last executing test programs: 9.981622285s ago: executing program 3: ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x5450, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$NS_GET_OWNER_UID(r0, 0x5421, &(0x7f0000000040)=0x0) setuid(r1) mq_open(&(0x7f000000aac0)='[+\x00', 0x800, 0x10, &(0x7f000000ab00)={0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x4}) 9.801366437s ago: executing program 3: socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff3000/0x4000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) 8.957667243s ago: executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket(0x2b, 0x4, 0xfffffffd) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000300), &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setresuid(0x0, r6, 0xee00) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x0) 6.898258588s ago: executing program 2: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r0, &(0x7f0000000b80)="2dfc", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) futex(&(0x7f0000000240), 0x6, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 6.641113339s ago: executing program 2: memfd_secret(0x0) fadvise64(0xffffffffffffffff, 0x0, 0x7, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 5.465374512s ago: executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0) 5.378948394s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0xdb7af3096517ca1e, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5385, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@umask={'umask', 0x3d, 0x9}}, {@utf8}, {@discard}, {@errors_continue}, {}, {}, {@errors_remount}, {@utf8}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="51050000000000001400350076655f300000000008000a000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000904", @ANYRES32=r5, @ANYBLOB="0200000000001400240012801100010062726964"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000019b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000019ac0)={&(0x7f00000199c0)={0xc4, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xea}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ae1b47e8fe6e74f}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x15}, 0x20000004) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 5.004717585s ago: executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, '\a\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.935104443s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a00000000000000000000000000000900010073797a3000000000b0010000090a010400000000000000000000000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f7401098070010280540001"], 0x1f8}}, 0x0) 4.890460958s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @device_a, @broadcast, @random="b5822e6bfcfb"}, 0x0, @random, 0x200, @void, @void, @void, @val={0x4, 0x6, {0x80}}, @val={0x6, 0x2}, @val={0x5, 0x3, {0x0, 0xb8}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) 4.834236331s ago: executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.820736196s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x5519, &(0x7f0000005d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x7ffb, 0x0) 1.539189059s ago: executing program 1: syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file1\x00', 0x400, &(0x7f0000005e00)=ANY=[], 0x1, 0x5e05, &(0x7f00000119c0)="$eJzs3X2QHOWZGPDumVntrlYfK1k2KyTEYoQdccEWKBDLd0Qb5+zYjmxkYQEWp5NkWNk6C0nWBwLpEgTkMMFOSlVQB4E4pQOXc5W6SnDpEuI7pUrGGF/5qihkx39w5Ouow/njfER1ljgiOd6r3e3enentt3t2ZlZI+Per2p15e9553ufpeae/dnc2AgAA4JfCi7+z981PX/rRHzwwfOa+j//RXfdHfdWx5T1ph/7k9p63K0Nm0oofnmt4ZbtrA2O32XlxyR8verP/wbWfemT1x3645U8WDC1bPnzDt47d9NCDz9/48+cff3Jt2TjpfLp6sh3/VRxFy14/9vhD3/vTS0aXxaPjx/2HowUL4oXfWRBnQqw8G0XRnRN5Nj547MyqbaO393+1u2H5/EwQ8/2XW08yzw5t/vzTJ7409L1jg7tX/fT09bsOT3aJe+rmUxTN21L//K4oinqTr1HpbBtIn5zcrouiaHbd8z5UkteV2QXd+f2uCbSXJrezktu+kvHSx6/ItGslz4sy/WrF6XZMZYbjZ2XXX3ZjNFPSOuclt88lt1dPM041/YqjShzVJtLfEU/OkajudYujeGxu90y0K2PtaKIdZdtxpl3JtKtdmbrGxk1WbDWOG5en/TLL081xLVl+Rf22Osf6wPLFyW1P8kZ9K21H2Tvj+qbcmawjqsvr1PmaGAGVwHsvXT6RXvJi9CXL+uKFU54zkiN97NT3t25845WDz/UH8oifjZP4cUvxh4afOvHN244vHgjF31JJ4ldaiv9i9aWz3zg9MCcY/0gav9pS/A2/+MnDD9x8YFFw/ZxK10+tpfjLvzbn0JkD67sHQ/GPpvF7Wop/w6Zlqy87vf/uYP4r0/XT21L8Hz+64tymI98+HowfpfFntxT/1aeeWVpd/NjJYPwT6frpayn+LaueWPPJJQ8+GVz/L6fx57YUf+PJh7bsfvqFFcH5uS5dP/0txT+75kevnetf+0xo2xkfPd97WIB3lnclx1gPJ+1WzzPH/EXredSdLzwxWBs/5puTfM1tPWypuO7cBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa9dia//Tl+vZVf3n3hpP/edn2WtLurkVRHEXRG9Xxdrp8VhTFvVEU7d23dc++7Tu/MPhbu/bv2bl1x+DWfYPDO/ftuXfw7/3dwT3Du3dsvXf00ZXXrBp/3sKxaFG0ML5sSi4jIyMjURQN1i9Lx/u9Tzz7/zY8+defi6KV7/7Rslqwng/+99c+uijne0Y8NLLu31z/6MFZfzF/fEF/kld/KK/+xmVpBn1DL//ZR557ZTSv9xTl9fhLt/7fhoTGFkzGSVS6o8rYne54dm4eE1lP5jO2vmrbtu8YXlm+fuPA+n3/C394+j/es+Ffjq/fnmAdTa7f0bVaG3nkZw+8//BHhj98Ab/uZeu7roSx/NL115Os73lJXfMCdVUCdd09+Oqpf/Uf/us3Dkcraz+7fOrYZXV1JROgK17c1LjpCLPjBQ19e5L+6SuePu+D++7a/cG99x68ZvtdW78w/IXhnatWXb/62lXXXrd61QfHSh//3rH60/Hf32T9c5JIc+IluestuzQd9/Kx79UoSTu9qbvTqCvqG7/NrOe0e7bqvuSxvnjhlFgjOdLHTn1/68Y3Xjn4XOidFz87PmJvNHf8Nl4a6Lkj88TqRMJ545+f9+Wu3+3ZkX5v7n1ZllfZvBrNq3xe1WdUsB176cqHf/b0V/717U1sL+q6juWX5jl79O1ybVT3vp26rvLqauL1GcpbD3dcs+cP792+8UjZ9rz+lan/nhEPjfzvpfGn9u/9sz3jC87L/rI+oRb3lxNZT+Yztr56ktfjQl2/3VE1qasvN6/18dM3vv+u478ykd+sWdE9W/ft23Pt+PeLta4/nzV/0fb7l1w2pa7rxr+Xbfcvz7RLt/uV/PrKtvvZcSb758cbzLT7ompL+4kNv/jJww/cfGBRcD9xqtn9xG83tKpt7icqgff7I3/99cE3b//sm2Xz6aa9S+5blPM9W97QyLf/4Fev/fCtN39sfMF52Q7VJ9Tidmgi6ySfdH2NbYeuu3DqePte54Y3Yjw0cvm33nfLuTNf/sz4grL1O9E7b/2uKt/OVwN13d713gWP/nTJezs3f/du/psrPzB7zoUzf0cTqPQk67cnsH4nsk7yqdav3w/csWvHnePtC/e4bVx3yflPut/Ze+/BL23dsWN4z97m6mp2f5qOk13Lre5P073HwpK60tdrsq6Zu9PM+mr2/Zbmf2cmRqvvN4DU5H5hVsPy7PYzve63bF604QNf+e5L8eD4/rJT11vTcS7N7Mpbvd5adp703ky78TypFtXVPW7qedLYU8rOk7LjlJ0nXZlpl5/HPJxbSej160r2vHnXTTP51kYjhObHQBJ/IGmnx5vLPhBdX33uqk/EQ83Nj2aPp9Nx/k5mBbV6PF02P5ZH+Xl1en68L/Ok8tf7SG5mPYHXo+z1Xt4QaGSk3fPy/kDW6Xl5XxS3FH9o+KkT37zt+OJg/C2VJH6lpfgvVl86+43TA3OC8Y+k8WstxV/+tTmHzhxY3x2MfzRdPz0txb9h07LVl53ef3cw/so0/96W4v/40RXnNh359vFg/CiN39dS/FtWPbHmk0sefDIY/+U4GWf0vRtFx86s2jbejqOuZP6neYy2o8PRRP+uhjyjONPO1BFV6x+vjP+sd2KAahw3Lk/7ZZanddSS5VfU5ZhnQ2B5+q7tSd7Yb6XtKHuneHm6eUrzOhXY/5wvlbpjj7zlZdcnO+WN1wd+r76d/vw/nQPdtfHX7rrM+irbf2S33mm84HXYwCWMsuOFqT9/m93S++/Vp55ZWl382MngddUTzV5X3d3Qml1yXbXdfIPbixPp9rS97dFAKP7Lafz29gfB+Mn+oGyeXZVpl86zrvzxyuZZ9jilL5rbUt0bTz60ZffTL6wIzrN142/48nn2WENrbuk8a+/n0sF59mzckfURjL+uM8c1wXmWHNeUzbOrM+3251nj8einktt7Jhf9/7SUVuo+u+ZHr53rX/tMcJ4dbXae/X5Dq790nrV3fBt8nSaOb7PH571NxW/++PziPv5s+vhwol16fFjJtPOPD5Mf587U8eH6wPLpHh/2TbkzWUd0MR4fBrYzAFDkB4/c+3/q2+n5f7rvTs//v5t5Xrvnldnfh0p16rwyGP9oZ85XgsepE+crM32+NdPH2TN7vjXz19kv7uP4mb8u1D+j55XOQ5J2lL0zznkIAABvhyv+3dd/vb591V9GY+f/E7/3lvz9/wtpO/N857mB+OftPHemr5M4j87orW/M/HWwmb5O5TqA6wDlXAcAAHhn2Lxtz/Dw3t1b7xjevH3n9n0Ty7vGzpym/p7q309u16ULDk/2jwp+f3pdpj0ZP7//Z3L6Rzn5fCjQP6SWnMB9/o4vXrf5zuG7p1t/aLyy+vP6F9WfPb8I1b860D+k3fpD45XVn9e/qP6bg/Eb8/lwoH9Iu/WHxiurP69/Uf2fzY+/Jsrk86uB/iHt1h8ar6z+vP5F9Wf/Hiz0+v9aoH9Iu/WHxiurP69/Uf23BOM35nPjZP9zoWth9dqt/8bS/Jqvp6j+W4PxG/P5B4H+IeH6Q/k1N15u/XFxPUX13xaM35jPmnSkJq8Ptfv6rynNr/l6CuqvfC4YvzGf9EN3sv1D2q0/NF5Z/Xn9i17/jcH4jfn8w0D/kNL6u7L5NTdeWf15/Yvqvz0YvzGfjwT6h7T7+ofGK6s/r39R/b8RjN+Yzz8K9A9pt/7QeGX15/Uvqn9TMH5jPr8e6B/Sbv2h8crqz+tfVP9vBuM35vPRQP+QKfWnP49osv7QeGX15/Uvqn9zMH5jPh8L9A9p9/UPjVdWf17/ovq3BOM35vOPA/1D2q0/NF5Z/Xn9i+rfGozfmM/HA/1D2q0/NF5Z/Xn9Z9fCnzv++WD8xnw+Eegf0m79ofHK6s/rX/T63xGM35jPJwP9Q9qtPzReWf15/Yvqz37eYaj+fxLoH9Ju/aHxuqKR+4rGzaunqP7hnP5RTj5rA/1D2q0/NF7Z65/Xv6j+bcH4+Z8bkO0f0m79ofHK6s/rX1T/F4LxG/P5dKB/SLv1h8Yrqz+vf1H9XwzGb8znpkD/kHbrD41XVn9e/6L6twfjN+azLtA/pN36Q+OV1Z/Xv6j+3wrGb8znM4H+Ie3WHxqvrP68/kX1fykYvzGf9YH+Ie3WHxqvrP68/kX17wjGb8zn5kD/kHbrD41XVn9e/6L67wrGb8zns4H+Ie3WHxqvrP68/kX17wzGb8xnQ6B/SLv1h8Yrqz+vf1H9u4LxG/O5JdA/pN36Q+OV1Z/Xv6j+3cH4jfncGugf0m79ofHK6s/rX1T/l4PxG/O5LdA/pN36Q+OV1Z/Xv6j+PcH4jfl8LtA/pN36Q+OV1Z/Xv6j+vcH4jflsDPQPabf+0Hhl9ef1L6p/XzB+Yz63B/qHTLf+nibHK6s/r39R/fuD8Rvz+Y1A/5B2X//QeGX15/Uvqv/uYPzGfDYF+oe0W39ovLL68/oX1X8gGL8xn98M9A9pt/7QeGX15/Uvqv+eYPzGfDYH+odM1L9vz/Dw5v2779y6b3jzzl13Du/dfGDP9n37hpMDtXb/riz8d0Fv8x+yUKjh/TE+Sbbv3Du8Z+r2u7dw/tbPiWjsz57G/2yuJ35PU/2zH3vd6qy5UOZ7V1QrXF+XZtrzk8+jnR/4PNps/zTskrE7Uz+PNjtsreRzXMu2T9nxQ9unuKB/3vY1tD0r2/9Ne/tXOr97CuvPLu5O/rCvO353U/2jgv/v1tx8be/vToPz9eXm5mv2c9fL5mu2/3Tna1+b8zU7fmg+VQr6Fx0PNTtfNwb6p5qfn3Gw3rx5Nd3/M5iGndb/Gcx8m6KF/2XQ/Puhvb8jD74fkqTL3g/Zv+Muez9k+0/3/dDb5vshO37Z+yGvf9H5cbPvh1sD/UOanw/tfW5BcD6sbG4+ZP+PVdl8yPaf7nzoaXM+ZMcvmw95/YuuFzY7Hz4b6N+s5udHe58rEpwfW5qbH9n/J1E2P7L9pzs/4jbnR3b8svmR17/o5ynNzo/PBPqnGvaf2/aOndRv37pj+8HML2D0J/vPt3t/eF72y3/za3/+1vi3JI/KlDzKjifiTB4LkkwWhP7vYSDvO/7bv9/w3Z9/5etRtPLd1aXhvCdTnvyWEQ+NLLxv+Tdve8/Jj4zmXynMf6Jn+n+LS/7fcbZ/Wk9tx669+35l2679O5v9jati6eehVCbaM/R5KMnCapOfbxL6e4Lpfr5J15Q7F6amP98E4B1i/tFn59a308//T/dHA8m2rzfZAKbLmz/Obu/z9YLH2UeaO85eka235Dg72z+tt9nj7Eqbx9nZ8cuOs/P6F/3eXrPH2Z8O9J+uxnkyOkHG5sfw5gO79tT/TlwT86Srvpk+1uz/re18vjP7f3zbz29mP7exVc3nP7OfCznz+c/s/wGe+fxn9v88t+q8nS8lHxZZ9vmROedRc+obob9Ln+551Kwpdy48yUcBOY8CgAvcv9jz+r+tb6fn/8lZ7MT5/1eTdrXD48/0eVS71x/Kzitn+jj54v/8/Zk9D7oIzgca/DKdD0R+rgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ9Pv/8798p77dXRsYu33xd/a++elLP/qDB4bP3PfxP7rr/kv+eNGb/Q+u/dQjqz/2wy1/smBo2fLhG7517KaHHnz+xp8///iTa0sH6h+/uTpp9kRR/FdxFC17/djjD33vTy8ZXRaPjh/3H44WLIgXfmdBnImw8mwURXdO5Nn44LEzq7aN3t7/1e6G5fMzQbJ1RX3VNJ+GPKN7SiviItSTzLNDmz//9IkvDX3v2ODuVT89ff2uw5Nd4p66+RRF87bUP78riqLe5GtUOtsG0icnt+uiKJpd97wPleR1ZZP5XxNoL01uZyW3fSVx0sevyLRrTeZRy9x2N/m8VlVmOH5Wdv1lN0YzJa1zXnL7XHJ79TTjVNOvOKrEUW0i/R3x5ByJ6l63OIrH5nbPRLsy1o4m2lG2HWfalUy72pWpa2zcZMVW47hxedovszzdHNeS5VfUb6tzrA8sX5zc9iRv1LfSdpS9M65vyp3JOqK6vE6dr4kRUAm899LlE+klL0ZfsqwvXjjlOSM50sdOfX/rxjdeOfhcfyCP+Nk4iR+3FH9o+KkT37zt+OKBUPwtlSR+paX4L1ZfOvuN0wNzgvGPpPGrLcXf8IufPPzAzQcWBdfPqXT91FqKv/xrcw6dObC+ezAU/2gav6el+DdsWrb6stP77w7mvzJdP70txf/xoyvObTry7ePB+FEaf3ZL8V996pml1cWPnQzGP5Gun76W4t+y6ok1n1zy4JPB9f9yGn9uS/E3nnxoy+6nX1gRnJ/r0vXT31L8s2t+9Nq5/rXPhLad8dHzvYcFeGd5V3KM9XDSbvU8s1115wtPDNbGj/nmJF9zOzlQRlx37lJg1gymAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARWDXSHV/ffu144/c9MX/tfl/1OIoigPPGcmRPladNTQ02EIey78259CZA+u70/bo2AMtxAEAAACmWvLqV75c307PwytJO456ooHoQNwbLcl9fnqNYEnaihuXZ68h9E727EicSofiVDsUp9ahOF0dijOrQ3G6OxSnpyROT9RcnN7COJWm85ndfpyxlPs6lM+cDsWZ26E48zoUZ36H4vQXxbkpnrI8FGdBYT7Nz+eFHYrzrg7FWdShOO/uUJz3dCjOJR2Kk72mPN15ODfpeWkoztidammcWlydeCDveno6zmVtjtPX5DhZ0x2nt8lxrmxznJ4mx3lfm+PETY6zIvO8SnacWcXjVErGSeftPaF60laT8//eDsU52KE4hzoU57czj7Qa5592KJ9/No042WPG+jj3tZkPQMjvPn/1H9S30/P/9Pwzjvqj7tp10exki5M9Wki3XZePfZ+6Xw1tkNJ4SzPL03G75zY+P84OGIh3+XTzy15AyMR7b2G82pTz1Zx4tfp4yzsUDwAAAKbjn5891PCjuann/wNRd23RxPnrVZnnp/2C59fZH2Qn0nhXdygeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwt+zaa2wc9bUA8P9417t7zSMGJWFDXlaSS0CIPIhydeHewipSkagKDqUJjwi5KRgcYRKIEyBpq1ComsgSFW3og9eHBooqhApISBGtK1FBi/qhUSNKxaOuwUXwBRVKXkBot1p7xh6vd7GzLUnT/n5CM3tmzvmf/wwS0hkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K/v99/9y/PpeLCvt71roKM/RKHyT03lGpJ7mVyp1NbAPt57Ye3Vf35l6+4krvTOZxtYCAAAABjnyQtmnJmOkzk8Gb2jUAj57NKQj3Jj6orxd4BiHDe1Dp/nLArLM7v/++Ko1DQUnxqdMqauENcV4jgT1/Vs2Xrj2u7uzo2f4o9Kn+rnqN5PFMLQ54s5J4dVi7Y/tydqG36OlgmeoymuW7zpppsX92zZes66m9be0HlD5/ply5aft3TZ0nPPW7b4+nXdnUuGjyE/wXohhNLY9zLBv0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKtv169zfS8WBfb3vXQEd/SxRCVKemXENyL5Mrldoa2MdrDzw8KzPj3r1JXOmdzzawEAAAADDOL56ccWE6TubwZPSOQiHks7mQCTOG4nmjqdkQyuXk+oKq60dj7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNG172D7H9PxYF9ve9dAR/8JUQhRnZpyDcm9TK5UamtgH6uX/eDCz8286/4krvQuNrAOAAAAMN5LZzbflY6TObwpjqNQCMUwPzRHM8bUJd8GTq9arzovWWf2JPOqvx3Uy5s/ybwzJpl31gR5l8bn2wMAAAAcf65q/c3qdJzM/81xHIXWkM8WQyaOJ5rjk+8Cc6vykvqJ5vukfl6d+onm/qS+eu4HAACA/2TnvP3Ux+l4/PxfDPlsYWT+nujv6ZfEZ38nBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq+eXBi3+Wjgf7etu7Bjr6M1EIUZ2acg3JvUyuVGprYB+r/vbWjjsvv21qEld657MNLAQAAACM83juf29Lx8kcnozeUSiEfLYlNIcThub+N3JTpq77+szZIYTSUEIuF25fu2nTxnOHj0neF6Jdn1l4U9/Z4/KWDh+P/pMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/qGWP7VyTjgf7etu7Bjr6/ysKIapTU64huZfJlUptDezjpZ1nHb7mnmf6krjSu9jAOgAAAMB4s7qf/VM6TubwZPaPQiEUQy7kwvShOD3rVzRVrVfvmwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw76Nny9Yb13Z3d270ww8//Bj5caz/ywQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwrP13/nXfT8WBfb3vXQEd/IQohqlNTriG5l8mVSm0N7ON/rplz3uz9m29N4krvYgPrAAAAAOOteWfz/nSczOHJ7B+FQiiG5tAcpsXxeEPzf+vR2C0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAszQ1RKB+h01Ye610DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn4YDL696IB0P9vW2dw109J8UhRDVqSnXkNzL5Eqltgb2cfXeb37p5l3Pn5XEld75bOVXqYHVAAAAgLTmt1/+cjpO5vBsHEehEPLZWSEfZsVXuscuEGWSxJrfBUbrvjqmLDPpuh1VOx7eWSH+DlEY2WcY+uwwWnfPJ9YV46tNrZN7TwAAAHA8m7bj0q+l42T+b47jKLSGfHZaaq6+eUx9y6Tn+HvH1J006bofj6lrnaDun/BKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG3b3yhdPS8WBfb3vXQEd/FIUQ1akp15Dcy+RKpbYG9lHqfODZR6/sm5HEld7FBtYBAAAAxrv8rcK303EyhyezfxQKoRhmh5PD7KG5P7SOrU/yTij99tUVu1+5KoQl01+ck63b7/t7rng3HPr/Nz4YPgyFITSNTWoKYUrcL6rT79rfPbbquY+3PxTCkmmZWfX7jbYaPVSJSuVTty149Mrpe1fUXQYAAACOa4WHD/woHSfzfzJRR6E15LPr687/Sd4Rzf/tPTO3TY2P8ReAqoqm1rhfU51+ve8/1HZwzRcPVub/F+cURv5fgTPnj81Pt0ofq745RKXy3KfOWH34wC2XDV9I+mfq9F/TPO+Une/MnJf0L8TXrwuT7R+q+vd0HJq/qOXEi8b2DyG01er/w4uf/HDV/e9fNdy//vte/IfBz04NG75X6E6Ow1fG91/54PKdW3NvThnbP6rTf+HzT+9/4vZVd1c//+nZWv3HH6tUumbLvfvuXHjHis7zU/2b6vS/te219771k58/Uum/b27LSP+Fn/D8E/bfM3/Hvl3b71sz9v2XavW/9pyNT29Zd/U91c/fUrVw+s2nj+Pf/+uzoks297y6sfoWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8a3jiY8OpePBvt72roGO/qYohKhOTbmG5F4mVyrljqB/Nj7/KrPno0f2F09Mrld6F4/0YQAAAICaLlvx+g3pOJnDk9k/CoVQDLmQCy1Dc/+p2xY8euX0vStCa3w/Pme7N/RsOvv6DZvXX3e0HwEAAACYwK4LPlyRjpP5P/m7fBRaQz67IDTH8//KB5fv3Jp7c0oy/4cQ2iqH7PXrujuXhJHvBD0dh+YvajnxoiQvE58LlbxF127ojj8TJOs+8/j/LT3/istH8pvS+eeO5s196ozVhw/cclnNvGWjea/Pii7Z3PPqxtQ+SyN5S0fzevfdufCOFZ3nJ88RxedC/DxJ3p75O/bt2n7fmiSvKT63xOsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGc8sFfv5KOB/t627sGOvpDJoSoTk25huReJlcqtTWwj48ufHHwcOvnH07iSu98toGFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV26ifErSKOA/hMkpq0KXW3FJqVurTYiwWhsFjsQdyLf5D6h4qiQnEV14uKgmjFHuwfLKIeCgoVexEVz0oORe1hLbSKgqDgQTx50JPKHnaLVFFJdiabvPax64MVkc8HwuQ3yXzf700mDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+0B364tTFcNxud/nj+pWcu3HnVzV8cnV188baPnzyy9ZMtF8aO7bvjlb23fDPz+fj05M7ZPR927zp+7OyNf5w9+da+FS/0/NKwK5WtEOIvMYTJH7snj5/7cmtvLvauH8cOh/HxuPnT8VhI2H0xhPDooM/RD7uLU4/1xiOvNkfmryyEFO8rtOu5nyVjo/3y/9JK5+zQQ4+8M/f49Lnu9qenfl64/qnDy1+JraHzFMKmmeH160II69OrJ5+2Tl6cxrtDCBuG1t2wQl/XrLL/60rqbWm8Io3tFXLy5zuao3VjlX00CmNzleuqqq1xflFx/4oPo7WS73NTGk+ncdc/zKnnVwy1GBqD9p+Iy2ckDP1uMcT+2W4N6lq/DoM6FOtYqGuFur6ucF/966aNrcc4Op+/V5jPj+NGmt8x/Ky+jP0l8xNpbKU/6m+5DsU3S9qXvFm+jzDU1/y/dTBK1Er+e3l+0F76Mdpprh03X7Lmr8vIn81/9vCDv373wumxkj7iBzHlx0r507On5t6//8xEpyx/ppbya5Xyz9e/uvjeQmdjaf6JnF+vlH/vnz+9fPSeg1tK92c+70+jUv7O1zYeWjy4v7m9LP/tnN+qlL/nwOTeqxeefa60/915f9ZXyv/29Wt/P3DiozOl+SHnb6iU//2pd7fVJ974ujR/Lu9Pu1L+fVNv3nT73+zXvwkCMRQHYA5sBA8OLG1sncIFLKytHMEdBHEEsRJdxQEUN3AMbSxMJAhp4h9Qvg+uuOY9eITk/XrzdXb+h1i/Lqo/OS6ms+1+kD2f4zifpqj+ZXg6X5vRLnd3Vptvv7AA/6Ubdqxl+C/Nma9K8sKq37rvfJ3w1e9s9KRKsstD+4MNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Am3AAAA//8ncmVi") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 1.370647199s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="fb", 0x1}, {&(0x7f0000000380)="07bd9b18de8674f528cdbd0643118dce9e285248", 0x14}], 0x2, 0x0, 0x0, 0x20000400}, 0x20040000) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffffcc, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xb0000004}) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 848.827541ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r1, 0xc01, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}}, 0x0) 660.188689ms ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0xdb7af3096517ca1e, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5385, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@umask={'umask', 0x3d, 0x9}}, {@utf8}, {@discard}, {@errors_continue}, {}, {}, {@errors_remount}, {@utf8}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="51050000000000001400350076655f300000000008000a000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000904", @ANYRES32=r5, @ANYBLOB="0200000000001400240012801100010062726964"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000019b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000019ac0)={&(0x7f00000199c0)={0xbc, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xea}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ae1b47e8fe6e74f}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x15}, 0x20000004) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 576.928997ms ago: executing program 2: sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f00000003c0)={0x2, &(0x7f0000000040)=[{0x8000, 