960][ T9463] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 251.365764][ T967] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 251.413741][ T1084] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 251.478177][ T9477] tipc: Started in network mode [ 251.483424][ T9477] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 251.511720][ T9477] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 251.555788][ T967] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.565024][ T9479] loop0: detected capacity change from 0 to 512 [ 251.571374][ T9477] tipc: Enabled bearer , priority 10 [ 251.583915][ T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.613174][ T967] usb 6-1: config 0 descriptor?? [ 251.643851][ T967] cp210x 6-1:0.0: cp210x converter detected [ 251.651012][ T9479] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1162: corrupted in-inode xattr: invalid ea_ino [ 251.735391][ T9479] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1162: couldn't read orphan inode 15 (err -117) [ 251.793499][ T9479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.016173][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.104690][ T967] usb 6-1: cp210x converter now attached to ttyUSB0 [ 252.336507][ T9] usb 6-1: USB disconnect, device number 5 [ 252.374479][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.401350][ T9] cp210x 6-1:0.0: device disconnected [ 252.421711][ T9501] loop0: detected capacity change from 0 to 1024 [ 252.630152][ T9501] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 252.661515][ T9501] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 252.708233][ T967] tipc: Node number set to 1 [ 252.779371][ T11] hfsplus: b-tree write err: -5, ino 4 [ 253.334303][ T2203] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 253.526861][ T2203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.547371][ T2203] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.574272][ T2203] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 253.605499][ T2203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.646432][ T2203] usb 6-1: config 0 descriptor?? [ 253.726400][ T9515] loop0: detected capacity change from 0 to 32768 [ 253.761717][ T9536] loop3: detected capacity change from 0 to 256 [ 253.772912][ T9536] exfat: Deprecated parameter 'utf8' [ 253.781212][ T9536] exfat: Deprecated parameter 'namecase' [ 253.794645][ T9536] exfat: Deprecated parameter 'utf8' [ 253.843530][ T9536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 253.855982][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.858307][ T9538] loop2: detected capacity change from 0 to 256 [ 253.886145][ T9538] exfat: Deprecated parameter 'namecase' [ 253.973274][ T9538] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 254.116751][ T2203] saitek 0003:06A3:0CCD.0018: unknown main item tag 0x1 [ 254.172708][ T2203] saitek 0003:06A3:0CCD.0018: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.5-1/input0 [ 254.377346][ T2203] usb 6-1: USB disconnect, device number 6 [ 254.438731][ T9541] fido_id[9541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 254.564477][ T9547] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 255.319673][ T9549] loop3: detected capacity change from 0 to 32768 [ 255.419217][ T9549] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 255.633348][ T9576] loop3: detected capacity change from 0 to 64 [ 255.635021][ T9573] loop2: detected capacity change from 0 to 2048 [ 255.691004][ T9573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.961565][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.305013][ T9592] netlink: 'syz.5.1216': attribute type 2 has an invalid length. [ 256.507768][ T9598] loop5: detected capacity change from 0 to 256 [ 256.509401][ T9598] exfat: Deprecated parameter 'utf8' [ 256.509480][ T9598] exfat: Deprecated parameter 'utf8' [ 256.549168][ T9598] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 256.909926][ T9602] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 256.909926][ T9602] program syz.2.1220 not setting count and/or reply_len properly [ 257.432913][ T5834] IPVS: starting estimator thread 0... [ 257.553056][ T9617] IPVS: using max 17 ests per chain, 40800 per kthread [ 257.853529][ T9608] loop2: