last executing test programs: 3m51.764935417s ago: executing program 3 (id=988): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0xee00) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 3m51.63578197s ago: executing program 3 (id=989): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001"], 0x54}}, 0x20000080) 3m51.594657262s ago: executing program 3 (id=990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m51.431753435s ago: executing program 3 (id=993): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 3m51.307209309s ago: executing program 3 (id=996): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) 3m50.50184843s ago: executing program 3 (id=1007): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x10001, 0x88, 0x400}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x48adf72ba08e3e76}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 3m50.305774504s ago: executing program 32 (id=1007): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x10001, 0x88, 0x400}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x48adf72ba08e3e76}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 3m25.799717518s ago: executing program 0 (id=1289): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 3m25.651730081s ago: executing program 0 (id=1292): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000009200)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000000)=""/168, 0xa8, 0x98) 3m25.427755575s ago: executing program 0 (id=1295): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x4000) 3m25.301929606s ago: executing program 0 (id=1297): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m24.463777561s ago: executing program 0 (id=1302): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000300)=0xff) 3m23.8906689s ago: executing program 0 (id=1308): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xe46000, @local}}, 0x24) 3m23.664033564s ago: executing program 33 (id=1308): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xe46000, @local}}, 0x24) 6.510161102s ago: executing program 5 (id=3691): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.272146216s ago: executing program 5 (id=3696): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x0, 0x0, 0x0, 0x1005}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x8, '\x00', @d}) 6.02011936s ago: executing program 5 (id=3700): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) 5.675387016s ago: executing program 5 (id=3709): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x30000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.305561669s ago: executing program 4 (id=3718): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 3.948816685s ago: executing program 4 (id=3722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08002b000800000005002f004000000005003000"], 0x34}}, 0x18) 3.895082095s ago: executing program 5 (id=3723): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x5, 0x950, 0x6, 0x5}) 3.716140358s ago: executing program 4 (id=3726): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 3.591626571s ago: executing program 4 (id=3737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x17, 0x1}) 3.370058084s ago: executing program 4 (id=3729): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x8002, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 3.275503426s ago: executing program 1 (id=3730): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB="ce7974ac4a6129284e2d3b8cfde78454b9dd88b8ed62bac44e87c2735df01eba3db84bc1ddbe69ff47b9ad791bcf06d3c3bd68473e6808df8c", @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRES32=0x0, @ANYBLOB="244429c78d4c7fbf49cd097e5022f1ae39f9db8339d3a6220188fa3516964b0fba8fa9e3451db52ce83e8e1e6f01107b778dbabc4ce54357ddcf1caa911b9f15153097456c221a20f6d322f59731e3362ef30cbeb63e1b78d1da50b6da22ea1c48b06ab73e772fd4d66f8d456d645ccac92786f37d589f10c34d3ef442d25b4a", @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES32], 0xfa, 0x1508, &(0x7f0000002b00)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x8018, &(0x7f0000000080)=ANY=[], 0x1, 0x1529, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x143041, 0x0) 2.656214176s ago: executing program 1 (id=3736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08002b000800000005002f004000000005003000"], 0x34}}, 0x18) 2.380420061s ago: executing program 1 (id=3741): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x0, 0x6e7, &(0x7f0000000100)="$eJzs3UtoHOcdAPD/rFarXZU4cuJHWgIRMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsim10se9h5x6Sg+6hR5Keje054ZA8VXHQCGXnHRTmdmZ1Ui72l1Zz7i/n5iZb+Z7zn92ZvaBmAD+by1MRfVpJLEw9c56ur61Odsa2Zwdy7NbEVGLiEpEtb2IZDmy3Fv5FN9ON+blkxjt3c/HS/PvPft668v2WjWfsnqVUv1h1Lo3beRTTEbESL7sdsDY4rP93e9p7/aB7Q0r6exhGrBrReDiL0dqFY5sp8tGJ+/T/2TzftUPc94C51TSvm92mYgYj4h6RPuun18dKqc7uuO3cdYDAAAAgMNqHL7Ky9uxHetx4SSGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+q/Pn/ST5VivRkJMXz/2v5tsjT59DgByF+MdZePj35wQAAAAAAAADAiXtjO7ZjPS4U6ztJ9pv/m6Xf+L8VH8ZqLMZKXI/1aMZarMVKzETERKmh2npzbW1lJqsZjUt9at6Mz3vUvHnwGG8d904DAAAAAAAAwPlWH5B/f7R72+9jYff3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+SiJH2IpsuFemJqFQjoh4RtbTcRsTnRfobIum18enpjwMAAACOpL53NakPUeflJ7Ed63GhWN9Jss/8V7LPy/X4MJZjLZZiLVqxGHfyz9Dpp/7K1uZsa2tz9kE6dbf7068ONfSsxWh/99C759eyEo24G0vZlutxO5LYyVTyVl7b2pxNlw96j+ujdEzJT3J9RjNSSt9JZ1c/y9J/3vstQvVQu/icKgfmTGS5o52ITOdjS2tcLCLQOxIDj061b08zUel883Opf0+9Y/5R/97H95Xq+c3NmdgfiZtR6RyhK/0jEfHdf3z663ut5fv37q5OnZ9d6unJwBL7IzHbjsRLad7VFygSg01nkbjcWV+IX8SvYiq+Gns3VmIpfhPNWIvFySK/mb+e0/lE/0h9MV5ee3fQSNJzcrJz/do/pkJpTDEZP89SzXgzO6YXYimSeBgRi/F29nczZjpXg93X+uUhzvrKEFfakmvfyxadMEXj4LJ/G67J45LG9WIpruVr7kSWV96yG6VXekapuNcNfz8qqX4nT6Qt/KHv/eG07Y/ETCkSrx70emmH9K876Xy1tXx/5V7zgyH7eytfpufRn87VXSI9wq9EPd+5i9k8yc6p6Szv1c4ddm+8avkvLm2VrrzLnXrtM/WX8TDu7DlTfxhzMRfzWekrWenRrjtWmne109Lea3ial77TqnZ+2Cm/33oYrfb7IQDOt/Hvj9ca/238u/FJ44+Ne4136j8b+9HY67UY/dfoj6vTI29VXk/+Hp/E73Y//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9v9dHj+81Wa3Gld6LSOyvpX6vZ2ikeJNanzJ5Ekj8qZ4jCyeqjxzsDG+yfGMuH95zVjzNRPK1xcOHJExxGsrH/eNUHH4viKU9DdJF0BTyt/NxjLnre3TJ6Dg7l/sTkgDJJDN1g8YItZR3+1dvodbxGInoOY8CFY+Q4rj7AWbqx9uCDG6uPHv9g6UHz/cX3F5dH5+bmp+fn3p69cXeptTjdnpcqnMrDb4HTUH470VGLiDcG1+3zoFYAAAAAAAAAAADgBJ3G/0Kc9T4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA32wLU1F9GknMTF+fTte3Nmdb6VSkd0tWI6ISEclvI5J/RtyKJ89upRkTpeaSg/r5eGn+vWdfb32521a1KF+J2EgiXjrCXmzkU0xGxEi+PK72bg9ur7abHOuRnXQikwbsWr6EM/e/AAAA//9SHOxA") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.', @ANYBLOB="22a2"], 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) 2.061899396s ago: executing program 1 (id=3744): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x408, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.961957867s ago: executing program 6 (id=3745): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 1.81433739s ago: executing program 1 (id=3746): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010046, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x1, 0x61b6, &(0x7f00000075c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.79445873s ago: executing program 6 (id=3748): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2}, 0xfd}, 0x18) 1.580563184s ago: executing program 6 (id=3749): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="49a7694cfd8c685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 1.395325227s ago: executing program 6 (id=3751): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x9}) 1.21789177s ago: executing program 6 (id=3754): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00), 0x1, 0x4c4, &(0x7f0000000540)="$eJzs3c9vHFcdAPDvjO3Ydd3ahUr8ENBQCgFF3bU3rVX1VC4gVFVCVJw4pMbeWJZ3vZZ3HWKTg/M/IBGJE/wJHJA4IOXEnRvcEFI4IAWIQDESh0UzO3YcZ9exiL2Tej8faTTz5u3u9721573x1/a+AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vOvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs0/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8c72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMG/onQ3YFPMbTAC+7KF+T/YVTJ/8Pokv+H0SX/D6Or202s+Q8AI0aOHziH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhTeTb0laKdYCn4k0rVQiXomIuZhIbqw16vMR8WpE/HFyYjIrL5TdaADgOaV/S4r1v67MvjVzvPZS8p/JfB8RP/nFxz+/tdTpbC1k5/95eL5ztzhfOzGQpQYBoCQH8/TBPH7g0cPbywfbMNvz4Nu9xUWzuPvF1qsZj/F8P5XfOEz/KynKPdn9ytgZxN+7ExGf79f/JM+NzBUrnx6Pn8V+Zajx0yfip3ldb5+9F589g7bAqLmXjT8f9Lv+0ric7/tf/1P5CPX8Dsa//afGv/Rw/BsbMP5dPm2Md37/vYF1dyK+ON4vfnIYPxkQ/61Txv/zl77y5qC67i8jrkT/+EdjVTvNzWp7Z/fttebSan21vlGrLS4szr937d1aNc9RVw8y1U/7+/tXXz2p/9MD4k89o/9fP2X/f/XfT3701RPif/Nr/b/+r58QP5sTv3HK+EvTvxm4fHcWf6V//4vnDO7/1VPGv//X3ZVTPhQAGIL2zu76UqNR33IwtIPs3u0FaMaFO7jzqXlXs++As3idz51jU8semYDz9viiL7slAAAAAAAAAAAAAADAIMP4h6ey+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9b8AAAD//3Sb1xQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r0, &(0x7f00000000c0)="9f", 0x1, 0x10000) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 919.593015ms ago: executing program 5 (id=3755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x17, 0x1}) 919.443745ms ago: executing program 4 (id=3756): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 918.635165ms ago: executing program 2 (id=3765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x2, 0x4, 0x1, 0x11, r0}, 0x50) unshare(0x6040600) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) 739.232228ms ago: executing program 2 (id=3757): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@private0, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}, 0x48814) 633.3839ms ago: executing program 6 (id=3758): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f0000000280)=ANY=[], 0x21, 0x151e, &(0x7f0000002580)="$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") syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 601.06657ms ago: executing program 2 (id=3759): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x3000cc0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/54, 0x36) close(0x4) 278.493886ms ago: executing program 2 (id=3760): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x0, 0x6e7, &(0x7f0000000100)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.', @ANYBLOB="22a2"], 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) 173.710718ms ago: executing program 1 (id=3761): unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x810556, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0x1, 0x120d, &(0x7f0000001280)="$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") r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x7, "818cdb265bd579"}, &(0x7f0000000140)=0x2f) 139.470629ms ago: executing program 2 (id=3762): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", &(0x7f0000001200)=""/4115, 0x0, 0x10, 0x1, 0x0}) 0s ago: executing program 2 (id=3763): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000240)="e300c0678bb63701fd85b69fb68a0000ec67838717bd86ddece156d0f9421c617dd2206d3e037652465d82a75b8a4e359485bd744edf53e823bd97b020c801a21fb202f0781aee480c8dab2a6b4d6c5d2ea5fcaf3bebdbf55e91", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) kernel console output (not intermixed with test programs): ion log (loop1) [ 281.875781][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 281.914690][T10926] ntfs: volume version 3.1. [ 282.037207][T10926] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 282.097071][T10917] REISERFS (device loop1): Using tea hash to sort names [ 282.110135][T10926] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 282.110728][T10935] loop5: detected capacity change from 0 to 256 [ 282.136810][T10917] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 282.250715][T10935] exfat: Deprecated parameter 'utf8' [ 282.304935][T10935] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 282.576749][T10943] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2603'. [ 282.647378][T10945] program syz.5.2602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.793931][T10939] loop4: detected capacity change from 0 to 8192 [ 282.918207][T10939] FAT-fs (loop4): Unrecognized mount option "dts" or missing value [ 284.037482][T11001] loop4: detected capacity change from 0 to 1024 [ 284.101487][T11001] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 284.101487][T11001] [ 284.171261][T11001] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 284.215476][T10998] loop5: detected capacity change from 0 to 4096 [ 284.236172][T11001] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2627'. [ 284.352036][T10998] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 284.406367][T11016] loop1: detected capacity change from 0 to 128 [ 284.463350][T11016] FAT-fs (loop1): bogus number of reserved sectors [ 284.473448][T11016] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 284.484030][T10998] ntfs3: loop5: failed to convert "c46c" to macgreek [ 284.517328][T11016] FAT-fs (loop1): Can't find a valid FAT filesystem [ 284.602207][T11021] loop5: detected capacity change from 0 to 512 [ 284.646814][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'. [ 284.732765][T11031] loop4: detected capacity change from 0 to 8 [ 284.743808][T11021] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2638: inode has both inline data and extents flags [ 284.749964][T11029] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2639'. [ 284.766872][T11021] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2638: couldn't read orphan inode 15 (err -117) [ 284.799699][T11021] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.800804][T11031] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 284.879086][T11034] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 284.919787][T11034] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 284.942142][T11034] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.2642: unexpected bad inode w/o EXT4_IGET_BAD [ 284.985220][T11034] EXT4-fs (loop1): no journal found [ 284.994824][T11034] EXT4-fs (loop1): can't get journal size [ 285.021059][T11034] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 285.223909][T11046] hfsplus: xattr searching failed [ 285.285030][ T4230] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 285.299349][T11050] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.304647][ T4252] hfsplus: bad catalog file entry [ 285.357122][ T4252] hfsplus: b-tree write err: -5, ino 3 [ 285.399352][T11044] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 285.425430][T11044] REISERFS (device loop4): using ordered data mode [ 285.449688][T11044] reiserfs: using flush barriers [ 285.467432][T11044] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.492608][T11044] REISERFS (device loop4): checking transaction log (loop4) [ 285.578090][T11044] REISERFS (device loop4): Using r5 hash to sort names [ 285.630216][T11044] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 285.690026][ T4230] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.729449][ T4230] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 285.794827][ T4230] usb 6-1: config 1 has no interface number 0 [ 285.815095][ T4230] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.882101][ T4230] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 285.928262][ T4230] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 285.971590][ T4230] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.015568][ T4230] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.237450][T11072] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 286.280772][ T4230] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.299664][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.307941][ T4230] usb 6-1: Product: syz [ 286.329870][ T4230] usb 6-1: Manufacturer: syz [ 286.339892][ T4230] usb 6-1: SerialNumber: syz [ 286.349458][T11074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 286.378809][T11041] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 286.553187][ T5824] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 286.810499][T11041] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 286.908342][T11077] set_capacity_and_notify: 3 callbacks suppressed [ 286.908359][T11077] loop1: detected capacity change from 0 to 32768 [ 286.932391][ T5824] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 286.972569][ T5824] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 287.014442][T11077] XFS (loop1): Mounting V5 Filesystem [ 287.114010][T11077] XFS (loop1): Ending clean mount [ 287.155996][T11077] XFS (loop1): Quotacheck needed: Please wait. [ 287.159877][ T5824] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 287.179735][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.198147][ T5824] usb 5-1: Product: syz [ 287.202768][ T5824] usb 5-1: Manufacturer: syz [ 287.207408][ T5824] usb 5-1: SerialNumber: syz [ 287.266329][ T5824] usb 5-1: config 0 descriptor?? [ 287.269813][ T4230] cdc_ncm 6-1:1.1: bind() failure [ 287.302438][ T4230] usb 6-1: USB disconnect, device number 9 [ 287.341390][T11077] XFS (loop1): Quotacheck: Done. [ 287.479832][ T4190] XFS (loop1): Unmounting Filesystem [ 287.516121][T11084] loop6: detected capacity change from 0 to 32768 [ 287.531364][ T5824] mos7840 5-1:0.0: required endpoints missing [ 287.712976][T11084] XFS (loop6): Mounting V5 Filesystem [ 287.813912][ T5824] usb 5-1: USB disconnect, device number 20 [ 287.850662][T11084] XFS (loop6): Ending clean mount [ 287.882045][T11084] XFS (loop6): Quotacheck needed: Please wait. [ 288.002792][T11084] XFS (loop6): Quotacheck: Done. [ 288.085741][ T7560] XFS (loop6): Unmounting Filesystem [ 288.100430][ T6342] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 288.480236][ T6342] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.489072][ T6342] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 288.529704][ T6342] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.560346][ T6342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 288.599755][ T6342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 288.612202][T11123] loop4: detected capacity change from 0 to 512 [ 288.722931][T11123] EXT4-fs (loop4): Test dummy encryption mode enabled [ 288.726664][T11127] loop6: detected capacity change from 0 to 128 [ 288.760270][T11123] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 288.760270][T11123] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 288.760270][T11123] [ 288.769857][ T6342] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.780679][T11123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.818996][T11127] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 288.855066][T11127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.874707][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.886287][T11123] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.2674: bad orphan inode 131083 [ 288.900378][T11123] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,nouser_xattr,,errors=continue. Quota mode: none. [ 288.939629][ T6342] usb 3-1: Product: syz [ 288.943883][ T6342] usb 3-1: Manufacturer: syz [ 289.094462][ T6342] cdc_wdm 3-1:1.0: skipping garbage [ 289.110210][ T6342] cdc_wdm 3-1:1.0: skipping garbage [ 289.128418][ T6342] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 289.153114][ T6342] cdc_wdm 3-1:1.0: Unknown control protocol [ 289.723814][T11150] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2686'. [ 289.759781][ T6339] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 289.949638][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 289.975584][ T4264] usb 3-1: USB disconnect, device number 18 [ 289.982068][T11135] loop6: detected capacity change from 0 to 32768 [ 290.039650][ T6339] usb 6-1: Using ep0 maxpacket: 16 [ 290.064211][T11135] XFS (loop6): Mounting V5 Filesystem [ 290.093491][T11135] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 290.136433][T11135] XFS (loop6): Ending clean mount [ 290.173482][ T6339] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.192040][ T6339] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 290.201818][ T7560] XFS (loop6): Unmounting Filesystem [ 290.210253][ T6339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.226913][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2691'. [ 290.231084][T11170] netlink: 'syz.4.2692': attribute type 4 has an invalid length. [ 290.238516][ T6339] usb 6-1: config 0 descriptor?? [ 290.257955][T11170] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2692'. [ 290.393250][T11176] loop1: detected capacity change from 0 to 512 [ 290.553631][T11176] EXT4-fs (loop1): 1 truncate cleaned up [ 290.560432][T11176] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 290.741859][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.748905][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.807969][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.838811][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.868374][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.919744][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.926743][ T6339] kone 0003:1E7D:2CED.0017: unknown main item tag 0x0 [ 290.958209][ T6339] kone 0003:1E7D:2CED.0017: item fetching failed at offset 15/44 [ 290.983403][ T6339] kone 0003:1E7D:2CED.0017: parse failed [ 290.999677][ T6339] kone: probe of 0003:1E7D:2CED.0017 failed with error -22 [ 291.051070][ T6339] usb 6-1: USB disconnect, device number 10 [ 291.819974][ T4264] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 291.876737][T11215] loop1: detected capacity change from 0 to 32768 [ 291.944609][T11215] XFS (loop1): Mounting V5 Filesystem [ 291.982716][T11215] XFS (loop1): Ending clean mount [ 292.041294][ T4190] XFS (loop1): Unmounting Filesystem [ 292.230030][ T4264] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 292.239784][ T4264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.350004][ T4264] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 292.368232][ T4264] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 292.384133][ T4264] usb 3-1: Manufacturer: syz [ 292.418530][ T4264] usb 3-1: config 0 descriptor?? [ 292.649946][ T4264] rc_core: IR keymap rc-hauppauge not found [ 292.656344][ T4264] Registered IR keymap rc-empty [ 292.681158][ T4264] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 292.730762][ T4264] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 292.804678][ T4264] usb 3-1: USB disconnect, device number 19 [ 293.166078][T11278] loop4: detected capacity change from 0 to 128 [ 293.204953][T11278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 293.261958][T11279] loop5: detected capacity change from 0 to 2048 [ 293.276505][T11278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.377143][T11279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.589722][ T5827] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 293.600491][ T6342] Bluetooth: hci0: command 0x0405 tx timeout [ 293.632166][T11290] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2736'. [ 293.733107][T11296] loop5: detected capacity change from 0 to 8 [ 293.805997][T11296] SQUASHFS error: zlib decompression failed, data probably corrupt [ 293.835492][T11296] SQUASHFS error: Failed to read block 0x9b: -5 [ 293.847204][T11296] SQUASHFS error: Unable to read metadata cache entry [99] [ 293.858952][T11296] SQUASHFS error: Unable to read inode 0x104 [ 293.954120][T11305] loop4: detected capacity change from 0 to 256 [ 293.971658][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.973092][T11305] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 294.179937][ T5827] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 294.199302][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.207901][ T5827] usb 3-1: Product: syz [ 294.212961][ T5827] usb 3-1: Manufacturer: syz [ 294.218029][ T5827] usb 3-1: SerialNumber: syz [ 294.253853][ T5827] usb 3-1: config 0 descriptor?? [ 294.291929][ T5827] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 294.638052][T11330] program syz.4.2757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.791768][T11334] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2759'. [ 294.815629][T11316] loop5: detected capacity change from 0 to 32768 [ 294.906943][T11316] XFS (loop5): Mounting V5 Filesystem [ 295.010932][T11316] XFS (loop5): Ending clean mount [ 295.032159][T11316] XFS (loop5): Quotacheck needed: Please wait. [ 295.150532][T11316] XFS (loop5): Quotacheck: Done. [ 295.169772][ T5827] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 295.176406][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 295.176642][ T5827] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 295.239128][ T5827] usb 3-1: USB disconnect, device number 20 [ 295.301448][ T6682] XFS (loop5): Unmounting Filesystem [ 295.399434][T11364] netlink: 149 bytes leftover after parsing attributes in process `syz.1.2767'. [ 295.563204][T11370] loop1: detected capacity change from 0 to 1024 [ 295.607549][T11372] loop4: detected capacity change from 0 to 4096 [ 295.617062][T11370] EXT4-fs (loop1): Ignoring removed orlov option [ 295.683779][T11370] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 295.713855][T11376] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.017938][T11384] serio: Serial port pty22 [ 296.049385][T11382] sp0: Synchronizing with TNC [ 296.054445][ T6342] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 296.144245][T11388] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.327460][T11398] loop1: detected capacity change from 0 to 128 [ 296.353561][T11400] loop4: detected capacity change from 0 to 512 [ 296.447313][T11398] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 296.454579][T11400] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 296.487179][T11400] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.520715][T11400] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2782: corrupted xattr block 33 [ 296.529856][T11398] hpfs: filesystem error: improperly stopped [ 296.538458][ T6342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.557553][T11398] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 296.579796][T11398] hpfs: You really don't want any checks? You are crazy... [ 296.603440][T11398] hpfs: hpfs_map_sector(): read error [ 296.624015][T11398] hpfs: code page support is disabled [ 296.629526][T11398] hpfs: hpfs_map_4sectors(): unaligned read [ 296.635969][ T6342] usb 3-1: not running at top speed; connect to a high speed hub [ 296.640027][T11400] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2782: corrupted xattr block 33 [ 296.662971][T11400] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 296.690143][T11398] hpfs: hpfs_map_4sectors(): unaligned read [ 296.696098][T11398] hpfs: filesystem error: unable to find root dir [ 296.911341][ T6342] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 296.936963][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.959315][ T6342] usb 3-1: Product: syz [ 296.963657][ T6342] usb 3-1: Manufacturer: syz [ 296.968367][ T6342] usb 3-1: SerialNumber: syz [ 297.053354][T11421] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2790'. [ 297.231564][ T6342] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 297.283935][T11426] loop1: detected capacity change from 0 to 4096 [ 297.309738][ T5827] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 297.330531][T11429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.360133][ T26] audit: type=1800 audit(1777606158.987:28): pid=11426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2793" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 297.669818][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.689744][ T5827] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.782813][T11437] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 297.795530][T11437] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table [ 297.860175][ T5827] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 297.869423][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 297.877653][ T4264] hid-generic 0004:0004:FFFF0001.0018: unknown main item tag 0x0 [ 297.892317][ T4264] hid-generic 0004:0004:FFFF0001.0018: unknown main item tag 0x0 [ 297.898270][ T5827] usb 5-1: Product: syz [ 297.900614][ T6342] gp8psk: usb out operation failed. [ 297.910042][ T5827] usb 5-1: Manufacturer: syz [ 297.918531][ T5827] usb 5-1: SerialNumber: syz [ 297.919672][ T6342] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 297.935408][ T4264] hid-generic 0004:0004:FFFF0001.0018: unknown main item tag 0x0 [ 297.945384][ T5827] usb 5-1: config 0 descriptor?? [ 297.951910][ T4264] hid-generic 0004:0004:FFFF0001.0018: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 297.962985][ T6342] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 298.005834][ T6342] usb 3-1: USB disconnect, device number 21 [ 298.179680][T11462] fido_id[11462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 298.206385][ T5827] usb 5-1: USB disconnect, device number 21 [ 298.645465][T11468] loop5: detected capacity change from 0 to 40427 [ 298.705474][T11468] F2FS-fs (loop5): invalid crc value [ 298.706158][T11466] loop1: detected capacity change from 0 to 32768 [ 298.746155][T11468] F2FS-fs (loop5): Found nat_bits in checkpoint [ 298.778900][T11474] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 298.922207][T11466] XFS (loop1): Mounting V5 Filesystem [ 298.978311][T11468] F2FS-fs (loop5): Start checkpoint disabled! [ 299.063709][T11468] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 299.069618][ T6342] Bluetooth: hci4: command 0x0406 tx timeout [ 299.151783][T11466] XFS (loop1): Ending clean mount [ 299.307701][ T4190] XFS (loop1): Unmounting Filesystem [ 299.376931][T11494] tap0: tun_chr_ioctl cmd 1074025677 [ 299.405469][T11494] tap0: linktype set to 804 [ 299.988219][T11508] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2819'. [ 300.121084][T11489] loop4: detected capacity change from 0 to 40427 [ 300.123051][T11518] loop1: detected capacity change from 0 to 256 [ 300.215684][T11489] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 300.232562][T11489] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 300.263107][T11489] F2FS-fs (loop4): invalid crc value [ 300.285782][T11489] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.374341][T11526] netlink: 'syz.2.2827': attribute type 21 has an invalid length. [ 300.379495][T11489] F2FS-fs (loop4): Start checkpoint disabled! [ 300.433729][T11489] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 300.459866][T11526] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2827'. [ 300.508124][T11489] attempt