0x5, 0x20, 0x101}, {0x40, 0x4f, 0x20, 0x5}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x19, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000200)=""/196, &(0x7f0000000080)="d0de09147f0242533934b13104625f72a7fb98726137bb30711a044e2c05fd320e4a405a9ea6f3ee7cc14067f937009ed52cb3871752828d7781c0843f19bf17ae352394846e074963470cfa9cd1e0cade0dd0", &(0x7f0000001540), 0x1, r4}, 0x38) socket(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x10) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) 377.138504ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)='%pi6 \x00'}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe58}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 162.345038ms ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b92d295", 0xc2}, {&(0x7f0000000200)="b350d8", 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="9368d1ba0b16010000e28dd0e0aafd2036ca16f0ed3806005d0099fa4620c9e85ee5eecc84618cb046ba9c3011bfdf5e858b1b9c4e1df46ed568e17b925d2aff01c1e0dafe77259e79f1fc1a0d07c915a710bb59b1b658e124682e31a75ee1348867d1b6e900000000000000000000000000f7e8ac93ba5ef27576fdfc2a190541", 0x81}, {&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb8543c4b4a56b104d3a651e7c389022630024bbe0f3a55dd6d", 0x95}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 0s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4008700e, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) kernel console output (not intermixed with test programs): d crc value [ 344.150971][ T8811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8811) [ 344.165652][ T8823] F2FS-fs (loop4): Found nat_bits in checkpoint [ 344.183198][ T8809] loop3: detected capacity change from 0 to 40427 [ 344.204850][ T8809] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 344.222733][ T8825] nfs: Bad value for 'source' [ 344.224651][ T8809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 344.248279][ T8811] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.248313][ T8823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 344.270996][ T8811] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 344.279051][ T8809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 344.280096][ T8811] BTRFS info (device loop0): using free-space-tree [ 344.475412][ T8809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 344.504744][ T8809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 345.528391][ T5166] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 345.585724][ T5126] syz-executor.3: attempt to access beyond end of device [ 345.585724][ T5126] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 345.607543][ T8859] loop1: detected capacity change from 0 to 64 [ 345.630753][ T5126] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 345.752923][ T5166] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.783629][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 345.820628][ T5166] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.837978][ T5166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.853961][ T5166] usb 3-1: Product: syz [ 345.862409][ T5166] usb 3-1: Manufacturer: syz [ 345.885903][ T5166] usb 3-1: SerialNumber: syz [ 345.912059][ T5166] usb 3-1: selecting invalid altsetting 1 [ 345.924964][ T5124] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.328146][ T5166] usb 3-1: selecting invalid altsetting 1 [ 346.341637][ T5166] cdc_ncm 3-1:1.0: bind() failure [ 346.520070][ T5166] usb 3-1: USB disconnect, device number 7 [ 346.654598][ T8882] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 346.717968][ T932] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 346.900411][ T932] usb 1-1: config 0 has no interfaces? [ 346.906504][ T932] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 346.920383][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.928601][ T5170] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 346.942310][ T932] usb 1-1: config 0 descriptor?? [ 347.128030][ T5170] usb 5-1: Using ep0 maxpacket: 8 [ 347.136524][ T5170] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.147081][ T5170] usb 5-1: config 0 has no interfaces? [ 347.152803][ T5170] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 347.164768][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.192927][ T5170] usb 5-1: config 0 descriptor?? [ 347.285913][ T8891] loop1: detected capacity change from 0 to 8 [ 347.305720][ T8878] kvm: pic: non byte read [ 347.315980][ T5166] usb 1-1: USB disconnect, device number 12 [ 347.368451][ T5215] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 347.578137][ T5215] usb 3-1: Using ep0 maxpacket: 32 [ 347.595140][ T5215] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.620068][ T5215] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.654154][ T5215] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 347.680510][ T5215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.727493][ T8891] loop1: detected capacity change from 0 to 40427 [ 347.734629][ T5215] hub 3-1:4.0: USB hub found [ 347.749172][ T8891] F2FS-fs (loop1): invalid crc value [ 347.757383][ T8891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 347.817738][ T8898] syz-executor.4[8898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.828594][ T8891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 347.838553][ T8898] syz-executor.4[8898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.863149][ T8902] nfs: Bad value for 'source' [ 347.982054][ T5215] hub 3-1:4.0: 2 ports detected [ 348.036849][ T5166] usb 5-1: USB disconnect, device number 12 [ 348.597512][ T8910] loop3: detected capacity change from 0 to 64 [ 348.940365][ T5215] hub 3-1:4.0: set hub depth failed [ 348.957974][ T5215] usb 3-1: USB disconnect, device number 8 [ 349.381013][ T8909] loop0: detected capacity change from 0 to 32768 [ 349.396039][ T8909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8909) [ 349.414224][ T8909] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 349.424538][ T8909] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 349.433603][ T8909] BTRFS info (device loop0): using free-space-tree [ 349.448096][ T932] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 349.630918][ T932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.642991][ T932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 349.657406][ T932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.666984][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.676048][ T932] usb 4-1: Product: syz [ 349.680521][ T932] usb 4-1: Manufacturer: syz [ 349.685325][ T932] usb 4-1: SerialNumber: syz [ 349.702259][ T932] usb 4-1: selecting invalid altsetting 1 [ 349.956922][ T8949] loop4: detected capacity change from 0 to 4096 [ 349.984658][ T8949] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 350.027368][ T8949] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 350.126636][ T932] usb 4-1: selecting invalid altsetting 1 [ 350.145905][ T932] cdc_ncm 4-1:1.0: bind() failure [ 350.270198][ T8952] loop1: detected capacity change from 0 to 8 [ 350.315449][ T58] usb 4-1: USB disconnect, device number 9 [ 350.400746][ T5124] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.682229][ T5166] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 350.718644][ T8952] loop1: detected capacity change from 0 to 40427 [ 350.750665][ T8952] F2FS-fs (loop1): invalid crc value [ 350.770362][ T8952] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.825701][ T8952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.889966][ T5166] usb 5-1: config 0 has no interfaces? [ 350.910515][ T5166] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 350.959186][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.030627][ T5166] usb 5-1: config 0 descriptor?? [ 351.040165][ T8958] loop3: detected capacity change from 0 to 64 [ 351.853926][ T8954] kvm: pic: non byte read [ 351.910771][ T932] usb 5-1: USB disconnect, device number 13 [ 352.318692][ T8981] loop2: detected capacity change from 0 to 4096 [ 352.332261][ T8981] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 352.387782][ T8981] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 352.757966][ T932] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 352.843932][ T8989] loop1: detected capacity change from 0 to 32768 [ 352.868809][ T8989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8989) [ 352.871866][ T8999] loop4: detected capacity change from 0 to 8 [ 352.893279][ T8989] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.903684][ T8989] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 352.913865][ T8989] BTRFS info (device loop1): using free-space-tree [ 352.980007][ T932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.011011][ T932] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 353.061303][ T932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.102476][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.149513][ T932] usb 1-1: Product: syz [ 353.175203][ T932] usb 1-1: Manufacturer: syz [ 353.207353][ T932] usb 1-1: SerialNumber: syz [ 353.253932][ T932] usb 1-1: selecting invalid altsetting 1 [ 353.317679][ T8999] loop4: detected capacity change from 0 to 40427 [ 353.345553][ T8999] F2FS-fs (loop4): invalid crc value [ 353.411196][ T8999] F2FS-fs (loop4): Found nat_bits in checkpoint [ 353.472501][ T8999] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.167945][ T932] usb 1-1: selecting invalid altsetting 1 [ 355.173790][ T932] cdc_ncm 1-1:1.0: bind() failure [ 355.354819][ T5215] usb 1-1: USB disconnect, device number 13 [ 355.635001][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.386417][ T9049] loop3: detected capacity change from 0 to 1024 [ 356.407307][ T9049] hfsplus: failed to load root directory [ 356.488156][ T932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 356.724692][ T932] usb 2-1: config 0 has no interfaces? [ 356.733677][ T932] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 356.755169][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.783765][ T932] usb 2-1: config 0 descriptor?? [ 356.914011][ T9051] loop3: detected capacity change from 0 to 8 [ 356.988055][ T9051] squashfs: Unknown parameter '{@'^' [ 357.886606][ T9063] loop4: detected capacity change from 0 to 8 [ 358.871290][ T9063] loop4: detected capacity change from 0 to 40427 [ 358.908232][ T9063] F2FS-fs (loop4): invalid crc value [ 359.159917][ T9063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 359.228396][ T9063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 361.281212][ T5166] usb 2-1: USB disconnect, device number 6 [ 361.388183][ T932] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.580193][ T932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.620163][ T932] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 361.657480][ T932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.677927][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.686144][ T932] usb 1-1: Product: syz [ 361.717885][ T932] usb 1-1: Manufacturer: syz [ 361.727782][ T932] usb 1-1: SerialNumber: syz [ 361.787660][ T932] usb 1-1: selecting invalid altsetting 1 [ 361.852246][ T9078] loop2: detected capacity change from 0 to 32768 [ 361.886116][ T9078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9078) [ 361.940111][ T9078] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.956370][ T9078] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 361.978072][ T9078] BTRFS info (device loop2): using free-space-tree [ 362.210447][ T932] usb 1-1: selecting invalid altsetting 1 [ 362.233109][ T932] cdc_ncm 1-1:1.0: bind() failure [ 362.295268][ T9113] loop4: detected capacity change from 0 to 512 [ 362.344566][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.357686][ T9113] ext4 filesystem being mounted at /root/syzkaller-testdir2053319947/syzkaller.s6q2Gx/142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.396218][ T45] usb 1-1: USB disconnect, device number 14 [ 362.802622][ T5166] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 362.874908][ T9122] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 363.130809][ T5166] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.209712][ T5166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.558066][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.567153][ T5166] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.576688][ T9124] loop0: detected capacity change from 0 to 1024 [ 363.610982][ T9124] hfsplus: failed to load root directory [ 363.614952][ T5166] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.647247][ T5166] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.655418][ T5166] usb 5-1: Product: syz [ 363.664373][ T5166] usb 5-1: Manufacturer: syz [ 363.689581][ T5166] cdc_wdm 5-1:1.0: skipping garbage [ 363.700692][ T5166] cdc_wdm 5-1:1.0: skipping garbage [ 363.708111][ T5166] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 363.724652][ T5166] cdc_wdm 5-1:1.0: Unknown control protocol [ 363.764471][ T5490] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 363.966670][ T9134] loop0: detected capacity change from 0 to 8 [ 364.040657][ T9134] squashfs: Unknown parameter '{@'^' [ 364.169161][ T5141] usb 5-1: USB disconnect, device number 14 [ 364.708472][ T9141] libceph: resolve '0.0' (ret=-3): failed [ 364.748333][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 364.783557][ T5976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.953016][ T45] usb 2-1: config 0 has no interfaces? [ 364.964852][ T45] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 365.015949][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.064412][ T45] usb 2-1: config 0 descriptor?? [ 365.225615][ T9161] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 365.951661][ T9173] loop0: detected capacity change from 0 to 256 [ 365.964503][ T9173] exfat: Deprecated parameter 'utf8' [ 365.968167][ T932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 365.981122][ T9173] exfat: Deprecated parameter 'utf8' [ 366.040311][ T9173] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 366.135246][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 366.135263][ T29] audit: type=1800 audit(1717512304.362:162): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=1048670 res=0 errno=0 [ 366.165376][ T9173] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.177355][ T932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.212703][ T932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 366.278386][ T932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.325125][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.346460][ T45] usb 2-1: USB disconnect, device number 7 [ 366.363245][ T932] usb 4-1: Product: syz [ 366.405207][ T932] usb 4-1: Manufacturer: syz [ 366.411082][ T932] usb 4-1: SerialNumber: syz [ 366.420922][ T932] usb 4-1: selecting invalid altsetting 1 [ 366.833080][ T932] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 366.846661][ T932] cdc_ncm 4-1:1.0: bind() failure [ 366.872093][ T932] usb 4-1: USB disconnect, device number 10 [ 366.894991][ T9180] loop0: detected capacity change from 0 to 64 [ 366.906429][ T9172] loop2: detected capacity change from 0 to 32768 [ 366.930418][ T9172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9172) [ 366.957460][ T9172] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.979146][ T9172] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 366.999937][ T9172] BTRFS info (device loop2): using free-space-tree [ 367.184815][ T9200] loop4: detected capacity change from 0 to 1024 [ 367.196545][ T9200] hfsplus: failed to load root directory [ 367.502063][ T9208] loop4: detected capacity change from 0 to 8 [ 367.646453][ T9208] squashfs: Unknown parameter '{@'^' [ 368.006693][ T9213] loop0: detected capacity change from 0 to 512 [ 368.140091][ T9213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.160377][ T9213] ext4 filesystem being mounted at /root/syzkaller-testdir938943910/syzkaller.1VsfY7/164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.373585][ T5490] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.518008][ T5166] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 368.548020][ T5141] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 368.611003][ T9229] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 369.335386][ T9233] loop1: detected capacity change from 0 to 64 [ 369.365135][ T9232] loop3: detected capacity change from 0 to 256 [ 369.375670][ T9232] exfat: Deprecated parameter 'utf8' [ 