last executing test programs: 2.735803217s ago: executing program 1 (id=992): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 2.417064324s ago: executing program 1 (id=993): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0xea60}}) 2.21255709s ago: executing program 1 (id=995): unshare(0x2a020400) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x7}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20e5, r0}, 0x94) 2.045243654s ago: executing program 1 (id=997): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) 1.902414606s ago: executing program 1 (id=998): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61d3, &(0x7f0000008140)="$eJzs3c1vHGcdB/DfvvqltLV6qEqFkJuWl1KaxEkJgQJND3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0XER09FbG2vr9aLLxyyH9/9499/98Mn3vrbHwbn/vunO73XJ6139+6v/vPne0fbZgAAAChNVVVVJ33Mfz59vu+23SkAYCry63+V5OWnvv71P9/6yyz1R61Wq9XqKdRN1Xj3mkVEbDRvU79ncDgeAE6Yjfi47S7QIvkXrR8RT7TdCWCmddruAMdia3t9tZPy7TRfD5Z32/O5IPvy3+g8uL5j0vQgo+eYTOvxtRm9eGZCfxam1IdZkvPvjuZ/bbd9mNY77vynZVL+w91Ln4qT8++N5j/i9OTfHZt/qXL+/UfKvyd/AAAAAACYYfn//5daPv47d/RNOZRPOv67PKU+AAAAAAAAAMDjdtTx/x4w/h8AAADMrPqzeu03T+0tm/RdbPXyq52IJ0fWBwqTLpZZbLsfAAAAAAAAAAAAAFCS/u45vFc7EYOIeHJxsaqq+qdptH5UR739SVf69kPJ2n6SBwCAXR89NXItfydiPiKupu/6GywuLlbV/MJitVgtzOX3s8O5+Wqh8bk2T+tlc8NDvCHuD6v6l803btd00Oflg9pHf199X8Oqd4iOPSaD9Nec0NxS2ACQ7L4abXlFOmWq6ulJbz5gH/v/KbQUS20/rph9bT9MAQAAgONXVVXVSV/n/Xw65t9tu1MAwFTk1//R4wJHqrsT2iMez+9Xq9VqtVr9qeqmarx7zSIiNpq3qd8zGI4fAE6Yjfi47S7QIvkXrR8Rz7XdCWCmddruAMdia3t9tZPy7TRfD9L47vlckH35b3R2bpdvP256kNFzTKb1+NqMXjwzoT/PTqkPsyTn3x3N/9pu+zCtd9z5T8uk/Ic7l8yVJ+ffG81/xOnJvzs2/1Ll/PuPlH9P/gAAAAAAMMPy//8vOf6bNxkAAAAAAAAATpyt7fXVfN1rPv7/uTHruf7zdMr5dx41/4U0L/8TLeffHcn/yyPr9Rrz99/c2///vb2++vs7//psnh42/7k800mPrE56RHTSPXX6aXqUrXvY5qA3rO9p0On2+umcn2rwTtyIm7EW5/et201/j732lX3tdU8H+9ov7GvvP9R+cV/7IH3vQLWQ28/GavwkbsbbO+1129wB2z9/QHt1QHvOv+f5v0g5/37jp85/MbV3Rqa1+x92H9rvm9Nx93Plxud/ef74N+dAm9F7sG1N9fadaaE/O3+TJ4bxs9trt87evX7nzq2VSJN9Sy9EmjxmOf/Bzs/c3vP/i7vt+Xm/ub/e/3D4yPnPis3oT8z/xcZ8vb0vT7lvbcj5D9NPzv/t1D5+/z/J+U/e/19poT8AAAAAAAAAAAAAAADwSaqq2rlE9EpEXErX/7R1bSYAMF1XIu5Fej9Qy8vVarVarVafvrqpGu+NZhERf23e5lJE/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpS213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+aWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOMvxM743Gcnjf99Jh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5v9AY77zO//mR4ddLGP91dMz7EuT8zzQez3X+XxpZr5l/9duZy3/jsCtuRndf/ufuvPfTc7ff/+DVG+9df3ft3bUfX1xZOX/x0qXLly+fe+fGzbXzu/8eT69nQM4/j33tPNCy5Pxz5vIvS87/C6mWf1ly/l9MtfzLkvPP7/fkX5acf/7sI/+y5PxfTrX8y5Lz/0qq5V+Wre31uTr/V1It/7Lk/f+rqZZ/WXL+r6Za/mXJ+Z9NtfzLkvM/l+pD5O/r4U+RnH8+wmX/L0vOfyXV8i9Lzv9CquVflpz/xVTLvyw5/9dSLf+y5Py/lmr5lyXnfynV8i9Lzv/rqZZ/WXL+l1Mt/7Lk/L+RavmXJef/zVTLvyw5/9dTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5v5Fq+Zdl7/v/zZgxYybPtP3MBAAAAAAAAAAAAACMmsbpxG1vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TevHUIMhODkb2CTmBCSJbu2E7/wb4oJrw1QCiQU+oLjetdmwW947RIokk0DJRJGpRVV04u2gFAbqaqIKi5oRWkuqr5clfaC3lRUlZAaVQEFVKS2otlq5jzP45nZ2Zld73h99jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnH+s42iKJp/Wn9tL4oXND/eOrW9ddnrrvUWAgAAAOv1v62/n7shXXBoFTdqW+ZvX/EPX19aWloq3j/6O+NfXFpKV0wVxfiWomhdFz31bx9otC8TPFZMNkbaPh8ZsPrRAdePDbh+fMD1EwOu3zLg+skB1y/bActsLX8e07qzXa0Pt5e7tLixGG9dt6vHrR5rbBkZiT/LaWm0brM0fqxYKE4U88Vsx/Llso3W8t+8tbmutxVxXSNt69rZPEJ++MmjcRsaYR/v6ljX5fuMvv+GYupHP/zk0T869+zNvebA3dBxf+V23nlbczs/HS4pt7VRbEn7JG7nSNt27uzxnIx2bGejdbvmx93b+dwqt3P08mZuqO7nfLIYaX387dZ+Gmv/sV7aTzvDZf91e1EUFy9vdvcyy9ZVjBTbOi4Zufz8TJZHZPM+mofSi4uxNR2nt67iOG3OuV2dx2n3ayI+/7eG242tsA3tT9P3PzWx7Hlf63EaNR/1Sq+V7mNw2K+VqhyD8bj4dutBP97zGNwVHv8n71j5GOx57PQ4BtPjbjsGbxt0DI5MjLa2OT0JjdZtLh+DuzuWH22tqdGaz9zR/xicOXfyzMzixz/x2oWTR47PH58/tXf37tm9+/YdOHBg5tjCifnZ8u8r3NvVt60YSa+B28K+i6+BV3ct236oLn15eK/DyT6vw+1dyw77dTjW/eAaG/OCXH5Ml6+Nh5o7ffLSSLHCa6z1/Ny1/tdhetxtr8Oxttdhz68pPV6HY6t4HTaXOXPX6r5nGWv702sbrtbXgu1tx2D39yPdx+Cwvx+pyjE4GY6Lf7lr5a8FO8P2Pj691u9HRpcdg+nhhvee5iXp+/3JA63R67i8pXnFdRPF+cX5s/c8euTcubO7izA2xEvajpXu43Vb22Mqlh2vI2s+Xg8tvOLxW3pcvj3sq8nXNv+aXPG5ai5z7z39n6vWV7fe+7Pj0j1FGEO20fuz11fz5v5MWbLP/mwu8+mZ9X8vnnJp2/vv+ArvvzH3P1+uL93VY6PjY+XrdzTtnfGO9+POp2qs9d7VaK37uZnVvR+Phz8b/X58Y5/34x1dyw77/Xi8+8HF9+PGoJ92rE/38zkZjpMTs/3fj5vL7Niz1mNyrO/78e1hNsL+f01ICikXtR07Kx23aV1jY+PhcY3FNXQep3s7lh8P2ay5rif3XNlxeuft5X2Npkd32UYdp1Ndyw77OE3vVysdp41BP327Mt3P52Q4Lm7c2/84bS7z9L3rf+/cGj9se++cGHQMjo9ONLd5PB2E5fv90tZ4DN5THC1OFyeKuda1E63jqdFa1/R9qzsGJ8KfjX6v3NHnGLyza9lhH4Pp69hKx15jbPmDH4Lu53MyHBdP3Nf/GGwu86b9w/3e9c5wSVqm7XvX7p+vrfQzr1u6dtPV/JlXczv/en//n802lzlxYK05s/9+ujtccl2P/dT9+l3pNTVXbMx+2hG289kDK++n5vY0l/niwVUeT4eKorjw0QdaP+8N/77yZ+e/8/WOf3fp9W86Fz76wA+uP/Y3a9l+ADa/58uxrfxa1/YvU6v5938AAABgU4i5fyTMRP4HAACA2oi5P/6v8ET+BwAAgNqIuX8szCST/L/jTc8uPH+hSM38pSBen3bDg+VyseM6Gz6fWrqsefkDX53/8V9cWN26R4qi+MmDv9Zz+R0Pxu0qTYXtfOrNnZcvv+GFVa3/kYcvL9feX/9SuP/4eFZ7GPSq4M4WRfHNGz7fWs/UBy615tMPPtKa77n4+GPNZZ47WH4eb//MS8rlfz+Ufw8dO9Jx+2fCfvhemLNv770/4u2+duk1O/e/7/L64u0at72w9bCf+GB5v/H35HzhsXL5uJ9X2v6//NyTX2su/+irem//hZHe2/9kuN+vhvnfLy+Xb38Omp/H230mbH9cX7zdPV/5Vs/tf+qz5fJn3lIu90iYcf13hs93veXZhfb99WjjSMfjKt5aLhfXP/ud32xdH+8v3n/39k8evtSxP7qPj6f/qbyfma7l4+VxPdGfd62/eT/tx2dc/5O/8UjHfh60/qfe88zLm/fbvf67u5Yb7bp9929s+oPPfL7n+uL2HPrTMx2P59C7w+s4rP+JD4bjMVz/P099vmO90SPv7nz/ict/afuFjscTve1H5fqfev3x1vz3qR//3nUvuP6FF1/Z3HdF8e33lvc3aP3H//B0x/Z/+aa7Ws9HvD529LvXv5K4/rMfmz51evH8wlzbXm397px3lNuzZXLrtub23hDeW7s/P3z63Ifmz07NTs0WxVR9f4XeFftKmD8ox8W13v6uh8PzecvvfnPbHf/4uXj5Pz9UXn7p7eXXrVeH5b4QLt9ePn9LjXWu/4lbb2q9vhtPl5939NiHYOeu/ziwqgXD4+/+viAe72de+qHWfmhe1/q6EV/X69z+786V9/ONsF+Xwm9mvu2my+trXz7+boRL7y1f7+vef+FtLj6vfxye73d+r7z/uF3x8X43fB/zrR2d73fx+PjGhZHu+2/9Fo+L4f2kuFheH5eK+/vSczf13Lz4e0iKize3Pv/tdD83r+lhrmTx44szJxZOnX905tz84rmZxY9/4vDJ0+dPnTvc+l2ehz886PaX35+2td6f5ub33VvMbi2K4nQxuwFvWFdn+5sfrW77zzx8dG7/7B1z88eOnD927uEz82ePH11cPDo/t3jHkWPH5j826PYLc/fv3nNw7/4908cX5u4/cPDg3oPTC6dONzej3KgB9s1+ZPrU2cOtmyzef+/B3ffdd+/s9MnTc/P375+dnT4/6Patr03TzVv/6vTZ+RNHzi2cnJ9eXPjE/P27D+7bt2fgbwM8eebY4tTM2fOnZs4vzp+dKR/L1LnWxc2vfYNuTz0t/mv5/Wy3RvmL+Ip33b0v/X7Wpq9+asW7Khfp+gWiz4bfRfP3LzpzYDWfx9w/HmaSSf4HAACAHMTcPxFmIv8DAABAbcTcvyXMRP4HAACA2oi5fzLMJJP8r/+v/7+6/n95vf5/Xv3/Mx8te6Wbvf8f+/P6/3m4xv3/da9f/1//v379/9X35zf79uv/6/+zXNX6/zH3by2KLPM/AAAA5CDm/m1hJvI/AAAA1EbM/deFmcj/AAAAUBsx978gzCST/K//v6r+/55Bhav69/+d/1//v9ic/f/45Oj/Z2PN/fv3PdTxqf5/oP+v/6//r/+v/8+6ja94TY/+f+tX81/t/n/M/deHmWSS/wEAACAHMfe/MMxE/gcAAIDaiLn/hjAT+R8AAABqI+b+7WEmmeR//X/n/9f/1/9ff/+/c42V6v+v9/z/bRuj/785OP9/f/r/A1xx/39S/38z9v/Hh7v91e7/D9x8/X+uiqqd/z/m/heFmWSS/wEAACAHMfe/OMxE/gcAAIDaiLn/JWEm8j8AAADURsz9N4aZZJL/9f/1//X/9f9rff7/9fb/+57/v/xI/79a9P/70/8fwPn/8+r/D3n7q93/H/b5/8ff3H17/X96qVr/P+b+l4aZZJL/AQAAIAcx998UZiL/AwAAQG3E3P+yMBP5HwAAAGoj5v4dYSaZ5H/9f/1//X/9f/3/3usf3P8v6f9Xi/5/f/r/A+j/6//r/6+u/9/jm9/O/n/8aqn/n7uq9f9j7r85zCST/A8AAAA5iLn/ljAT+R8AAABqI+b+/xdmIv8DAABAbcTcvzPMJJP8r/+v/6//n1f//+4J/X/9/3rT/+9P/38A/X/9f/3/VZ7/f7m1nP9/y6A7ozaq1v+Puf/lYSaZ5H8AAADIQcz9rwgzkf8BAACgNmLuf2WYifwPAAAAtRFz/1SYSSb5X/+/Xv3/P/mrJ15Z6P/r/w9Yf037//Ew0P/PnP5/f/r/A+j/6//r/29I/598VK3/H3P/rWEmmeR/AAAAyEHM/beFmcj/AAAAUBsx998eZiL/AwAAQG3E3L8rzCST/K//X6/+f6T/r//fb/017f8n+v950//voe1Fqv8/gP6//n/2/f/43a/+P8NRtf5/zP2vCjPJJP8DAABADmLuvyPMRP4HAACA2oi5/9VhJvI/AAAA1EbM/XeGmWSS//X/9f/1//X/9f97r1//f3PS/+9vrf3/Cf1//X/9/8z6/87/z3BVrf8fc/9rwkwyyf8AAACQg5j77wozkf8BAACgNuL/3yz/36v8DwAAAHUUc/90mEkm+V//X/8/p/5/Q/9f/1//v/b0//tz/v8B9P/1/ze0///9js/69P8n2g73Fen/U0VV6//H3P/aMJNM8j8AAADkIOb+e8JM5H8AAACojZj7Z8JM5H8AAACojZj7Z8NMMsn/+v/6/zn1/53/X/9f/7/+9P/70/8fQP9f/79u5/8vCv1/rqmq9f9j7t8dZpJJ/gcAAIAcxNy/J8xE/gcAAIDaiLl/b5iJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9/97rr3j/v6H/35v+f3/6/wPo/+v/163/7/z/XGNV6//H3H9fmEkm+R8AAAByEHP/vjAT+R8AAABqI+b+/WEmIf/3+n/dAAAAwOYSc/+BMJNM/v1f/78m/f9f/7uOdev/6//3W/9w+v9b9f/DdP7/aqlp/7/7ZXHF9P8H0P/X/9f/1/9nqKrW/4+5/2CYSSb5HwAAAHIQc//rwkzkfwAAAKiNmPv/f5iJ/A8AAAC1EXP/T4WZZJL/9f9r0v/vov+v/99v/c7/r/9fZzXt/w9Nrfr/I/r/+v/V2n79f/1/lrv6/f/40er6/zH33x9mkkn+BwAAgBzE3P/TYSbyPwAAANRGzP2vDzOR/wEAAKA2Yu4/FGZSt/z/st4X6//r/+v/6/9fnf7/64tuVez/Nw8e/f960f/vr1b9f+f/1/+v2Pbr/+v/s1zVzv8fc/8bwkzqlv8BAAAgYzH3PxBmIv8DAABAbcTc/8YwE/kfAAAAaiPm/jeFmWSS//X/9f/1//X/nf+/9/r1/zcn/f/+9P8H0P/X/9f/1/9nqKrW/4+5/81hJpnkfwAAAMhBzP1vCTOR/wEAAKA2Yu5/a5iJ/A8AAAC1EXP/28JMMsn/+v/6//r/+v/6/73Xr/+/Oen/96f/P4D+v/6//r/+P0NVtf5/zP0/E2aSSf4HAACAHMTc/2CYifwPAAAAtRFz/9vDTOR/AAAAqI2Y+98RZpJJ/tf/1//X/9f/1//vvX79/81J/78//f8B9P/1//X/9f+5EltXuqJq/f+Y+98ZZpJJ/gcAAIAcxNz/s2Em8j8AAADURsz97wozkf8BAACgNmLu/7kwk0zyv/6//n+1+v9LF9pvp/+v/18Mq//fvJH+fxb0//vT/x+gR/9/i/6//r/+v/4/V6xq/f+Y+98dZpJJ/gcAAIAcxNz/njAT+R8AAABqI+b+94aZyP8AAABQGzH3PxRmkkn+1//Psv8/EnvL1ev/O/+//r/z/+v/r4/+f3/6/wM4/7/+v/6//j9DVbX+f8z9D4eZZJL/AQAAIAcx978vzET+BwAAgNqIuf/nw0zkfwAAAKiNmPvfH2aSSf7X/8+y/1/h8//Xrf8/1nF85NT/n2x7PtNxqf+v/78B9P/70/8fQP9f/7/K/f9wNG9d4fb6/1RR1fr/Mfd/IMwkk/wPAAAAOYi5/xfCTOR/AAAAqI2Y+38xzET+BwAAgNqIuf+Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Oen/96f/P4D+v/5/lfv/A+j/U0VV6//H3P/LYSYrBr8f/OcqHiYAAABQITH3fzDMJJN//wcAAIAcxNx/OMxE/gcAAIDaiLn/kTCTTPK//n93/z+eUVX/X/9f/1//X/9/Mxpe//9l1xeF/r/+v/6//r/+v/4/61G1/n/M/UfCTDLJ/wAAAJCDmPt/JcxE/gcAAIDaiLn/aJiJ/A8AAAC1EXP/XJhJJvn/Gvb/x6vZ/3f+/yvt//9E/1//P9D/703/f2M4/39/+v8D6P/r/+v/6/8zVFXr/8fcPx9mkkn+BwAAgBpLPw6Ouf9YmIn8DwAAALURc//xMBP5HwAAAGoj5v4PhZlkkv+d/1//3/n/r0X/f6xjef3/kv6//v8w6P/3p/8/gP6//r/+v/4/Q1W1/n/M/QthJpnkfwAAAMhBzP0fDjOR/wEAAKA2Yu7/SJiJ/A8AAAC1EXP/iTCTTPK//r/+f+79/0ZRXHT+f/3/XuvX/9+c9P/70/8fQP9f/39T9f+f+K32z/T/qaKq9f9j7j8ZZpJJ/gcAAIAcxNx/Ksz/Y+8+miQ7szoOp0TbIAL4CKxZsYSV+Ahs2RHBmsAJ4ZGE9yC8N8J7GO9HMxrvNd6PxnursZqJqAlVn3PUVZV1b3dXduW973mezaE7upRZrZJafyp+c4v9DwAAAMPI3f8jcYv9DwAAAMPI3f+jcUuT/a//1/937/83e3n+/9Ffr/+/Rv+v/9+FE/39he2/7rQo/NT+/7u/5+4f1P/r//X/k/T/nv+v/+e4pfX/uft/LG5psv8BAACgg9z9Px632P8AAAAwjNz9PxG32P8AAAAwjNz9d8ctTfa//l//r//X/x/p/x/S/+v/183z/6fp/2fo//X/+n/9Pzu1tP4/d/9Pxi1N9j8AAAB0kLv/nrjF/gcAAIBh5O7/qbjF/gcAAIBh5O7/6bilyf7X/+v/9f9r6f8vef7/sc9H/6//30b/P03/P0P/r//X/+v/2aml9f+5+38mbmmy/wEAAKCD3P0/G7fY/wAAADCM3P0/F7fY/wAAADCM3P0/H7c02f9d+v9Hjv1Y/6//v/73ax39/zk9/1//r/9fuQc3T/47Qf9/kv5/xkz/v9no/6fccD+//dNbz/s/hf5f/89JS+v/c/f/QtzyfZvNpVv9JAEAAIBFyd3/i3FLk+//AwAAQAe5+++NW+x/AAAAGEbu/vvilib7v0v/f5z+X/9//e+X/l//v+319f/r5Pn/087e/3/Xd/zwD/Xt/z3/f5rn/++6/3/iK0P/z7otrf/P3X9/3NJk/wMAAEAHuft/KW6x/wEAAGAYuft/OW6x/wEAAGAYuft/JW5psv/1/6P1/99y5OOu6/8Paxf9v/5f/6//H53+f5rn/884/Nfc1fqh/l//7/n/+n/OZmn9f+7+X41bmux/AAAA6CB3/6/FLfY/AAAADCN3/6/HLfY/AAAADCN3/2/ELU32v/5/tP7/6Md5/n/1//d827Vfov/X/+v/B6f/n6b/nzHK8/9v8atm3/38Wd2u93+g/9f/c8uW1v/n7v/NuKXJ/gcAAIAOcvf/Vtxi/wMAAMAwcvf/dtxi/wMAAMAwcvf/TtzSZP/r//X/6+j/8xU8/1//f/v7/6T/Xyf9/zT9/4xR+v9bpP/3/H/9P7u2tP4/d//vxi1N9j8AAAB0kLv/9+IW+x8AAACGkbv/9+MW+x8AAACGkbv/D+KWJvtf/6//X0f/f+bn/+v/9f+e/9+E/n+a/n+G/l//r//X/7NTS+v/c/c/ELc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/+X/9/hv7/wkb/r//X/y+M/n+a/n+G/l//r//X/7NTC+r/r/uoK5s/iVua7H8AAADoIHf/n8Yt9j8AAAAMI3f/n8Ut9j8AAAAMI3f/n8ctTfa//n8x/f9hzrfw/v/g5vr/q5vNZvD+3/P/T+3/r17397O+LvX/+v9zoP+fpv+fof/X/+v/9f/s1IL6/8Mf5+7/i7ilyf4HAACADnL3/2XcYv8DAADAMHL3/1XcYv8DAADAMHL3/3Xc0mT/6/8X0/8fWnj/7/n/+v8jf13P/79G/78s+v9p+v8Z+n/9v/5f/89OLa3/z93/N3HTpYu3/CkCAAAAC5O7/2/jlibf/wcAAIAOcvf/Xdxi/wMAAMBKPXDiZ3L3/33c0mT/6/932/9fuu7n9P/6/+NfH/p//b/+//bT/0/T/8/Q/+v/9f/6f3Zqaf1/7v5/iFua7H8AAADoIHf/g3GL/Q8AAADDyN3/j3GL/Q8AAADDyN3/T3FLk/2v//f8f/2//l//v/319f/rpP+fpv+fof/X/++3/7/85P+p/2cMN9H/Hxwc3Hvb+//c/f8ctzTZ/wAAANBB7v5/iVvsfwAAABhG7v5/jVvsfwAAABhG7v5/i1ua7H/9f9P+P7/U19X/37fZ6P/1//p//f80/f80/f8M/b/+3/P/9f/s1NKe/5+7/9/jlmPD786b+iwBAACAJcnd/x9xS5Pv/wMAAEAHufv/M26x/wEAAGAYufv/K25psv/1/037f8//1//r/8+7/398o/8/F6vo/6+e/vpL7//v1//r/ye06/+//3uP/FD/r/9v6fh/uB2ztP4/d/9/xy1N9j8AAAB0kLv/f+IW+x8AAACGkbv/f+MW+x8AAACGkbv//+KmC032v/5f/6//1//r/7e//jk////SZrPR/+/AKvr/CUvv/3fz/P/TY1H9v/5/ze9f/6//56Sl9f+5+/8/bmmy/wEAAKCD3P1PiVvsfwAAABhG7v6nxi32PwAAAAwjd//T4pYm+1//r//X/+v/h+//719F/+/5/zui/5+2jP7/dPp//f+a37/+X//PjdtX/5+7/+lxS5P9DwAAAB3k7n9G3GL/AwAAwDBy9z8zbrH/AQAAYBi5+58VtzTZ//p//f/N9P/5PvX/Y/X/lxfX/1858tdr8vx//f+O6P+n6f9n6P/1//r/B/T/7NLSnv+fu//ZcUuT/Q8AAAAd5O5/Ttz6f93a/wAAADCM3P3PjVvsfwAAABhG7v7nxS1N9r/+X//v+f/6/+Gf/6//b0X/P03/P0P/r//X/3v+Pzu1tP4/d//z45Ym+x8AAAA6yN3/grjF/gcAAIBh5O5/Ydxi/wMAAMAwcvc/FLc02f/6f/2//l//r/+/9vdQ/z8G/f+08+n/r+r/9f/Vz98R/xTo//X/cx/PmJbW/+fuf1Hc0mT/AwAAQAe5+18ct9j/AAAAMIzc/Q/HLfY/AAAArNKFLT+Xu/8lcUuT/a//1/+frf8/+rr6f/3/ZqX9/7bX1/+v0176//yi0P97/n/o0/9/55Efre35/8f//NL/6//ZvaX1/7n7Xxq3NNn/AAAA0EHu/pfFLfY/AAAADCN3/8vjFvsfAAAAhpG7/xVxS5P9r//X/3v+v/5f/7/99fX/6+T5/9P0/zP0//P9/Lb/Qa2wtv5/1+9f/6//56Sl9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAAwjd/+r4xb7HwAAAIZxuPszLmu4//X/+n/9v/5f/7/99fX/66T/n6b/n6H/32s/v/b3r//X/3PS0vr/1xx+1JXNa+OWJvsfAAAAOsjd/7q4xf4HAACAYeTuf33cYv8DAADAMHL3vyFuabL/9f/6/3X0/wcHB/c26v/zHzT9/6H5/v9R/T9F/z9N/z9D/6//1//r/9mppfX/ufsfiVua7H8AAADoIHf/G+MW+x8AAACGkbv/TXGL/Q8AAADDyN3/5rilyf7X/y+g/7+i//f8f8//33j+v/5/R/T/0/T/M0bs/6/c+Ke/737+rPb9/vX/+n9OWlr/n7v/LXFLk/0PAAAAHeTuf2vcYv8DAADAMHL3vy1usf8BAABgGLn73x63NNn/+v/z6/+f+L3r8vz/q5vt71//r//X/+v/bzf9/zT9/4wR+/+bsO9+fu3vX/+v/+ek7P/vOPZn4r76/9z974hbjg6/i7fyuQIAAADLkLv/nXFLk+//AwAAQAe5+98Vt9j/AAAAMIzc/e+OW5rsf/3/Ap7/P2D/7/n/278+9P+L7v/v1P+PQf8/Tf8/Q/+v/99D/59/rozV/+dXs/6/u+z/j9tX/5+7/z1xS5P9DwAAAB3k7n9v3GL/AwAAwDBy978vbrH/AQAAYBi5+x+NW67b/9va7lHo//X/+n/9v/5/++vr/9dJ/z/tRvv/y5uz9f9J/6//1/97/r/+v7el9f+5+98ft/j+PwAAAKzOxVN+Pnf/B+IW+x8AAACGkbv/g3GL/Q8AAADDyN3/objlsTv39ZbOlf5f/z9E///wtx5+rP5f/7/R/7en/5/m+f8z9P+76Ofv0v+P0f9vNvp/zm5p/X/u/g/HLb7/DwAAAMPI3f+RuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v8z9v+Haebe+//4WP2//n+j/29P/z9N/z/jNvT/F4/+9Tv0/57/P0j/7/n/7MLS+v/c/R+PW5rsfwAAAOggd/8n4hb7HwAAAIaRu/+TcYv9DwAAAMPI3f+puKXJ/t9b/x+/1fr/1ff/y3j+f3ys/l//v9H/t6f/n6b/n+H5//p//b/+n51aWv+fu//TcUuT/Q8AAAAd5O7/TNxi/wMAAMAwcvd/Nm6x/wEAAGAYufs/F7c02f+e/6//1//r//X/219f/79O+v9p+v/t6m+U/l//r//X/7NTS+v/c/d/Pm5psv8BAACgg9z9X4hb7H8AAAAYRu7+x+IW+x8AAACGkbv/i3FLk/2v/9f/6//1//r/E69/10b/v1r6/2n77P9/4NvnX9bz//fe/+db0P/r//X/7MTS+v/c/V+KW5rsfwAAAOggd/+X4xb7HwAAAIaRu/8rcYv9DwAAAMPI3f/VuKXJ/p/p/y/XL9T/T9L/H33/+v/tXx/6/9X0/4f0/+uk/5/m+f8z9P+e/6//1/+zU0vr/3P3fy1uabL/AQAAoIPc/Y/HLfY/AAAADCN3/9fjFvsfAAAAhpG7/xtxS5P97/n/a+r/79L/6//1//p//f8M/f80/f+MZfX/J/7zQv+/7Pev/9f/c9LS+v/c/d8MAAD//yBlU3A=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000005900)=""/129, 0x81) 1.455174732s ago: executing program 0 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x22020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 1.179236694s ago: executing program 0 (id=1002): unshare(0x2c020400) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, 0x0, 0x0) 1.175703955s ago: executing program 3 (id=1003): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0xf}) 980.63286ms ago: executing program 3 (id=1004): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x8000e6c, 0x2, 0xffff1980, 0xa, 0x4, "d8ad0e98c775e49c83031b8000a138b8ccdb17"}) 968.863272ms ago: executing program 0 (id=1005): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0), 0x7, 0x4ba, &(0x7f0000002040)="$eJzs3E9sFFUcAODfbFta/smKiIKoRTQ2GlsoKBy8YDTxoIkRD3ps2kKQQg2tiRCiS2LwaEi8G49ePXhVb8aTiVc8mhgSYrgAntbM7ky73c4udLt0hf2+ZNn3Zt7se2/fvJk373UJoG+Npv8kEdsi4lpE7IiIUnOC0frb7ZuXpu/cvDQdlWr1xD9JeljcSuOZJHvfmkXGShGlL5PlHQ0WLlw8MzU3N3s+i08snv1kYuHCxVdOn506NXtq9tzksWNHDh86+trkq2uvVEF+ab1u7f18ft+etz+6+u70YL59JHtvrEe3jMZoUVFqXuh2Zj22vSGcDPawIKxJev6nzTVU6/87YiA0HvSLarVaHW69u1JtdnnVFuCBlUSvSwD0Rn6jT59/81fRQGDT/Rl+9NyN4/UHoLTet7NXxLO1jfk8yFDT8203jUbEh5V/v01fcZ/mIQAAGv18PB8JNo3/yhG7G9I9kq2hlCPi0YjYGRGPRcSuiHg86mmfiIgnmz5/ICKqbfIfbYqvHv+Urq+vhu2l47/Xs7Wt5fFfNK6ClQey2PaIfMA8ezD7TsZiaPjk6bnZQ23y+OXNP75uta9x/Je+0vzzsWBWjuuDTRN0M1OLUx1XuMmNyxF7B5vrnwxGJEsrAUlE7ImIvWv43HJD+PRL3+9bigytTHf3+tdUC9fRurBUUf0u4sV6+1diRfsv55i0X5+cGIm52YMT6VlwsDCP336/8l6r/O9a/x//aj7kraM/nch61vql7b+l4fyPfP12uf7lJCJZWq9dWHseV/78quUzTafn/6bkg1o4fy79bGpx8fyhiE3JO/n2y0vbJ5ePzePpe1Tq9R87UNz/d2bHpN/EUxGRnsRPR8QzUX9CTMu+PyKei4gDber/6xvPf9x5/e+vtP4zhde/Fe2/vF7fKpBU6qkLdg2c2X/tTouLx721/5FaaCzbUnz9S1ZcItqUdEVgvd8fAAAAPAhKEbGtYS5pW5RK4+P1OaBdsaU0N7+w+PLJ+U/PzdR/I1COoVI+01WfDx5K8vnPckN8sil+OJs3/mZgcy0+Pj0/N9PTmgNba30+KY0vXQvq/T/1d3emmIH/s9XraH4EBP3ibr1999UNKgiw4dztoX819P9KiyQVfykDDyf3f+hfRf3/iw6OAR4sVX0Z+tpa+r9rBTxcBuP9pXCppyUBNpp7OvSle/qRfMeB6nDxrpFYnThG2n/gQHRWjM0FefUkkI6sepL75k6Oyv83hZZporS2DxyO7rTpyfV/Lad2d/3kr2Z/K9/tFvxhQ/ppUaAnlyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICu+y8AAP//op3a9g==") chdir(&(0x7f0000000100)='./file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 