to access beyond end of device [ 300.508124][T11489] loop4: rw=2049, want=45104, limit=40427 [ 300.582949][T11531] bridge0: port 3(syz_tun) entered blocking state [ 300.611760][T11531] bridge0: port 3(syz_tun) entered disabled state [ 300.625906][T11531] device syz_tun entered promiscuous mode [ 300.633108][T11531] bridge0: port 3(syz_tun) entered blocking state [ 300.640360][T11531] bridge0: port 3(syz_tun) entered forwarding state [ 300.662234][ T4252] attempt to access beyond end of device [ 300.662234][ T4252] loop4: rw=2049, want=40976, limit=40427 [ 300.772503][T11538] loop1: detected capacity change from 0 to 128 [ 300.813639][T11538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.829262][T11538] ext4 filesystem being mounted at /566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.223349][T11558] loop1: detected capacity change from 0 to 256 [ 301.256665][T11558] exfat: Deprecated parameter 'utf8' [ 301.267259][T11558] exfat: Deprecated parameter 'namecase' [ 301.315755][T11558] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 301.423254][T11564] loop4: detected capacity change from 0 to 64 [ 301.577787][T11571] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2846'. [ 301.767975][T11567] loop5: detected capacity change from 0 to 8192 [ 301.833537][T11573] loop1: detected capacity change from 0 to 4096 [ 301.915440][T11573] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.139970][ T5827] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 302.320985][T11600] loop1: detected capacity change from 0 to 2048 [ 302.375404][T11600] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 302.423590][ T4797] udevd[4797]: incorrect nilfs2 checksum on /dev/loop1 [ 302.465584][T11606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.559960][ T5827] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 302.580349][ T5827] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 1281, setting to 1024 [ 302.609134][ T5827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 302.696833][T11615] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.2864: inode has both inline data and extents flags [ 302.712269][T11615] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2864: couldn't read orphan inode 15 (err -117) [ 302.726057][T11615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.789888][ T5827] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 302.799317][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.807666][ T5827] usb 3-1: Product: syz [ 302.812330][ T5827] usb 3-1: Manufacturer: syz [ 302.816958][ T5827] usb 3-1: SerialNumber: syz [ 302.832937][ T5827] usb 3-1: config 0 descriptor?? [ 302.849999][T11580] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 302.891435][ T5827] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 302.906301][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 302.915858][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 302.936106][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 302.956396][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 302.964624][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 302.982051][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 303.026468][ T5827] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 303.052787][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 303.059791][ T4264] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 303.065376][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 303.089771][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 303.097520][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 303.149890][ T5827] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 303.178779][ T5827] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 303.202330][ T6342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.331441][ T5827] usb 3-1: USB disconnect, device number 22 [ 303.358486][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 303.364389][ T5827] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 303.368852][ T146] Bluetooth: hci0: link tx timeout [ 303.380158][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.465411][ T5827] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 303.520080][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.520355][ T5827] keyspan 3-1:0.0: device disconnected [ 303.542135][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.562254][ T4264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 303.594023][ T4264] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 303.605207][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.620877][ T146] Bluetooth: hci0: link tx timeout [ 303.626105][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.652460][ T146] Bluetooth: hci0: link tx timeout [ 303.657715][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.668538][ T4264] usb 2-1: config 0 descriptor?? [ 303.677989][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.718692][ T146] Bluetooth: hci0: link tx timeout [ 303.724029][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.168249][ T4264] appleir 0003:05AC:8241.0019: item fetching failed at offset 3/5 [ 304.186773][ T4264] appleir 0003:05AC:8241.0019: parse failed [ 304.196587][ T4264] appleir: probe of 0003:05AC:8241.0019 failed with error -22 [ 304.204283][ T6342] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 304.369069][ T4264] usb 2-1: USB disconnect, device number 17 [ 304.390168][ T146] Bluetooth: hci0: link tx timeout [ 304.395362][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.489769][ T6342] usb 3-1: Using ep0 maxpacket: 32 [ 304.491109][T11667] set_capacity_and_notify: 2 callbacks suppressed [ 304.491123][T11667] loop5: detected capacity change from 0 to 32768 [ 304.557697][T11667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2879 (11667) [ 304.571265][T11687] loop4: detected capacity change from 0 to 8192 [ 304.583187][T11667] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 304.593901][T11667] BTRFS info (device loop5): setting nodatasum [ 304.600931][T11667] BTRFS info (device loop5): enabling auto defrag [ 304.607763][T11667] BTRFS info (device loop5): disabling tree log [ 304.614253][T11667] BTRFS info (device loop5): using free space tree [ 304.626746][T11667] BTRFS info (device loop5): has skinny extents [ 304.646312][T11687] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 304.655904][ T6342] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.676292][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.691885][T11687] REISERFS (device loop4): using ordered data mode [ 304.718827][T11687] reiserfs: using flush barriers [ 304.719502][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.739379][ T6342] usb 3-1: config 0 descriptor?? [ 304.751832][T11687] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 304.770120][T11687] REISERFS (device loop4): checking transaction log (loop4) [ 304.792538][ T146] Bluetooth: hci0: link tx timeout [ 304.798100][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.839900][T11667] BTRFS info (device loop5): enabling ssd optimizations [ 304.870336][ T146] Bluetooth: hci0: link tx timeout [ 304.875645][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.980927][ T146] Bluetooth: hci0: link tx timeout [ 304.986715][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.029792][ T6342] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 305.049383][ T6342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.090133][ T6342] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 305.097370][ T6342] usb 3-1: media controller created [ 305.117300][ T6342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.133134][T11687] REISERFS (device loop4): Using tea hash to sort names [ 305.134414][T11712] loop1: detected capacity change from 0 to 512 [ 305.147237][T11687] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 305.232192][ T146] Bluetooth: hci0: link tx timeout [ 305.237445][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.291887][ T6342] az6027: usb out operation failed. (-71) [ 305.320938][T11712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 305.339788][ T6342] az6027: usb out operation failed. (-71) [ 305.345785][ T6342] stb0899_attach: Driver disabled by Kconfig [ 305.354218][T11712] System zones: 0-2, 18-18, 34-34 [ 305.369554][ T6342] az6027: no front-end attached [ 305.369554][ T6342] [ 305.413961][T11712] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 305.440403][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 305.451935][ T6342] az6027: usb out operation failed. (-71) [ 305.457797][ T6342] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.487530][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.500416][ T6342] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 305.547686][T11712] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.2885: corrupted inode contents [ 305.550091][ T6342] dvb-usb: schedule remote query interval to 400 msecs. [ 305.566886][ T6342] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.631541][ T6342] usb 3-1: USB disconnect, device number 23 [ 305.648406][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.665249][T11712] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.2885: mark_inode_dirty error [ 305.681079][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.687984][T11712] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.2885: corrupted inode contents [ 305.723392][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.763263][T11712] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.2885: mark_inode_dirty error [ 305.808568][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.833942][T11712] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.2885: corrupted inode contents [ 305.859391][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.874516][T11712] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.2885: mark_inode_dirty error [ 305.932312][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.951150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.965894][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 305.972851][T11712] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.2885: corrupted inode contents [ 306.027551][T11727] loop4: detected capacity change from 0 to 1024 [ 306.076948][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 306.091190][ T6342] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 306.093434][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.100205][T11712] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 306.114956][T11727] EXT4-fs (loop4): inline encryption not supported [ 306.163022][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 306.172018][T11727] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 1: comm syz.4.2892: lblock 1 mapped to illegal pblock 1 (length 1) [ 306.207609][T11712] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.2885: corrupted inode contents [ 306.239882][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.256466][T11734] kernel profiling enabled (shift: 6) [ 306.311118][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 306.333850][T11712] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.2885: mark_inode_dirty error [ 306.360702][T11727] EXT4-fs (loop4): Remounting filesystem read-only [ 306.407634][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 306.411979][T11727] Quota error (device loop4): write_blk: dquota write failed [ 306.434267][T11727] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 306.445170][T11712] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 306.461793][T11727] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.2892: Failed to acquire dquot type 0 [ 306.471185][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 306.483711][T11727] EXT4-fs (loop4): Remounting filesystem read-only [ 306.486639][T11712] EXT4-fs (loop1): 1 truncate cleaned up [ 306.496525][T11712] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,. Quota mode: writeback. [ 306.498457][T11727] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.2892: Freeing blocks not in datazone - block = 0, count = 4096 [ 306.515728][T11712] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.551247][T11727] EXT4-fs (loop4): Remounting filesystem read-only [ 306.562564][T11727] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2892: Invalid inode bitmap blk 0 in block_group 0 [ 306.576021][T11727] EXT4-fs (loop4): Remounting filesystem read-only [ 306.582808][ T154] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 306.609210][T11727] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 306.626159][T11712] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 13: comm syz.1.2885: path /572/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=4096 fake=1 [ 306.647246][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.665191][T11727] EXT4-fs (loop4): Remounting filesystem read-only [ 306.666184][ T154] EXT4-fs (loop4): Remounting filesystem read-only [ 306.678982][T11727] EXT4-fs (loop4): 1 orphan inode deleted [ 306.687050][T11727] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,errors=remount-ro,block_validity,inlinecrypt,. Quota mode: writeback. [ 306.689023][ T154] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 306.740939][T11712] EXT4-fs (loop1): Remounting filesystem read-only [ 306.749807][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 306.763264][ T154] EXT4-fs (loop4): Remounting filesystem read-only [ 306.830565][T11747] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 306.897962][T11749] bridge0: port 2(syz_tun) entered blocking state [ 306.905937][T11749] bridge0: port 2(syz_tun) entered disabled state [ 306.956441][T11749] device syz_tun entered promiscuous mode [ 306.970793][T11749] bridge0: port 2(syz_tun) entered blocking state [ 306.977473][T11749] bridge0: port 2(syz_tun) entered forwarding state [ 307.083575][T11758] loop4: detected capacity change from 0 to 128 [ 307.136077][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.168894][T11758] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 307.193739][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.210420][ T480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.451327][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 307.787446][T11799] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2923'. [ 308.037046][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2927'. [ 308.453896][T11819] loop5: detected capacity change from 0 to 512 [ 308.567999][T11821] loop1: detected capacity change from 0 to 256 [ 308.592372][T11819] EXT4-fs (loop5): 1 truncate cleaned up [ 308.602654][T11819] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 308.641435][T11821] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.753382][T11821] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.813818][ T146] Bluetooth: hci0: link tx timeout [ 308.819129][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.855433][T11825] loop6: detected capacity change from 0 to 1024 [ 309.228281][ T5827] net_ratelimit: 4 callbacks suppressed [ 309.228300][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.262199][ T146] Bluetooth: hci0: link tx timeout [ 309.267408][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 309.576761][T11851] loop4: detected capacity change from 0 to 512 [ 309.630434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.639940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.728096][ T4274] kernel write not supported for file /1236/uid_map (pid: 4274 comm: kworker/0:9) [ 309.776076][T11851] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.855506][ T146] Bluetooth: hci0: link tx timeout [ 309.861008][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 309.913956][T11835] loop6: detected capacity change from 0 to 32768 [ 309.921007][T11851] ext4 filesystem being mounted at /619/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.983837][T11835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2940 (11835) [ 310.031464][T11835] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 310.048387][T11835] BTRFS info (device loop6): using free space tree [ 310.056590][T11835] BTRFS info (device loop6): has skinny extents [ 310.242278][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.310032][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.408939][T11895] loop5: detected capacity change from 0 to 64 [ 310.421759][T11870] loop1: detected capacity change from 0 to 4096 [ 310.470019][T11835] BTRFS info (device loop6): enabling ssd optimizations [ 310.541660][T11870] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 310.568589][T11895] attempt to access beyond end of device [ 310.568589][T11895] loop5: rw=2049, want=268435470, limit=64 [ 310.605008][T11895] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 311.039678][ T6339] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 311.113206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.278873][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.427430][ T146] Bluetooth: hci0: link tx timeout [ 311.433003][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 311.510105][ T6339] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 311.546205][ T6339] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.615494][ T6339] usb 3-1: config 0 interface 0 has no altsetting 0 [ 311.645541][ T6339] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 311.663089][ T6339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.673487][ T4252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.681967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.710218][ T6339] usb 3-1: config 0 descriptor?? [ 311.731457][T11899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 311.788227][T11938] loop4: detected capacity change from 0 to 256 [ 311.838331][T11938] exfat: Deprecated parameter 'utf8' [ 311.846918][T11938] exfat: Deprecated parameter 'namecase' [ 311.853095][T11938] exfat: Deprecated parameter 'namecase' [ 311.879347][T11938] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 312.042683][T11943] input: syz1 as /devices/virtual/input/input15 [ 312.211707][ T6339] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 312.224595][T11949] loop1: detected capacity change from 0 to 2048 [ 312.233393][ T6339] holtek_kbd 0003:04D9:A055.001A: unbalanced collection at end of report description [ 312.245568][ T6339] holtek_kbd: probe of 0003:04D9:A055.001A failed with error -22 [ 312.278686][T11953] loop4: detected capacity change from 0 to 256 [ 312.309624][T11953] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.326514][T11953] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 312.343359][T11949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.350150][T11953] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 312.355982][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.417829][ T6339] usb 3-1: USB disconnect, device number 24 [ 312.766385][T11969] loop5: detected capacity change from 0 to 8 [ 312.878107][T11969] SQUASHFS error: Failed to read block 0x260685: -5 [ 312.880393][ T146] Bluetooth: hci0: link tx timeout [ 312.888785][T11969] SQUASHFS error: Unable to read metadata cache entry [260685] [ 312.890677][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 312.898780][T11969] SQUASHFS error: Unable to read directory block [260685:0] [ 313.195688][T11995] loop1: detected capacity change from 0 to 256 [ 313.245907][ T146] Bluetooth: hci0: link tx timeout [ 313.251263][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.655955][T12008] netlink: 'syz.2.3008': attribute type 10 has an invalid length. [ 313.659920][T12006] loop1: detected capacity change from 0 to 256 [ 313.686506][T12006] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.738350][T12008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.786633][T12008] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 313.811743][T12009] netlink: 'syz.2.3008': attribute type 10 has an invalid length. [ 313.838685][T12009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3008'. [ 313.889695][T12009] device batadv0 entered promiscuous mode [ 313.972103][T12009] bond0: (slave batadv0): Releasing backup interface [ 314.016991][T12009] bridge0: port 3(batadv0) entered blocking state [ 314.080789][T12009] bridge0: port 3(batadv0) entered disabled state [ 314.099697][T11990] XFS (loop5): Mounting V5 Filesystem [ 314.180966][ T154] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 314.190263][ T154] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 314.265177][T11990] XFS (loop5): Ending clean mount [ 314.299166][T12035] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3016'. [ 314.327534][T11990] XFS (loop5): Quotacheck needed: Please wait. [ 314.470174][ T5825] net_ratelimit: 3 callbacks suppressed [ 314.470193][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.487367][T11990] XFS (loop5): Quotacheck: Done. [ 314.533112][T11990] XFS (loop5): User initiated shutdown received. [ 314.540046][ T6339] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 314.556422][T11990] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 314.592566][T11990] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 314.697288][ T6682] XFS (loop5): Unmounting Filesystem [ 314.752998][T12053] program syz.6.3025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.842548][T12055] ALSA: mixer_oss: invalid OSS volume '' [ 314.885350][ T146] Bluetooth: hci0: link tx timeout [ 314.890943][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.961647][ T6339] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 314.973580][T12058] set_capacity_and_notify: 1 callbacks suppressed [ 314.973598][T12058] loop6: detected capacity change from 0 to 128 [ 315.007692][ T6339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.049461][ T6339] usb 2-1: config 0 descriptor?? [ 315.097800][T12058] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 315.122317][ T6339] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 315.131800][T12058] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.163253][T12065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.288239][T12058] fscrypt (loop6, inode 12): Unsupported encryption flags (0x45) [ 315.559821][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.639998][ T5817] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 315.712283][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3037'. [ 315.855705][T12096] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3038'. [ 316.000235][ T5817] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 316.018343][ T5817] usb 6-1: config 4 has no interface number 0 [ 316.053247][ T5817] usb 6-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 316.059742][ T6339] usb 2-1: USB disconnect, device number 18 [ 316.263098][ T5817] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 316.289908][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.318631][ T5817] usb 6-1: Product: syz [ 316.330156][ T5817] usb 6-1: Manufacturer: syz [ 316.334827][ T5817] usb 6-1: SerialNumber: syz [ 316.399936][T11918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.577028][T12088] loop6: detected capacity change from 0 to 40427 [ 316.605152][T12121] loop1: detected capacity change from 0 to 256 [ 316.617569][T12123] loop4: detected capacity change from 0 to 64 [ 316.634667][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.650510][T12088] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 316.687059][T12088] F2FS-fs (loop6): invalid crc value [ 316.748978][T12088] F2FS-fs (loop6): Found nat_bits in checkpoint [ 316.829782][ T5825] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 316.850119][ T5817] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 316.871577][ T5817] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 316.910169][ T5817] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 316.917234][ T5817] usb 6-1: media controller created [ 316.933480][T12088] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 316.952230][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.984897][ T146] Bluetooth: hci0: link tx timeout [ 316.990436][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 317.074688][ T5817] DVB: Unable to find symbol dib7000p_attach() [ 317.086349][T12138] loop4: detected capacity change from 0 to 256 [ 317.086835][ T5817] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 317.107821][T12138] exfat: Deprecated parameter 'utf8' [ 317.135053][ T7560] attempt to access beyond end of device [ 317.135053][ T7560] loop6: rw=2049, want=40976, limit=40427 [ 317.146597][T12138] exfat: Deprecated parameter 'utf8' [ 317.168855][T12138] exfat: Deprecated parameter 'namecase' [ 317.184724][T12138] exfat: Deprecated parameter 'namecase' [ 317.232117][T12138] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 317.246176][ T146] Bluetooth: hci0: link tx timeout [ 317.251866][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 317.265968][ T5825] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 317.275237][ T5817] rc_core: IR keymap rc-dib0700-rc5 not found [ 317.282025][ T5817] Registered IR keymap rc-empty [ 317.287280][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.295898][ T5817] dvb-usb: could not initialize remote control. [ 317.303283][ T5817] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 317.312343][ T5825] usb 3-1: config 0 descriptor?? [ 317.351469][ T5817] dib0700: There's no endpoint for remote controller [ 317.433282][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439688][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457851][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.466324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.560108][ T5825] [drm] vendor descriptor length:6 data:06 5f 01 2f 66 73 00 00 00 00 00 [ 317.585449][ T5825] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 317.620873][T11919] usb 6-1: USB disconnect, device number 11 [ 317.645463][T11919] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 317.670220][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.732073][T12143] loop4: detected capacity change from 0 to 8192 [ 317.789746][ T5825] [drm:udl_init] *ERROR* Selecting channel failed [ 317.818718][ T5825] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 317.851902][ T5825] [drm] Initialized udl on minor 2 [ 317.855236][T12143] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 317.885351][T12143] REISERFS (device loop4): using ordered data mode [ 317.889986][ T5825] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 317.906914][ T5825] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 317.919208][ T5825] usb 3-1: USB disconnect, device number 25 [ 317.933206][ T5824] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 317.947493][ T5824] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 317.968110][ T5824] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 317.984498][T12143] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 318.020852][T12143] REISERFS (device loop4): checking transaction log (loop4) [ 318.029712][T12143] REISERFS (device loop4): Using r5 hash to sort names [ 318.037109][T12143] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 318.056440][T12143] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 318.191403][T12143] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 318.419125][T12154] loop6: detected capacity change from 0 to 8192 [ 318.539413][T12146] loop1: detected capacity change from 0 to 32768 [ 318.574800][T12154] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 318.590147][T12154] REISERFS (device loop6): using ordered data mode [ 318.600037][T12154] reiserfs: using flush barriers [ 318.622307][T12154] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 318.640527][T12154] REISERFS (device loop6): checking transaction log (loop6) [ 318.660362][T12154] REISERFS (device loop6): Using r5 hash to sort names [ 318.692735][T12154] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 318.711359][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.757051][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.766761][T12146] XFS (loop1): Mounting V5 Filesystem [ 318.863519][T12146] XFS (loop1): Ending clean mount [ 318.871902][T12146] XFS (loop1): Quotacheck needed: Please wait. [ 318.927064][T12146] XFS (loop1): Quotacheck: Done. [ 319.015591][ T4190] XFS (loop1): Unmounting Filesystem [ 319.248972][T12180] loop5: detected capacity change from 0 to 512 [ 319.367064][T12180] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 319.429513][T12180] EXT4-fs (loop5): 1 truncate cleaned up [ 319.481025][T12180] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 319.507904][ T6339] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 319.784518][T12189] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 319.895090][ T5825] net_ratelimit: 1 callbacks suppressed [ 319.895106][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.973537][ T6339] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 319.993692][ T6339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.037063][ T6339] usb 5-1: config 0 descriptor?? [ 320.129123][T12207] loop6: detected capacity change from 0 to 256 [ 320.403670][T12215] loop1: detected capacity change from 0 to 64 [ 320.471286][ T6339] usb 5-1: Cannot read MAC address [ 320.482168][ T6339] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 320.528930][ T6339] usb 5-1: USB disconnect, device number 22 [ 320.588988][T12221] program syz.6.3082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.892775][T12226] loop6: detected capacity change from 0 to 1024 [ 320.951116][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.970897][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3085'. [ 321.680852][T12251] input: syz0 as /devices/virtual/input/input17 [ 321.946685][T12256] netlink: 'syz.1.3097': attribute type 5 has an invalid length. [ 321.951183][T12232] loop4: detected capacity change from 0 to 32768 [ 321.995754][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.007907][T12234] loop5: detected capacity change from 0 to 32768 [ 322.168079][T12232] XFS (loop4): Mounting V5 Filesystem [ 322.392156][T12232] XFS (loop4): Ending clean mount [ 322.492838][T12232] XFS (loop4): Quotacheck needed: Please wait. [ 