detected capacity change from 0 to 32768 [ 257.925368][ T5804] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.181872][ T2203] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 258.292708][ T967] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 258.358679][ T9640] loop0: detected capacity change from 0 to 2048 [ 258.372544][ T2203] usb 6-1: Using ep0 maxpacket: 32 [ 258.383435][ T2203] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.391506][ T2203] usb 6-1: config 0 has no interface number 0 [ 258.396835][ T9640] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 258.439766][ T2203] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.451526][ T5790] udevd[5790]: incorrect nilfs2 checksum on /dev/loop0 [ 258.458923][ T2203] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.469531][ T9643] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.489852][ T2203] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 258.520199][ T2203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.543102][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 258.553902][ T2203] usb 6-1: config 0 descriptor?? [ 258.564324][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.604541][ T967] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 258.651935][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.683603][ T967] usb 4-1: config 0 descriptor?? [ 259.119686][ T967] wacom 0003:056A:003F.001A: unknown main item tag 0x0 [ 259.136635][ T967] wacom 0003:056A:003F.001A: unknown main item tag 0x0 [ 259.160883][ T967] wacom 0003:056A:003F.001A: unknown main item tag 0x0 [ 259.181166][ T967] wacom 0003:056A:003F.001A: unknown main item tag 0x0 [ 259.191812][ T967] wacom 0003:056A:003F.001A: unknown main item tag 0x0 [ 259.200577][ T2203] uclogic 0003:28BD:0094.0019: failed retrieving string descriptor #100: -71 [ 259.221080][ T967] wacom 0003:056A:003F.001A: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0 [ 259.232777][ T2203] uclogic 0003:28BD:0094.0019: failed retrieving pen parameters: -71 [ 259.240990][ T2203] uclogic 0003:28BD:0094.0019: pen probing failed: -71 [ 259.258625][ T2203] uclogic 0003:28BD:0094.0019: failed probing parameters: -71 [ 259.289309][ T2203] uclogic: probe of 0003:28BD:0094.0019 failed with error -71 [ 259.333751][ T2203] usb 6-1: USB disconnect, device number 7 [ 259.365352][ T9662] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1248'. [ 259.399922][ T9662] netlink: 'syz.0.1248': attribute type 9 has an invalid length. [ 259.410001][ T5849] usb 4-1: USB disconnect, device number 19 [ 259.411999][ T9662] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1248'. [ 259.425403][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1248'. [ 259.495418][ T9660] fido_id[9660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 259.651217][ T5834] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 259.838509][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 259.849283][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 259.861566][ T5834] usb 3-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 259.870667][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.881901][ T5834] usb 3-1: config 0 descriptor?? [ 260.027163][ T9675] loop5: detected capacity change from 0 to 128 [ 260.046178][ T9675] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.084610][ T9675] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.153273][ T7679] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.352481][ T5834] wacom 0003:056A:0013.001B: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 260.381194][ T5834] wacom 0003:056A:0013.001B: hidraw0: USB HID v20.00 Device [HID 056a:0013] on usb-dummy_hcd.2-1/input0 [ 260.405375][ T5834] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0013.001B/input/input21 [ 260.514411][ T9683] loop3: detected capacity change from 0 to 4096 [ 260.618725][ T9] usb 3-1: USB disconnect, device number 16 [ 260.708846][ T9683] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 260.834246][ T9683] ntfs3: loop3: failed to convert "0000" to maccroatian [ 261.404609][ T9686] loop5: detected capacity change from 0 to 32768 [ 261.416576][ T9686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1258 (9686) [ 261.447744][ T9686] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.492240][ T9686] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 261.506451][ T9686] BTRFS info (device loop5): enabling disk space caching [ 261.523104][ T9686] BTRFS info (device loop5): doing ref verification [ 261.545607][ T9686] BTRFS info (device loop5): use zlib compression, level 3 [ 261.560296][ T9686] BTRFS info (device loop5): force clearing of disk cache [ 261.577337][ T9686] BTRFS info (device loop5): doing ref verification [ 261.592009][ T9686] BTRFS info (device loop5): disk space caching is enabled [ 261.779857][ T9688] loop0: detected capacity change from 0 to 32768 [ 261.835788][ T9686] BTRFS info (device loop5): auto enabling async discard [ 261.883276][ T9686] BTRFS info (device loop5): rebuilding free space tree [ 261.985849][ T9686] BTRFS info (device loop5): disabling free space tree [ 262.003254][ T9686] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.040345][ T9686] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.117954][ T9690] loop3: detected capacity change from 0 to 32768 [ 262.232131][ T9690] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 262.288719][ T7679] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.443658][ T9690] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 262.528868][ T9690] XFS (loop3): Starting recovery (logdev: internal) [ 262.605045][ T9690] XFS (loop3): Ending recovery (logdev: internal) [ 262.640421][ T9690] XFS (loop3): Quotacheck needed: Please wait. [ 262.743652][ T9690] XFS (loop3): Quotacheck: Done. [ 263.134029][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.154373][ T9714] loop2: detected capacity change from 0 to 40427 [ 263.205449][ T9714] F2FS-fs (loop2): Invalid log sectorsize (131081) [ 263.239461][ T9714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 263.293817][ T9714] F2FS-fs (loop2): invalid crc value [ 263.557483][ T9714] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 263.565528][ T9714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 264.531540][ T9749] loop2: detected capacity change from 0 to 512 [ 264.549524][ T9749] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.640989][ T9739] loop0: detected capacity change from 0 to 32768 [ 264.731627][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 264.768907][ T9739] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 265.057095][ T9761] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.093718][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 265.123817][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 265.318311][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.331874][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.376940][ T9768] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 265.571459][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 265.584291][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.592937][ T9] usb 3-1: config 0 has no interface number 0 [ 265.602200][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 265.611671][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.620238][ T9] usb 3-1: Product: syz [ 265.624562][ T9] usb 3-1: Manufacturer: syz [ 265.645953][ T9] usb 3-1: SerialNumber: syz [ 265.653505][ T9] usb 3-1: config 0 descriptor?? [ 265.672696][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 265.687464][ T9] usb 3-1: selecting invalid altsetting 1 [ 265.694103][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 265.719735][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.768508][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 265.776936][ T9] usb 3-1: media controller created [ 265.836078][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.928615][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 265.935698][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 265.966092][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 266.068954][ T9] usb 3-1: USB disconnect, device number 17 [ 266.305385][ T9771] loop5: detected capacity change from 0 to 32768 [ 266.483786][ T9777] loop0: detected capacity change from 0 to 32768 [ 266.604204][ T9775] loop3: detected capacity change from 0 to 32768 [ 266.792740][ T9775] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 