last executing test programs: 12m5.459936433s ago: executing program 0 (id=8296): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0xfffffffc, 0x6, 0x0}) 12m5.131294057s ago: executing program 0 (id=8303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12m4.91934938s ago: executing program 0 (id=8307): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000002c0)) 12m4.659804643s ago: executing program 0 (id=8312): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12m4.04567075s ago: executing program 0 (id=8320): r0 = socket$kcm(0x22, 0x2, 0x21) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10103) 12m3.739262624s ago: executing program 0 (id=8326): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000180)={0x1}) 12m3.19364827s ago: executing program 32 (id=8326): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000180)={0x1}) 11m57.662728968s ago: executing program 1 (id=8385): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, 0x0) 11m57.391324392s ago: executing program 1 (id=8387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@migrate={0xac, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x3, 0x0, 0x3505, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) 11m57.150209844s ago: executing program 1 (id=8389): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x23, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e872"}}) 11m56.67119665s ago: executing program 1 (id=8393): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11m56.012048098s ago: executing program 1 (id=8397): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x16, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) 11m53.195050113s ago: executing program 1 (id=8411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 11m52.525484691s ago: executing program 33 (id=8411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m30.23236792s ago: executing program 3 (id=16934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f00000003c0)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x20084800) 1m29.805125925s ago: executing program 3 (id=16937): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000040)={[{}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x26, 0x759, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x2, 0xffff, 0x2, 0xf}) 1m29.361267181s ago: executing program 3 (id=16943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 1m28.991278235s ago: executing program 3 (id=16945): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2208054, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="ac7b4efdd021fbb1d8ee6b170048105967759c5affb8c9a311dd24fa1fec64c3a032d17a1e12f67c0871188469a7b76eb91f0780a9be55bb0927c1e8a8cb84156181c4a8f7d14bcc78240dd07a852a874996853e837a5dfa02670ac7445b12c5577d7553127077bacf4d511e7163a93892b8a6ef9777456cc642cb6abccee8121783945547a8b4a6d257cf9fc5043c781271c9f6179c145b15fa52", @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0xf5c, &(0x7f0000001e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 1m28.331703783s ago: executing program 3 (id=16952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m27.736512451s ago: executing program 3 (id=16960): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x400, 0x3) 1m27.218608507s ago: executing program 34 (id=16960): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x400, 0x3) 3.763433524s ago: executing program 7 (id=17601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x27) 3.735092935s ago: executing program 6 (id=17602): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) 3.684547836s ago: executing program 2 (id=17603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.419138409s ago: executing program 6 (id=17606): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r0, r0, 0x0) 3.388921829s ago: executing program 7 (id=17607): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ff00000}]}) socket$inet6(0xa, 0x2, 0x0) 3.366698079s ago: executing program 2 (id=17608): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0x0, r1, {0x20000000000007, 0x0, 0x8, 0x11, 0x0, 0xfffff801, {0x2, 0x0, 0x6, 0xc5b6, 0x10000, 0x7, 0x7fff, 0x7, 0x7ff, 0x0, 0x7, r2, r3, 0x200005, 0x1000}}}, 0x90) 3.25457479s ago: executing program 5 (id=17609): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7, 0x1, 0x1, 0x0, 0xff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@mmap={0x1, 0x1, 0x4, 0x4, 0x1, {}, {0x3, 0x0, 0x0, 0xd, 0xf, 0x9, "66eb3996"}, 0x9836, 0x1, {}, 0x7}) 3.199972102s ago: executing program 4 (id=17610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x80}}, 0x8040) 3.001775204s ago: executing program 6 (id=17611): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.906640555s ago: executing program 4 (id=17612): unshare(0x22020600) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711, @local}, 0x10) 2.669711048s ago: executing program 2 (id=17613): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x80c808, &(0x7f0000000340)=ANY=[], 0x1, 0x2e6, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/46, 0x2e) 2.590299259s ago: executing program 4 (id=17614): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./file2\x00', 0x800000, &(0x7f0000000580)=ANY=[@ANYBLOB="136694da6de58c0f6b37c1f52e6cf99a"], 0xff, 0x378, &(0x7f0000000680)="$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") utimes(&(0x7f00000005c0)='./file2\x00', &(0x7f00000004c0)={{0x0, 0x2710}, {0x0, 0x2710}}) 2.255252743s ago: executing program 2 (id=17615): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1818840, &(0x7f00000004c0)={[{@utf8no}, {@shortname_win95}, {@shortname_win95}, {@fat=@usefree}, {@shortname_mixed}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@fat=@uid}, {@shortname_mixed}]}, 0x1, 0x371, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 2.095735084s ago: executing program 7 (id=17616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 2.010866206s ago: executing program 5 (id=17617): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x80000000, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 1.844267238s ago: executing program 4 (id=17618): r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendto$phonet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 1.735262529s ago: executing program 7 (id=17619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d00000003000000040000000700000001000000", @ANYRES32=r0], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7fffffff, r1}, 0x38) 1.441973413s ago: executing program 4 (id=17620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.435138023s ago: executing program 6 (id=17621): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x8001, 0x14ffffff) 1.365968364s ago: executing program 7 (id=17622): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) 1.291621975s ago: executing program 2 (id=17623): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, r0, 0x0, 0x0, 0xffffeffffffffffe}]) 1.248147705s ago: executing program 5 (id=17624): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.047273638s ago: executing program 4 (id=17625): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB='quota,iocharset=macgreek,discard,iocharset=iso8859-4,discard,integrity,quota,iocharset=default,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c001f1d02192b82c1d77d5275a9dd011c79b65ddfeffff26d30b4e45e4ff5d2a3c8f687494e2782c60db0fe3c08f1fd0244f2b3988f6a3c9f05e62bd27131d2e1354fc8865886482d784608f35db7a23eefc1665bb78934469d2a73d3fb7bf425ada37085aa46365837765a72f50552ce8f69886588138e3b027f009c59356fac135f289d895427a12d3f87b72351c22f0b418fba3067e7363e488de8e5c39f01bbb7e7b106977504e87fc87a886769f8eba6de3294c2076360fcb9ee4058f16c292335f4ea4af20729aff7de5cbcf16e575540ffb2ac590551ecdecf048219491837307887a332528baad28ae02a33b060"], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 900.192429ms ago: executing program 2 (id=17626): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000a40)={[{@pquota}, {@sysvgroups}, {@nolargeio}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0x0) ioctl$FITRIM(r0, 0xc0c0586d, &(0x7f0000000180)={0x7, 0x3, 0x4}) 890.44357ms ago: executing program 5 (id=17627): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) 515.784654ms ago: executing program 5 (id=17628): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000340)={0xe2, "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"}) 394.927265ms ago: executing program 7 (id=17629): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 344.408276ms ago: executing program 6 (id=17630): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/4075, 0xfeb}], 0x1}, 0x2}], 0x1, 0x40010100, 0x0) 155.562198ms ago: executing program 5 (id=17631): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973", @ANYBLOB='&='], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000000), 0x1ad201) 0s ago: executing program 6 (id=17632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): ent of $DATA attribute has non zero lowest_vcn. [ 1305.374556][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1305.421883][T13687] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1305.474765][T13687] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1305.519347][T13687] ntfs: volume version 3.1. [ 1305.557863][T13687] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1305.587195][T13687] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1305.661687][T13687] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1305.711937][T13687] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1305.782040][T13687] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1306.233624][T13752] netlink: 'syz.6.16543': attribute type 1 has an invalid length. [ 1306.244475][T13752] __nla_validate_parse: 4 callbacks suppressed [ 1306.244495][T13752] netlink: 224 bytes leftover after parsing attributes in process `syz.6.16543'. [ 1306.727993][T13781] loop2: detected capacity change from 0 to 256 [ 1306.872923][T13781] FAT-fs (loop2): Directory bread(block 64) failed [ 1306.894982][T13781] FAT-fs (loop2): Directory bread(block 65) failed [ 1306.902862][T13781] FAT-fs (loop2): Directory bread(block 66) failed [ 1306.999624][T13781] FAT-fs (loop2): Directory bread(block 67) failed [ 1307.033655][T13781] FAT-fs (loop2): Directory bread(block 68) failed [ 1307.040800][T13781] FAT-fs (loop2): Directory bread(block 69) failed [ 1307.114654][T13781] FAT-fs (loop2): Directory bread(block 70) failed [ 1307.142095][T13781] FAT-fs (loop2): Directory bread(block 71) failed [ 1307.203067][T13806] autofs4:pid:13806:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 1307.203802][T13781] FAT-fs (loop2): Directory bread(block 72) failed [ 1307.251328][T13806] autofs4:pid:13806:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1307.281761][T13781] FAT-fs (loop2): Directory bread(block 73) failed [ 1307.598435][T13818] loop6: detected capacity change from 0 to 1024 [ 1307.619680][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16566'. [ 1307.931430][T13841] loop6: detected capacity change from 0 to 512 [ 1308.094643][T13841] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1308.169290][T13841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1308.193590][T13841] System zones: 0-1, 15-15, 18-18, 34-34 [ 1308.200727][T13841] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1308.209122][T13841] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1308.225659][T13841] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1308.233298][T13841] EXT4-fs (loop6): 1 truncate cleaned up [ 1308.239520][T13841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1308.288372][T13841] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 1308.394946][T13853] xt_CT: No such helper "netbios-ns" [ 1308.438682][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1308.580022][ T7448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1308.826501][T13884] netlink: 'syz.4.16583': attribute type 3 has an invalid length. [ 1308.853618][T13884] netlink: 'syz.4.16583': attribute type 3 has an invalid length. [ 1308.861872][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16583'. [ 1309.428446][T13918] device batadv_slave_0 left promiscuous mode [ 1309.866952][ T4289] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 1310.248741][T13948] loop5: detected capacity change from 0 to 4096 [ 1310.297943][T13948] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1310.496975][ T1804] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1310.857576][T13982] device geneve3 entered promiscuous mode [ 1311.161729][T13995] loop6: detected capacity change from 0 to 4096 [ 1311.306012][T13995] ntfs3: loop6: Failed to load $Extend. [ 1311.398698][T13995] ntfs3: loop6: ino=5, "/" directory corrupted [ 1311.814687][T14032] netlink: 'syz.4.16624': attribute type 3 has an invalid length. [ 1311.841089][T14035] libceph: resolve '0' (ret=-3): failed [ 1311.863668][T14032] netlink: 'syz.4.16624': attribute type 3 has an invalid length. [ 1313.012270][T14104] loop2: detected capacity change from 0 to 256 [ 1313.233732][ T6770] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1313.453693][ T6770] usb 7-1: Using ep0 maxpacket: 16 [ 1313.462836][ T6770] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1313.501309][ T6770] usb 7-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1313.544087][ T6770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.552443][ T6770] usb 7-1: Product: syz [ 1313.578085][ T6770] usb 7-1: Manufacturer: syz [ 1313.598103][ T6770] usb 7-1: SerialNumber: syz [ 1313.845172][ T6770] usb 7-1: MIDIStreaming interface descriptor not found [ 1313.933721][ T4289] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1313.943376][ T4289] Bluetooth: hci0: Injecting HCI hardware error event [ 1313.961192][ T4289] Bluetooth: hci0: hardware error 0x00 [ 1313.965508][ T6770] usb 7-1: USB disconnect, device number 29 [ 1314.184646][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.203968][T14191] netlink: 'syz.2.16666': attribute type 25 has an invalid length. [ 1314.212110][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16666'. [ 1314.693707][ T7448] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1314.855206][T14229] device geneve4 entered promiscuous mode [ 1314.863646][ T4437] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1314.910606][ T7448] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1314.923097][ T7448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.943489][ T7448] usb 4-1: Product: syz [ 1314.956345][ T7448] usb 4-1: Manufacturer: syz [ 1314.974844][ T7448] usb 4-1: SerialNumber: syz [ 1314.992545][ T7448] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1315.028404][ T7448] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1315.083564][ T4437] usb 5-1: Using ep0 maxpacket: 8 [ 1315.091042][ T4437] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1315.121442][ T4437] usb 5-1: config 0 has no interface number 0 [ 1315.151324][ T4437] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1315.218294][ T4437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.278235][ T4437] usb 5-1: Product: syz [ 1315.282550][ T4437] usb 5-1: Manufacturer: syz [ 1315.301532][ C0] usb 4-1: ath9k_htc: invalid pkt_len (ffef) [ 1315.324662][ T4437] usb 5-1: SerialNumber: syz [ 1315.374913][ T4437] usb 5-1: config 0 descriptor?? [ 1315.528452][ T7444] usb 4-1: USB disconnect, device number 66 [ 1315.588709][ T4437] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1315.609308][ T4437] usb 5-1: No valid video chain found. [ 1315.642846][ T4437] usb 5-1: USB