last executing test programs: 2m39.144135421s ago: executing program 0 (id=145): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m38.83610576s ago: executing program 0 (id=149): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') preadv(r0, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) 2m38.594002322s ago: executing program 0 (id=153): openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x8400, 0x0) 2m38.298711059s ago: executing program 0 (id=155): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 2m37.639618087s ago: executing program 0 (id=161): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0x1, 0x200, &(0x7f0000006140)="$eJzsUr9rFEEU/mZ37tzThBxyIIogSvBHkdxmo/FHoWBjUEEQhRgQPO4u8XDjj+yB3nHgWqWwERQhQSwESQoL8R9wQW3ERiHYhUhaU6SwkYSVN/tmb88/INV8xX4z8958731v53bwINgBYGujUwWKIEiU8P2XgARwQKgj1OyEHebLzHmOX7ASjpj/Mm+dbE9MAqJxaGXMivbUDooi+kp/vq6iioGbOP360rsfV3Mvlnevv/1I+Revtz5AHKkNvHn1/tn5+X4lL25MZnXsaP+CQ0IAnm9OrKzKvXZJazXCZSqdg8bLKQh3wQEw/Hlo/qzb/9RizaDVvlPx/fpscO6JhXVV6udGp0qLWwBiAvsbB5DNIftLnENn+yRwDYCNOM2R6KLcnLlfDlrtocZMZbo+Xb/reaNj7nHXPeGVpxp+3aUvwNXUdZ4giI8BoN9UoBaEiu+i2Cbn7EQvSIf6CtO496XA7RfQqeb1r/udXikgU0/b0iwQsS1H9QFllSwfBo32YSgyp4NKRUIZG4eAzZsRmekvqeWowPCne35tDuSNry1Cphoja8ilGy+7GT2lHWKOeRB2zygWmdeY9YvWL1UqBYsvHQ2BPB5Vms04jh9jqQ9XviUROpv18ukqnZcaGFku2r3mzvy37y4MDAwMDAwMDAwMDAy2H/8CAAD//xZelnI=") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m36.391742064s ago: executing program 0 (id=177): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e22}, 0x6e) 2m21.207438356s ago: executing program 32 (id=177): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e22}, 0x6e) 4.443563754s ago: executing program 1 (id=2055): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f00000002c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0]) 3.578385861s ago: executing program 5 (id=2065): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond0\x00'}) 3.498227236s ago: executing program 2 (id=2066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffc, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x9, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 3.346193181s ago: executing program 2 (id=2067): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 3.251745334s ago: executing program 5 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e8000080d00001800c0002800800034000000002c0000100"], 0x1ac}}, 0x0) 3.069861523s ago: executing program 2 (id=2071): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) 2.912024001s ago: executing program 5 (id=2072): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000200)) 2.845736621s ago: executing program 2 (id=2073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@loopback={0x66}, 0x0, 0x0, 0x2, 0x0, 0x401, 0x6}, 0x20) 2.639926262s ago: executing program 5 (id=2075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x0, 0x0, 0xce024d}, 0x98) 2.569583379s ago: executing program 1 (id=2077): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x10, 0x200, &(0x7f0000000d80)="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"}) 2.52829118s ago: executing program 2 (id=2078): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz6B/TAlRsnTkSykUA9MWi8zxPPbna7No531p7PR3JmfvPMeJ/xd2dfsjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD9ZaEXHj52nBSsRnohPRjlgq69WIWFpdyet3I+K52GuOZyOitxBRbr/3z9MRr0bEx2cjdnY318vFlw/Yj+/+8W+/++GZt/76h97F//zpXue1Sevdv/+rf//5wdH2GQAAAJqmKIqild7mn0vv79t1dwoAmIn8/F8kefmpr3/9j7f+Mk/9UavVarV6BnVVMd6DahERW9VtytcMPo4HgBNmKz6puwvUSP6N1o2IM3V3Aphrrbo7wLHY2d1cb6V8W9Xng9VBez4XZCj/rdaj6zsmTacZPcdkVvev7ejEMxP6szSjPsyTnH97NP8bg/Z+Wu+485+VSfn3B5c+NU7OvzOa/4jTk397bP5NlfPvHir/jvwBAAAAAGCO5f//X6n589+Fo+/KgXza57+rM+oDAAAAAAAAADxpRx3/7xHj/wEAAMDcKt+rl35zdn/ZpO9iK5dfb0U8NbI+0DAfDSbLdfcDAAAAAAAAAAAAAJqkOziH93orohcRTy0vF0VR/lSN1od11O1PuqbvPzRZ3Q/yAAAw8PHZkWv5WxGLEXE92nvf9ddbXl4uisWl5WK5WFrIr2f7C4vFUuV9bZ6Wyxb6B3hB3O0X5S9brGxXNe398rT20d9X3la/6BygY09IL/01JzTXFDYAJINnox3PSKdMUTw96cUHDHH8n0IrsVL3/Yr5V/fdFAAAADh+RVEUrTTM37k0vl+77k4BADORn/9HPxc4UB0xvr19yPXVarVarVbPpK4qxntQLSJiq7pN+ZrBcPwAcMJsxSd1d4Eayb/RuhHxXN2dAOZaq+4OcCx2djfXWynfVvX5YHXQns8FGcp/q7W3Xd5+3HSa0XNMZnX/2o5OPDOhP8/OqA/zJOffHs3/xqC9n9Y77vxnZVL+/b1L5pon598ZzX/E6cm/PTb/psr5dw+Vf0f+AAAAAAAwx/L//6/4/DfvMgAAAAAAAACcODu7m+v5utf8+f/nxqzn+s/TKeffOmz+S2le/idazr89kv+XR9brVOYfvrl//P9rd3P99/f++dk8PWj+C3mmle5ZrXSPaKVbanXT9Ch797jtXqdf3lKv1e500zk/Re+duBW3YyMuDa3bTn+P/fa1ofayp72h9stD7d3H2q8MtffS9w4US7n9QqzHT+J2vL3XXrYtTNn/xSntxZT2nH/H438j5fy7lZ8y/+XU3hqZlh5+2H7suK9Ox93OG7c+/8tLx787U21H59G+VZX7d76G/uz9Tc7042d3N+5cuH/z3r07a5EmQ0svR5o8YTn/3t7Pwv7j/wuD9vy4Xz1eH37YP3T+82I7uhPzf6EyX+7vSzPuWx1y/v30k/N/O7WPP/5Pcv6Tj/+Xa+gPAAAAAAAAAAAAAAAAfJqiKPYuEX0jIq6m63/qujYTAJit/PxfJHm5Wq1Wq9Xq01dXFeO9Xi0i4qPqNuVrhl+M+2UAwDz7b0T8ve5OUBv5N1j+vr9y+mLdnQFm6u77H/zo5u3bG3fu1t0TAAAAAAAAAOD/lcf/XK2M//xiRKyMrDc0/uubsXrU8T+7eebRAKNPeKDvCbbb/U67Mtz487E3PveFSeN/n4/Hx//OY+J2qvsxQW9Ke39K+8KU9sWxS/fTGnuhR0XO//nKeOdl/udGhl9vwvivo2PeN0HO/3zl/lzm/6WR9ar5F7+du/y3DrridrSH8r94772fXrz7/gev3Hrv5rsb7278+Mra2qUrV69eu3bt4ju3bm9cGvx7PL2eAzn/PPa180CbJeefM5d/s+T8v5Bq+TdLzv+LqZZ/s+T88+s9+TdLzj+/95F/s+T8X0q1/Jsl5/+VVMu/WXZ2NxfK/F9OtfybJR//X021/Jsl5/9KquXfLDn/C6mWf7Pk/C+m+gD5+3r4UyTnnz/hcvw3S85/LdXyb5ac/+VUy79Zcv5XUi3/Zsn5v5pq+TdLzv9rqZZ/s+T8r6Za/s2S8/96quXfLDn/a6mWf7Pk/L+Ravk3S87/m6mWf7Pk/F9LtfybJef/rVTLv1ly/t9OtfybJef/nVTLv1ly/q+nWv7Nsv/9/2bMmDGTZ+p+ZAIAAAAAAAAAAAAARs3idOK69xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdXYxcZ30G8DPrXXvtEGIgBCc1sElMCMmSXduJP2hTTCBAA5QCCYV+4LjetVnwF167BIpk00CJhFFRRdX0oi2gqI1UVUQVF7SiNBdVP65Ke0FvKqpKSI0qgwIqUlvRbDVz3vf1zOzszNg7Xp897+8n2f/dmTNzzpw5M7vP2s8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDdrW+e/1yjKIrmn9ZfW4viRc2PN09tbV32hmu9hQAAAMBq/V/r7+dvSBccGOJGbcv83av+8etLS0tLxQc2/O7El5aW0hVTRTGxqSha10XP/PsHG+3LBI8Xk42xts/HBqx+w4DrxwdcPzHg+o0Drt804PrJAdcv2wHLbC5/HtO6sx2tD7eWu7S4sZhoXbejx60eb2waG4s/y2lptG6zNHGkWCiOFfPFbMfy5bKN1vLfvLW5rrcXcV1jbeva3jxCfvipw3EbGmEf7+hY16X7jL7/pmLqRz/81OE/PnPx5l5z4G7ouL9yO++8rbmdnwmXlNvaKDalfRK3c6xtO7f3eE42dGxno3W75sfd2/n8kNu54dJmrqnu53yyGGt9/O3Wfhpv/7Fe2k/bw2X/fXtRFOcvbXb3MsvWVYwVWzouGbv0/EyWR2TzPpqH0kuL8cs6Tm8d4jhtzrkdncdp92siPv+3htuNr7AN7U/T9z+9cdnzfrnHadR81Cu9VrqPwVG/VqpyDMbj4tutB/1Ez2NwR3j8n7pj5WOw57HT4xhMj7vtGLxt0DE4tnFDa5vTk9Bo3ebSMbizY/kNrTU1WvO5O/ofgzNnjp+aWfzEJ1+/cPzQ0fmj8yd279w5u3vPnn379s0cWTg2P1v+fYV7u/q2FGPpNXBb2HfxNfDarmXbD9Wlr4zudTjZ53W4tWvZUb8Ox7sfXGNtXpDLj+nytfFwc6dPXhgrVniNtZ6fu1b/OkyPu+11ON72Ouz5NaXH63B8iNdhc5lTdw33Pct4259e23C1vhZsbTsGu78f6T4GR/39SFWOwclwXPzrXSt/LdgetveJ6cv9fmTDsmMwPdzw3tO8JH2/P7mvNXodl7c0r7huY3F2cf70PY8dOnPm9M4ijDXxsrZjpft43dL2mIplx+vYZR+vBxZe9cQtPS7fGvbV5Oubf02u+Fw1l7n3nv7PVeurW+/92XHpriKMEVvr/dnrq3lzf6Ys2Wd/Npf5zMzqvxdPubTt/XdihfffmPtfKNeX7urxDRPj5et3Q9o7Ex3vx51P1XjrvavRWvfzM8O9H0+EP2v9fnxjn/fjbV3Ljvr9eKL7wcX348agn3asTvfzORmOk2Oz/d+Pm8ts23W5x+R43/fj28NshP3/upAUUi5qO3ZWOm7TusbHJ8LjGo9r6DxOd3csPxGyWXNdT++6suP0ztvL+9qQHt0la3WcTnUtO+rjNL1frXScNgb99O3KdD+fk+G4uHF3/+O0ucyz967+vXNz/LDtvXPjoGNwYsPG5jZPpIOwfL9f2hyPwXuKw8XJ4lgx17p2Y+t4arTWNX3fcMfgxvBnrd8rt/U5Bu/sWnbUx2D6OrbSsdcYX/7gR6D7+ZwMx8WT9/U/BpvLvGXvaL93vTNckpZp+961++drK/3M65au3XQ1f+bV3M6/2dv/Z7PNZY7tu9yc2X8/3R0uua7Hfup+/a70mpor1mY/bQvbeXHfyvupuT3NZb60f8jj6UBRFOc+9kDr573h31f+/Ox3vt7x7y69/k3n3Mce+MH1R/72crYfgPXvhXJsKb/Wtf3L1DD//g8AAACsCzH3j4WZyP8AAABQGzH3x/8Vnsj/AAAAUBsx94+HmWSS/7e95eLCC+eK1MxfCuL1aTc8VC4XO66z4fOppUualz/w1PyP//LccOseK4riJw/9Rs/ltz0Ut6s0FbbzmQc7L19+w3NDrf/RRy4t195f/3K4//h4hj0MelVwZ4ui+OYNX2itZ+qDF1rz2Ycebc33nn/i8eYyz+8vP4+3f+5l5fJ/EMq/B44c6rj9c2E/fC/M2Xf03h/xdl+78Lrte99/aX3xdo3bXtx62E9+qLzf+Htyvvh4uXzczytt/199/umvNZd/7DW9t//cWO/tfzrc71MPXlxoHnH/88py+fbnoPl5vN1nw/bH9T0Vbn/PV7/Vc/uf+Vy5/Km3lss9GmZc/53h8x1vvbjQvr8eaxzqeFzF28rl4vpnv/Pbrevj/cX7797+yYMXOvZH9/Hx7D+X9zPTtXy8PK4n+ouu9Tfvp/34jOt/+rce7djPg9b/zHufe2XzfrvXf3fXchu6bt/9G5v+8LNf6Lm+uD0H/uxUx+M58J7wOg7rf/JD4XgM1//vM1/oWG/06Hs633/i8l/eeq7j8URv/1G5/mfeeLQ1/2Pqx79/3Yuuf/H5Vzf3XVF8+33l/Q1a/9E/Otmx/V+56a7W8xGvjx397vWvJK7/9MenT5xcPLsw17ZXW787553l9mya3Lylub03hPfW7s8Pnjzz4fnTU7NTs0UxVd9foXfFvhrmD8px/nJvf9cj4fm85fe+ueWOf/p8vPxfHi4vv/CO8uvWa8NyXwyXby2fv6XGKtf/5K03tV7fjWfLzzt67COwfcd/7htqwfD4u78viMf7qZd/uLUfmte1vm7E1/Uqt/+7c+X9fCPs16Xwm5lvu+nS+tqXj78b4cL7ytf7qvdfeJuLz+ufhOf7Xd8r7z9uV3y83w3fx3xrW+f7XTw+vnFurPv+W7/F43x4PynOl9fHpeL+vvD8TT03L/4ekuL8za3Pfyfdz82X9TBXsviJxZljCyfOPjZzZn7xzMziJz558PjJsyfOHGz9Ls+DHxl0+0vvT1ta709z83vuLWY3F0Vxsphdgzesq7P9zY+G2/5Tjxye2zt7x9z8kUNnj5x55NT86aOHFxcPz88t3nHoyJH5jw+6/cLc/Tt37d+9d9f00YW5+/ft3797//TCiZPNzSg3aoA9sx+dPnH6YOsmi/ffu3/nfffdOzt9/OTc/P17Z2enzw66fetr03Tz1r8+fXr+2KEzC8fnpxcXPjl//879e/bsGvjbAI+fOrI4NXP67ImZs4vzp2fKxzJ1pnVx82vfoNtTT4v/Vn4/261R/iK+4t1370m/n7XpqU+veFflIl2/QPRi+F00//CSU/uG+Tzm/okwk0zyPwAAAOQg5v6NYSbyPwAAANRGzP2bwkzkfwAAAKiNmPsnw0wyyf/6//r/w/X/y+tH2f/v1Z8v9P8r1f8/9bGyV7re+/+xP6//n4dr3P9f9fr1//X/69f/H74/v963X/9f/5/lqtb/j7l/c1Fkmf8BAAAgBzH3bwkzkf8BAACgNmLuvy7MRP4HAACA2oi5/0VhJpnkf/3/ofr/uwYVrurf/x/9+f/1//X/16T/H58c/f9sXHb//v0Pd3yq/x/o/+v/6//r/+v/s2oTK15zrfr/MfdfH2aSSf4HAACAHMTc/+IwE/kfAAAAaiPm/hvCTOR/AAAAqI2Y+7eGmWSS//X/nf9f/1//v9b9/9We/79tY/T/1wfn/+9P/3+AK+7/T+r/r8f+/8Rot7/a/f+Bm6//z1VRtfP/x9z/kjCTTPI/AAAA5CDm/peGmcj/AAAAUBsx978szET+BwAAgNqIuf/GMJNM8v9q+v+xc63/r/+v/1/S/y/Vqv/f9/z/5Uf6/9Wi/9+f/v8Azv+fV/9/xNtf7f7/qM//P/Fg9+31/+mlav3/mPtfHmaSSf4HAACAHMTcf1OYifwPAAAAtRFz/yvCTOR/AAAAqI2Y+7eFmWSS/53/X/9f/1//X/+/9/oH9/9L+v/Vov/fn/7/APr/+v/6/8P1/3t886v/Ty9V6//H3H9zmEkm+R8AAAByEHP/LWEm8j8AAADURsz9PxVmIv8DAABAbcTcvz3MJJP8r/+v/6//n1f//+6N+v/6//Wm/9+f/v8A+v/6//r/Q57/f7nL6f9vGnRn1EbV+v8x978yzCST/A8AAAA5iLn/VWEm8j8AAADURsz9rw4zkf8BAACgNmLunwozyST/6//Xq///p3/95KsL/X/9/wHrr2n/Px4G+v+Z0//vT/9/AP1//X/9/zXp/5OPqvX/Y+6/Ncwkk/wPAAAAOYi5/7YwE/kfAAAAaiPm/tvDTOR/AAAAqI2Y+3eEmWSS//X/69X/j/T/9f/7rb+m/f9E/z9v+v89tL1I9f8H0P/X/8++/x+/+9X/ZzSq1v+Puf81YSaZ5H8AAADIQcz9d4SZyP8AAABQGzH3vzbMRP4HAACA2oi5/84wk0zyv/6//r/+v/6//n/v9ev/r0/rq/+/adklVTv//0b9f/1//f/M+v/O/89oVa3/H3P/68JMMsn/AAAAkIOY++8KM5H/AQAAoDbi/7wr/9+r/A8AAAB1FHP/dJhJJvlf/1//P6f+f0P/X/9f/7/21lf/f7mq9f+d/1//X/9f/1//n9WoWv8/5v7Xh5lkkv8BAAAgBzH33xNmIv8DAABAbcTcPxNmIv8DAABAbcTcPxtmkkn+1//X/8+p/+/8//r/+v/1p//fn/7/APr/+v916/8Xhf4/11TV+v8x9+8MM8kk/wMAAEAOYu7fFWYi/wMAAEBtxNy/O8xE/gcAAIDaiLn/3jCTTPK//r/+v/5/Jfr/8S70//X/9f9XSf+/P/3/AfT/16Y/3+sbp/W0/SuoZP/f+f+5xqrW/4+5/74wk0zyPwAAAOQg5v49YSbyPwAAANRGzP17w0xC/r9K/z0JAAAAWEMx9+8LM8nk3//1/2vS///Nv+9Yt/7/uuv/r8Pz/2/W/w9T/79aatr/735ZXDH9/wH0/69af74YG8kmXrPt1//X/+fKVK3/H3P//jCTTPI/AAAA5CDm/jeEmcj/AAAAUBsx9/90mIn8DwAAALURc//PhJlkkv/1/2vS/++i/6//32/9zv+v/19nNe3/j0yt+v9j+v/rqf8/TH9+vW+//r/+P8td/f5//Gi4/n/M/feHmWSS/wEAACAHMff/bJiJ/A8AAAC1EXP/G8NM5H8AAACojZj7D4SZZJL/9f/1//X/9f+vTv//jUW3Kvb/mweP/n+9VLj/PzHM+vX/nf9f/39Ntr/7S81Itl//X/+f5ap2/v+Y+98UZpJJ/gcAAIAcxNz/QJiJ/A8AAAC1EXP/m8NM5H8AAACojZj73xJmkkn+1//X/9f/1/93/v/e69f/X58q3P8fiv6//r/+//rdfv1//X+Wq1r/P+b+B8NMMsn/AAAAkIOY+98aZiL/AwAAQG3E3P+2MBP5HwAAAGoj5v63h5lkkv/1//X/9f/1//X/e69f/3990v/vT/9/AP1//X/9f/1/Rqpq/f+Y+38uzCST/A8AAAA5iLn/oTAT+R8AAABqI+b+d4SZyP8AAABQGzH3vzPMJJP8r/+v/6//r/+v/997/fr/65P+f3/6/wPo/+v/6//r/zNSVev/x9z/rjCTTPI/AAAA5CDm/p8PM5H/AQAAoDZi7n93mIn8DwAAALURc/8vhJlkkv/1//X/q9X/XzrXfjv9f/3/YlT9/+aN9P+zoP/fn/7/AD36/5v0//X/9f/1/7liVev/x9z/njCTTPI/AAAA5CDm/veGmcj/AAAAUBsx978vzET+BwAAgNqIuf/hMJNM8r/+f5b9//SQq9f/d/5//X/n/9f/Xx39//70/wdw/n/9f/1//X9Gqmr9/5j7HwkzyST/AwAAQA5i7n9/mIn8DwAAALURc/8vhpnI/wAAAFAbMfd/IMwkk/yv/59l/7/C5/+vW/9/vOP4yKn/P9n2fKbjUv9f/38N6P/3p/8/gP6//n+V+//haN68wu31/6miqvX/Y+7/YJhJJvkfAAAAchBz/y+Fmcj/AAAAUBsx9/9ymIn8DwAAALURc/+vhJlkkv9r2P8/X+j/6/9Xpv/feXzk1P93/v/l9P/Xhv5/f/r/A+j/6/9Xuf8/gP4/VVS1/n/M/b8aZrJi8PvBfw3xMAEAAIAKibn/Q2Emmfz7PwAAAOQg5v6DYSbyPwAAANRGzP2Phplkkv9r2P9f5fn/4xlV9f/1/0fd/x/T/9f/1/9fA6Pr/7/i+qLQ/9f/1//X/9f/1/9nNarW/4+5/1CYSSb5HwAAAHIQc/+vhZnI/wAAAFAbMfcfDjOR/wEAAKDyxlMjuL+Y++fCTDLJ/9ew/z9Rzf5/3c7/3wj3ffX7/z/R/3f+/0D/vzf9/7Xh/P/96f8PoP+v/6//r//PSFWt/x9z/3yYSSb5HwAAAGos/Tg45v4jYSbyPwAAANRGzP1Hw0zkfwAAAKiNmPs/HGaSSf53/v+69/+d/7+a/f/xjuX1/0v6//r/o6D/35/+/wD6//r/+v/6/4xU1fr/MfcvhJlkkv8BAAAgBzH3fyTMRP4HAACA2oi5/6NhJvI/AAAA1EbM/cfCTDLJ//r/+v+59/8bRXHe+f/1/3utX/9/fdL/70//fwD9f/1//X/9f0aqav3/mPuPh5lkkv8BAPh/9u6jSa6ziuPwtVFcwUdgzYolrMxHYMuOKtZkk4MscgaTczAZkzMm2OScczY5R2OCoUqUpXOONNOtezWanul73/d5NsdSedQ91kjUn6lfXQB6kLv/fnGL/Q8AAADNyN1//7jF/gcAAIBm5O5/QNzSyf7X/+v/e+//h608/3/nv6//P0f/r//fhJX+/sj6f+9iUfhF+/+73u3qe+v/9f/6/1H6f/2//p/d5tb/5+5/YNzSyf4HAACAHuTuf1DcYv8DAABAM3L3Pzhusf8BAACgGbn7r45bOtn/+n/9v/5/Ef3/FflrHHj/f5P+X/+/bJ7/P07/P0H/r//X/+v/2ai59f+5+x8St3Sy/wEAAKAHufsfGrfY/wAAANCM3P0Pi1vsfwAAAGhG7v6Hxy2d7H/9v/5f/7+I/v/WG04d8/z/XZ+P/l//v47+f5z+f4L+X/+v/9f/s1Fz6/9z9z8ibulk/wMAAEAPcvc/Mm6x/wEAAKAZufsfFbfY/wAAANCM3P2Pjls62f/6f/2//n+D/f/pYRgOrP8f9P+7Ph/9v/5/neuG838n6P9X6f8nTPT/w6D/H3PJ/fz6T2857/8i9P/6f1bNrf/P3f+YuOUew3Dscj9JAAAAYFZy9z82bunk+/8AAADQg9z9p+IW+x8AAACakbv/mrilk/2v/9f/6/+X8vx//b/+X/9/KTz/f9z++/+73Om+9+m3//f8/3Ge/7/p/v/2rwz9P8s2t/4/d//puKWT/Q8AAAA9yN3/uLjF/gcAAIBm5O5/fNxi/wMAAEAzcvc/IW7pZP/r/1vr/++w4+Mu6P/P1i76f/3/5fT/R+tX0v/Pr/8/Mv3CndH/j/P8/wln/5o7WT/U/+v/Pf9f/8/+zK3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAABAM3L3PyVu6WT/6/9b6/93fpzn/+v/172+5/+31P9Pv25v9P/j9P8TWnn+/2V+1Wy7n9+vbb9//b/+n1Vz6/9z9z81bulk/wMAAEAPcvc/LW6x/wEAAKAZufufHrfY/wAAANCM3P3PiFs62f/6f/3/Mvr/fAX9v/7/4Pv/pP9fJv3/OP3/hFb6/8u07X5+6e9f/6//Z9Xc+v/c/c+MWzrZ/wAAANCD3P3PilvsfwAAAGhG7v5nxy32PwAAADQjd/9z4pZO9r/+X/+/jP7f8//1/57/r/+/NPr/cfr/Cfp//b/+X//PRs2t/8/df23c0sn+BwAAgB7k7n9u3GL/AwAAQDNy9z8vbtnL/j+66XcFAAAAbFLu/ufHLZ18/1//r//X/+v/9f/rX1//v0z6/3H6/wmd9//DNfp//b/+n82aUf9/wUedGF4Qt3Sy/wEAAKAHuftfGLfY/wAAANCM3P0vilvsfwAAAGhG7v4Xxy2d7P/2+v/jS+3/z+Z8bfX/J4dh6Lv/P7rr66On/v/kBb+f9XWp/9f/HwL9/zj9/4TO+/9t9/NLf//6f/0/q2bU/5/9ce7+l8Qtnex/AAAA6EHu/pfGLfY/AAAANCN3/8viFvsfAAAAmpG7/+VxSyf7v73+3/P/h9n0/57/v/vro6f+3/P/V+n/D4f+f5z+f4L+X/+v/9f/s1Fz6/9z978ibjp29LI/RQAAAGBmcve/Mm7p5Pv/AAAA0IPc/a+KW+x/AAAAWKhrV34md/+r45ZO9r/+f7P9/7ELfk7/r//f/fWh/9f/6/8Pnv5/nP5/gv5f/6//1/+zUXPr/3P3vyZu6WT/AwAAQA9y918Xt9j/AAAA0Izc/a+NW+x/AAAAaEbu/tfFLZ3sf/2/5//r//X/U/3/+ceh6v/1//On/x+n/5+g/9f/b7f/P37+H/X/tGEP/f+ZM2dOHXj/n7v/9XFLJ/sfAAAAepC7/w1xi/0PAAAAzcjd/8a4xf4HAACAZuTuf1Pc0sn+1/932v/nl/qy+v9rhkH/7/n/+n/9/zj9/zj9/wT9v/7f8//1/2zU3J7/n7v/zXFLJ/sfAAAAepC7/y1xi/0PAAAAzcjdf33cYv8DAABAM3L3vzVu6WT/6/877f89/1//r/8/7P7/tkH/fygW0f+fvPjrz73/P63/1/+P6K7/v+fdd/xQ/6//Z9Xc+v/c/W+LWzrZ/wAAANCD3P1vj1vsfwAAAGhG7v53xC32PwAAADQjd/8746Yjnex//b/+X/+v/9f/r3/9Q37+/7FhGPT/G7CI/n/E3Pv/zTz/f/ef8vP0//r/Jb9//b/+n1Vz6/9z978rbulk/wMAAEAPcve/O26x/wEAAKAZufvfE7fY/wAAANCM3P3vjVs62f/6f/2//l//33z/f3oR/b/n/2+I/n/cPPr/i2uj/z8yDPp//b/+X//PqG31/7n73xe3dLL/AQAAoAe5+98ft9j/AAAA0Izc/R+IW+x/AAAAaEbu/g/GLZ3sf/2//n8v/X++T/1/W/3/8dn1/yd2/HqdPP9f/78h+v9x+v8Jnv+v/9f/X6v/Z5Pm9vz/3P0fils62f8AAADQg9z9N8St/+vW/gcAAIBm5O7/cNxi/wMAAEAzcvd/JG7pZP/r//X/nv+v/2/++f/6/67o/8fp/yfo//X/+n/P/2ej5tb/5+7/aNzSyf4HAACAHuTu/1jcYv8DAABAM3L33xi32P8AAADQjNz9N8Utnex//b/+X/+v/9f/n/s91P+3Qf8/7nD6/5P6f/1/9fNXxJ8C/b/+f+rjadPc+v/c/R+PWzrZ/wAAANCD3P2fiFvsfwAAAGhG7v5Pxi32PwAAACzSkTU/l7v/U3FLJ/tf/6//1//r//X/619f/79MW+n/84tiVv3/uv9l8vz/Sfr/Pfbzd97xo6U9/3/3nxL9v/6fzZtb/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6//1//p//f/619f/L5Pn/4/T/0/Q/2/1+flLf//6f/0/q+bW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBlnd3/GZR3uf/2//l//r//X/69/ff3/Mun/x+n/J+j/9f/6f/0/GzW3/v9LZz/qxPDluKWT/Q8AAAA9yN3/lbjF/gcAAIBm5O7/atxi/wMAAEAzcvd/LW7pZP/r//X/y+j/z5w5c0r/r//f+fmc7/9v1v9T9P/j9P8T9P/6f/2//p+Nmlv/n7v/63FLJ/sfAAAAepC7/xtxi/0PAAAAzcjd/824xf4HAACAZuTu/1bc0sn+1//PoP8/of/3/H/9/+D5/6v9/5Xn/lLW/++N/n+c/n9Ci/3/iUv/9Lfdz+/Xtt+//l//z6q59f+5+78dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9/+H1/7f/t+vl+f8nh/XvX/+v/9f/e/7/QdP/j9P/T2ix/9+DbffzS3//+n/9P6vm1v/n7v9+3LJz+B3d22cJAAAAzEnu/h/ELZ18/x8AAAB6kLv/h3GL/Q8AAADNyN3/o7ilk/2v/5/B8/8b7P89/3/914f+f9b9/5X6/zbo/8fp/yfo//X/+v8N9f/51az/793c+v/c/T+OWzrZ/wAAANCD3P0/iVvsfwAAAGhG7v6fxi32PwAAADQjd//NccsF+39d290K/b/+X/+v/9f/r399/f8y6f/HXWr/f3zYX/+f9P/6f/1/r/2/5/9zztz6/9z9P4tbfP8fAAAAFufoRX4+d//P4xb7HwAAAJqRu/8XcYv9DwAAAM3I3f/LuOWWK7f1lg6V/l//r//X/+v/17++/n+Z9P/jZvn8/+tvrH/U/zfR/1+l/2+j/x8G/T/7N7f+P3f/r+IW3/8HAACAZuTu/3XcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3dLL/9f/6/332/2fTTP3/Ofr/c/T/6+n/D4f+f9ws+/8L6P+b6P89/7+R/t/z/9mEufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8Z9a/7/4/t/z//X/+n/9/6zo/8fp/yfo//X/+n/9Pxs1t/4/d/+f4pZO9j8AAAD0IHf/n+MW+x8AAACakbv/L3GL/Q8AAADNyN3/17ilk/3v+f/6f/2//l//v/719f/LpP8fp/9fr36j9P/6f/2//p+Nmlv/n7v/b3FLJ/sfAAAAepC7/+9xi/0PAAAAzcjdf0vcYv8DAABAM3L3/yNu6WT/6//1//p//b/+f/3r6/+XSf8/bpv9/73uOP2ynv+/9f4/34L+X/+v/2cj5tb/5+6/NW7pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/8foX9f+j9P8737/+f/3Xh/5f/6//P3j6/3HLef5/fLz+fwfP/5/3+9f/6/9ZNbf+P3f/f+KWTvY/AAAA9CB3/21xi/0PAAAAzcjd/9+4xf4HAACAZuTu/1/c0sn+9/z/JfX/V+n/9f/6f/2//n+C/n/ccvp/z/9fR/8/7/ev/9f/s2pu/X/u/v8HAAD//8r1Pfg=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0xfe37, 0x0) 2.371148628s ago: executing program 5 (id=2080): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$sequencer(r0, &(0x7f0000000240)=[@l={0x92, 0x8, 0xc0, 0x17, 0x5, 0x1, 0x10}], 0x8) 2.145533495s ago: executing program 5 (id=2083): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") mount$bind(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x40020, 0x0) 1.933725545s ago: executing program 1 (id=2085): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@jqfmt_vfsold}, {@errors_remount}, {@quota}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 1.377478304s ago: executing program 3 (id=2088): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000003, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x1012, 0x81, 0x0, 0x4, 0xfff, 0x1}) 1.263787374s ago: executing program 4 (id=2089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) 1.050523953s ago: executing program 4 (id=2090): mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xaa.