322.500054][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.566512][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.574965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.682519][T12232] XFS (loop4): Quotacheck: Done. [ 322.723206][T12279] loop5: detected capacity change from 0 to 256 [ 322.830360][ T4196] XFS (loop4): Unmounting Filesystem [ 322.857513][T12279] exFAT-fs (loop5): failed to load upcase table [ 322.860201][T12282] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.868923][T12279] exFAT-fs (loop5): failed to recognize exfat type [ 322.967968][T12284] loop6: detected capacity change from 0 to 2048 [ 323.037173][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.137342][T12284] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 323.639700][T11918] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 323.910213][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.984314][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 323.987231][T12320] loop4: detected capacity change from 0 to 2048 [ 324.052421][T11918] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.067746][T11918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.072600][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.134787][ T5179] loop4: p3 < > p4 < > [ 324.139067][ T5179] loop4: partition table partially beyond EOD, truncated [ 324.179065][ T5179] loop4: p3 start 4284289 is beyond EOD, truncated [ 324.244363][T12320] loop4: p3 < > p4 < > [ 324.249888][T12320] loop4: partition table partially beyond EOD, truncated [ 324.270027][T12320] loop4: p3 start 4284289 is beyond EOD, truncated [ 324.310285][T11918] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.328632][T11918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.339104][T11918] usb 6-1: Product: syz [ 324.375490][T11918] usb 6-1: Manufacturer: syz [ 324.380985][T12335] tipc: Started in network mode [ 324.401595][T11918] usb 6-1: SerialNumber: syz [ 324.407782][T12335] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 324.419985][T12335] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 324.438039][T12335] tipc: Enabled bearer , priority 10 [ 324.455543][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 324.594322][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 324.659339][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 324.799894][ T5824] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 324.892331][T12339] loop6: detected capacity change from 0 to 40427 [ 324.962806][T12339] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 324.970703][T12339] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 324.986913][T12339] F2FS-fs (loop6): invalid crc value [ 324.996732][T12339] F2FS-fs (loop6): Found nat_bits in checkpoint [ 325.039855][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 325.078502][T12339] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 325.089807][T12339] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 325.110074][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.159922][ T5824] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 325.169000][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.185001][ T5824] usb 2-1: config 0 descriptor?? [ 325.248867][ T5824] gspca_main: sunplus-2.14.0 probing 041e:400b [ 325.349972][T11918] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 325.389838][T11918] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 325.433858][T11918] cdc_ncm 6-1:1.0: bind() failure [ 325.454738][T11918] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 325.466627][T11918] cdc_ncm 6-1:1.1: bind() failure [ 325.480497][T11918] usb 6-1: USB disconnect, device number 12 [ 325.520895][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.556133][ T5817] tipc: Node number set to 1 [ 325.719120][T12369] loop4: detected capacity change from 0 to 2048 [ 325.770594][T12369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.020667][T12381] loop4: detected capacity change from 0 to 128 [ 326.023854][T12384] loop5: detected capacity change from 0 to 128 [ 326.077267][T12381] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.082771][T12384] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.106875][T12381] ext4 filesystem being mounted at /665/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.109812][T12384] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.139785][ T5824] gspca_sunplus: reg_r err -71 [ 326.144674][ T5824] sunplus: probe of 2-1:0.0 failed with error -71 [ 326.153525][ T5824] usb 2-1: USB disconnect, device number 19 [ 326.161852][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.202316][T12384] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x0c) [ 326.315447][T12391] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 326.334965][T12391] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 326.435113][T12397] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 326.759250][T12407] loop5: detected capacity change from 0 to 4096 [ 326.814337][ T6334] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 326.878803][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'. [ 326.943254][ T5824] hid-generic 0004:0004:FFFF0001.001B: unknown main item tag 0x0 [ 326.951457][ T5824] hid-generic 0004:0004:FFFF0001.001B: unknown main item tag 0x0 [ 326.959268][ T5824] hid-generic 0004:0004:FFFF0001.001B: unknown main item tag 0x0 [ 327.006002][ T5824] hid-generic 0004:0004:FFFF0001.001B: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 327.190097][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.229866][ T6334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.271376][ T6334] usb 5-1: config 0 has no interfaces? [ 327.276955][ T6334] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.315083][T12437] fido_id[12437]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 327.336448][ T6334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.347635][ T6334] usb 5-1: config 0 descriptor?? [ 327.415841][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3174'. [ 327.634908][ T5817] usb 5-1: USB disconnect, device number 23 [ 327.775150][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3179'. [ 328.230121][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.311138][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.319719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.458650][T12450] loop5: detected capacity change from 0 to 32768 [ 328.524603][T12450] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3177 (12450) [ 328.551649][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.629256][T12450] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 328.664384][T12450] BTRFS info (device loop5): setting nodatasum [ 328.684630][T12450] BTRFS info (device loop5): force zlib compression, level 3 [ 328.688174][T12480] loop1: detected capacity change from 0 to 2048 [ 328.717662][T12450] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 328.739896][T12450] BTRFS info (device loop5): use lzo compression, level 0 [ 328.755454][T12450] BTRFS info (device loop5): turning on flush-on-commit [ 328.785537][T12450] BTRFS info (device loop5): enabling auto defrag [ 328.791520][T12480] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 328.816240][T12450] BTRFS info (device loop5): max_inline at 4096 [ 328.849191][T12450] BTRFS info (device loop5): using free space tree [ 328.859084][T12480] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.898280][T12450] BTRFS info (device loop5): has skinny extents [ 328.944004][T12464] loop6: detected capacity change from 0 to 40427 [ 329.062404][T12464] F2FS-fs (loop6): invalid crc value [ 329.152047][T12464] F2FS-fs (loop6): Found nat_bits in checkpoint [ 329.243331][T12450] BTRFS info (device loop5): enabling ssd optimizations [ 329.279007][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.399827][T12464] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 329.590671][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.754925][T12478] loop4: detected capacity change from 0 to 40427 [ 329.791454][T12478] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 329.819833][T12478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 329.858405][T12478] F2FS-fs (loop4): invalid crc value [ 329.928715][T12478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 330.027412][T12478] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 330.038703][T12478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 330.231111][T12522] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3193'. [ 330.308363][ T7560] attempt to access beyond end of device [ 330.308363][ T7560] loop6: rw=2049, want=45112, limit=40427 [ 330.343320][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.770493][ T5817] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 330.826482][T12536] loop1: detected capacity change from 0 to 512 [ 330.908876][T12538] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 331.050937][T12536] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,bsddf,,errors=continue. Quota mode: writeback. [ 331.096202][T12536] ext4 filesystem being mounted at /637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 331.186572][T12554] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3209'. [ 331.289973][ T5817] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 331.317811][T12559] loop1: detected capacity change from 0 to 512 [ 331.330877][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.353287][ T5817] usb 6-1: Product: syz [ 331.363242][ T5817] usb 6-1: Manufacturer: syz [ 331.376698][ T5817] usb 6-1: SerialNumber: syz [ 331.397901][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.404032][T12559] EXT4-fs (loop1): Ignoring removed orlov option [ 331.428718][ T5817] usb 6-1: config 0 descriptor?? [ 331.461042][T12559] EXT4-fs (loop1): Test dummy encryption mode enabled [ 331.508672][T12559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.591489][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.610539][T12559] EXT4-fs (loop1): 1 truncate cleaned up [ 331.616263][T12559] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 331.710063][ T5817] usb 6-1: ignoring: probably an ADSL modem [ 331.835275][T12582] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3215'. [ 332.015800][T12593] loop4: detected capacity change from 0 to 64 [ 332.153105][ T5817] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 332.278311][T12605] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3223'. [ 332.291001][T12559] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 332.315132][T12607] loop6: detected capacity change from 0 to 512 [ 332.358646][ T7] usb 6-1: USB disconnect, device number 13 [ 332.406132][T12607] EXT4-fs (loop6): 1 truncate cleaned up [ 332.418446][T12607] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 332.479874][ T26] audit: type=1800 audit(1777606450.093:29): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3224" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 332.598593][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.636214][ T3023] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 465: padding at end of block bitmap is not set [ 332.725416][ T3023] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 332.748846][ T3023] EXT4-fs (loop6): This should not happen!! Data will be lost [ 332.748846][ T3023] [ 332.759284][ T3023] EXT4-fs (loop6): Total free blocks count 0 [ 332.771656][ T3023] EXT4-fs (loop6): Free/Dirty block details [ 332.777875][ T3023] EXT4-fs (loop6): free_blocks=0 [ 332.787551][ T3023] EXT4-fs (loop6): dirty_blocks=10 [ 332.805244][ T3023] EXT4-fs (loop6): Block reservation details [ 332.812294][ T3023] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 333.449631][ T5821] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 333.487872][T12651] loop1: detected capacity change from 0 to 64 [ 333.689798][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.718742][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 333.796941][T12655] loop1: detected capacity change from 0 to 1024 [ 333.849942][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.877547][ T146] Bluetooth: hci0: link tx timeout [ 333.883276][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 333.891362][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.901267][ T5821] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 333.910961][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.930910][ T5821] usb 6-1: config 0 descriptor?? [ 334.070787][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.079625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.428689][ T5821] corsair 0003:1B1C:1B02.001C: unknown main item tag 0x0 [ 334.440360][ T5821] corsair 0003:1B1C:1B02.001C: unknown main item tag 0x0 [ 334.447481][ T5821] corsair 0003:1B1C:1B02.001C: unknown main item tag 0x0 [ 334.454968][ T5821] corsair 0003:1B1C:1B02.001C: unknown main item tag 0x0 [ 334.462231][ T5821] corsair 0003:1B1C:1B02.001C: unknown main item tag 0x0 [ 334.488534][ T5821] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 334.629512][T12683] loop6: detected capacity change from 0 to 256 [ 334.630187][ T5821] corsair 0003:1B1C:1B02.001C: Read invalid backlight brightness: 3c. [ 334.640201][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.710411][ T480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.750577][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.842827][ T5825] usb 6-1: USB disconnect, device number 14 [ 334.889974][T12684] fido_id[12684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 335.290625][T12700] bridge0: port 3(syz_tun) entered blocking state [ 335.297567][T12700] bridge0: port 3(syz_tun) entered disabled state [ 335.307348][T12700] device syz_tun entered promiscuous mode [ 335.315332][T12700] bridge0: port 3(syz_tun) entered blocking state [ 335.321999][T12700] bridge0: port 3(syz_tun) entered forwarding state [ 335.375219][T12700] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 335.513771][T12702] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 335.594304][T12708] loop1: detected capacity change from 0 to 128 [ 335.739066][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3267'. [ 335.839511][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.886170][T12717] loop4: detected capacity change from 0 to 256 [ 335.918748][T12717] exfat: Deprecated parameter 'utf8' [ 335.935906][T12717] exfat: Deprecated parameter 'namecase' [ 335.979804][T12717] exfat: Deprecated parameter 'namecase' [ 336.027742][T12717] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 336.376407][T12735] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 336.870793][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.943600][T12740] loop4: detected capacity change from 0 to 1024 [ 336.973487][T12746] loop1: detected capacity change from 0 to 256 [ 337.264061][T12737] loop6: detected capacity change from 0 to 32768 [ 337.528552][T12737] XFS (loop6): Mounting V5 Filesystem [ 337.670473][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.703656][T12737] XFS (loop6): Ending clean mount [ 337.781496][T12766] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 337.913413][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.933209][ T7560] XFS (loop6): Unmounting Filesystem [ 337.967497][T12756] loop4: detected capacity change from 0 to 40427 [ 338.047955][T12756] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x1ffff [ 338.072763][T12756] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 338.128479][T12756] F2FS-fs (loop4): invalid crc value [ 338.202301][T12756] F2FS-fs (loop4): Found nat_bits in checkpoint [ 338.331546][T12756] F2FS-fs (loop4): Start checkpoint disabled! [ 338.350549][T12756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 338.660727][ T480] attempt to access beyond end of device [ 338.660727][ T480] loop4: rw=2049, want=40976, limit=40427 [ 338.854748][T12792] loop6: detected capacity change from 0 to 512 [ 338.940712][T12792] EXT4-fs (loop6): Ignoring removed orlov option [ 338.947230][T12792] EXT4-fs (loop6): Test dummy encryption mode enabled [ 338.987664][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.018164][T12792] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 339.138870][T12792] EXT4-fs (loop6): 1 truncate cleaned up [ 339.156125][T12792] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 339.164721][T12801] loop4: detected capacity change from 0 to 64 [ 339.265770][T12801] attempt to access beyond end of device [ 339.265770][T12801] loop4: rw=2049, want=268435470, limit=64 [ 339.298165][T12801] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 339.697626][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 339.735579][T12820] syz_tun: Device is already in use. [ 339.830205][ T480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.838622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.869922][T12825] loop6: detected capacity change from 0 to 256 [ 339.920463][T12825] exfat: Deprecated parameter 'utf8' [ 339.941259][T12825] exfat: Deprecated parameter 'namecase' [ 339.961498][T12825] exfat: Deprecated parameter 'namecase' [ 339.990690][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.013664][T12825] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 340.200613][ T5821] kernel write not supported for file /789/uid_map (pid: 5821 comm: kworker/1:12) [ 340.208637][T12807] loop5: detected capacity change from 0 to 32768 [ 340.364132][T12807] XFS (loop5): Mounting V5 Filesystem [ 340.470887][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.494617][T12807] XFS (loop5): Ending clean mount [ 340.636028][ T6682] XFS (loop5): Unmounting Filesystem [ 340.728633][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.812145][T12852] loop4: detected capacity change from 0 to 512 [ 340.926546][T12852] EXT4-fs (loop4): Ignoring removed orlov option [ 340.969810][T12852] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.976836][T12852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 341.030545][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.141561][T12852] EXT4-fs (loop4): 1 truncate cleaned up [ 341.148355][T12852] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 341.727869][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3335'. [ 341.874015][T12890] set_capacity_and_notify: 1 callbacks suppressed [ 341.874034][T12890] loop1: detected capacity change from 0 to 1024 [ 341.928041][T12890] EXT4-fs (loop1): inline encryption not supported [ 341.969840][T12890] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.3337: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.067149][T12890] EXT4-fs (loop1): Remounting filesystem read-only [ 342.080344][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.142467][T12890] Quota error (device loop1): write_blk: dquota write failed [ 342.169860][T12890] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 342.230565][T12890] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3337: Failed to acquire dquot type 0 [ 342.280292][T12890] EXT4-fs (loop1): Remounting filesystem read-only [ 342.310930][T12890] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.3337: Freeing blocks not in datazone - block = 0, count = 4096 [ 342.376540][T12890] EXT4-fs (loop1): Remounting filesystem read-only [ 342.400094][T12890] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3337: Invalid inode bitmap blk 0 in block_group 0 [ 342.426275][ T5634] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.448116][ T5634] EXT4-fs (loop1): Remounting filesystem read-only [ 342.455095][T12890] EXT4-fs (loop1): Remounting filesystem read-only [ 342.457245][ T5634] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 342.470956][ T5634] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 342.484756][ T5634] EXT4-fs (loop1): Remounting filesystem read-only [ 342.488765][T12890] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 342.528930][T12890] EXT4-fs (loop1): Remounting filesystem read-only [ 342.555164][T12890] EXT4-fs (loop1): 1 orphan inode deleted [ 342.575964][T12890] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,errors=remount-ro,block_validity,inlinecrypt,. Quota mode: writeback. [ 343.189419][T12910] loop6: detected capacity change from 0 to 256 [ 343.247482][T12910] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.319877][T12910] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 343.384849][T12910] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 343.684061][T12924] loop1: detected capacity change from 0 to 512 [ 343.760137][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.782672][T12924] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 343.830038][T12924] ext4 filesystem being mounted at /674/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.104375][T12912] loop4: detected capacity change from 0 to 32768 [ 344.126407][T12933] input: syz0 as /devices/virtual/input/input19 [ 344.212117][T12937] netlink: 'syz.5.3357': attribute type 5 has an invalid length. [ 344.242770][T12912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3345 (12912) [ 344.290627][T12912] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 344.332514][T12912] BTRFS info (device loop4): setting nodatasum [ 344.359418][T12912] BTRFS info (device loop4): enabling auto defrag [ 344.412407][T12912] BTRFS info (device loop4): disabling tree log [ 344.418731][T12912] BTRFS info (device loop4): using free space tree [ 344.497515][T12912] BTRFS info (device loop4): has skinny extents [ 344.788665][T12912] BTRFS info (device loop4): enabling ssd optimizations [ 344.970309][ T480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.978778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.111481][ T5179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5179) [ 345.729189][T12992] loop4: detected capacity change from 0 to 256 [ 345.781017][T12992] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.917581][T13000] loop1: detected capacity change from 0 to 8 [ 345.979753][ T6334] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 346.024863][T13000] SQUASHFS error: Failed to read block 0x260685: -5 [ 346.055847][T13000] SQUASHFS error: Unable to read metadata cache entry [260685] [ 346.071102][T13000] SQUASHFS error: Unable to read directory block [260685:0] [ 346.241296][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.399757][ T6334] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 346.427610][ T6334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.450451][ T6334] usb 6-1: config 0 descriptor?? [ 346.574426][T13007] loop1: detected capacity change from 0 to 32768 [ 346.790639][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.840188][ T6334] usb 6-1: Cannot read MAC address [ 346.845487][ T6334] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 346.867128][T13020] loop1: detected capacity change from 0 to 256 [ 346.884622][ T6334] usb 6-1: USB disconnect, device number 15 [ 347.007311][T13020] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.039694][T13020] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 347.082346][T13020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 347.359317][T13024] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3386'. [ 347.497226][T13018] loop4: detected capacity change from 0 to 32768 [ 347.522177][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.886863][T13039] serio: Serial port pty28 [ 348.155286][T13054] loop1: detected capacity change from 0 to 512 [ 348.266361][T13054] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.3399: inode has both inline data and extents flags [ 348.308838][T13065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3405'. [ 348.349254][T13068] ALSA: mixer_oss: invalid OSS volume '' [ 348.380218][T13054] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.3399: couldn't read orphan inode 15 (err -117) [ 348.489414][T13078] netlink: 'syz.5.3411': attribute type 10 has an invalid length. [ 348.498512][T13054] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.543765][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.564259][T13078] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 348.577142][T13080] netlink: 'syz.5.3411': attribute type 10 has an invalid length. [ 348.585697][T13080] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3411'. [ 348.605266][T13080] device batadv0 entered promiscuous mode [ 348.640628][T13080] bond0: (slave batadv0): Releasing backup interface [ 348.741472][T13080] bridge0: port 3(batadv0) entered blocking state [ 348.791450][T13080] bridge0: port 3(batadv0) entered disabled state [ 348.956045][ T154] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 348.965471][ T154] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 348.992643][T13090] loop5: detected capacity change from 0 to 128 [ 349.031066][T13091] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3415'. [ 349.098438][T13066] loop4: detected capacity change from 0 to 32768 [ 349.146396][T13090] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.177246][T13090] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.224713][T13090] fscrypt (loop5, inode 12): Unsupported encryption flags (0x45) [ 349.324854][T13066] XFS (loop4): Mounting V5 Filesystem [ 349.440564][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 349.559434][T13066] XFS (loop4): Ending clean mount [ 349.574734][T13112] serio: Serial port pty30 [ 349.668428][ T4196] XFS (loop4): Unmounting Filesystem [ 349.747643][T13115] program syz.2.3422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.798345][T13121] netlink: 'syz.1.3425': attribute type 10 has an invalid length. [ 349.851467][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.871602][T13121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.954414][T13121] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 349.992290][T13122] netlink: 'syz.1.3425': attribute type 10 has an invalid length. [ 350.012387][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3425'. [ 350.074172][T13122] device batadv0 entered promiscuous mode [ 350.095681][T13122] bond0: (slave batadv0): Releasing backup interface [ 350.123798][T13122] bridge0: port 4(batadv0) entered blocking state [ 350.150921][T13122] bridge0: port 4(batadv0) entered disabled state [ 350.431368][T13140] loop4: detected capacity change from 0 to 512 [ 350.458552][T13142] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 350.506711][T13140] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 350.548900][T13140] EXT4-fs (loop4): 1 truncate cleaned up [ 350.574409][T13140] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 350.634441][ T3023] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 350.644037][ T3023] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 350.720405][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.728704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.764410][T13120] loop5: detected capacity change from 0 to 40427 [ 350.785886][T13120] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 350.815262][T13120] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 350.843927][T13120] F2FS-fs (loop5): invalid crc value [ 350.867693][T13120] F2FS-fs (loop5): Found nat_bits in checkpoint [ 350.988988][T13149] loop1: detected capacity change from 0 to 8192 [ 350.995582][T13120] F2FS-fs (loop5): Start checkpoint disabled! [ 351.034043][T13120] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 351.053853][T13149] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 351.096797][T13149] REISERFS (device loop1): using ordered data mode [ 351.129886][T13149] reiserfs: using flush barriers [ 351.136965][T13149] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 351.167693][T13149] REISERFS (device loop1): checking transaction log (loop1) [ 351.372743][ T480] attempt to access beyond end of device [ 351.372743][ T480] loop5: rw=2049, want=40976, limit=40427 [ 351.376170][T13149] REISERFS (device loop1): Using r5 hash to sort names [ 351.414108][T13149] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 351.456020][T13162] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 351.699772][ T23] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 351.726775][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3437'. [ 351.842198][T13169] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 351.943870][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 351.974279][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'. [ 351.990540][ T9771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.080381][ T23] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 352.112253][ T23] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.143306][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.153764][ T23] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 352.167514][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.197573][ T23] usb 5-1: config 0 descriptor?? [ 352.253689][T13160] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 352.254890][T13188] loop5: detected capacity change from 0 to 64 [ 352.642556][ T4252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.731608][ T23] holtek_kbd 0003:04D9:A055.001D: unknown main item tag 0x0 [ 352.742403][T13195] loop5: detected capacity change from 0 to 16 [ 352.751959][T13183] loop1: detected capacity change from 0 to 32768 [ 352.758119][ T23] holtek_kbd 0003:04D9:A055.001D: unbalanced collection at end of report description [ 352.769302][ T23] holtek_kbd: probe of 0003:04D9:A055.001D failed with error -22 [ 352.794894][T13195] erofs: (device loop5): mounted with root inode @ nid 36. [ 352.833118][T13195] attempt to access beyond end of device [ 352.833118][T13195] loop5: rw=0, want=40, limit=16 [ 352.845176][T13195] attempt to access beyond end of device [ 352.845176][T13195] loop5: rw=0, want=40, limit=16 [ 352.861529][T13195] attempt to access beyond end of device [ 352.861529][T13195] loop5: rw=524288, want=48, limit=16 [ 352.874078][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.896749][T13183] XFS (loop1): Mounting V5 Filesystem [ 352.974187][ T6334] usb 5-1: USB disconnect, device number 24 [ 352.982364][T13195] attempt to access beyond end of device [ 352.982364][T13195] loop5: rw=524288, want=40, limit=16 [ 353.017364][T13183] XFS (loop1): Ending clean mount [ 353.139420][ T4190] XFS (loop1): Unmounting Filesystem [ 353.526928][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3466'. [ 