last executing test programs: 15m44.492158437s ago: executing program 32 (id=856): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x40) 10m58.081796563s ago: executing program 4 (id=2948): setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty=0x2000000}, 0x10, 0x0}}], 0x1, 0x0) 10m57.703878951s ago: executing program 4 (id=2952): madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f0000001240)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) 10m57.481326767s ago: executing program 4 (id=2955): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/usb/drivers_autoprobe\x00', 0x100, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 10m57.254075362s ago: executing program 4 (id=2958): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 10m56.740176065s ago: executing program 4 (id=2963): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 10m56.203561658s ago: executing program 4 (id=2970): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="8200047d66", 0x5}], 0x1}, 0x4) 10m55.876623806s ago: executing program 33 (id=2970): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="8200047d66", 0x5}], 0x1}, 0x4) 9m4.641828316s ago: executing program 0 (id=4013): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="84", 0x1}], 0x1) 9m4.46252819s ago: executing program 0 (id=4016): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) 9m2.888758158s ago: executing program 0 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2) 9m2.671675713s ago: executing program 0 (id=4037): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 9m2.455659249s ago: executing program 0 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 9m2.054848948s ago: executing program 0 (id=4048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvfrom(r0, &(0x7f0000000280)=""/244, 0xf4, 0x3, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 9m1.680575177s ago: executing program 34 (id=4048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvfrom(r0, &(0x7f0000000280)=""/244, 0xf4, 0x3, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 7m54.168590437s ago: executing program 2 (id=4468): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2, 0x4) 7m53.769743597s ago: executing program 2 (id=4472): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x8d8a4000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000713000/0x3000)=nil, 0x400000, 0x1, 0x6040000}) 7m53.215740851s ago: executing program 2 (id=4476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x9, 0xfffc, 0x6, 0x3, 0x40100000}, &(0x7f0000000080)=0x14) 7m52.926943168s ago: executing program 2 (id=4479): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x5, 0x8a, 0x20000}, 0x20) 7m52.591218146s ago: executing program 2 (id=4483): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = io_uring_setup(0x6d24, &(0x7f0000000300)={0x0, 0xf981, 0x100, 0x0, 0x32b}) read(r0, &(0x7f0000000380)=""/153, 0x99) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 7m50.875429897s ago: executing program 2 (id=4488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7m49.969823338s ago: executing program 35 (id=4488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7m46.308802466s ago: executing program 1 (id=4499): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000040)='./file2\x00', 0x804, &(0x7f00000003c0), 0x1, 0x1530, &(0x7f0000002c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000000200)=""/182, 0xb6) 7m45.76148543s ago: executing program 1 (id=4502): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f0000000000)='./file0\x00', 0x232f) 7m45.003643568s ago: executing program 1 (id=4503): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 7m44.057195891s ago: executing program 1 (id=4505): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 7m43.355841927s ago: executing program 1 (id=4508): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r0, &(0x7f0000000180)=""/236, 0xec) 7m41.663701028s ago: executing program 1 (id=4517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x104a, &(0x7f0000002100)=ANY=[], 0x0) 7m40.946960755s ago: executing program 36 (id=4517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x104a, &(0x7f0000002100)=ANY=[], 0x0) 1m49.773453036s ago: executing program 8 (id=5892): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 1m49.412072974s ago: executing program 8 (id=5895): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) 1m48.811934019s ago: executing program 8 (id=5908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) setuid(0xee01) ioctl(r0, 0xc138fd03, 0x0) 1m48.548998365s ago: executing program 8 (id=5903): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m47.845804943s ago: executing program 8 (id=5909): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x103, 0x1) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getdents(r0, 0x0, 0x0) 1m47.015843802s ago: executing program 8 (id=5911): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r3 = dup2(r1, r0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r3}) 1m45.984336537s ago: executing program 37 (id=5911): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r3 = dup2(r1, r0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r3}) 1m7.495621601s ago: executing program 6 (id=6104): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) 1m7.075445881s ago: executing program 6 (id=6108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000740)={0x6, 'macsec0\x00', {}, 0x9}) 1m6.962884593s ago: executing program 6 (id=6109): unshare(0x2040400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0], 0xfb, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r1) 1m6.71387349s ago: executing program 6 (id=6111): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 1m6.463960526s ago: executing program 6 (id=6112): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x12, 0x5, 0x80004}, 0x18) 1m5.617434956s ago: executing program 6 (id=6115): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.949757642s ago: executing program 38 (id=6115): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.205898895s ago: executing program 9 (id=6416): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) unlink(&(0x7f0000000180)='./file1\x00') 6.083728702s ago: executing program 3 (id=6433): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 6.004519875s ago: executing program 9 (id=6426): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@inlinecrypt}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.242642207s ago: executing program 3 (id=6438): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) 4.242376027s ago: executing program 9 (id=6431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 3.988504293s ago: executing program 3 (id=6434): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x3, "7e359c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.289087184s ago: executing program 5 (id=6443): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 2.160099387s ago: executing program 5 (id=6446): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) 2.085088499s ago: executing program 5 (id=6447): r0 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) 1.891678414s ago: executing program 5 (id=6448): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x42028, 0x0, 0x21, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x300) removexattr(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000100)=@random={'os2.', '+]%-$+\\}:]\x00'}) 1.891434043s ago: executing program 3 (id=6449): bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 1.792869796s ago: executing program 5 (id=6450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x8871b000) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 1.62261178s ago: executing program 5 (id=6453): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x104d) 1.449152644s ago: executing program 9 (id=6455): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1.330759997s ago: executing program 9 (id=6456): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ptrace$setregs(0xd, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) 986.605175ms ago: executing program 7 (id=6459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000400000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c4400000000002020207b1af8ff00000000aaa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 907.983337ms ago: executing program 7 (id=6460): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 608.746565ms ago: executing program 7 (id=6461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x8871b000) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 467.219838ms ago: executing program 7 (id=6462): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0xb25) ptrace$pokeuser(0x6, r0, 0x388, 0x3000000) 363.24846ms ago: executing program 9 (id=6463): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3010846, &(0x7f0000000340)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@usrquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@usrquota}, {@noquota}, {@gid}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x24, 0x6318, &(0x7f0000011180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000006080)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 308.534081ms ago: executing program 7 (id=6464): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000002480)="$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") 125.770036ms ago: executing program 3 (id=6465): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x21) close(0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r1, 0xffffffffffffffff, 0x0) 13.160779ms ago: executing program 3 (id=6466): mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) unshare(0x22020600) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0xfffe}) 0s ago: executing program 7 (id=6467): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r2, 0xfffffd30, 0x0, 0x0}) kernel console output (not intermixed with test programs): registering): Port device C removed [ 207.032380][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.150950][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.636146][ T4455] bond0 (unregistering): Released all slaves [ 208.024779][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.097940][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.105162][ T8077] bridge_slave_0: entered allmulticast mode [ 208.176591][ T8210] (null): rxe_set_mtu: Set mtu to 1024 [ 208.199364][ T8077] bridge_slave_0: entered promiscuous mode [ 208.307415][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.314558][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.410008][ T5784] Bluetooth: hci0: command tx timeout [ 208.415654][ T8077] bridge_slave_1: entered allmulticast mode [ 208.460629][ T8077] bridge_slave_1: entered promiscuous mode [ 208.695819][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.752684][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.938745][ T8077] team0: Port device team_slave_0 added [ 208.988267][ T8077] team0: Port device team_slave_1 added [ 209.101822][ T8225] netlink: 92 bytes leftover after parsing attributes in process `syz.1.904'. [ 209.135702][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.170421][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.304634][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.349321][ T8210] infiniband syz1: set active [ 209.367041][ T8225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.904'. [ 209.402808][ T8210] infiniband syz1: added syz_tun [ 209.415316][ T8210] syz1: rxe_create_cq: returned err = -12 [ 209.429057][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.464575][ T8210] infiniband syz1: Couldn't create ib_mad CQ [ 209.472324][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.519904][ T8210] infiniband syz1: Couldn't open port 1 [ 209.647628][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.700850][ T8210] RDS/IB: syz1: added [ 209.725772][ T8210] smc: adding ib device syz1 with port count 1 [ 209.782950][ T8210] smc: ib device syz1 port 1 has pnetid [ 210.002685][ T8077] hsr_slave_0: entered promiscuous mode [ 210.137116][ T8077] hsr_slave_1: entered promiscuous mode [ 210.237325][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 210.237338][ T28] audit: type=1326 audit(1786648785.159:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1de99e0d9 code=0x7ffc0000 [ 210.477848][ T28] audit: type=1326 audit(1786648785.159:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1de99e0d9 code=0x7ffc0000 [ 210.671192][ T28] audit: type=1326 audit(1786648785.179:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd1de99e0d9 code=0x7ffc0000 [ 210.826786][ T28] audit: type=1326 audit(1786648785.189:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1de99e0d9 code=0x7ffc0000 [ 210.866784][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.023804][ T28] audit: type=1326 audit(1786648785.219:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd1de99e0d9 code=0x7ffc0000 [ 211.124385][ T8] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 211.166165][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.207947][ T28] audit: type=1326 audit(1786648785.219:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.2.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1de99e0d9 code=0x7ffc0000 [ 211.251496][ T8] usb 3-1: Product: syz [ 211.255711][ T8] usb 3-1: Manufacturer: syz [ 211.311126][ T8] usb 3-1: SerialNumber: syz [ 211.356098][ T8] usb 3-1: config 0 descriptor?? [ 211.367447][ T8077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.418859][ T8] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 012 [ 211.448586][ T8077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.600425][ T8077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.671641][ T8077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.837956][ T8] (null): failure reading functionality [ 211.897700][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 212.122476][ T8] usb 3-1: USB disconnect, device number 12 [ 212.152931][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.274840][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.332724][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.339928][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.447817][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.454993][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.603274][ T8077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.645600][ T8270] pi3usb30532 0-0005: Error reading config register -5 [ 212.687159][ T8077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.709332][ T8270] pi3usb30532: probe of 0-0005 failed with error -5 [ 212.787748][ T8270] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 213.547422][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.884940][ T8300] netlink: 'syz.0.924': attribute type 4 has an invalid length. [ 213.970321][ T8302] loop2: detected capacity change from 0 to 256 [ 213.982782][ T8304] (null): rxe_set_mtu: Set mtu to 256 [ 214.015264][ T8299] netlink: 'syz.1.923': attribute type 12 has an invalid length. [ 214.090953][ T8299] netlink: 'syz.1.923': attribute type 29 has an invalid length. [ 214.121644][ T8299] netlink: 148 bytes leftover after parsing attributes in process `syz.1.923'. [ 214.188764][ T8299] netlink: 'syz.1.923': attribute type 2 has an invalid length. [ 214.225872][ T8299] netlink: 'syz.1.923': attribute type 3 has an invalid length. [ 214.251825][ T8299] netlink: 19 bytes leftover after parsing attributes in process `syz.1.923'. [ 214.285582][ T8304] lo speed is unknown, defaulting to 1000 [ 214.325257][ T8304] lo speed is unknown, defaulting to 1000 [ 214.392750][ T8304] lo speed is unknown, defaulting to 1000 [ 214.737109][ T8] kernel write not supported for file /sequencer (pid: 8 comm: kworker/0:0) [ 215.155803][ T8077] veth0_vlan: entered promiscuous mode [ 215.251852][ T8077] veth1_vlan: entered promiscuous mode [ 215.283196][ T8304] infiniband syz2: set down [ 215.315926][ T8] lo speed is unknown, defaulting to 1000 [ 215.342209][ T8304] infiniband syz2: added lo [ 215.372336][ T8304] syz2: rxe_create_cq: returned err = -12 [ 215.403487][ T8304] infiniband syz2: Couldn't create ib_mad CQ [ 215.415889][ T8077] veth0_macvtap: entered promiscuous mode [ 215.446566][ T8304] infiniband syz2: Couldn't open port 1 [ 215.492183][ T8077] veth1_macvtap: entered promiscuous