267.123093][ T9793] loop2: detected capacity change from 0 to 256 [ 267.154996][ T9793] exfat: Deprecated parameter 'utf8' [ 267.162658][ T9793] exfat: Deprecated parameter 'namecase' [ 267.181609][ T9793] exfat: Deprecated parameter 'namecase' [ 267.200445][ T9793] exfat: Deprecated parameter 'utf8' [ 267.236266][ T9797] loop5: detected capacity change from 0 to 512 [ 267.243147][ T9793] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 267.261062][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 267.344866][ T9797] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.1295: corrupted in-inode xattr: e_value size too large [ 267.362204][ T28] audit: type=1800 audit(1752816355.479:33): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1293" name="file1" dev="loop2" ino=1048691 res=0 errno=0 [ 267.443126][ T9797] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1295: couldn't read orphan inode 15 (err -117) [ 267.564831][ T9797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.692675][ T9804] loop2: detected capacity change from 0 to 1024 [ 267.773253][ T7679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.808679][ T9804] hfsplus: bad catalog entry type [ 267.965195][ T1098] hfsplus: b-tree write err: -5, ino 4 [ 268.037124][ T9813] netlink: 'syz.5.1300': attribute type 1 has an invalid length. [ 268.073975][ T9813] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1300'. [ 268.111240][ T9813] netlink: 'syz.5.1300': attribute type 1 has an invalid length. [ 268.149658][ T9813] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1300'. [ 268.285600][ T9820] loop0: detected capacity change from 0 to 512 [ 268.334523][ T9820] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.361488][ T9820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.422520][ T9820] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1304: bad orphan inode 131083 [ 268.500838][ T9820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.631934][ T5160] udevd[5160]: worker [5790] terminated by signal 33 (Unknown signal 33) [ 268.647357][ T5160] udevd[5160]: worker [5790] failed while handling '/devices/virtual/block/loop0' [ 268.758905][ T9834] loop3: detected capacity change from 0 to 64 [ 268.803159][ T9834] [ 268.805553][ T9834] ====================================================== [ 268.812605][ T9834] WARNING: possible circular locking dependency detected [ 268.819674][ T9834] 6.6.99-syzkaller #0 Not tainted [ 268.824828][ T9834] ------------------------------------------------------ [ 268.831877][ T9834] syz.3.1310/9834 is trying to acquire lock: [ 268.837888][ T9834] ffff88802ea600b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 268.847467][ T9834] [ 268.847467][ T9834] but task is already holding lock: [ 268.854861][ T9834] ffff88802f073b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 268.865710][ T9834] [ 268.865710][ T9834] which lock already depends on the new lock. [ 268.865710][ T9834] [ 268.876148][ T9834] [ 268.876148][ T9834] the existing dependency chain (in reverse order) is: [ 268.885198][ T9834] [ 268.885198][ T9834] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 268.894828][ T9834] __mutex_lock+0x129/0xcc0 [ 268.899907][ T9834] hfs_extend_file+0xdb/0x1220 [ 268.905329][ T9834] hfs_bmap_reserve+0x107/0x430 [ 268.910736][ T9834] __hfs_ext_write_extent+0x1fa/0x470 [ 268.916652][ T9834] __hfs_ext_cache_extent+0x6b/0x9b0 [ 268.922502][ T9834] hfs_extend_file+0x317/0x1220 [ 268.927885][ T9834] hfs_get_block+0x3d8/0xbd0 [ 268.933009][ T9834] __block_write_begin_int+0x566/0x1ad0 [ 268.939100][ T9834] block_write_begin+0x9a/0x1e0 [ 268.944488][ T9834] cont_write_begin+0x5c8/0x7e0 [ 268.949884][ T9834] hfs_write_begin+0x8b/0xd0 [ 268.955007][ T9834] cont_write_begin+0x2ad/0x7e0 [ 268.960399][ T9834] hfs_write_begin+0x8b/0xd0 [ 268.965522][ T9834] hfs_file_truncate+0x191/0x9b0 [ 268.970993][ T9834] hfs_inode_setattr+0x4af/0x6e0 [ 268.976464][ T9834] notify_change+0xb0d/0xe10 [ 268.981596][ T9834] do_truncate+0x19b/0x220 [ 268.986546][ T9834] vfs_truncate+0x266/0x300 [ 268.991580][ T9834] do_sys_truncate+0xe0/0x1a0 [ 268.996790][ T9834] do_syscall_64+0x55/0xb0 [ 269.001738][ T9834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.008172][ T9834] [ 