369.381325][ T9232] exfat: Deprecated parameter 'utf8' [ 369.409400][ T5141] usb 5-1: device descriptor read/64, error -71 [ 369.440222][ T5166] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.473161][ T5166] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.497528][ T5166] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.520187][ T5166] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.534190][ T5166] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.544130][ T9232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 369.544165][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.556301][ T5166] usb 1-1: Product: syz [ 369.556321][ T5166] usb 1-1: Manufacturer: syz [ 369.613767][ T5166] cdc_wdm 1-1:1.0: skipping garbage [ 369.626699][ T5166] cdc_wdm 1-1:1.0: skipping garbage [ 369.655452][ T5166] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 369.656026][ T29] audit: type=1800 audit(1717512307.872:163): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=1048672 res=0 errno=0 [ 369.693688][ T9232] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.699525][ T5166] cdc_wdm 1-1:1.0: Unknown control protocol [ 369.717919][ T5141] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 369.819281][ T5166] usb 1-1: USB disconnect, device number 15 [ 369.878138][ T5141] usb 5-1: device descriptor read/64, error -71 [ 369.998278][ T5141] usb usb5-port1: attempt power cycle [ 370.208109][ T5215] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 370.278681][ T932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 370.353460][ T5124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.391472][ T5215] usb 4-1: config 0 has no interfaces? [ 370.397181][ T5215] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 370.406325][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.415658][ T5141] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 370.424224][ T5215] usb 4-1: config 0 descriptor?? [ 370.456803][ T9250] loop0: detected capacity change from 0 to 1024 [ 370.458934][ T5141] usb 5-1: device descriptor read/8, error -71 [ 370.473766][ T9250] hfsplus: failed to load root directory [ 370.481428][ T932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.499186][ T932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 370.520253][ T932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.537891][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.545966][ T932] usb 3-1: Product: syz [ 370.560219][ T932] usb 3-1: Manufacturer: syz [ 370.567659][ T932] usb 3-1: SerialNumber: syz [ 370.597540][ T932] usb 3-1: selecting invalid altsetting 1 [ 370.752637][ T9253] loop0: detected capacity change from 0 to 8 [ 370.776727][ T9253] squashfs: Unknown parameter '{@'^' [ 370.787356][ T5141] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 370.980788][ T5141] usb 5-1: device descriptor read/8, error -71 [ 371.045334][ T932] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 371.051888][ T932] cdc_ncm 3-1:1.0: bind() failure [ 371.104163][ T932] usb 3-1: USB disconnect, device number 9 [ 371.150918][ T5141] usb usb5-port1: unable to enumerate USB device [ 371.467491][ T932] usb 4-1: USB disconnect, device number 11 [ 371.607562][ T9272] loop4: detected capacity change from 0 to 64 [ 371.864959][ T9276] netlink: 368 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.064307][ T9282] loop4: detected capacity change from 0 to 512 [ 372.107197][ T9282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.124425][ T9259] loop1: detected capacity change from 0 to 32768 [ 372.155616][ T9259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9259) [ 372.175490][ T9282] ext4 filesystem being mounted at /root/syzkaller-testdir2053319947/syzkaller.s6q2Gx/149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.198718][ T9259] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.218184][ T9259] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 372.231730][ T9259] BTRFS info (device loop1): using free-space-tree [ 372.480490][ T5141] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 372.686103][ T5141] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.705927][ T5141] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.733726][ T5141] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.769837][ T5141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.801514][ T5141] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.824453][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.846053][ T5141] usb 5-1: Product: syz [ 372.859563][ T5141] usb 5-1: Manufacturer: syz [ 372.881743][ T5141] cdc_wdm 5-1:1.0: skipping garbage [ 372.896144][ T5141] cdc_wdm 5-1:1.0: skipping garbage [ 372.914002][ T5141] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 372.933451][ T5141] cdc_wdm 5-1:1.0: Unknown control protocol [ 373.091967][ T5141] usb 5-1: USB disconnect, device number 19 [ 373.117938][ T58] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 373.218448][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.298118][ T58] usb 1-1: device descriptor read/64, error -71 [ 373.588261][ T58] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 373.638849][ T5976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.765841][ T58] usb 1-1: device descriptor read/64, error -71 [ 373.825912][ T9322] Process accounting resumed [ 373.876568][ T9326] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.894971][ T9326] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.917048][ T58] usb usb1-port1: attempt power cycle [ 374.078383][ T5141] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 374.272289][ T5141] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.284690][ T5141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 374.288175][ T5168] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 374.298320][ T5141] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.315540][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.323778][ T5141] usb 5-1: Product: syz [ 374.328088][ T5141] usb 5-1: Manufacturer: syz [ 374.332708][ T5141] usb 5-1: SerialNumber: syz [ 374.341338][ T5141] usb 5-1: selecting invalid altsetting 1 [ 374.377947][ T58] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 374.411603][ T58] usb 1-1: device descriptor read/8, error -71 [ 374.491105][ T5168] usb 3-1: config 0 has no interfaces? [ 374.496665][ T5168] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.505929][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.516461][ T5168] usb 3-1: config 0 descriptor?? [ 374.688149][ T58] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 374.731309][ T58] usb 1-1: device descriptor read/8, error -71 [ 374.759342][ T5141] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 374.765416][ T5141] cdc_ncm 5-1:1.0: bind() failure [ 374.780247][ T5141] usb 5-1: USB disconnect, device number 20 [ 374.869104][ T58] usb usb1-port1: unable to enumerate USB device [ 374.897546][ T5215] usb 3-1: USB disconnect, device number 10 [ 375.486190][ T9350] loop4: detected capacity change from 0 to 512 [ 375.525489][ T9350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.571640][ T9350] ext4 filesystem being mounted at /root/syzkaller-testdir2053319947/syzkaller.s6q2Gx/152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.908437][ T58] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 376.121929][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.131147][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.143326][ T5170] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 376.151097][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.160758][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.176728][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.186175][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.195174][ T58] usb 5-1: Product: syz [ 376.199560][ T58] usb 5-1: Manufacturer: syz [ 376.213947][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 376.219478][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 376.227354][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 376.235780][ T9367] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.245411][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 376.255886][ T9367] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.320924][ T9370] Process accounting resumed [ 376.367984][ T5170] usb 3-1: Using ep0 maxpacket: 32 [ 376.375363][ T5170] usb 3-1: no configurations [ 376.382614][ T5170] usb 3-1: can't read configurations, error -22 [ 376.425485][ T58] usb 5-1: USB disconnect, device number 21 [ 376.467380][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.558570][ T5170] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 376.759092][ T5170] usb 3-1: Using ep0 maxpacket: 32 [ 376.773890][ T5170] usb 3-1: no configurations [ 376.785123][ T5170] usb 3-1: can't read configurations, error -22 [ 376.801583][ T5170] usb usb3-port1: attempt power cycle [ 376.811134][ T932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 376.962057][ T5976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.011881][ T932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.031357][ T932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x94 has an invalid bInterval 0, changing to 7 [ 377.057778][ T932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.071923][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.087628][ T932] usb 2-1: Product: syz [ 377.091182][ T9379] loop4: detected capacity change from 0 to 1024 [ 377.095364][ T932] usb 2-1: Manufacturer: syz [ 377.105265][ T9379] hfsplus: unable to parse mount options [ 377.109133][ T932] usb 2-1: SerialNumber: syz [ 377.127036][ T932] usb 2-1: selecting invalid altsetting 1 [ 377.248312][ T5170] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 377.321974][ T5170] usb 3-1: Using ep0 maxpacket: 32 [ 377.330951][ T5170] usb 3-1: no configurations [ 377.335713][ T5170] usb 3-1: can't read configurations, error -22 [ 377.497979][ T5170] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 377.530718][ T932] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 377.536815][ T932] cdc_ncm 2-1:1.0: bind() failure [ 377.542645][ T5170] usb 3-1: Using ep0 maxpacket: 32 [ 377.553260][ T5170] usb 3-1: no configurations [ 377.561951][ T932] usb 2-1: USB disconnect, device number 8 [ 377.567925][ T5170] usb 3-1: can't read configurations, error -22 [ 377.567982][ T5172] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 377.577100][ T5170] usb usb3-port1: unable to enumerate USB device [ 377.587937][ T5215] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 377.737941][ T5215] usb 1-1: device descriptor read/64, error -71 [ 377.759480][ T5172] usb 4-1: config 0 has no interfaces? [ 377.765337][ T5172] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 377.777378][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.787128][ T5172] usb 4-1: config 0 descriptor?? [ 378.018116][ T5215] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 378.136287][ T5170] usb 4-1: USB disconnect, device number 12 [ 378.178922][ T5215] usb 1-1: device descriptor read/64, error -71 [ 378.329298][ T5215] usb usb1-port1: attempt power cycle [ 378.454001][ T9407] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.465954][ T9407] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.542273][ T9409] Process accounting resumed [ 378.726453][ T9414] loop1: detected capacity change from 0 to 512 [ 378.753060][ T9414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.765803][ T9414] ext4 filesystem being mounted at /root/syzkaller-testdir1333250674/syzkaller.4OgzOM/227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.788279][ T5215] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 378.818674][ T5215] usb 1-1: device descriptor read/8, error -71 [ 378.946965][ T9422] loop2: detected capacity change from 0 to 1024 [ 378.959198][ T9422] hfsplus: unable to parse mount options [ 378.995333][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.004830][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.048140][ T932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 379.098061][ T5215] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 379.209158][ T5215] usb 1-1: device descriptor read/8, error -71 [ 379.249875][ T932] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.256817][ T9436] loop3: detected capacity change from 0 to 64 [ 379.262387][ T932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.293052][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.316739][ T932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.346151][ T932] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.348235][ T5215] usb usb1-port1: unable to enumerate USB device [ 379.355758][ T932] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.382784][ T932] usb 2-1: Product: syz [ 379.393494][ T932] usb 2-1: Manufacturer: syz [ 379.411047][ T932] cdc_wdm 2-1:1.0: skipping garbage [ 379.416434][ T932] cdc_wdm 2-1:1.0: skipping garbage [ 379.424640][ T932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 379.434254][ T932] cdc_wdm 2-1:1.0: Unknown control protocol [ 379.458833][ T9440] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.474634][ T9440] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.585238][ T9442] Process accounting resumed [ 379.616820][ T5215] usb 2-1: USB disconnect, device number 9 [ 379.966400][ T9455] loop2: detected capacity change from 0 to 1024 [ 380.006481][ T9455] hfsplus: failed to load root directory [ 380.138031][ T5215] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 380.157045][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.179523][ T9455] loop2: detected capacity change from 0 to 8 [ 380.186496][ T9455] squashfs: Unknown parameter '{@'^' [ 380.298080][ T5123] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 380.348427][ T5215] usb 5-1: Using ep0 maxpacket: 32 [ 380.355733][ T5215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.366313][ T5215] usb 5-1: config 0 has no interfaces? [ 380.377763][ T9462] loop2: detected capacity change from 0 to 1024 [ 380.384509][ T5215] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 380.393787][ T5215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.403193][ T9462] hfsplus: unable to parse mount options [ 380.411571][ T5215] usb 5-1: config 0 descriptor?? [ 380.444230][ T9466] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.453929][ T9466] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.609794][ T9474] Process accounting resumed [ 380.933794][ T9489] loop1: detected capacity change from 0 to 1024 [ 380.999571][ T9489] hfsplus: failed to load root directory [ 381.128493][ T5123] Bluetooth: hci2: unexpected event for opcode 0x000a [ 381.209745][ T9489] loop1: detected capacity change from 0 to 8 [ 381.216563][ T9489] squashfs: Unknown parameter '{@'^' [ 381.373599][ T9502] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.401536][ T9502] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.510546][ T5168] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 381.547164][ T9505] loop1: detected capacity change from 0 to 1024 [ 381.562784][ T9505] hfsplus: unable to parse mount options [ 381.678206][ T5168] usb 4-1: device descriptor read/64, error -71 [ 381.720172][ T9509] Process accounting resumed [ 381.953605][ T9522] fuse: Bad value for 'group_id' [ 381.968914][ T5168] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 382.016335][ T5123] Bluetooth: hci3: unexpected event for opcode 0x000a [ 382.138183][ T5168] usb 4-1: device descriptor read/64, error -71 [ 382.268914][ T5168] usb usb4-port1: attempt power cycle [ 382.466425][ T9533] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.508574][ T9533] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.687920][ T5168] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 382.728629][ T5168] usb 4-1: device descriptor read/8, error -71 [ 382.866739][ T58] usb 5-1: USB disconnect, device number 22 [ 382.940336][ T9540] Process accounting resumed [ 383.008085][ T5168] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 383.048557][ T5168] usb 4-1: device descriptor read/8, error -71 [ 383.169312][ T5168] usb usb4-port1: unable to enumerate USB device [ 383.612580][ T9553] fuse: Bad value for 'group_id' [ 383.729393][ T5123] Bluetooth: hci1: unexpected event for opcode 0x000a [ 383.836828][ T9560] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.848169][ T9560] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.907355][ T9562] loop0: detected capacity change from 0 to 1024 [ 383.925100][ T9562] hfsplus: unable to parse mount options [ 384.239097][ T58] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 384.325509][ T9575] Process accounting resumed [ 384.448179][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 384.462856][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.498006][ T58] usb 2-1: config 0 has no interfaces? [ 384.503634][ T58] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 384.540840][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.560246][ T58] usb 2-1: config 0 descriptor?? [ 384.780341][ T29] audit: type=1800 audit(1717512323.012:164): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 384.881352][ T9585] fuse: Bad value for 'group_id' [ 385.091922][ T9593] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.107103][ T9593] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.254986][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 385.658116][ T932] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 385.806468][ T9607] loop4: detected capacity change from 0 to 4096 [ 385.817931][ T932] usb 3-1: device descriptor read/64, error -71 [ 385.832625][ T9607] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 385.904862][ T9607] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 385.922796][ T9609] Process accounting resumed [ 386.073971][ T9611] loop0: detected capacity change from 0 to 1024 [ 386.089852][ T9611] hfsplus: unable to parse mount options [ 386.098059][ T932] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 386.265266][ T932] usb 3-1: device descriptor read/64, error -71 [ 386.348435][ T9623] fuse: Bad value for 'user_id' [ 386.399310][ T932] usb usb3-port1: attempt power cycle [ 386.827942][ T932] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 386.869428][ T932] usb 3-1: device descriptor read/8, error -71 [ 387.021854][ T5215] usb 2-1: USB disconnect, device number 10 [ 387.030391][ T9632] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.064882][ T9632] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.158083][ T932] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 387.198580][ T932] usb 3-1: device descriptor read/8, error -71 [ 387.328606][ T932] usb usb3-port1: unable to enumerate USB device [ 387.917357][ T9648] Process accounting resumed [ 387.934304][ T9645] loop0: detected capacity change from 0 to 4096 [ 387.970236][ T9645] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 388.063630][ T9645] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 388.126351][ T9650] loop4: detected capacity change from 0 to 8 [ 388.516921][ T9654] fuse: Bad value for 'user_id' [ 388.589310][ T9650] loop4: detected capacity change from 0 to 40427 [ 388.600732][ T9650] F2FS-fs (loop4): invalid crc value [ 388.609335][ T9650] F2FS-fs (loop4): Found nat_bits in checkpoint [ 388.620894][ T9657] loop1: detected capacity change from 0 to 16 [ 388.643248][ T9658] loop2: detected capacity change from 0 to 1024 [ 388.665937][ T9658] hfsplus: unable to parse mount options [ 388.672989][ T9657] erofs: (device loop1): mounted with root inode @ nid 36. [ 388.686669][ T9650] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 388.842728][ T29] audit: type=1326 audit(1717512327.062:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910307cf69 code=0x0 [ 388.955945][ T9667] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.967997][ T9667] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.050262][ T5170] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 389.252395][ T5170] usb 1-1: Using ep0 maxpacket: 32 [ 389.262326][ T5170] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.295583][ T5170] usb 1-1: config 0 has no interfaces? [ 389.304708][ T5170] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 389.324265][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.356704][ T5170] usb 1-1: config 0 descriptor?? [ 389.492322][ T9676] Process accounting resumed [ 389.818416][ T9685] syz-executor.3[9685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.818563][ T9685] syz-executor.3[9685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.887184][ T9681] loop2: detected capacity change from 0 to 4096 [ 389.905683][ T9685] €Â: renamed from pim6reg1 [ 389.926943][ T9681] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 390.014153][ T9681] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 390.290667][ T9692] fuse: Bad value for 'user_id' [ 390.387996][ T5215] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 390.401684][ T9696] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.426578][ T9696] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.608304][ T5215] usb 4-1: Using ep0 maxpacket: 8 [ 390.623245][ T5215] usb 4-1: no configurations [ 390.635870][ T5215] usb 4-1: can't read configurations, error -22 [ 390.769082][ T9701] loop1: detected capacity change from 0 to 8 [ 390.808115][ T5215] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 390.825106][ T9703] loop2: detected capacity change from 0 to 1024 [ 390.833093][ T9703] hfsplus: unable to parse mount options [ 390.985766][ T29] audit: type=1326 audit(1717512329.212:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910307cf69 code=0x0 [ 391.019912][ T5215] usb 4-1: Using ep0 maxpacket: 8 [ 391.039008][ T5215] usb 4-1: no configurations [ 391.059769][ T5215] usb 4-1: can't read configurations, error -22 [ 391.090040][ T5215] usb usb4-port1: attempt power cycle [ 391.180457][ T9701] loop1: detected capacity change from 0 to 40427 [ 391.201519][ T9701] F2FS-fs (loop1): invalid crc value [ 391.211437][ T9701] F2FS-fs (loop1): Found nat_bits in checkpoint [ 391.267569][ T9701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 391.540694][ T5215] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 391.588288][ T5215] usb 4-1: Using ep0 maxpacket: 8 [ 391.598583][ T5215] usb 4-1: no configurations [ 391.609011][ T5215] usb 4-1: can't read configurations, error -22 [ 391.769576][ T5215] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 391.770686][ T58] usb 1-1: USB disconnect, device number 24 [ 391.844911][ T5215] usb 4-1: Using ep0 maxpacket: 8 [ 391.882221][ T5215] usb 4-1: no configurations [ 391.889481][ T5215] usb 4-1: can't read configurations, error -22 [ 391.896864][ T5215] usb usb4-port1: unable to enumerate USB device [ 392.126260][ T9717] loop2: detected capacity change from 0 to 4096 [ 392.147564][ T9717] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 392.222944][ T9719] Process accounting resumed [ 392.229655][ T9717] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 392.270761][ T58] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 392.462654][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 392.475980][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.489571][ T58] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 392.503867][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 392.512692][ T58] usb 1-1: SerialNumber: syz [ 392.520124][ T58] usb 1-1: config 0 descriptor?? [ 392.522319][ T9725] fuse: Bad value for 'user_id' [ 392.737955][ T9713] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 393.722411][ T9739] loop3: detected capacity change from 0 to 1024 [ 393.742817][ T9739] hfsplus: unable to parse mount options [ 393.966708][ T29] audit: type=1326 audit(1717512332.192:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa5d47cf69 code=0x0 [ 394.220299][ T9733] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 394.293901][ T9745] veth0_vlan: entered allmulticast mode [ 394.337391][ T5170] usb 1-1: USB disconnect, device number 25 [ 394.406510][ T9746] veth0_vlan: left promiscuous mode [ 394.440139][ T9746] veth0_vlan: entered promiscuous mode [ 394.601566][ T9754] Process accounting resumed [ 394.668368][ T932] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 394.691446][ T9758] fuse: Bad value for 'user_id' [ 394.707021][ T9756] loop1: detected capacity change from 0 to 4096 [ 394.716083][ T9756] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 394.752096][ T9756] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 394.868880][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 394.890528][ T932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.929591][ T932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.956206][ T932] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 394.978763][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.990717][ T932] usb 3-1: config 0 descriptor?? [ 395.401345][ T9778] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 396.058272][ T5168] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 396.248019][ T5168] usb 2-1: Using ep0 maxpacket: 8 [ 396.258723][ T5168] usb 2-1: no configurations [ 396.265842][ T5168] usb 2-1: can't read configurations, error -22 [ 396.438071][ T5168] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 396.456628][ T9776] loop3: detected capacity change from 0 to 32768 [ 396.467910][ T9776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9776) [ 396.485764][ T9776] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 396.496257][ T9776] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 396.505535][ T9776] BTRFS info (device loop3): using free-space-tree [ 396.658078][ T5168] usb 2-1: Using ep0 maxpacket: 8 [ 396.667940][ T5168] usb 2-1: no configurations [ 396.672613][ T5168] usb 2-1: can't read configurations, error -22 [ 396.693132][ T5168] usb usb2-port1: attempt power cycle [ 396.711071][ T5126] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 396.754641][ T9801] Process accounting resumed [ 396.902306][ T9803] fuse: Bad value for 'user_id' [ 397.090515][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 397.128067][ T5168] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 397.169641][ T5168] usb 2-1: Using ep0 maxpacket: 8 [ 397.177984][ T5168] usb 2-1: no configurations [ 397.182600][ T5168] usb 2-1: can't read configurations, error -22 [ 397.308255][ T932] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 397.357981][ T5168] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 397.383555][ T5215] usb 3-1: USB disconnect, device number 19 [ 397.401159][ T5168] usb 2-1: Using ep0 maxpacket: 8 [ 397.432772][ T5168] usb 2-1: no configurations [ 397.437421][ T5168] usb 2-1: can't read configurations, error -22 [ 397.667797][ T5168] usb usb2-port1: unable to enumerate USB device [ 397.698083][ T932] usb 1-1: Using ep0 maxpacket: 8 [ 397.710242][ T932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.727614][ T932] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 397.737009][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 397.745353][ T932] usb 1-1: SerialNumber: syz [ 397.751742][ T932] usb 1-1: config 0 descriptor?? [ 397.908760][ T9828] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 398.260907][ T9812] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 398.418040][ T5141] usb 1-1: USB disconnect, device number 26 [ 398.663528][ T9837] Process accounting resumed [ 398.794343][ T9840] fuse: Unknown parameter 'grou0x0000000000000000' [ 398.999377][ T9845] hub 6-0:1.0: USB hub found [ 399.029445][ T9845] hub 6-0:1.0: 1 port detected [ 399.257975][ T9851] loop2: detected capacity change from 0 to 512 [ 399.436304][ T9851] EXT4-fs (loop2): Test dummy encryption mode enabled [ 399.458232][ T9851] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 399.521009][ T9851] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 399.540833][ T9851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.654434][ T5490] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.088301][ T5215] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 400.131102][ T9873] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 400.324495][ T9863] syz-executor.1 (9863) used greatest stack depth: 17720 bytes left [ 400.497955][ T5215] usb 1-1: Using ep0 maxpacket: 8 [ 400.626727][ T5215] usb 1-1: no configurations [ 400.634059][ T5215] usb 1-1: can't read configurations, error -22 [ 400.784193][ T9877] fuse: Unknown parameter 'grou0x0000000000000000' [ 400.788025][ T9875] Process accounting resumed [ 400.827923][ T5215] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 401.021219][ T5215] usb 1-1: Using ep0 maxpacket: 8 [ 401.066067][ T5215] usb 1-1: no configurations [ 401.071206][ T5215] usb 1-1: can't read configurations, error -22 [ 401.085854][ T9888] loop2: detected capacity change from 0 to 256 [ 401.094520][ T5215] usb usb1-port1: attempt power cycle [ 401.099441][ T9888] exfat: Deprecated parameter 'utf8' [ 401.105424][ T9888] exfat: Deprecated parameter 'utf8' [ 401.111311][ T9888] exfat: Deprecated parameter 'utf8' [ 401.117200][ T9888] exfat: Deprecated parameter 'utf8' [ 401.142080][ T9888] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 401.208168][ T5168] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 401.398147][ T5168] usb 5-1: Using ep0 maxpacket: 8 [ 401.409496][ T5168] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.425680][ T5168] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 401.435117][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 401.444727][ T5168] usb 5-1: SerialNumber: syz [ 401.453433][ T5168] usb 5-1: config 0 descriptor?? [ 401.518113][ T5215] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 401.562183][ T5215] usb 1-1: Using ep0 maxpacket: 8 [ 401.571693][ T5215] usb 1-1: no configurations [ 401.576699][ T5215] usb 1-1: can't read configurations, error -22 [ 401.635659][ T2843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.664479][ T9882] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 401.682420][ T5172] usb 5-1: USB disconnect, device number 23 [ 401.749492][ T5215] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 401.773848][ T2843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.799476][ T5215] usb 1-1: Using ep0 maxpacket: 8 [ 401.813891][ T5215] usb 1-1: no configurations [ 401.828209][ T5215] usb 1-1: can't read configurations, error -22 [ 401.839474][ T5215] usb usb1-port1: unable to enumerate USB device [ 401.907408][ T2843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.016874][ T2843] team0: Port device netdevsim0 removed [ 402.040905][ T2843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.081389][ T9902] fuse: Unknown parameter 'grou0x0000000000000000' [ 402.207534][ T9904] Process accounting resumed [ 402.321388][ T2843] bridge_slave_1: left allmulticast mode [ 402.334533][ T2843] bridge_slave_1: left promiscuous mode [ 402.341533][ T2843] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.530296][ T2843] bridge_slave_0: left allmulticast mode [ 402.658408][ T2843] bridge_slave_0: left promiscuous mode [ 402.991337][ T2843] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.258977][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.272300][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.289021][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.299598][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.307538][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 403.315799][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.481750][ T9926] loop4: detected capacity change from 0 to 8 [ 403.904025][ T9926] loop4: detected capacity change from 0 to 40427 [ 403.917192][ T9926] F2FS-fs (loop4): invalid crc value [ 403.928557][ T9926] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.997289][ T9926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 404.260115][ T2843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.297373][ T2843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.313215][ T2843] bond0 (unregistering): Released all slaves [ 404.337274][ T9912] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 404.580828][ T9941] fuse: Unknown parameter 'group_i0x0000000000000000' [ 404.948122][ T5141] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 405.011808][ T2843] hsr_slave_0: left promiscuous mode [ 405.020457][ T2843] hsr_slave_1: left promiscuous mode [ 405.029977][ T2843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.085445][ T2843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.118140][ T2843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.126350][ T2843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.178114][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 405.187484][ T2843] veth1_macvtap: left promiscuous mode [ 405.196031][ T5141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.207419][ T2843] veth0_macvtap: left promiscuous mode [ 405.213335][ T2843] veth1_vlan: left promiscuous mode [ 405.230526][ T2843] veth0_vlan: left promiscuous mode [ 405.231662][ T5141] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 405.257957][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 405.266230][ T5141] usb 1-1: SerialNumber: syz [ 405.305144][ T5141] usb 1-1: config 0 descriptor?? [ 405.389944][ T5123] Bluetooth: hci3: command tx timeout [ 405.526078][ T9945] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 406.064513][ T9966] loop1: detected capacity change from 0 to 8 [ 406.226697][ T2843] team0 (unregistering): Port device team_slave_1 removed [ 406.293171][ T2843] team0 (unregistering): Port device team_slave_0 removed [ 406.530036][ T9966] loop1: detected capacity change from 0 to 40427 [ 406.543950][ T9966] F2FS-fs (loop1): invalid crc value [ 406.553049][ T9966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 406.624224][ T9966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 406.730848][ T9961] loop4: detected capacity change from 0 to 32768 [ 406.762098][ T9961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9961) [ 406.795493][ T9961] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.806147][ T9961] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 406.815175][ T9961] BTRFS info (device loop4): using free-space-tree [ 407.080427][ T5123] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 407.109075][ T5123] Bluetooth: hci2: Injecting HCI hardware error event [ 407.125360][ T5131] Bluetooth: hci2: hardware error 0x00 [ 407.467967][ T5123] Bluetooth: hci3: command tx timeout [ 407.754919][ T9961] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 407.956672][ T5976] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.124950][ T9920] chnl_net:caif_netlink_parms(): no params data found [ 408.164124][ T9987] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 408.439633][ T5215] usb 1-1: USB disconnect, device number 31 [ 408.498186][T10001] fuse: Unknown parameter 'group_i0x0000000000000000' [ 409.428012][ T5131] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 409.936219][T10017] loop0: detected capacity change from 0 to 1024 [ 409.948946][T10017] ext2: Unknown parameter 'dont_appraise' [ 409.956505][ T5131] Bluetooth: hci3: command tx timeout [ 410.251446][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.266849][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.277735][ T9920] bridge_slave_0: entered allmulticast mode [ 410.293111][T10012] overlayfs: overlapping lowerdir path [ 410.336368][ T9920] bridge_slave_0: entered promiscuous mode [ 410.384608][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.397001][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.404445][ T9920] bridge_slave_1: entered allmulticast mode [ 410.413132][ T9920] bridge_slave_1: entered promiscuous mode [ 410.772085][ T9920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.855181][ T9920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.917456][T10025] loop3: detected capacity change from 0 to 8 [ 410.995626][ T9920] team0: Port device team_slave_0 added [ 411.036743][ T9920] team0: Port device team_slave_1 added [ 411.306248][T10025] loop3: detected capacity change from 0 to 40427 [ 411.328975][T10025] F2FS-fs (loop3): invalid crc value [ 411.343960][T10025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 411.396741][T10025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 411.627133][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.635271][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.663098][ T9920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.691233][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.698330][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.823461][ T9920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.034504][ T9920] hsr_slave_0: entered promiscuous mode [ 412.053687][ T9920] hsr_slave_1: entered promiscuous mode [ 412.072082][ T9920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.097948][ T5131] Bluetooth: hci3: command tx timeout [ 412.222768][ T9920] Cannot create hsr debugfs directory [ 412.541530][T10040] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 412.719353][ T5131] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 412.728180][ T5131] Bluetooth: hci1: Injecting HCI hardware error event [ 412.739043][ T5123] Bluetooth: hci1: hardware error 0x00 [ 412.883501][T10027] loop4: detected capacity change from 0 to 32768 [ 412.981754][T10027] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 413.027142][T10036] loop3: detected capacity change from 0 to 4096 [ 413.063553][T10036] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 413.116411][T10027] XFS (loop4): Ending clean mount [ 413.134929][T10027] XFS (loop4): Quotacheck needed: Please wait. [ 413.214295][T10027] XFS (loop4): Quotacheck: Done. [ 413.438232][ T5215] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 413.647961][ T5215] usb 1-1: Using ep0 maxpacket: 8 [ 413.657481][ T5215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.677083][ T5215] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 413.692963][ T5215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 413.701299][ T5215] usb 1-1: SerialNumber: syz [ 413.710231][ T5215] usb 1-1: config 0 descriptor?? [ 413.763428][ T9920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.786761][ T9920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.811954][ T9920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.831892][ T5976] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 413.846806][ T9920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.961497][ T5172] usb 1-1: USB disconnect, device number 32 [ 414.092295][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.126162][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.144940][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.152247][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.175223][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.182460][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.656788][T10073] loop0: detected capacity change from 0 to 8 [ 414.723600][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.848131][ T5123] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 415.062158][T10077] loop0: detected capacity change from 0 to 40427 [ 415.094724][T10077] F2FS-fs (loop0): invalid crc value [ 415.124685][T10077] F2FS-fs (loop0): Found nat_bits in checkpoint [ 415.162910][ T9920] veth0_vlan: entered promiscuous mode [ 415.200861][T10077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 415.387100][ T9920] veth1_vlan: entered promiscuous mode [ 415.497544][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.550370][ T9920] veth0_macvtap: entered promiscuous mode [ 415.648819][ T9920] veth1_macvtap: entered promiscuous mode [ 415.702183][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.867665][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.878176][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.888839][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.900193][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.010057][T10090] loop4: detected capacity change from 0 to 512 [ 416.271352][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.538974][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.575431][T10090] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 416.602661][T10090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 416.611451][T10090] EXT4-fs (loop4): orphan cleanup on readonly fs [ 416.623663][T10090] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set [ 416.640787][T10090] EXT4-fs (loop4): Remounting filesystem read-only [ 416.647783][T10090] EXT4-fs (loop4): 1 truncate cleaned up [ 416.657253][T10090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 417.057545][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.102622][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.129970][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.160063][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.180737][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.192269][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.206928][ T5976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 417.207278][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.246935][ T9920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.256044][ T9920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.277557][ T9920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.301466][ T9920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.579360][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.611106][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.771876][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.785567][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.303902][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 418.514704][T10123] loop2: detected capacity change from 0 to 8 [ 418.548128][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 418.562514][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.611432][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 418.631145][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 418.654381][ T45] usb 5-1: SerialNumber: syz [ 418.860371][T10123] loop2: detected capacity change from 0 to 40427 [ 418.878105][ T45] usb 5-1: config 0 descriptor?? [ 418.888433][T10123] F2FS-fs (loop2): invalid crc value [ 418.897184][T10123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 418.957965][T10123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 419.163195][T10117] loop0: detected capacity change from 0 to 32768 [ 419.211695][ T45] usb 5-1: USB disconnect, device number 24 [ 419.256330][T10117] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 419.460927][T10117] XFS (loop0): Ending clean mount [ 419.611738][T10142] loop1: detected capacity change from 0 to 512 [ 419.651390][T10142] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 419.681311][T10117] XFS (loop0): Quotacheck needed: Please wait. [ 419.743308][T10117] XFS (loop0): Quotacheck: Done. [ 419.886775][T10142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 419.897632][T10142] EXT4-fs (loop1): orphan cleanup on readonly fs [ 419.919156][T10142] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 419.938707][T10142] EXT4-fs (loop1): Remounting filesystem read-only [ 419.946992][T10142] EXT4-fs (loop1): 1 truncate cleaned up [ 419.959824][T10142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 420.639755][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 420.666758][ T5124] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 420.988335][T10156] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 422.030240][T10167] loop1: detected capacity change from 0 to 256 [ 422.071968][T10167] exfat: Deprecated parameter 'utf8' [ 422.279308][T10167] exfat: Deprecated parameter 'utf8' [ 422.355876][T10167] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 422.435156][ T29] audit: type=1800 audit(1717512360.662:168): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048683 res=0 errno=0 [ 422.457560][T10167] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.879531][T10196] fuse: Bad value for 'fd' [ 423.937983][ T5172] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 423.970768][T10199] loop0: detected capacity change from 0 to 64 [ 424.138008][ T5172] usb 4-1: Using ep0 maxpacket: 8 [ 424.162633][ T5172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.182192][ T5172] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 424.197972][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 424.206157][ T5172] usb 4-1: SerialNumber: syz [ 424.238804][ T5172] usb 4-1: config 0 descriptor?? [ 424.521832][ T5172] usb 4-1: USB disconnect, device number 21 [ 424.566214][T10191] loop4: detected capacity change from 0 to 32768 [ 424.636330][T10191] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.696662][T10191] XFS (loop4): Ending clean mount [ 424.714367][T10191] XFS (loop4): Quotacheck needed: Please wait. [ 424.733164][T10218] loop2: detected capacity change from 0 to 4096 [ 424.742028][T10218] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 424.781630][T10191] XFS (loop4): Quotacheck: Done. [ 424.786846][T10218] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 424.974147][ T5976] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 425.261125][T10231] loop1: detected capacity change from 0 to 1024 [ 425.266965][T10229] loop3: detected capacity change from 0 to 256 [ 425.318500][T10229] exfat: Deprecated parameter 'utf8' [ 425.338921][T10229] exfat: Deprecated parameter 'utf8' [ 425.377276][T10231] hfsplus: failed to load root directory [ 425.430425][T10236] loop0: detected capacity change from 0 to 64 [ 425.446109][T10229] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 425.578738][T10231] loop1: detected capacity change from 0 to 8 [ 425.585690][T10231] squashfs: Unknown parameter '{@'^' [ 425.599220][ T29] audit: type=1800 audit(1717512363.822:169): pid=10229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=1048685 res=0 errno=0 [ 425.636616][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.892923][T10246] loop1: detected capacity change from 0 to 4096 [ 426.001969][T10246] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 426.178664][T10254] loop4: detected capacity change from 0 to 8 [ 426.202878][T10246] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 426.215942][T10255] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 426.600329][T10254] loop4: detected capacity change from 0 to 40427 [ 426.615827][T10254] F2FS-fs (loop4): invalid crc value [ 426.625620][T10254] F2FS-fs (loop4): Found nat_bits in checkpoint [ 426.683774][T10254] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 426.738033][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 426.977878][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 426.985892][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.032253][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 427.051735][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 427.065650][ T45] usb 4-1: SerialNumber: syz [ 427.103200][ T45] usb 4-1: config 0 descriptor?? [ 427.335252][ T45] usb 4-1: USB disconnect, device number 22 [ 427.801191][T10280] loop4: detected capacity change from 0 to 64 [ 427.885172][T10276] loop1: detected capacity change from 0 to 32768 [ 427.910031][T10276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10276) [ 427.962199][T10276] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 427.979930][T10276] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 427.990883][T10276] BTRFS info (device loop1): using free-space-tree [ 428.006761][T10282] loop3: detected capacity change from 0 to 1024 [ 428.029247][T10282] hfsplus: failed to load root directory [ 428.134938][T10282] loop3: detected capacity change from 0 to 8 [ 428.141978][T10282] squashfs: Unknown parameter '{@'^' [ 428.162807][T10276] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 428.238201][ T29] audit: type=1326 audit(1717512366.462:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dbea7cf69 code=0x0 [ 428.277725][ T5115] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 428.414440][T10310] loop0: detected capacity change from 0 to 256 [ 428.431065][T10310] exfat: Deprecated parameter 'utf8' [ 428.441390][T10310] exfat: Deprecated parameter 'utf8' [ 428.524552][T10310] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 428.608906][ T29] audit: type=1800 audit(1717512366.842:171): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=1048687 res=0 errno=0 [ 428.648284][T10310] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 430.102773][T10323] loop1: detected capacity change from 0 to 8 [ 430.380165][T10308] loop3: detected capacity change from 0 to 40427 [ 430.407512][T10308] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 430.422115][T10308] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 430.453183][T10308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 430.551628][T10323] loop1: detected capacity change from 0 to 40427 [ 430.565751][T10323] F2FS-fs (loop1): invalid crc value [ 430.592824][T10323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 430.631238][T10308] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 