mode [ 215.584455][ T8304] RDS/IB: syz2: added [ 215.605355][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.635742][ T8304] smc: adding ib device syz2 with port count 1 [ 215.672421][ T8304] smc: ib device syz2 port 1 has pnetid [ 215.688663][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.748930][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.811529][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.840680][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.895496][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.941575][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.973023][ T8304] lo speed is unknown, defaulting to 1000 [ 216.029815][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.077467][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.149710][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.225048][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.275512][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.319728][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.372531][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.447480][ T9] lo speed is unknown, defaulting to 1000 [ 216.470479][ T8077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.520612][ T8077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.553255][ T8077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.583590][ T8077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.693424][ T8304] lo speed is unknown, defaulting to 1000 [ 216.817683][ T5842] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 216.894752][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.944272][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.032571][ T8347] loop1: detected capacity change from 0 to 4096 [ 217.046652][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 217.061988][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.084072][ T5842] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 217.111396][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.126434][ T5842] usb 3-1: config 1 has no interface number 0 [ 217.181244][ T5842] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 217.273587][ T5842] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.348403][ T5842] usb 3-1: config 1 interface 105 has no altsetting 0 [ 217.428732][ T5842] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 217.495304][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 217.549623][ T5842] usb 3-1: Product: syz [ 217.553836][ T5842] usb 3-1: Manufacturer: syz [ 217.607968][ T8304] lo speed is unknown, defaulting to 1000 [ 217.634283][ T5842] usb 3-1: SerialNumber: syz [ 217.679349][ T8344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.758947][ T8344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.247083][ T8344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.254287][ T8344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.559684][ T5842] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 218.576824][ T8304] lo speed is unknown, defaulting to 1000 [ 218.647668][ T5842] aqc111: probe of 3-1:1.105 failed with error -71 [ 218.691520][ T5842] usb 3-1: USB disconnect, device number 13 [ 219.515822][ T8380] trusted_key: syz.2.944 sent an empty control message without MSG_MORE. [ 219.877244][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.945'. [ 221.335277][ T8418] usbip-vudc usbip-vudc.0: gadget not bound [ 221.590512][ T8392] loop4: detected capacity change from 0 to 32768 [ 221.701185][ T8424] /dev/loop0: Can't open blockdev [ 221.751984][ T8392] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 221.768485][ T8424] /dev/loop0: Can't open blockdev [ 222.001710][ T8392] XFS (loop4): Ending clean mount [ 222.181185][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 222.475084][ T8077] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.199935][ T8460] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.215490][ T8484] loop2: detected capacity change from 0 to 256 [ 224.382485][ T8484] FAT-fs (loop2): Directory bread(block 64) failed [ 224.439869][ T8484] FAT-fs (loop2): Directory bread(block 65) failed [ 224.446529][ T8484] FAT-fs (loop2): Directory bread(block 66) failed [ 224.554609][ T8484] FAT-fs (loop2): Directory bread(block 67) failed [ 224.612340][ T8484] FAT-fs (loop2): Directory bread(block 68) failed [ 224.654932][ T8484] FAT-fs (loop2): Directory bread(block 69) failed [ 224.707592][ T8484] FAT-fs (loop2): Directory bread(block 70) failed [ 224.714174][ T8484] FAT-fs (loop2): Directory bread(block 71) failed [ 224.807456][ T8484] FAT-fs (loop2): Directory bread(block 72) failed [ 224.814018][ T8484] FAT-fs (loop2): Directory bread(block 73) failed [ 225.553277][ T8513] loop2: detected capacity change from 0 to 2048 [ 225.677901][ T8513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.053401][ T8529] netlink: 56 bytes leftover after parsing attributes in process `syz.4.993'. [ 226.131166][ T8529] netlink: 56 bytes leftover after parsing attributes in process `syz.4.993'. [ 226.186613][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.475498][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'. [ 226.827428][ T8546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1000'. [ 226.900602][ T8549] loop4: detected capacity change from 0 to 1764 [ 227.073312][ T8549] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 227.316881][ T8553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.385139][ T8553] bond0: (slave bond1): Enslaving as an active interface with an up link [ 227.711114][ T8565] loop4: detected capacity change from 0 to 512 [ 227.770420][ T8565] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 227.935347][ T8565] EXT4-fs (loop4): 1 truncate cleaned up [ 227.982851][ T8565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.705592][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.738516][ T8584] loop1: detected capacity change from 0 to 2048 [ 228.977217][ T8591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.048802][ T8593] loop4: detected capacity change from 0 to 16 [ 229.066443][ T8593] erofs: (device loop4): mounted with root inode @ nid 36. [ 229.088733][ T5784] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 229.128187][ T8593] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 229.140173][ T28] audit: type=1800 audit(1786648804.099:42): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1013" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 229.891890][ T8591] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 229.974398][ T8591] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 230.101418][ T8591] Remounting filesystem read-only [ 230.121966][ T59] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 230.162782][ T59] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 230.206394][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.267750][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.295772][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.380078][ T59] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 230.436787][ T59] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 230.444130][ T59] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 230.497460][ T174] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 230.516812][ T59] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 230.557570][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.611448][ T59] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 230.650171][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.716327][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.727856][ T174] usb 1-1: Using ep0 maxpacket: 32 [ 230.773198][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 230.780941][ T174] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 230.818812][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.831423][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.882447][ T59] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 230.897809][ T174] usb 1-1: config 0 descriptor?? [ 230.944380][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.003378][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.073510][ T59] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 231.106459][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.171239][ T174] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 231.182461][ T59] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 231.224763][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 231.242661][ T174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.292950][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.345079][ T174] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 231.365100][ T8617] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 231.391719][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.413217][ T174] usb 1-1: media controller created [ 231.450149][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.473025][ T8639] loop4: detected capacity change from 0 to 736 [ 231.512948][ T59] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 231.543800][ T174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.572873][ T59] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 231.629719][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.717387][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.745082][ T174] az6027: usb out operation failed. (-71) [ 231.780753][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.802036][ T174] az6027: usb out operation failed. (-71) [ 231.834205][ T174] stb0899_attach: Driver disabled by Kconfig [ 231.850201][ T8639] isofs: Unable to find the ".." directory for NFS. [ 231.867143][ T59] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 231.873892][ T59] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 231.895461][ T174] az6027: no front-end attached [ 231.895461][ T174] [ 231.947687][ T174] az6027: usb out operation failed. (-71) [ 231.967558][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 232.006632][ T174] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 232.040956][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 232.100994][ T174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 232.123577][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 232.206909][ T59] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 232.213636][ T59] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 232.227231][ T174] dvb-usb: schedule remote query interval to 400 msecs. [ 232.234207][ T174] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 232.334766][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 232.348896][ T8630] loop2: detected capacity change from 0 to 32768 [ 232.412143][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 232.423262][ T174] usb 1-1: USB disconnect, device number 11 [ 232.507921][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 232.550178][ T8630] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 232.618420][ T5777] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 232.784251][ T5777] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 232.859301][ T174] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 232.931848][ T5777] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 233.049682][ T5777] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 233.176958][ T5777] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 233.235664][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 233.299104][ T5777] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 234.302499][ T8657] loop4: detected capacity change from 0 to 32768 [ 234.387010][ T8657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1035 (8657) [ 234.539597][ T8657] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.626136][ T8657] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 234.701586][ T8657] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 234.796947][ T8657] BTRFS info (device loop4): trying to use backup root at mount time [ 234.853764][ T8657] BTRFS info (device loop4): using free space tree [ 235.047509][ T4455] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 235.153458][ T8657] BTRFS warning (device loop4): couldn't read tree root [ 235.196878][ T8657] BTRFS warning (device loop4): try to load backup roots slot 1 [ 235.314366][ T8657] BTRFS info (device loop4): enabling ssd optimizations [ 235.363388][ T8657] BTRFS info (device loop4): auto enabling async discard [ 235.438559][ T8657] BTRFS info (device loop4): rebuilding free space tree [ 235.989973][ T8077] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.737187][ T8707] loop2: detected capacity change from 0 to 32768 [ 236.744339][ T8736] sctp: [Deprecated]: syz.4.1056 (pid 8736) Use of int in maxseg socket option. [ 236.744339][ T8736] Use struct sctp_assoc_value instead [ 236.904716][ T8707] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 237.157352][ T8707] XFS (loop2): Ending clean mount [ 237.433174][ T8748] loop1: detected capacity change from 0 to 4096 [ 237.564991][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 237.590690][ T8748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.020325][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.448222][ T8770] kernel read not supported for file /batadv_slave_1 (pid: 8770 comm: syz.0.1069) [ 238.488841][ T28] audit: type=1800 audit(1786648813.439:43): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1069" name=6261746164765F736C6176655F31BB dev="mqueue" ino=18686 res=0 errno=0 [ 238.517532][ T8771] 9pnet_fd: Insufficient options for proto=fd [ 238.675927][ T8760] loop4: detected capacity change from 0 to 32768 [ 238.802865][ T8760] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 239.008937][ T8760] XFS (loop4): Ending clean mount [ 239.367702][ T8788] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1072'. [ 239.446528][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 239.557231][ T8077] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 239.849279][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1075'. [ 240.169901][ T8768] loop1: detected capacity change from 0 to 32768 [ 240.262621][ T8768] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.368206][ T8768] XFS (loop1): Ending clean mount [ 240.462058][ T8768] XFS (loop1): Quotacheck needed: Please wait. [ 240.627952][ T8768] XFS (loop1): Quotacheck: Done. [ 240.856861][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.068887][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.077873][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 241.126927][ T8] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.135056][ T8] usb 3-1: config 0 has no interface number 0 [ 241.212976][ T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.261046][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.311779][ T8] usb 3-1: Product: syz [ 241.324952][ T8825] loop4: detected capacity change from 0 to 1024 [ 241.346646][ T28] audit: type=1807 audit(1786648816.299:44): UNKNOWN=m`easue^zhVܔre res=0 [ 241.361451][ T8] usb 3-1: Manufacturer: syz [ 241.366070][ T8] usb 3-1: SerialNumber: syz [ 241.374210][ T8823] ima: policy update failed [ 241.400116][ T28] audit: type=1802 audit(1786648816.329:45): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1082" res=0 errno=0 [ 241.419694][ T8825] EXT4-fs: Ignoring removed bh option [ 241.430017][ T8] usb 3-1: config 0 descriptor?? [ 241.479832][ T8] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.530718][ T8825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.543300][ T28] audit: type=1802 audit(1786648816.339:46): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1082" res=0 errno=0 [ 241.675137][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.696143][ T8825] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 241.752739][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.817826][ T8825] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.1073: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 242.110526][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.202415][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.212531][ T8] usb 3-1: USB disconnect, device number 14 [ 242.243928][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.308065][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.373350][ T8] quatech2 3-1:0.51: device disconnected [ 243.027455][ T8848] program syz.0.