269.008172][ T9834] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 269.016805][ T9834] __lock_acquire+0x2ddb/0x7c80 [ 269.022213][ T9834] lock_acquire+0x197/0x410 [ 269.027248][ T9834] __mutex_lock+0x129/0xcc0 [ 269.032557][ T9834] hfs_find_init+0x15f/0x1d0 [ 269.037690][ T9834] hfs_extend_file+0x2ef/0x1220 [ 269.043088][ T9834] hfs_bmap_reserve+0x107/0x430 [ 269.048487][ T9834] hfs_cat_create+0x1b4/0x620 [ 269.053807][ T9834] hfs_create+0x66/0xd0 [ 269.058604][ T9834] path_openat+0x1277/0x3190 [ 269.063759][ T9834] do_filp_open+0x1c5/0x3d0 [ 269.068818][ T9834] do_sys_openat2+0x12c/0x1c0 [ 269.074038][ T9834] __x64_sys_openat+0x139/0x160 [ 269.079446][ T9834] do_syscall_64+0x55/0xb0 [ 269.084631][ T9834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.091089][ T9834] [ 269.091089][ T9834] other info that might help us debug this: [ 269.091089][ T9834] [ 269.101353][ T9834] Possible unsafe locking scenario: [ 269.101353][ T9834] [ 269.108825][ T9834] CPU0 CPU1 [ 269.114295][ T9834] ---- ---- [ 269.119692][ T9834] lock(&HFS_I(tree->inode)->extents_lock); [ 269.125785][ T9834] lock(&tree->tree_lock#2/1); [ 269.133186][ T9834] lock(&HFS_I(tree->inode)->extents_lock); [ 269.141705][ T9834] lock(&tree->tree_lock#2/1); [ 269.146587][ T9834] [ 269.146587][ T9834] *** DEADLOCK *** [ 269.146587][ T9834] [ 269.154745][ T9834] 4 locks held by syz.3.1310/9834: [ 269.159870][ T9834] #0: ffff88805b3e4418 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 269.169139][ T9834] #1: ffff88802f0743b8 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: path_openat+0x7c6/0x3190 [ 269.179535][ T9834] #2: ffff888021a2e0b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 269.189322][ T9834] #3: ffff88802f073b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 269.200653][ T9834] [ 269.200653][ T9834] stack backtrace: [ 269.206563][ T9834] CPU: 1 PID: 9834 Comm: syz.3.1310 Not tainted 6.6.99-syzkaller #0 [ 269.214576][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.224742][ T9834] Call Trace: [ 269.228037][ T9834] [ 269.230999][ T9834] dump_stack_lvl+0x16c/0x230 [ 269.235700][ T9834] ? load_image+0x3b0/0x3b0 [ 269.240227][ T9834] ? show_regs_print_info+0x20/0x20 [ 269.245467][ T9834] ? print_circular_bug+0x12b/0x1a0 [ 269.250702][ T9834] check_noncircular+0x2bd/0x3c0 [ 269.255668][ T9834] ? look_up_lock_class+0x75/0x140 [ 269.260805][ T9834] ? print_deadlock_bug+0x5d0/0x5d0 [ 269.266037][ T9834] ? lockdep_lock+0xe0/0x220 [ 269.270648][ T9834] ? _find_first_zero_bit+0xd3/0x100 [ 269.275962][ T9834] __lock_acquire+0x2ddb/0x7c80 [ 269.280855][ T9834] ? lock_chain_count+0x20/0x20 [ 269.285751][ T9834] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 269.291670][ T9834] ? verify_lock_unused+0x140/0x140 [ 269.296884][ T9834] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 269.302804][ T9834] ? _raw_spin_unlock+0x40/0x40 [ 269.307790][ T9834] ? stack_trace_save+0x9c/0xe0 [ 269.312781][ T9834] ? stack_trace_snprint+0xf0/0xf0 [ 269.317936][ T9834] lock_acquire+0x197/0x410 [ 269.322480][ T9834] ? hfs_find_init+0x15f/0x1d0 [ 269.327310][ T9834] ? hfs_extend_file+0x2ef/0x1220 [ 269.332450][ T9834] ? hfs_bmap_reserve+0x107/0x430 [ 269.337501][ T9834] ? __x64_sys_openat+0x139/0x160 [ 269.342542][ T9834] ? __might_sleep+0xe0/0xe0 [ 269.347152][ T9834] ? read_lock_is_recursive+0x20/0x20 [ 269.352549][ T9834] __mutex_lock+0x129/0xcc0 [ 269.357076][ T9834] ? hfs_find_init+0x15f/0x1d0 [ 269.361890][ T9834] ? hfs_find_init+0x15f/0x1d0 [ 269.366699][ T9834] ? mutex_lock_nested+0x20/0x20 [ 269.371684][ T9834] ? __kmem_cache_alloc_node+0x13e/0x260 [ 269.377353][ T9834] ? hfs_find_init+0x88/0x1d0 [ 269.382055][ T9834] ? hfs_find_init+0x88/0x1d0 [ 269.386751][ T9834] ? __kmalloc+0xe2/0x240 [ 269.391218][ T9834] hfs_find_init+0x15f/0x1d0 [ 269.395850][ T9834] hfs_extend_file+0x2ef/0x1220 [ 269.400745][ T9834] ? hfs_get_block+0xbd0/0xbd0 [ 269.405545][ T9834] ? rcu_is_watching+0x15/0xb0 [ 269.410345][ T9834] ? trace_contention_end+0x39/0xe0 [ 269.415562][ T9834] ? __mutex_lock+0x304/0xcc0 [ 269.420272][ T9834] ? hfs_find_init+0x15f/0x1d0 [ 269.425075][ T9834] ? mutex_lock_nested+0x20/0x20 [ 269.430059][ T9834] hfs_bmap_reserve+0x107/0x430 [ 269.434981][ T9834] hfs_cat_create+0x1b4/0x620 [ 