disconnect, device number 50 [ 1316.093720][ T7448] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1316.112338][ T7448] ath9k_htc: Failed to initialize the device [ 1316.136321][ T7444] usb 4-1: ath9k_htc: USB layer deinitialized [ 1316.173850][ T4289] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1316.254666][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1316.391608][T14310] loop6: detected capacity change from 0 to 512 [ 1316.497467][T14310] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1316.599525][T14310] __quota_error: 7 callbacks suppressed [ 1316.599545][T14310] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1316.693780][T14310] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1316.700521][T14323] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16699'. [ 1316.743593][T14310] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.16696: Failed to acquire dquot type 0 [ 1317.013218][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1317.095949][T14327] loop4: detected capacity change from 0 to 4096 [ 1317.287723][T14333] loop5: detected capacity change from 0 to 4096 [ 1317.390313][T14333] ntfs: volume version 3.1. [ 1317.441264][T14333] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1317.470374][T14299] loop2: detected capacity change from 0 to 32768 [ 1317.483595][T14333] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1317.554263][T14333] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1317.601080][T14333] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1317.629481][T14333] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1317.674020][T14333] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1317.693976][T14299] XFS (loop2): Mounting V5 Filesystem [ 1317.875273][T14333] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 1317.911010][T14299] XFS (loop2): Ending clean mount [ 1317.930785][T14299] XFS (loop2): Quotacheck needed: Please wait. [ 1317.953658][ T7444] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1317.966771][T14333] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1318.085804][T14299] XFS (loop2): Quotacheck: Done. [ 1318.143833][ T7444] usb 4-1: Using ep0 maxpacket: 8 [ 1318.154474][ T7444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1318.207441][ T7444] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1318.251703][ T7444] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1318.300687][ T7444] usb 4-1: config 8 interface 0 has no altsetting 0 [ 1318.309211][ T4273] XFS (loop2): Unmounting Filesystem [ 1318.330728][ T7444] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1318.361465][ T7444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.390594][ T7444] usb 4-1: Product: syz [ 1318.405983][ T7444] usb 4-1: Manufacturer: syz [ 1318.410758][ T7444] usb 4-1: SerialNumber: syz [ 1318.538105][T14382] loop6: detected capacity change from 0 to 4096 [ 1318.662971][ T7444] usb 4-1: selecting invalid altsetting 0 [ 1318.802548][ T7444] snd-usb-audio: probe of 4-1:8.0 failed with error -12 [ 1318.844353][ T7444] usb 4-1: USB disconnect, device number 67 [ 1319.142909][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.040113][T19359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.050519][T14479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.062398][T19359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.104862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1320.610989][T14501] netlink: 152 bytes leftover after parsing attributes in process `syz.6.16740'. [ 1320.641644][T14501] bond0: (slave bond_slave_0): Releasing backup interface [ 1320.684545][T14501] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1321.294057][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1321.465207][T14533] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16750'. [ 1322.166408][T14522] loop4: detected capacity change from 0 to 32768 [ 1322.293702][T14522] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1322.525833][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 1322.763928][T14584] loop6: detected capacity change from 0 to 1024 [ 1322.832656][T14584] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1322.850563][T14587] binder: 14586:14587 ioctl c0306201 200000000640 returned -14 [ 1322.977480][T14593] loop2: detected capacity change from 0 to 1024 [ 1323.148561][T14599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16770'. [ 1323.198641][T14599] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16770'. [ 1323.388871][T14549] loop5: detected capacity change from 0 to 32768 [ 1323.470094][T14549] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.16756 (14549) [ 1323.693309][T14549] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1323.736704][T14549] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1323.752654][T14549] BTRFS info (device loop5): turning on async discard [ 1323.760548][T14549] BTRFS info (device loop5): using free space tree [ 1323.787296][T14624] mkiss: ax0: crc mode is auto. [ 1324.126502][T14549] BTRFS info (device loop5): enabling ssd optimizations [ 1324.523229][T22893] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1324.989925][T14708] loop3: detected capacity change from 0 to 1024 [ 1325.308660][ T4392] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1325.932260][T14760] loop3: detected capacity change from 0 to 512 [ 1325.958343][T14760] /dev/loop3: Can't open blockdev [ 1326.494155][ T4332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.982689][T14824] loop4: detected capacity change from 0 to 64 [ 1327.022642][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1327.022662][ T26] audit: type=1800 audit(1326.972:752): pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16823" name="file2" dev="loop4" ino=21 res=0 errno=0 [ 1327.593507][ T7444] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1327.701199][T14863] loop5: detected capacity change from 0 to 256 [ 1327.774152][ T7448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.822197][ T7444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1327.844394][ T7444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1327.890644][ T7444] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1327.939460][ T7444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.984487][ T7444] usb 4-1: config 0 descriptor?? [ 1328.003639][T13258] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1328.205704][T13258] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1328.223750][T13258] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.277917][T13258] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1328.293654][T13258] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.338351][T13258] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1328.365027][T13258] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1328.388416][T13258] usb 3-1: Product: syz [ 1328.400590][T13258] usb 3-1: Manufacturer: syz [ 1328.427758][T13258] cdc_wdm 3-1:1.0: skipping garbage [ 1328.431201][ T7444] wacom 0003:056A:00F4.0002: ignoring exceeding usage max [ 1328.443988][T13258] cdc_wdm 3-1:1.0: skipping garbage [ 1328.459405][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.463520][ T4184] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1328.476388][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.492307][T13258] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1328.514519][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.520802][T13258] cdc_wdm 3-1:1.0: Unknown control protocol [ 1328.532072][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.557396][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.594263][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.604150][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.611076][ T7444] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1328.633368][T14918] xt_policy: too many policy elements [ 1328.685582][ T4184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.708543][T13618] usb 3-1: USB disconnect, device number 54 [ 1328.714684][ T4184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.733613][ T4184] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1328.773685][ T4184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.794513][ T4184] usb 6-1: config 0 descriptor?? [ 1328.805263][ T7444] wacom 0003:056A:00F4.0002: hidraw0: USB HID v0.08 Device [HID 056a:00f4] on usb-dummy_hcd.3-1/input0 [ 1328.844970][ T7444] usb 4-1: USB disconnect, device number 68 [ 1329.157990][T14944] fido_id[14944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1329.217708][ T4184] hkems 0003:2006:0118.0003: item fetching failed at offset 5/7 [ 1329.234025][ T4184] hkems 0003:2006:0118.0003: parse failed [ 1329.244234][ T4184] hkems: probe of 0003:2006:0118.0003 failed with error -22 [ 1329.371096][ T6775] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1329.433599][T13258] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1329.452138][ T4184] usb 6-1: USB disconnect, device number 28 [ 1329.563824][ T6775] usb 7-1: Using ep0 maxpacket: 16 [ 1329.576545][ T6775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.589053][ T6775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.600588][ T6775] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1329.614287][ T6775] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1329.625493][ T6775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.634464][T13258] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1329.649402][T13258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.662259][T13258] usb 5-1: config 0 has no interface number 0 [ 1329.669815][ T6775] usb 7-1: config 0 descriptor?? [ 1329.680846][T13258] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1329.697648][T13258] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1329.708761][T13258] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1329.731390][T13258] usb 5-1: Manufacturer: syz [ 1329.753150][T13258] usb 5-1: config 0 descriptor?? [ 1329.771606][T13258] hub 5-1:0.52: bad descriptor, ignoring hub [ 1329.779649][T13258] hub: probe of 5-1:0.52 failed with error -5 [ 1330.109827][ T6775] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1330.212445][ T6775] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0004/input/input62 [ 1330.359026][T15027] loop3: detected capacity change from 0 to 1764 [ 1330.384703][ T6775] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1330.465389][ T6775] usb 7-1: USB disconnect, device number 30 [ 1330.499274][T13258] usb 5-1: USB disconnect, device number 51 [ 1330.861078][T15049] fido_id[15049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1331.181963][T15082] loop2: detected capacity change from 0 to 512 [ 1331.279614][T15082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1331.460643][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1331.614951][ T1804] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1331.639958][T15108] loop2: detected capacity change from 0 to 256 [ 1332.174167][T15135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16880'. [ 1332.599882][T15161] loop2: detected capacity change from 0 to 1024 [ 1332.726528][T15165] loop3: detected capacity change from 0 to 128 [ 1332.803589][T15165] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1332.864879][T15165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1332.910767][T15165] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.16889: Block bitmap for bg 0 marked uninitialized [ 1332.965435][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 1333.312087][T15201] loop6: detected capacity change from 0 to 16 [ 1333.347020][T15192] loop4: detected capacity change from 0 to 2048 [ 1333.354729][T15201] erofs: (device loop6): mounted with root inode @ nid 36. [ 1333.406248][T15192] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1333.463249][T15192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1334.344168][T15251] loop6: detected capacity change from 0 to 512 [ 1334.452892][T15251] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1334.464294][T15259] loop3: detected capacity change from 0 to 1024 [ 1334.520101][T15251] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 1334.586689][T15251] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.16911: Corrupt directory, running e2fsck is recommended [ 1334.684990][T15251] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1334.746112][T15251] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.16911: corrupted in-inode xattr [ 1334.843814][T15251] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.16911: couldn't read orphan inode 15 (err -117) [ 1334.875944][T15251] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1335.194461][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1335.277306][T15291] loop4: detected capacity change from 0 to 4096 [ 1335.291262][T15299] loop2: detected capacity change from 0 to 4096 [ 1335.359191][T15299] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1335.374497][T15291] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1335.538759][T15307] loop6: detected capacity change from 0 to 4096 [ 1335.598314][T15307] EXT4-fs: Ignoring removed orlov option [ 1335.665830][ T4273] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 1335.684051][T15307] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1335.694383][ T4273] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 1335.727820][T15318] loop3: detected capacity change from 0 to 16 [ 1335.731739][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1335.756204][T15307] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1335.814133][T15318] erofs: (device loop3): mounted with root inode @ nid 36. [ 1335.836900][T15307] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1335.873095][T15318] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1335.955738][T15318] syz.3.16927: attempt to access beyond end of device [ 1335.955738][T15318] loop3: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1336.036870][T15318] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1336.060650][T15329] loop5: detected capacity change from 0 to 128 [ 1336.101248][T15318] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1336.112800][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1336.189437][T15329] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1336.273572][T15329] hpfs: filesystem error: improperly stopped [ 1336.279844][T15329] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1336.332536][T15329] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1336.391775][T15329] hpfs: You really don't want any checks? You are crazy... [ 1336.451268][T15329] hpfs: hpfs_map_sector(): read error [ 1336.475513][T15344] FAT-fs (loop6): Directory bread(block 64) failed [ 1336.482128][T15344] FAT-fs (loop6): Directory bread(block 65) failed [ 1336.497475][T15329] hpfs: code page support is disabled [ 1336.503076][T15329] hpfs: hpfs_map_4sectors(): unaligned read [ 1336.534381][T15344] FAT-fs (loop6): Directory bread(block 66) failed [ 1336.541024][T15344] FAT-fs (loop6): Directory bread(block 67) failed [ 1336.548181][T15329] hpfs: hpfs_map_4sectors(): unaligned read [ 1336.583862][T15329] hpfs: filesystem error: unable to find root dir [ 1336.598538][T15344] FAT-fs (loop6): Directory bread(block 68) failed [ 1336.631398][T15344] FAT-fs (loop6): Directory bread(block 69) failed [ 1336.650621][T15344] FAT-fs (loop6): Directory bread(block 70) failed [ 1336.677207][T19359] hfsplus: b-tree write err: -5, ino 25 [ 1336.683043][T19359] hfsplus: b-tree write err: -5, ino 4 [ 1336.703467][T15344] FAT-fs (loop6): Directory bread(block 71) failed [ 1336.738275][T19359] hfsplus: b-tree write err: -5, ino 2 [ 1336.774006][T15344] FAT-fs (loop6): Directory bread(block 72) failed [ 1336.843671][T15344] FAT-fs (loop6): Directory bread(block 73) failed [ 1336.992524][T15365] /dev/loop3: Can't open blockdev [ 1337.266758][T15377] vivid-004: disconnect [ 1337.304472][T15376] vivid-004: reconnect [ 1337.377735][ T4332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1337.708271][T15389] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1337.783979][T15399] set_capacity_and_notify: 4 callbacks suppressed [ 1337.783998][T15399] loop3: detected capacity change from 0 to 4096 [ 1337.827367][T15406] loop5: detected capacity change from 0 to 512 [ 1337.920301][T15406] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 1337.943487][ T4392] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1338.033638][T15406] FAT-fs (loop5): Filesystem has been set read-only [ 1338.143949][T15420] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1338.146511][T15419] IPVS: stopping backup sync thread 15420 ... [ 1338.577032][T15438] loop6: detected capacity change from 0 to 64 [ 1339.019162][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.080555][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1339.275343][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.296279][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1339.406081][T15469] loop6: detected capacity change from 0 to 16 [ 1339.421165][T15468] loop4: detected capacity change from 0 to 512 [ 1339.434248][T15469] erofs: (device loop6): mounted with root inode @ nid 36. [ 1339.469021][T15468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1339.519503][T15468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1339.542263][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.674706][T15468] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.16965: invalid indirect mapped block 2683928664 (level 1) [ 1339.703585][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1339.741074][T15468] EXT4-fs (loop4): Remounting filesystem read-only [ 1339.760800][T15468] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.16965: bg 0: block 361: padding at end of block bitmap is not set [ 1339.819967][T15468] EXT4-fs (loop4): Remounting filesystem read-only [ 1339.840944][T15468] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1339.895113][T15468] EXT4-fs (loop4): Remounting filesystem read-only [ 1339.907760][T15486] loop2: detected capacity change from 0 to 128 [ 1339.924969][T15468] EXT4-fs (loop4): 1 truncate cleaned up [ 1339.932149][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.944449][T15468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1339.976633][T15486] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1340.012269][T15468] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #2: block 5: comm syz.4.16965: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1340.043811][T15486] hpfs: filesystem error: improperly stopped [ 1340.059037][T15468] EXT4-fs (loop4): Remounting filesystem read-only [ 1340.065731][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1340.082027][T15457] loop5: detected capacity change from 0 to 32768 [ 1340.089870][T15486] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1340.113699][T15486] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1340.127901][T15468] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.16965: directory missing '.' [ 1340.150656][T15486] hpfs: You really don't want any checks? You are crazy... [ 1340.188233][T15479] JFS: metapage_get_blocks failed [ 1340.197135][T15486] hpfs: hpfs_map_sector(): read error [ 1340.205239][ T106] blkno = 50030, nblocks = 1 [ 1340.209913][ T106] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1340.209913][ T106] [ 1340.223118][T15457] JFS: metapage_get_blocks failed [ 1340.232974][T15486] hpfs: code page support is disabled [ 1340.240602][ T56] JFS: metapage_get_blocks failed [ 1340.277186][ T106] ERROR: (device loop5): remounting filesystem as read-only [ 1340.291790][T15486] hpfs: hpfs_map_4sectors(): unaligned read [ 1340.313797][T15486] hpfs: hpfs_map_4sectors(): unaligned read [ 1340.314986][ T106] blkno = 5002c, nblocks = 4 [ 1340.322512][T15486] hpfs: filesystem error: unable to find root dir [ 1340.355802][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1340.360899][ T106] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1340.360899][ T106] [ 1340.693686][T22893] JFS: metapage_get_blocks failed [ 1340.702072][T22893] JFS: metapage_get_blocks failed [ 1340.883133][ T5024] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1340.884867][T15502] loop6: detected capacity change from 0 to 8192 [ 1340.905344][ T5024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1340.917019][ T5024] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1340.932161][ T5024] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1340.964943][ T5024] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1340.974161][ T5024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1341.068113][T15502] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1341.144973][T15502] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1341.223838][T15502] REISERFS (device loop6): using ordered data mode [ 1341.241708][T15502] reiserfs: using flush barriers [ 1341.265543][ T26] audit: type=1326 audit(1341.222:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.296475][T15502] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1341.336072][T15502] REISERFS (device loop6): checking transaction log (loop6) [ 1341.353529][ T26] audit: type=1326 audit(1341.252:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.398200][T15502] REISERFS (device loop6): Using r5 hash to sort names [ 1341.418853][T15502] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1341.473545][ T26] audit: type=1326 audit(1341.252:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.590034][ T26] audit: type=1326 audit(1341.252:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.592598][T15544] vivid-001: disconnect [ 1341.710070][T15542] vivid-001: reconnect [ 1341.714868][ T26] audit: type=1326 audit(1341.252:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.782444][ T26] audit: type=1326 audit(1341.312:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.898960][ T26] audit: type=1326 audit(1341.312:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15538 comm="syz.4.16974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5859cdd9 code=0x7ffc0000 [ 1341.923708][ T4184] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1342.052092][T15513] lo speed is unknown, defaulting to 1000 [ 1342.117661][ T4184] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1342.143610][ T4184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.174801][ T4184] usb 5-1: Product: syz [ 1342.179048][ T4184] usb 5-1: Manufacturer: syz [ 1342.193826][ T4184] usb 5-1: SerialNumber: syz [ 1342.244508][ T4184] usb 5-1: config 0 descriptor?? [ 1342.301318][ T4184] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1342.442281][ T4184] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1342.471670][ T4184] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1342.566539][ T4184] usb 5-1: media controller created [ 1342.611907][ T4184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1342.868342][ T4184] DVB: Unable to find symbol mt352_attach() [ 1343.041621][ T4184] DVB: Unable to find symbol nxt6000_attach() [ 1343.050805][ T4184] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1343.060699][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 1343.075845][ T4184] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 1343.089511][ T4184] dvb-usb: schedule remote query interval to 1000 msecs. [ 1343.097786][ T4184] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1343.108579][ T4184] dvb-usb: bulk message failed: -22 (7/0) [ 1343.115090][ T4184] dvb-usb: bulk message failed: -22 (7/0) [ 1343.167596][ T4184] usb 5-1: USB disconnect, device number 52 [ 1343.271750][ T4184] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1343.891721][T15659] loop6: detected capacity change from 0 to 4096 [ 1343.969121][T15659] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1344.630831][T15659] ntfs3: Cannot use different iocharset when remounting! [ 1345.009930][T15746] loop4: detected capacity change from 0 to 128 [ 1345.050077][T15746] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1345.075946][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16999'. [ 1345.149612][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 1345.220268][T15756] loop6: detected capacity change from 0 to 512 [ 1345.264345][T15746] hpfs: filesystem error: improperly stopped [ 1345.270933][T15746] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1345.289148][T15513] chnl_net:caif_netlink_parms(): no params data found [ 1345.303922][T15756] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1345.345659][T15746] hpfs: You really don't want any checks? You are crazy... [ 1345.371831][T15746] hpfs: hpfs_map_sector(): read error [ 1345.428243][T15746] hpfs: code page support is disabled [ 1345.490330][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1345.505808][T15746] hpfs: hpfs_map_4sectors(): unaligned read [ 1345.512242][T15746] hpfs: hpfs_map_4sectors(): unaligned read [ 1345.573540][T15746] hpfs: filesystem error: unable to find root dir [ 1345.585309][T15513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.592582][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.644760][T15513] device bridge_slave_0 entered promiscuous mode [ 1345.689158][T15513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.736113][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.761547][T15513] device bridge_slave_1 entered promiscuous mode [ 1345.882955][T15844] loop2: detected capacity change from 0 to 512 [ 1345.970148][T15844] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1346.263683][T13618] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 1346.454802][T15513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.466051][T13618] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1346.476003][T13618] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1346.498084][T13618] usb 5-1: config 0 has no interface number 0 [ 1346.504989][T13618] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1346.516127][T13618] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1346.530042][T13618] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1346.571693][T13618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.635000][T13618] usb 5-1: config 0 descriptor?? [ 1346.679730][T15513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.213594][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 1347.215432][T15513] team0: Port device team_slave_0 added [ 1347.276633][T13618] usb 5-1: USB disconnect, device number 53 [ 1347.333292][T15942] mkiss: ax0: crc mode is auto. [ 1347.334915][T15513] team0: Port device team_slave_1 added [ 1347.517598][T15513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.539999][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.634705][T15513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.691186][ T9] device hsr_slave_0 left promiscuous mode [ 1347.708056][ T9] device hsr_slave_1 left promiscuous mode [ 1347.744269][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.770394][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.944018][T13618] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1348.053626][ T4437] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1348.146358][T13618] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1348.176252][T13618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.210322][T13618] usb 3-1: config 0 descriptor?? [ 1348.242151][T13618] cp210x 3-1:0.0: cp210x converter detected [ 1348.248609][ T4437] usb 7-1: Using ep0 maxpacket: 8 [ 1348.256523][ T4437] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.287390][ T4437] usb 7-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1348.323657][ T4437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.366331][ T4437] usb 7-1: config 0 descriptor?? [ 1348.397265][ T4437] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1348.655230][T13618] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1348.877178][T13258] usb 3-1: USB disconnect, device number 55 [ 1348.895380][T13258] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1348.972968][T16037] loop5: detected capacity change from 0 to 512 [ 1349.028087][T13258] cp210x 3-1:0.0: device disconnected [ 1349.080562][T16037] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.5.17033: corrupted xattr block 95 [ 1349.121384][ T9] bond4 (unregistering): Released all slaves [ 1349.131131][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 1349.163633][T16037] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1349.207677][ T9] bond3 (unregistering): Released all slaves [ 1349.222995][ T9] bond2 (unregistering): Released all slaves [ 1349.230347][T16037] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.17033: bg 0: block 7: invalid block bitmap [ 1349.256975][ T9] bond0 (unregistering): Released all slaves [ 1349.263433][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 1349.270055][T16037] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1349.293744][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 1349.301924][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 1349.309075][T16037] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2916: inode #11: comm syz.5.17033: corrupted xattr block 95 [ 1349.322377][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 1349.329024][T16037] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 1349.338683][T16037] EXT4-fs (loop5): 1 orphan inode deleted [ 1349.365184][T16037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1349.451818][T22893] EXT4-fs (loop5): unmounting filesystem. [ 1349.567430][ T9] bond1 (unregistering): Released all slaves [ 1349.824981][T16064] loop5: detected capacity change from 0 to 512 [ 1349.874391][T13618] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1349.891219][T16064] EXT4-fs (loop5): 1 truncate cleaned up [ 1349.906025][T16064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1349.924631][T16064] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 1350.021237][T22893] EXT4-fs (loop5): unmounting filesystem. [ 1350.093674][T13618] usb 3-1: Using ep0 maxpacket: 16 [ 1350.114472][T13618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.149381][T13618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.168832][T13618] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1350.185424][T13618] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1350.185461][T13618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.215292][T13618] usb 3-1: config 0 descriptor?? [ 1350.660109][T13618] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 1350.715266][T13618] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input65 [ 1350.844467][T13618] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1350.878847][T13618] usb 3-1: USB disconnect, device number 56 [ 1351.097109][T16115] fido_id[16115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1351.369818][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1351.379396][ T4289] Bluetooth: hci4: command 0x0405 tx timeout [ 1351.458007][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1352.379467][T15513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.389761][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.417767][T15513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.461043][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17029'. [ 1352.544008][ T7448] usb 7-1: USB disconnect, device number 31 [ 1352.765618][T15513] device hsr_slave_0 entered promiscuous mode [ 1352.880830][T15513] device hsr_slave_1 entered promiscuous mode [ 1352.971700][T15513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1352.991331][T15513] Cannot create hsr debugfs directory [ 1353.262442][T16215] loop4: detected capacity change from 0 to 64 [ 1353.484103][T16194] loop2: detected capacity change from 0 to 4096 [ 1353.501045][T16242] loop6: detected capacity change from 0 to 256 [ 1353.990230][T16272] loop4: detected capacity change from 0 to 4096 [ 1354.064674][T16272] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1354.267792][T15513] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1354.328540][T15513] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1354.345994][T16272] ntfs: volume version 3.1. [ 1354.418175][T15513] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1354.465618][T15513] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1354.606954][ T4332] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1354.788327][T16315] team0: Device vlan2 is already an upper device of the team interface [ 1354.912241][T15513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.979657][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1355.034021][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1355.048401][T15513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.161458][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1355.184481][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1355.226113][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.233831][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.263023][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1355.307931][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1355.354429][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.361801][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.410088][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1355.454548][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1355.475338][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1355.534154][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1355.565927][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1355.598335][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1355.634772][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1355.654096][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1355.678059][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1355.714696][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1355.731786][T16354] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1355.763767][T16355] loop4: detected capacity change from 0 to 1024 [ 1355.789628][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1355.823286][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1355.886364][T15513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1356.009297][T16323] loop2: detected capacity change from 0 to 32768 [ 1356.056642][ T4300] hfsplus: b-tree write err: -5, ino 25 [ 1356.096156][ T4300] hfsplus: b-tree write err: -5, ino 4 [ 1356.103300][ T4300] hfsplus: b-tree write err: -5, ino 2 [ 1356.131392][T16323] JBD2: Ignoring recovery information on journal [ 1356.160927][ T4300] hfsplus: b-tree write err: -5, ino 17 [ 1356.279904][T16323] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1356.302322][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17066'. [ 1356.477148][T16323] (syz.2.17057,16323,1):ocfs2_reflink_ioctl:4433 ERROR: status = -14 [ 1356.687066][T16393] loop5: detected capacity change from 0 to 128 [ 1356.756029][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 1357.156224][T16412] loop5: detected capacity change from 0 to 64 [ 1357.289504][T16412] Trying to free block not in datazone [ 1357.389471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1357.439063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1357.465570][ T7444] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1357.468173][T16425] Trying to free block not in datazone [ 1357.501161][T16425] minix_free_inode: bit 3 already cleared [ 1357.502735][T15513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.516566][T16431] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1357.699466][ T7444] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.750210][ T7444] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1357.802179][ T7444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.864940][ T7444] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1358.084641][T16454] loop6: detected capacity change from 0 to 512 [ 1358.168949][T16454] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1358.193464][T16454] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 1358.204869][T16454] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.17080: Corrupt directory, running e2fsck is recommended [ 1358.232561][T16454] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1358.241509][T16454] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.17080: corrupted in-inode xattr [ 1358.274372][T16454] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.17080: couldn't read orphan inode 15 (err -117) [ 1358.287535][T16454] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1358.288268][T16463] device ipvlan2 entered promiscuous mode [ 1358.335160][T16463] bridge0: port 3(ipvlan2) entered blocking state [ 1358.363053][T16463] bridge0: port 3(ipvlan2) entered disabled state [ 1358.373324][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1358.714558][ T7448] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1358.894164][ T7444] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1358.908505][ T7444] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1358.915695][ T7448] usb 3-1: Using ep0 maxpacket: 32 [ 1358.923841][ T7448] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1358.950324][ T7444] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1358.966222][ T7448] usb 3-1: config 0 has no interface number 0 [ 1358.982301][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1358.997899][ T7448] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1359.018780][ T7448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.021199][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1359.036396][ T7448] usb 3-1: Product: syz [ 1359.042233][T16501] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[23137] was attempted by ""[16501] [ 1359.057731][ T7448] usb 3-1: Manufacturer: syz [ 1359.078061][ T7448] usb 3-1: SerialNumber: syz [ 1359.105090][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1359.115580][ T7448] usb 3-1: config 0 descriptor?? [ 1359.125645][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1359.140926][ T7448] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1359.161513][ T7444] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1359.194604][T15513] device veth0_vlan entered promiscuous mode [ 1359.202290][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1359.215589][ T4364] usb 5-1: USB disconnect, device number 54 [ 1359.225437][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1359.248796][T15513] device veth1_vlan entered promiscuous mode [ 1359.347500][ T7448] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1359.358324][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1359.363520][ T7444] usb 6-1: Using ep0 maxpacket: 8 [ 1359.385473][ T7444] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1359.391694][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1359.404001][ T7448] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1359.413803][ T7444] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1359.450335][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1359.486224][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1359.506635][ T7444] usb 6-1: string descriptor 0 read error: -22 [ 1359.513263][ T7444] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1359.537792][T15513] device veth0_macvtap entered promiscuous mode [ 1359.575441][ T7444] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1359.586167][T15513] device veth1_macvtap entered promiscuous mode [ 1359.615545][ T7444] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1359.655041][T15513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.671204][ T7444] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1359.684070][T15513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.695577][ T7444] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1359.703663][ T7444] usb 6-1: media controller created [ 1359.725476][T15513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.763467][T15513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.796111][ T7444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1359.805765][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1359.806649][ T4184] usb 3-1: USB disconnect, device number 57 [ 1359.861883][ T4184] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1359.881999][T15513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.887175][ T7444] zl10353_read_register: readreg error (reg=127, ret==0) [ 1359.923975][T15513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.938284][ T4184] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1359.967326][T15513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.979252][ T4184] quatech2 3-1:0.51: device disconnected [ 1359.998381][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1360.039379][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1360.083556][ T7444] usb 6-1: USB disconnect, device number 29 [ 1360.086518][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1360.140185][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1360.142801][T16565] loop6: detected capacity change from 0 to 1024 [ 1360.178941][T15513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.224542][T15513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.243278][T16565] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1360.274506][T15513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.303740][T15513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.334634][T15513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.363638][T15513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.393614][T15513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.440114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1360.486556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1360.528180][T15513] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.590388][T15513] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.600908][T16585] loop2: detected capacity change from 0 to 256 [ 1360.623180][T15513] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.643864][T15513] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.721597][T16585] FAT-fs (loop2): Directory bread(block 64) failed [ 1360.805901][T16585] FAT-fs (loop2): Directory bread(block 65) failed [ 1360.813070][T16585] FAT-fs (loop2): Directory bread(block 66) failed [ 1360.864945][T16585] FAT-fs (loop2): Directory bread(block 67) failed [ 1360.871675][T16585] FAT-fs (loop2): Directory bread(block 68) failed [ 1360.943645][T16585] FAT-fs (loop2): Directory bread(block 69) failed [ 1360.976573][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.994801][T16585] FAT-fs (loop2): Directory bread(block 70) failed [ 1360.999453][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.023765][T16585] FAT-fs (loop2): Directory bread(block 71) failed [ 1361.031324][T16585] FAT-fs (loop2): Directory bread(block 72) failed [ 1361.049185][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1361.113504][T16585] FAT-fs (loop2): Directory bread(block 73) failed [ 1361.156261][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.174499][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.259674][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1361.444883][T16625] loop5: detected capacity change from 0 to 1024 [ 1361.509359][T16625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1361.656830][T16625] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1361.696470][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.702865][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.758755][T16625] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 1361.988144][T22893] EXT4-fs (loop5): unmounting filesystem. [ 1362.271573][T16662] loop5: detected capacity change from 0 to 1024 [ 1362.358452][T16662] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1362.964808][T16690] loop7: detected capacity change from 0 to 2048 [ 1363.013255][T16696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17115'. [ 1363.115312][T16690] loop7: p2 p3 p7 [ 1363.383033][T16716] loop6: detected capacity change from 0 to 1024 [ 1363.482545][T16716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1363.819463][T16740] usb usb9: usbfs: process 16740 (syz.4.17124) did not claim interface 0 before use [ 1363.834996][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1363.925977][ T4432] udevd[4432]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1363.949340][ T4433] udevd[4433]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 1363.958911][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1364.549192][T16769] loop4: detected capacity change from 0 to 8192 [ 1364.622230][T16769] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1364.773664][T16769] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1364.778344][T16793] loop5: detected capacity change from 0 to 164 [ 1364.840095][T16769] REISERFS (device loop4): using ordered data mode [ 1364.867302][T16793] rock: directory entry would overflow storage [ 1364.888400][T16769] reiserfs: using flush barriers [ 1364.920285][T16799] bridge0: port 3(bond0) entered blocking state [ 1364.922341][T16793] rock: sig=0x66, size=4, remaining=3 [ 1364.945219][T16769] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1364.980676][T16799] bridge0: port 3(bond0) entered disabled state [ 1365.019390][T16799] device bond0 entered promiscuous mode [ 1365.031586][T16769] REISERFS (device loop4): checking transaction log (loop4) [ 1365.057144][T16799] device bond_slave_0 entered promiscuous mode [ 1365.079533][T16799] device bond_slave_1 entered promiscuous mode [ 1365.094625][T16769] REISERFS (device loop4): Using tea hash to sort names [ 1365.111432][T16799] bridge0: port 3(bond0) entered blocking state [ 1365.118370][T16799] bridge0: port 3(bond0) entered forwarding state [ 1365.150254][T16769] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1365.392498][T16814] loop6: detected capacity change from 0 to 16 [ 1365.469186][T16814] erofs: (device loop6): mounted with root inode @ nid 36. [ 1365.607142][T16814] syz.6.17141: attempt to access beyond end of device [ 1365.607142][T16814] loop6: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 1365.607344][T16814] syz.6.17141: attempt to access beyond end of device [ 1365.607344][T16814] loop6: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 