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.471100][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 243.504534][ T8862] netlink: 'syz.0.1097': attribute type 30 has an invalid length. [ 243.686876][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 243.710954][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.745248][ T8] usb 2-1: config 0 has no interface number 0 [ 243.791866][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.855864][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.896512][ T8] usb 2-1: Product: syz [ 243.917899][ T8] usb 2-1: Manufacturer: syz [ 243.922541][ T8] usb 2-1: SerialNumber: syz [ 243.996347][ T8] usb 2-1: config 0 descriptor?? [ 244.041079][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.158040][ T8874] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 244.278271][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.365883][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.472376][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.605949][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.951487][ T8888] program syz.2.1107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.186088][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 245.194110][ T5832] usb 2-1: USB disconnect, device number 6 [ 245.259693][ T5832] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 245.292145][ T8890] loop4: detected capacity change from 0 to 4096 [ 245.345211][ T8890] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 245.357557][ T5832] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 245.487392][ T5832] quatech2 2-1:0.51: device disconnected [ 245.682453][ T8890] ntfs3: loop4: ino=0, attr_set_size [ 245.773717][ T8890] ntfs3: loop4: MFT: r=0, expect seq=0 instead of 1! [ 246.304024][ T8908] loop1: detected capacity change from 0 to 2048 [ 246.510327][ T8920] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.930973][ T8927] loop4: detected capacity change from 0 to 128 [ 247.038413][ T8927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 247.138919][ T8927] System zones: 1-3, 19-19, 35-36 [ 247.170436][ T8927] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.230213][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 247.266879][ T8927] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.390434][ T8927] EXT4-fs warning (device loop4): ext4_group_extend:1897: can't read last block, resize aborted [ 247.629607][ T8077] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.126356][ T8948] loop4: detected capacity change from 0 to 32768 [ 249.244028][ T8948] JBD2: Ignoring recovery information on journal [ 249.431357][ T8948] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 249.770627][ T8989] loop1: detected capacity change from 0 to 1024 [ 249.851750][ T8989] EXT4-fs: inline encryption not supported [ 249.966543][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 250.031845][ T8989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.057057][ T8077] ocfs2: Unmounting device (7,4) on (node local) [ 250.296488][ T28] audit: type=1800 audit(1786648825.239:47): pid=8989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1136" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 250.536270][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.505956][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 252.222659][ T9045] loop4: detected capacity change from 0 to 512 [ 252.291254][ T9045] EXT4-fs: inline encryption not supported [ 252.405103][ T9045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 252.511019][ T9045] EXT4-fs (loop4): 1 truncate cleaned up [ 252.571908][ T9045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.137191][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.359650][ T9058] loop2: detected capacity change from 0 to 65536 [ 255.516623][ T9058] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 255.722847][ T9058] XFS (loop2): Ending clean mount [ 255.790020][ T9058] XFS (loop2): Quotacheck needed: Please wait. [ 255.878066][ T9099] loop4: detected capacity change from 0 to 32768 [ 255.938858][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945186][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.992647][ T9058] XFS (loop2): Quotacheck: Done. [ 256.006295][ T9099] (syz.4.1171,9099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.129439][ T9099] (syz.4.1171,9099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.208394][ T5780] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 256.254521][ T9099] (syz.4.1171,9099,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 256.413003][ T9099] JBD2: Ignoring recovery information on journal [ 256.569471][ T9099] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 257.018462][ T8077] ocfs2: Unmounting device (7,4) on (node local) [ 258.336198][ T9168] clocksource: Switched to clocksource acpi_pm [ 258.641595][ T9172] loop1: detected capacity change from 0 to 2048 [ 258.850186][ T9172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.058792][ T9172] EXT4-fs error (device loop1): ext4_ext_precache:639: inode #2: comm syz.1.1188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 259.211638][ T9172] EXT4-fs (loop1): Remounting filesystem read-only [ 259.468679][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.402988][ T9220] loop1: detected capacity change from 0 to 64 [ 260.843099][ T5777] hfs: node 4:3 still has 1 user(s)! [ 261.123159][ T9212] loop2: detected capacity change from 0 to 32768 [ 261.211187][ T9229] loop1: detected capacity change from 0 to 8 [ 261.260908][ T9212] read_mapping_page failed! [ 261.319543][ T9212] ERROR: (device loop2): txCommit: [ 261.319543][ T9212] [ 261.384628][ T9229] Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 261.506352][ T9229] Please update your kernel [ 262.446502][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 262.698410][ T9265] loop2: detected capacity change from 0 to 256 [ 262.721910][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.769256][ T8] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 262.839510][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.910520][ T8] usb 2-1: config 0 descriptor?? [ 263.378023][ T8] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 263.424083][ T8] waltop 0003:172F:0032.0003: item fetching failed at offset 6/41 [ 263.462421][ T8] waltop: probe of 0003:172F:0032.0003 failed with error -22 [ 263.712315][ T5832] usb 2-1: USB disconnect, device number 7 [ 263.866584][ T9277] i2c i2c-0: new_device: Can't parse I2C address [ 265.375499][ T9315] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 0 [ 265.407306][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1234'. [ 265.491960][ T9320] autofs4:pid:9320:autofs_fill_super: pipe file descriptor does not contain proper ops [ 265.691165][ T9324] loop4: detected capacity change from 0 to 2048 [ 265.753143][ T9324] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=4294967289, location=4294967289 [ 265.842650][ T9324] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.530326][ T9340] loop4: detected capacity change from 0 to 1024 [ 266.552243][ T9340] EXT4-fs: inline encryption not supported [ 266.585470][ T9338] loop1: detected capacity change from 0 to 4096 [ 266.592695][ T9340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.606388][ T8] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 266.661955][ T9340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 266.685786][ T9338] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 266.740893][ T9340] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.805191][ T9326] loop2: detected capacity change from 0 to 32768 [ 266.825334][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 266.892191][ T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 266.917425][ T9338] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 267.000103][ T8] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 267.025139][ T9326] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 267.044615][ T9338] ntfs3: loop1: Failed to load $Extend (-22). [ 267.084611][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 267.105537][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.113222][ T9338] ntfs3: loop1: Failed to initialize $Extend. [ 267.152567][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 267.243344][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.335834][ T8] usb 1-1: config 0 descriptor?? [ 267.387233][ T9336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 267.752635][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 267.900769][ T8] wacom 0003:056A:00CC.0004: ignoring exceeding usage max [ 268.031940][ T8] wacom 0003:056A:00CC.0004: hidraw0: USB HID v0.0c Device [HID 056a:00cc] on usb-dummy_hcd.0-1/input0 [ 268.137477][ T8] usb 1-1: USB disconnect, device number 12 [ 268.340458][ T9354] fido_id[9354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 269.025783][ T9353] loop4: detected capacity change from 0 to 32768 [ 269.099222][ T9353] [ 269.099222][ T9353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.099222][ T9353] [ 269.283236][ T28] audit: type=1800 audit(1786648844.229:48): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1249" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 269.303579][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.439714][ T9353] [ 269.439714][ T9353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.439714][ T9353] [ 269.550738][ T9353] [ 269.550738][ T9353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.550738][ T9353] [ 269.649043][ T9353] [ 269.649043][ T9353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.649043][ T9353] [ 269.709908][ T9353] [ 269.709908][ T9353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.709908][ T9353] [ 269.742880][ T9378] loop2: detected capacity change from 0 to 1024 [ 269.780859][ T9378] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 269.805754][ T112] ERROR: (device loop4): dbFree: error in block map [ 269.805754][ T112] [ 269.883772][ T9378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 269.894438][ T9353] [ 269.894438][ T9353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.894438][ T9353] [ 269.942612][ T9378] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 269.971741][ T9378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.099386][ T8077] [ 270.099386][ T8077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.099386][ T8077] [ 270.181037][ T8077] [ 270.181037][ T8077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.181037][ T8077] [ 270.217072][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.671362][ T9390] loop2: detected capacity change from 0 to 128 [ 271.186421][ T9371] loop1: detected capacity change from 0 to 32768 [ 271.401816][ T9371] read_mapping_page failed! [ 271.497111][ T9371] ERROR: (device loop1): txCommit: [ 271.497111][ T9371] [ 272.597360][ T9434] loop2: detected capacity change from 0 to 8 [ 272.667762][ T9434] squashfs image failed sanity check [ 274.054959][ T9466] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 274.093923][ T9466] syzkaller1: linktype set to 768 [ 274.679873][ T9485] loop1: detected capacity change from 0 to 512 [ 274.927202][ T9492] netlink: 'syz.4.1310': attribute type 11 has an invalid length. [ 274.969296][ T9492] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.1310'. [ 275.801186][ T9511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1317'. [ 276.896720][ T9518] loop2: detected capacity change from 0 to 40427 [ 276.931965][ T9518] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 276.964421][ T9518] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 277.023209][ T9518] F2FS-fs (loop2): invalid crc value [ 277.060337][ T9518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 277.254127][ T9518] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 277.284038][ T9518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 277.618237][ T5780] syz-executor: attempt to access beyond end of device [ 277.618237][ T5780] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.660657][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 279.350393][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 279.821800][ T9595] Bluetooth: MGMT ver 1.22 [ 280.098260][ T9602] dyndbg: expected <4096 bytes into control [ 280.684120][ T9616] loop2: detected capacity change from 0 to 2048 [ 280.779512][ T9616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.916920][ T9620] netem: change failed [ 280.937508][ T28] audit: type=1800 audit(1786648855.878:49): pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1363" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 283.073495][ T9656] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 283.352484][ T9664] loop2: detected capacity change from 0 to 16 [ 283.413647][ T9664] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 283.826769][ T9671] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1388'. [ 284.339680][ T9685] gtp0: entered allmulticast mode [ 285.328216][ T9697] loop2: detected capacity change from 0 to 8192 [ 285.695866][ T9705] vhci_hcd vhci_hcd.0: failed to lookup sock [ 287.048601][ T9721] lo speed is unknown, defaulting to 1000 [ 287.487619][ T9735] netlink: 'syz.0.1417': attribute type 12 has an invalid length. [ 287.512012][ T9735] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 287.546807][ T9735] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1417'. [ 287.608638][ T9735] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 287.638052][ T9735] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1417'. [ 287.994748][ T5812] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 288.132056][ T9747] loop4: detected capacity change from 0 to 128 [ 288.217065][ T5812] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 288.246680][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.320134][ T5812] usb 3-1: config 0 descriptor?? [ 288.352460][ T5812] cp210x 3-1:0.0: cp210x converter detected [ 288.825411][ T5812] usb 3-1: cp210x converter now attached to ttyUSB0 [ 288.871884][ T9751] loop4: detected capacity change from 0 to 8192 [ 289.029522][ T5812] usb 3-1: USB disconnect, device number 15 [ 289.336749][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 289.411337][ T5812] cp210x 3-1:0.0: device disconnected [ 290.500709][ T9776] loop4: detected capacity change from 0 to 512 [ 290.568363][ T9776] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.619615][ T9776] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 290.685249][ T9776] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 290.717800][ T9776] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 290.753941][ T9776] System zones: 0-2, 18-18, 34-35 [ 290.790028][ T9776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.937086][ T9776] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 291.132038][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.186717][ T9800] tap0: tun_chr_ioctl cmd 1074025680 [ 292.604833][ T5842] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 292.754420][ T5832] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 292.816667][ T5842] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 292.841370][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.868015][ T5842] usb 3-1: Product: syz [ 292.887305][ T5842] usb 3-1: Manufacturer: syz [ 292.904643][ T5842] usb 3-1: SerialNumber: syz [ 292.954744][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 292.987541][ T5832] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 293.017364][ T5832] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.052518][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.087517][ T9817] program syz.4.