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfF\n\x04So\xe5Z\xe1\xdf\"\x9ay QR\x9d\xd2Se\xcb\x9e]\x98~\x8aY\r\x0e\xae[\xbcD\x16v\x11C\x06\x94\x8e#?\x12\xac4\xb7\x00\x00\x00\x00\x00\x00\x1c_\x8a\x9d\xa1L\xed??2P\x8b\xdf~a', 0x40, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.037653483s ago: executing program 3 (id=2091): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x395a}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) 987.621118ms ago: executing program 2 (id=2092): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) 857.563611ms ago: executing program 1 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 822.085223ms ago: executing program 4 (id=2094): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind(r0, &(0x7f0000002200)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80) 804.878126ms ago: executing program 3 (id=2095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}, 0xe) 577.686903ms ago: executing program 4 (id=2096): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) 528.17986ms ago: executing program 3 (id=2097): r0 = fanotify_init(0x200, 0x40000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="753425cfe2ecbddb", 0x8}], 0x1) 391.415589ms ago: executing program 1 (id=2098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}, 0x4}, 0x90) 284.967964ms ago: executing program 3 (id=2099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f086dd1bffffff00004000630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x67, 0x0, &(0x7f0000001140)="5687116f1b3f71d4cce91b8a7689c29c1dab8a4750d2e7009ced71bb27c9438a8eee0e76bc0a7d8c005b0c0f4c8e4c3865bfa2561676e335716f8fbf4105e0026190cce8b2c1629d2f5adf279026e7b3c5953cfd9b4e75644304896330a4527fd8931c61e6ff6d", 0x0, 0x2, 0x0, 0xfffffffc}, 0x50) 228.353192ms ago: executing program 4 (id=2100): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r0, 0x8ce, 0x1) 115.876971ms ago: executing program 1 (id=2101): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x1, 0x1d2, &(0x7f0000000900)="$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") open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) 38.182378ms ago: executing program 3 (id=2102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0), 0x4) 0s ago: executing program 4 (id=2103): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0x8002007ffb) kernel console output (not intermixed with test programs): ailed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 136.267872][ T7044] netlink: 'syz.1.448': attribute type 4 has an invalid length. [ 136.294190][ T7044] netlink: 236 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.323384][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.544883][ T7053] netlink: 1608 bytes leftover after parsing attributes in process `syz.2.451'. [ 136.763582][ T7034] loop4: detected capacity change from 0 to 32768 [ 136.808779][ T7034] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.444 (7034) [ 136.898447][ T7034] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.929664][ T7034] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.961495][ T7034] BTRFS info (device loop4): disk space caching is enabled [ 136.971762][ T7034] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 136.985201][ T7061] block device autoloading is deprecated and will be removed. [ 137.078483][ T7072] loop1: detected capacity change from 0 to 128 [ 137.093331][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.116357][ T7061] syz.2.454: attempt to access beyond end of device [ 137.116357][ T7061] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.304252][ T7034] BTRFS info (device loop4): rebuilding free space tree [ 137.313621][ T5839] Bluetooth: hci5: command tx timeout [ 137.331335][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 137.411502][ T7034] BTRFS info (device loop4): disabling free space tree [ 137.472333][ T7034] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.572510][ T7034] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.982478][ T5834] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 138.517080][ T6842] veth0_vlan: entered promiscuous mode [ 138.600821][ T6842] veth1_vlan: entered promiscuous mode [ 138.782093][ T6842] veth0_macvtap: entered promiscuous mode [ 138.825392][ T6842] veth1_macvtap: entered promiscuous mode [ 138.876193][ T7127] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 138.918324][ T7127] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 138.950687][ T7129] netlink: 'syz.3.476': attribute type 28 has an invalid length. [ 138.960594][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.964838][ T7127] overlayfs: missing 'lowerdir' [ 138.998588][ T7129] netlink: 'syz.3.476': attribute type 29 has an invalid length. [ 139.010190][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.048708][ T7129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.476'. [ 139.110483][ T6842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.162751][ T6842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.212701][ T6842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.221951][ T6842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.278845][ T7135] loop1: detected capacity change from 0 to 1024 [ 139.701441][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.757392][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.888599][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.916432][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.259256][ T7154] loop1: detected capacity change from 0 to 8192 [ 140.726562][ T7176] loop4: detected capacity change from 0 to 256 [ 140.820908][ T7177] loop1: detected capacity change from 0 to 1024 [ 140.899557][ T7176] FAT-fs (loop4): Directory bread(block 64) failed [ 140.928073][ T7176] FAT-fs (loop4): Directory bread(block 65) failed [ 140.956564][ T7176] FAT-fs (loop4): Directory bread(block 66) failed [ 140.982228][ T7176] FAT-fs (loop4): Directory bread(block 67) failed [ 141.040689][ T7176] FAT-fs (loop4): Directory bread(block 68) failed [ 141.112831][ T7176] FAT-fs (loop4): Directory bread(block 69) failed [ 141.168499][ T7176] FAT-fs (loop4): Directory bread(block 70) failed [ 141.221644][ T7176] FAT-fs (loop4): Directory bread(block 71) failed [ 141.264623][ T7176] FAT-fs (loop4): Directory bread(block 72) failed [ 141.271247][ T7176] FAT-fs (loop4): Directory bread(block 73) failed [ 141.820740][ T7209] loop5: detected capacity change from 0 to 16 [ 141.869712][ T7209] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 142.156907][ T7217] xt_connbytes: Forcing CT accounting to be enabled [ 142.173180][ T7217] set match dimension is over the limit! [ 142.613942][ T30] audit: type=1326 audit(1747991294.507:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 142.718125][ T30] audit: type=1326 audit(1747991294.507:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 142.857521][ T30] audit: type=1326 audit(1747991294.577:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 142.969328][ T30] audit: type=1326 audit(1747991294.577:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 143.122766][ T30] audit: type=1326 audit(1747991294.577:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 143.216985][ T7249] xt_l2tp: v2 doesn't support IP mode [ 143.490055][ T7214] loop2: detected capacity change from 0 to 32768 [ 143.604089][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 143.628968][ T7214] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.955770][ T7214] XFS (loop2): Ending clean mount [ 144.065947][ T7214] XFS (loop2): Quotacheck needed: Please wait. [ 144.201520][ T7214] XFS (loop2): Quotacheck: Done. [ 144.265658][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 144.321998][ T7294] netlink: 1 bytes leftover after parsing attributes in process `syz.1.547'. [ 144.435632][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.619278][ T7302] delete_channel: no stack [ 144.913134][ T7310] openvswitch: netlink: EtherType 0 is less than min 600 [ 145.410676][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.563'. [ 145.931217][ T7348] loop1: detected capacity change from 0 to 1024 [ 145.993648][ T7348] hfsplus: bad catalog entry used to create inode [ 146.094232][ T7353] netlink: 'syz.4.576': attribute type 30 has an invalid length. [ 146.125293][ T7355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.151091][ T49] hfsplus: b-tree write err: -5, ino 4 [ 146.619517][ T7373] loop3: detected capacity change from 0 to 1764 [ 146.710253][ T7373] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 146.791295][ T7381] netlink: 160 bytes leftover after parsing attributes in process `syz.2.588'. [ 146.848325][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.042730][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 147.080202][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.111167][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.158310][ T5901] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.182752][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.218381][ T7389] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 147.225209][ T5901] usb 5-1: Product: syz [ 147.252671][ T5901] usb 5-1: Manufacturer: syz [ 147.273517][ T5901] usb 5-1: SerialNumber: syz [ 147.534460][ T5901] usb 5-1: 0:2 : does not exist [ 147.539700][ T5901] usb 5-1: unit 9 not found! [ 147.634618][ T5901] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 147.760856][ T5901] usb 5-1: USB disconnect, device number 4 [ 147.772571][ T7405] loop1: detected capacity change from 0 to 128 [ 147.828627][ T7405] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.844731][ T7377] loop5: detected capacity change from 0 to 32768 [ 147.886845][ T7405] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.919537][ T7377] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 147.972344][ T7377] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 148.139854][ T7377] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 148.214616][ T7377] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 148.322728][ T7377] OCFS2: File system is now read-only. [ 148.328308][ T7377] (syz.5.587,7377,0):ocfs2_search_one_group:1738 ERROR: status = -30 [ 148.422442][ T7377] (syz.5.587,7377,0):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30 [ 148.473628][ T7377] (syz.5.587,7377,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 148.511390][ T7377] (syz.5.587,7377,0):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 148.560803][ T7377] (syz.5.587,7377,0):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 148.594417][ T5893] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.612974][ T7377] (syz.5.587,7377,0):ocfs2_mknod_locked:638 ERROR: status = -30 [ 148.621742][ T7377] (syz.5.587,7377,0):ocfs2_mknod:385 ERROR: status = -30 [ 148.693492][ T7377] (syz.5.587,7377,1):ocfs2_mknod:502 ERROR: status = -30 [ 148.700940][ T7377] (syz.5.587,7377,1):ocfs2_create:675 ERROR: status = -30 [ 148.792837][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 148.810729][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.853147][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 148.890259][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.925651][ T7431] loop4: detected capacity change from 0 to 8 [ 148.933543][ T7429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.612'. [ 148.950239][ T6842] ocfs2: Unmounting device (7,5) on (node local) [ 148.956892][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.981175][ T7429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.018734][ T5893] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 149.052544][ T7431] SQUASHFS error: Failed to read block 0x2fc: -5 [ 149.075522][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.096277][ T7431] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 149.136244][ T7431] SQUASHFS error: Unable to read directory block [247:26] [ 149.155483][ T5893] usb 3-1: config 0 descriptor?? [ 149.162585][ T7417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.219291][ T5893] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 149.609283][ T5893] usb 3-1: USB disconnect, device number 3 [ 149.609439][ C0] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 149.638221][ T5191] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 149.708120][ T7436] loop1: detected capacity change from 0 to 4096 [ 149.727905][ T5842] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 149.984521][ T7436] ntfs3(loop1): ino=1f, "file2" attr_set_size [ 150.013180][ T7436] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 150.319413][ T7456] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 150.573908][ T7464] loop4: detected capacity change from 0 to 64 [ 150.873476][ T7474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.381699][ T7492] loop2: detected capacity change from 0 to 128 [ 151.410818][ T7492] FAT-fs (loop2): bogus number of reserved sectors [ 151.432297][ T7492] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 151.463642][ T7492] FAT-fs (loop2): Can't find a valid FAT filesystem [ 151.492731][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.501023][ T7492] loop2: detected capacity change from 0 to 128 [ 151.662865][ T10] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 151.702222][ T10] usb 4-1: config 0 has no interface number 0 [ 151.709234][ T10] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 151.741585][ T10] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 151.794094][ T10] usb 4-1: config 0 interface 255 has no altsetting 0 [ 151.826991][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 151.866952][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.907577][ T10] usb 4-1: config 0 descriptor?? [ 151.940736][ T10] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 152.130628][ T7484] loop5: detected capacity change from 0 to 32768 [ 152.178383][ T7484] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 152.198283][ T5892] usb 4-1: USB disconnect, device number 3 [ 152.204699][ T7481] loop1: detected capacity change from 0 to 32768 [ 152.238455][ T7484] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 152.557318][ T6842] ocfs2: Unmounting device (7,5) on (node local) [ 152.897282][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 153.614857][ T7540] loop5: detected capacity change from 0 to 2048 [ 153.700342][ T7540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.810130][ T7543] nvme_fabrics: missing parameter 'transport=%s' [ 153.843025][ T7543] nvme_fabrics: missing parameter 'nqn=%s' [ 153.880872][ T7518] loop2: detected capacity change from 0 to 32768 [ 154.012943][ T7518] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.218038][ T7530] loop4: detected capacity change from 0 to 32768 [ 154.248280][ T7530] find_entry called with index >= next_index [ 154.255747][ T7530] find_entry called with index >= next_index [ 154.262341][ T7530] find_entry called with index >= next_index [ 154.369124][ T7518] XFS (loop2): Ending clean mount [ 154.415083][ T7518] XFS (loop2): Quotacheck needed: Please wait. [ 154.525508][ T7518] XFS (loop2): Quotacheck: Done. [ 154.757211][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.832304][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 156.033520][ T7612] loop2: detected capacity change from 0 to 1024 [ 156.450971][ T7624] loop5: detected capacity change from 0 to 256 [ 156.517058][ T7624] exfat: Deprecated parameter 'utf8' [ 156.595333][ T7624] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 156.703210][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.801572][ T7632] netlink: 32 bytes leftover after parsing attributes in process `syz.4.705'. [ 156.842988][ T7601] syz.3.690 (7601): drop_caches: 2 [ 156.896085][ T10] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 156.922760][ T10] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 156.997860][ T10] usb 2-1: config 0 has no interface number 1 [ 157.018110][ T10] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.058651][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 157.105551][ T10] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 157.117182][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.136362][ T10] usb 2-1: Product: syz [ 157.140602][ T10] usb 2-1: Manufacturer: syz [ 157.172933][ T10] usb 2-1: SerialNumber: syz [ 157.197582][ T10] usb 2-1: config 0 descriptor?? [ 157.220462][ T10] usb-storage 2-1:0.127: USB Mass Storage device detected [ 157.276726][ T10] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 157.437976][ T7626] loop1: detected capacity change from 0 to 1024 [ 157.440083][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 157.493509][ T10] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 157.540010][ T7626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.558993][ T7630] loop2: detected capacity change from 0 to 32768 [ 157.682288][ T7630] /dev/loop2: Can't open blockdev [ 157.794092][ T5839] Bluetooth: hci1: command tx timeout [ 157.809141][ T5893] usb 2-1: USB disconnect, device number 6 [ 158.453531][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.031823][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.733'. [ 159.391356][ T7706] kAFS: No cell specified [ 159.952966][ T7732] capability: warning: `syz.4.750' uses 32-bit capabilities (legacy support in use) [ 160.487740][ T7749] loop4: detected capacity change from 0 to 256 [ 160.503970][ T7749] exfat: Deprecated parameter 'namecase' [ 160.539919][ T7749] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 160.573907][ T7751] loop3: detected capacity change from 0 to 16 [ 160.624287][ T7751] erofs (device loop3): mounted with root inode @ nid 36. [ 161.105926][ T7763] loop2: detected capacity change from 0 to 1024 [ 161.184489][ T7763] hfsplus: keylen 65060 too large [ 161.206965][ T7735] loop5: detected capacity change from 0 to 32768 [ 161.218567][ T7763] hfsplus: xattr searching failed [ 161.273925][ T7735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.749 (7735) [ 161.371204][ T7735] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.414722][ T7735] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 161.476073][ T7735] BTRFS info (device loop5): using free-space-tree [ 161.578714][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.641585][ T7789] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 161.656796][ T7789] netlink: 224 bytes leftover after parsing attributes in process `syz.4.773'. [ 161.812796][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 161.839818][ T5893] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 161.858427][ T5893] usb 4-1: config 0 has no interface number 0 [ 161.888598][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 161.941742][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.966304][ T5893] usb 4-1: Product: syz [ 161.970556][ T5893] usb 4-1: Manufacturer: syz [ 161.981519][ T5893] usb 4-1: SerialNumber: syz [ 161.985170][ T6842] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.024763][ T5893] usb 4-1: config 0 descriptor?? [ 162.140850][ T7805] loop2: detected capacity change from 0 to 256 [ 162.251525][ T5893] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 162.297831][ T5893] usb 4-1: No valid video chain found. [ 162.330044][ T7805] FAT-fs (loop2): Directory bread(block 64) failed [ 162.352724][ T7805] FAT-fs (loop2): Directory bread(block 65) failed [ 162.359438][ T7805] FAT-fs (loop2): Directory bread(block 66) failed [ 162.394622][ T7805] FAT-fs (loop2): Directory bread(block 67) failed [ 162.462466][ T7805] FAT-fs (loop2): Directory bread(block 68) failed [ 162.470125][ T5893] usb 4-1: USB disconnect, device number 4 [ 162.495812][ T7805] FAT-fs (loop2): Directory bread(block 69) failed [ 162.531707][ T7805] FAT-fs (loop2): Directory bread(block 70) failed [ 162.555442][ T7805] FAT-fs (loop2): Directory bread(block 71) failed [ 162.562124][ T7805] FAT-fs (loop2): Directory bread(block 72) failed [ 162.585346][ T7805] FAT-fs (loop2): Directory bread(block 73) failed [ 163.061254][ T7827] AppArmor: change_hat: Invalid input '0' [ 163.257790][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 163.332234][ T7837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.339957][ T7837] IPv6: NLM_F_CREATE should be set when creating new route [ 163.347741][ T7837] IPv6: NLM_F_CREATE should be set when creating new route [ 163.355086][ T7837] IPv6: NLM_F_CREATE should be set when creating new route [ 163.687083][ T30] audit: type=1326 audit(1747991315.607:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b52f8e969 code=0x0 [ 163.959755][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.805'. [ 164.032727][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 164.216497][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.237131][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 164.622765][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.742746][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 164.764915][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 164.777959][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.794360][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 164.823137][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 164.826970][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.835636][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.857885][ T10] usb 2-1: Product: syz [ 164.862123][ T10] usb 2-1: Manufacturer: syz [ 164.888336][ T5893] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 164.890992][ T10] usb 2-1: SerialNumber: syz [ 164.924948][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.953599][ T5893] usb 6-1: Product: syz [ 164.957832][ T5893] usb 6-1: Manufacturer: syz [ 164.965623][ T10] usb 2-1: config 0 descriptor?? [ 164.991943][ T5893] usb 6-1: SerialNumber: syz [ 165.001579][ T7855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.016992][ T5893] usb 6-1: config 0 descriptor?? [ 165.026582][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 165.065115][ T5893] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 165.194727][ T10] rc_core: IR keymap rc-xbox-dvd not found [ 165.200619][ T10] Registered IR keymap rc-empty [ 165.208782][ T7891] loop2: detected capacity change from 0 to 64 [ 165.252510][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 165.278398][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 165.308034][ T7855] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 165.314949][ T7855] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.389719][ T7855] vhci_hcd vhci_hcd.0: Device attached [ 165.455746][ T7893] vhci_hcd: connection closed [ 165.456791][ T5901] usb 2-1: USB disconnect, device number 7 [ 165.456970][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 165.486030][ T59] vhci_hcd: stop threads [ 165.490933][ T59] vhci_hcd: release socket [ 165.504945][ T59] vhci_hcd: disconnect device [ 165.517594][ T5893] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 165.543586][ T5893] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 165.586125][ T10] vhci_hcd: vhci_device speed not set [ 165.597606][ T5893] usb 6-1: USB disconnect, device number 2 [ 166.219374][ T7912] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 166.227428][ T7912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.247808][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.875223][ T7927] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.836'. [ 166.906625][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 166.919602][ T7927] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 167.445923][ T7953] syz.1.848: attempt to access beyond end of device [ 167.445923][ T7953] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 167.504926][ T7953] syz.1.848: attempt to access beyond end of device [ 167.504926][ T7953] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 167.596851][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 167.645710][ T7953] syz.1.848: attempt to access beyond end of device [ 167.645710][ T7953] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 167.697723][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 167.744682][ T7953] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 167.752301][ T7953] UDF-fs: Scanning with blocksize 512 failed [ 167.798260][ T7953] syz.1.848: attempt to access beyond end of device [ 167.798260][ T7953] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 167.853134][ T7953] syz.1.848: attempt to access beyond end of device [ 167.853134][ T7953] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 167.920481][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 167.947607][ T7953] syz.1.848: attempt to access beyond end of device [ 167.947607][ T7953] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 167.989776][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 168.033186][ T7953] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 168.049540][ T7953] UDF-fs: Scanning with blocksize 1024 failed [ 168.080042][ T7953] syz.1.848: attempt to access beyond end of device [ 168.080042][ T7953] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 168.123207][ T7953] syz.1.848: attempt to access beyond end of device [ 168.123207][ T7953] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 168.178096][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 168.212951][ T7953] syz.1.848: attempt to access beyond end of device [ 168.212951][ T7953] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 168.264870][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 168.335529][ T7953] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 168.368375][ T7953] UDF-fs: Scanning with blocksize 2048 failed [ 168.368807][ T7980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.862'. [ 168.406767][ T7953] syz.1.848: attempt to access beyond end of device [ 168.406767][ T7953] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 168.471427][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 168.501507][ T7982] loop3: detected capacity change from 0 to 512 [ 168.522037][ T7953] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 168.568029][ T7953] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 168.601812][ T7953] UDF-fs: Scanning with blocksize 4096 failed [ 168.624576][ T7982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.637514][ T7953] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 168.731640][ T7982] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.916605][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.752741][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.791257][ T8024] netlink: 'syz.1.881': attribute type 30 has an invalid length. [ 169.935739][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 169.946509][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.989370][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.044623][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.062678][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 170.071086][ T10] usb 6-1: Product: syz [ 170.093470][ T10] usb 6-1: Manufacturer: syz [ 170.134420][ T10] hub 6-1:4.0: USB hub found [ 170.147507][ T7993] loop2: detected capacity change from 0 to 32768 [ 170.174562][ T7993] (syz.2.867,7993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.225978][ T7993] (syz.2.867,7993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.303224][ T7993] JBD2: Ignoring recovery information on journal [ 170.330049][ T10] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 170.472914][ T7993] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 170.588852][ T8042] loop1: detected capacity change from 0 to 2048 [ 170.652885][ T8042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.663037][ T5893] usb 6-1: USB disconnect, device number 3 [ 170.808012][ T8044] netlink: 764 bytes leftover after parsing attributes in process `syz.4.890'. [ 170.821495][ T5850] ocfs2: Unmounting device (7,2) on (node local) [ 171.110497][ T8028] loop3: detected capacity change from 0 to 32768 [ 171.215242][ T8028] ea_get: invalid extended attribute [ 171.317116][ T8052] netlink: 'syz.4.895': attribute type 11 has an invalid length. [ 171.324510][ T8051] loop5: detected capacity change from 0 to 256 [ 171.332193][ T8052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.895'. [ 172.166471][ T5839] Bluetooth: hci3: unknown advertising packet type: 0x38 [ 172.207720][ T8078] loop4: detected capacity change from 0 to 256 [ 172.385792][ T8078] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 172.453089][ T8078] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 172.488931][ T8083] loop3: detected capacity change from 0 to 1764 [ 172.678616][ T8092] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 172.973374][ T8100] loop5: detected capacity change from 0 to 1024 [ 173.057020][ T8100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.288841][ T6842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.333396][ T8115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.924'. [ 174.203115][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.941'. [ 174.459849][ T8156] loop5: detected capacity change from 0 to 1024 [ 174.489512][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.576664][ T8161] loop4: detected capacity change from 0 to 1024 [ 174.620323][ T8156] fuse: Bad value for 'fd' [ 174.638842][ T8164] loop2: detected capacity change from 0 to 128 [ 174.694547][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 174.710197][ T8164] FAT-fs (loop2): Directory bread(block 3236) failed [ 174.730772][ T5901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.758829][ T5901] usb 2-1: config 0 has no interface number 0 [ 174.770245][ T8164] FAT-fs (loop2): Directory bread(block 3237) failed [ 174.798650][ T5901] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 174.810562][ T8164] FAT-fs (loop2): Directory bread(block 3238) failed [ 174.818753][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.837695][ T5901] usb 2-1: Product: syz [ 174.845745][ T8164] FAT-fs (loop2): Directory bread(block 3239) failed [ 174.853373][ T5901] usb 2-1: Manufacturer: syz [ 174.893528][ T5901] usb 2-1: SerialNumber: syz [ 174.905635][ T8164] FAT-fs (loop2): Directory bread(block 3240) failed [ 174.922064][ T5901] usb 2-1: config 0 descriptor?? [ 174.936826][ T5901] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 174.952571][ T8164] FAT-fs (loop2): Directory bread(block 3241) failed [ 174.962260][ T59] hfsplus: b-tree write err: -5, ino 4 [ 174.995658][ T5901] usb 2-1: selecting invalid altsetting 1 [ 175.004122][ T8164] FAT-fs (loop2): Directory bread(block 3242) failed [ 175.022228][ T8167] netlink: 'syz.5.949': attribute type 10 has an invalid length. [ 175.031975][ T8164] FAT-fs (loop2): Directory bread(block 3243) failed [ 175.038906][ T5901] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.067348][ T5901] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.086458][ T8164] FAT-fs (loop2): Directory bread(block 3236) failed [ 175.093857][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.120144][ T5901] usb 2-1: media controller created [ 175.132824][ T8164] FAT-fs (loop2): Directory bread(block 3237) failed [ 175.255305][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.363133][ T8175] netlink: 'syz.3.953': attribute type 5 has an invalid length. [ 175.377643][ T8174] loop5: detected capacity change from 0 to 1024 [ 175.600911][ T5901] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 175.759263][ T8185] loop4: detected capacity change from 0 to 512 [ 175.804381][ T8185] EXT4-fs: Invalid commit interval 1836789753, must be smaller than 21474836 [ 175.829606][ T5901] usb 2-1: USB disconnect, device number 8 [ 176.748306][ T8215] new mount options do not match the existing superblock, will be ignored [ 177.072582][ T8227] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 177.481975][ T8241] loop3: detected capacity change from 0 to 256 [ 177.666427][ T8241] FAT-fs (loop3): Directory bread(block 64) failed [ 177.681359][ T8243] can0: slcan on ttyS3. [ 177.691887][ T8241] FAT-fs (loop3): Directory bread(block 65) failed [ 177.709027][ T8241] FAT-fs (loop3): Directory bread(block 66) failed [ 177.722509][ T8241] FAT-fs (loop3): Directory bread(block 67) failed [ 177.736357][ T8241] FAT-fs (loop3): Directory bread(block 68) failed [ 