353.541871][T13210] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 353.552639][T13211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 353.641473][T13212] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 354.015696][T13228] loop1: detected capacity change from 0 to 256 [ 354.147259][T13228] exfat: Deprecated parameter 'utf8' [ 354.159339][T13228] exfat: Deprecated parameter 'utf8' [ 354.176111][T13228] exfat: Deprecated parameter 'namecase' [ 354.185258][T13228] exfat: Deprecated parameter 'namecase' [ 354.241282][T13228] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 354.824132][T13226] loop4: detected capacity change from 0 to 32768 [ 354.925826][ T6334] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 354.944287][T13226] XFS (loop4): Mounting V5 Filesystem [ 355.067607][T13226] XFS (loop4): Ending clean mount [ 355.163404][ T4196] XFS (loop4): Unmounting Filesystem [ 355.333887][ T6334] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 355.345546][ T6334] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.359089][ T6334] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.372948][ T6334] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 355.384720][ T6334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.414572][ T6334] usb 6-1: config 0 descriptor?? [ 355.418591][T13251] loop6: detected capacity change from 0 to 8192 [ 355.444698][T13235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 355.505123][T13251] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 355.524605][T13251] REISERFS (device loop6): using ordered data mode [ 355.573369][T13251] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 355.626721][T13251] REISERFS (device loop6): checking transaction log (loop6) [ 355.642281][T13251] REISERFS (device loop6): Using r5 hash to sort names [ 355.656260][T13251] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 355.670953][T13251] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 355.725245][T13251] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 355.911922][ T6334] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0 [ 355.919382][ T6334] holtek_kbd 0003:04D9:A055.001E: unbalanced collection at end of report description [ 355.941265][ T6334] holtek_kbd: probe of 0003:04D9:A055.001E failed with error -22 [ 355.978815][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.178390][T13267] loop6: detected capacity change from 0 to 512 [ 356.178901][ T7] usb 6-1: USB disconnect, device number 16 [ 356.221535][T13267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 356.286992][T13267] EXT4-fs (loop6): 1 truncate cleaned up [ 356.332804][T13267] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 356.470834][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.479196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.781289][T13281] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3487'. [ 356.934822][T13261] loop4: detected capacity change from 0 to 40427 [ 356.978996][T13290] loop5: detected capacity change from 0 to 64 [ 357.031978][T13286] loop1: detected capacity change from 0 to 8192 [ 357.038706][T13261] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 357.079885][T13261] F2FS-fs (loop4): invalid crc value [ 357.089136][T13261] F2FS-fs (loop4): Found nat_bits in checkpoint [ 357.123113][T13286] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 357.202443][T13286] REISERFS (device loop1): using ordered data mode [ 357.234505][T13286] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 357.263828][T13286] REISERFS (device loop1): checking transaction log (loop1) [ 357.287315][T13286] REISERFS (device loop1): Using r5 hash to sort names [ 357.319967][T13286] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 357.345378][T13261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 357.419719][T13286] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 357.507394][ T4196] attempt to access beyond end of device [ 357.507394][ T4196] loop4: rw=2049, want=40976, limit=40427 [ 357.531897][T13286] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 357.750801][ T480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.908138][T13308] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 357.915666][T13308] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 357.923144][T13308] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 357.932095][T13308] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 357.959762][ T6334] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 357.969699][T13308] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 357.976801][T13308] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 357.991995][T13308] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 357.998647][T13308] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 358.037959][T13308] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 358.046786][T13308] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 358.073206][T13308] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 358.080447][T13308] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 358.087260][T13308] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 358.111844][T13308] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 358.141361][T13317] loop4: detected capacity change from 0 to 2048 [ 358.228506][T13317] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 358.250863][ T6334] usb 6-1: Using ep0 maxpacket: 16 [ 358.268644][T13322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.294110][T12991] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 358.398901][ T480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.539954][T12991] usb 3-1: Using ep0 maxpacket: 16 [ 358.579871][ T6334] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 358.589073][ T6334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.600661][ T6334] usb 6-1: Product: syz [ 358.607105][ T6334] usb 6-1: Manufacturer: syz [ 358.619630][ T6334] usb 6-1: SerialNumber: syz [ 358.636619][ T6334] usb 6-1: config 0 descriptor?? [ 358.664085][T12991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.683544][T12991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.696729][T12991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 358.720359][T12991] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 358.721114][ T6334] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 358.730147][T12991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.748058][T12991] usb 3-1: config 0 descriptor?? [ 358.930575][ T5825] usb 6-1: USB disconnect, device number 17 [ 359.030012][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.233227][T12991] appleir 0003:05AC:8241.001F: item fetching failed at offset 3/5 [ 359.248789][T12991] appleir 0003:05AC:8241.001F: parse failed [ 359.255164][T12991] appleir: probe of 0003:05AC:8241.001F failed with error -22 [ 359.494605][ T5825] usb 3-1: USB disconnect, device number 26 [ 359.720703][T13352] loop1: detected capacity change from 0 to 2048 [ 359.752044][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 359.790265][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3519'. [ 359.803811][T13352] loop1: p3 < > p4 < > [ 359.818861][T13352] loop1: partition table partially beyond EOD, truncated [ 359.839254][T13352] loop1: p3 start 4284289 is beyond EOD, truncated [ 359.902966][ T3562] loop1: p3 < > p4 < > [ 359.921703][ T3562] loop1: partition table partially beyond EOD, truncated [ 359.949315][ T3562] loop1: p3 start 4284289 is beyond EOD, truncated [ 360.042003][T13362] netlink: 7986 bytes leftover after parsing attributes in process `syz.4.3523'. [ 360.152521][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 360.238269][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 360.245822][T13368] loop4: detected capacity change from 0 to 128 [ 360.586359][T13348] loop6: detected capacity change from 0 to 32768 [ 360.586376][T13358] loop5: detected capacity change from 0 to 32768 [ 360.645549][T13358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3520 (13358) [ 360.726096][T13358] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 360.761003][T13358] BTRFS info (device loop5): using free space tree [ 360.799150][T13358] BTRFS info (device loop5): has skinny extents [ 360.852769][T13377] loop4: detected capacity change from 0 to 4096 [ 361.143469][T13358] BTRFS info (device loop5): enabling ssd optimizations [ 361.614815][ T5179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (5179) [ 361.787089][T13421] loop1: detected capacity change from 0 to 128 [ 362.059876][T13398] loop6: detected capacity change from 0 to 32768 [ 362.721404][T13436] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 362.744522][T13436] tipc: Enabled bearer , priority 10 [ 363.034864][T13428] loop1: detected capacity change from 0 to 32768 [ 363.250980][T13428] XFS (loop1): Mounting V5 Filesystem [ 363.270302][ T6334] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 363.308952][T13464] loop5: detected capacity change from 0 to 1024 [ 363.399191][T13428] XFS (loop1): Ending clean mount [ 363.528134][T13472] loop6: detected capacity change from 0 to 128 [ 363.561581][ T154] hfsplus: b-tree write err: -5, ino 25 [ 363.567667][ T154] hfsplus: b-tree write err: -5, ino 4 [ 363.585057][ T154] hfsplus: b-tree write err: -5, ino 2 [ 363.595777][ T154] hfsplus: b-tree write err: -5, ino 20 [ 363.605652][ T4190] XFS (loop1): Unmounting Filesystem [ 363.673190][ T6334] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 363.730926][T13472] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.757812][ T6334] usb 5-1: config 4 has no interface number 0 [ 363.781010][T13472] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.796913][ T6334] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 363.921925][T11919] tipc: Node number set to 4278190081 [ 364.099913][ T6334] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 364.109182][ T6334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.128594][ T6334] usb 5-1: Product: syz [ 364.133351][ T6334] usb 5-1: Manufacturer: syz [ 364.137986][ T6334] usb 5-1: SerialNumber: syz [ 364.679821][ T6334] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 364.690628][ T5817] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 364.700773][ T6334] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 364.729815][ T6334] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 364.736851][ T6334] usb 5-1: media controller created [ 364.761412][ T6334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.886100][ T6334] DVB: Unable to find symbol dib7000p_attach() [ 364.893828][ T6334] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 364.926091][ T146] Bluetooth: hci0: link tx timeout [ 364.931639][ T146] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.940793][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 364.946189][ T146] Bluetooth: hci0: link tx timeout [ 364.952702][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 365.039131][ T6334] rc_core: IR keymap rc-dib0700-rc5 not found [ 365.049612][ T6334] Registered IR keymap rc-empty [ 365.054661][ T6334] dvb-usb: could not initialize remote control. [ 365.098098][ T6334] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 365.100239][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 365.165952][ T6334] dib0700: There's no endpoint for remote controller [ 365.199906][ T5817] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 7 [ 365.390706][ T5822] usb 5-1: USB disconnect, device number 25 [ 365.417342][ T5822] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 365.444169][ T5817] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 365.466483][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.499106][ T5817] usb 6-1: Product: syz [ 365.523881][ T5817] usb 6-1: Manufacturer: syz [ 365.528640][ T5817] usb 6-1: SerialNumber: syz [ 365.570482][T13527] loop1: detected capacity change from 0 to 1024 [ 365.627417][T13527] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 365.721924][T13527] EXT4-fs (loop1): shut down requested (2) [ 365.890342][T13525] loop6: detected capacity change from 0 to 32768 [ 365.960148][ T5817] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 0 [ 365.980273][ T5817] usb 6-1: unit 14 not found! [ 366.065778][ T5817] usb 6-1: USB disconnect, device number 18 [ 366.091555][T13525] XFS (loop6): Mounting V5 Filesystem [ 366.310771][ T4797] udevd[4797]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.369841][T13525] XFS (loop6): Ending clean mount [ 366.482039][ T7560] XFS (loop6): Unmounting Filesystem [ 366.501805][T13549] loop1: detected capacity change from 0 to 2048 [ 366.630360][T13549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.875282][T13562] loop5: detected capacity change from 0 to 1024 [ 367.016727][T13562] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 367.031776][T12991] Bluetooth: hci0: command 0x0406 tx timeout [ 367.066723][T13562] EXT4-fs (loop5): shut down requested (2) [ 367.285218][T13575] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.326126][T13577] loop4: detected capacity change from 0 to 256 [ 367.335820][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.355098][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.381130][T13579] mkiss: ax0: crc mode is auto. [ 367.397993][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.426188][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.448791][T13577] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 367.454630][ T5825] rtc rtc0: __rtc_set_alarm: err=-22 [ 367.536311][T13577] gfs2: path_lookup on c::: returned error -2 [ 367.608879][T13585] loop1: detected capacity change from 0 to 1024 [ 367.799925][ T480] hfsplus: b-tree write err: -5, ino 25 [ 367.805804][ T480] hfsplus: b-tree write err: -5, ino 4 [ 367.819686][ T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 367.832247][ T480] hfsplus: b-tree write err: -5, ino 2 [ 367.842443][ T480] hfsplus: b-tree write err: -5, ino 20 [ 367.858635][T13595] loop6: detected capacity change from 0 to 736 [ 368.046429][T13606] program syz.4.3611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.107811][T13607] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 368.115327][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 368.262979][T13612] loop5: detected capacity change from 0 to 256 [ 368.290241][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 368.329531][T13612] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 368.387754][T13612] gfs2: path_lookup on c::: returned error -2 [ 368.410032][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 7 [ 368.465745][T13621] fuse: Bad value for 'fd' [ 368.472791][T13621] cgroup: Unexpected value for 'cpuset_v2_mode' [ 368.538028][T13624] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3620'. [ 368.547928][ T6339] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 368.616743][T13627] loop4: detected capacity change from 0 to 256 [ 368.634031][ T7] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 368.645810][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.660202][ T7] usb 3-1: Product: syz [ 368.685061][ T7] usb 3-1: Manufacturer: syz [ 