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.106186][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.157264][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 293.179174][ T5832] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.246396][ T5832] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.256262][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 293.286102][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.514509][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 293.561153][ T5832] usb 1-1: GET_CAPABILITIES returned 0 [ 293.570265][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.600484][ T5832] usbtmc 1-1:16.0: can't read capabilities [ 293.635257][ T5842] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.749887][ T5842] lan78xx: probe of 3-1:1.0 failed with error -71 [ 293.836946][ T5842] usb 3-1: USB disconnect, device number 16 [ 293.931063][ T8] usb 1-1: USB disconnect, device number 13 [ 294.554552][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 294.778481][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.825525][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.887444][ T8] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 294.951876][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.007778][ T8] usb 2-1: config 0 descriptor?? [ 295.397474][ T9846] Bluetooth: MGMT ver 1.22 [ 295.408975][ T9846] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 295.509235][ T8] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 295.690476][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1469'. [ 295.704108][ T8] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 295.831942][ T8] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 295.990474][ T8] usb 2-1: USB disconnect, device number 8 [ 296.031932][ T9834] loop4: detected capacity change from 0 to 32768 [ 296.080726][ T8] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 296.132766][ T9853] fido_id[9853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 296.269627][ T9854] loop2: detected capacity change from 0 to 8192 [ 296.316702][ T9834] ialloc: diAlloc returned -28! [ 297.235788][ T9864] loop2: detected capacity change from 0 to 8192 [ 297.293441][ T9864] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 297.356021][ T9864] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 297.387293][ T9864] REISERFS (device loop2): using ordered data mode [ 297.414049][ T9864] reiserfs: using flush barriers [ 297.438567][ T9864] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.507161][ T9864] REISERFS (device loop2): checking transaction log (loop2) [ 297.701928][ T9864] REISERFS (device loop2): Using tea hash to sort names [ 297.719446][ T9864] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 297.961624][ T9860] loop1: detected capacity change from 0 to 32768 [ 298.013462][ T9860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1475 (9860) [ 298.084708][ T5784] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 298.186235][ T9860] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.306054][ T9860] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 298.379472][ T9860] BTRFS info (device loop1): setting nodatasum [ 298.426814][ T9860] BTRFS info (device loop1): force zlib compression, level 3 [ 298.502833][ T9860] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 298.587779][ T9860] BTRFS info (device loop1): use lzo compression, level 0 [ 298.648994][ T9860] BTRFS info (device loop1): turning on flush-on-commit [ 298.716144][ T9860] BTRFS info (device loop1): enabling auto defrag [ 298.753240][ T9860] BTRFS info (device loop1): max_inline at 0 [ 298.821582][ T9860] BTRFS info (device loop1): using free space tree [ 298.951430][ T9860] BTRFS info (device loop1): enabling ssd optimizations [ 299.360884][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.928719][ T9886] loop2: detected capacity change from 0 to 32768 [ 299.975593][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 300.070007][ T9904] team0: entered promiscuous mode [ 300.087999][ T9886] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 300.159691][ T9904] team_slave_0: entered promiscuous mode [ 300.227981][ T9904] team_slave_1: entered promiscuous mode [ 300.371319][ T9886] XFS (loop2): Ending clean mount [ 300.397769][ T9904] team0: left promiscuous mode [ 300.457744][ T9904] team_slave_0: left promiscuous mode [ 300.516635][ T9904] team_slave_1: left promiscuous mode [ 300.555442][ T9886] XFS (loop2): User initiated shutdown received. [ 300.563098][ T9886] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 300.705686][ T9886] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 300.855755][ T5780] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 302.348744][ T9959] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28 [ 302.620312][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 303.340280][ T9981] MTRR 1 not used [ 303.789998][ T9990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 303.813130][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 303.921393][ T9947] loop1: detected capacity change from 0 to 40427 [ 304.024979][ T9947] F2FS-fs (loop1): invalid crc value [ 304.089063][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 304.132083][ T9947] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.180128][ T5842] IPVS: starting estimator thread 0... [ 304.282214][T10002] IPVS: using max 10 ests per chain, 24000 per kthread [ 304.325379][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'. [ 304.506751][ T9947] F2FS-fs (loop1): Start checkpoint disabled! [ 304.755441][ T9947] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 305.060375][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.702848][T10029] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 305.742507][T10029] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 305.787331][T10029] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 306.130253][T10037] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1543'. [ 306.176913][T10037] netlink: zone id is out of range [ 306.204801][T10037] netlink: zone id is out of range [ 306.209974][T10037] netlink: zone id is out of range [ 306.243375][T10037] netlink: zone id is out of range [ 306.278202][T10037] netlink: zone id is out of range [ 306.302435][T10037] netlink: zone id is out of range [ 306.335352][T10037] netlink: zone id is out of range [ 306.363476][T10037] netlink: zone id is out of range [ 306.383817][T10037] netlink: zone id is out of range [ 306.447625][T10037] netlink: zone id is out of range [ 306.638255][T10048] loop1: detected capacity change from 0 to 512 [ 306.778433][T10048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.162432][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.326030][T10058] loop4: detected capacity change from 0 to 8192 [ 307.393725][T10058] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 307.472283][T10058] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 307.553417][T10058] REISERFS (device loop4): using ordered data mode [ 307.573305][T10058] reiserfs: using flush barriers [ 307.594935][T10044] loop2: detected capacity change from 0 to 32768 [ 307.617301][T10058] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 307.738004][T10058] REISERFS (device loop4): checking transaction log (loop4) [ 307.746159][T10044] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 307.843809][T10058] REISERFS (device loop4): Using r5 hash to sort names [ 307.910761][T10058] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 308.061397][T10058] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=522, len=13 - odd [ 308.091344][T10044] XFS (loop2): Ending clean mount [ 308.114782][T10044] XFS (loop2): Quotacheck needed: Please wait. [ 308.138614][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'. [ 308.254782][T10044] XFS (loop2): Quotacheck: Done. [ 308.690228][T10085] loop4: detected capacity change from 0 to 512 [ 308.701668][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 308.759266][T10085] EXT4-fs (loop4): Test dummy encryption mode enabled [ 308.838008][T10085] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1557: inode has both inline data and extents flags [ 308.889002][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 308.923293][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 308.948036][T10085] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1557: couldn't read orphan inode 15 (err -117) [ 308.988593][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 309.014183][ T8] usb 1-1: config 0 has no interface number 0 [ 309.028476][T10085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.065248][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.133158][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.141193][ T8] usb 1-1: Product: syz [ 309.224171][ T8] usb 1-1: Manufacturer: syz [ 309.228790][ T8] usb 1-1: SerialNumber: syz [ 309.283680][ T8] usb 1-1: config 0 descriptor?? [ 309.319452][ T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 309.334475][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.517712][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 309.630302][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 310.077347][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 310.088102][ T5832] usb 1-1: USB disconnect, device number 14 [ 310.131571][ T5832] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 310.212270][T10096] loop2: detected capacity change from 0 to 4096 [ 310.223507][ T5832] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 310.280247][T10096] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 310.311583][ T5832] quatech2 1-1:0.51: device disconnected [ 310.426909][T10096] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 311.022896][T10112] tap0: tun_chr_ioctl cmd 1074025677 [ 311.028376][T10112] tap0: linktype set to 774 [ 311.873356][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1580'. [ 314.170070][T10187] loop4: detected capacity change from 0 to 2048 [ 314.271862][T10187] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 314.348235][T10169] loop2: detected capacity change from 0 to 32768 [ 314.369377][T10187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.431143][T10169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1596 (10169) [ 314.557351][T10169] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.617299][T10169] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 314.663139][T10169] BTRFS info (device loop2): using free space tree [ 314.852703][ T5812] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 314.869730][T10169] BTRFS info (device loop2): enabling ssd optimizations [ 314.898588][T10169] BTRFS info (device loop2): auto enabling async discard [ 315.064901][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 315.124377][ T5812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.131044][ T5812] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 315.209409][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.268551][ T5812] usb 1-1: config 0 descriptor?? [ 315.616796][ T5780] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.741605][ T5812] hid (null): global environment stack underflow [ 315.793994][ T5812] hid (null): unknown global tag 0xd [ 315.837017][ T5812] steelseries 0003:1038:12B6.0007: unknown main item tag 0xe [ 315.922756][ T5812] steelseries 0003:1038:12B6.0007: global environment stack underflow [ 315.995384][ T5812] steelseries 0003:1038:12B6.0007: item 0 2 1 11 parsing failed [ 316.057238][ T5812] steelseries: probe of 0003:1038:12B6.0007 failed with error -22 [ 316.095457][T10223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'. [ 316.230592][ T5812] usb 1-1: USB disconnect, device number 15 [ 317.138081][T10243] loop2: detected capacity change from 0 to 1024 [ 317.281609][T10243] hfsplus: invalid length 32517 has been corrected to 255 [ 317.374718][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.381033][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.466663][T10243] hfsplus: invalid length 32517 has been corrected to 255 [ 317.540895][T10243] hfsplus: invalid length 32517 has been corrected to 255 [ 317.612908][T10243] hfsplus: invalid length 32517 has been corrected to 255 [ 317.709469][T10243] hfsplus: invalid length 32517 has been corrected to 255 [ 317.754393][ T5812] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 317.764893][T10243] hfsplus: b-tree write err: -5, ino 2 [ 317.950697][ T3482] hfsplus: b-tree write err: -5, ino 25 [ 317.972661][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 317.981755][ T3482] hfsplus: b-tree write err: -5, ino 4 [ 318.020561][ T5812] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 318.029944][ T3482] hfsplus: b-tree write err: -5, ino 2 [ 318.060395][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.123664][ T5812] usb 2-1: Product: syz [ 318.155052][ T5812] usb 2-1: Manufacturer: syz [ 318.159681][ T5812] usb 2-1: SerialNumber: syz [ 318.494117][ T5812] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 318.582123][ T5812] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.625181][ T5812] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 318.660111][ T5812] usb 2-1: media controller created [ 318.791811][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.892175][ T5812] zl10353_read_register: readreg error (reg=127, ret==-71) [ 319.000773][ T5812] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 319.034730][ T5812] usb 2-1: USB disconnect, device number 9 [ 319.269312][T10275] loop2: detected capacity change from 0 to 8192 [ 319.868556][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 319.947187][T10289] loop4: detected capacity change from 0 to 16 [ 319.959114][T10284] vlan2: entered promiscuous mode [ 319.964819][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 319.986422][T10289] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 320.037605][T10284] dummy0: entered promiscuous mode [ 320.197483][T10292] binder: 10291:10292 ioctl c0306201 200000000300 returned -14 [ 320.713868][T10304] loop4: detected capacity change from 0 to 512 [ 320.765358][T10304] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 320.817738][T10304] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1652: corrupted in-inode xattr: e_value size too large [ 320.898653][T10304] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1652: couldn't read orphan inode 15 (err -117) [ 320.961987][T10304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.990339][T10312] program syz.0.1655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.181550][T10304] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 321.347333][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.731988][T10324] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1661'. [ 323.371691][T10338] loop2: detected capacity change from 0 to 40427 [ 323.413313][T10339] loop4: detected capacity change from 0 to 40427 [ 323.436310][T10338] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 323.501488][T10339] F2FS-fs (loop4): invalid crc value [ 323.524787][T10338] F2FS-fs (loop2): invalid crc value [ 323.600083][T10339] F2FS-fs (loop4): Found nat_bits in checkpoint [ 323.609595][T10338] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.932751][T10339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 323.940752][T10338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 324.127417][T10338] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 324.180293][T10339] syz.4.1667: attempt to access beyond end of device [ 324.180293][T10339] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 324.295315][T10339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 324.336822][T10339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 324.833866][ T5842] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 325.065513][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.105975][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.194983][ T5842] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.251989][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.297430][ T5842] usb 1-1: SerialNumber: syz [ 325.337734][T10374] loop2: detected capacity change from 0 to 512 [ 325.382926][T10374] EXT4-fs: Ignoring removed i_version option [ 325.435635][T10374] EXT4-fs: Ignoring removed oldalloc option [ 325.503509][T10374] EXT4-fs (loop2): Test dummy encryption mode enabled [ 325.556663][ T5842] usb 1-1: 0:2 : does not exist [ 325.583717][T10374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.658508][ T5842] usb 1-1: USB disconnect, device number 16 [ 325.805151][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 325.941598][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.166245][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 326.843188][T10387] loop1: detected capacity change from 0 to 8192 [ 327.078357][T10403] loop4: detected capacity change from 0 to 2048 [ 