964.673702ms ago: executing program 2 (id=1006): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 821.752284ms ago: executing program 1 (id=1007): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000000)={0x27, 0x0, @private=0xa010101}, 0x60) 798.681645ms ago: executing program 2 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x31]}}, {@size={'size', 0x3d, [0x6b]}}]}) 770.066288ms ago: executing program 3 (id=1009): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0xfff, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x8}}}}}}, 0x0) 702.400563ms ago: executing program 2 (id=1010): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) 662.754226ms ago: executing program 0 (id=1011): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xdaca7de7ff4502d4, 0xa2071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) 662.568566ms ago: executing program 3 (id=1012): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@mblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0) listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x14) 537.692466ms ago: executing program 2 (id=1013): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a", 0x29}], 0x1}, 0x0) 458.315283ms ago: executing program 2 (id=1014): unshare(0x24060400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000600)=""/108, &(0x7f0000000240)=0xffffffffffffffc7) 394.729338ms ago: executing program 2 (id=1015): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x559a, &(0x7f000000cf00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 371.00936ms ago: executing program 0 (id=1016): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600010027bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="140004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 317.219104ms ago: executing program 3 (id=1017): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rmdir(&(0x7f0000000140)='./file0\x00') 263.648509ms ago: executing program 0 (id=1018): r0 = syz_usb_connect$hid(0x5, 0x69, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=1019): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000600)={0x1, 0x1}) kernel console output (not intermixed with test programs): an_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.001006][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.030209][ T5789] Bluetooth: hci2: command tx timeout [ 95.043319][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.068641][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.077617][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.109131][ T5789] Bluetooth: hci1: command tx timeout [ 95.122771][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.153693][ T5886] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 95.165084][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.189253][ T5789] Bluetooth: hci3: command tx timeout [ 95.234233][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.248643][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.258812][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.275069][ T5890] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.363708][ T5892] syz.1.9[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.572308][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.609178][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.612376][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.664961][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.801998][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.838585][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.841113][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.905941][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.212043][ T5906] loop2: detected capacity change from 0 to 256 [ 96.318081][ T5906] FAT-fs (loop2): Directory bread(block 64) failed [ 96.351830][ T5906] FAT-fs (loop2): Directory bread(block 65) failed [ 96.390379][ T5906] FAT-fs (loop2): Directory bread(block 66) failed [ 96.407478][ T5906] FAT-fs (loop2): Directory bread(block 67) failed [ 96.457278][ T5906] FAT-fs (loop2): Directory bread(block 68) failed [ 96.482233][ T5906] FAT-fs (loop2): Directory bread(block 69) failed [ 96.510283][ T5906] FAT-fs (loop2): Directory bread(block 70) failed [ 96.565977][ T5906] FAT-fs (loop2): Directory bread(block 71) failed [ 96.591071][ T5906] FAT-fs (loop2): Directory bread(block 72) failed [ 96.597855][ T5906] FAT-fs (loop2): Directory bread(block 73) failed [ 96.951008][ T5789] Bluetooth: hci0: command tx timeout [ 97.110329][ T5789] Bluetooth: hci2: command tx timeout [ 97.189778][ T5789] Bluetooth: hci1: command tx timeout [ 97.268771][ T5789] Bluetooth: hci3: command tx timeout [ 97.582498][ T5943] netlink: 'syz.1.32': attribute type 2 has an invalid length. [ 97.620095][ T5943] netlink: 'syz.1.32': attribute type 2 has an invalid length. [ 97.683585][ T1192] cfg80211: failed to load regulatory.db [ 97.857718][ T5950] loop2: detected capacity change from 0 to 2048 [ 97.905266][ T5950] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.007547][ T5958] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.191457][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.230389][ T28] audit: type=1326 audit(1754568117.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.41" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ca1d8ebe9 code=0x0 [ 98.288149][ T5965] loop2: detected capacity change from 0 to 16 [ 98.306772][ T5965] erofs: (device loop2): mounted with root inode @ nid 36. [ 98.381670][ T5967] mmap: syz.1.42 (5967) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.399131][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 98.411674][ T28] audit: type=1800 audit(1754568117.327:3): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.40" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 98.437244][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 98.497746][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.530984][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 98.559356][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.610759][ T5969] loop1: detected capacity change from 0 to 128 [ 98.628645][ T23] usb 1-1: config 0 descriptor?? [ 98.700336][ T28] audit: type=1800 audit(1754568117.617:4): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.43" name="file0" dev="loop1" ino=1048613 res=0 errno=0 [ 98.725256][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.921302][ T5976] capability: warning: `syz.2.46' uses deprecated v2 capabilities in a way that may be insecure [ 99.080809][ T5980] capability: warning: `syz.2.48' uses 32-bit capabilities (legacy support in use) [ 99.137202][ T23] logitech 0003:046D:C298.0001: item fetching failed at offset 4/5 [ 99.155517][ T23] logitech 0003:046D:C298.0001: parse failed [ 99.163500][ T23] logitech: probe of 0003:046D:C298.0001 failed with error -22 [ 99.290607][ T28] audit: type=1326 audit(1754568118.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898978ebe9 code=0x7ffc0000 [ 99.367420][ T28] audit: type=1326 audit(1754568118.197:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898978ebe9 code=0x7ffc0000 [ 99.413919][ T28] audit: type=1326 audit(1754568118.207:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f898978ebe9 code=0x7ffc0000 [ 99.463770][ T5875] usb 1-1: USB disconnect, device number 2 [ 99.515703][ T28] audit: type=1326 audit(1754568118.207:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898978ebe9 code=0x7ffc0000 [ 99.609521][ T5990] loop1: detected capacity change from 0 to 256 [ 99.631485][ T5990] exfat: Deprecated parameter 'namecase' [ 99.638483][ T28] audit: type=1326 audit(1754568118.207:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898978ebe9 code=0x7ffc0000 [ 99.677957][ T5986] loop3: detected capacity change from 0 to 4096 [ 99.695785][ T28] audit: type=1326 audit(1754568118.207:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f898978ebe9 code=0x7ffc0000 [ 99.725858][ T28] audit: type=1326 audit(1754568118.207:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8989785ba7 code=0x7ffc0000 [ 99.809671][ T5990] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 100.011267][ T5986] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.699126][ T6015] batadv0: entered promiscuous mode [ 100.718991][ T6015] macvtap1: entered promiscuous mode [ 100.739369][ T6015] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.757209][ T6013] loop2: detected capacity change from 0 to 2048 [ 100.778117][ T6015] batadv0: left promiscuous mode [ 100.854755][ T6020] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.996543][ T6020] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 101.049081][ T6020] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 101.112690][ T6020] Remounting filesystem read-only [ 101.230312][ T5793] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 101.238421][ T5793] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 101.246428][ T5793] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.292014][ T5793] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.352817][ T5793] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.372287][ T6030] loop0: detected capacity change from 0 to 1024 [ 101.404942][ T5793] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 101.412855][ T6030] ======================================================= [ 101.412855][ T6030] WARNING: The mand mount option has been deprecated and [ 101.412855][ T6030] and is ignored by this kernel. Remove the mand [ 101.412855][ T6030] option from the mount to silence this warning. [ 101.412855][ T6030] ======================================================= [ 101.414754][ T5793] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 101.473100][ T5793] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.490075][ T5793] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.502667][ T5793] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.702908][ T6030] hfsplus: bad catalog entry type [ 101.806154][ T6034] loop3: detected capacity change from 0 to 4096 [ 101.842748][ T48] hfsplus: b-tree write err: -5, ino 4 [ 101.856782][ T6039] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.634928][ T6062] loop3: detected capacity change from 0 to 64 [ 103.013073][ T6073] loop0: detected capacity change from 0 to 256 [ 103.027912][ T6073] exfat: Deprecated parameter 'utf8' [ 103.057263][ T6073] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 103.147444][ T6076] [U] ¹ [ 103.159710][ T1192] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.348836][ T1192] usb 2-1: Using ep0 maxpacket: 8 [ 103.367730][ T1192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.418809][ T1192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.456098][ T1192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.497615][ T1192] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 103.529120][ T1192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.564855][ T1192] usb 2-1: config 0 descriptor?? [ 104.034199][ T6099] loop3: detected capacity change from 0 to 512 [ 104.097846][ T6099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.098147][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.128580][ T1192] nzxt-kraken2 0003:1E71:170E.0002: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 104.192792][ T6099] fs-verity (loop3, inode 15): Unknown hash algorithm number: 3 [ 104.335049][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.338801][ T1192] usb 2-1: USB disconnect, device number 2 [ 104.577502][ T6108] loop3: detected capacity change from 0 to 128 [ 104.616761][ T6108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.651885][ T6108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.706881][ T6108] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.790967][ T6108] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.823202][ T6108] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.889418][ T6093] loop2: detected capacity change from 0 to 32768 [ 104.984090][ T6108] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 105.073154][ T6108] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 105.140675][ T6093] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 105.348099][ T5799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.686080][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 106.014828][ T6137] loop1: detected capacity change from 0 to 4096 [ 106.075165][ T6137] NILFS (loop1): invalid segment: Checksum error in segment payload [ 106.107617][ T6137] NILFS (loop1): trying rollback from an earlier position [ 106.149695][ T6141] loop0: detected capacity change from 0 to 1024 [ 106.177245][ T6137] NILFS (loop1): recovery complete [ 106.197028][ T6142] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.213040][ T6141] hfsplus: bad catalog entry type [ 106.292721][ T11] hfsplus: b-tree write err: -5, ino 4 [ 106.358505][ T5875] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.589205][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 106.625569][ T5875] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 106.639900][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.676133][ T5875] usb 3-1: config 0 descriptor?? [ 107.344232][ T5875] usb 3-1: string descriptor 0 read error: -71 [ 107.367903][ T5875] uclogic 0003:256C:006E.0003: failed retrieving string descriptor #200: -71 [ 107.387614][ T5875] uclogic 0003:256C:006E.0003: failed retrieving pen parameters: -71 [ 107.405410][ T5875] uclogic 0003:256C:006E.0003: failed probing pen v2 parameters: -71 [ 107.416913][ T5875] uclogic 0003:256C:006E.0003: failed probing parameters: -71 [ 107.433245][ T5875] uclogic: probe of 0003:256C:006E.0003 failed with error -71 [ 107.463098][ T5875] usb 3-1: USB disconnect, device number 2 [ 107.687959][ T6161] loop3: detected capacity change from 0 to 32768 [ 107.770136][ T6161] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 108.052648][ T6161] XFS (loop3): Ending clean mount [ 108.090796][ T6161] XFS (loop3): Quotacheck needed: Please wait. [ 108.190566][ T11] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x506 dinode [ 108.245741][ T11] XFS (loop3): Unmount and run xfs_repair [ 108.267632][ T11] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 108.298550][ T11] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 108.328553][ T11] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.358664][ T11] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 108.383528][ T11] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 108.415346][ T11] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 108.425586][ T11] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 14 07 86 ad ................ [ 108.440576][ T11] 00000060: ff ff ff ff 66 0c 0c 22 00 00 00 00 00 00 00 08 ....f.."........ [ 108.454044][ T11] 00000070: 00 00 00 01 00 00 00 40 00 00 00 00 00 00 00 08 .......@........ [ 108.525355][ T6161] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 108.617830][ T6161] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x506 dinode [ 108.630002][ T6161] XFS (loop3): Unmount and run xfs_repair [ 108.638692][ T6161] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 108.659393][ T6161] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 108.702356][ T6161] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.729476][ T6161] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 108.745928][ T6161] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 108.748506][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.756752][ T6161] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 108.790036][ T6161] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 14 07 86 ad ................ [ 108.812113][ T6198] process 'syz.2.146' launched './file2' with NULL argv: empty string added [ 108.825739][ T6161] 00000060: ff ff ff ff 66 0c 0c 22 00 00 00 00 00 00 00 08 ....f.."........ [ 108.836298][ T6161] 00000070: 00 00 00 01 00 00 00 40 00 00 00 00 00 00 00 08 .......@........ [ 108.902552][ T5799] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 108.986984][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.999040][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.006216][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 109.018908][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.057393][ T8] usb 2-1: config 0 descriptor?? [ 109.103086][ T6204] loop0: detected capacity change from 0 to 64 [ 109.531372][ T8] wacom 0003:056A:00BA.0004: unbalanced collection at end of report description [ 109.554030][ T8] wacom 0003:056A:00BA.0004: parse failed [ 109.568255][ T8] wacom: probe of 0003:056A:00BA.0004 failed with error -22 [ 109.595423][ T6212] loop3: detected capacity change from 0 to 764 [ 109.622924][ T6212] rock: directory entry would overflow storage [ 109.633468][ T6212] rock: sig=0x4654, size=5, remaining=4 [ 109.743417][ T5832] usb 2-1: USB disconnect, device number 3 [ 109.750129][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 109.881586][ T6216] loop3: detected capacity change from 0 to 256 [ 109.956604][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.993003][ T6216] FAT-fs (loop3): Directory bread(block 64) failed [ 109.998494][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.025189][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.034818][ T6216] FAT-fs (loop3): Directory bread(block 65) failed [ 110.035137][ T6216] FAT-fs (loop3): Directory bread(block 66) failed [ 110.047376][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.059017][ T6216] FAT-fs (loop3): Directory bread(block 67) failed [ 110.066841][ T6216] FAT-fs (loop3): Directory bread(block 68) failed [ 110.102292][ T6216] FAT-fs (loop3): Directory bread(block 69) failed [ 110.111317][ T23] usb 1-1: Product: syz [ 110.116721][ T23] usb 1-1: Manufacturer: syz [ 110.124221][ T6216] FAT-fs (loop3): Directory bread(block 70) failed [ 110.132090][ T23] usb 1-1: SerialNumber: syz [ 110.137003][ T6216] FAT-fs (loop3): Directory bread(block 71) failed [ 110.144577][ T6216] FAT-fs (loop3): Directory bread(block 72) failed [ 110.171777][ T6216] FAT-fs (loop3): Directory bread(block 73) failed [ 110.212280][ T6220] loop2: detected capacity change from 0 to 256 [ 110.393524][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.416864][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.477262][ T23] usb 1-1: 0:2 : does not exist [ 110.619604][ T23] usb 1-1: USB disconnect, device number 3 [ 111.213955][ T6228] loop2: detected capacity change from 0 to 8192 [ 111.237596][ T6224] loop1: detected capacity change from 0 to 32768 [ 111.256302][ T6228] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 111.370469][ T6224] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 111.430928][ T6223] loop3: detected capacity change from 0 to 32768 [ 111.511235][ T6224] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.546399][ T6228] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 111.591254][ T6228] ntfs3: loop2: Failed to load $Extend (-2). [ 111.631465][ T6228] ntfs3: loop2: Failed to initialize $Extend. [ 111.971563][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 111.984767][ T6237] loop3: detected capacity change from 0 to 1024 [ 112.125567][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.519858][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.767077][ T6234] loop0: detected capacity change from 0 to 40427 [ 112.818151][ T5874] IPVS: starting estimator thread 0... [ 112.848599][ T6234] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 112.890797][ T6234] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 112.903128][ T6234] F2FS-fs (loop0): Image doesn't support compression [ 112.912328][ T6234] F2FS-fs (loop0): Image doesn't support compression [ 112.938667][ T6251] IPVS: using max 18 ests per chain, 43200 per kthread [ 112.981392][ T6234] F2FS-fs (loop0): invalid crc value [ 113.072390][ T6234] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.349419][ T6234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.605586][ T6271] loop1: detected capacity change from 0 to 64 [ 113.754405][ T5787] syz-executor: attempt to access beyond end of device [ 113.754405][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.832565][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.903068][ T6269] loop3: detected capacity change from 0 to 4096 [ 113.951237][ T6269] __ntfs_warning: 2 callbacks suppressed [ 113.951255][ T6269] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 114.087627][ T6269] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 114.134613][ T6269] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 114.168923][ T6269] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 114.198252][ T6278] loop2: detected capacity change from 0 to 512 [ 114.207093][ T6269] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 114.266831][ T6278] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.293559][ T6278] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.181: corrupted in-inode xattr: overlapping e_value [ 114.335871][ T6278] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.181: couldn't read orphan inode 15 (err -117) [ 114.396289][ T6269] ntfs: volume version 3.1. [ 114.440078][ T6278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.461747][ T6269] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 114.499662][ T6269] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 114.530719][ T6269] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 114.551759][ T6278] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.2.181: path /41/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 114.697546][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.733598][ T6269] ntfs: (device loop3): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 115.104701][ T6292] nbd: must specify at least one socket [ 115.281994][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 115.330246][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 115.567815][ T6302] loop2: detected capacity change from 0 to 4096 [ 115.626527][ T6307] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.729232][ T6302] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 115.796119][ T6302] Remounting filesystem read-only [ 115.818860][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 115.901598][ T5793] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 115.926470][ T5793] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 115.955583][ T5793] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 115.977103][ T5793] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 116.003971][ T5793] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 116.013982][ T5793] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 116.032793][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.068449][ T23] usb 2-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 116.107182][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.130563][ T23] usb 2-1: config 0 descriptor?? [ 116.136956][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.230132][ T6300] loop3: detected capacity change from 0 to 32768 [ 116.236875][ T6311] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 116.244268][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.301581][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 116.318820][ T6300] non-latin1 character 0x466c found in JFS file name [ 116.326698][ T6300] mount with iocharset=utf8 to access [ 116.499413][ T5874] vhci_hcd: vhci_device speed not set [ 116.516908][ T6309] loop0: detected capacity change from 0 to 32768 [ 116.583394][ T23] ntrig 0003:1B96:000E.0005: unbalanced delimiter at end of report description [ 116.589247][ T5874] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 116.615453][ T23] ntrig 0003:1B96:000E.0005: parse failed [ 116.630004][ T6309] find_entry called with index = 0 [ 116.637192][ T23] ntrig: probe of 0003:1B96:000E.0005 failed with error -22 [ 116.648181][ T6309] read_mapping_page failed! [ 116.663043][ T6309] ERROR: (device loop0): txCommit: [ 116.663043][ T6309] [ 116.699478][ T8] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 116.824405][ T23] usb 2-1: USB disconnect, device number 4 [ 116.930473][ T8] usb 3-1: config 0 has no interfaces? [ 116.936806][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.988032][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.011958][ T8] usb 3-1: config 0 descriptor?? [ 117.203261][ T6322] loop0: detected capacity change from 0 to 512 [ 117.258870][ T6312] vhci_hcd: unknown pdu 1 [ 117.260225][ T8] usb 3-1: USB disconnect, device number 3 [ 117.275868][ T11] vhci_hcd: stop threads [ 117.292075][ T11] vhci_hcd: release socket [ 117.321049][ T11] vhci_hcd: disconnect device [ 117.339836][ T5874] vhci_hcd: vhci_device speed not set [ 117.423927][ T6322] EXT4-fs (loop0): Test dummy encryption mode enabled [ 117.454636][ T6322] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 117.500423][ T6322] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 117.517349][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.686057][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.817007][ T6338] loop1: detected capacity change from 0 to 2048 [ 117.890360][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.016933][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.529627][ T6355] loop0: detected capacity change from 0 to 512 [ 118.540675][ T6355] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.568542][ T6355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.608395][ T6355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.617350][ T6355] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.718844][ T6361] program syz.3.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.751003][ T6355] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.210: Allocating blocks 41-42 which overlap fs metadata [ 118.800426][ T6355] Quota error (device loop0): write_blk: dquota write failed [ 118.828938][ T6355] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.210: Allocating blocks 41-42 which overlap fs metadata [ 118.847602][ T6355] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.210: Failed to acquire dquot type 1 [ 118.860440][ T6344] loop2: detected capacity change from 0 to 32768 [ 118.861421][ T6355] EXT4-fs error (device loop0): mb_free_blocks:1943: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 118.891924][ T6355] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.210: corrupted inode contents [ 118.920322][ T6355] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #12: comm syz.0.210: mark_inode_dirty error [ 118.937789][ T6355] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.210: corrupted inode contents [ 118.954129][ T6355] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.210: mark_inode_dirty error [ 118.969013][ T6355] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.210: corrupted inode contents [ 118.982370][ T6344] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.987399][ T6355] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 119.003211][ T6355] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.210: corrupted inode contents [ 119.022654][ T6355] EXT4-fs error (device loop0): ext4_truncate:4288: inode #12: comm syz.0.210: mark_inode_dirty error [ 119.060984][ T6355] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 119.132206][ T6355] EXT4-fs (loop0): 1 truncate cleaned up [ 119.156794][ T6355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.258685][ T6375] netlink: 'syz.3.216': attribute type 7 has an invalid length. [ 119.302903][ T6375] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 119.319418][ T6344] XFS (loop2): Ending clean mount [ 119.371098][ T6344] XFS (loop2): Quotacheck needed: Please wait. [ 119.545950][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.571170][ T6344] XFS (loop2): Quotacheck: Done. [ 119.592961][ T6379] loop3: detected capacity change from 0 to 64 [ 119.926460][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.158553][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.388547][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 120.428966][ T5874] usb 2-1: config 0 has no interfaces? [ 120.455962][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.488458][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.497239][ T5874] usb 2-1: Product: syz [ 120.528560][ T5874] usb 2-1: Manufacturer: syz [ 120.544095][ T5874] usb 2-1: SerialNumber: syz [ 120.561551][ T5874] usb 2-1: config 0 descriptor?? [ 120.827579][ T6403] loop3: detected capacity change from 0 to 128 [ 121.022434][ T6391] loop0: detected capacity change from 0 to 32768 [ 121.050031][ T6391] XFS (loop0): Invalid device [./file0], error=-15 [ 121.125235][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.184396][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.249784][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.289398][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.327955][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.385171][ T5832] usb 2-1: USB disconnect, device number 5 [ 121.438873][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.489115][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.570472][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.599064][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 121.658693][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 122.164890][ T6427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.523008][ T6436] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 122.523008][ T6436] The task syz.0.245 (6436) triggered the difference, watch for misbehavior. [ 122.717407][ T6444] loop3: detected capacity change from 0 to 256 [ 123.024971][ T6451] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 123.039161][ T6451] netlink: 'syz.1.254': attribute type 2 has an invalid length. [ 123.043775][ T6452] loop3: detected capacity change from 0 to 164 [ 123.048224][ T6451] Zero length message leads to an empty skb [ 123.076142][ T6452] Unable to read rock-ridge attributes [ 123.104906][ T6452] Unable to read rock-ridge attributes [ 123.327932][ T6459] sp0: Synchronizing with TNC [ 124.048465][ T1192] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.179854][ T6462] loop1: detected capacity change from 0 to 32768 [ 124.215426][ T6466] loop2: detected capacity change from 0 to 32768 [ 124.234526][ T6466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.260 (6466) [ 124.268462][ T1192] usb 1-1: Using ep0 maxpacket: 8 [ 124.280254][ T1192] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 124.283327][ T6462] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 124.292062][ T1192] usb 1-1: config 0 has no interface number 0 [ 124.315516][ T1192] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 124.336534][ T1192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.347273][ T1192] usb 1-1: Product: syz [ 124.355379][ T1192] usb 1-1: Manufacturer: syz [ 124.361517][ T6466] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.374144][ T1192] usb 1-1: SerialNumber: syz [ 124.382411][ T6466] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 124.395027][ T1192] usb 1-1: config 0 descriptor?? [ 124.399339][ T6466] BTRFS info (device loop2): using free space tree [ 124.457638][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 