269.439711][ T9834] ? hfs_cat_build_key+0x170/0x170 [ 269.444856][ T9834] ? _raw_spin_unlock+0x28/0x40 [ 269.449731][ T9834] ? hfs_new_inode+0x92b/0xbf0 [ 269.454516][ T9834] hfs_create+0x66/0xd0 [ 269.458686][ T9834] ? hfs_lookup+0x2a0/0x2a0 [ 269.463197][ T9834] path_openat+0x1277/0x3190 [ 269.467828][ T9834] ? do_filp_open+0x3d0/0x3d0 [ 269.472535][ T9834] do_filp_open+0x1c5/0x3d0 [ 269.477237][ T9834] ? vfs_tmpfile+0x490/0x490 [ 269.481859][ T9834] ? _raw_spin_unlock+0x28/0x40 [ 269.486731][ T9834] ? alloc_fd+0x58f/0x630 [ 269.491080][ T9834] do_sys_openat2+0x12c/0x1c0 [ 269.495778][ T9834] ? do_sys_open+0xe0/0xe0 [ 269.500226][ T9834] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 269.506568][ T9834] ? lock_chain_count+0x20/0x20 [ 269.511431][ T9834] __x64_sys_openat+0x139/0x160 [ 269.516300][ T9834] do_syscall_64+0x55/0xb0 [ 269.520751][ T9834] ? clear_bhb_loop+0x40/0x90 [ 269.525581][ T9834] ? clear_bhb_loop+0x40/0x90 [ 269.530295][ T9834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.536228][ T9834] RIP: 0033:0x7fa81ef8e9a9 [ 269.540670][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.560384][ T9834] RSP: 002b:00007fa81fe66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.568821][ T9834] RAX: ffffffffffffffda RBX: 00007fa81f1b5fa0 RCX: 00007fa81ef8e9a9 [ 269.576809][ T9834] RDX: 0000000000105042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 269.584792][ T9834] RBP: 00007fa81f010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 269.592794][ T9834] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000 [ 269.600799][ T9834] R13: 0000000000000000 R14: 00007fa81f1b5fa0 R15: 00007ffd1f331fc8 [ 269.608795][ T9834] [ 269.655344][ T9820] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 269.708110][ T9820] overlayfs: upper fs needs to support d_type. [ 269.712369][ T9824] loop5: detected capacity change from 0 to 32768 [ 269.754904][ T9824] XFS: attr2 mount option is deprecated. [ 269.809108][ T9820] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 269.813348][ T9824] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 269.827136][ T9824] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.850394][ T5788] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /275/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 269.863651][ T9824] XFS (loop5): Ending clean mount [ 269.878223][ T9824] XFS (loop5): Quotacheck needed: Please wait. [ 269.895219][ T9824] XFS (loop5): Quotacheck: Done. [ 270.028906][ T7679] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.211294][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.222915][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.277313][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.350475][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.449612][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.307729][ T1143] hsr_slave_0: left promiscuous mode [ 271.329661][ T1143] hsr_slave_1: left promiscuous mode [ 271.366910][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.375107][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.396805][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.404249][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.435926][ T1143] bridge_slave_1: left allmulticast mode [ 271.441634][ T1143] bridge_slave_1: left promiscuous mode [ 271.465382][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.496184][ T1143] bridge_slave_0: left allmulticast mode [ 271.501878][ T1143] bridge_slave_0: left promiscuous mode [ 271.511826][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.541566][ T1143] veth1_macvtap: left promiscuous mode [ 271.555269][ T1143] veth0_macvtap: left promiscuous mode [ 271.560944][ T1143] veth1_vlan: left promiscuous mode [ 271.585286][ T1143] veth0_vlan: left promiscuous mode [ 271.806413][ T1143] team0 (unregistering): Port device bridge1 removed [ 272.101524][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 272.156051][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 272.210195][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.259796][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.442929][ T1143] bond0 (unregistering): Released all slaves [ 272.809053][ T1143] IPVS: stop unused estimator thread 0...