1365.739946][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17144'. [ 1365.850759][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17145'. [ 1365.850797][T16829] netlink: 192 bytes leftover after parsing attributes in process `syz.7.17145'. [ 1366.199129][T16847] loop4: detected capacity change from 0 to 256 [ 1366.200158][T16847] exfat: Deprecated parameter 'namecase' [ 1366.200203][T16847] exfat: Deprecated parameter 'utf8' [ 1366.258457][T16847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 1366.388146][T16853] loop6: detected capacity change from 0 to 64 [ 1366.985465][T16876] tipc: Invalid UDP bearer configuration [ 1366.985511][T16876] tipc: Enabling of bearer rejected, failed to enable media [ 1367.090535][T16887] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1367.648892][T16882] loop2: detected capacity change from 0 to 16384 [ 1367.657324][T16908] bridge0: port 3(bond0) entered blocking state [ 1367.673719][T16908] bridge0: port 3(bond0) entered disabled state [ 1367.690101][T16911] loop7: detected capacity change from 0 to 256 [ 1367.714888][T16908] device bond0 entered promiscuous mode [ 1367.733964][T16908] device bond_slave_0 entered promiscuous mode [ 1367.760770][T16908] device bond_slave_1 entered promiscuous mode [ 1367.794748][T16908] bridge0: port 3(bond0) entered blocking state [ 1367.801179][T16908] bridge0: port 3(bond0) entered listening state [ 1367.801536][T16911] exfat: Deprecated parameter 'utf8' [ 1367.817691][T16916] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1367.963677][T16911] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1368.015167][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17166'. [ 1368.504498][ T4184] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 1368.555693][ T4184] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 1368.594699][ T4184] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 1368.617513][T16941] loop7: detected capacity change from 0 to 256 [ 1368.699297][T16941] FAT-fs (loop7): Directory bread(block 64) failed [ 1368.753598][T16941] FAT-fs (loop7): Directory bread(block 65) failed [ 1368.771479][ T4184] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 1368.796187][T16941] FAT-fs (loop7): Directory bread(block 66) failed [ 1368.864625][T16941] FAT-fs (loop7): Directory bread(block 67) failed [ 1368.883530][ T7448] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1368.956081][T16941] FAT-fs (loop7): Directory bread(block 68) failed [ 1369.023699][T16941] FAT-fs (loop7): Directory bread(block 69) failed [ 1369.057174][T16950] fido_id[16950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1369.091839][T16941] FAT-fs (loop7): Directory bread(block 70) failed [ 1369.094786][ T7448] usb 5-1: Using ep0 maxpacket: 32 [ 1369.131945][T16941] FAT-fs (loop7): Directory bread(block 71) failed [ 1369.134420][ T7448] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.163849][T16941] FAT-fs (loop7): Directory bread(block 72) failed [ 1369.189895][T16941] FAT-fs (loop7): Directory bread(block 73) failed [ 1369.214506][ T7448] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.237468][ T7448] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.273104][ T7448] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1369.308889][ T7448] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1369.336494][ T7448] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1369.383258][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.432882][ T7448] usb 5-1: config 0 descriptor?? [ 1369.535992][T16980] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17176'. [ 1369.660000][T16985] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1369.908461][ T7448] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1370.037158][ T7448] corsair-cpro: probe of 0003:1B1C:0C10.0007 failed with error -38 [ 1370.180165][ T4184] usb 5-1: USB disconnect, device number 55 [ 1370.371464][T17011] fido_id[17011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1370.396442][T17025] loop7: detected capacity change from 0 to 1024 [ 1370.501754][T17025] hfsplus: bad catalog entry type [ 1371.241489][T17067] loop7: detected capacity change from 0 to 512 [ 1371.375046][T17067] Quota error (device loop7): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1371.426947][T17067] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1371.493694][T17067] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.17193: Failed to acquire dquot type 1 [ 1371.570204][T17067] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.17193: corrupted inode contents [ 1371.627291][T17067] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #16: comm syz.7.17193: mark_inode_dirty error [ 1371.723556][T17067] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.17193: corrupted inode contents [ 1371.793610][T17067] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.17193: mark_inode_dirty error [ 1371.847221][T17067] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.17193: corrupted inode contents [ 1371.943776][T17067] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1371.966856][T17067] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #16: comm syz.7.17193: corrupted inode contents [ 1372.014687][T17067] EXT4-fs error (device loop7): ext4_truncate:4325: inode #16: comm syz.7.17193: mark_inode_dirty error [ 1372.045362][T17067] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1372.072882][T17067] EXT4-fs (loop7): 1 truncate cleaned up [ 1372.080201][T17067] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1372.238747][T15513] EXT4-fs (loop7): unmounting filesystem. [ 1372.853748][T13258] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1372.973316][T17099] loop2: detected capacity change from 0 to 32768 [ 1373.010684][T17099] (syz.2.17202,17099,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1373.010947][T17099] (syz.2.17202,17099,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1373.063639][T13258] usb 7-1: Using ep0 maxpacket: 32 [ 1373.071109][T13258] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1373.071142][T13258] usb 7-1: config 0 has no interface number 0 [ 1373.071188][T13258] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1373.071217][T13258] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.071258][T13258] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1373.071286][T13258] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1373.072247][T17099] JBD2: Ignoring recovery information on journal [ 1373.074461][T13258] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1373.074494][T13258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.074518][T13258] usb 7-1: Product: syz [ 1373.074535][T13258] usb 7-1: Manufacturer: syz [ 1373.074553][T13258] usb 7-1: SerialNumber: syz [ 1373.076572][T13258] usb 7-1: config 0 descriptor?? [ 1373.077247][T17126] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1373.153586][T17099] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1373.333695][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 1373.509479][T13258] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 1373.663284][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17211'. [ 1373.712461][ T7448] usb 7-1: USB disconnect, device number 32 [ 1373.804475][ T7448] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1374.086349][T17184] loop2: detected capacity change from 0 to 4096 [ 1374.101232][T17184] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1374.110598][T17184] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1374.128898][T17184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1374.128946][T17184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1374.129003][T17184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1374.129037][T17184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1374.129090][T17184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1374.129124][T17184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1374.131488][T17184] ntfs: volume version 3.1. [ 1375.020627][T17229] netlink: 'syz.5.17222': attribute type 1 has an invalid length. [ 1375.028855][T13258] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1375.053720][T17229] netlink: 120 bytes leftover after parsing attributes in process `syz.5.17222'. [ 1375.118895][T17236] support for cryptoloop has been removed. Use dm-crypt instead. [ 1375.249995][T13258] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1375.266059][T13258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.302349][T13258] usb 5-1: config 0 has no interface number 0 [ 1375.328171][T13258] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1375.353175][T13258] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1375.370587][T13258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.376552][T17243] netlink: 'syz.6.17226': attribute type 2 has an invalid length. [ 1375.382667][T13258] usb 5-1: Product: syz [ 1375.400257][T13258] usb 5-1: Manufacturer: syz [ 1375.411217][T13258] usb 5-1: SerialNumber: syz [ 1375.428056][T13258] usb 5-1: config 0 descriptor?? [ 1376.220515][T17241] loop5: detected capacity change from 0 to 40427 [ 1376.244281][T17241] F2FS-fs (loop5): invalid crc value [ 1376.278448][T17241] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1376.408738][T17241] F2FS-fs (loop5): Start checkpoint disabled! [ 1376.428858][T17241] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1376.443734][ T4437] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1376.635478][ T4437] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1376.682926][ T4437] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1376.731314][ T4437] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.775294][ T4437] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1376.804283][ T4437] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1376.821799][ T4437] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1376.844196][ T4437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.883154][ T4437] usb 3-1: config 0 descriptor?? [ 1377.151765][T17313] loop6: detected capacity change from 0 to 256 [ 1377.235428][T17313] FAT-fs (loop6): Directory bread(block 64) failed [ 1377.254401][T17313] FAT-fs (loop6): Directory bread(block 65) failed [ 1377.261654][T17313] FAT-fs (loop6): Directory bread(block 66) failed [ 1377.327631][ T4437] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 1377.343647][T17313] FAT-fs (loop6): Directory bread(block 67) failed [ 1377.384379][T17313] FAT-fs (loop6): Directory bread(block 68) failed [ 1377.416147][T17313] FAT-fs (loop6): Directory bread(block 69) failed [ 1377.459608][T17313] FAT-fs (loop6): Directory bread(block 70) failed [ 1377.478914][T17313] FAT-fs (loop6): Directory bread(block 71) failed [ 1377.504414][T17313] FAT-fs (loop6): Directory bread(block 72) failed [ 1377.539978][T17313] FAT-fs (loop6): Directory bread(block 73) failed [ 1377.597336][ T4437] usb 3-1: USB disconnect, device number 58 [ 1377.827480][T13258] usb 5-1: USB disconnect, device number 56 [ 1377.870732][T17328] fido_id[17328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1378.889920][T17387] netlink: 'syz.2.17250': attribute type 1 has an invalid length. [ 1378.913481][T17387] nbd: error processing sock list [ 1379.191508][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17252'. [ 1379.228225][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17252'. [ 1379.253939][T17398] netlink: 'syz.4.17252': attribute type 12 has an invalid length. [ 1379.617803][T17414] loop2: detected capacity change from 0 to 512 [ 1379.707613][T17414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1379.805349][T17414] EXT4-fs (loop2): 1 truncate cleaned up [ 1379.843580][T17414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1379.927391][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1379.927411][ T26] audit: type=1326 audit(1379.882:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17422 comm="syz.5.17258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595c59cdd9 code=0x0 [ 1380.118758][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1380.954526][T17462] loop7: detected capacity change from 0 to 8192 [ 1380.997426][T17462] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1381.023632][T17462] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1381.024360][T17462] REISERFS (device loop7): using ordered data mode [ 1381.024374][T17462] reiserfs: using flush barriers [ 1381.059417][T17462] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1381.059972][T17462] REISERFS (device loop7): checking transaction log (loop7) [ 1381.074551][T17462] REISERFS (device loop7): Using r5 hash to sort names [ 1381.074951][T17462] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1381.075023][T17462] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1381.578528][T17488] loop4: detected capacity change from 0 to 2048 [ 1381.608517][T17488] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1381.608564][T17488] NILFS (loop4): mounting unchecked fs [ 1381.626790][T17488] NILFS (loop4): recovery complete [ 1381.659236][T17493] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.678928][T17451] loop6: detected capacity change from 0 to 40427 [ 1381.691071][T17451] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1381.691102][T17451] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1381.700604][T17451] F2FS-fs (loop6): invalid crc value [ 1381.712966][T17451] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1382.063837][T17451] F2FS-fs (loop6): Start checkpoint disabled! [ 1382.096735][T17473] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1382.225345][T17451] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1382.232926][T17451] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1382.585260][T17518] loop4: detected capacity change from 0 to 2048 [ 1382.707776][T17518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1382.818489][ C1] bridge0: port 3(bond0) entered learning state [ 1383.035054][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1383.317293][T17512] loop7: detected capacity change from 0 to 32768 [ 1383.445319][T17512] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1383.927214][T15513] ocfs2: Unmounting device (7,7) on (node local) [ 1383.992563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.456113][T17577] loop6: detected capacity change from 0 to 4096 [ 1384.533060][T17577] ntfs: (device loop6): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1384.581522][T17577] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1384.643491][T17577] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1384.731533][T17577] ntfs: volume version 3.1. [ 1384.773238][T17528] loop5: detected capacity change from 0 to 40427 [ 1384.826024][T17528] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 1384.833044][T17528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1384.923594][T17528] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1385.126580][T17528] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1385.157022][T17528] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1385.168381][ T56] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1385.224424][T23137] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1385.252086][T17564] loop4: detected capacity change from 0 to 32768 [ 1385.310546][ T26] audit: type=1800 audit(1385.262:761): pid=17528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.17280" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1385.320348][T17567] loop2: detected capacity change from 0 to 32768 [ 1385.375716][T17567] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.17286 (17567) [ 1385.446061][T17567] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1385.475450][T22893] syz-executor: attempt to access beyond end of device [ 1385.475450][T22893] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1385.512342][T17567] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1385.523075][T17567] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1385.534073][T17567] BTRFS info (device loop2): use zstd compression, level 3 [ 1385.541775][T17567] BTRFS info (device loop2): using free space tree [ 1385.551140][T17564] XFS (loop4): Mounting V5 Filesystem [ 1385.660287][T17564] XFS (loop4): Ending clean mount [ 1386.033321][T17567] BTRFS info (device loop2): enabling ssd optimizations [ 1386.170465][T17643] loop6: detected capacity change from 0 to 2048 [ 1386.188948][ T4279] XFS (loop4): Unmounting Filesystem [ 1386.195318][T17643] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1386.246936][T17643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1386.604690][ T4273] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1386.982501][ T4392] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (4392) [ 1387.159720][T17664] loop6: detected capacity change from 0 to 2048 [ 1387.216486][T17608] loop7: detected capacity change from 0 to 32768 [ 1387.227259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.264637][T17664] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1387.311530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.403584][T17673] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1387.525155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.736089][T17688] loop5: detected capacity change from 0 to 2048 [ 1387.811480][T17688] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1387.890735][T17688] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1387.907966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.920583][T17688] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1387.973899][T17688] UDF-fs: Scanning with blocksize 512 failed [ 1388.051521][T17688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.233656][T17698] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1388.237418][T17712] loop6: detected capacity change from 0 to 128 [ 1388.430832][T17712] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1388.435627][T17698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1388.454226][T17698] usb 3-1: not running at top speed; connect to a high speed hub [ 1388.464509][T17698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.476513][T17698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1388.487323][T17698] usb 3-1: config 1 has no interface number 0 [ 1388.497645][T17698] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1388.527777][T17698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.550527][T17698] usb 3-1: Product: syz [ 1388.559991][T17698] usb 3-1: Manufacturer: syz [ 1388.583314][T17698] usb 3-1: SerialNumber: syz [ 1388.724751][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1388.830101][T17736] loop7: detected capacity change from 0 to 64 [ 1388.919537][T17726] loop4: detected capacity change from 0 to 4096 [ 1388.967863][T17742] loop6: detected capacity change from 0 to 64 [ 1389.043125][T17742] hfs: unable to locate alternate MDB [ 1389.064182][T17726] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1389.083926][T17742] hfs: continuing without an alternate MDB [ 1389.222684][T17726] ntfs3: loop4: failed to convert "0080" to maccenteuro [ 1389.235410][T17698] us122l: couldn't allocate write buffer [ 1389.241495][T17698] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 1389.287001][T17726] ntfs3: loop4: failed to convert name for inode 1e. [ 1389.304031][T17698] usb 3-1: USB disconnect, device number 59 [ 1390.180680][T17793] loop5: detected capacity change from 0 to 512 [ 1390.208734][T17795] loop7: detected capacity change from 0 to 64 [ 1390.263681][T17793] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1390.348337][T17793] EXT4-fs (loop5): 1 truncate cleaned up [ 1390.402061][T17793] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1390.684287][T22893] EXT4-fs (loop5): unmounting filesystem. [ 1390.733991][ T4364] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1390.778700][T17827] loop7: detected capacity change from 0 to 1024 [ 1390.934295][ T4364] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1390.970584][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.000685][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.064078][ T9] hfsplus: b-tree write err: -5, ino 25 [ 1391.070123][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1391.076487][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.121813][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.133726][ T9] hfsplus: b-tree write err: -5, ino 2 [ 1391.156879][ T9] hfsplus: b-tree write err: -5, ino 26 [ 1391.185895][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.238436][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.275032][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.326758][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.384036][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.445601][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.461975][T17852] tipc: Started in network mode [ 1391.487951][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.503641][T17852] tipc: Node identity 124b18a67eab, cluster identity 4711 [ 1391.543708][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.556805][T17852] tipc: Enabled bearer , priority 10 [ 1391.560972][T17856] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1391.564221][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.640476][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.724322][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.731818][T17856] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1391.755835][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.803806][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.839814][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.880360][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1391.933678][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1391.973468][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1392.006650][ T4364] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.036326][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.062477][T17826] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1392.073964][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1392.076350][ T4364] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1392.130679][ T4364] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1392.159669][ T4364] usb 3-1: Product: syz [ 1392.185963][ T4364] usb 3-1: Manufacturer: syz [ 1392.190735][ T4364] usb 3-1: SerialNumber: syz [ 1392.241797][ T4364] usb 3-1: config 0 descriptor?? [ 1392.294272][ T4364] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1392.352090][T17879] sp0: Synchronizing with TNC [ 1392.435481][ T4432] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1392.511114][T16476] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1392.646943][ T4364] tipc: Node number set to 1826625702 [ 1392.658138][T17901] set_capacity_and_notify: 3 callbacks suppressed [ 1392.658156][T17901] loop4: detected capacity change from 0 to 512 [ 1392.687585][T13258] usb 3-1: USB disconnect, device number 60 [ 1392.703588][T16476] usb 7-1: Using ep0 maxpacket: 16 [ 1392.729466][T17901] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1392.738738][T16476] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.751547][T13258] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1392.794434][T16476] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.798685][T17901] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1392.811096][T16476] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1392.833439][T16476] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1392.851997][T16476] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.868165][T16476] usb 7-1: config 0 descriptor?? [ 1392.877998][T17901] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.17337: Block bitmap for bg 0 marked uninitialized [ 1392.901502][T17917] binder: BINDER_SET_CONTEXT_MGR already set [ 1392.912057][T17917] binder: 17916:17917 ioctl 40046207 0 returned -16 [ 1392.973969][T17901] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1393.005152][T17901] EXT4-fs (loop4): 1 orphan inode deleted [ 1393.011781][T17901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1393.165505][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1393.304105][T16476] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1393.311952][T16476] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1393.333870][T16476] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1393.364508][T16476] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0009/input/input66 [ 1393.424573][T16476] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1393.575137][T17944] loop4: detected capacity change from 0 to 64 [ 1393.588475][T16476] usb 7-1: USB disconnect, device number 33 [ 1393.829935][T17942] fido_id[17942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1394.362196][T17980] loop4: detected capacity change from 0 to 1764 [ 1394.370763][T17983] netlink: 104 bytes leftover after parsing attributes in process `syz.5.17346'. [ 1394.563645][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17349'. [ 1394.975157][T18016] loop7: detected capacity change from 0 to 256 [ 1394.982673][T18016] exfat: Deprecated parameter 'utf8' [ 1395.070094][T17961] loop2: detected capacity change from 0 to 32768 [ 1395.075505][T18016] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1395.122544][T17961] [ 1395.122544][T17961] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1395.122544][T17961] [ 1395.239220][T17961] ERROR: (device loop2): diWrite: ixpxd invalid [ 1395.239220][T17961] [ 1395.298144][T18010] loop6: detected capacity change from 0 to 4096 [ 1395.345756][T18010] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1395.374772][T18010] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1395.433612][T17961] ERROR: (device loop2): txCommit: [ 1395.433612][T17961] [ 1395.507981][T18026] jfs_unlink: dtDelete returned -2 [ 1395.593794][T18010] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1395.593835][T18010] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1395.593897][T18010] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1395.669548][T18010] ntfs: volume version 3.1. [ 1395.691402][ T4273] [ 1395.691402][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1395.691402][ T4273] [ 1395.706040][ T4273] [ 1395.706040][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1395.706040][ T4273] [ 1395.871820][T18010] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 1395.871968][T18010] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 1396.596420][T18064] loop6: detected capacity change from 0 to 512 [ 1396.640412][T18064] EXT4-fs: Ignoring removed oldalloc option [ 1396.673918][T18064] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1396.785735][T18064] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1396.839696][T18064] EXT4-fs warning (device loop6): verify_group_input:169: Last group not full [ 1396.945962][T18032] loop4: detected capacity change from 0 to 32768 [ 1397.053264][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1397.070364][T18081] sock: sock_set_timeout: `syz.5.17368' (pid 18081) tries to set negative timeout [ 1397.178360][T18032] MetaData crosses page boundary!! [ 1397.215295][T18032] lblock = 6161616161, size = 370544640 [ 1397.239062][T18032] CPU: 0 PID: 18032 Comm: syz.4.17358 Not tainted syzkaller #0 [ 1397.247138][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1397.257867][T18032] Call Trace: [ 1397.261310][T18032] [ 1397.264701][T18032] dump_stack_lvl+0x188/0x24e [ 1397.269578][T18032] ? __wake_up_bit+0x210/0x210 [ 1397.274510][T18032] ? show_regs_print_info+0x12/0x12 [ 1397.280498][T18032] ? load_image+0x400/0x400 [ 1397.285090][T18032] __get_metapage+0xaa8/0xfa0 [ 1397.290419][T18032] dtSearch+0x5d5/0x2050 [ 1397.294775][T18032] jfs_symlink+0x851/0xfb0 [ 1397.299552][T18032] ? jfs_unlink+0xa00/0xa00 [ 1397.304191][T18032] ? make_kgid+0x660/0x660 [ 1397.309002][T18032] ? apparmor_path_symlink+0x1ac/0x230 [ 1397.314771][T18032] ? lookup_one_qstr_excl+0x11c/0x240 [ 1397.320490][T18032] ? generic_permission+0x230/0x510 [ 1397.326121][T18032] ? inode_permission+0xef/0x480 [ 1397.331211][T18032] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1397.336932][T18032] ? security_inode_symlink+0xb2/0x100 [ 1397.342830][T18032] vfs_symlink+0x247/0x3d0 [ 1397.347904][T18032] do_symlinkat+0x1b6/0x400 [ 1397.353259][T18032] ? vfs_symlink+0x3d0/0x3d0 [ 1397.358079][T18032] ? getname_flags+0x206/0x500 [ 1397.363868][T18032] __x64_sys_symlink+0x7a/0x90 [ 1397.368993][T18032] do_syscall_64+0x4c/0xa0 [ 1397.374354][T18032] ? clear_bhb_loop+0x60/0xb0 [ 1397.379233][T18032] ? clear_bhb_loop+0x60/0xb0 [ 1397.383978][T18032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.390096][T18032] RIP: 0033:0x7f2b5859cdd9 [ 1397.394550][T18032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.415076][T18032] RSP: 002b:00007f2b5939a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1397.423784][T18032] RAX: ffffffffffffffda RBX: 00007f2b58815fa0 RCX: 00007f2b5859cdd9 [ 1397.431803][T18032] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 1397.440366][T18032] RBP: 00007f2b58632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1397.449019][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.457982][T18032] R13: 00007f2b58816038 R14: 00007f2b58815fa0 R15: 00007ffd016ff2f8 [ 1397.466449][T18032] [ 1397.551882][T18046] loop7: detected capacity change from 0 to 32768 [ 1397.700311][T18046] JBD2: Ignoring recovery information on journal [ 1397.718802][T18032] bread failed! [ 1398.016005][T18046] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1398.173580][ C1] bridge0: port 3(bond0) entered forwarding state [ 1398.180277][ C1] bridge0: topology change detected, propagating [ 1398.314226][T15513] ocfs2: Unmounting device (7,7) on (node local) [ 1398.451274][T18126] loop4: detected capacity change from 0 to 4096 [ 1398.527511][T18126] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1398.582467][T18126] NILFS (loop4): trying rollback from an earlier position [ 1398.651629][T18135] devpts: called with bogus options [ 1398.681525][T18126] NILFS (loop4): recovery complete [ 1398.724051][T18138] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1399.523471][T18163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17390'. [ 1399.775751][T18123] loop2: detected capacity change from 0 to 32768 [ 1399.945379][T18123] XFS (loop2): Mounting V5 Filesystem [ 1400.123581][T18123] XFS (loop2): Ending clean mount [ 1400.171981][T18123] XFS (loop2): Quotacheck needed: Please wait. [ 1400.338627][T18123] XFS (loop2): Quotacheck: Done. [ 1400.344673][T18206] loop4: detected capacity change from 0 to 256 [ 1400.461256][T18206] FAT-fs (loop4): Directory bread(block 64) failed [ 1400.494092][T18206] FAT-fs (loop4): Directory bread(block 65) failed [ 1400.510122][T18206] FAT-fs (loop4): Directory bread(block 66) failed [ 1400.530349][T18206] FAT-fs (loop4): Directory bread(block 67) failed [ 1400.552189][T18206] FAT-fs (loop4): Directory bread(block 68) failed [ 1400.564898][T18206] FAT-fs (loop4): Directory bread(block 69) failed [ 1400.589703][ T4273] XFS (loop2): Unmounting Filesystem [ 1400.602348][T18206] FAT-fs (loop4): Directory bread(block 70) failed [ 1400.640485][T18206] FAT-fs (loop4): Directory bread(block 71) failed [ 1400.669938][T18206] FAT-fs (loop4): Directory bread(block 72) failed [ 1400.693491][T18206] FAT-fs (loop4): Directory bread(block 73) failed [ 1400.750130][T18160] loop7: detected capacity change from 0 to 32768 [ 1400.841509][T18160] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 1401.201404][ T4433] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 1401.492068][T18247] loop4: detected capacity change from 0 to 256 [ 1401.541613][T18247] exfat: Deprecated parameter 'utf8' [ 1401.590977][T18247] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1402.313765][T17698] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1402.349562][T18287] loop6: detected capacity change from 0 to 64 [ 1402.529045][T17698] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1402.554641][T17698] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1402.601172][T17698] usb 5-1: config 0 has no interface number 0 [ 1402.629700][T17698] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1402.664256][T17698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.712566][T17698] usb 5-1: Product: syz [ 1402.722542][T17698] usb 5-1: Manufacturer: syz [ 1402.735673][T23137] hfs: node 4:3 still has 1 user(s)! [ 1402.772232][T17698] usb 5-1: SerialNumber: syz [ 1402.810091][T17698] usb 5-1: config 0 descriptor?? [ 1403.076578][T18316] loop5: detected capacity change from 0 to 64 [ 1403.274576][T17698] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 1403.281024][T17698] usb 5-1: No valid video chain found. [ 1403.495946][T13258] usb 5-1: USB disconnect, device number 57 [ 1403.663189][ T26] audit: type=1326 audit(1403.612:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.6.17431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcc939cdd9 code=0x0 [ 1403.737713][T18284] loop7: detected capacity change from 0 to 40427 [ 1403.779846][T18284] F2FS-fs (loop7): invalid crc value [ 1403.819533][T18284] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1403.921024][T18284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1404.206736][T15513] syz-executor: attempt to access beyond end of device [ 1404.206736][T15513] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1404.711610][T18353] loop5: detected capacity change from 0 to 32768 [ 1404.760747][T18353] (syz.5.17433,18353,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1404.809630][T18353] (syz.5.17433,18353,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1404.870367][T18393] loop2: detected capacity change from 0 to 256 [ 1404.896562][T18353] (syz.5.17433,18353,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1404.927514][T18353] JBD2: Ignoring recovery information on journal [ 1404.987740][T18399] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1405.011938][T18353] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1405.155636][T18353] (syz.5.17433,18353,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 1405.241069][T18353] (syz.5.17433,18353,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 1405.320433][T18353] (syz.5.17433,18353,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1405.359197][T18353] (syz.5.17433,18353,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1405.403494][T18353] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 5 [ 1405.472628][T18353] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1405.523453][T18353] (syz.5.17433,18353,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1405.541880][T18353] (syz.5.17433,18353,0):ocfs2_mknod:314 ERROR: status = -5 [ 1405.571654][T18353] (syz.5.17433,18353,0):ocfs2_mknod:502 ERROR: status = -5 [ 1405.604130][T18353] (syz.5.17433,18353,0):ocfs2_mkdir:659 ERROR: status = -5 [ 1405.829351][T22893] ocfs2: Unmounting device (7,5) on (node local) [ 1406.002580][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17446'. [ 1406.352364][T18402] loop2: detected capacity change from 0 to 32768 [ 1406.422319][T18402] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.17441 (18402) [ 1406.485721][T18402] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1406.523736][T18402] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1406.564332][T18402] BTRFS info (device loop2): enabling auto defrag [ 1406.571141][T18402] BTRFS info (device loop2): force clearing of disk cache [ 1406.579421][T18461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17451'. [ 1406.603774][T18408] loop7: detected capacity change from 0 to 32768 [ 1406.633550][T18402] BTRFS info (device loop2): ignoring data csums [ 1406.640016][T18402] BTRFS info (device loop2): turning on async discard [ 1406.663619][T18402] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1406.689169][T18402] BTRFS info (device loop2): turning off async discard [ 1406.710952][T18408] XFS (loop7): Mounting V5 Filesystem [ 1406.741062][T18402] BTRFS info (device loop2): disabling free space tree [ 1406.787805][T18408] XFS (loop7): Ending clean mount [ 1407.121371][T18498] loop5: detected capacity change from 0 to 764 [ 1407.137719][T15513] XFS (loop7): Unmounting Filesystem [ 1407.185497][T18498] rock: directory entry would overflow storage [ 1407.246009][T18498] rock: sig=0x4654, size=5, remaining=4 [ 1407.285146][ T4273] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1407.773652][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1407.866929][T18448] loop6: detected capacity change from 0 to 32768 [ 1408.374318][T18528] loop6: detected capacity change from 0 to 512 [ 1408.423884][ T125] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1408.479738][T18528] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1408.625799][ T125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.633736][T18537] mkiss: ax0: crc mode is auto. [ 1408.646127][ T125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1408.681573][ T125] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1408.711717][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1408.731445][ T125] usb 5-1: SerialNumber: syz [ 1408.921500][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1408.986126][ T125] usb 5-1: 0:2 : does not exist [ 1409.041849][ T125] usb 5-1: USB disconnect, device number 58 [ 1409.152798][T18573] loop5: detected capacity change from 0 to 1024 [ 1409.241234][T18573] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1409.314530][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1409.341418][ T26] audit: type=1800 audit(1409.292:763): pid=18573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.17465" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1409.602575][T22893] EXT4-fs (loop5): unmounting filesystem. [ 1409.674898][T18598] loop2: detected capacity change from 0 to 1024 [ 1409.860661][T18592] loop7: detected capacity change from 0 to 32768 [ 1410.040936][T18621] netlink: 'syz.5.17475': attribute type 29 has an invalid length. [ 1410.051186][T18621] netlink: 'syz.5.17475': attribute type 29 has an invalid length. [ 1410.065505][T18621] netlink: 'syz.5.17475': attribute type 29 has an invalid length. [ 1410.105967][T18592] XFS (loop7): Mounting V5 Filesystem [ 1410.201486][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17476'. [ 1410.228146][T18592] XFS (loop7): Ending clean mount [ 1410.264683][T18637] loop4: detected capacity change from 0 to 128 [ 1410.294432][T18592] XFS (loop7): Quotacheck needed: Please wait. [ 1410.562803][T18592] XFS (loop7): Quotacheck: Done. [ 1410.807869][T15513] XFS (loop7): Unmounting Filesystem [ 1411.659141][T18700] loop2: detected capacity change from 0 to 512 [ 1411.765492][T18700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1411.815535][T18707] loop6: detected capacity change from 0 to 512 [ 1411.872168][T18707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1411.954546][T18707] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.17494: iget: bad i_size value: 38620345925642 [ 1412.023214][T18719] loop7: detected capacity change from 0 to 164 [ 1412.063903][T18720] loop4: detected capacity change from 0 to 256 [ 1412.114257][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1412.129994][T18707] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.17494: couldn't read orphan inode 15 (err -117) [ 1412.154642][T18707] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1412.165244][T18720] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1412.230312][ T26] audit: type=1800 audit(1412.182:764): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.17494" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 1412.471151][T23137] EXT4-fs (loop6): unmounting filesystem. [ 1412.921317][T18758] loop6: detected capacity change from 0 to 164 [ 1412.923015][T18750] loop7: detected capacity change from 0 to 2048 [ 1413.000549][T18750] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1413.126412][T18750] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 1413.195359][T18750] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1413.244824][T18750] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.17502: Failed to acquire dquot type 0 [ 1413.508478][T15513] EXT4-fs (loop7): unmounting filesystem. [ 1413.650567][T18784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1413.813575][T18784] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17510: bg 0: block 345: padding at end of block bitmap is not set [ 1414.126244][T18784] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1414.190308][T18807] set_capacity_and_notify: 2 callbacks suppressed [ 1414.190336][T18807] loop6: detected capacity change from 0 to 1024 [ 1414.226640][T18817] netlink: 616 bytes leftover after parsing attributes in process `syz.4.17516'. [ 1414.319184][T18807] hfsplus: bad catalog entry type [ 1414.328588][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1414.461004][T19364] hfsplus: b-tree write err: -5, ino 25 [ 1414.484752][T19364] hfsplus: b-tree write err: -5, ino 4 [ 1414.522804][T19364] hfsplus: b-tree write err: -5, ino 2 [ 1414.860408][ T4289] Bluetooth: hci4: link tx timeout [ 1414.866799][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1415.270612][T18867] loop6: detected capacity change from 0 to 256 [ 1415.342013][T18867] exfat: Deprecated parameter 'utf8' [ 1415.394332][T18867] exfat: Deprecated parameter 'namecase' [ 1415.528176][T18867] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1415.882671][T18891] loop2: detected capacity change from 0 to 1024 [ 1416.082929][T18899] hfsplus: request for non-existent node 262144 in B*Tree [ 1416.119010][T18899] hfsplus: request for non-existent node 262144 in B*Tree [ 1416.205622][T18901] loop7: detected capacity change from 0 to 1024 [ 1416.221257][T18856] loop4: detected capacity change from 0 to 32768 [ 1416.288748][ T26] audit: type=1326 audit(1416.242:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1416.393473][ T26] audit: type=1326 audit(1416.242:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1416.423317][T18901] hfsplus: request for non-existent node 17039360 in B*Tree [ 1416.444823][T18901] hfsplus: request for non-existent node 17039360 in B*Tree [ 1416.531546][ T26] audit: type=1326 audit(1416.242:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1416.578389][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17538'. [ 1416.610857][ T26] audit: type=1326 audit(1416.242:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1416.675153][ T9] hfsplus: b-tree write err: -5, ino 8 [ 1416.753680][ T26] audit: type=1326 audit(1416.242:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1416.893583][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 1416.920453][ T26] audit: type=1326 audit(1416.272:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1417.080719][ T26] audit: type=1326 audit(1416.272:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1417.189037][ T26] audit: type=1326 audit(1416.272:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.6.17537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1417.600401][T18962] loop4: detected capacity change from 0 to 1024 [ 1417.726588][T18970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1417.985613][T18974] [U]  [ 1418.105229][T18985] netlink: 92 bytes leftover after parsing attributes in process `syz.4.17558'. [ 1418.114352][T18986] loop5: detected capacity change from 0 to 64 [ 1418.498340][T19006] UBIFS error (pid: 19006): cannot open "./file0", error -22 [ 1418.675111][T19015] option changes via remount are deprecated (pid=19014 comm=syz.2.17566) [ 1418.996927][T19035] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1419.051212][T19041] netlink: 'syz.7.17569': attribute type 10 has an invalid length. [ 1419.103038][T19036] loop2: detected capacity change from 0 to 2048 [ 1419.165304][T19041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.215334][T19041] device batadv0 entered promiscuous mode [ 1419.234433][T19036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1419.247031][T19052] loop6: detected capacity change from 0 to 64 [ 1419.253024][T19364] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1419.264557][T19364] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1419.297470][T19041] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1419.385218][T19052] syz.6.17573: attempt to access beyond end of device [ 1419.385218][T19052] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1419.413891][T19036] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.17570: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1419.472916][T19052] Buffer I/O error on dev loop6, logical block 512, async page read [ 1419.545982][T19052] syz.6.17573: attempt to access beyond end of device [ 1419.545982][T19052] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1419.628115][T19052] Buffer I/O error on dev loop6, logical block 56576, async page read [ 1419.674469][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1419.683842][T19059] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in; [ 1419.683842][T19059] program syz.7.17575 not setting count and/or reply_len properly [ 1420.149420][T19080] loop7: detected capacity change from 0 to 512 [ 1420.173067][T19080] EXT4-fs: Ignoring removed bh option [ 1420.202569][T19080] EXT4-fs: Ignoring removed mblk_io_submit option [ 1420.230032][T19080] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.17579: corrupted in-inode xattr [ 1420.254137][T19080] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.17579: couldn't read orphan inode 15 (err -117) [ 1420.303032][T19080] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1420.358086][T19080] EXT4-fs: old and new quota format mixing [ 1420.379981][T19043] loop4: detected capacity change from 0 to 32768 [ 1420.415287][T19043] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.17572 (19043) [ 1420.445326][T15513] EXT4-fs (loop7): unmounting filesystem. [ 1420.463743][ T6775] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1420.523916][T19043] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1420.566245][T19043] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1420.612508][T19043] BTRFS info (device loop4): using free space tree [ 1420.681108][ T26] audit: type=1326 