124.457658][ T28] audit: type=1800 audit(1754568143.367:14): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.259" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 124.618860][ T1192] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 124.641418][ T6466] BTRFS info (device loop2): enabling ssd optimizations [ 124.658486][ T1192] usb 1-1: Failed to initialize entity for entity 6 [ 124.666790][ T1192] usb 1-1: Failed to register entities (-22). [ 124.684165][ T5791] (syz-executor,5791,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 124.688713][ T6466] BTRFS info (device loop2): auto enabling async discard [ 124.756657][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 124.855297][ T5832] usb 1-1: USB disconnect, device number 4 [ 124.928095][ T6495] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 125.169581][ T6474] loop3: detected capacity change from 0 to 32768 [ 125.198133][ T6498] loop1: detected capacity change from 0 to 512 [ 125.234581][ T6498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.303560][ T6498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.368097][ T6498] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.394153][ T6498] EXT4-fs (loop1): 1 truncate cleaned up [ 125.419468][ T5793] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.441544][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.582769][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.865307][ T6505] loop3: detected capacity change from 0 to 4096 [ 125.992949][ T6511] loop1: detected capacity change from 0 to 128 [ 126.023907][ T6512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.082068][ T6511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.108395][ T6511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.165191][ T6511] EXT4-fs (loop1): Test dummy encryption mode enabled [ 126.216378][ T6511] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.318549][ T6511] ext4 filesystem being mounted at mnt:[4026532949] supports timestamps until 2038-01-19 (0x7fffffff) [ 126.402975][ T6511] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.573471][ T6509] loop0: detected capacity change from 0 to 32768 [ 126.724284][ T6509] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.041071][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 127.467774][ T6532] dummy0: entered promiscuous mode [ 127.534219][ T6530] loop3: detected capacity change from 0 to 4096 [ 128.207953][ T6544] loop3: detected capacity change from 0 to 1024 [ 128.283038][ T6544] hfsplus: bad catalog entry type [ 128.372989][ T48] hfsplus: b-tree write err: -5, ino 4 [ 128.985284][ T6554] ALSA: seq fatal error: cannot create timer (-22) [ 129.220800][ T6542] loop0: detected capacity change from 0 to 40427 [ 129.252522][ T6542] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 129.287899][ T6542] F2FS-fs (loop0): invalid crc value [ 129.335305][ T6542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.427860][ T6550] loop1: detected capacity change from 0 to 32768 [ 129.479432][ T6550] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.286 (6550) [ 129.581947][ T6542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.606036][ T6550] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.655987][ T6550] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.722707][ T6550] BTRFS info (device loop1): enabling auto defrag [ 129.771460][ T6550] BTRFS info (device loop1): doing ref verification [ 129.802502][ T6550] BTRFS info (device loop1): max_inline at 0 [ 129.822809][ T6550] BTRFS info (device loop1): force clearing of disk cache [ 129.839175][ T6550] BTRFS info (device loop1): turning on sync discard [ 129.846840][ T6550] BTRFS info (device loop1): using free space tree [ 129.875775][ T5787] syz-executor: attempt to access beyond end of device [ 129.875775][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.893235][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 130.074290][ T6550] BTRFS info (device loop1): enabling ssd optimizations [ 130.115781][ T6550] BTRFS info (device loop1): rebuilding free space tree [ 130.212634][ T6573] loop3: detected capacity change from 0 to 4096 [ 130.329407][ T6573] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 130.372410][ T6573] ntfs3: loop3: Failed to load $Extend (-22). [ 130.405667][ T6573] ntfs3: loop3: Failed to initialize $Extend. [ 130.555599][ T6573] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 130.890425][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.915990][ T6585] __nla_validate_parse: 12 callbacks suppressed [ 130.916010][ T6585] netlink: 277 bytes leftover after parsing attributes in process `syz.3.294'. [ 131.266641][ T6589] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 131.373959][ T6589] team0: Port device netdevsim0 added [ 131.391830][ T6590] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 131.562350][ T6590] team0: Port device netdevsim0 removed [ 131.614134][ T6590] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.940469][ T6587] loop0: detected capacity change from 0 to 32768 [ 132.039272][ T6587] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.404786][ T6587] XFS (loop0): Ending clean mount [ 132.426217][ T6587] XFS (loop0): Quotacheck needed: Please wait. [ 132.526734][ T6587] XFS (loop0): Quotacheck: Done. [ 132.596243][ T28] audit: type=1800 audit(1754568151.497:15): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="bus" dev="loop0" ino=9290 res=0 errno=0 [ 132.627180][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.124178][ T6594] loop3: detected capacity change from 0 to 32768 [ 133.518403][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.526609][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.890321][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 134.427521][ T6643] loop3: detected capacity change from 0 to 4096 [ 134.495721][ T6647] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.590250][ T6649] loop1: detected capacity change from 0 to 128 [ 134.591637][ T6643] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 134.622240][ T6622] loop2: detected capacity change from 0 to 32768 [ 134.643033][ T28] audit: type=1326 audit(1754568153.557:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 134.658476][ T6643] Remounting filesystem read-only [ 134.697701][ T6622] XFS: attr2 mount option is deprecated. [ 134.786150][ T28] audit: type=1326 audit(1754568153.557:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 134.874933][ T6622] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.908514][ T28] audit: type=1326 audit(1754568153.587:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 134.937675][ T28] audit: type=1326 audit(1754568153.587:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 134.972001][ T28] audit: type=1326 audit(1754568153.587:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 135.002602][ T28] audit: type=1326 audit(1754568153.597:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 135.027368][ T28] audit: type=1326 audit(1754568153.597:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 135.124757][ T6622] XFS (loop2): Ending clean mount [ 135.172194][ T6622] XFS (loop2): Quotacheck needed: Please wait. [ 135.386064][ T6622] XFS (loop2): Quotacheck: Done. [ 135.590527][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.929990][ T6675] vim2m vim2m.0: vidioc_s_fmt queue busy [ 135.933266][ T6677] loop3: detected capacity change from 0 to 1024 [ 136.636427][ T6694] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.335'. [ 137.208244][ T6711] loop3: detected capacity change from 0 to 1024 [ 137.315283][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.476192][ T6711] EXT4-fs: Ignoring sb option on remount [ 137.503507][ T6711] EXT4-fs: Ignoring removed orlov option [ 137.524755][ T6711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.558652][ T6711] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 137.595484][ T6711] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 137.607087][ T6711] EXT4-fs: can't change dax mount option while remounting [ 137.720818][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.792183][ T6758] netlink: 'syz.1.363': attribute type 11 has an invalid length. [ 138.994374][ T6737] loop2: detected capacity change from 0 to 32768 [ 139.039112][ T6766] loop0: detected capacity change from 0 to 24 [ 139.064464][ T6766] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 139.121181][ T6766] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 139.492498][ T6768] loop1: detected capacity change from 0 to 4096 [ 139.587333][ T6768] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 139.692437][ T6768] ntfs3: loop1: ino=5, "/" attr_set_size [ 139.730414][ T28] audit: type=1326 audit(1754568158.647:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.2.372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee26f8ebe9 code=0x0 [ 139.855674][ T6776] syz.0.371 (6776) used obsolete PPPIOCDETACH ioctl [ 140.248200][ T6781] loop3: detected capacity change from 0 to 4096 [ 140.297883][ T6786] loop1: detected capacity change from 0 to 512 [ 140.844889][ T6790] loop1: detected capacity change from 0 to 2048 [ 140.945063][ T6790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.100899][ T6791] loop2: detected capacity change from 0 to 8192 [ 141.247778][ T6791] syz.2.378: attempt to access beyond end of device [ 141.247778][ T6791] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 141.319532][ T6791] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 141.372607][ T6791] FAT-fs (loop2): Filesystem has been set read-only [ 141.457850][ T6791] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 141.494804][ T6798] loop3: detected capacity change from 0 to 128 [ 141.521494][ T6791] FAT-fs (loop2): Filesystem has been set read-only [ 141.551654][ T6791] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 141.658118][ T6798] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.773079][ T6798] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.950137][ T5799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.812825][ T6830] loop1: detected capacity change from 0 to 64 [ 142.842162][ T6806] loop0: detected capacity change from 0 to 32768 [ 142.901855][ T6830] syz.1.395: attempt to access beyond end of device [ 142.901855][ T6830] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 142.920947][ T6830] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 142.939036][ T6830] syz.1.395: attempt to access beyond end of device [ 142.939036][ T6830] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 142.940885][ T6806] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.958046][ T6830] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.140610][ T6806] XFS (loop0): Ending clean mount [ 143.201063][ T6806] XFS (loop0): Quotacheck needed: Please wait. [ 143.404163][ T6849] loop3: detected capacity change from 0 to 1024 [ 143.409237][ T6806] XFS (loop0): Quotacheck: Done. [ 143.469659][ T6849] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 143.519000][ T6849] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 143.545097][ T6849] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.557969][ T6849] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.401: unexpected bad inode w/o EXT4_IGET_BAD [ 143.578048][ T6853] loop1: detected capacity change from 0 to 164 [ 143.585358][ T6849] EXT4-fs (loop3): no journal found [ 143.585413][ T6849] EXT4-fs (loop3): can't get journal size [ 143.611034][ T6849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.651450][ T6853] Unable to read rock-ridge attributes [ 143.705707][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.756129][ T6853] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.906002][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.010204][ T6856] loop2: detected capacity change from 0 to 4096 [ 144.060152][ T6856] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 144.185955][ T6856] ntfs: volume version 3.1. [ 144.271557][ T6856] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 144.288621][ T6868] loop0: detected capacity change from 0 to 256 [ 144.300756][ T6868] exfat: Deprecated parameter 'namecase' [ 144.313716][ T6856] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 144.333676][ T6868] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 144.518485][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.579299][ T6877] loop1: detected capacity change from 0 to 512 [ 144.605815][ T6877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.620187][ T6877] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.647300][ T6877] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.415: bg 0: block 64: padding at end of block bitmap is not set [ 144.715944][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.732755][ T23] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 144.761372][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.776757][ T23] usb 4-1: Product: syz [ 144.795499][ T23] usb 4-1: Manufacturer: syz [ 144.802554][ T23] usb 4-1: SerialNumber: syz [ 144.822799][ T23] usb 4-1: config 0 descriptor?? [ 144.828435][ T1192] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.034271][ T1192] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 145.035012][ T6878] loop0: detected capacity change from 0 to 32768 [ 145.058427][ T1192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.089953][ T1192] usb 3-1: config 0 descriptor?? [ 145.097830][ T5832] usb 4-1: USB disconnect, device number 2 [ 145.130113][ T6878] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.176765][ T6878] XFS (loop0): Ending clean mount [ 145.197585][ T6878] XFS (loop0): Quotacheck needed: Please wait. [ 145.253556][ T6878] XFS (loop0): Quotacheck: Done. [ 145.379134][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.514511][ T6885] loop1: detected capacity change from 0 to 32768 [ 145.533707][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.543413][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.547385][ T6885] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.551859][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.570541][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.578788][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.586507][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.595915][ T1192] betop 0003:11C0:5506.0006: unknown main item tag 0x0 [ 145.609261][ T1192] betop 0003:11C0:5506.0006: hidraw0: USB HID v10.00 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 145.622167][ T1192] betop 0003:11C0:5506.0006: no inputs found [ 145.718592][ T6885] XFS (loop1): Ending clean mount [ 145.744889][ T6885] XFS (loop1): Quotacheck needed: Please wait. [ 145.778990][ T5832] usb 3-1: USB disconnect, device number 4 [ 145.835352][ T6885] XFS (loop1): Quotacheck: Done. [ 145.923201][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.052991][ T6909] loop3: detected capacity change from 0 to 512 [ 146.104199][ T6909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.423: bg 0: block 5: invalid block bitmap [ 146.128700][ T6909] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 146.152913][ T6909] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.423: invalid indirect mapped block 3 (level 2) [ 146.177666][ T6909] EXT4-fs (loop3): 1 orphan inode deleted [ 146.188104][ T6909] EXT4-fs (loop3): 1 truncate cleaned up [ 146.196974][ T6909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.318028][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.414689][ T6915] loop3: detected capacity change from 0 to 1024 [ 146.422897][ T6915] EXT4-fs: Ignoring removed i_version option [ 146.433381][ T6915] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.463833][ T6915] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.424: Invalid block