327.187772][T10387] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 327.219993][T10408] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1690'. [ 327.264855][T10403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.469633][T10387] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 327.629883][T10387] REISERFS (device loop1): using ordered data mode [ 327.778525][T10387] reiserfs: using flush barriers [ 327.920608][T10387] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 328.166069][T10387] REISERFS (device loop1): checking transaction log (loop1) [ 328.853273][T10441] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1706'. [ 329.113354][T10387] REISERFS (device loop1): Using tea hash to sort names [ 329.188977][T10387] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 330.383207][T10464] loop2: detected capacity change from 0 to 64 [ 331.060397][T10473] loop2: detected capacity change from 0 to 64 [ 334.908712][T10505] block nbd0: shutting down sockets [ 335.363553][T10513] tap0: tun_chr_ioctl cmd 1074025677 [ 335.404125][T10513] tap0: linktype set to 769 [ 335.784271][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 337.311332][T10564] program syz.2.1762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.533133][T10570] netlink: 'syz.2.1766': attribute type 12 has an invalid length. [ 337.571215][T10570] netlink: 'syz.2.1766': attribute type 29 has an invalid length. [ 337.619467][T10570] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1766'. [ 337.672919][T10570] netlink: 'syz.2.1766': attribute type 2 has an invalid length. [ 337.710436][T10570] netlink: 'syz.2.1766': attribute type 2 has an invalid length. [ 338.369863][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 338.419136][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 338.920401][T10574] loop4: detected capacity change from 0 to 40427 [ 338.951036][ T174] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 338.992458][T10574] F2FS-fs (loop4): invalid crc value [ 339.038890][T10574] F2FS-fs (loop4): Found nat_bits in checkpoint [ 339.182807][ T174] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.224578][ T174] usb 3-1: config 0 has no interface number 0 [ 339.263736][ T174] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.313290][T10574] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 339.350898][ T174] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.415233][ T174] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.487919][ T174] usb 3-1: config 0 interface 1 has no altsetting 0 [ 339.535868][ T174] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 339.560883][ T174] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 339.620871][ T174] usb 3-1: Manufacturer: syz [ 339.637151][ T8077] syz-executor: attempt to access beyond end of device [ 339.637151][ T8077] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 339.661048][ T174] usb 3-1: config 0 descriptor?? [ 339.752944][ T8077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 339.815054][ T8077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 340.327349][ T174] uclogic 0003:145F:0212.0008: pen parameters not found [ 340.372925][ T174] uclogic 0003:145F:0212.0008: interface is invalid, ignoring [ 340.426307][ T174] usb 3-1: USB disconnect, device number 17 [ 340.456090][T10614] loop1: detected capacity change from 0 to 2048 [ 341.100791][T10614] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.1783: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 341.302177][T10614] EXT4-fs (loop1): get root inode failed [ 341.340775][T10614] EXT4-fs (loop1): mount failed [ 342.001156][T10642] program syz.0.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.152100][T10648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1799'. [ 342.569730][ T28] audit: type=1326 audit(1786649173.518:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fff08ac7ac9 code=0x7ffc0000 [ 342.720998][ T28] audit: type=1326 audit(1786649173.518:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de99e0d9 code=0x7ffc0000 [ 342.869200][ T28] audit: type=1326 audit(1786649173.518:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de99e0d9 code=0x7ffc0000 [ 343.025390][ T28] audit: type=1326 audit(1786649173.518:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de99e0d9 code=0x7ffc0000 [ 343.086699][T10669] loop2: detected capacity change from 0 to 512 [ 343.149848][T10669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 343.188604][ T28] audit: type=1326 audit(1786649173.558:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fff08ac7ac9 code=0x7ffc0000 [ 343.220751][T10669] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 343.291869][T10669] EXT4-fs (loop2): orphan cleanup on readonly fs [ 343.327533][T10669] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1809: Block bitmap for bg 0 marked uninitialized [ 343.366560][ T28] audit: type=1326 audit(1786649173.558:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc8de99e0d9 code=0x7ffc0000 [ 343.442185][T10669] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1809: Block bitmap for bg 0 marked uninitialized [ 343.477497][T10676] geneve2: entered promiscuous mode [ 343.490572][ T28] audit: type=1326 audit(1786649173.558:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8de99de42 code=0x7ffc0000 [ 343.536389][T10669] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1809: Block bitmap for bg 0 marked uninitialized [ 343.621780][T10669] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1809: Block bitmap for bg 0 marked uninitialized [ 343.637968][ T28] audit: type=1326 audit(1786649173.558:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8de95e90e code=0x7ffc0000 [ 343.743218][T10669] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1809: Block bitmap for bg 0 marked uninitialized [ 343.789200][ T28] audit: type=1326 audit(1786649173.558:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc8de99df07 code=0x7ffc0000 [ 343.836634][T10669] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1809: Block bitmap for bg 0 marked uninitialized [ 343.870232][T10683] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 343.934658][T10669] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 343.949348][ T28] audit: type=1326 audit(1786649173.558:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8de95e90e code=0x7ffc0000 [ 344.033570][T10669] EXT4-fs (loop2): 1 truncate cleaned up [ 344.040171][T10669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.167625][T10688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1818'. [ 344.222657][T10669] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (35405!=33349) [ 344.448691][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.477829][T10693] loop4: detected capacity change from 0 to 128 [ 344.591651][T10693] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 344.693440][T10693] hpfs: filesystem error: improperly stopped [ 344.699482][T10693] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 344.783298][T10693] hpfs: You really don't want any checks? You are crazy... [ 344.866113][T10693] hpfs: hpfs_map_sector(): read error [ 344.927410][T10693] hpfs: code page support is disabled [ 344.959064][T10693] hpfs: hpfs_map_4sectors(): unaligned read [ 345.000265][T10693] hpfs: hpfs_map_4sectors(): unaligned read [ 345.006631][T10693] hpfs: filesystem error: unable to find root dir [ 345.175593][T10693] hpfs: hpfs_map_4sectors(): unaligned read [ 345.215267][T10693] hpfs: hpfs_map_sector(): read error [ 345.741191][T10714] loop4: detected capacity change from 0 to 512 [ 345.777164][T10714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.871262][T10714] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1831: bad orphan inode 131083 [ 345.965008][T10714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.141073][T10719] netlink: 'syz.1.1832': attribute type 5 has an invalid length. [ 346.231754][T10707] loop2: detected capacity change from 0 to 32768 [ 346.305223][T10707] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 346.365378][T10707] JBD2: Ignoring recovery information on journal [ 346.508765][T10707] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 346.559685][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'. [ 346.630704][T10722] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1833'. [ 346.796166][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.103528][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 347.150675][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'. [ 347.159993][T10728] bridge_slave_0: default FDB implementation only supports local addresses [ 347.547767][T10737] loop1: detected capacity change from 0 to 1024 [ 347.682269][T10737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.883845][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 347.883856][ T28] audit: type=1800 audit(1786649178.838:117): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1839" name="file1" dev="loop1" ino=839 res=0 errno=0 [ 348.925494][T10768] loop2: detected capacity change from 0 to 1024 [ 349.004791][T10768] EXT4-fs: Ignoring removed orlov option [ 349.105522][T10768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.336976][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.617569][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1862'. [ 349.903233][T10797] loop2: detected capacity change from 0 to 7 [ 349.963321][T10797] Dev loop2: unable to read RDB block 7 [ 349.968953][T10797] loop2: AHDI p1 p2 p3 [ 350.004032][T10797] loop2: partition table partially beyond EOD, truncated [ 350.026851][T10797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 350.053243][T10797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 351.005203][T10823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1878'. [ 351.090562][T10823] netlink: 'syz.2.1878': attribute type 12 has an invalid length. [ 351.127067][T10823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1878'. [ 352.820389][T10821] lo speed is unknown, defaulting to 1000 [ 354.268420][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'. [ 355.718389][T10901] loop2: detected capacity change from 0 to 32768 [ 355.844016][T10901] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 356.108337][T10901] XFS (loop2): Ending clean mount [ 356.361774][T10901] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 356.644651][ T5780] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 356.673508][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 357.045322][T10945] loop7: detected capacity change from 0 to 7 [ 357.085353][T10945] Dev loop7: unable to read RDB block 7 [ 357.103090][T10945] loop7: unable to read partition table [ 357.122073][T10945] loop7: partition table beyond EOD, truncated [ 357.152586][T10945] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 357.187137][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 357.235643][T10948] Dev loop7: unable to read RDB block 7 [ 357.263410][T10948] loop7: unable to read partition table [ 357.285864][T10948] loop7: partition table beyond EOD, truncated [ 357.305879][ T5138] Dev loop7: unable to read RDB block 7 [ 357.317720][ T5138] loop7: unable to read partition table [ 357.335727][ T5138] loop7: partition table beyond EOD, truncated [ 358.406108][ T5778] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 358.555615][T10980] program syz.0.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.184226][T10995] loop1: detected capacity change from 0 to 256 [ 359.341727][T10995] FAT-fs (loop1): Directory bread(block 64) failed [ 359.378922][T10995] FAT-fs (loop1): Directory bread(block 65) failed [ 359.413407][T10995] FAT-fs (loop1): Directory bread(block 66) failed [ 359.458332][T10995] FAT-fs (loop1): Directory bread(block 67) failed [ 359.505825][T10995] FAT-fs (loop1): Directory bread(block 68) failed [ 359.542499][T10995] FAT-fs (loop1): Directory bread(block 69) failed [ 359.589641][T10995] FAT-fs (loop1): Directory bread(block 70) failed [ 359.596298][T10995] FAT-fs (loop1): Directory bread(block 71) failed [ 359.664925][T10995] FAT-fs (loop1): Directory bread(block 72) failed [ 359.695440][T10995] FAT-fs (loop1): Directory bread(block 73) failed [ 359.852143][T10991] loop2: detected capacity change from 0 to 32768 [ 359.948737][T10991] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.073497][T10991] XFS (loop2): Ending clean mount [ 360.160149][ T28] audit: type=1800 audit(1786649191.118:118): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1950" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 360.296062][ T28] audit: type=1800 audit(1786649191.148:119): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1950" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 360.391016][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.732638][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 360.814446][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 360.850249][T11022] netlink: 'syz.4.1962': attribute type 18 has an invalid length. [ 361.578038][T11043] loop2: detected capacity change from 0 to 128 [ 361.688205][T11043] syz.2.1970: attempt to access beyond end of device [ 361.688205][T11043] loop2: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 364.296438][T11091] loop1: detected capacity change from 0 to 512 [ 364.422004][T11091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.549724][T11091] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.266879][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.999040][T11138] loop4: detected capacity change from 0 to 512 [ 367.083467][T11138] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2009: iget: bad extended attribute block 134217728 [ 367.161386][T11138] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2009: couldn't read orphan inode 15 (err -117) [ 367.249771][T11138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.385283][ T28] audit: type=1800 audit(1786649198.338:120): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2009" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 367.420657][T11138] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2009: invalid indirect mapped block 234881024 (level 0) [ 367.488578][T11138] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2009: invalid indirect mapped block 768 (level 1) [ 367.758005][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.131927][T11140] loop2: detected capacity change from 0 to 32768 [ 368.216495][T11140] [ 368.216495][T11140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 368.216495][T11140] [ 368.331931][T11140] ERROR: (device loop2): diWrite: ixpxd invalid [ 368.331931][T11140] [ 368.430619][T11140] ERROR: (device loop2): txCommit: [ 368.430619][T11140] [ 368.500209][T11140] ERROR: (device loop2): diWrite: ixpxd invalid [ 368.500209][T11140] [ 368.573085][T11140] ERROR: (device loop2): txCommit: [ 368.573085][T11140] [ 368.642901][T11140] jfs_mkdir: dtSearch returned -17 [ 368.803342][ T5780] [ 368.803342][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 368.803342][ T5780] [ 368.855900][ T5780] [ 368.855900][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 368.855900][ T5780] [ 369.389728][T11163] loop4: detected capacity change from 0 to 4096 [ 369.467566][T11163] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). syzkaller syzkaller login: [ 369.800191][T11163] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 370.023104][T11163] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 370.317076][ T3434] ntfs3: loop4: ino=1e, failed to parse mft record [ 371.563859][T11210] kAFS: Invalid Command on /proc/fs/afs/cells file [ 372.146072][T11178] loop1: detected capacity change from 0 to 40427 [ 372.205656][T11223] overlayfs: statfs failed on './file0' [ 372.266292][T11178] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 372.336769][T11178] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 372.505976][T11178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 372.889976][T11178] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 372.970950][T11178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.073396][T11238] loop4: detected capacity change from 0 to 128 [ 373.251429][T11220] loop2: detected capacity change from 0 to 32768 [ 373.352708][T11220] [ 373.352708][T11220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 373.352708][T11220] [ 373.386182][T11238] syz.4.2049: attempt to access beyond end of device [ 373.386182][T11238] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 373.484168][T11239] syz.4.2049: attempt to access beyond end of device [ 373.484168][T11239] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 373.522032][T11220] find_entry called with index = 0 [ 373.555857][T11220] read_mapping_page failed! [ 373.600395][T11220] ERROR: (device loop2): txCommit: [ 373.600395][T11220] [ 373.633086][T11239] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 373.697040][T11239] syz.4.2049: attempt to access beyond end of device [ 373.697040][T11239] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 373.729024][T11220] find_entry called with index = 0 [ 373.734218][T11220] read_mapping_page failed! [ 373.782108][T11220] ERROR: (device loop2): txCommit: [ 373.782108][T11220] [ 373.790225][T11239] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 373.843516][T11239] syz.4.2049: attempt to access beyond end of device [ 373.843516][T11239] loop4: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 373.900363][ T5780] [ 373.900363][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 373.900363][ T5780] [ 373.926180][T11239] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 373.951121][ T5780] [ 373.951121][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 373.951121][ T5780] [ 374.815971][T11258] loop6: detected capacity change from 0 to 7 [ 374.925267][T11258] Dev loop6: unable to read RDB block 7 [ 374.962195][T11258] loop6: unable to read partition table [ 374.991567][T11258] loop6: partition table beyond EOD, truncated [ 375.020034][T11258] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 376.681116][T11282] loop2: detected capacity change from 0 to 256 [ 378.106005][T11304] loop2: detected capacity change from 0 to 256 [ 378.146014][ T28] audit: type=1800 audit(1786649209.098:121): pid=11303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2076" name="bDeviceClass" dev="configfs" ino=28638 res=0 errno=0 [ 378.294385][T11306] netlink: 'syz.4.2078': attribute type 2 has an invalid length. [ 378.341792][T11306] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2078'. [ 378.801618][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.818339][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.886002][T11343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2093'. [ 381.027295][ T5832] kernel read not supported for file /dsp (pid: 5832 comm: kworker/0:5) [ 382.448426][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 384.135203][T11396] loop2: detected capacity change from 0 to 4096 [ 384.247324][T11396] ntfs3: loop2: ino=b, Correct links count -> 1. [ 384.282309][T11396] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 384.528781][ T28] audit: type=1804 audit(1786649215.478:122): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2115" name=2F6E6577726F6F742F3536392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop2" ino=33 res=1 errno=0 [ 385.841912][T11406] loop2: detected capacity change from 0 to 32768 [ 385.917903][T11406] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 386.087750][T11406] XFS (loop2): Ending clean mount [ 386.392961][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 387.156194][T11441] loop2: detected capacity change from 0 to 256 [ 387.251318][T11441] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 387.403488][ T28] audit: type=1800 audit(1786649218.348:123): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2127" name="file1" dev="loop2" ino=1048670 res=0 errno=0 [ 387.684084][T11442] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 387.777372][T11442] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 387.849713][T11442] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 388.211957][T11450] loop1: detected capacity change from 0 to 4096 [ 388.481579][T11450] ntfs3: loop1: ino=b, Correct links count -> 1. [ 388.548400][T11450] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 388.699924][T11461] jffs2: notice: (11461) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 388.816541][ T28] audit: type=1804 audit(1786649219.768:124): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2134" name=2F6E6577726F6F742F3339332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop1" ino=33 res=1 errno=0 [ 389.499562][T11477] loop4: detected capacity change from 0 to 128 [ 389.648004][T11458] loop2: detected capacity change from 0 to 32768 [ 389.924180][T11458] ea_get: invalid extended attribute [ 389.976000][T11458] ffff88805cc968f0: 04 00 00 00 .... [ 390.106459][T11458] ea_get: invalid extended attribute [ 390.137685][T11458] ffff88805cc968f0: 04 00 00 00 .... [ 390.208279][T11458] ea_get: invalid extended attribute [ 390.234536][T11458] ffff88805cc968f0: 04 00 00 00 .... [ 390.286306][T11488] loop4: detected capacity change from 0 to 4096 [ 391.459060][T11507] loop4: detected capacity change from 0 to 256 [ 391.502194][T11507] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 391.603584][T11507] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 391.697968][ T5812] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 391.711740][T11509] loop2: detected capacity change from 0 to 512 [ 391.754714][T11509] EXT4-fs: Ignoring removed nobh option [ 391.830938][T11509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.894859][T11509] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 391.939184][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.001531][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.035060][T11509] EXT4-fs (loop2): 1 truncate cleaned up [ 392.041912][T11509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.070244][ T5812] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 392.094482][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 392.115250][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.177998][ T5812] usb 2-1: config 0 descriptor?? [ 392.539572][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.573773][T11516] bond_slave_0: entered promiscuous mode [ 392.580144][T11516] bond_slave_1: entered promiscuous mode [ 392.693096][T11516] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 392.704689][ T5812] hid-generic 0003:0925:8066.0009: unbalanced collection at end of report description [ 392.745310][T11516] bond_slave_0: left promiscuous mode [ 392.750874][T11516] bond_slave_1: left promiscuous mode [ 392.774792][ T5812] hid-generic: probe of 0003:0925:8066.0009 failed with error -22 [ 392.832328][T11520] gadgetfs: bound to dummy_udc driver [ 392.995999][ T174] usb 2-1: USB disconnect, device number 10 [ 393.537026][ T5812] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 393.608087][T11518] loop4: detected capacity change from 0 to 32768 [ 393.686367][ T28] audit: type=1800 audit(1786649224.638:125): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2162" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 393.720507][T11518] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong [ 393.720507][T11518] [ 393.757696][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 393.779423][ T5812] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 393.823644][T11518] ERROR: (device loop4): remounting filesystem as read-only [ 393.842681][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.874705][T11530] ERROR: (device loop4): diWrite: ixpxd invalid [ 393.874705][T11530] [ 393.908138][ T5812] usb 3-1: config 0 descriptor?? [ 393.943903][T11518] ialloc: diAlloc returned -5! [ 393.966150][ T5812] as10x_usb: device has been detected [ 393.987039][T11530] ERROR: (device loop4): txCommit: [ 393.987039][T11530] [ 394.021440][ T5812] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 394.134657][ T5812] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 394.428262][ T5812] as10x_usb: error during firmware upload part1 [ 394.477198][ T5812] Registered device nBox DVB-T Dongle [ 394.494946][ T5812] usb 3-1: USB disconnect, device number 18 [ 394.738734][ T5812] Unregistered device nBox DVB-T Dongle [ 394.760452][ T5812] as10x_usb: device has been disconnected [ 396.076236][T11557] loop2: detected capacity change from 0 to 8192 [ 396.139126][T11559] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 396.147384][T11557] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 396.218681][T11557] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 396.317463][T11557] REISERFS (device loop2): using ordered data mode [ 396.324176][T11557] reiserfs: using flush barriers [ 396.411790][T11557] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 396.505840][T11564] loop4: detected capacity change from 0 to 2048 [ 396.513242][T11557] REISERFS (device loop2): checking transaction log (loop2) [ 396.557927][T11564] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 396.652702][T11564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.981366][T11557] REISERFS (device loop2): Using tea hash to sort names [ 397.032192][T11557] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 397.344852][T11571] netem: incorrect gi model size [ 397.406748][T11571] netem: change failed [ 397.530728][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 398.125144][T11582] loop2: detected capacity change from 0 to 1024 [ 398.132598][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 398.171304][T11582] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 398.216917][T11583] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 398.269844][T11583] netlink: 'syz.4.2191': attribute type 2 has an invalid length. [ 398.293339][T11582] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.2187: lblock 2 mapped to illegal pblock 2 (length 1) [ 398.370280][T11582] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 398.425005][T11582] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.2187: lblock 0 mapped to illegal pblock 48 (length 1) [ 398.515094][T11582] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 398.563341][T11582] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2187: Failed to acquire dquot type 0 [ 398.627592][T11582] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 398.689420][T11582] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2187: mark_inode_dirty error [ 398.757751][T11582] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 398.809292][T11582] EXT4-fs (loop2): 1 orphan inode deleted [ 398.828212][ T59] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 398.864040][T11582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.940244][ T59] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 398.991429][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 399.110433][T11582] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 399.144275][T11600] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 399.219776][T11600] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.2187: lblock 0 mapped to illegal pblock 48 (length 1) [ 399.291617][T11600] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 399.347425][T11604] tap0: tun_chr_ioctl cmd 2148553947 [ 399.352872][T11600] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 399.475349][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.114952][T11589] loop1: detected capacity change from 0 to 32768 [ 400.361593][T11589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 400.769115][T11589] (syz.1.2193,11589,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 400.845734][T11631] loop4: detected capacity change from 0 to 256 [ 400.892287][T11589] (syz.1.2193,11589,0):ocfs2_rename:1299 ERROR: status = -2 [ 400.985320][T11589] (syz.1.2193,11589,0):ocfs2_rename:1690 ERROR: status = -2 [ 401.238143][T11633] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 401.244401][T11633] syzkaller1: linktype set to 823 [ 401.339093][T11635] loop4: detected capacity change from 0 to 64 [ 401.532967][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 402.676775][T11658] loop1: detected capacity change from 0 to 1024 [ 402.712208][T11661] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 402.755987][T11658] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 402.876579][T11658] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 402.961833][T11658] EXT4-fs (loop1): orphan cleanup on readonly fs [ 403.007148][T11658] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.2215: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.156394][T11658] EXT4-fs (loop1): Remounting filesystem read-only [ 403.163019][T11658] EXT4-fs (loop1): 1 orphan inode deleted [ 403.241798][T11658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.611408][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.610267][T11690] program syz.1.2238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.357258][T11676] loop2: detected capacity change from 0 to 40427 [ 405.389470][T11676] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 405.454391][T11676] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 405.503779][T11676] F2FS-fs (loop2): invalid crc value [ 405.572164][T11676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 405.828776][T11676] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 405.881950][T11676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 406.118291][T11676] syz.2.2233: attempt to access beyond end of device [ 406.118291][T11676] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 406.199995][T11676] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 406.622786][T11726] loop4: detected capacity change from 0 to 2048 [ 406.674337][T11726] loop4: p2 p3 < > p4 < p5 > [ 406.688359][T11726] loop4: partition table partially beyond EOD, truncated [ 406.746336][T11726] loop4: p3 start 4225 is beyond EOD, truncated [ 406.858917][T11726] syz.4.2255: attempt to access beyond end of device [ 406.858917][T11726] loop4p4: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 407.001768][T11726] gfs2: error 10 reading superblock [ 407.410826][T11738] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2261'. [ 408.085954][ T5812] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 408.292542][ T5812] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 408.302458][T11760] loop4: detected capacity change from 0 to 8 [ 408.318101][ T5812] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 408.390914][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 408.466064][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 408.494828][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 408.550444][ T5812] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.601982][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.680432][ T5812] usb 3-1: Product: syz [ 408.693829][ T5812] usb 3-1: Manufacturer: syz [ 408.720129][ T5812] cdc_wdm 3-1:1.0: skipping garbage [ 408.752141][ T5812] cdc_wdm 3-1:1.0: skipping garbage [ 408.797367][ T5812] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 408.854854][ T5812] cdc_wdm 3-1:1.0: Unknown control protocol [ 409.211167][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 409.299533][ T5812] usb 3-1: USB disconnect, device number 19 [ 409.881325][T11787] loop1: detected capacity change from 0 to 736 [ 410.053156][T11793] loop2: detected capacity change from 0 to 64 [ 411.393910][T11821] batman_adv: batadv0: Adding interface: gretap1 [ 411.414161][T11821] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.486578][T11821] batman_adv: batadv0: Interface activated: gretap1 [ 412.681196][T11853] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2313'. [ 413.794425][T11880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2327'. [ 414.049838][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2329'. [ 414.239829][T11893] loop4: detected capacity change from 0 to 64 [ 414.504430][T11898] batman_adv: batadv0: Adding interface: gretap1 [ 414.518829][T11898] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.600439][T11898] batman_adv: batadv0: Interface activated: gretap1 [ 415.021887][T11906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2338'. [ 415.371147][T11916] overlayfs: upper fs does not support file handles, falling back to index=off. [ 415.399601][T11916] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 415.595229][ T8] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 415.826857][ T8] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 415.862353][ T8] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 