177.748688][ T8241] FAT-fs (loop3): Directory bread(block 69) failed [ 177.770704][ T8241] FAT-fs (loop3): Directory bread(block 70) failed [ 177.804483][ T8241] FAT-fs (loop3): Directory bread(block 71) failed [ 177.812109][ T8241] FAT-fs (loop3): Directory bread(block 72) failed [ 177.812719][ T8207] loop5: detected capacity change from 0 to 32768 [ 177.832314][ T8241] FAT-fs (loop3): Directory bread(block 73) failed [ 177.847106][ T8249] loop4: detected capacity change from 0 to 1024 [ 177.857948][ T8249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.868656][ T8207] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.968 (8207) [ 177.887937][ T8249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.897828][ T8242] can0 (unregistered): slcan off ttyS3. [ 177.915301][ T8207] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 177.972171][ T8249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.990566][ T8207] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 178.004188][ T8207] BTRFS info (device loop5): disk space caching is enabled [ 178.011509][ T8207] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 178.059186][ T8256] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 178.112721][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 178.385451][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.456522][ T8207] BTRFS info (device loop5): rebuilding free space tree [ 178.574411][ T8207] BTRFS info (device loop5): disabling free space tree [ 178.626541][ T8207] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.714857][ T8207] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.898272][ T5891] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.922730][ T8289] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 179.023828][ T8289] : entered promiscuous mode [ 179.073035][ T8207] BTRFS info (device loop5): balance: start -ssoft,usage=172,vrange=18446744073709551614..18446744073709551615,limit=0,stripes=0..511 [ 179.111432][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 179.137529][ T8295] loop1: detected capacity change from 0 to 256 [ 179.143024][ T5891] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 179.154289][ T8207] BTRFS info (device loop5): balance: ended with status: 0 [ 179.209491][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.247451][ T8295] exfat: Deprecated parameter 'utf8' [ 179.268509][ T5891] usb 3-1: config 0 has no interface number 0 [ 179.304483][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 179.342997][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.343180][ T6842] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 179.390035][ T5891] usb 3-1: Product: syz [ 179.408818][ T5891] usb 3-1: Manufacturer: syz [ 179.448688][ T8295] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa943978a, utbl_chksum : 0xe619d30d) [ 179.456081][ T5891] usb 3-1: SerialNumber: syz [ 179.544103][ T5891] usb 3-1: config 0 descriptor?? [ 179.583381][ T8295] overlay: filesystem on ./file0 not supported [ 179.763248][ T5891] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 179.816545][ T5891] usb 3-1: No valid video chain found. [ 180.012884][ T5901] usb 3-1: USB disconnect, device number 4 [ 180.390313][ T8328] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 180.402519][ T8329] loop3: detected capacity change from 0 to 256 [ 180.602819][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.604982][ T8329] FAT-fs (loop3): Directory bread(block 64) failed [ 180.614607][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1014'. [ 180.692762][ T8329] FAT-fs (loop3): Directory bread(block 65) failed [ 180.744823][ T8329] FAT-fs (loop3): Directory bread(block 66) failed [ 180.751476][ T8329] FAT-fs (loop3): Directory bread(block 67) failed [ 180.794628][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 180.815775][ T8329] FAT-fs (loop3): Directory bread(block 68) failed [ 180.835004][ T5891] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 180.864939][ T5891] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 180.887494][ T8329] FAT-fs (loop3): Directory bread(block 69) failed [ 180.916509][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.932106][ T8329] FAT-fs (loop3): Directory bread(block 70) failed [ 180.960330][ T8329] FAT-fs (loop3): Directory bread(block 71) failed [ 180.967201][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 180.998029][ T8329] FAT-fs (loop3): Directory bread(block 72) failed [ 181.006843][ T5891] usb 2-1: config 1 has no interface number 0 [ 181.032685][ T8329] FAT-fs (loop3): Directory bread(block 73) failed [ 181.046244][ T5891] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 181.076145][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.127151][ T5891] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 181.211080][ T30] audit: type=1800 audit(1747991333.117:28): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1011" name="bus" dev="loop3" ino=1048625 res=0 errno=0 [ 181.326348][ T5891] snd_usb_pod 2-1:1.1: set_interface failed [ 181.332581][ T5891] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 181.360350][ T5891] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 181.423072][ T5891] usb 2-1: USB disconnect, device number 9 [ 181.832094][ T8362] netlink: 'syz.3.1025': attribute type 39 has an invalid length. [ 182.043262][ T8335] loop5: detected capacity change from 0 to 32768 [ 182.081067][ T8335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1015 (8335) [ 182.147367][ T8335] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.232906][ T8335] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 182.242024][ T8335] BTRFS info (device loop5): using free-space-tree [ 182.746003][ T6842] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.863900][ T8402] loop2: detected capacity change from 0 to 64 [ 182.870455][ T8354] loop4: detected capacity change from 0 to 32768 [ 182.955888][ T30] audit: type=1800 audit(1747991334.867:29): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1023" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 183.885421][ T8422] loop3: detected capacity change from 0 to 4096 [ 184.040052][ T30] audit: type=1326 audit(1747991335.957:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00098e969 code=0x7ffc0000 [ 184.172738][ T30] audit: type=1326 audit(1747991335.987:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00098e969 code=0x7ffc0000 [ 184.272304][ T8436] loop5: detected capacity change from 0 to 128 [ 184.316065][ T30] audit: type=1326 audit(1747991336.007:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fe00098e969 code=0x7ffc0000 [ 184.396807][ T8438] loop1: detected capacity change from 0 to 256 [ 184.450106][ T8438] exfat: Deprecated parameter 'namecase' [ 184.456350][ T30] audit: type=1326 audit(1747991336.007:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00098e969 code=0x7ffc0000 [ 184.559986][ T30] audit: type=1326 audit(1747991336.007:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00098e969 code=0x7ffc0000 [ 184.638916][ T8438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e008e1, utbl_chksum : 0xe619d30d) [ 184.739742][ T8444] loop5: detected capacity change from 0 to 8 [ 185.477713][ T8459] loop4: detected capacity change from 0 to 4096 [ 185.543116][ T8459] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 185.618604][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1068'. [ 185.649610][ T8475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.653048][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 185.841044][ T8479] tmpfs: Bad value for 'mpol' [ 185.879105][ T8475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.965392][ T8471] gretap1: entered promiscuous mode [ 186.001235][ T8471] gretap1: entered allmulticast mode [ 186.302893][ T8488] netlink: 'syz.5.1076': attribute type 21 has an invalid length. [ 186.310965][ T8488] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1076'. [ 186.386416][ T8491] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 186.417867][ T8491] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 186.503982][ T8491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.071132][ T8516] loop4: detected capacity change from 0 to 1024 [ 187.114144][ T8516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.211683][ T8516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.308268][ T8516] /dev/loop4: Can't open blockdev [ 187.574340][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.132923][ T5892] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.304923][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 188.353511][ T5892] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 188.371519][ T8559] loop4: detected capacity change from 0 to 4096 [ 188.378111][ T5892] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 188.391398][ T5892] usb 2-1: config 6 has no interface number 0 [ 188.420826][ T5892] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.443202][ T8559] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 188.468070][ T5892] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.543090][ T5892] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.558901][ T8559] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 188.588789][ T5892] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.603375][ T8559] ntfs3(loop4): Failed to load $Bitmap (-22). [ 188.668088][ T5892] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 188.711910][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.749412][ T5892] usb 2-1: Product: syz [ 188.788069][ T5892] usb 2-1: Manufacturer: syz [ 188.822725][ T5892] usb 2-1: SerialNumber: syz [ 188.937252][ T5892] hso 2-1:6.2: Failed to find BULK IN ep [ 188.937695][ T8576] IPv6: sit1: Disabled Multicast RS [ 188.983004][ T8576] sit1: entered allmulticast mode [ 189.119809][ T5892] usb 2-1: USB disconnect, device number 10 [ 189.607796][ T8597] loop4: detected capacity change from 0 to 16 [ 189.652840][ T8597] erofs (device loop4): mounted with root inode @ nid 36. [ 191.222856][ T8656] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1157'. [ 191.425851][ T8662] loop4: detected capacity change from 0 to 1024 [ 191.497612][ T8662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.614433][ T8673] QAT: failed to copy from user cfg_data. [ 191.761216][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.045607][ T8680] bond1: entered promiscuous mode [ 192.091530][ T8680] bond1: entered allmulticast mode [ 192.114825][ T8680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.292933][ T5828] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 192.304704][ T8695] loop2: detected capacity change from 0 to 16 [ 192.333979][ T8695] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 192.477877][ T5828] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 192.507189][ T5828] usb 6-1: config 0 has no interface number 0 [ 192.527487][ T5828] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.567382][ T5828] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 192.593280][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.620137][ T5828] usb 6-1: Product: syz [ 192.644987][ T5828] usb 6-1: Manufacturer: syz [ 192.649669][ T5828] usb 6-1: SerialNumber: syz [ 192.698618][ T5828] usb 6-1: config 0 descriptor?? [ 192.741281][ T5828] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 192.897329][ T8685] loop1: detected capacity change from 0 to 32768 [ 192.951572][ T8711] loop4: detected capacity change from 0 to 256 [ 192.966428][ T8685] btrfs: Deprecated parameter 'usebackuproot' [ 192.980688][ T8685] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 192.985405][ T8711] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.010866][ C0] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 193.046549][ T8685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1171 (8685) [ 193.132910][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 193.165730][ T8685] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.192812][ T8685] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 193.212254][ T8685] BTRFS info (device loop1): disk space caching is enabled [ 193.214639][ T5901] usb 6-1: USB disconnect, device number 4 [ 193.234139][ T8685] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 193.300359][ T5901] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 193.313137][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 193.353128][ T5891] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 193.403107][ T5891] usb 3-1: config 0 has no interface number 0 [ 193.435835][ T5891] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 193.459991][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.484993][ T5891] usb 3-1: Product: syz [ 193.512831][ T5891] usb 3-1: Manufacturer: syz [ 193.517508][ T5891] usb 3-1: SerialNumber: syz [ 193.551591][ T8685] btrfs: Deprecated parameter 'usebackuproot' [ 193.559798][ T5891] usb 3-1: config 0 descriptor?? [ 193.575928][ T5891] hub 3-1:0.145: bad descriptor, ignoring hub [ 193.582267][ T5891] hub 3-1:0.145: probe with driver hub failed with error -5 [ 193.614622][ T8685] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 193.629334][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input9 [ 193.643038][ T8685] BTRFS warning (device loop1 state M): remount supports changing free space tree only from RO to RW [ 193.673157][ T8685] BTRFS info (device loop1 state M): enabling free space tree [ 193.705816][ T8685] BTRFS info (device loop1 state M): force clearing of disk cache [ 193.752669][ T8685] BTRFS info (device loop1 state M): trying to use backup root at mount time [ 193.761550][ T8685] BTRFS info (device loop1 state M): disabling disk space caching [ 194.021596][ T5835] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.160962][ T8713] loop3: detected capacity change from 0 to 32768 [ 194.205070][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211577][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.316374][ T8713] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 194.518326][ T5847] ocfs2: Unmounting device (7,3) on (node local) [ 195.400435][ T8778] xt_TCPMSS: Only works on TCP SYN packets [ 196.183041][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.253952][ T8809] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1219'. [ 196.373335][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.415007][ T5893] usb 2-1: no configurations [ 196.429441][ T5893] usb 2-1: can't read configurations, error -22 [ 196.676208][ T8809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.710282][ T8809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.736059][ T8809] bond0 (unregistering): Released all slaves [ 196.782842][ T8817] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 196.899931][ T8822] netlink: 'syz.2.1225': attribute type 7 has an invalid length. [ 196.986114][ T8822] : entered promiscuous mode [ 197.228568][ T5891] usb 3-1: USB disconnect, device number 5 [ 197.749722][ T8844] loop4: detected capacity change from 0 to 1024 [ 197.887761][ T8844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.952798][ T8844] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.273656][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.746148][ T8886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.863514][ T8891] loop3: detected capacity change from 0 to 256 [ 199.346519][ T8905] loop5: detected capacity change from 0 to 256 [ 199.378862][ T8905] msdos: Unknown parameter 'n' [ 199.938049][ T8920] loop5: detected capacity change from 0 to 4096 [ 200.534749][ T8939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.007594][ T8925] loop4: detected capacity change from 0 to 32768 [ 201.057692][ T8925] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1274 (8925) [ 201.138867][ T8925] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 201.165397][ T8925] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.213987][ T8925] BTRFS info (device loop4): disk space caching is enabled [ 201.230194][ T8925] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 201.528259][ T8925] BTRFS info (device loop4): rebuilding free space tree [ 201.617088][ T8990] loop2: detected capacity change from 0 to 512 [ 201.626426][ T8925] BTRFS info (device loop4): disabling free space tree [ 201.626510][ T8925] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.626558][ T8925] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.713379][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 201.767212][ T8993] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 201.804569][ T8945] loop1: detected capacity change from 0 to 32768 [ 201.831193][ T8925] BTRFS info (device loop4): balance: start -f -ssoft,profiles=system|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=828928688128,usage=0..193,vrange=5..4294967296,limit=9223372036854775808 [ 201.852327][ T8945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1283 (8945) [ 201.853231][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.879470][ T8990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.972951][ T8925] BTRFS info (device loop4): balance: ended with status: 0 [ 201.980518][ T8990] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.993901][ T8945] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.056018][ T8990] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 202.081512][ T8945] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 202.122214][ T8990] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 64512 [ 202.162746][ T8945] BTRFS info (device loop1): disk space caching is enabled [ 202.170430][ T8945] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 202.191169][ T8990] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1298: Failed to acquire dquot type 0 [ 202.236933][ T5834] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 202.389764][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.508440][ T9019] loop5: detected capacity change from 0 to 256 [ 202.658583][ T9019] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 202.937768][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.062960][ T5828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 203.238311][ T5828] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 203.290214][ T5828] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.352710][ T5828] usb 6-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 203.394542][ T5828] usb 6-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 203.474669][ T5828] usb 6-1: config 1 interface 1 has no altsetting 0 [ 203.513654][ T5828] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.541620][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.571401][ T5828] usb 6-1: Product: syz [ 203.599551][ T5828] usb 6-1: Manufacturer: syz [ 203.623012][ T5828] usb 6-1: SerialNumber: syz [ 203.676226][ T5828] usb 6-1: selecting invalid altsetting 0 [ 203.720934][ T5828] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 203.775609][ T9050] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1317'. [ 203.884239][ T5828] usb 6-1: selecting invalid altsetting 0 [ 203.890072][ T5828] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 203.992750][ T5828] usb 6-1: USB disconnect, device number 5 [ 204.282978][ T9061] SET target dimension over the limit! [ 204.617588][ T9072] loop3: detected capacity change from 0 to 256 [ 204.727571][ T9072] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 204.860415][ T9072] exFAT-fs (loop3): error, data size is invalid(10) [ 204.913009][ T9072] exFAT-fs (loop3): Filesystem has been set read-only [ 206.228934][ T9088] loop5: detected capacity change from 0 to 32768 [ 206.237611][ T9125] loop4: detected capacity change from 0 to 256 [ 206.283378][ T9088] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1336 (9088) [ 206.286050][ T9125] exfat: Deprecated parameter 'namecase' [ 206.373447][ T9088] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.378875][ T9125] exfat: Deprecated parameter 'namecase' [ 206.456214][ T9088] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 206.500183][ T9125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 206.505806][ T9088] BTRFS info (device loop5): using free-space-tree [ 207.037968][ T6842] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.541648][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1367'. [ 207.586176][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1367'. [ 207.877962][ T9176] loop1: detected capacity change from 0 to 256 [ 207.939289][ T9180] loop4: detected capacity change from 0 to 16 [ 207.954436][ T9176] exfat: Deprecated parameter 'utf8' [ 207.971277][ T9176] exfat: Deprecated parameter 'namecase' [ 207.979451][ T9180] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 207.987270][ T9176] exfat: Deprecated parameter 'namecase' [ 208.045597][ T9180] cramfs: Error -3 while decompressing! [ 208.075083][ T9180] cramfs: ffffffff99bb5aa8(453)->ffff888079473000(4096) [ 208.093120][ T9176] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ba4ce3d, utbl_chksum : 0xe619d30d) [ 208.324386][ T9158] loop2: detected capacity change from 0 to 32768 [ 208.421431][ T9158] ea_get: invalid extended attribute [ 209.424964][ T9220] loop3: detected capacity change from 0 to 16 [ 209.460457][ T9223] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1392'. [ 209.515952][ T9220] erofs (device loop3): mounted with root inode @ nid 36. [ 209.600197][ T9220] erofs (device loop3): per-inode big pcluster without sb feature for nid 36 [ 209.691656][ T9220] erofs (device loop3): per-inode big pcluster without sb feature for nid 36 [ 209.824798][ T9220] erofs (device loop3): read error -117 @ 43 of nid 36 [ 209.833126][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 209.861737][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 210.017813][ T9237] loop1: detected capacity change from 0 to 256 [ 210.056881][ T9237] exfat: Deprecated parameter 'utf8' [ 210.062380][ T9237] exfat: Deprecated parameter 'namecase' [ 210.155997][ T9237] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 210.213993][ T9245] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1404'. [ 211.108899][ T9271] loop2: detected capacity change from 0 to 1024 [ 211.356880][ T9277] loop3: detected capacity change from 0 to 1024 [ 211.411629][ T30] audit: type=1400 audit(1747991363.317:35): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 248 bytes leftover after parsing attributes in process `syz.4.1424'. [ 211.773332][ T9290] loop2: detected capacity change from 0 to 64 [ 211.856221][ T9290] Trying to free block not in datazone [ 211.899066][ T9290] Trying to free block not in datazone [ 211.927622][ T9290] Trying to free block not in datazone [ 211.961469][ T9290] Trying to free block not in datazone [ 211.982303][ T9290] minix_free_block (loop2:6): bit already cleared [ 212.023751][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.032919][ T9290] Trying to free block not in datazone [ 212.038466][ T9290] Trying to free block not in datazone [ 212.213367][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 212.231312][ T5893] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 212.268595][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.302910][ T5893] usb 2-1: Product: syz [ 212.307165][ T5893] usb 2-1: Manufacturer: syz [ 212.311819][ T5893] usb 2-1: SerialNumber: syz [ 212.383824][ T5893] usb 2-1: config 0 descriptor?? [ 212.402324][ T5893] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 212.432318][ T9308] loop3: detected capacity change from 0 to 64 [ 212.821776][ T5893] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 212.842913][ T5893] visor 2-1:0.0: probe with driver visor failed with error -71 [ 212.880803][ T5893] usb 2-1: USB disconnect, device number 13 [ 213.205180][ T9331] loop3: detected capacity change from 0 to 1024 [ 213.489555][ T30] audit: type=1326 audit(1747991365.407:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 213.490544][ T9341] loop2: detected capacity change from 0 to 256 [ 213.602440][ T30] audit: type=1326 audit(1747991365.407:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 213.647034][ T9347] loop1: detected capacity change from 0 to 512 [ 213.681754][ T9341] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 213.707347][ T30] audit: type=1326 audit(1747991365.497:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 213.811342][ T30] audit: type=1326 audit(1747991365.497:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.5.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 213.882930][ T9347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.976864][ T9347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.051545][ T9347] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.383636][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.043403][ T9392] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 215.051208][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1464'. [ 215.062300][ T9395] loop3: detected capacity change from 0 to 8 [ 215.152831][ T9392] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 215.176706][ T9395] SQUASHFS error: Unknown inode type 80 in squashfs_iget! [ 215.420138][ T9406] loop1: detected capacity change from 0 to 1024 [ 215.481377][ T9406] EXT4-fs: Ignoring removed nobh option [ 215.533520][ T9406] EXT4-fs: Ignoring removed bh option [ 215.618929][ T9406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.759286][ T9411] loop4: detected capacity change from 0 to 4096 [ 215.767630][ T9411] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 215.796350][ T9420] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.884814][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.959285][ T9424] kAFS: unable to lookup cell '.S²jË¡8' [ 216.662911][ T5892] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.758801][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 216.758824][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 216.764985][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 216.772047][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 216.778610][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 216.839676][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 216.867998][ T9412] loop5: detected capacity change from 0 to 32768 [ 216.884205][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.907371][ T5892] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 216.917642][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.938216][ T5892] usb 2-1: config 0 descriptor?? [ 216.963996][ T5892] gspca_main: spca501-2.14.0 probing 0000:0000 [ 216.975408][ T9412] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.041884][ T9445] loop2: detected capacity change from 0 to 4096 [ 217.071820][ T9412] XFS (loop5): Ending clean mount [ 217.094657][ T9412] XFS (loop5): Quotacheck needed: Please wait. [ 217.109528][ T9445] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 217.239677][ T9459] loop4: detected capacity change from 0 to 2048 [ 217.269444][ T9461] loop3: detected capacity change from 0 to 1024 [ 217.283541][ T9412] XFS (loop5): Quotacheck: Done. [ 217.341755][ T9445] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 217.368009][ T5892] gspca_spca501: reg write: error -71 [ 217.412577][ T9462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.415102][ T5892] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 217.454733][ T5892] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 217.549943][ T5892] usb 2-1: USB disconnect, device number 14 [ 217.706782][ T6842] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.819635][ T9466] loop2: detected capacity change from 0 to 2048 [ 217.878333][ T9466] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.942898][ T9466] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 217.950606][ T9466] UDF-fs: Scanning with blocksize 512 failed [ 218.045643][ T9466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.547033][ T9487] loop5: detected capacity change from 0 to 64 [ 219.083871][ T9505] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.466309][ T9521] loop2: detected capacity change from 0 to 8 [ 219.583622][ T9525] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 219.892502][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 219.941424][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 220.086517][ T9542] usb usb8: usbfs: process 9542 (syz.3.1528) did not claim interface 0 before use [ 220.189738][ T9545] loop5: detected capacity change from 0 to 1024 [ 220.189811][ T9543] loop2: detected capacity change from 0 to 2048 [ 220.278879][ T9543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.580039][ T9554] loop5: detected capacity change from 0 to 512 [ 220.862175][ T9554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.959005][ T9554] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.040472][ T9539] loop1: detected capacity change from 0 to 40427 [ 221.126377][ T9539] F2FS-fs (loop1): build fault injection rate: 690 [ 221.145181][ T6842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.170097][ T9539] F2FS-fs (loop1): Image doesn't support compression [ 221.201842][ T9539] F2FS-fs (loop1): Image doesn't support compression [ 221.248989][ T9572] loop2: detected capacity change from 0 to 2048 [ 221.295604][ T9539] F2FS-fs (loop1): invalid crc value [ 221.334390][ T9572] EXT4-fs: Ignoring removed bh option [ 221.393522][ T9572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.411554][ T9579] libceph: resolve '0.' (ret=-3): failed [ 221.418261][ T9572] EXT4-fs: Ignoring removed nobh option [ 221.544471][ T9572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.621781][ T9572] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 5: comm syz.2.1541: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 221.722815][ T9572] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 221.783956][ T9539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.882410][ T9539] F2FS-fs (loop1): build fault injection rate: 690 [ 221.922773][ T9539] F2FS-fs (loop1): Image doesn't support compression [ 221.927792][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.929553][ T9539] F2FS-fs (loop1): Image doesn't support compression [ 222.933979][ T9624] loop4: detected capacity change from 0 to 16 [ 223.006025][ T9624] erofs (device loop4): mounted with root inode @ nid 36. [ 223.094450][ T9624] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 223.131974][ T9624] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 223.141081][ T9624] erofs (device loop4): read error -117 @ 72 of nid 36 [ 223.503063][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 223.677588][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 223.712565][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.754517][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 223.815791][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 223.837249][ T9626] loop5: detected capacity change from 0 to 32768 [ 223.874054][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 223.892965][ T9626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1566 (9626) [ 223.924547][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.967546][ T9626] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.975544][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 223.993078][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.012209][ T5893] usb 2-1: Product: syz [ 224.022502][ T9626] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 224.034601][ T5893] usb 2-1: Manufacturer: syz [ 224.040720][ T9653] loop3: detected capacity change from 0 to 256 [ 224.052709][ T5893] usb 2-1: SerialNumber: syz [ 224.064140][ T9626] BTRFS info (device loop5): using free-space-tree [ 224.081758][ T5893] usb 2-1: config 0 descriptor?? [ 224.099694][ T9653] exfat: Deprecated parameter 'utf8' [ 224.117486][ T9653] exfat: Deprecated parameter 'namecase' [ 224.162168][ T9653] exfat: Deprecated parameter 'namecase' [ 224.202888][ T9653] exfat: Deprecated parameter 'utf8' [ 224.313919][ T9653] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 224.386439][ T5893] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 224.432106][ T5893] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 224.507792][ T5893] usb 2-1: USB disconnect, device number 15 [ 224.547875][ T6842] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.696867][ T30] audit: type=1326 audit(1747991376.617:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723bf8e969 code=0x7ffc0000 [ 224.730354][ T30] audit: type=1326 audit(1747991376.647:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f723bf8e969 code=0x7ffc0000 [ 224.754859][ T30] audit: type=1326 audit(1747991376.647:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723bf8e969 code=0x7ffc0000 [ 224.807537][ T30] audit: type=1326 audit(1747991376.647:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723bf8e969 code=0x7ffc0000 [ 225.268132][ T9686] loop1: detected capacity change from 0 to 64 [ 225.331436][ T9648] loop4: detected capacity change from 0 to 32768 [ 225.338744][ T9690] loop2: detected capacity change from 0 to 1024 [ 225.446694][ T9686] Trying to free block not in datazone [ 