bitmap block 0 in block_group 0 [ 146.511498][ T6915] Quota error (device loop3): write_blk: dquota write failed [ 146.531238][ T6915] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 146.542356][ T6915] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.424: Failed to acquire dquot type 0 [ 146.582401][ T6915] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.424: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.631353][ T6915] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.424: Invalid inode bitmap blk 0 in block_group 0 [ 146.670631][ T48] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 146.689733][ T6915] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 146.698554][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 146.739446][ T6915] EXT4-fs (loop3): 1 orphan inode deleted [ 146.763364][ T6915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.915993][ T6915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.958601][ T6915] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.424: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 147.044353][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.258394][ T5874] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.448428][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 147.460737][ T5874] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 147.469732][ T5874] usb 3-1: config 0 has no interface number 0 [ 147.476390][ T5874] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.539278][ T5874] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 147.558343][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 147.560099][ T6944] loop1: detected capacity change from 0 to 4096 [ 147.575963][ T6944] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 147.586808][ T5874] usb 3-1: Product: syz [ 147.598404][ T5874] usb 3-1: SerialNumber: syz [ 147.616290][ T5874] usb 3-1: config 0 descriptor?? [ 147.632276][ T6944] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 147.636771][ T5874] cm109 3-1:0.8: invalid payload size 88, expected 4 [ 147.640530][ T6944] ntfs3: loop1: Failed to load $Extend (-22). [ 147.658419][ T6944] ntfs3: loop1: Failed to initialize $Extend. [ 147.674174][ T5874] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 147.771351][ T6928] loop0: detected capacity change from 0 to 40427 [ 147.786419][ T6928] F2FS-fs (loop0): invalid crc value [ 147.808260][ T6944] overlayfs: upper fs does not support tmpfile. [ 147.826752][ T6928] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.853659][ T6944] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.871767][ T6944] overlayfs: failed to get uuid (/file0, err=-22); falling back to uuid=null. [ 147.906967][ T6944] overlayfs: failed to get origin (-22) [ 147.916835][ T6944] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 147.926766][ T6944] overlayfs: failed to verify upper root origin [ 147.939337][ T6928] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 148.085871][ T5787] syz-executor: attempt to access beyond end of device [ 148.085871][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.106171][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 148.117096][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 148.117158][ T5832] usb 3-1: USB disconnect, device number 5 [ 148.131002][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 148.154100][ T5832] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 148.511050][ T6965] loop3: detected capacity change from 0 to 256 [ 148.891422][ T6971] loop3: detected capacity change from 0 to 4096 [ 148.938595][ T6971] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 149.537730][ T6990] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.546286][ T6990] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.578824][ T6990] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.586111][ T6990] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.642454][ T6990] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.650522][ T6990] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.673879][ T6994] netlink: 'syz.0.459': attribute type 13 has an invalid length. [ 149.693135][ T6990] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.700930][ T6990] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.709007][ T6994] netlink: 152 bytes leftover after parsing attributes in process `syz.0.459'. [ 149.722949][ T6990] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.730545][ T6990] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.739562][ T6994] : renamed from syz_tun (while UP) [ 149.783036][ T6994] : refused to change device tx_queue_len [ 149.813780][ T6996] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 149.885526][ T6979] loop1: detected capacity change from 0 to 32768 [ 149.988863][ T7003] loop0: detected capacity change from 0 to 64 [ 150.000765][ T6979] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.192992][ T6979] XFS (loop1): Ending clean mount [ 150.219100][ T6979] XFS (loop1): Quotacheck needed: Please wait. [ 150.317400][ T6979] XFS (loop1): Quotacheck: Done. [ 150.373656][ T7013] loop0: detected capacity change from 0 to 8192 [ 150.438658][ T7013] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.496074][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.088153][ T7018] loop3: detected capacity change from 0 to 32768 [ 151.116719][ T7018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.467 (7018) [ 151.176293][ T7018] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.205976][ T7018] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 151.228392][ T7018] BTRFS info (device loop3): using free space tree [ 151.246285][ T7034] loop1: detected capacity change from 0 to 512 [ 151.327407][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.347890][ T7034] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.366712][ T7018] BTRFS info (device loop3): enabling ssd optimizations [ 151.385455][ T7018] BTRFS info (device loop3): auto enabling async discard [ 151.500233][ T7024] loop0: detected capacity change from 0 to 32768 [ 151.541015][ T7034] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.474: Directory hole found for htree leaf block 0 [ 151.606889][ T7060] loop2: detected capacity change from 0 to 1024 [ 151.640434][ T7060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.687109][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.874205][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.941097][ T5799] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.743774][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 152.768607][ T7097] tipc: Started in network mode [ 152.774701][ T7097] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 152.801428][ T7097] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 152.822565][ T7097] tipc: Enabled bearer , priority 10 [ 152.925380][ T7104] loop3: detected capacity change from 0 to 256 [ 152.963223][ T7104] MINIX-fs: mounting file system with errors, running fsck is recommended [ 153.049701][ T7104] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 153.926469][ T7132] loop0: detected capacity change from 0 to 4096 [ 153.941665][ T5875] tipc: Node number set to 1 [ 153.980062][ T7132] ntfs3: Bad value for 'gid' [ 154.001497][ T7119] loop1: detected capacity change from 0 to 32768 [ 154.009459][ T7120] loop3: detected capacity change from 0 to 32768 [ 154.025163][ T7119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.504 (7119) [ 154.064731][ T7119] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.085111][ T7119] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 154.089874][ T7120] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 154.089874][ T7120] [ 154.097521][ T7119] BTRFS info (device loop1): using free space tree [ 154.126976][ T7120] ERROR: (device loop3): remounting filesystem as read-only [ 154.153485][ T7120] syz.3.503: attempt to access beyond end of device [ 154.153485][ T7120] loop3: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 154.206420][ T7119] BTRFS info (device loop1): enabling ssd optimizations [ 154.246242][ T7119] BTRFS info (device loop1): auto enabling async discard [ 154.300001][ T112] blkno = 5002c, nblocks = 1 [ 154.306652][ T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 154.306652][ T112] [ 154.346273][ T7119] BTRFS info (device loop1): device stats zeroed by syz.1.504 (7119) [ 154.389076][ T5791] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.786471][ T7133] loop2: detected capacity change from 0 to 40427 [ 154.809670][ T7154] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.515'. [ 154.830323][ T7133] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 154.839084][ T7154] net_ratelimit: 67 callbacks suppressed [ 154.839111][ T7154] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 154.891371][ T7133] F2FS-fs (loop2): invalid crc value [ 154.968433][ T7133] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.102086][ T7133] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.243802][ T7167] loop0: detected capacity change from 0 to 64 [ 155.322567][ T5793] syz-executor: attempt to access beyond end of device [ 155.322567][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.353972][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 155.407798][ T7173] loop3: detected capacity change from 0 to 1024 [ 155.752411][ T7184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.526'. [ 155.763330][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.526'. [ 156.448567][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 156.532306][ T7218] Illegal XDP return value 4294967274 on prog (id 43) dev N/A, expect packet loss! [ 156.645134][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.668421][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 156.693117][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 156.721279][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.749528][ T8] usb 1-1: config 0 descriptor?? [ 156.884823][ T7230] loop3: detected capacity change from 0 to 512 [ 156.919315][ T7230] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 156.991071][ T7230] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 157.187030][ T8] konepure 0003:1E7D:2DB4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 157.269084][ T7222] loop1: detected capacity change from 0 to 32768 [ 157.305850][ T7222] ialloc: diAlloc returned -5! [ 157.343926][ T111] ERROR: (device loop1): diUpdatePMap: the iag is outside the map [ 157.343926][ T111] [ 157.356804][ T111] ERROR: (device loop1): remounting filesystem as read-only [ 157.408421][ T5875] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 157.421965][ T5874] usb 1-1: USB disconnect, device number 5 [ 157.624216][ T5875] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 157.632865][ T5875] usb 3-1: config 0 has no interface number 0 [ 157.640329][ T5875] usb 3-1: config 0 interface 132 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 157.653352][ T5875] usb 3-1: config 0 interface 132 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 157.665543][ T5875] usb 3-1: config 0 interface 132 has no altsetting 0 [ 157.677721][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=ff.75 [ 157.687740][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.694545][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 157.697604][ T5875] usb 3-1: Product: syz [ 157.713353][ T5875] usb 3-1: Manufacturer: syz [ 157.718734][ T5875] usb 3-1: SerialNumber: syz [ 157.728093][ T5875] usb 3-1: config 0 descriptor?? [ 157.735105][ T7232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.743103][ T7232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.989965][ T7232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.039134][ T7232] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.067038][ T7246] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 158.114167][ T5875] cdc_subset 3-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Belkin, eTEK, or compatible, ba:1a:28:11:f4:4d [ 158.362341][ T5875] usb 3-1: USB disconnect, device number 6 [ 158.387133][ T5875] cdc_subset 3-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Belkin, eTEK, or compatible [ 158.767686][ T7276] loop3: detected capacity change from 0 to 128 [ 158.775289][ T7276] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.790618][ T7276] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.810051][ T7276] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.838535][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.841371][ T7276] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.570: No space for directory leaf checksum. Please run e2fsck -D. [ 158.866928][ T7276] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.570: checksumming directory block 0 [ 158.939549][ T5799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.030984][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.058191][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.093098][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.113053][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.133501][ T8] usb 2-1: Product: syz [ 159.138007][ T8] usb 2-1: Manufacturer: syz [ 159.154316][ T7282] loop3: detected capacity change from 0 to 4096 [ 159.162255][ T8] usb 2-1: SerialNumber: syz [ 159.179050][ T8] hub 2-1:1.0: bad descriptor, ignoring hub [ 159.186376][ T8] hub: probe of 2-1:1.0 failed with error -5 [ 159.217772][ T7287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.305333][ T7290] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 159.315470][ T7290] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 159.324590][ T7290] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 159.364536][ T7291] can0: slcan on ttyprintk. [ 159.447440][ T7295] loop2: detected capacity change from 0 to 1024 [ 159.459456][ T7289] can0 (unregistered): slcan off ttyprintk. [ 159.478258][ T7295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.506624][ T7295] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.553455][ T7295] EXT4-fs: Ignoring removed orlov option [ 159.567662][ T7295] EXT4-fs: can't change dax mount option while remounting [ 159.622210][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.700155][ T5875] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.739223][ T23] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 159.897624][ T5875] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 159.910242][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.916158][ T7300] loop0: detected capacity change from 0 to 32768 [ 159.930128][ T7300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.579 (7300) [ 159.931693][ T5875] usb 4-1: Product: syz [ 159.950533][ T5875] usb 4-1: Manufacturer: syz [ 159.955747][ T5875] usb 4-1: SerialNumber: syz [ 159.964426][ T5875] usb 4-1: config 0 descriptor?? [ 159.965675][ T7300] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.997257][ T7300] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 160.013141][ T7300] BTRFS info (device loop0): using free space tree [ 160.047606][ T7300] BTRFS info (device loop0): enabling ssd optimizations [ 160.056415][ T7300] BTRFS info (device loop0): auto enabling async discard [ 160.197047][ T59] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 160.271729][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.349331][ T8] usb 2-1: USB disconnect, device number 6 [ 160.600701][ T5875] usb 4-1: Firmware version (0.0) predates our first public release. [ 160.633944][ T5875] usb 4-1: Please update to version 0.2 or newer [ 160.761549][ T5875] usb 4-1: USB disconnect, device number 3 [ 161.144621][ T7326] loop2: detected capacity change from 0 to 40427 [ 161.166165][ T7326] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 161.196382][ T7326] F2FS-fs (loop2): invalid crc value [ 161.218579][ T7326] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.350335][ T7326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.534210][ T7330] loop0: detected capacity change from 0 to 40427 [ 161.541851][ T5793] syz-executor: attempt to access beyond end of device [ 161.541851][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.565010][ T7330] F2FS-fs (loop0): Invalid segment/section count (31, 2328 x 1) [ 161.570759][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.578597][ T7330] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 161.614830][ T7330] F2FS-fs (loop0): invalid crc value [ 161.692586][ T7330] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.846090][ T7330] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 161.868550][ T7330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 161.983445][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 162.547487][ T7375] netlink: 340 bytes leftover after parsing attributes in process `syz.2.604'. [ 163.168428][ T5779] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.344718][ T7403] loop2: detected capacity change from 0 to 512 [ 163.358450][ T5779] usb 4-1: Using ep0 maxpacket: 16 [ 163.377529][ T7403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.385150][ T5779] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 163.405865][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.408444][ T7403] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.617: bad orphan inode 131083 [ 163.445174][ T5779] usb 4-1: Product: syz [ 163.449804][ T7403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.457491][ T5779] usb 4-1: Manufacturer: syz [ 163.492784][ T5779] usb 4-1: SerialNumber: syz [ 163.529995][ T5779] usb 4-1: config 0 descriptor?? [ 163.577602][ T5779] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 163.592683][ T7398] loop0: detected capacity change from 0 to 32768 [ 163.616216][ T7398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.614 (7398) [ 163.631111][ T7396] loop1: detected capacity change from 0 to 32768 [ 163.642114][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.646067][ T7398] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.665287][ T7398] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 163.669884][ T7396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.615 (7396) [ 163.676002][ T7398] BTRFS info (device loop0): using free space tree [ 163.716566][ T7396] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.731385][ T7396] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 163.756028][ T7396] BTRFS info (device loop1): setting nodatacow, compression disabled [ 163.768536][ T7396] BTRFS info (device loop1): disabling tree log [ 163.775155][ T7396] BTRFS info (device loop1): turning on sync discard [ 163.783239][ T7396] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.796595][ T7396] BTRFS info (device loop1): force zstd compression, level 3 [ 163.805937][ T7396] BTRFS info (device loop1): using free space tree [ 163.864704][ T5779] usb 4-1: USB disconnect, device number 4 [ 163.917008][ T7398] BTRFS info (device loop0): enabling ssd optimizations [ 163.938566][ T7398] BTRFS info (device loop0): auto enabling async discard [ 163.944294][ T7396] BTRFS info (device loop1): enabling ssd optimizations [ 164.077096][ T7398] BTRFS info (device loop0): device stats zeroed by syz.0.614 (7398) [ 164.171916][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.197957][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 164.213990][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 164.227727][ T7445] netlink: 'syz.2.621': attribute type 14 has an invalid length. [ 164.242339][ T7445] netlink: 'syz.2.621': attribute type 12 has an invalid length. [ 164.259666][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.270640][ T5840] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.441734][ T7455] loop0: detected capacity change from 0 to 32768 [ 165.462094][ T5840] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 165.479101][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.495113][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 165.511342][ T5840] usb 3-1: New USB device found, idVendor=056a, idProduct=2084, bcdDevice= 0.00 [ 165.521753][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.536775][ T5840] usb 3-1: config 0 descriptor?? [ 165.991108][ T5840] wacom 0003:056A:2084.0008: Unknown device_type for 'HID 056a:2084'. Ignoring. [ 166.216282][ T5779] usb 3-1: USB disconnect, device number 7 [ 166.296152][ T7492] loop0: detected capacity change from 0 to 512 [ 166.306128][ T7492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.319364][ T7492] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.340731][ T7492] EXT4-fs (loop0): 1 truncate cleaned up [ 166.350588][ T7492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.455386][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.556849][ T7500] loop3: detected capacity change from 0 to 4096 [ 166.577226][ T7500] ntfs3: loop3: ino=3, Correct links count -> 2. [ 166.895197][ T7486] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 166.918733][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.152548][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.172006][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.192808][ T5832] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.228946][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.248559][ T5832] usb 1-1: SerialNumber: syz [ 167.341393][ T7527] loop2: detected capacity change from 0 to 64 [ 167.502772][ T5832] usb 1-1: 0:2 : does not exist [ 167.576548][ T5832] usb 1-1: USB disconnect, device number 6 [ 168.018116][ T7530] loop3: detected capacity change from 0 to 32768 [ 168.071421][ T7530] [ 168.071421][ T7530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.071421][ T7530] [ 168.119574][ T7530] [ 168.119574][ T7530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.119574][ T7530] [ 168.137493][ T7530] [ 168.137493][ T7530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.137493][ T7530] [ 168.164325][ T5789] Bluetooth: hci0: command 0x0c20 tx timeout [ 168.172274][ T7530] [ 168.172274][ T7530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.172274][ T7530] [ 168.203138][ T7530] [ 168.203138][ T7530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.203138][ T7530] [ 168.216871][ T7550] [ 168.216871][ T7550] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.216871][ T7550] [ 168.225814][ T112] [ 168.225814][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.225814][ T112] [ 168.243289][ T7550] [ 168.243289][ T7550] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.243289][ T7550] [ 168.302827][ T5799] [ 168.302827][ T5799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.302827][ T5799] [ 168.315475][ T5799] [ 168.315475][ T5799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.315475][ T5799] [ 168.411590][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 168.554306][ T7556] loop0: detected capacity change from 0 to 4096 [ 168.616939][ T7559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.769267][ T7565] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.937625][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.678'. [ 169.047149][ T7571] loop2: detected capacity change from 0 to 4096 [ 169.070676][ T7571] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 169.143606][ T7571] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 169.156234][ T7571] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 169.209664][ T7571] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 169.228743][ T7571] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 169.277730][ T7585] loop3: detected capacity change from 0 to 256 [ 169.282276][ T7571] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 169.290910][ T7587] loop0: detected capacity change from 0 to 256 [ 169.315073][ T7587] exfat: Deprecated parameter 'utf8' [ 169.320013][ T7571] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 169.336261][ T7585] FAT-fs (loop3): Directory bread(block 64) failed [ 169.351495][ T7587] exfat: Deprecated parameter 'namecase' [ 169.357987][ T7587] exfat: Deprecated parameter 'namecase' [ 169.365021][ T7587] exfat: Deprecated parameter 'utf8' [ 169.367925][ T7571] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 169.380746][ T7585] FAT-fs (loop3): Directory bread(block 65) failed [ 169.387633][ T7585] FAT-fs (loop3): Directory bread(block 66) failed [ 169.398067][ T7585] FAT-fs (loop3): Directory bread(block 67) failed [ 169.405761][ T7571] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 169.406803][ T7585] FAT-fs (loop3): Directory bread(block 68) failed [ 169.436078][ T7585] FAT-fs (loop3): Directory bread(block 69) failed [ 169.443797][ T7585] FAT-fs (loop3): Directory bread(block 70) failed [ 169.457238][ T7571] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 169.458348][ T7585] FAT-fs (loop3): Directory bread(block 71) failed [ 169.476561][ T7587] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 169.490989][ T7585] FAT-fs (loop3): Directory bread(block 72) failed [ 169.507163][ T7571] ntfs: volume version 3.1. [ 169.512149][ T7585] FAT-fs (loop3): Directory bread(block 73) failed [ 170.101158][ T7589] loop1: detected capacity change from 0 to 32768 [ 170.163005][ T7589] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.319598][ T7589] XFS (loop1): Ending clean mount [ 170.359839][ T7589] XFS (loop1): Quotacheck needed: Please wait. [ 170.433256][ T7589] XFS (loop1): Quotacheck: Done. [ 170.649054][ T7597] loop3: detected capacity change from 0 to 40427 [ 170.677465][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.695602][ T7621] loop2: detected capacity change from 0 to 64 [ 170.711020][ T7597] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.898227][ T5789] Bluetooth: hci0: ISO packet too small [ 170.910426][ T7597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 171.105420][ T5799] syz-executor: attempt to access beyond end of device [ 171.105420][ T5799] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.124602][ T5799] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 171.268634][ T5779] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.378685][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.472293][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.494600][ T5779] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.522103][ T5779] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.565161][ T5779] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 171.576950][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.589593][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 171.598420][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.606315][ T5779] usb 1-1: Product: syz [ 171.619301][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.628484][ T5779] usb 1-1: Manufacturer: syz [ 171.635991][ T5779] usb 1-1: SerialNumber: syz [ 171.641088][ T5840] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 171.663058][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.665749][ T5779] hub 1-1:1.0: bad descriptor, ignoring hub [ 171.683972][ T7643] ptrace attach of "./syz-executor exec"[5799] was attempted by " [ 171.685098][ T5779] hub: probe of 1-1:1.0 failed with error -5 [ 171.740288][ T5840] usb 2-1: config 0 descriptor?? [ 171.784627][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.900145][ T5779] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 172.074588][ T7651] loop3: detected capacity change from 0 to 1024 [ 172.143809][ T48] hfsplus: b-tree write err: -5, ino 4 [ 172.208748][ T5779] usb 1-1: USB disconnect, device number 7 [ 172.241503][ T5779] usblp0: removed [ 172.272258][ T7653] loop3: detected capacity change from 0 to 1024 [ 172.275530][ T5840] apple 0003:05AC:024B.0009: unknown main item tag 0x6 [ 172.292879][ T5840] apple 0003:05AC:024B.0009: ignoring exceeding usage max [ 172.303357][ T5840] apple 0003:05AC:024B.0009: invalid report_size 16640 [ 172.314607][ T5840] apple 0003:05AC:024B.0009: item 0 2 1 7 parsing failed [ 172.326165][ T5840] apple 0003:05AC:024B.0009: parse failed [ 172.326927][ T7653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.333838][ T5840] apple: probe of 0003:05AC:024B.0009 failed with error -22 [ 172.365267][ T7653] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.484845][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.583969][ T7649] loop2: detected capacity change from 0 to 40427 [ 172.595663][ T5779] usb 2-1: USB disconnect, device number 7 [ 172.607790][ T7649] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 172.618781][ T7649] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 172.636404][ T7649] F2FS-fs (loop2): invalid crc value [ 172.667556][ T7649] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.815832][ T7649] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 172.839277][ T7649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 173.289787][ T5832] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 173.509744][ T5832] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 173.531854][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.587073][ T5832] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.608639][ T5832] usb 1-1: config 1 has no interface number 1 [ 173.622608][ T5832] usb 1-1: string descriptor 0 read error: -22 [ 173.633662][ T5832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.668696][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.706135][ T5832] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 173.751640][ T5832] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 173.778507][ T5832] usb 1-1: MIDIStreaming interface descriptor not found [ 173.943330][ T5832] usb 1-1: USB disconnect, device number 8 [ 174.357159][ T7680] loop1: detected capacity change from 0 to 32768 [ 174.394022][ T7680] [ 174.394022][ T7680] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.394022][ T7680] [ 174.438442][ T7680] ERROR: (device loop1): diWrite: ixpxd invalid [ 174.438442][ T7680] [ 174.460071][ T7680] ERROR: (device loop1): txCommit: [ 174.460071][ T7680] [ 174.544048][ T7703] loop3: detected capacity change from 0 to 1024 [ 174.551798][ T5791] [ 174.551798][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.551798][ T5791] [ 174.569150][ T5791] [ 174.569150][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.569150][ T5791] [ 174.795895][ T7709] loop2: detected capacity change from 0 to 1024 [ 174.840575][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.046393][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.373707][ T7728] loop0: detected capacity change from 0 to 128 [ 175.384215][ T7730] sd 0:0:1:0: device reset [ 175.654276][ T7736] loop2: detected capacity change from 0 to 256 [ 175.675031][ T7716] loop3: detected capacity change from 0 to 32768 [ 175.694454][ T7736] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 175.725466][ T7742] loop1: detected capacity change from 0 to 512 [ 175.740250][ T7716] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.761109][ T7742] EXT4-fs (loop1): 1 truncate cleaned up [ 175.769969][ T7742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.819731][ T7716] XFS (loop3): Ending clean mount [ 175.878660][ T7742] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 176.011932][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.035152][ T5799] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.093661][ T7758] __vm_enough_memory: pid: 7758, comm: syz.0.753, not enough memory for the allocation [ 176.117242][ T7760] netlink: 96 bytes leftover after parsing attributes in process `syz.1.754'. [ 176.128542][ T7760] netlink: 80 bytes leftover after parsing attributes in process `syz.1.754'. [ 176.397771][ T7767] loop3: detected capacity