415.906801][ T8] usb 3-1: config 0 has no interface number 0 [ 415.931826][ T8] usb 3-1: config 0 has no interface number 1 [ 415.957075][ T8] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 415.993043][ T8] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 416.024394][ T8] usb 3-1: config 0 interface 255 has no altsetting 0 [ 416.043442][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 416.060708][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.078884][ T8] usb 3-1: Product: syz [ 416.091148][ T8] usb 3-1: Manufacturer: syz [ 416.112797][ T8] usb 3-1: SerialNumber: syz [ 416.139776][ T8] usb 3-1: config 0 descriptor?? [ 416.360917][ T5812] usb 3-1: USB disconnect, device number 20 [ 416.455204][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 416.655311][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 416.697256][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 416.718242][ T8] usb 1-1: can't read configurations, error -71 [ 416.812061][T11933] loop1: detected capacity change from 0 to 32768 [ 416.875285][T11933] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 417.014130][T11947] loop4: detected capacity change from 0 to 8 [ 417.123442][T11933] XFS (loop1): Ending clean mount [ 417.138450][T11949] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 417.148770][T11947] SQUASHFS error: Failed to read block 0x6e6: -5 [ 417.199524][T11949] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 417.225888][T11947] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.274344][T11950] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 417.282822][T11947] SQUASHFS error: Unable to read directory block [6e4:0] [ 417.329704][T11950] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 417.611386][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 417.662618][T11955] loop4: detected capacity change from 0 to 512 [ 417.679881][T11956] program syz.2.2358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.787573][T11955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.925795][T11955] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.207998][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.716797][T11973] loop2: detected capacity change from 0 to 512 [ 418.756325][T11973] EXT4-fs: Ignoring removed bh option [ 418.816552][T11973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 418.927217][T11973] EXT4-fs (loop2): 1 truncate cleaned up [ 418.986112][T11973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.238287][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.453015][T11984] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 419.508021][T11984] lvs: probe of 8-0:1.0 failed with error -22 [ 420.532443][T12006] loop4: detected capacity change from 0 to 512 [ 420.562199][T12008] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 420.612375][T12006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 420.654126][T12008] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 420.724907][T12006] EXT4-fs (loop4): 1 truncate cleaned up [ 420.731532][T12006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.764071][T12008] overlayfs: failed to get uuid (617/file2, err=-13); falling back to uuid=null. [ 420.930854][T12006] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.4.2378: path /390/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 421.142491][T12006] EXT4-fs (loop4): Remounting filesystem read-only [ 421.527587][T12019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2384'. [ 421.631048][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.669212][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.678100][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.022507][T12021] zram0: detected capacity change from 0 to 8 [ 422.440230][T12029] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 422.801418][T12036] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 423.777944][T12071] ieee802154 phy0 wpan0: encryption failed: -22 [ 425.470938][T12089] loop4: detected capacity change from 0 to 32768 [ 425.574851][T12089] JBD2: Ignoring recovery information on journal [ 425.786435][T12089] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 425.814963][T12116] block2mtd: illegal erase size [ 426.141785][ T8077] ocfs2: Unmounting device (7,4) on (node local) [ 426.418099][T12107] loop2: detected capacity change from 0 to 32768 [ 426.495050][T12107] JBD2: Ignoring recovery information on journal [ 426.687255][T12107] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 427.125533][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 427.521611][T12145] loop1: detected capacity change from 0 to 512 [ 427.657814][T12145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.714712][T12145] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.740094][T12152] loop2: detected capacity change from 0 to 512 [ 427.750249][T12135] loop4: detected capacity change from 0 to 32768 [ 427.763888][T12152] EXT4-fs: inline encryption not supported [ 427.770673][T12145] EXT4-fs (loop1): shut down requested (1) [ 427.785404][T12152] EXT4-fs (loop2): Test dummy encryption mode enabled [ 427.798348][T12152] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 427.833405][T12152] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.2437: bad orphan inode 131083 [ 427.863373][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.901900][T12152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.920046][T12135] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 427.969339][T12152] EXT4-fs (loop2): shut down requested (1) [ 428.044348][ T5832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 428.099704][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.239165][ T8077] ocfs2: Unmounting device (7,4) on (node local) [ 428.248066][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 428.270012][ T5832] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 428.308939][ T5832] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 428.364327][ T5832] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 428.373518][ T5832] usb 1-1: config 129 has no interface number 0 [ 428.441518][ T5832] usb 1-1: config 129 has no interface number 1 [ 428.478702][ T5832] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 428.499981][T12164] loop4: detected capacity change from 0 to 1024 [ 428.534306][ T5832] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 428.571801][ T5832] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 428.597722][T12164] hfsplus: invalid btree flag [ 428.603493][T12164] hfsplus: failed to load catalog file [ 428.641350][ T5832] usb 1-1: config 129 interface 135 has no altsetting 0 [ 428.669455][ T5832] usb 1-1: config 129 interface 5 has no altsetting 0 [ 428.710275][ T5832] usb 1-1: string descriptor 0 read error: -22 [ 428.721982][ T5832] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 428.768411][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.827002][ T5832] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 428.871941][ T5832] usb 1-1: MIDIStreaming interface descriptor not found [ 429.069008][ T5832] usb 1-1: USB disconnect, device number 19 [ 431.059314][T12192] loop2: detected capacity change from 0 to 40427 [ 431.113023][T12192] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 431.171016][T12192] F2FS-fs (loop2): invalid crc value [ 431.217135][T12192] F2FS-fs (loop2): Found nat_bits in checkpoint [ 431.241237][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2469'. [ 431.281980][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 431.474155][T12192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 431.789659][ T5780] syz-executor: attempt to access beyond end of device [ 431.789659][ T5780] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 431.867826][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 431.916213][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 432.056818][T12238] loop1: detected capacity change from 0 to 128 [ 432.114684][T12238] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 432.174412][T12238] hpfs: filesystem error: improperly stopped [ 432.200115][T12238] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 432.221273][T12238] hpfs: You really don't want any checks? You are crazy... [ 432.262099][T12238] hpfs: hpfs_map_sector(): read error [ 432.304312][T12238] hpfs: code page support is disabled [ 432.309943][T12238] hpfs: hpfs_map_4sectors(): unaligned read [ 432.342351][T12238] hpfs: hpfs_map_4sectors(): unaligned read [ 432.367526][T12238] hpfs: filesystem error: unable to find root dir [ 432.868476][T12255] loop4: detected capacity change from 0 to 1024 [ 432.958773][T12255] hfsplus: request for non-existent node 3 in B*Tree [ 433.000823][T12258] loop1: detected capacity change from 0 to 512 [ 433.014301][T12255] hfsplus: request for non-existent node 3 in B*Tree [ 433.045782][T12258] EXT4-fs: Ignoring removed orlov option [ 433.091167][T12255] hfsplus: request for non-existent node 4 in B*Tree [ 433.110620][T12258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.138493][T12255] hfsplus: request for non-existent node 4 in B*Tree [ 433.146524][T12258] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 433.194625][T12258] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c028, mo2=0002] [ 433.218814][T12258] EXT4-fs (loop1): orphan cleanup on readonly fs [ 433.266438][T12258] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.2486: Allocating blocks 41-42 which overlap fs metadata [ 433.354008][T12258] EXT4-fs (loop1): Remounting filesystem read-only [ 433.383309][T12258] Quota error (device loop1): write_blk: dquota write failed [ 433.402646][T12265] Bluetooth: MGMT ver 1.22 [ 433.407617][T12258] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 433.420501][T12267] loop4: detected capacity change from 0 to 16 [ 433.444442][T12258] EXT4-fs (loop1): 1 truncate cleaned up [ 433.451385][T12267] erofs: (device loop4): mounted with root inode @ nid 36. [ 433.479520][T12258] EXT4-fs (loop1): pa ffff88805ccbb570: logic 1, phys. 41, len 23 [ 433.506329][T12258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.696727][T12271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2491'. [ 433.726666][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.902153][T12277] loop4: detected capacity change from 0 to 512 [ 433.988191][T12277] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2494: bg 0: block 5: invalid block bitmap [ 434.067008][T12277] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 434.113675][T12277] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2494: invalid indirect mapped block 3 (level 2) [ 434.169088][T12277] EXT4-fs (loop4): 1 orphan inode deleted [ 434.204033][T12277] EXT4-fs (loop4): 1 truncate cleaned up [ 434.223166][T12277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.349713][ T28] audit: type=1800 audit(1786649521.315:126): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2494" name="file0" dev="loop4" ino=11 res=0 errno=0 [ 434.478280][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.740746][T12302] loop4: detected capacity change from 0 to 512 [ 434.779939][T12302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.875956][T12302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.923505][T12302] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.948792][T12305] loop1: detected capacity change from 0 to 4096 [ 435.009208][T12302] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.2503: path /417/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 435.217864][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.644918][T12317] tipc: Started in network mode [ 435.650119][T12317] tipc: Node identity 7f000001, cluster identity 4711 [ 435.686029][T12317] tipc: New replicast peer: 127.0.0.1 [ 435.703574][T12317] tipc: Enabled bearer , priority 10 [ 435.736338][T12322] tipc: Disabling bearer [ 435.963849][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 436.049828][T12333] loop4: detected capacity change from 0 to 256 [ 436.117029][T12333] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 436.192169][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.225865][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.257854][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 436.288386][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.304194][ T5832] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 436.334591][ T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 436.358342][T12336] loop1: detected capacity change from 0 to 512 [ 436.368140][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.504187][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 436.512537][ T5832] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.545453][ T5832] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.584328][ T5832] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 436.671342][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 436.703785][ T5832] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 436.737886][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.783220][ T5832] usb 1-1: config 0 descriptor?? [ 436.830773][ T8] gud: probe of 3-1:1.0 failed with error -121 [ 437.103958][ T8] usb 3-1: USB disconnect, device number 21 [ 437.487205][ T8] usb 1-1: USB disconnect, device number 20 [ 437.716562][T12363] loop1: detected capacity change from 0 to 1024 [ 437.736373][T12363] EXT4-fs: Ignoring removed bh option [ 437.750538][T12363] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 437.812417][T12363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 437.842666][T12363] System zones: 0-1, 3-12 [ 437.892241][T12363] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.2532: lblock 1 mapped to illegal pblock 1 (length 1) [ 437.934528][T12363] EXT4-fs (loop1): Remounting filesystem read-only [ 437.953141][T12363] Quota error (device loop1): write_blk: dquota write failed [ 437.974297][T12363] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 438.006614][T12363] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 438.053991][T12363] EXT4-fs (loop1): 1 orphan inode deleted [ 438.086450][T12363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.210273][T12377] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 438.300414][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.555231][T12388] tap0: tun_chr_ioctl cmd 1074025677 [ 438.575461][T12388] tap0: linktype set to 773 [ 438.793790][ T174] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 439.000230][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.043647][ T174] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.052804][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.119364][ T174] usb 2-1: config 0 descriptor?? [ 439.565201][ T174] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 439.617405][ T174] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input23 [ 439.967588][ T174] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 440.214625][ T174] usb 2-1: USB disconnect, device number 11 [ 440.238859][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.252028][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.455250][T12400] loop4: detected capacity change from 0 to 40427 [ 440.479378][T12400] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 440.511031][T12400] F2FS-fs (loop4): invalid crc value [ 440.531230][T12400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 440.539886][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 440.733441][T12400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 441.021563][ T8077] syz-executor: attempt to access beyond end of device [ 441.021563][ T8077] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 441.097375][ T8077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 441.153487][ T8077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 442.809238][T12470] loop4: detected capacity change from 0 to 16 [ 442.850799][T12470] erofs: (device loop4): mounted with root inode @ nid 36. [ 442.927595][T12470] erofs: (device loop4): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 443.605258][T12490] tipc: Started in network mode [ 443.618497][T12490] tipc: Node identity 7f000001, cluster identity 4711 [ 443.635342][T12490] tipc: New replicast peer: 127.0.0.1 [ 443.647611][T12490] tipc: Enabled bearer , priority 10 [ 443.670324][T12490] tipc: Disabling bearer [ 444.036143][T12500] netlink: 'syz.2.2590': attribute type 14 has an invalid length. [ 444.329555][T12506] loop1: detected capacity change from 0 to 512 [ 444.423893][T12506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.717177][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.784761][T12518] vivid-001: disconnect [ 444.869869][T12517] vivid-001: reconnect [ 444.994747][T12525] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2599'. [ 445.177341][T12529] loop2: detected capacity change from 0 to 256 [ 445.560768][T12537] loop4: detected capacity change from 0 to 2048 [ 445.609496][T12537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.457781][T12565] __sock_release: fasync list not empty! [ 446.547658][T12569] net_ratelimit: 9 callbacks suppressed [ 446.547671][T12569] sock: sock_set_timeout: `syz.1.2621' (pid 12569) tries to set negative timeout [ 446.787442][T12577] loop4: detected capacity change from 0 to 64 [ 447.252922][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 447.458534][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.480125][ T8] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 447.532882][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.568917][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 447.622425][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 447.664998][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.687585][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.704123][T12607] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2639'. [ 447.729494][ T8] usb 1-1: Product: syz [ 447.753332][ T8] usb 1-1: Manufacturer: syz [ 447.796421][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 447.821195][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 447.866237][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 447.897302][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 448.080855][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.087714][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.096370][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.103022][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.110479][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.117129][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.133355][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.140013][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.148325][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.154955][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.161441][ T174] usb 1-1: USB disconnect, device number 21 [ 448.167766][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.167793][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.167811][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 448.231966][T12584] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 448.392085][T12615] loop2: detected capacity change from 0 to 8192 [ 448.446163][T12615] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 448.482440][T12615] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 448.535032][T12615] REISERFS (device loop2): using ordered data mode [ 448.565523][T12615] reiserfs: using flush barriers [ 448.596096][T12615] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 448.668269][T12615] REISERFS (device loop2): checking transaction log (loop2) [ 448.703020][T12615] REISERFS (device loop2): Using r5 hash to sort names [ 448.731223][T12615] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 449.011766][T12613] loop4: detected capacity change from 0 to 32768 [ 449.066011][T12613] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.2642 (12613) [ 449.162858][T12613] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 449.203190][T12613] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 449.253298][T12613] BTRFS info (device loop4): setting nodatacow, compression disabled [ 449.261464][T12613] BTRFS info (device loop4): turning on flush-on-commit [ 449.313701][T12613] BTRFS info (device loop4): using free space tree [ 449.515337][T12613] BTRFS info (device loop4): enabling ssd optimizations [ 449.522355][T12613] BTRFS info (device loop4): auto enabling async discard [ 449.611923][T12655] input: syz0 as /devices/virtual/input/input24 [ 449.885496][ T8077] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 450.873241][ T174] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 450.911317][T12682] loop1: detected capacity change from 0 to 4096 [ 450.923997][T12682] EXT4-fs: inline encryption not supported [ 450.955345][T12682] EXT4-fs (loop1): Test dummy encryption mode enabled [ 450.981243][T12682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.072916][ T174] usb 1-1: Using ep0 maxpacket: 32 [ 451.126962][ T174] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 451.144713][ T174] usb 1-1: config 0 has no interface number 0 [ 451.158501][ T174] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.182236][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.202362][ T174] usb 1-1: config 0 interface 85 has no altsetting 0 [ 451.222180][ T174] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 451.238095][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.266742][ T174] usb 1-1: Product: syz [ 451.270928][ T174] usb 1-1: Manufacturer: syz [ 451.309818][ T174] usb 1-1: SerialNumber: syz [ 451.331401][ T174] usb 1-1: config 0 descriptor?? [ 451.752911][T12701] program syz.1.2672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.964120][ T174] appletouch 1-1:0.85: Geyser mode initialized. [ 451.987475][ T174] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input25 [ 452.182288][ T174] usb 1-1: USB disconnect, device number 22 [ 452.182907][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 452.265753][ T174] appletouch 1-1:0.85: input: appletouch disconnected [ 452.335716][T12708] loop1: detected capacity change from 0 to 8192 [ 452.360700][T12708] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 452.392633][T12708] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 452.422735][T12708] REISERFS (device loop1): using ordered data mode [ 452.441657][T12708] reiserfs: using flush barriers [ 452.483370][T12708] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 452.537593][T12708] REISERFS (device loop1): checking transaction log (loop1) [ 452.575472][T12708] REISERFS (device loop1): Using r5 hash to sort names [ 452.590794][T12708] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 453.858550][T12748] loop4: detected capacity change from 0 to 8192 [ 453.934866][T12748] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 453.997667][T12748] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 454.024981][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 454.044161][T12748] REISERFS (device loop4): using ordered data mode [ 454.065839][T12748] reiserfs: using flush barriers [ 454.102699][T12748] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 454.170699][T12748] REISERFS (device loop4): checking transaction log (loop4) [ 454.243100][T12748] REISERFS (device loop4): Using r5 hash to sort names [ 454.282824][T12748] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 456.286132][T12814] loop1: detected capacity change from 0 to 128 [ 456.377004][T12814] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.400160][T12818] loop4: detected capacity change from 0 to 128 [ 456.445634][T12814] ext4 filesystem being mounted at /535/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 456.504165][ T28] audit: type=1800 audit(1786649543.475:127): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2718" name="file2" dev="loop4" ino=1048685 res=0 errno=0 [ 456.568858][T12818] syz.4.2718: attempt to access beyond end of device [ 456.568858][T12818] loop4: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 456.599555][T12814] fscrypt (loop1, inode 12): Unsupported encryption flags (0x7b) [ 456.778136][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.152744][T12834] printk: console [ttyGS0] disabled [ 458.013824][T12864] /dev/loop0: Can't open blockdev [ 458.415528][T12878] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 458.442301][T12878] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 458.922793][T12889] ima: Unable to open file: / (-22) [ 458.924606][T12888] ima: policy update failed [ 458.960831][ T28] audit: type=1802 audit(1786649545.925:128): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2751" res=0 errno=0 [ 460.109236][T12894] loop1: detected capacity change from 0 to 32768 [ 460.195306][T12894] [ 460.195306][T12894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.195306][T12894] [ 460.268498][ T28] audit: type=1800 audit(1786649547.235:129): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2753" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 460.566938][ T3482] [ 460.566938][ T3482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.566938][ T3482] [ 460.594240][ T3482] [ 460.594240][ T3482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.594240][ T3482] [ 460.621933][ T3482] [ 460.621933][ T3482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.621933][ T3482] [ 460.650986][ T113] [ 460.650986][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.650986][ T113] [ 460.692088][ T5777] [ 460.692088][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.692088][ T5777] [ 460.761968][ T5777] [ 460.761968][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.761968][ T5777] [ 461.170383][T12941] loop2: detected capacity change from 0 to 1024 [ 461.293456][T12941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.409003][ T28] audit: type=1800 audit(1786649548.365:130): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2770" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 461.590435][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.320659][ T5832] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 462.463606][ T5832] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 463.205677][T12995] loop1: detected capacity change from 0 to 4096 [ 463.303634][ T5832] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 463.355263][T12995] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 463.440848][T12995] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 463.519680][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 463.571841][ T5832] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 463.603933][ T5832] usb 3-1: config 0 has no interface number 0 [ 463.610099][ T5832] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 463.668908][ T5832] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 463.701352][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.731711][ T5832] usb 3-1: Product: syz [ 463.735938][ T5832] usb 3-1: Manufacturer: syz [ 463.778504][ T5832] usb 3-1: SerialNumber: syz [ 463.803909][ T5832] usb 3-1: config 0 descriptor?? [ 463.823412][T12993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.873823][T13002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2786'. [ 463.932958][T13002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2786'. [ 464.064362][T12993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.733375][ T5832] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 464.771853][ T5832] asix: probe of 3-1:0.188 failed with error -71 [ 464.821835][ T5832] usb 3-1: USB disconnect, device number 22 [ 465.231821][T13032] program syz.1.2800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.711605][ T5832] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 465.921918][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 465.943352][ T5832] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 465.971664][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.035040][ T5832] pvrusb2: Hardware description: Terratec Grabster AV400 [ 466.042754][T13026] loop4: detected capacity change from 0 to 40427 [ 466.053967][ T5832] pvrusb2: ********** [ 466.058002][ T5832] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 466.081490][ T5832] pvrusb2: Important functionality might not be entirely working. [ 466.099994][ T5832] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 466.121517][T13026] F2FS-fs (loop4): invalid crc value [ 466.159601][ T5832] pvrusb2: ********** [ 466.183611][T13026] F2FS-fs (loop4): Found nat_bits in checkpoint [ 466.247227][ T2321] pvrusb2: Invalid write control endpoint [ 466.324314][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 466.411664][T13026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.491645][T13038] pvrusb2: Invalid write control endpoint [ 466.520432][ T5812] usb 3-1: USB disconnect, device number 23 [ 466.530447][ T2321] pvrusb2: Invalid write control endpoint [ 466.557268][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 1.00 [ 466.575504][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.578597][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 466.601677][ T28] audit: type=1804 audit(1786649553.565:131): pid=13026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2797" name="/newroot/486/file0/file1" dev="loop4" ino=10 res=1 errno=0 [ 466.646938][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 466.702461][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 466.739444][ T2321] pvrusb2: Device being rendered inoperable [ 466.745852][ T8077] syz-executor: attempt to access beyond end of device [ 466.745852][ T8077] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.781945][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 466.789859][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 466.806356][ T8077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 466.874929][ T2321] pvrusb2: Attached sub-driver cx25840 [ 466.881154][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 466.931585][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 468.027843][ T8] usb 2-1: 1:1: cannot set freq 48000 to ep 0x81 [ 468.234274][ T8] usb 2-1: USB disconnect, device number 12 [ 470.471451][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 470.487383][T13127] loop2: detected capacity change from 0 to 32768 [ 470.559913][T13127] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.2830 (13127) [ 470.647382][T13127] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 470.676621][T13127] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 470.689688][T13144] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 470.698075][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 470.707487][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.716202][T13127] BTRFS info (device loop2): using free space tree [ 470.763419][ T8] usb 2-1: Product: syz [ 470.767650][ T8] usb 2-1: Manufacturer: syz [ 470.773813][T13144] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 470.781698][ T8] usb 2-1: SerialNumber: syz [ 470.810020][ T8] usb 2-1: config 0 descriptor?? [ 470.989568][T13127] BTRFS info (device loop2): enabling ssd optimizations [ 471.049764][T13127] BTRFS info (device loop2): auto enabling async discard [ 471.079789][ T8] usb 2-1: USB disconnect, device number 13 [ 471.617468][ T5780] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 472.514649][T13173] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26 [ 473.283476][T13188] file system registered [ 473.326147][T13188] unloading [ 473.755019][T13201] input: syz1 as /devices/virtual/input/input27 [ 474.044324][T13182] loop4: detected capacity change from 0 to 32768 [ 474.103073][T13182] [ 474.103073][T13182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.103073][T13182] [ 474.197113][ T28] audit: type=1800 audit(1786649561.165:132): pid=13182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2847" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 474.585006][T13220] loop2: detected capacity change from 0 to 8 [ 474.602209][ T4455] [ 474.602209][ T4455] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.602209][ T4455] [ 474.654404][ T4455] [ 474.654404][ T4455] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.654404][ T4455] [ 474.681044][ T4455] [ 474.681044][ T4455] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.681044][ T4455] [ 474.703303][ T112] [ 474.703303][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.703303][ T112] [ 474.745814][ T8077] [ 474.745814][ T8077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.745814][ T8077] [ 474.793013][T13222] printk: console [ttyS0] disabled