audit(1420.632:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.6.17583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1420.705643][ T6775] usb 3-1: Using ep0 maxpacket: 16 [ 1420.710234][T19099] loop7: detected capacity change from 0 to 4096 [ 1420.712770][ T6775] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.726408][T19099] NILFS: invalid option "cp=0x00": invalid checkpoint number 0 [ 1420.776097][T19099] overlayfs: unrecognized mount option "\strict" or missing value [ 1420.823105][ T6775] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.834031][ T6775] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.840917][ T6775] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1420.850952][ T6775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.861364][ T6775] usb 3-1: config 0 descriptor?? [ 1420.918113][ T26] audit: type=1326 audit(1420.632:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.6.17583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc939cdd9 code=0x7ffc0000 [ 1421.120389][T19043] BTRFS info (device loop4): enabling ssd optimizations [ 1421.315888][ T6775] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 1421.355271][ T6775] nzxt-smart2 0003:1E71:2009.000A: item fetching failed at offset 4/5 [ 1421.361424][ T4279] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1421.392227][ T6775] nzxt-smart2: probe of 0003:1E71:2009.000A failed with error -22 [ 1421.585994][ T6775] usb 3-1: USB disconnect, device number 61 [ 1422.416492][T19179] sp0: Synchronizing with TNC [ 1423.136999][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.143820][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.300137][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1423.300155][ T26] audit: type=1326 audit(1423.252:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.404274][T19241] CUSE: unknown device info "" [ 1423.416277][T19241] CUSE: unknown device info "" [ 1423.431439][T19241] CUSE: unknown device info "ÿ" [ 1423.437225][T19241] CUSE: unknown device info "" [ 1423.470910][ T26] audit: type=1326 audit(1423.252:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.477272][T19241] CUSE: unknown device info "ÿ" [ 1423.531004][T19241] CUSE: unknown device info "" [ 1423.556059][ T26] audit: type=1326 audit(1423.252:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.573694][T19241] CUSE: unknown device info "" [ 1423.621618][T19241] CUSE: zero length info key specified [ 1423.693440][ T26] audit: type=1326 audit(1423.252:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.754357][ T26] audit: type=1326 audit(1423.252:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.795430][ T26] audit: type=1326 audit(1423.252:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.903837][ T26] audit: type=1326 audit(1423.252:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1423.999385][T19261] loop2: detected capacity change from 0 to 64 [ 1424.000566][ T26] audit: type=1326 audit(1423.252:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1424.072347][ T26] audit: type=1326 audit(1423.252:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1424.218067][ T26] audit: type=1326 audit(1423.252:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.7.17607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116159cdd9 code=0x7ff00000 [ 1424.380698][T19264] loop4: detected capacity change from 0 to 8192 [ 1424.437309][T19273] loop2: detected capacity change from 0 to 256 [ 1424.571009][T19273] FAT-fs (loop2): Directory bread(block 64) failed [ 1424.619415][T19273] FAT-fs (loop2): Directory bread(block 65) failed [ 1424.669896][T19273] FAT-fs (loop2): Directory bread(block 66) failed [ 1424.719851][T19273] FAT-fs (loop2): Directory bread(block 67) failed [ 1424.753620][T19273] FAT-fs (loop2): Directory bread(block 68) failed [ 1424.760441][T19273] FAT-fs (loop2): Directory bread(block 69) failed [ 1424.824920][T19273] FAT-fs (loop2): Directory bread(block 70) failed [ 1424.831643][T19273] FAT-fs (loop2): Directory bread(block 71) failed [ 1424.893993][T19273] FAT-fs (loop2): Directory bread(block 72) failed [ 1424.900601][T19273] FAT-fs (loop2): Directory bread(block 73) failed [ 1425.365484][T19303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17620'. [ 1425.608487][T19307] loop7: detected capacity change from 0 to 8192 [ 1425.681068][T19307] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1425.714978][T19307] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1425.774933][T19307] REISERFS (device loop7): using ordered data mode [ 1425.781704][T19307] reiserfs: using flush barriers [ 1425.817490][T19307] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1425.874257][T19307] REISERFS (device loop7): checking transaction log (loop7) [ 1425.904205][T19307] REISERFS (device loop7): Using r5 hash to sort names [ 1425.911608][T19307] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1426.692937][T19362] [ 1426.695410][T19362] ====================================================== [ 1426.702479][T19362] WARNING: possible circular locking dependency detected [ 1426.709628][T19362] syzkaller #0 Not tainted [ 1426.714097][T19362] ------------------------------------------------------ [ 1426.720152][T19318] loop4: detected capacity change from 0 to 32768 [ 1426.721214][T19362] syz.6.17632/19362 is trying to acquire lock: [ 1426.721228][T19362] ffffffff97023038 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1426.744258][T19362] [ 1426.744258][T19362] but task is already holding lock: [ 1426.751666][T19362] ffff88802ef99cb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1426.761999][T19362] [ 1426.761999][T19362] which lock already depends on the new lock. [ 1426.761999][T19362] [ 1426.772515][T19362] [ 1426.772515][T19362] the existing dependency chain (in reverse order) is: [ 1426.775310][T17698] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1426.781636][T19362] [ 1426.781636][T19362] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1426.781679][T19362] __mutex_lock+0x12d/0xaf0 [ 1426.781710][T19362] nf_tables_dumpreset_obj+0x6e/0x90 [ 1426.781735][T19362] netlink_dump+0x6a3/0xd00 [ 1426.781760][T19362] __netlink_dump_start+0x537/0x6f0 [ 1426.781785][T19362] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1426.781809][T19362] nf_tables_getobj_reset+0x1cb/0x610 [ 1426.781832][T19362] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 1426.781857][T19362] netlink_rcv_skb+0x1fb/0x450 [ 1426.781883][T19362] nfnetlink_rcv+0x2b0/0x2480 [ 1426.781906][T19362] netlink_unicast+0x74d/0x8d0 [ 1426.781931][T19362] netlink_sendmsg+0x8ad/0xbd0 [ 1426.781957][T19362] ____sys_sendmsg+0x5be/0x970 [ 1426.867061][T19362] ___sys_sendmsg+0x2a2/0x360 [ 1426.872679][T19362] __se_sys_sendmsg+0x1bb/0x2a0 [ 1426.878125][T19362] do_syscall_64+0x4c/0xa0 [ 1426.883201][T19362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1426.889759][T19362] [ 1426.889759][T19362] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1426.898072][T19362] __mutex_lock+0x12d/0xaf0 [ 1426.903249][T19362] __netlink_dump_start+0x11f/0x6f0 [ 1426.909057][T19362] ip_set_dump+0x152/0x1e0 [ 1426.914158][T19362] nfnetlink_rcv_msg+0xbec/0x12b0 [ 1426.920124][T19362] netlink_rcv_skb+0x1fb/0x450 [ 1426.925919][T19362] nfnetlink_rcv+0x2b0/0x2480 [ 1426.932079][T19362] netlink_unicast+0x74d/0x8d0 [ 1426.937781][T19362] netlink_sendmsg+0x8ad/0xbd0 [ 1426.944134][T19362] ____sys_sendmsg+0x5be/0x970 [ 1426.949964][T19362] ___sys_sendmsg+0x2a2/0x360 [ 1426.955243][T19362] __se_sys_sendmsg+0x1bb/0x2a0 [ 1426.961127][T19362] do_syscall_64+0x4c/0xa0 [ 1426.966580][T19362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1426.973239][T19362] [ 1426.973239][T19362] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1426.981494][T19362] __lock_acquire+0x2d07/0x7d10 [ 1426.986929][T19362] lock_acquire+0x1bb/0x4a0 [ 1426.992023][T19362] __mutex_lock+0x12d/0xaf0 [ 1426.997269][T19362] ip_set_nfnl_get_byindex+0x63/0x230 [ 1427.003571][T19362] set_match_v1_checkentry+0x6d/0x220 [ 1427.003723][T17698] usb 6-1: Using ep0 maxpacket: 16 [ 1427.009599][T19362] xt_check_match+0x4e6/0xc50 [ 1427.009634][T19362] __nft_match_init+0x663/0x890 [ 1427.009651][T19362] nf_tables_newrule+0x1731/0x2810 [ 1427.009675][T19362] nfnetlink_rcv+0x1124/0x2480 [ 1427.030247][T17698] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1427.032053][T19362] netlink_unicast+0x74d/0x8d0 [ 1427.032090][T19362] netlink_sendmsg+0x8ad/0xbd0 [ 1427.059068][T19362] ____sys_sendmsg+0x5be/0x970 [ 1427.062186][T17698] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1427.064822][T19362] ___sys_sendmsg+0x2a2/0x360 [ 1427.064856][T19362] __se_sys_sendmsg+0x1bb/0x2a0 [ 1427.064882][T19362] do_syscall_64+0x4c/0xa0 [ 1427.064908][T19362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.064931][T19362] [ 1427.064931][T19362] other info that might help us debug this: [ 1427.064931][T19362] [ 1427.064938][T19362] Chain exists of: [ 1427.064938][T19362] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1427.064938][T19362] [ 1427.064978][T19362] Possible unsafe locking scenario: [ 1427.064978][T19362] [ 1427.064984][T19362] CPU0 CPU1 [ 1427.064990][T19362] ---- ---- [ 1427.064996][T19362] lock(&nft_net->commit_mutex); [ 1427.065010][T19362] lock(nlk_cb_mutex-NETFILTER); [ 1427.065024][T19362] lock(&nft_net->commit_mutex); [ 1427.108131][T19327] loop2: detected capacity change from 0 to 32768 [ 1427.110553][T19362] lock(nfnl_subsys_ipset); [ 1427.110578][T19362] [ 1427.110578][T19362] *** DEADLOCK *** [ 1427.110578][T19362] [ 1427.110584][T19362] 1 lock held by syz.6.17632/19362: [ 1427.110598][T19362] #0: ffff88802ef99cb8 (&nft_net->commit_mutex){+.+.}-{3:3} [ 1427.129209][T17698] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 9510, setting to 1024 [ 1427.134532][T19362] , at: nf_tables_valid_genid+0x37/0x100 [ 1427.134569][T19362] [ 1427.134569][T19362] stack backtrace: [ 1427.134576][T19362] CPU: 1 PID: 19362 Comm: syz.6.17632 Not tainted syzkaller #0 [ 1427.134597][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1427.134608][T19362] Call Trace: [ 1427.134618][T19362] [ 1427.134626][T19362] dump_stack_lvl+0x188/0x24e [ 1427.134657][T19362] ? load_image+0x400/0x400 [ 1427.134680][T19362] ? show_regs_print_info+0x12/0x12 [ 1427.134709][T19362] ? print_circular_bug+0x12b/0x1a0 [ 1427.134739][T19362] check_noncircular+0x296/0x330 [ 1427.134769][T19362] ? add_chain_block+0x940/0x940 [ 1427.134793][T19362] ? lockdep_lock+0xf1/0x1f0 [ 1427.151506][T17698] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1427.151608][T19362] ? _find_first_zero_bit+0xcf/0x100 [ 1427.172223][T17698] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1427.173404][T19362] __lock_acquire+0x2d07/0x7d10 [ 1427.173450][T19362] ? mark_lock+0x94/0x320 [ 1427.173478][T19362] ? verify_lock_unused+0x140/0x140 [ 1427.179240][T17698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.186769][T19362] ? __lock_acquire+0x12f4/0x7d10 [ 1427.186822][T19362] lock_acquire+0x1bb/0x4a0 [ 1427.186849][T19362] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1427.186879][T19362] ? __might_sleep+0xd0/0xd0 [ 1427.186897][T19362] ? read_lock_is_recursive+0x10/0x10 [ 1427.186928][T19362] __mutex_lock+0x12d/0xaf0 [ 1427.186957][T19362] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1427.186986][T19362] ? ip_set_pernet+0x23/0x230 [ 1427.187014][T19362] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1427.187040][T19362] ? mutex_lock_nested+0x10/0x10 [ 1427.187069][T19362] ? __flush_work+0x10d/0xae0 [ 1427.212229][T19327] XFS: attr2 mount option is deprecated. [ 1427.216793][T19362] ? ip_set_pernet+0x23/0x230 [ 1427.216830][T19362] ? ip_set_pernet+0x23/0x230 [ 1427.216860][T19362] ip_set_nfnl_get_byindex+0x63/0x230 [ 1427.216887][T19362] set_match_v1_checkentry+0x6d/0x220 [ 1427.216912][T19362] xt_check_match+0x4e6/0xc50 [ 1427.216935][T19362] ? xt_check_proc_name+0x270/0x270 [ 1427.216960][T19362] ? __stack_depot_save+0x35/0x460 [ 1427.216994][T19362] __nft_match_init+0x663/0x890 [ 1427.233600][T17698] usb 6-1: Product: syz [ 1427.241550][T19362] ? ___sys_sendmsg+0x2a2/0x360 [ 1427.241596][T19362] ? nft_match_large_dump+0x40/0x40 [ 1427.241629][T19362] ? __kmem_cache_alloc_node+0x140/0x260 [ 1427.452538][T19362] ? nf_tables_newrule+0x1503/0x2810 [ 1427.458267][T19362] ? rcu_is_watching+0x11/0xa0 [ 1427.463399][T19362] ? nf_tables_newrule+0x1503/0x2810 [ 1427.469485][T19362] ? __kmalloc+0xe1/0x240 [ 1427.474141][T19362] nf_tables_newrule+0x1731/0x2810 [ 1427.479585][T19362] ? nf_tables_delchain+0xf00/0xf00 [ 1427.485094][T19362] ? __lock_acquire+0x7d10/0x7d10 [ 1427.490362][T19362] ? mutex_unlock+0x10/0x10 [ 1427.495274][T19362] ? __nla_parse+0x3c/0x50 [ 1427.499801][T19362] nfnetlink_rcv+0x1124/0x2480 [ 1427.504961][T19362] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1427.510816][T19362] ? ref_tracker_free+0x68c/0x840 [ 1427.515906][T19362] ? netlink_deliver_tap+0x2e/0x1b0 [ 1427.521466][T19362] ? netlink_deliver_tap+0x2e/0x1b0 [ 1427.527428][T19362] netlink_unicast+0x74d/0x8d0 [ 1427.532527][T19362] netlink_sendmsg+0x8ad/0xbd0 [ 1427.537771][T19362] ? netlink_getsockopt+0x550/0x550 [ 1427.544019][T19362] ? aa_sock_msg_perm+0x94/0x150 [ 1427.549466][T19362] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1427.555180][T19362] ? security_socket_sendmsg+0x7c/0xa0 [ 1427.561989][T19362] ? netlink_getsockopt+0x550/0x550 [ 1427.567413][T19362] ____sys_sendmsg+0x5be/0x970 [ 1427.572432][T19362] ? __sys_sendmsg_sock+0x30/0x30 [ 1427.577749][T19362] ? __import_iovec+0x315/0x500 [ 1427.582775][T19362] ? import_iovec+0x6f/0xa0 [ 1427.587407][T19362] ___sys_sendmsg+0x2a2/0x360 [ 1427.592303][T19362] ? try_to_wake_up+0x67c/0x1080 [ 1427.597637][T19362] ? __sys_sendmsg+0x290/0x290 [ 1427.602728][T19362] __se_sys_sendmsg+0x1bb/0x2a0 [ 1427.607980][T19362] ? __x64_sys_sendmsg+0x80/0x80 [ 1427.613057][T19362] ? lockdep_hardirqs_on+0x94/0x140 [ 1427.618284][T19362] do_syscall_64+0x4c/0xa0 [ 1427.622722][T19362] ? clear_bhb_loop+0x60/0xb0 [ 1427.627468][T19362] ? clear_bhb_loop+0x60/0xb0 [ 1427.632166][T19362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.638092][T19362] RIP: 0033:0x7fdcc939cdd9 [ 1427.642535][T19362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.662156][T19362] RSP: 002b:00007fdcca222028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.671069][T19362] RAX: ffffffffffffffda RBX: 00007fdcc9615fa0 RCX: 00007fdcc939cdd9 [ 1427.679162][T19362] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1427.687956][T19362] RBP: 00007fdcc9432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1427.697105][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.705289][T19362] R13: 00007fdcc9616038 R14: 00007fdcc9615fa0 R15: 00007ffd222f5778 [ 1427.713658][T19362] [ 1427.747153][T17698] usb 6-1: Manufacturer: syz [ 1427.752577][T17698] usb 6-1: SerialNumber: syz [ 1427.774440][T19362] set match dimension is over the limit! [ 1427.780446][T17698] usb 6-1: config 0 descriptor?? [ 1427.795529][T19351] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1427.806257][T19327] XFS (loop2): Mounting V5 Filesystem [ 1427.865903][T19327] XFS (loop2): Ending clean mount [ 1427.880994][T19327] XFS (loop2): Quotacheck needed: Please wait. [ 1427.916468][T19327] XFS (loop2): Quotacheck: Done. [ 1427.977407][ T4273] XFS (loop2): Unmounting Filesystem [ 1428.026503][T19351] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1428.038534][T17698] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input67 [ 1428.287831][ T125] usb 6-1: USB disconnect, device number 30