430.666309][T10323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 430.677942][T10308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 430.901752][T10340] loop2: detected capacity change from 0 to 64 [ 431.125804][T10344] loop2: detected capacity change from 0 to 1024 [ 431.141096][T10344] hfsplus: failed to load root directory [ 431.161118][ T5141] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 431.226130][T10344] loop2: detected capacity change from 0 to 8 [ 431.233502][T10344] squashfs: Unknown parameter '{@'^' [ 431.308356][ T45] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 431.348070][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 431.364847][ T5141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.384967][ T5141] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 431.397692][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 431.412577][ T5141] usb 1-1: SerialNumber: syz [ 431.429509][ T5141] usb 1-1: config 0 descriptor?? [ 431.507981][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 431.516329][T10350] process 'syz-executor.2' launched './file1' with NULL argv: empty string added [ 431.518539][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.562824][ T45] usb 5-1: New USB device found, idVendor=bbd1, idProduct=dad6, bcdDevice=20.9d [ 431.580899][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 431.600246][ T45] usb 5-1: SerialNumber: syz [ 431.620710][ T45] usb 5-1: config 0 descriptor?? [ 431.640300][ T45] usb 5-1: Found UVC 0.00 device (bbd1:dad6) [ 431.647241][ T45] usb 5-1: No valid video chain found. [ 431.649670][ T5141] usb 1-1: USB disconnect, device number 33 [ 431.842934][ T45] usb 5-1: USB disconnect, device number 25 [ 431.937940][ T5168] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 432.132045][ T5168] usb 4-1: Using ep0 maxpacket: 8 [ 432.148975][ T5168] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 432.157571][ T5168] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 432.172749][ T5168] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 432.191668][ T5168] usb 4-1: config 250 has no interface number 0 [ 432.205951][ T5168] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 432.233248][ T5168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 432.250276][ T5168] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.278709][ T5168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 432.296467][ T5168] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 432.326262][ T5168] usb 4-1: config 250 interface 228 has no altsetting 0 [ 432.343719][ T5168] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 432.360002][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 432.397201][ T5168] usb 4-1: Product: syz [ 432.414063][ T5168] usb 4-1: SerialNumber: syz [ 432.433233][ T5168] hub 4-1:250.228: bad descriptor, ignoring hub [ 432.445136][T10359] loop0: detected capacity change from 0 to 256 [ 432.451682][ T5168] hub 4-1:250.228: probe with driver hub failed with error -5 [ 432.472283][T10359] exfat: Deprecated parameter 'utf8' [ 432.488939][T10359] exfat: Deprecated parameter 'utf8' [ 432.544505][T10359] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 432.627549][T10365] fuse: Bad value for 'user_id' [ 432.806034][ T5168] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 433.643029][ T5168] usb 4-1: USB disconnect, device number 23 [ 433.654294][ T5168] usblp0: removed [ 433.685262][ T29] audit: type=1800 audit(1717512371.912:172): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=1048689 res=0 errno=0 [ 433.778243][T10359] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.062793][T10378] loop4: detected capacity change from 0 to 8 [ 434.144092][T10380] loop0: detected capacity change from 0 to 1024 [ 434.170768][T10380] hfsplus: failed to load root directory [ 434.188055][ T5168] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 434.447963][T10378] loop4: detected capacity change from 0 to 40427 [ 434.487914][ T5168] usb 4-1: Using ep0 maxpacket: 8 [ 434.493029][T10378] F2FS-fs (loop4): invalid crc value [ 434.505003][T10378] F2FS-fs (loop4): Found nat_bits in checkpoint [ 434.595400][T10378] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 434.616401][ T5168] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 434.666544][ T5168] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 434.789621][T10380] loop0: detected capacity change from 0 to 8 [ 434.796795][T10380] squashfs: Unknown parameter '{@'^' [ 434.828035][ T5168] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 434.837121][ T5168] usb 4-1: config 250 has no interface number 0 [ 434.891796][ T5168] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 434.933512][ T5168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 434.964648][ T5168] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.998419][ T5168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 435.040204][ T5168] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 435.077777][ T5168] usb 4-1: config 250 interface 228 has no altsetting 0 [ 435.093800][ T5168] usb 4-1: string descriptor 0 read error: -71 [ 435.107381][ T5168] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 435.125360][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 435.146411][ T5168] usb 4-1: can't set config #250, error -71 [ 435.176584][ T5168] usb 4-1: USB disconnect, device number 24 [ 435.182578][ T5172] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 435.317438][T10371] loop2: detected capacity change from 0 to 40427 [ 435.329355][T10371] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 435.337149][T10371] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 435.357962][ T5172] usb 1-1: Using ep0 maxpacket: 8 [ 435.374445][ T5172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.388210][ T5171] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 435.409343][ T5172] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 435.419716][T10371] F2FS-fs (loop2): Found nat_bits in checkpoint [ 435.428858][ T5172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 435.437051][ T5172] usb 1-1: SerialNumber: syz [ 435.460275][ T5172] usb 1-1: config 0 descriptor?? [ 435.531273][T10371] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 435.542042][T10371] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 435.578036][ T5171] usb 2-1: Using ep0 maxpacket: 8 [ 435.593558][ T5171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.635808][ T5171] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 435.648713][T10389] loop3: detected capacity change from 0 to 32768 [ 435.657923][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.661487][T10389] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10389) [ 435.685120][ T5171] usb 2-1: config 0 descriptor?? [ 435.686222][ T5172] usb 1-1: USB disconnect, device number 34 [ 435.705747][T10389] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 435.711840][ T5171] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 435.716542][T10389] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 435.744079][T10389] BTRFS info (device loop3): using free-space-tree [ 435.805899][T10389] BTRFS info (device loop3): checking UUID tree [ 435.838354][T10415] fuse: Bad value for 'fd' [ 436.144553][ T5126] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.077133][ T5171] gspca_vc032x: reg_w err -110 [ 437.098223][ T5171] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 437.891355][T10432] Process accounting resumed [ 437.997959][ T5171] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 438.229019][ T5171] usb 1-1: Using ep0 maxpacket: 16 [ 438.246244][ T5171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 438.284871][ T5171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 438.298537][ T5171] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 438.312166][ T5171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.322775][ T5171] usb 1-1: config 0 descriptor?? [ 438.415858][ T45] usb 2-1: USB disconnect, device number 15 [ 438.742290][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.774427][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.826112][ T5171] hid (null): invalid report_size 1601069424 [ 438.884478][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 438.916743][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 438.926528][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 438.934672][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 438.942562][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.000128][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.042485][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.077530][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.110710][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.131467][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.144379][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.154584][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.162602][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.186576][T10438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.235366][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.263847][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.298065][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.328516][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.350489][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.364687][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.385563][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.419894][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.443152][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.453682][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.490860][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.517197][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.562247][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.608846][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.653041][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.690551][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.724352][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.750158][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.771781][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.808129][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.892070][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.904969][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.937904][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.961864][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 439.990280][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.030123][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.050108][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.070239][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.096087][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.117326][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.142356][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.162572][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.185984][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.210808][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.235050][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.259392][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.279559][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.287558][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.325434][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.350860][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.379922][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.394173][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.407709][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.425308][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.431819][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.439114][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.446607][ T5171] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 440.476393][ T5171] hid-generic 0003:0158:0100.0005: invalid report_size 1601069424 [ 440.512016][ T5171] hid-generic 0003:0158:0100.0005: item 0 4 1 7 parsing failed [ 440.541694][ T5171] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 440.587639][ T5171] usb 1-1: USB disconnect, device number 35 [ 440.695683][T10465] Process accounting resumed [ 440.839766][T10469] loop0: detected capacity change from 0 to 512 [ 440.905499][T10469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.919130][T10471] loop4: detected capacity change from 0 to 256 [ 440.928409][T10469] ext4 filesystem being mounted at /root/syzkaller-testdir938943910/syzkaller.1VsfY7/228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.954734][T10471] exfat: Deprecated parameter 'utf8' [ 440.965141][T10451] loop3: detected capacity change from 0 to 40427 [ 440.983397][T10471] exfat: Deprecated parameter 'utf8' [ 441.015175][T10471] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 441.038984][T10451] F2FS-fs (loop3): Found nat_bits in checkpoint [ 441.140219][ T29] audit: type=1800 audit(1717512379.362:173): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1048691 res=0 errno=0 [ 441.141124][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 441.202571][T10451] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 441.223699][T10457] loop1: detected capacity change from 0 to 32768 [ 441.238152][ T5171] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 441.254087][T10457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10457) [ 441.295871][ T5126] syz-executor.3: attempt to access beyond end of device [ 441.295871][ T5126] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.312032][ T5126] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 441.322338][T10457] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.345292][T10457] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 441.367920][T10457] BTRFS info (device loop1): using free-space-tree [ 441.441082][ T5171] usb 1-1: device descriptor read/64, error -71 [ 441.470868][T10457] BTRFS info (device loop1): checking UUID tree [ 441.729417][ T5171] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 441.759609][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.919282][ T5171] usb 1-1: device descriptor read/64, error -71 [ 442.072502][ T5171] usb usb1-port1: attempt power cycle [ 442.527989][ T5171] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 442.590914][ T5171] usb 1-1: device descriptor read/8, error -71 [ 442.858020][ T5171] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 442.913186][ T5171] usb 1-1: device descriptor read/8, error -71 [ 442.958452][T10515] loop2: detected capacity change from 0 to 4096 [ 442.984720][T10515] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 443.050151][ T5171] usb usb1-port1: unable to enumerate USB device [ 443.072395][T10515] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 443.237655][T10525] Process accounting resumed [ 443.398053][T10528] loop2: detected capacity change from 0 to 256 [ 443.406312][T10528] exfat: Deprecated parameter 'utf8' [ 443.420246][T10528] exfat: Deprecated parameter 'utf8' [ 443.442612][T10528] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 443.551595][ T29] audit: type=1800 audit(1717512381.782:174): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1048693 res=0 errno=0 [ 443.575678][T10528] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.872681][ T5124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.007975][ T5141] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 444.066367][T10523] loop3: detected capacity change from 0 to 40427 [ 444.097112][T10523] F2FS-fs (loop3): Found nat_bits in checkpoint [ 444.221895][ T5141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.239965][ T5141] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.256938][ T5141] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.275245][T10523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 444.308724][ T5141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.323148][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.354127][ T5141] usb 2-1: Product: syz [ 444.363123][ T5141] usb 2-1: Manufacturer: syz [ 444.377871][ T5141] usb 2-1: SerialNumber: syz [ 444.401640][ T5126] syz-executor.3: attempt to access beyond end of device [ 444.401640][ T5126] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 444.419817][ T5141] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 444.432940][ T5141] cdc_ncm 2-1:1.0: bind() failure [ 444.438855][ T5126] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 445.306337][T10560] loop4: detected capacity change from 0 to 4096 [ 445.323652][T10560] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 445.410845][T10560] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 445.822367][T10568] loop4: detected capacity change from 0 to 512 [ 445.879387][T10568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.948388][T10568] ext4 filesystem being mounted at /root/syzkaller-testdir2053319947/syzkaller.s6q2Gx/231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.288226][ T5141] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 446.458580][ T5141] usb 5-1: device descriptor read/64, error -71 [ 446.729772][ T5141] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 446.746059][ T45] usb 2-1: USB disconnect, device number 16 [ 446.897884][ T5141] usb 5-1: device descriptor read/64, error -71 [ 447.028377][ T5141] usb usb5-port1: attempt power cycle [ 447.462756][ T5141] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 447.543370][ T5141] usb 5-1: device descriptor read/8, error -71 [ 447.692866][T10590] loop2: detected capacity change from 0 to 8 [ 447.818681][ T5141] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 447.864117][ T5141] usb 5-1: device descriptor read/8, error -71 [ 448.008356][ T5141] usb usb5-port1: unable to enumerate USB device [ 448.274019][T10586] loop3: detected capacity change from 0 to 40427 [ 448.310282][T10586] F2FS-fs (loop3): Found nat_bits in checkpoint [ 448.471765][T10586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 448.507922][ T29] audit: type=1326 audit(1717512386.732:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.561995][ T29] audit: type=1326 audit(1717512386.772:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.604925][ T5126] syz-executor.3: attempt to access beyond end of device [ 448.604925][ T5126] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 448.617634][ T29] audit: type=1326 audit(1717512386.772:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.655567][ T5126] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 448.684488][ T29] audit: type=1326 audit(1717512386.772:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.740742][ T29] audit: type=1326 audit(1717512386.772:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.803563][ T29] audit: type=1326 audit(1717512386.772:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.849122][ T5976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.872245][ T29] audit: type=1326 audit(1717512386.772:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3e7cf69 code=0x7ffc0000 [ 448.952990][ T29] audit: type=1326 audit(1717512386.792:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62d3e7a6e7 code=0x7ffc0000 [ 449.007884][ T29] audit: type=1326 audit(1717512386.792:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62d3e403c9 code=0x7ffc0000 [ 449.059028][T10590] loop2: detected capacity change from 0 to 40427 [ 449.060978][ T29] audit: type=1326 audit(1717512386.792:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62d3e7a6e7 code=0x7ffc0000 [ 449.100668][T10604] fuse: Invalid rootmode [ 449.103377][T10590] F2FS-fs (loop2): invalid crc value [ 449.141452][T10590] F2FS-fs (loop2): Found nat_bits in checkpoint [ 449.330394][T10590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 449.868357][T10620] loop3: detected capacity change from 0 to 4096 [ 449.891229][T10620] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 449.977597][T10620] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 450.044822][T10624] loop1: detected capacity change from 0 to 512 [ 450.657495][T10633] loop3: detected capacity change from 0 to 1024 [ 450.668866][T10635] loop1: detected capacity change from 0 to 512 [ 450.710190][T10633] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 450.738836][T10635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.811459][T10635] ext4 filesystem being mounted at /root/syzkaller-testdir1333250674/syzkaller.4OgzOM/302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.941865][T10631] loop4: detected capacity change from 0 to 32768 [ 450.963407][T10631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10631) [ 451.021662][T10631] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 451.044676][T10631] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 451.067247][T10631] BTRFS info (device loop4): using free-space-tree [ 451.104986][T10640] loop3: detected capacity change from 0 to 2048 [ 451.125212][T10640] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 451.166846][T10640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.188650][ T5172] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 451.758085][ T5172] usb 2-1: device descriptor read/64, error -71 [ 451.837952][ T5141] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 452.036228][ T5173] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 452.044062][ T5172] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 452.053013][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 452.067889][ T5141] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.083710][ T5141] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 452.102636][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.125412][ T5141] usb 1-1: config 0 descriptor?? [ 452.201701][ T5976] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.218046][ T5172] usb 2-1: device descriptor read/64, error -71 [ 452.251800][ T5173] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 452.283432][ T5173] usb 3-1: config 0 has no interface number 0 [ 452.303526][ T5173] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.324475][ T5173] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.336829][ T5173] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 452.368230][ T5172] usb usb2-port1: attempt power cycle [ 452.391778][ T5173] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 452.419381][ T5173] usb 3-1: Manufacturer: syz [ 452.435378][ T5173] usb 3-1: config 0 descriptor?? [ 452.663751][T10671] loop4: detected capacity change from 0 to 512 [ 452.788310][ T5172] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 452.819818][ T5172] usb 2-1: device descriptor read/8, error -71 [ 452.848377][T10676] loop4: detected capacity change from 0 to 4096 [ 452.856314][T10676] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 452.884652][T10676] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 452.892962][ T5173] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0006/input/input25 [ 452.974807][ T5173] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 453.045511][T10680] loop4: detected capacity change from 0 to 8 [ 453.088704][ T5172] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 453.116424][ T5173] usb 3-1: USB disconnect, device number 20 [ 453.124164][ T5172] usb 2-1: device descriptor read/8, error -71 [ 453.248246][ T5172] usb usb2-port1: unable to enumerate USB device [ 453.498985][T10680] loop4: detected capacity change from 0 to 40427 [ 453.513598][T10680] F2FS-fs (loop4): invalid crc value [ 453.524720][T10680] F2FS-fs (loop4): Found nat_bits in checkpoint [ 453.577185][T10680] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 453.706055][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.183453][T10148] usb 1-1: USB disconnect, device number 40 [ 454.946645][T10700] loop1: detected capacity change from 0 to 32768 [ 454.960379][T10700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10700) [ 455.012724][T10700] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 455.028955][T10700] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 455.061302][T10700] BTRFS info (device loop1): using free-space-tree [ 455.533551][T10726] loop3: detected capacity change from 0 to 512 [ 455.606645][T10726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.660471][T10726] ext4 filesystem being mounted at /root/syzkaller-testdir4170156441/syzkaller.LPrInf/284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.801443][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.129558][T10734] loop3: detected capacity change from 0 to 4096 [ 456.170272][T10734] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 456.176856][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.261068][T10734] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 456.288178][T10148] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 456.487737][T10721] loop4: detected capacity change from 0 to 40427 [ 456.496506][T10721] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 456.504514][T10721] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 456.515685][ T5171] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 456.527199][T10148] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 456.537141][T10148] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 456.555068][T10721] F2FS-fs (loop4): Found nat_bits in checkpoint [ 456.569784][T10148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 456.578990][T10148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 456.594121][T10148] usb 1-1: string descriptor 0 read error: -22 [ 456.601334][T10148] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 456.631281][T10148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.655427][T10148] usb 1-1: config 0 descriptor?? [ 456.691012][T10736] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.732449][T10148] hub 1-1:0.0: bad descriptor, ignoring hub [ 456.738740][ T5171] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 456.758728][T10148] hub 1-1:0.0: probe with driver hub failed with error -5 [ 456.769290][ T5171] usb 3-1: config 0 has no interface number 0 [ 456.782261][T10721] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 456.794116][ T5171] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.812346][T10148] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 456.825051][T10721] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 456.839813][ T5171] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.912517][ T5171] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 456.931844][T10721] syz-executor.4: attempt to access beyond end of device [ 456.931844][T10721] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 456.948907][ T5171] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 456.958062][ T5171] usb 3-1: Manufacturer: syz [ 456.982735][ T5173] usb 1-1: USB disconnect, device number 41 [ 456.985814][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 456.985830][ T29] audit: type=1804 audit(1717512395.212:204): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2053319947/syzkaller.s6q2Gx/239/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 457.063115][ T5171] usb 3-1: config 0 descriptor?? [ 457.081766][ T29] audit: type=1804 audit(1717512395.262:205): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2053319947/syzkaller.s6q2Gx/239/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 457.521109][ T5976] syz-executor.4: attempt to access beyond end of device [ 457.521109][ T5976] loop4: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 457.538780][ T5976] F2FS-fs (loop4): Issue discard(5637, 5637, 1) failed, ret: -5 [ 457.636226][ T5171] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0007/input/input28 [ 457.748247][ T5171] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 457.844317][T10759] loop0: detected capacity change from 0 to 8 [ 457.894771][ T5173] usb 3-1: USB disconnect, device number 21 [ 458.617969][ T5173] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 458.818044][ T5173] usb 5-1: Using ep0 maxpacket: 8 [ 458.844344][ T5173] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 458.873552][ T5173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.896795][ T5173] usb 5-1: config 0 descriptor?? [ 459.095089][T10763] loop0: detected capacity change from 0 to 40427 [ 459.111631][T10763] F2FS-fs (loop0): invalid crc value [ 459.120543][ T5173] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 459.123680][T10763] F2FS-fs (loop0): Found nat_bits in checkpoint [ 459.138029][ T5173] asix 5-1:0.0: probe with driver asix failed with error -32 [ 459.212425][T10763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 459.248016][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 459.458534][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 459.474661][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.506641][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.552148][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.581565][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.605475][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.636418][ T45] usb 4-1: config 0 descriptor?? [ 459.995071][T10783] loop1: detected capacity change from 0 to 32768 [ 460.019643][T10783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10783) [ 460.055077][T10783] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.066043][T10783] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 460.069591][ T45] microsoft 0003:045E:07DA.0008: report is too long [ 460.074925][T10783] BTRFS info (device loop1): using free-space-tree [ 460.096630][ T45] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 460.122623][ T45] microsoft 0003:045E:07DA.0008: parse failed [ 460.137906][ T45] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 460.284454][ T5173] usb 4-1: USB disconnect, device number 25 [ 460.606933][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.970095][T10823] loop3: detected capacity change from 0 to 4096 [ 460.984168][T10823] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 460.997913][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 461.299899][ T45] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 461.520770][ T45] usb 3-1: config 0 has no interface number 0 [ 461.530553][ T45] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.565215][T10148] usb 5-1: USB disconnect, device number 30 [ 461.581030][ T45] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.616751][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 461.634876][ T45] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 461.653427][ T45] usb 3-1: Manufacturer: syz [ 461.687574][ T45] usb 3-1: config 0 descriptor?? [ 462.295882][ T45] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0009/input/input29 [ 462.489704][ T45] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 462.548928][ T45] usb 3-1: USB disconnect, device number 22 [ 463.130875][T10871] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 463.485031][T10854] loop4: detected capacity change from 0 to 32768 [ 463.536735][T10854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10854) [ 463.613093][T10854] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 463.665838][T10854] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 463.707619][T10854] BTRFS info (device loop4): using free-space-tree [ 464.917975][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 465.177904][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 465.186472][ T45] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 465.200260][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.302383][ T45] usb 1-1: config 0 descriptor?? [ 465.438357][ T5976] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 465.537114][ T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 465.585606][ T45] asix 1-1:0.0: probe with driver asix failed with error -32 [ 466.135620][T10932] KVM: debugfs: duplicate directory 10932-5 [ 466.755942][T10942] loop4: detected capacity change from 0 to 256 [ 466.763745][T10942] exfat: Deprecated parameter 'utf8' [ 466.774216][T10942] exfat: Deprecated parameter 'utf8' [ 466.873005][T10942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 466.965906][T10942] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.984161][ T29] audit: type=1800 audit(1717512405.182:206): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1048695 res=0 errno=0 [ 467.663981][ T45] usb 1-1: USB disconnect, device number 42 [ 468.414858][T10978] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.084007][T10989] loop3: detected capacity change from 0 to 256 [ 469.094545][T10989] exfat: Deprecated parameter 'utf8' [ 469.138105][T10989] exfat: Deprecated parameter 'utf8' [ 469.294876][T10989] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 