368.687152][T13627] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 368.692113][ T7] usb 3-1: SerialNumber: syz [ 368.727375][T13631] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 368.930176][ T6339] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 368.945438][ T6339] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 1281, setting to 1024 [ 368.957198][ T6339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.075846][T13635] loop6: detected capacity change from 0 to 32768 [ 369.123401][ T7] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 0 [ 369.144169][ T7] usb 3-1: unit 14 not found! [ 369.152437][ T6339] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 369.165474][ T6339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.190206][ T6339] usb 2-1: Product: syz [ 369.194611][ T6339] usb 2-1: Manufacturer: syz [ 369.199341][ T6339] usb 2-1: SerialNumber: syz [ 369.224552][ T7] usb 3-1: USB disconnect, device number 27 [ 369.250118][ T6339] usb 2-1: config 0 descriptor?? [ 369.270142][T13613] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 369.301254][ T6339] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 369.310882][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 369.319950][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 369.327782][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 369.336107][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 369.344199][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 369.352519][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 369.370314][ T6339] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 369.390701][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 369.398693][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 369.408709][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 369.422866][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 369.433856][ T6339] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 369.446376][ T6339] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 369.492197][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.603671][T13638] loop4: detected capacity change from 0 to 64 [ 369.605688][T13639] program syz.5.3628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.731829][ T5817] usb 2-1: USB disconnect, device number 20 [ 369.754834][ T5817] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 369.806606][ T5817] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 369.821809][ T5817] keyspan 2-1:0.0: device disconnected [ 370.045091][T13660] fuse: Bad value for 'fd' [ 370.073903][T13660] cgroup: Unexpected value for 'cpuset_v2_mode' [ 370.359851][ T6339] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 370.392862][T13676] mkiss: ax0: crc mode is auto. [ 370.619889][ T6339] usb 5-1: Using ep0 maxpacket: 16 [ 370.660070][ T6333] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 370.780230][ T6339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 370.876828][ T6339] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 7 [ 371.066023][T13705] loop6: detected capacity change from 0 to 32768 [ 371.072812][ T6333] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 371.082546][ T6339] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 371.107349][ T6333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.116686][ T6339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.125282][ T6339] usb 5-1: Product: syz [ 371.139469][T13705] find_entry called with index = 0 [ 371.156422][ T6333] usb 6-1: config 0 descriptor?? [ 371.161637][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 371.170601][T13705] read_mapping_page failed! [ 371.175405][T13705] ERROR: (device loop6): txCommit: [ 371.175405][T13705] [ 371.183367][ T6339] usb 5-1: Manufacturer: syz [ 371.188009][ T6339] usb 5-1: SerialNumber: syz [ 371.213163][T13706] jfs_create: dtSearch returned -17 [ 371.230802][ T6333] cp210x 6-1:0.0: cp210x converter detected [ 371.419763][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 371.540164][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.550732][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 371.561781][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.575180][ T7] usb 2-1: config 0 descriptor?? [ 371.580660][ T6339] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 0 [ 371.590563][ T6339] usb 5-1: unit 14 not found! [ 371.617069][ T6339] usb 5-1: USB disconnect, device number 26 [ 371.632944][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 371.669820][ T6333] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 371.713509][ T6333] usb 6-1: cp210x converter now attached to ttyUSB0 [ 371.861866][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.914732][T12991] usb 6-1: USB disconnect, device number 19 [ 371.925922][T12991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 371.938329][T12991] cp210x 6-1:0.0: device disconnected [ 372.452743][T13716] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 372.482697][T13717] loop6: detected capacity change from 0 to 512 [ 372.499935][ T7] gspca_vc032x: reg_w err -71 [ 372.504989][ T7] vc032x: probe of 2-1:0.0 failed with error -71 [ 372.536363][ T7] usb 2-1: USB disconnect, device number 21 [ 372.568924][T13717] EXT4-fs (loop6): Ignoring removed bh option [ 372.633528][T13717] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 372.720228][T13717] EXT4-fs (loop6): 1 truncate cleaned up [ 372.802134][T13717] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 373.024646][T13743] loop4: detected capacity change from 0 to 736 [ 373.124909][T13738] loop5: detected capacity change from 0 to 8192 [ 373.206629][T13738] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 373.410738][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3678'. [ 373.570798][T13760] loop5: detected capacity change from 0 to 64 [ 374.365063][T13794] loop5: detected capacity change from 0 to 128 [ 374.483319][T13793] loop6: detected capacity change from 0 to 4096 [ 374.492861][T13794] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.505132][T13794] ext4 filesystem being mounted at /484/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.609823][T13805] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.011715][T13821] loop1: detected capacity change from 0 to 1024 [ 375.187138][T13829] loop4: detected capacity change from 0 to 256 [ 375.238857][T13829] exfat: Deprecated parameter 'utf8' [ 375.286211][T13829] exfat: Deprecated parameter 'namecase' [ 375.312741][T13829] exfat: Deprecated parameter 'namecase' [ 375.332928][T13829] exfat: Deprecated parameter 'utf8' [ 375.414528][T13829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 375.591767][ T6333] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 375.900177][T13842] loop4: detected capacity change from 0 to 128 [ 375.996765][ T6333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.058914][T13842] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.108506][ T6333] usb 2-1: config 0 has no interfaces? [ 376.119997][ T6333] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.129363][ T6333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.138193][T13842] ext4 filesystem being mounted at /778/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.244340][ T6333] usb 2-1: config 0 descriptor?? [ 376.462130][T13849] loop4: detected capacity change from 0 to 64 [ 376.685987][ T6333] usb 2-1: USB disconnect, device number 22 [ 376.925816][T13863] bond0: (slave bond_slave_1): Releasing backup interface [ 376.973280][T13863] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 377.089374][T13871] loop6: detected capacity change from 0 to 128 [ 377.222394][T13871] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.339831][T13871] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.444334][T13881] loop1: detected capacity change from 0 to 256 [ 377.550291][T13881] exfat: Deprecated parameter 'utf8' [ 377.555749][T13881] exfat: Deprecated parameter 'namecase' [ 377.580078][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3732'. [ 377.589246][T13881] exfat: Deprecated parameter 'namecase' [ 377.626596][T13881] exfat: Deprecated parameter 'utf8' [ 377.701583][T13881] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 378.197397][T13859] loop5: detected capacity change from 0 to 32768 [ 378.348449][T13859] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 378.372831][T13904] loop1: detected capacity change from 0 to 1024 [ 378.390485][T13859] BTRFS info (device loop5): force clearing of disk cache [ 378.398144][T13859] BTRFS info (device loop5): metadata ratio 0 [ 378.449879][T13859] BTRFS info (device loop5): enabling ssd optimizations [ 378.456936][T13859] BTRFS info (device loop5): using spread ssd allocation scheme [ 378.562000][T13859] BTRFS info (device loop5): using free space tree [ 378.578141][ T154] hfsplus: b-tree write err: -5, ino 25 [ 378.584923][ T154] hfsplus: b-tree write err: -5, ino 4 [ 378.639595][T13859] BTRFS info (device loop5): has skinny extents [ 378.649905][ T154] hfsplus: b-tree write err: -5, ino 2 [ 378.763073][T13879] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.3729 (13879) [ 378.807148][T13879] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 378.837538][T13879] BTRFS info (device loop4): using free space tree [ 378.857440][T13879] BTRFS info (device loop4): has skinny extents [ 378.882393][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.085193][T13859] BTRFS info (device loop5): clearing free space tree [ 379.108349][T13859] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 379.187875][T13859] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 379.267580][T13879] BTRFS info (device loop4): enabling ssd optimizations [ 379.342125][T13859] BTRFS info (device loop5): creating free space tree [ 379.412273][T13859] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 379.469097][T13859] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 379.504146][T13970] set_capacity_and_notify: 1 callbacks suppressed [ 379.504163][T13970] loop6: detected capacity change from 0 to 512 [ 379.718346][T13970] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 379.771326][T13970] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.110414][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.156804][T13925] loop1: detected capacity change from 0 to 32768 [ 380.661356][T13996] program syz.2.3763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.816149][ T4252] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 380.828018][ T4252] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 380.836672][ T4252] CPU: 0 PID: 4252 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 380.844332][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.854692][ T4252] Workqueue: writeback wb_workfn (flush-7:1) [ 380.860835][ T4252] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 380.867462][ T4252] Code: df 41 80 3c 04 00 74 08 48 89 df e8 d2 20 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 aa 20 ec fd 41 bf 90 00 00 00 4d 03 [ 380.887302][ T4252] RSP: 0018:ffffc900031ef260 EFLAGS: 00010202 [ 380.893399][ T4252] RAX: 00000000000000ba RBX: ffff88806909a8c8 RCX: dffffc0000000000 [ 380.901382][ T4252] RDX: 0000000000000000 RSI: ffffffff96483e40 RDI: ffff88806909a8c0 [ 380.909385][ T4252] RBP: 1ffff1100d213521 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 380.917376][ T4252] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff1100d213519 [ 380.925357][ T4252] R13: ffff88806909a908 R14: 00000000000005d0 R15: ffff88802c3fbbac [ 380.933337][ T4252] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 380.942395][ T4252] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.948983][ T4252] CR2: 00007f3b5c309158 CR3: 00000000640fa000 CR4: 00000000003526f0 [ 380.957043][ T4252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.965015][ T4252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.972987][ T4252] Call Trace: [ 380.976264][ T4252] [ 380.979198][ T4252] bio_associate_blkg+0x23a/0x340 [ 380.984232][ T4252] lbmStartIO+0x204/0x4c0 [ 380.988576][ T4252] lbmWrite+0x361/0x480 [ 380.992751][ T4252] jfs_flush_journal+0x537/0xec0 [ 380.997706][ T4252] ? lmLogShutdown+0x850/0x850 [ 381.002485][ T4252] ? __lock_acquire+0x7d10/0x7d10 [ 381.007512][ T4252] ? do_raw_spin_lock+0x128/0x2f0 [ 381.012656][ T4252] ? __rwlock_init+0x140/0x140 [ 381.017435][ T4252] jfs_write_inode+0x12b/0x220 [ 381.022480][ T4252] __writeback_single_inode+0x6c3/0xda0 [ 381.028145][ T4252] writeback_sb_inodes+0xa4e/0x1680 [ 381.033411][ T4252] ? queue_io+0x550/0x550 [ 381.037931][ T4252] ? rcu_is_watching+0x11/0xa0 [ 381.042707][ T4252] wb_writeback+0x45d/0xbe0 [ 381.047392][ T4252] ? rcu_lock_release+0x20/0x20 [ 381.052344][ T4252] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 381.058420][ T4252] ? mark_lock+0x94/0x320 [ 381.062945][ T4252] ? _raw_spin_unlock_irq+0x1f/0x40 [ 381.068295][ T4252] wb_workfn+0x43a/0xf20 [ 381.072846][ T4252] ? inode_wait_for_writeback+0x220/0x220 [ 381.078677][ T4252] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 381.084760][ T4252] ? read_lock_is_recursive+0x10/0x10 [ 381.090158][ T4252] ? __schedule+0x11f7/0x43c0 [ 381.094930][ T4252] ? _raw_spin_unlock_irq+0x1f/0x40 [ 381.100364][ T4252] process_one_work+0x85f/0x1010 [ 381.105380][ T4252] ? worker_detach_from_pool+0x240/0x240 [ 381.111025][ T4252] ? lockdep_hardirqs_off+0x70/0x100 [ 381.116316][ T4252] ? _raw_spin_lock_irq+0xb7/0xf0 [ 381.121440][ T4252] ? _raw_spin_lock_irqsave+0x100/0x100 [ 381.127346][ T4252] ? wq_worker_running+0x97/0x170 [ 381.132385][ T4252] worker_thread+0xaa6/0x1290 [ 381.137078][ T4252] kthread+0x436/0x520 [ 381.141149][ T4252] ? rcu_lock_release+0x20/0x20 [ 381.146001][ T4252] ? kthread_blkcg+0xd0/0xd0 [ 381.150703][ T4252] ret_from_fork+0x1f/0x30 [ 381.155128][ T4252] [ 381.158149][ T4252] Modules linked in: [ 381.177943][ T4252] ---[ end trace b1581d53bc32704e ]--- [ 381.184207][ T4252] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 381.191223][ T4252] Code: df 41 80 3c 04 00 74 08 48 89 df e8 d2 20 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 aa 20 ec fd 41 bf 90 00 00 00 4d 03 [ 381.211329][ T4252] RSP: 0018:ffffc900031ef260 EFLAGS: 00010202 [ 381.217748][ T4252] RAX: 00000000000000ba RBX: ffff88806909a8c8 RCX: dffffc0000000000 [ 381.226032][ T4252] RDX: 0000000000000000 RSI: ffffffff96483e40 RDI: ffff88806909a8c0 [ 381.234168][ T4252] RBP: 1ffff1100d213521 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 381.242269][ T4252] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff1100d213519 [ 381.250659][ T4252] R13: ffff88806909a908 R14: 00000000000005d0 R15: ffff88802c3fbbac [ 381.258659][ T4252] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 381.267642][ T4252] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.275872][ T4252] CR2: 0000001b2e11eff8 CR3: 000000006827f000 CR4: 00000000003506e0 [ 381.284272][ T4252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.292589][ T4252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.300859][ T4252] Kernel panic - not syncing: Fatal exception [ 381.307563][ T4252] Kernel Offset: disabled [ 381.311990][ T4252] Rebooting in 86400 seconds..