change from 0 to 512 [ 176.439044][ T7767] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.755: iget: bad extended attribute block 1 [ 176.439651][ T7767] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.755: couldn't read orphan inode 15 (err -117) [ 176.441377][ T7767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.470498][ T7770] loop0: detected capacity change from 0 to 64 [ 176.548823][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.617271][ T7772] loop3: detected capacity change from 0 to 1024 [ 176.646374][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.674548][ T7772] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.711111][ T7772] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 176.801127][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.934001][ T7784] loop0: detected capacity change from 0 to 1024 [ 176.970981][ T7786] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 176.987679][ T7784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.999100][ T7786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.099518][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.447677][ T7810] loop1: detected capacity change from 0 to 512 [ 177.478047][ T7810] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 177.488999][ T7810] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 177.509583][ T7810] EXT4-fs (loop1): 1 truncate cleaned up [ 177.517910][ T7810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.599942][ T7810] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.695492][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.713046][ T5779] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.918655][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 177.947714][ T5779] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 177.968343][ T5779] usb 1-1: config 252 has no interface number 0 [ 177.978421][ T5779] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 178.011456][ T5779] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 178.028381][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.052798][ T5779] usb 1-1: Product: syz [ 178.057345][ T5779] usb 1-1: Manufacturer: syz [ 178.072761][ T5779] usb 1-1: SerialNumber: syz [ 178.120196][ T5779] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 178.168627][ T7834] loop1: detected capacity change from 0 to 512 [ 178.176581][ T7834] EXT4-fs: Ignoring removed i_version option [ 178.192844][ T7834] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.205442][ T7834] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.785: bg 0: block 131: padding at end of block bitmap is not set [ 178.224128][ T7834] EXT4-fs (loop1): Remounting filesystem read-only [ 178.232137][ T7834] EXT4-fs (loop1): 1 truncate cleaned up [ 178.240006][ T7834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.333271][ T5840] usb 1-1: USB disconnect, device number 9 [ 178.335333][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.339929][ T1117] usb 1-1: Failed to submit usb control message: -71 [ 178.398397][ T1117] usb 1-1: unable to send the bmi data to the device: -71 [ 178.405773][ T1117] usb 1-1: unable to get target info from device [ 178.432463][ T1117] usb 1-1: could not get target info (-71) [ 178.443844][ T1117] usb 1-1: could not probe fw (-71) [ 178.830214][ T7853] loop3: detected capacity change from 0 to 16 [ 178.850975][ T7853] erofs: (device loop3): mounted with root inode @ nid 36. [ 179.035439][ T7857] usb usb8: usbfs: process 7857 (syz.0.796) did not claim interface 3 before use [ 179.238754][ T7867] raw_sendmsg: syz.2.801 forgot to set AF_INET. Fix it! [ 179.335687][ T7873] Bluetooth: MGMT ver 1.22 [ 179.400890][ T7875] loop2: detected capacity change from 0 to 256 [ 179.401922][ T7875] exfat: Deprecated parameter 'utf8' [ 179.402140][ T7875] exfat: Deprecated parameter 'utf8' [ 179.466810][ T7875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 179.783918][ T7887] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 179.822412][ T7887] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 179.848493][ T7887] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 179.970252][ T7894] loop0: detected capacity change from 0 to 1024 [ 179.989803][ T7895] loop1: detected capacity change from 0 to 512 [ 179.999671][ T7895] EXT4-fs: Ignoring removed orlov option [ 180.015280][ T7895] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 180.028247][ T7894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.046672][ T7894] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.101380][ T7894] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1: comm syz.0.815: lblock 1 mapped to illegal pblock 1 (length 15) [ 180.117040][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.171755][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.301950][ T5840] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 180.333520][ T5840] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.355304][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.363169][ T5840] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 180.373875][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.377389][ T7883] loop2: detected capacity change from 0 to 40427 [ 180.387482][ T5840] usb 4-1: config 0 descriptor?? [ 180.413270][ T7883] F2FS-fs (loop2): Wrong CP boundary, start(512) end(2365457920) blocks(1024) [ 180.423394][ T7883] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 180.435732][ T7883] F2FS-fs (loop2): invalid crc value [ 180.451533][ T7883] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.549220][ T5779] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.563938][ T7883] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 180.573678][ T7883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.752949][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 180.765419][ T5779] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.783896][ T5779] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 180.803091][ T5779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.817266][ T5779] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 180.821501][ T5840] pantherlord 0003:0810:0002.000A: unknown main item tag 0x6 [ 180.837756][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.861271][ T5840] pantherlord 0003:0810:0002.000A: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 180.877794][ T5779] usb 1-1: config 0 descriptor?? [ 180.896599][ T5840] pantherlord 0003:0810:0002.000A: no output reports found [ 181.025054][ T5840] usb 4-1: USB disconnect, device number 5 [ 181.070104][ T7917] loop2: detected capacity change from 0 to 64 [ 181.203292][ T7919] loop2: detected capacity change from 0 to 512 [ 181.213971][ T7919] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 181.225379][ T7919] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 181.241609][ T7919] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 181.262296][ T7919] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 181.272144][ T7919] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 181.290361][ T7919] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.307339][ T7919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.824: bg 0: block 34: padding at end of block bitmap is not set [ 181.330850][ T5779] betop 0003:20BC:5500.000B: unbalanced collection at end of report description [ 181.351208][ T7919] __quota_error: 11 callbacks suppressed [ 181.351227][ T7919] Quota error (device loop2): write_blk: dquota write failed [ 181.369680][ T7915] loop1: detected capacity change from 0 to 32768 [ 181.380155][ T7915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.823 (7915) [ 181.380543][ T5779] betop 0003:20BC:5500.000B: parse failed [ 181.398700][ T7919] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 181.412026][ T7919] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.824: Failed to acquire dquot type 1 [ 181.419754][ T5779] betop: probe of 0003:20BC:5500.000B failed with error -22 [ 181.433588][ T7915] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.445059][ T7915] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 181.461125][ T7915] BTRFS info (device loop1): turning on async discard [ 181.472439][ T7915] BTRFS info (device loop1): using free space tree [ 181.473540][ T7919] EXT4-fs (loop2): 1 truncate cleaned up [ 181.491092][ T7919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.521690][ T7915] BTRFS info (device loop1): enabling ssd optimizations [ 181.584023][ T7919] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 181.602092][ T5779] usb 1-1: USB disconnect, device number 10 [ 181.606500][ T7919] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 181.648602][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.720199][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.885184][ T7940] vivid-000: disconnect [ 181.904039][ T7938] vivid-000: reconnect [ 182.114563][ T7943] loop1: detected capacity change from 0 to 64 [ 182.698508][ T5875] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.915443][ T5875] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.924673][ T5875] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 182.935687][ T5875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.957260][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 182.978353][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 183.000625][ T5875] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.018595][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.026991][ T5875] usb 1-1: Product: syz [ 183.038809][ T5875] usb 1-1: Manufacturer: syz [ 183.063221][ T5875] cdc_wdm 1-1:1.0: skipping garbage [ 183.068777][ T5875] cdc_wdm 1-1:1.0: skipping garbage [ 183.085712][ T5875] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 183.098337][ T5875] cdc_wdm 1-1:1.0: Unknown control protocol [ 183.306389][ T5875] usb 1-1: USB disconnect, device number 11 [ 183.776800][ T7988] loop1: detected capacity change from 0 to 32768 [ 184.055055][ T8004] kernel read not supported for file / (pid: 8004 comm: syz.3.857) [ 184.065264][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 184.076030][ T28] audit: type=1800 audit(1754568202.977:24): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.857" name=18 dev="mqueue" ino=13661 res=0 errno=0 [ 184.154969][ T8008] loop3: detected capacity change from 0 to 512 [ 184.162911][ T8008] EXT4-fs: Ignoring removed nobh option [ 184.208919][ T8008] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 184.278009][ T8008] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.859: invalid indirect mapped block 256 (level 1) [ 184.339640][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'. [ 184.343784][ T8008] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.859: invalid indirect mapped block 2683928664 (level 1) [ 184.380156][ T8008] EXT4-fs (loop3): 1 truncate cleaned up [ 184.383306][ T8017] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 184.396418][ T8008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.524443][ T8008] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 184.536879][ T8020] loop2: detected capacity change from 0 to 2048 [ 184.565433][ T8020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.628942][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.768953][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.867'. [ 184.818478][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.022361][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.043574][ T8] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 185.082388][ T8] usb 2-1: string descriptor 0 read error: -22 [ 185.098624][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 185.118977][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.291974][ T8044] loop3: detected capacity change from 0 to 4096 [ 185.310625][ T8] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 185.322843][ T8044] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 185.804778][ T8042] loop0: detected capacity change from 0 to 40427 [ 185.826041][ T8042] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 185.835163][ T8042] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 185.835911][ T8060] loop3: detected capacity change from 0 to 764 [ 185.851726][ T8042] F2FS-fs (loop0): Image doesn't support compression [ 185.865029][ T8042] F2FS-fs (loop0): invalid crc value [ 185.877439][ T8042] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.941326][ T8042] F2FS-fs (loop0): Start checkpoint disabled! [ 185.963967][ T8042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 186.022878][ T8042] syz.0.874: attempt to access beyond end of device [ 186.022878][ T8042] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.040176][ T8042] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x256/0x630 [ 186.049354][ T8] usb 2-1: device descriptor read/64, error -71 [ 186.065979][ T8065] loop3: detected capacity change from 0 to 256 [ 186.068507][ T5875] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.082716][ T8065] FAT-fs (loop3): Unrecognized mount option "utf " or missing value [ 186.129708][ T8065] devtmpfs: Unknown parameter 'shortname' [ 186.212211][ T48] kworker/u4:3: attempt to access beyond end of device [ 186.212211][ T48] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 186.240939][ T48] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 186.249454][ T48] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 186.257546][ T48] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 186.287211][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.301686][ T5875] usb 3-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 186.318405][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.325280][ T8069] loop3: detected capacity change from 0 to 128 [ 186.339779][ T8069] UDF-fs: bad mount option "Í[CX§.ìÓìú-½ö¾ðF(?