225.452485][ T9686] Trying to free block not in datazone [ 225.528615][ T9648] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.588640][ T9690] bio_check_eod: 2 callbacks suppressed [ 225.588662][ T9690] syz.2.1587: attempt to access beyond end of device [ 225.588662][ T9690] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 225.679951][ T9690] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 225.758251][ T9690] syz.2.1587: attempt to access beyond end of device [ 225.758251][ T9690] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 225.902776][ T9690] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 225.928222][ T9648] XFS (loop4): Ending clean mount [ 225.963186][ T9648] XFS (loop4): Quotacheck needed: Please wait. [ 226.188573][ T9648] XFS (loop4): Quotacheck: Done. [ 226.428438][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.901688][ T9701] loop3: detected capacity change from 0 to 32768 [ 227.042958][ T9701] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.289701][ T9746] netlink: 'syz.5.1607': attribute type 21 has an invalid length. [ 227.316612][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1607'. [ 227.371191][ T9748] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 227.402528][ T9701] XFS (loop3): Ending clean mount [ 227.404506][ T9750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.449770][ T9748] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.476115][ T9701] XFS (loop3): Quotacheck needed: Please wait. [ 227.544935][ T9748] bond0: (slave team0): Enslaving as an active interface with an up link [ 227.572734][ T9701] XFS (loop3): Quotacheck: Done. [ 227.774588][ T5847] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.904265][ T9726] loop1: detected capacity change from 0 to 32768 [ 227.913447][ T9726] btrfs: Deprecated parameter 'usebackuproot' [ 227.919584][ T9726] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 227.973710][ T9726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1602 (9726) [ 228.122705][ T9726] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.207537][ T9726] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 228.282756][ T9726] BTRFS info (device loop1): using free-space-tree [ 228.495861][ T1135] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 228.510375][ T9726] BTRFS warning (device loop1): couldn't read tree root [ 228.517904][ T9726] BTRFS warning (device loop1): try to load backup roots slot 1 [ 228.526732][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 228.552502][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 228.632069][ T9726] BTRFS warning (device loop1): couldn't read tree root [ 228.660432][ T9726] BTRFS warning (device loop1): try to load backup roots slot 2 [ 228.692014][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1614'. [ 228.734233][ T2967] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 228.783598][ T9726] BTRFS warning (device loop1): couldn't read tree root [ 228.790620][ T9726] BTRFS warning (device loop1): try to load backup roots slot 3 [ 228.906059][ T9726] BTRFS info (device loop1): rebuilding free space tree [ 228.939958][ T9726] BTRFS info (device loop1): checking UUID tree [ 229.173764][ T9811] tc_dump_action: action bad kind [ 229.337549][ T5835] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.872873][ T5892] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.093793][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.113277][ T5892] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 230.152703][ T5892] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.222098][ T5892] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.262798][ T5892] usb 6-1: config 1 interface 1 has no altsetting 0 [ 230.295521][ T5892] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.340753][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.381612][ T5892] usb 6-1: Product: syz [ 230.402289][ T5892] usb 6-1: Manufacturer: syz [ 230.418394][ T5892] usb 6-1: SerialNumber: syz [ 230.497954][ T9805] loop3: detected capacity change from 0 to 32768 [ 230.506177][ T9841] loop1: detected capacity change from 0 to 64 [ 230.731079][ T5892] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 230.748946][ T5892] usb 6-1: MIDIStreaming interface descriptor not found [ 230.972738][ T5892] usb 6-1: USB disconnect, device number 6 [ 231.063417][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 231.127020][ T9816] loop4: detected capacity change from 0 to 32768 [ 231.229855][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.257436][ T5893] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 231.272400][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.281310][ T5893] usb 4-1: Product: syz [ 231.283653][ T9816] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.293970][ T5893] usb 4-1: Manufacturer: syz [ 231.298726][ T5893] usb 4-1: SerialNumber: syz [ 231.352381][ T5893] usb 4-1: config 0 descriptor?? [ 231.575657][ T5893] usb 4-1: ignoring: probably an ADSL modem [ 231.603353][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 231.642735][ T9816] XFS (loop4): Ending clean mount [ 231.702124][ T9816] XFS (loop4): Quotacheck needed: Please wait. [ 231.777998][ T5893] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 231.786974][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 231.811179][ T5893] usb 4-1: USB disconnect, device number 5 [ 231.818775][ T9816] XFS (loop4): Quotacheck: Done. [ 231.829332][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 231.848787][ T10] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 231.881428][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 231.940564][ T10] usb 2-1: config 1 has no interface number 1 [ 231.962767][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 231.979882][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 232.023646][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 232.036547][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 232.057001][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.066951][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.078477][ T10] usb 2-1: Product: syz [ 232.109760][ T10] usb 2-1: Manufacturer: syz [ 232.135080][ T10] usb 2-1: SerialNumber: syz [ 232.474378][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 232.482288][ T10] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 232.539456][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 232.561547][ T9868] loop2: detected capacity change from 0 to 40427 [ 232.617689][ T10] usb 2-1: USB disconnect, device number 16 [ 232.638670][ T9868] F2FS-fs (loop2): invalid crc value [ 232.750649][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.032764][ T9868] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.182417][ T9898] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 233.190215][ T9868] syz.2.1645: attempt to access beyond end of device [ 233.190215][ T9868] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 233.860122][ T9916] loop4: detected capacity change from 0 to 1024 [ 234.061873][ T9920] loop1: detected capacity change from 0 to 1764 [ 234.069137][ T9891] loop3: detected capacity change from 0 to 32768 [ 234.240993][ T9891] ialloc: diAlloc returned -5! [ 234.844143][ T9936] loop2: detected capacity change from 0 to 2048 [ 234.894329][ T9944] No such timeout policy "syz1" [ 234.916510][ T5854] loop2: p2 < > p3 p4 < > [ 234.929496][ T5854] loop2: partition table partially beyond EOD, truncated [ 234.953146][ T5854] loop2: p2 start 4294902784 is beyond EOD, truncated [ 234.982692][ T5854] loop2: p3 start 3724543488 is beyond EOD, truncated [ 235.044038][ T9936] loop2: p2 < > p3 p4 < > [ 235.061297][ T9936] loop2: partition table partially beyond EOD, truncated [ 235.088737][ T9936] loop2: p2 start 4294902784 is beyond EOD, truncated [ 235.122418][ T9936] loop2: p3 start 3724543488 is beyond EOD, truncated [ 235.252981][ T9954] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:5 [ 235.408381][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 235.458750][ T9961] loop1: detected capacity change from 0 to 256 [ 235.622050][ T9966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1692'. [ 235.639091][ T9961] FAT-fs (loop1): Directory bread(block 64) failed [ 235.680576][ T9962] loop2: detected capacity change from 0 to 4096 [ 235.687245][ T9961] FAT-fs (loop1): Directory bread(block 65) failed [ 235.687469][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 235.701661][ T9961] FAT-fs (loop1): Directory bread(block 66) failed [ 235.763369][ T9961] FAT-fs (loop1): Directory bread(block 67) failed [ 235.788335][ T9961] FAT-fs (loop1): Directory bread(block 68) failed [ 235.811206][ T9961] FAT-fs (loop1): Directory bread(block 69) failed [ 235.849641][ T9961] FAT-fs (loop1): Directory bread(block 70) failed [ 235.903173][ T9961] FAT-fs (loop1): Directory bread(block 71) failed [ 235.937679][ T9961] FAT-fs (loop1): Directory bread(block 72) failed [ 235.978211][ T9961] FAT-fs (loop1): Directory bread(block 73) failed [ 236.489619][ T30] audit: type=1326 audit(1747991388.407:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 236.583096][ T9986] loop3: detected capacity change from 0 to 256 [ 236.616701][ T9993] fuse: blksize only supported for fuseblk [ 236.642727][ T30] audit: type=1326 audit(1747991388.407:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 236.728890][ T30] audit: type=1326 audit(1747991388.447:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 236.842703][ T30] audit: type=1326 audit(1747991388.447:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 236.972679][ T30] audit: type=1326 audit(1747991388.447:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.5.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 236.994967][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.005409][ T9999] loop1: detected capacity change from 0 to 512 [ 237.059139][ T9999] EXT4-fs (loop1): orphan cleanup on readonly fs [ 237.065685][ T9999] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 237.075498][ T9999] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 237.103993][ T9999] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1709: attempt to clear invalid blocks 2 len 1 [ 237.170894][ T9999] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1709: invalid indirect mapped block 1819239214 (level 0) [ 237.199930][ T9999] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1709: invalid indirect mapped block 1819239214 (level 1) [ 237.216003][ T9999] EXT4-fs (loop1): 1 truncate cleaned up [ 237.223818][ T9999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.393823][T10009] loop3: detected capacity change from 0 to 2048 [ 237.394402][T10013] loop4: detected capacity change from 0 to 256 [ 237.435395][T10013] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.461432][ T9999] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1709: Abort forced by user [ 237.478808][T10009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.492541][T10013] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 237.501413][ T9999] EXT4-fs (loop1): Remounting filesystem read-only [ 237.536722][ T9999] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 237.577095][T10013] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.672742][T10017] loop5: detected capacity change from 0 to 256 [ 237.711112][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.755189][T10017] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 238.399255][T10036] loop3: detected capacity change from 0 to 256 [ 238.572703][ T10] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 238.657801][T10042] warning: `syz.5.1730' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.758019][ T10] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 238.776743][ T10] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 238.817246][ T10] usb 5-1: config 0 has no interface number 0 [ 238.855297][ T10] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 238.888844][ T10] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.909384][T10051] loop5: detected capacity change from 0 to 256 [ 238.923457][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 238.970765][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.020781][ T10] usb 5-1: config 0 descriptor?? [ 239.040838][T10051] FAT-fs (loop5): Directory bread(block 64) failed [ 239.076191][T10051] FAT-fs (loop5): Directory bread(block 65) failed [ 239.111717][T10051] FAT-fs (loop5): Directory bread(block 66) failed [ 239.128879][T10051] FAT-fs (loop5): Directory bread(block 67) failed [ 239.145980][T10051] FAT-fs (loop5): Directory bread(block 68) failed [ 239.162936][T10051] FAT-fs (loop5): Directory bread(block 69) failed [ 239.183231][T10051] FAT-fs (loop5): Directory bread(block 70) failed [ 239.189849][T10051] FAT-fs (loop5): Directory bread(block 71) failed [ 239.222509][T10056] loop2: detected capacity change from 0 to 16 [ 239.238240][T10051] FAT-fs (loop5): Directory bread(block 72) failed [ 239.281755][T10056] erofs (device loop2): mounted with root inode @ nid 36. [ 239.285479][T10051] FAT-fs (loop5): Directory bread(block 73) failed [ 239.351724][T10056] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 239.394703][T10056] erofs (device loop2): failed to decompress -44 in[46, 4050] out[1851] [ 239.419284][T10056] erofs (device loop2): read error -117 @ 43 of nid 36 [ 239.458250][ T10] usb 5-1: USB disconnect, device number 5 [ 239.749208][T10048] loop3: detected capacity change from 0 to 32768 [ 239.812461][T10048] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 239.848551][T10067] loop2: detected capacity change from 0 to 128 [ 239.855279][T10064] loop5: detected capacity change from 0 to 4096 [ 239.871851][T10048] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 239.922021][T10064] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 239.979850][T10067] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 240.015508][T10075] loop1: detected capacity change from 0 to 128 [ 240.045223][T10067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.092978][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.119620][T10075] FAT-fs (loop1): Filesystem has been set read-only [ 240.166640][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.182699][T10064] ntfs3(loop5): ino=19, mi_enum_attr [ 240.205092][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.223329][T10064] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 240.266541][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.294532][ T5847] ocfs2: Unmounting device (7,3) on (node local) [ 240.359816][T10064] ntfs3(loop5): failed to convert "c46c" to macgaelic [ 240.370151][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.436246][T10064] ntfs3(loop5): ino=20, mi_enum_attr [ 240.442713][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.497651][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.543957][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.608232][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.679491][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.736021][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.812814][T10075] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 240.863978][ T30] audit: type=1800 audit(1747991392.787:49): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1743" name="file1" dev="loop1" ino=1048640 res=0 errno=0 [ 241.005096][T10093] netlink: 'syz.3.1751': attribute type 79 has an invalid length. [ 241.194113][T10097] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 241.201922][T10097] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1755'. [ 241.325669][T10101] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 241.611589][T10112] loop3: detected capacity change from 0 to 1024 [ 241.627339][T10112] hfsplus: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 242.222814][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 242.239865][T10091] loop5: detected capacity change from 0 to 32768 [ 242.256559][T10091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1753 (10091) [ 242.287637][T10091] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.298334][T10091] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 242.307333][T10091] BTRFS info (device loop5): disk space caching is enabled [ 242.324173][T10091] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 242.453800][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 242.491408][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 242.541731][T10091] BTRFS info (device loop5): rebuilding free space tree [ 242.603750][ T48] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 242.617300][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.636933][T10091] BTRFS info (device loop5): disabling free space tree [ 242.665222][ T48] usb 5-1: Product: syz [ 242.666607][T10091] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 242.669445][ T48] usb 5-1: Manufacturer: syz [ 242.669466][ T48] usb 5-1: SerialNumber: syz [ 242.697650][T10091] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 242.727852][ T48] usb 5-1: config 0 descriptor?? [ 242.747580][T10123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.755990][T10123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.783781][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.904026][ T6842] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.945557][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 242.965227][ T5892] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 242.982742][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.996507][T10123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.011255][T10123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.024019][ T5892] usb 3-1: config 0 descriptor?? [ 243.073923][T10132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.091306][ T5892] gspca_main: sq930x-2.14.0 probing 041e:403c [ 243.241539][T10163] netlink: 'syz.5.1778': attribute type 1 has an invalid length. [ 243.251913][ T48] Error reading MAC address [ 243.283015][T10163] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1778'. [ 243.320573][ T48] usb 5-1: USB disconnect, device number 6 [ 243.451841][ T5892] gspca_sq930x: ucbus_write failed -71 [ 243.472956][ T5892] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 243.517117][ T5892] usb 3-1: USB disconnect, device number 6 [ 243.536816][T10169] loop1: detected capacity change from 0 to 64 [ 244.069013][T10185] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1789'. [ 244.142682][ T48] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 244.293356][ T30] audit: type=1326 audit(1747991396.217:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.357408][ T48] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 244.362710][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 244.390646][ T30] audit: type=1326 audit(1747991396.237:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.400493][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.413474][ T30] audit: type=1326 audit(1747991396.237:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.445622][ T30] audit: type=1326 audit(1747991396.237:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.547451][ T48] usb 2-1: Product: syz [ 244.580193][ T48] usb 2-1: Manufacturer: syz [ 244.602696][ T48] usb 2-1: SerialNumber: syz [ 244.628697][ T48] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 244.638903][ T30] audit: type=1326 audit(1747991396.547:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.696925][T10204] loop3: detected capacity change from 0 to 256 [ 244.703760][ T5893] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 244.721033][ T30] audit: type=1326 audit(1747991396.587:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.840533][ T30] audit: type=1326 audit(1747991396.587:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 244.881108][T10204] FAT-fs (loop3): Directory bread(block 64) failed [ 244.908410][T10204] FAT-fs (loop3): Directory bread(block 65) failed [ 244.945264][T10204] FAT-fs (loop3): Directory bread(block 66) failed [ 244.959050][ T30] audit: type=1326 audit(1747991396.587:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 245.003066][T10204] FAT-fs (loop3): Directory bread(block 67) failed [ 245.017909][T10204] FAT-fs (loop3): Directory bread(block 68) failed [ 245.045042][T10204] FAT-fs (loop3): Directory bread(block 69) failed [ 245.063797][T10204] FAT-fs (loop3): Directory bread(block 70) failed [ 245.087551][T10204] FAT-fs (loop3): Directory bread(block 71) failed [ 245.111812][T10204] FAT-fs (loop3): Directory bread(block 72) failed [ 245.136429][T10204] FAT-fs (loop3): Directory bread(block 73) failed [ 245.193448][ T5892] usb 2-1: USB disconnect, device number 17 [ 245.449335][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 245.616238][T10228] loop3: detected capacity change from 0 to 128 [ 245.796376][ T5893] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 245.843064][ T5893] ath9k_htc: Failed to initialize the device [ 245.857934][ T5892] usb 2-1: ath9k_htc: USB layer deinitialized [ 246.023544][T10242] No such timeout policy "syz0" [ 246.306541][T10255] loop2: detected capacity change from 0 to 22 [ 246.325063][T10255] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 246.411968][T10255] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 246.545128][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 246.564549][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 246.700309][T10268] batadv1: entered promiscuous mode [ 246.814110][T10270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1830'. [ 246.975835][T10274] loop3: detected capacity change from 0 to 512 [ 247.007747][T10274] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 247.114428][T10274] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1832: casefold flag without casefold feature [ 247.212201][T10274] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1832: couldn't read orphan inode 15 (err -117) [ 247.299056][T10274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.372510][T10274] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 4: comm syz.3.1832: lblock 0 mapped to illegal pblock 4 (length 1) [ 247.442848][ T30] audit: type=1326 audit(1747991399.367:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.5.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 247.484423][T10295] loop1: detected capacity change from 0 to 8 [ 247.519667][T10297] loop2: detected capacity change from 0 to 64 [ 247.546530][ T30] audit: type=1326 audit(1747991399.367:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.5.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc758e969 code=0x7ffc0000 [ 247.675664][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.748563][ T5850] hfs: node 4:3 still has 1 user(s)! [ 247.975802][T10310] gtp0: entered promiscuous mode [ 248.226991][T10316] loop3: detected capacity change from 0 to 2048 [ 248.279349][T10316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.408644][T10322] loop5: detected capacity change from 0 to 512 [ 248.446981][T10322] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 248.473968][T10322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 248.493081][T10322] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.574231][T10322] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.1853: iget: bad i_size value: 12154761577498 [ 248.606563][T10327] loop4: detected capacity change from 0 to 256 [ 248.659438][T10322] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1853: couldn't read orphan inode 13 (err -117) [ 248.697118][T10322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 248.829330][T10322] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1853: dx entry: limit 65535 != root limit 120 [ 248.870203][T10322] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1853: Corrupt directory, running e2fsck is recommended [ 248.897320][T10311] loop1: detected capacity change from 0 to 32768 [ 248.937214][T10311] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1848 (10311) [ 249.073527][T10311] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 249.124232][ T6842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.142727][T10311] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 249.193035][T10311] BTRFS info (device loop1): using free-space-tree [ 249.520680][T10363] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 249.547938][T10363] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 249.575762][T10311] BTRFS info (device loop1 state M): resize thread pool 5 -> 4 [ 249.581548][T10363] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.633920][T10311] BTRFS info (device loop1 state M): use compression, level 0 [ 249.880358][ T5835] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 249.912769][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 250.076921][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 250.149249][ T48] usb 4-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 250.183565][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.191628][ T48] usb 4-1: Product: syz [ 250.230421][ T48] usb 4-1: Manufacturer: syz [ 250.262484][ T48] usb 4-1: SerialNumber: syz [ 250.282062][ T48] usb 4-1: config 0 descriptor?? [ 250.309330][ T48] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 250.504052][T10390] IPv6: Can't replace route, no match found [ 250.601495][T10393] loop2: detected capacity change from 0 to 4096 [ 250.611030][T10393] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 250.779786][T10393] ntfs3(loop2): ino=19, mi_enum_attr [ 250.793800][ T48] gspca_sn9c20x: Write register 1001 failed -71 [ 250.800210][ T48] gspca_sn9c20x: Device initialization failed [ 250.810868][T10393] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 250.814448][ T48] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 250.841846][ T48] usb 4-1: USB disconnect, device number 6 [ 250.932843][T10393] ntfs3(loop2): failed to convert "c46c" to macroman [ 250.962515][T10393] ntfs3(loop2): ino=20, mi_enum_attr [ 251.142960][T10403] program syz.1.1884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.391862][T10383] infiniband syz2: set down [ 251.396798][T10383] infiniband syz2: added ipvlan1 [ 251.424300][T10383] syz2: rxe_create_cq: returned err = -12 [ 251.476949][T10383] infiniband syz2: Couldn't create ib_mad CQ [ 251.512858][T10383] infiniband syz2: Couldn't open port 1 [ 251.624207][T10383] RDS/IB: syz2: added [ 251.648646][T10383] smc: adding ib device syz2 with port count 1 [ 251.677291][T10383] smc: ib device syz2 port 1 has pnetid [ 251.834198][ T5893] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 252.015512][ T5893] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 252.038997][ T5893] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 252.066624][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 252.106310][ T5893] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 252.153106][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 252.184613][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 252.254618][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 252.260988][ T5893] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 252.292652][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.325423][ T5893] usb 2-1: config 0 descriptor?? [ 252.331654][T10413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.371139][T10430] loop5: detected capacity change from 0 to 4096 [ 252.374748][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 252.403838][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 252.411124][T10430] ntfs3: Bad value for 'umask' [ 252.487485][ T5893] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 252.602897][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 252.642473][T10415] loop3: detected capacity change from 0 to 32768 [ 252.674902][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 252.710097][T10415] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1890 (10415) [ 252.748801][ T5892] usb 2-1: USB disconnect, device number 18 [ 252.748847][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 252.803346][T10415] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 252.843065][T10415] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 252.880941][T10439] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 252.932726][T10439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1901'. [ 252.934867][T10415] BTRFS info (device loop3): disk space caching is enabled [ 252.964705][T10439] bridge0: port 3(dummy0) entered blocking state [ 252.971308][T10439] bridge0: port 3(dummy0) entered disabled state [ 252.978354][T10415] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 253.003397][T10439] dummy0: entered allmulticast mode [ 253.055873][T10439] dummy0: entered promiscuous mode [ 253.101586][T10439] bridge0: port 3(dummy0) entered blocking state [ 253.109750][T10439] bridge0: port 3(dummy0) entered forwarding state [ 253.235221][T10415] BTRFS info (device loop3): rebuilding free space tree [ 253.333114][T10415] BTRFS info (device loop3): disabling free space tree [ 253.340051][T10415] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 253.350249][T10415] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 253.502000][T10463] loop5: detected capacity change from 0 to 256 [ 253.538259][T10463] exfat: Deprecated parameter 'namecase' [ 253.614908][T10463] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 253.715026][ T5847] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 254.357325][T10486] loop1: detected capacity change from 0 to 16 [ 254.386616][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 254.414596][T10486] erofs (device loop1): mounted with root inode @ nid 36. [ 255.644321][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650776][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.698454][T10526] program syz.2.1935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.029632][T10536] cgroup: name respecified [ 256.320402][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 256.388427][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1944'. [ 256.457935][T10518] loop5: detected capacity change from 0 to 32768 [ 256.485432][T10518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1931 (10518) [ 256.577356][T10518] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.622996][T10518] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 256.660850][T10518] BTRFS info (device loop5): using free-space-tree [ 256.858085][T10570] syz.3.1950 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 256.893758][ T48] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 257.021404][T10577] loop3: detected capacity change from 0 to 16 [ 257.069542][T10577] erofs (device loop3): mounted with root inode @ nid 36. [ 257.086848][ T6842] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.124975][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 257.137067][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 257.177690][ T48] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 257.203634][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 134, changing to 11 [ 257.245352][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59360, setting to 1024 [ 257.296598][ T48] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 257.330907][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.373545][ T48] usb 2-1: Product: syz [ 257.377783][ T48] usb 2-1: Manufacturer: syz [ 257.414873][ T48] usb 2-1: SerialNumber: syz [ 257.436474][T10583] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1954'. [ 257.477357][T10552] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.500894][ T48] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 257.766986][ T48] usb 2-1: USB disconnect, device number 19 [ 257.918806][T10593] loop2: detected capacity change from 0 to 764 [ 257.961012][T10593] rock: directory entry would overflow storage [ 257.995144][T10593] rock: sig=0x4654, size=5, remaining=4 [ 258.544553][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 258.710503][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 258.763492][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.812851][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.855965][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 258.913922][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 258.938489][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 258.967082][ T10] usb 4-1: Manufacturer: syz [ 258.999996][ T10] usb 4-1: config 0 descriptor?? [ 259.240360][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 259.294195][ T10] usb 4-1: USB disconnect, device number 7 [ 259.439165][T10642] loop1: detected capacity change from 0 to 512 [ 259.503080][T10642] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.618598][T10642] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.1983: iget: bad i_size value: -6917529027641081756 [ 259.718323][T10642] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1983: couldn't read orphan inode 17 (err -117) [ 259.765469][T10642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.864639][T10650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 