469.369582][T10994] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 469.401853][T10994] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 469.474367][ T29] audit: type=1800 audit(1717512407.702:207): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=1048697 res=0 errno=0 [ 469.495216][T10999] loop0: detected capacity change from 0 to 16384 [ 469.504781][T10989] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.548440][T10999] loop0: detected capacity change from 16384 to 0 [ 469.696692][T11006] loop0: detected capacity change from 0 to 512 [ 469.707950][ T5173] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 469.737669][T11006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.768691][T11006] ext4 filesystem being mounted at /root/syzkaller-testdir938943910/syzkaller.1VsfY7/257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.912659][ T5173] usb 3-1: Using ep0 maxpacket: 8 [ 469.969690][ T5173] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 469.995795][T11003] loop1: detected capacity change from 0 to 32768 [ 470.006281][T11003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11003) [ 470.025152][T11003] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.040589][T11003] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 470.063052][T11003] BTRFS info (device loop1): using free-space-tree [ 470.073952][ T5173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.087673][ T5173] usb 3-1: config 0 descriptor?? [ 470.111635][ T5124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.216438][ T29] audit: type=1800 audit(1717512408.442:208): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 470.298077][ T29] audit: type=1800 audit(1717512408.492:209): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 470.336590][ T5173] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 470.371873][ T5173] asix 3-1:0.0: probe with driver asix failed with error -32 [ 470.386938][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.480116][T11028] loop0: detected capacity change from 0 to 4096 [ 470.508190][T11028] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 470.641041][T11028] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 470.789892][T11001] loop4: detected capacity change from 0 to 32768 [ 471.188603][T11024] loop3: detected capacity change from 0 to 32768 [ 471.202537][T11001] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 471.244223][T11001] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 471.258321][T11001] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 471.258321][T11001] running recovery passes: check_allocations [ 471.319226][T11024] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 471.445408][T11001] bcachefs (loop4): accounting_read... done [ 471.499644][T11024] XFS (loop3): Ending clean mount [ 471.506166][T11001] bcachefs (loop4): alloc_read... done [ 471.533389][T11001] bcachefs (loop4): stripes_read... done [ 471.545830][T11001] bcachefs (loop4): snapshots_read... done [ 471.573037][T11001] bcachefs (loop4): check_allocations... [ 471.654516][T11001] btree ptr not marked in member info btree allocated bitmap [ 471.654566][T11001] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a22d880bb51b703b written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, shutting down [ 471.665636][ T29] audit: type=1804 audit(1717512409.902:210): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4170156441/syzkaller.LPrInf/299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=9286 res=1 errno=0 [ 471.832131][ T5126] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 472.082006][T11001] bcachefs (loop4): inconsistency detected - emergency read only at journal seq 10 [ 472.124743][T11001] bcachefs (loop4): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 472.151506][T11001] bcachefs (loop4): bch2_gc_btrees(): error fsck_errors_not_fixed [ 472.189657][T11001] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, shutting down [ 472.216164][T11001] bcachefs (loop4): bch2_gc_alloc_done(): error fsck_errors_not_fixed [ 472.245899][T11001] bcachefs (loop4): bch2_check_allocations(): error fsck_errors_not_fixed [ 472.269471][T11001] bcachefs (loop4): bch2_fs_recovery(): error fsck_errors_not_fixed [ 472.285997][T11001] bcachefs (loop4): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 472.322440][T11001] bcachefs (loop4): shutting down [ 472.382573][T11001] bcachefs (loop4): shutdown complete [ 472.423755][ T5173] usb 3-1: USB disconnect, device number 23 [ 473.052134][T11066] loop2: detected capacity change from 0 to 40427 [ 473.078778][T11066] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (67108865, 24) [ 473.099087][T11066] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 473.139074][T11066] F2FS-fs (loop2): invalid crc value [ 473.164159][T11066] F2FS-fs (loop2): Found nat_bits in checkpoint [ 473.257880][ T5173] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 473.341468][T11066] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 473.361977][T11066] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 473.413035][T11001] syz-executor.4 (11001) used greatest stack depth: 16696 bytes left [ 473.461764][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.496316][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.518629][ T5173] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.542782][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.576668][ T5173] usb 1-1: config 0 descriptor?? [ 473.742715][ T9920] syz-executor.2: attempt to access beyond end of device [ 473.742715][ T9920] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 473.747272][T11069] loop1: detected capacity change from 0 to 32768 [ 473.768706][T11080] loop3: detected capacity change from 0 to 256 [ 473.792947][T11069] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 473.803219][ T9920] syz-executor.2: attempt to access beyond end of device [ 473.803219][ T9920] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 473.896742][T11080] exfat: Deprecated parameter 'utf8' [ 473.934870][T11080] exfat: Deprecated parameter 'utf8' [ 473.985249][T11080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 474.005148][ T5173] hid (null): bogus close delimiter [ 474.027368][T11069] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 474.074984][T11069] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 474.128008][T11069] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 474.128008][T11069] running recovery passes: check_allocations [ 474.163318][ T1093] kworker/u8:7: attempt to access beyond end of device [ 474.163318][ T1093] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 474.185718][ T29] audit: type=1800 audit(1717512412.412:211): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=1048699 res=0 errno=0 [ 474.218204][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 474.237477][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 474.246204][ T5173] usb 1-1: string descriptor 0 read error: -22 [ 474.247986][T11069] bcachefs (loop1): accounting_read... done [ 474.256360][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 474.281601][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 474.292903][T11069] bcachefs (loop1): alloc_read... done [ 474.308283][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 474.319359][T11069] bcachefs (loop1): stripes_read... done [ 474.341391][T11069] bcachefs (loop1): snapshots_read... done [ 474.357963][T11069] bcachefs (loop1): check_allocations... [ 474.363671][T11069] ------------[ cut here ]------------ [ 474.379560][T11069] kernel BUG at fs/bcachefs/buckets.h:96! 2024/06/04 14:46:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 474.385383][T11069] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 474.385423][T11069] CPU: 0 PID: 11069 Comm: syz-executor.1 Tainted: G W 6.10.0-rc2-next-20240604-syzkaller #0 [ 474.385452][T11069] Tainted: [W]=WARN [ 474.385459][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 474.385471][T11069] RIP: 0010:gc_bucket+0x250/0x260 [ 474.385503][T11069] Code: 8c e8 84 42 63 fd e9 29 ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 36 ff ff ff e8 3b d4 ec fd e9 2c ff ff ff e8 b1 e5 86 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 [ 474.385521][T11069] RSP: 0018:ffffc9000347e208 EFLAGS: 00010246 [ 474.385538][T11069] RAX: ffffffff840fa54f RBX: 000000000001007c RCX: 0000000000040000 [ 474.385553][T11069] RDX: ffffc90009029000 RSI: 000000000003ffff RDI: 0000000000040000 [ 474.385566][T11069] RBP: ffff88802e3d8000 R08: ffffffff840fa4b1 R09: 0000000000000000 [ 474.385580][T11069] R10: ffffc9000347efd0 R11: fffff5200068fdfc R12: ffff88807f75b130 [ 474.385595][T11069] R13: ffff88807f75b118 R14: 000000000001007c R15: 0000000000000080 [ 474.385608][T11069] FS: 00007fe2e06196c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 474.385625][T11069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.385638][T11069] CR2: 00007f5dbebb59a8 CR3: 000000005dfd2000 CR4: 00000000003506f0 [ 474.385654][T11069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.385666][T11069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.385679][T11069] Call Trace: [ 474.385686][T11069] [ 474.385694][T11069] ? __die_body+0x88/0xe0 [ 474.385725][T11069] ? die+0xcf/0x110 [ 474.385755][T11069] ? do_trap+0x15a/0x3a0 [ 474.385781][T11069] ? gc_bucket+0x250/0x260 [ 474.385808][T11069] ? do_error_trap+0x1dc/0x2c0 [ 474.385833][T11069] ? gc_bucket+0x250/0x260 [ 474.385861][T11069] ? __pfx_do_error_trap+0x10/0x10 [ 474.385886][T11069] ? report_bug+0x3e8/0x500 [ 474.385921][T11069] ? handle_invalid_op+0x34/0x40 [ 474.385945][T11069] ? gc_bucket+0x250/0x260 [ 474.385969][T11069] ? exc_invalid_op+0x38/0x50 [ 474.385998][T11069] ? asm_exc_invalid_op+0x1a/0x20 [ 474.386030][T11069] ? gc_bucket+0x1b1/0x260 [ 474.386054][T11069] ? gc_bucket+0x24f/0x260 [ 474.386080][T11069] ? gc_bucket+0x250/0x260 [ 474.386105][T11069] ? gc_bucket+0x24f/0x260 [ 474.386131][T11069] bch2_check_allocations+0xc63/0xb9d0 [ 474.386159][T11069] ? bch2_check_allocations+0x67e/0xb9d0 [ 474.386196][T11069] ? validate_chain+0x11e/0x5920 [ 474.386224][T11069] ? bch2_btree_path_verify_level+0x369/0x1950 [ 474.386242][T11069] ? __bch2_journal_key_search+0x9c2/0x10e0 [ 474.386267][T11069] ? __bch2_btree_node_iter_advance+0x577/0xaa0 [ 474.386293][T11069] ? validate_chain+0x11e/0x5920 [ 474.386319][T11069] ? __pfx_validate_chain+0x10/0x10 [ 474.386347][T11069] ? __pfx___bch2_journal_key_search+0x10/0x10 [ 474.386374][T11069] ? bch2_btree_node_iter_advance+0x3c8/0xc70 [ 474.386403][T11069] ? desc_read+0x200/0x3f0 [ 474.386428][T11069] ? __pfx_bch2_check_allocations+0x10/0x10 [ 474.386456][T11069] ? desc_read+0x1a2/0x3f0 [ 474.386484][T11069] ? prb_first_seq+0x131/0x210 [ 474.386511][T11069] ? __pfx_prb_first_seq+0x10/0x10 [ 474.386543][T11069] ? this_cpu_in_panic+0x4f/0x80 [ 474.386569][T11069] ? _prb_read_valid+0xa39/0xac0 [ 474.386597][T11069] ? validate_chain+0x11e/0x5920 [ 474.386628][T11069] ? __pfx__prb_read_valid+0x10/0x10 [ 474.386652][T11069] ? data_push_tail+0x716/0x730 [ 474.386683][T11069] ? __pfx_validate_chain+0x10/0x10 [ 474.386715][T11069] ? prb_read_valid+0xa9/0xf0 [ 474.386739][T11069] ? __lock_acquire+0x1359/0x2000 [ 474.386762][T11069] ? __pfx_prb_read_valid+0x10/0x10 [ 474.386788][T11069] ? desc_read+0x200/0x3f0 [ 474.386815][T11069] ? desc_read+0x1a2/0x3f0 [ 474.386843][T11069] ? prb_first_seq+0x131/0x210 [ 474.386869][T11069] ? __pfx_prb_first_seq+0x10/0x10 [ 474.386902][T11069] ? this_cpu_in_panic+0x4f/0x80 [ 474.386928][T11069] ? _prb_read_valid+0xa39/0xac0 [ 474.386961][T11069] ? __pfx__prb_read_valid+0x10/0x10 [ 474.386995][T11069] ? mark_lock+0x9a/0x360 [ 474.387021][T11069] ? prb_read_valid+0xa9/0xf0 [ 474.387047][T11069] ? __pfx_prb_read_valid+0x10/0x10 [ 474.387075][T11069] ? console_unlock+0x239/0x4d0 [ 474.387104][T11069] ? console_unlock+0x447/0x4d0 [ 474.387135][T11069] ? __pfx_console_unlock+0x10/0x10 [ 474.387162][T11069] ? __bch2_print+0x17a/0x220 [ 474.387191][T11069] ? __bch2_print+0x17a/0x220 [ 474.387220][T11069] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 474.387255][T11069] ? preempt_count_add+0x93/0x190 [ 474.387276][T11069] ? __wake_up_klogd+0x112/0x140 [ 474.387295][T11069] ? vprintk_emit+0x7ce/0x900 [ 474.387334][T11069] ? bch2_check_allocations+0x67e/0xb9d0 [ 474.387361][T11069] ? __bch2_print+0x17a/0x220 [ 474.387398][T11069] ? __pfx___bch2_print+0x10/0x10 [ 474.387434][T11069] bch2_run_recovery_pass+0xf0/0x1e0 [ 474.387459][T11069] bch2_run_recovery_passes+0x19e/0x820 [ 474.387489][T11069] bch2_fs_recovery+0x238b/0x3730 [ 474.387510][T11069] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 474.387541][T11069] ? __pfx_lock_release+0x10/0x10 [ 474.387563][T11069] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 474.387596][T11069] ? __pfx_lock_release+0x10/0x10 [ 474.387625][T11069] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 474.387657][T11069] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 474.387687][T11069] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 474.387720][T11069] ? llist_reverse_order+0x72/0x90 [ 474.387751][T11069] bch2_fs_start+0x356/0x5b0 [ 474.387774][T11069] bch2_fs_open+0xa8d/0xdf0 [ 474.387807][T11069] ? __pfx_bch2_fs_open+0x10/0x10 [ 474.387838][T11069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.387873][T11069] ? __pfx_bch2_test_super+0x10/0x10 [ 474.387897][T11069] ? sget+0x2b8/0x620 [ 474.387925][T11069] ? __pfx_bch2_noset_super+0x10/0x10 [ 474.387950][T11069] bch2_fs_get_tree+0x75e/0x14d0 [ 474.387988][T11069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.388024][T11069] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 474.388075][T11069] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 474.388109][T11069] ? apparmor_capable+0x138/0x1b0 [ 474.388133][T11069] ? bpf_lsm_capable+0x9/0x10 [ 474.388153][T11069] vfs_get_tree+0x90/0x2a0 [ 474.388173][T11069] do_new_mount+0x2be/0xb40 [ 474.388206][T11069] ? __pfx_do_new_mount+0x10/0x10 [ 474.388242][T11069] __se_sys_mount+0x2d9/0x3c0 [ 474.388265][T11069] ? __pfx___se_sys_mount+0x10/0x10 [ 474.388284][T11069] ? do_syscall_64+0x100/0x230 [ 474.388313][T11069] ? __x64_sys_mount+0x20/0xc0 [ 474.388332][T11069] do_syscall_64+0xf3/0x230 [ 474.388359][T11069] ? clear_bhb_loop+0x35/0x90 [ 474.388377][T11069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.388419][T11069] RIP: 0033:0x7fe2df87e66a [ 474.388440][T11069] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 474.388457][T11069] RSP: 002b:00007fe2e0618ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 474.388477][T11069] RAX: ffffffffffffffda RBX: 00007fe2e0618f80 RCX: 00007fe2df87e66a [ 474.388492][T11069] RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007fe2e0618f40 [ 474.388506][T11069] RBP: 0000000020005d80 R08: 00007fe2e0618f80 R09: 0000000000000400 [ 474.388519][T11069] R10: 0000000000000400 R11: 0000000000000206 R12: 0000000020005dc0 [ 474.388532][T11069] R13: 00007fe2e0618f40 R14: 0000000000005e05 R15: 0000000020005e00 [ 474.388555][T11069] [ 474.388561][T11069] Modules linked in: [ 474.388655][T11069] ---[ end trace 0000000000000000 ]--- [ 475.122000][T11069] RIP: 0010:gc_bucket+0x250/0x260 [ 475.127077][T11069] Code: 8c e8 84 42 63 fd e9 29 ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 36 ff ff ff e8 3b d4 ec fd e9 2c ff ff ff e8 b1 e5 86 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 [ 475.228170][T11069] RSP: 0018:ffffc9000347e208 EFLAGS: 00010246 [ 475.234394][T11069] RAX: ffffffff840fa54f RBX: 000000000001007c RCX: 0000000000040000 [ 475.269400][T11069] RDX: ffffc90009029000 RSI: 000000000003ffff RDI: 0000000000040000 [ 475.277428][T11069] RBP: ffff88802e3d8000 R08: ffffffff840fa4b1 R09: 0000000000000000 [ 475.298164][T11069] R10: ffffc9000347efd0 R11: fffff5200068fdfc R12: ffff88807f75b130 [ 475.306192][T11069] R13: ffff88807f75b118 R14: 000000000001007c R15: 0000000000000080 [ 475.358391][T11069] FS: 00007fe2e06196c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 475.378220][T11069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.384892][T11069] CR2: 00007f5dbebb59a8 CR3: 000000005dfd2000 CR4: 00000000003506f0 [ 475.428239][T11069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 475.436726][T11069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.478249][T11069] Kernel panic - not syncing: Fatal exception [ 475.484687][T11069] Kernel Offset: disabled [ 475.489008][T11069] Rebooting in 86400 seconds..