£ê-Ôƃ+ ° þ[è“cnùÿ€7Í [ 186.339779][ T8069]  +ÑÉ ‚Ít+K3¼Ê‚˜ñ¶&sFðç" or missing value [ 186.349931][ T5875] usb 3-1: config 0 descriptor?? [ 186.374440][ T8] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 186.592138][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.628684][ T8] usb 2-1: device firmware changed [ 186.653363][ T8] usb 2-1: USB disconnect, device number 8 [ 186.835592][ T5875] wacom 0003:056A:00D4.000C: Unknown device_type for 'HID 056a:00d4'. Assuming pen. [ 186.861572][ T5875] wacom 0003:056A:00D4.000C: hidraw0: USB HID vff.fe Device [HID 056a:00d4] on usb-dummy_hcd.2-1/input0 [ 186.877513][ T5875] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D4.000C/input/input9 [ 187.124595][ T8] usb 3-1: USB disconnect, device number 8 [ 187.699558][ T8080] loop0: detected capacity change from 0 to 40427 [ 187.748863][ T8080] F2FS-fs (loop0): invalid crc value [ 187.767079][ T8080] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.815250][ T8097] loop2: detected capacity change from 0 to 1024 [ 187.826570][ T8097] EXT4-fs: Ignoring removed orlov option [ 187.872080][ T8080] F2FS-fs (loop0): Start checkpoint disabled! [ 187.882027][ T8097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.902292][ T8080] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 187.941955][ T28] audit: type=1800 audit(1754568206.857:25): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.900" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 188.020613][ T28] audit: type=1800 audit(1754568206.927:26): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.892" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 188.072784][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.274144][ T48] kworker/u4:3: attempt to access beyond end of device [ 188.274144][ T48] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 188.289576][ T48] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 188.297912][ T48] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 188.388611][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.450189][ T8094] loop1: detected capacity change from 0 to 40427 [ 188.479289][ T8094] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 188.489924][ T8094] F2FS-fs (loop1): Image doesn't support compression [ 188.496934][ T8094] F2FS-fs (loop1): Image doesn't support compression [ 188.533643][ T8094] F2FS-fs (loop1): invalid crc value [ 188.555549][ T8094] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.629302][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 188.640364][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 188.649199][ T8094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.663360][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 188.698419][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.722534][ T8094] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 188.738892][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.754186][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 188.765348][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.788543][ T8] usb 4-1: Product: syz [ 188.793055][ T8] usb 4-1: Manufacturer: syz [ 188.795452][ T8113] No buffer was provided with the request [ 188.798035][ T8] usb 4-1: SerialNumber: syz [ 188.811423][ T8] usb 4-1: config 0 descriptor?? [ 188.817702][ T8104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.843747][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 188.851816][ T8] port100 4-1:0.0: NFC: Could not get supported command types [ 188.985439][ T8118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.909'. [ 189.100976][ T8] usb 4-1: USB disconnect, device number 6 [ 189.426132][ T8130] loop1: detected capacity change from 0 to 512 [ 189.479708][ T8130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.528037][ T8130] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.791662][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.825695][ T8120] loop2: detected capacity change from 0 to 32768 [ 190.730848][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 190.749907][ T8179] program syz.2.934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.942407][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 190.968735][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 190.980793][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 190.998476][ T5832] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 191.026067][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.036063][ T8192] loop3: detected capacity change from 0 to 256 [ 191.057339][ T5832] usb 1-1: config 0 descriptor?? [ 191.124381][ T8192] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 191.385263][ T8204] loop3: detected capacity change from 0 to 1024 [ 191.394691][ T8204] EXT4-fs: Ignoring removed bh option [ 191.401840][ T8204] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 191.452528][ T8204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.515763][ T5832] hid-generic 0003:0C70:F003.000D: unknown main item tag 0x0 [ 191.527027][ T5832] hid-generic 0003:0C70:F003.000D: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.0-1/input0 [ 191.536402][ T8204] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.946: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 191.624000][ T8212] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 191.642820][ T8204] EXT4-fs (loop3): Remounting filesystem read-only [ 191.654972][ T8212] netlink: 228 bytes leftover after parsing attributes in process `syz.1.948'. [ 191.702576][ T8216] loop2: detected capacity change from 0 to 8 [ 191.745789][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.778912][ T5832] usb 1-1: USB disconnect, device number 12 [ 191.799147][ T8216] SQUASHFS error: Unable to read directory block [629:26] [ 191.975121][ T8224] netlink: 5 bytes leftover after parsing attributes in process `syz.2.953'. [ 192.437629][ T8220] loop3: detected capacity change from 0 to 32768 [ 192.455568][ T8220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.951 (8220) [ 192.484034][ T8220] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.503269][ T8220] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 192.512835][ T8220] BTRFS info (device loop3): using free space tree [ 192.613271][ T8253] loop1: detected capacity change from 0 to 256 [ 192.628780][ T8220] BTRFS info (device loop3): enabling ssd optimizations [ 192.644089][ T8220] BTRFS info (device loop3): auto enabling async discard [ 192.751171][ T8253] FAT-fs (loop1): Directory bread(block 64) failed [ 192.757974][ T8253] FAT-fs (loop1): Directory bread(block 65) failed [ 192.775812][ T8253] FAT-fs (loop1): Directory bread(block 66) failed [ 192.788857][ T8253] FAT-fs (loop1): Directory bread(block 67) failed [ 192.806596][ T8253] FAT-fs (loop1): Directory bread(block 68) failed [ 192.823540][ T8253] FAT-fs (loop1): Directory bread(block 69) failed [ 192.832312][ T5799] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.853858][ T8253] FAT-fs (loop1): Directory bread(block 70) failed [ 192.871940][ T8253] FAT-fs (loop1): Directory bread(block 71) failed [ 192.873080][ T8261] loop2: detected capacity change from 0 to 1024 [ 192.888583][ T8253] FAT-fs (loop1): Directory bread(block 72) failed [ 192.905886][ T8253] FAT-fs (loop1): Directory bread(block 73) failed [ 192.942230][ T8261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.524140][ T8257] loop0: detected capacity change from 0 to 32768 [ 193.555454][ T8257] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.727363][ T8257] XFS (loop0): Ending clean mount [ 193.771786][ T5779] kernel read not supported for file /dsp (pid: 5779 comm: kworker/0:3) [ 193.895652][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.055821][ T8265] loop2: detected capacity change from 0 to 32768 [ 194.136179][ T8265] XFS: ikeep mount option is deprecated. [ 194.193739][ T8265] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.295013][ T8265] XFS (loop2): Ending clean mount [ 194.303575][ T8265] XFS (loop2): Quotacheck needed: Please wait. [ 194.377607][ T8297] loop1: detected capacity change from 0 to 2048 [ 194.407335][ T8297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.426578][ T8265] XFS (loop2): Quotacheck: Done. [ 194.442789][ T8299] loop0: detected capacity change from 0 to 128 [ 194.518867][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 194.613085][ T5793] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.955003][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.968659][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.043742][ T8285] loop3: detected capacity change from 0 to 40427 [ 195.069171][ T8285] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 195.103210][ T8309] netlink: 'syz.2.978': attribute type 49 has an invalid length. [ 195.120290][ T8285] F2FS-fs (loop3): invalid crc value [ 195.129226][ T8309] netlink: 'syz.2.978': attribute type 49 has an invalid length. [ 195.147309][ T8285] F2FS-fs (loop3): Found nat_bits in checkpoint [ 195.159951][ T8309] netlink: 'syz.2.978': attribute type 49 has an invalid length. [ 195.282007][ T8285] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 195.382815][ T5799] syz-executor: attempt to access beyond end of device [ 195.382815][ T5799] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.429129][ T5799] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 195.655918][ T28] audit: type=1326 audit(1754568214.567:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 195.681539][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.738467][ T28] audit: type=1326 audit(1754568214.607:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 195.762078][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.815904][ T28] audit: type=1326 audit(1754568214.607:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5e9e98ebe9 code=0x7ffc0000 [ 195.866960][ T8333] "syz.1.992" (8333) uses obsolete ecb(arc4) skcipher [ 195.896034][ T28] audit: type=1326 audit(1754568214.607:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e9e98ec23 code=0x7ffc0000 [ 195.932313][ T8331] loop0: detected capacity change from 0 to 8192 [ 195.943482][ T28] audit: type=1326 audit(1754568214.697:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e9e98d69f code=0x7ffc0000 [ 195.968319][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.038524][ T28] audit: type=1326 audit(1754568214.847:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5e9e98ec77 code=0x7ffc0000 [ 196.118494][ T28] audit: type=1326 audit(1754568214.847:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e9e98d550 code=0x7ffc0000 [ 196.178369][ T28] audit: type=1326 audit(1754568214.847:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e9e98e7eb code=0x7ffc0000 [ 196.228985][ T28] audit: type=1326 audit(1754568214.857:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e9e98d84a code=0x7ffc0000 [ 196.293914][ T28] audit: type=1326 audit(1754568214.857:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e9e98d84a code=0x7ffc0000 [ 196.347351][ T8321] loop2: detected capacity change from 0 to 32768 [ 196.398675][ T8321] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.477044][ T8321] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 196.497984][ T8353] loop0: detected capacity change from 0 to 256 [ 196.524439][ T8321] XFS (loop2): Starting recovery (logdev: internal) [ 196.546260][ T8353] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 196.594168][ T8321] XFS (loop2): Ending recovery (logdev: internal) [ 196.623847][ T8321] XFS (loop2): Quotacheck needed: Please wait. [ 196.710073][ T8321] XFS (loop2): Quotacheck: Done. [ 196.908725][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.557676][ T8356] loop1: detected capacity change from 0 to 32768 [ 197.603727][ T8370] loop0: detected capacity change from 0 to 512 [ 197.645105][ T8370] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1005: corrupted in-inode xattr: e_value size too large [ 197.672236][ T8370] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1005: couldn't read orphan inode 15 (err -117) [ 197.690280][ T8370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.855186][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.859914][ T8383] loop3: detected capacity change from 0 to 512 [ 197.875561][ T8383] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.884327][ T8383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.912335][ T8383] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1012: invalid block [ 197.934866][ T8383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1012: invalid indirect mapped block 4294967295 (level 1) [ 197.974458][ T8383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1012: invalid indirect mapped block 4294967295 (level 1) [ 198.001540][ T8383] EXT4-fs (loop3): 2 truncates cleaned up [ 198.011837][ T8383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.192205][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.401217][ T8398] loop3: detected capacity change from 0 to 64 [ 198.488780][ T1080] ------------[ cut here ]------------ [ 198.494477][ T1080] kernel BUG at fs/hfs/inode.c:449! [ 198.505593][ T1080] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 198.512465][ T1080] CPU: 1 PID: 1080 Comm: kworker/u4:7 Not tainted 6.6.101-syzkaller #0 [ 198.521189][ T1080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.531464][ T1080] Workqueue: writeback wb_workfn (flush-7:3) [ 198.537760][ T1080] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 198.543739][ T1080] Code: c7 c1 00 d3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 d3 ee 96 e8 a6 04 86 ff e9 6c fe ff ff e8 bc be 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 198.563968][ T1080] RSP: 0018:ffffc9000459f360 EFLAGS: 00010293 [ 198.570633][ T1080] RAX: ffffffff8256d6d4 RBX: ffff888030735628 RCX: ffff888023175a00 [ 198.579471][ T1080] RDX: 0000000000000000 RSI: ffffffff8cf38400 RDI: 0000000000000000 [ 198.588293][ T1080] RBP: ffffc9000459f4f0 R08: ffff888023175a00 R09: 0000000000000003 [ 198.596660][ T1080] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 198.604852][ T1080] R13: 1ffff920008b3e70 R14: ffff8880307355d8 R15: 0000000000000000 [ 198.613053][ T1080] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 198.622223][ T1080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.629028][ T1080] CR2: 00005555867445c8 CR3: 0000000061208000 CR4: 00000000003506e0 [ 198.637236][ T1080] Call Trace: [ 198.640740][ T1080] [ 198.643894][ T1080] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 198.649662][ T1080] ? __rwlock_init+0x150/0x150 [ 198.650339][ T8392] loop2: detected capacity change from 0 to 40427 [ 198.654713][ T1080] __writeback_single_inode+0x705/0xee0 [ 198.663057][ T8392] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 198.666891][ T1080] writeback_sb_inodes+0x77c/0xef0 [ 198.675379][ T8392] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 198.680397][ T1080] ? queue_io+0x560/0x560 [ 198.680440][ T1080] ? rcu_is_watching+0x15/0xb0 [ 198.680472][ T1080] wb_writeback+0x450/0xba0 [ 198.693161][ T8392] F2FS-fs (loop2): invalid crc value [ 198.693583][ T1080] ? queue_io+0x2f1/0x560 [ 198.710182][ T8392] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 198.713679][ T1080] ? percpu_ref_tryget+0x250/0x250 [ 198.713720][ T1080] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 198.734384][ T1080] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.739728][ T1080] wb_workfn+0x3ff/0xe20 [ 198.744198][ T1080] ? inode_wait_for_writeback+0x200/0x200 [ 198.750376][ T1080] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 198.756673][ T1080] ? read_lock_is_recursive+0x20/0x20 [ 198.762183][ T1080] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.767522][ T1080] ? process_scheduled_works+0x957/0x15b0 [ 198.773631][ T1080] ? process_scheduled_works+0x957/0x15b0 [ 198.779614][ T1080] process_scheduled_works+0xa45/0x15b0 [ 198.785254][ T1080] ? assign_work+0x400/0x400 [ 198.790112][ T1080] ? assign_work+0x39e/0x400 [ 198.792325][ T8392] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 198.795333][ T1080] worker_thread+0xa55/0xfc0 [ 198.795386][ T1080] kthread+0x2fa/0x390 [ 198.803252][ T8392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.807656][ T1080] ? pr_cont_work+0x560/0x560 [ 198.807696][ T1080] ? kthread_blkcg+0xd0/0xd0 [ 198.807715][ T1080] ret_from_fork+0x48/0x80 [ 198.836524][ T1080] ? kthread_blkcg+0xd0/0xd0 [ 198.841254][ T1080] ret_from_fork_asm+0x11/0x20 [ 198.846186][ T1080] [ 198.849530][ T1080] Modules linked in: [ 198.865947][ T1080] ---[ end trace 0000000000000000 ]--- [ 198.875950][ T1080] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 198.882690][ T1080] Code: c7 c1 00 d3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 d3 ee 96 e8 a6 04 86 ff e9 6c fe ff ff e8 bc be 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 198.904419][ T1080] RSP: 0018:ffffc9000459f360 EFLAGS: 00010293 [ 198.911538][ T1080] RAX: ffffffff8256d6d4 RBX: ffff888030735628 RCX: ffff888023175a00 [ 198.921542][ T1080] RDX: 0000000000000000 RSI: ffffffff8cf38400 RDI: 0000000000000000 [ 198.930128][ T5875] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 198.940058][ T1080] RBP: ffffc9000459f4f0 R08: ffff888023175a00 R09: 0000000000000003 [ 198.949085][ T1080] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 198.957323][ T1080] R13: 1ffff920008b3e70 R14: ffff8880307355d8 R15: 0000000000000000 [ 198.966866][ T1080] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 198.976909][ T1080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.983967][ T1080] CR2: 00007f898a6aef98 CR3: 0000000031130000 CR4: 00000000003506e0 [ 198.993209][ T1080] Kernel panic - not syncing: Fatal exception [ 198.999989][ T1080] Kernel Offset: disabled [ 199.004618][ T1080] Rebooting in 86400 seconds..