259.944044][T10630] loop2: detected capacity change from 0 to 32768 [ 259.995736][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.158477][T10660] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1991'. [ 260.216910][T10660] 8021q: VLANs not supported on gre0 [ 260.436173][T10663] loop1: detected capacity change from 0 to 4096 [ 260.455972][T10663] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 260.642735][T10663] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 260.652356][T10663] ntfs3(loop1): ino=19, mi_enum_attr [ 260.778585][T10663] ntfs3(loop1): failed to convert "076c" to cp949 [ 260.824541][T10663] ntfs3(loop1): ino=20, mi_enum_attr [ 260.975688][T10674] netlink: 'syz.3.1999': attribute type 21 has an invalid length. [ 260.989144][T10674] netlink: 'syz.3.1999': attribute type 1 has an invalid length. [ 261.056512][T10674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1999'. [ 261.213270][T10659] loop5: detected capacity change from 0 to 32768 [ 261.262647][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 261.262667][ T30] audit: type=1800 audit(1747991413.177:63): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1990" name="file2" dev="loop5" ino=7 res=0 errno=0 [ 261.425070][ T5891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 261.605847][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 261.617952][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 261.657716][ T5891] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 261.683034][ T5891] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 261.717334][ T5891] usb 2-1: Product: syz [ 261.721575][ T5891] usb 2-1: Manufacturer: syz [ 261.758533][ T5891] usb 2-1: SerialNumber: syz [ 262.012746][ T5891] usb 2-1: Invalid connection information received from device [ 262.042526][T10704] sctp: [Deprecated]: syz.3.2012 (pid 10704) Use of int in max_burst socket option. [ 262.042526][T10704] Use struct sctp_assoc_value instead [ 262.209408][ T5891] usb 2-1: USB disconnect, device number 20 [ 263.047798][T10733] loop1: detected capacity change from 0 to 1764 [ 263.329009][T10744] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 263.377444][T10744] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 263.469347][T10748] loop1: detected capacity change from 0 to 1024 [ 263.541732][T10748] EXT4-fs (loop1): orphan cleanup on readonly fs [ 263.620835][T10748] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2034: bad orphan inode 8 [ 263.694957][T10748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.800045][T10748] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 263.877535][T10748] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 264.031112][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 264.035243][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.056969][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 264.327918][T10740] loop4: detected capacity change from 0 to 32768 [ 264.464504][T10740] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.641143][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 264.768939][T10800] loop3: detected capacity change from 0 to 256 [ 264.828144][T10740] XFS (loop4): Ending clean mount [ 264.831682][T10800] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 264.920236][T10804] loop2: detected capacity change from 0 to 256 [ 264.994055][T10804] exfat: Deprecated parameter 'namecase' [ 265.009192][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.042194][T10804] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 265.446024][T10812] xt_socket: unknown flags 0xc [ 265.638151][T10816] bond0: Error: Cannot enslave bond to itself. [ 265.747431][T10799] loop1: detected capacity change from 0 to 32768 [ 265.779532][T10799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2055 (10799) [ 265.845580][T10799] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.874809][T10820] loop4: detected capacity change from 0 to 4096 [ 265.891297][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2069'. [ 265.912215][T10820] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 265.913064][T10799] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 265.962746][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2069'. [ 265.998375][T10799] BTRFS info (device loop1): using free-space-tree [ 266.090277][T10820] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 266.503305][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.950303][T10868] netlink: 'syz.3.2082': attribute type 4 has an invalid length. [ 267.044076][T10868] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2082'. [ 267.275485][T10876] loop3: detected capacity change from 0 to 64 [ 267.309193][T10875] loop1: detected capacity change from 0 to 1024 [ 267.377235][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 267.395252][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 267.405476][T10875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 267.442781][T10875] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.598516][T10875] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 267.647756][T10875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 267.687657][T10860] loop2: detected capacity change from 0 to 32768 [ 267.691726][T10875] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.2085: Invalid inode table block 0 in block_group 0 [ 267.791376][T10875] EXT4-fs (loop1): Remounting filesystem read-only [ 267.819865][T10875] Quota error (device loop1): write_blk: dquota write failed [ 267.846905][T10860] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 267.846905][T10860] [ 267.891316][T10875] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 267.932861][T10875] EXT4-fs (loop1): 1 truncate cleaned up [ 267.977909][T10875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.138785][T10885] kernel read not supported for file / (pid: 10885 comm: syz.4.2090) [ 268.173087][ T30] audit: type=1800 audit(1747991420.087:64): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2090" name=0D dev="mqueue" ino=22219 res=0 errno=0 [ 268.208267][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.414480][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.423377][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.488404][T10893] bridge0: entered promiscuous mode [ 268.557876][T10870] loop5: detected capacity change from 0 to 40427 [ 268.630407][T10870] F2FS-fs (loop5): invalid crc value [ 268.962983][T10870] F2FS-fs (loop5): Start checkpoint disabled! [ 269.034615][T10906] loop1: detected capacity change from 0 to 16 [ 269.062672][T10870] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 269.072853][ T31] INFO: task syz-executor:5840 blocked for more than 143 seconds. [ 269.080723][ T31] Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 [ 269.089960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.098792][ T31] task:syz-executor state:D stack:22120 pid:5840 tgid:5840 ppid:1 task_flags:0x400140 flags:0x00004004 [ 269.112417][ T31] Call Trace: [ 269.143047][T10906] erofs (device loop1): mounted with root inode @ nid 36. [ 269.150256][ T31] [ 269.171992][ T31] __schedule+0x16f5/0x4d00 [ 269.187532][ T31] ? schedule+0x165/0x360 [ 269.192024][ T31] ? __pfx___schedule+0x10/0x10 [ 269.215558][ T31] ? schedule+0x91/0x360 [ 269.237320][ T31] schedule+0x165/0x360 [ 269.251794][ T30] audit: type=1326 audit(1747991421.167:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 269.282332][ T31] io_schedule+0x81/0xe0 [ 269.292465][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 269.300164][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 269.309749][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 269.315457][ T30] audit: type=1326 audit(1747991421.167:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 269.337836][ T31] ? folios_put_refs+0x559/0x640 [ 269.342976][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 269.348488][ T31] __filemap_get_folio+0x139/0xaf0 [ 269.357540][ T31] truncate_inode_pages_range+0x3ed/0xda0 [ 269.363540][ T30] audit: type=1326 audit(1747991421.167:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 269.386745][ T31] ? evict+0x847/0x9c0 [ 269.390883][ T31] ? evict_inodes+0x636/0x6c0 [ 269.397085][ T31] ? generic_shutdown_super+0x9a/0x2c0 [ 269.402880][ T31] ? kill_block_super+0x44/0x90 [ 269.419935][ T30] audit: type=1326 audit(1747991421.167:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 269.428080][ T31] ? deactivate_locked_super+0xb9/0x130 [ 269.448209][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 269.455138][ T31] ? __lock_acquire+0xab9/0xd20 [ 269.460057][ T30] audit: type=1326 audit(1747991421.167:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9638e969 code=0x7ffc0000 [ 269.482969][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.488224][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.493589][ T31] evict+0x517/0x9c0 [ 269.497665][ T31] ? __pfx_evict+0x10/0x10 [ 269.502121][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 269.507495][ T31] evict_inodes+0x636/0x6c0 [ 269.518005][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 269.523173][ T31] generic_shutdown_super+0x9a/0x2c0 [ 269.528717][ T31] kill_block_super+0x44/0x90 [ 269.537124][ T31] deactivate_locked_super+0xb9/0x130 [ 269.542526][ T31] cleanup_mnt+0x425/0x4c0 [ 269.547091][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.552429][ T31] task_work_run+0x1d4/0x260 [ 269.557424][ T31] ? __pfx_task_work_run+0x10/0x10 [ 269.563552][ T31] ? __x64_sys_umount+0x122/0x160 [ 269.568712][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 269.574644][ T31] exit_to_user_mode_loop+0xec/0x110 [ 269.579978][ T31] do_syscall_64+0x2bd/0x3b0 [ 269.584684][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.590025][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.596196][ T31] ? clear_bhb_loop+0x60/0xb0 [ 269.600984][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.606982][ T31] RIP: 0033:0x7ff306f8fc97 [ 269.613929][ T31] RSP: 002b:00007ffcb4e8ced8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 269.622401][ T31] RAX: 0000000000000000 RBX: 00007ff30701089d RCX: 00007ff306f8fc97 [ 269.630514][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb4e8cf90 [ 269.638901][ T31] RBP: 00007ffcb4e8cf90 R08: 0000000000000000 R09: 0000000000000000 [ 269.647008][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb4e8e020 [ 269.655182][ T31] R13: 00007ff30701089d R14: 000000000001b75d R15: 00007ffcb4e8e060 [ 269.663308][ T31] [ 269.666680][ T31] [ 269.666680][ T31] Showing all locks held in the system: [ 269.685852][ T31] 2 locks held by ksoftirqd/1/23: [ 269.690922][ T31] 1 lock held by khungtaskd/31: [ 269.735618][ T31] #0: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 269.762677][ T31] 2 locks held by kworker/u8:4/59: [ 269.767856][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 269.787320][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 269.808481][ T31] 2 locks held by getty/5592: [ 269.813463][ T31] #0: ffff888030df60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 269.827036][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 269.838375][ T31] 1 lock held by syz-executor/5840: [ 269.845629][ T31] #0: ffff888032b3e0e0 (&type->s_umount_key#62){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 269.855987][ T31] 2 locks held by syz-executor/6842: [ 269.861412][ T31] #0: ffff888029ae20e0 (&type->s_umount_key#95){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 269.871715][ T31] #1: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 269.887722][ T31] [ 269.890165][ T31] ============================================= [ 269.890165][ T31] [ 269.898951][ T31] NMI backtrace for cpu 0 [ 269.898975][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 269.899008][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.899021][ T31] Call Trace: [ 269.899029][ T31] [ 269.899038][ T31] dump_stack_lvl+0x189/0x250 [ 269.899060][ T31] ? __wake_up_klogd+0xd9/0x110 [ 269.899090][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.899110][ T31] ? __pfx__printk+0x10/0x10 [ 269.899148][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 269.899185][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 269.899216][ T31] ? irqentry_exit+0x74/0x90 [ 269.899239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.899274][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.899307][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 269.899344][ T31] watchdog+0xfee/0x1030 [ 269.899376][ T31] ? watchdog+0x1de/0x1030 [ 269.899414][ T31] kthread+0x711/0x8a0 [ 269.899443][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.899472][ T31] ? __pfx_kthread+0x10/0x10 [ 269.899499][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.899521][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.899542][ T31] ? __pfx_kthread+0x10/0x10 [ 269.899567][ T31] ret_from_fork+0x3fc/0x770 [ 269.899601][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 269.899637][ T31] ? __switch_to_asm+0x39/0x70 [ 269.899684][ T31] ? __switch_to_asm+0x33/0x70 [ 269.899719][ T31] ? __pfx_kthread+0x10/0x10 [ 269.899738][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.899766][ T31] [ 269.899772][ T31] Sending NMI from CPU 0 to CPUs 1: [ 270.062369][ C1] NMI backtrace for cpu 1 [ 270.062386][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 270.062407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.062418][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 270.062444][ C1] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b5 23 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 270.062460][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 270.062476][ C1] RAX: d08ea81133897900 RBX: ffffffff81974c48 RCX: d08ea81133897900 [ 270.062490][ C1] RDX: 0000000000000001 RSI: ffffffff8d97e74b RDI: ffffffff8be29300 [ 270.062503][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 270.062517][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa12ef0 [ 270.062531][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 270.062543][ C1] FS: 0000000000000000(0000) GS:ffff888125d56000(0000) knlGS:0000000000000000 [ 270.062561][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.062575][ C1] CR2: 00007f723c17fab8 CR3: 00000000275e6000 CR4: 00000000003526f0 [ 270.062593][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.062605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.062618][ C1] Call Trace: [ 270.062625][ C1] [ 270.062633][ C1] default_idle+0x13/0x20 [ 270.062656][ C1] default_idle_call+0x74/0xb0 [ 270.062681][ C1] do_idle+0x1e8/0x510 [ 270.062702][ C1] ? __pfx_do_idle+0x10/0x10 [ 270.062716][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 270.062735][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.062755][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 270.062773][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.062796][ C1] cpu_startup_entry+0x44/0x60 [ 270.062813][ C1] start_secondary+0x101/0x110 [ 270.062836][ C1] common_startup_64+0x13e/0x147 [ 270.062864][ C1] [ 270.063560][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 270.063578][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 270.063606][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.063621][ T31] Call Trace: [ 270.063631][ T31] [ 270.063640][ T31] dump_stack_lvl+0x99/0x250 [ 270.063666][ T31] ? __asan_memcpy+0x40/0x70 [ 270.063707][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.063730][ T31] ? __pfx__printk+0x10/0x10 [ 270.063769][ T31] panic+0x2db/0x790 [ 270.063810][ T31] ? __pfx_panic+0x10/0x10 [ 270.063843][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 270.063872][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 270.063905][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 270.063949][ T31] watchdog+0x102d/0x1030 [ 270.063986][ T31] ? watchdog+0x1de/0x1030 [ 270.064027][ T31] kthread+0x711/0x8a0 [ 270.064058][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.064088][ T31] ? __pfx_kthread+0x10/0x10 [ 270.064118][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.064141][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.064165][ T31] ? __pfx_kthread+0x10/0x10 [ 270.064193][ T31] ret_from_fork+0x3fc/0x770 [ 270.064230][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 270.064269][ T31] ? __switch_to_asm+0x39/0x70 [ 270.064294][ T31] ? __switch_to_asm+0x33/0x70 [ 270.064316][ T31] ? __pfx_kthread+0x10/0x10 [ 270.064344][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.064387][ T31] [ 270.410226][ T31] Kernel Offset: disabled [ 270.414567][ T31] Rebooting in 86400 seconds..