last executing test programs: 2m9.867947083s ago: executing program 3 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 2m9.168570003s ago: executing program 3 (id=29): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40814) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000175000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 2m8.877971467s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000001d80), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x0, 0x1d6, &(0x7f0000000f80)="$eJzsVb/OEkEQ/+3dwoFSUNtKhEaBIzGWdvIAPoAETiQe/uEuUQiJaENjYXwJEp/CwkR7C2NMbLDQRAuMFYZg9nZ23QskKIF835fsLyHzm5mdmR32dvZO9DDyAKwW4zaKSMBQwCfGwAGUmbQts1L+JLkmfOVSr5P9FckvJKPh6P1zSUd3W2EYDKLhDsIYsGtNimya+D8X20LePUtbGIg4sg/snfnQJHblhjZdL1IWb9sa15PBJ97FMcivQvqYvh26RAbH7gLQlt+F3cf08aU8zq1rXArPn6avdy/i/FdUBBpf0Y2nDn4kyofFuC3ILZpiwtaRP7pOco1Q3hhrLlxX3rXOw5NpCZQBVOP+g2o0HF3u9VvdoBvc8/3G1drb83RF10+AXhjUmLGNZKBwaIgbmTf8GQCf//onMMCMrQmcA5iKVSFqOFcuGoF5wDFizRwy72tVf6UcLvq4iUvIAXg0EW4f8t8qQWTjuC1aa4LBJaXOjX0CSzjIJY4r7fthZwoGpsJm4DpHfY6MVnxSRKGgcU23PyVZItkkOSM5J6neLvUm8STDd9IqEyCLx604HiSPl2Ta5mubX9SVHaqqXkOmduLBwsLCwsLCwuKM4E8AAAD//yhrTN0=") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 2m8.363657564s ago: executing program 3 (id=34): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 2m7.097216803s ago: executing program 3 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x3, 0x100, &(0x7f00000000c0)="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"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m6.223678495s ago: executing program 3 (id=45): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='j', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x12) 2m5.843446881s ago: executing program 32 (id=45): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='j', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x12) 1m55.017940768s ago: executing program 1 (id=99): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff273}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r0, 0x4) 1m54.831966171s ago: executing program 1 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a455529f100357457d4f0f5c91105a3c58131bf10de83dc9ee9d239e5e89e59edb35abbf64c1a92109f8eb01bf689b90055bd51506423f4e456274a778c228aeb5d65e191f1bbb21f0f6dd25edc276f1264580344fed0ee32709a73a160c7578465757b87291dcefc84e58ae39e56fb10d42fd5a34aa4fca42ff53e3c9467d8dc1278a34d406df142092ed6661092ce85816f8e6a119860c3314d0e13f5d50a266f738b71fd531396d768c35bc45c042ee7d69b0b7b90da2aab111667ef006593c99c27c67bc3812dbc9f1994b4830ed54ed1f0bdf4966c1d20bddeb83972b15a86ed5fdef279ce58447059a2ba491d21120dc7e0a1d8cc5eff2deedec41057e178eb95ff00fed1e7095decea9cfd52c0a7438dbfc135c796bfa2bb290ab03f35ea2f2d72b8b0503f4972d6d7c60bf5a80981c4f9826007fdcaad959e1c90cace1664480e98069a86f1c059d112e9da27fa71716f530c2a5bf2296d09e5fcc726a8e5287499f563089bdcb6bf3779298dc9b6f739190f434983651f5f29857cbf62faac8c20bc7ac69334fe99e70c29a1294d0ee89dd6c9cd57845e64b289f84220b6e1fe9e81381cf688fa945a68eed3ebc0e8c1efa403b5a4cde68a24a863c17c9f8ad6d24a09e60d83fcf2beb51e6faac173ac98bb2269d7523f8654417ffe70ab87b477045715ad6aa3db39d3f32760fe25bdc0f3e083232ea6a55da3986cbdbd654ed71a4780f7dc3edb628e14287963c3b5f7f177a35071d7f1169351863516fc96f8cce8781439de06c9f76d6e303518493676b3b135900b89eeac40d994936e3a5a6bbc2f2cf6a2a8ed0ad2f81386f8c327cf9b15f8039df0a950641f7d14728194d7640f4cf7e28e1f89b2485857f5f70866844cead5b29f5d9166dce885bd4343bb1fd2c8437105e8e295c27cb44b10a01590c0fdddbc8abc71f777171adef0a45fe5c92b39e32a9c119c6c9a340be0df8cb3b8b77a2a6b5ba1ed4449674811dfae90889b3fb174e11fb947e15232d57bdeee29db4bc0816a878120e84e0ec40a99fd2b88bdb8502922d7015dff05a94ce7c79852bb7ea9a043fa629afc702300d49ac7fbe67a7b0161d2703348b8d0efb144f2920e341debd821ddc4a12a3f89891f24427a169c741568a06825d4f12d64da0935f2f217798b41f44b90140ac2f4cf08219f42b5d30bdd52e76c74100326babb4d1bc576c944fc5bd3a985f9b209a6a473e4fe3afe0c110b630ac443b75c6e13b20810fd3e5ecf9c6785dabeb758a5ddcfb1ad889b5349606ead8f3fa34ba8ea706de19da6b3a0bc36c4c2e3173a9c929157aedf649699f1f8887a31fccebbd7f28843c91753483541b2b895e642855f856e3951e4853fb70b4090512112e813edaa8edb0a5ddf2c329dde5381e6a5716ec9d5a79d9438ba6de736ac9ad45754bfe7227ada116507c84ffd942a84f4ce115d4fd9029f17e62383ce5fc7048a3f85d2709f2375334f1fce2f8b1af99742869f00f2d2fa37ccaf385dc2eaabe2f67671f06addf403d94bffda4bf5747a8773e9ce3beb7ca2b2e2714dd50eb387e226d834a0696b689b004cbb5b3a5aa7a2878be737f4dd7d65bf976f8deb39ad07265be604ce4f9246225f91cd10afd4725d800eeae4abcd0fd17fdf11257b19db7dcb4b9c34dc3cee03dce7d9ab6f7ac5e12316ce9879abb4432f87faa2b25094963f48582fc8a617067b1a0f0960ddf8cfd5065352d9aba09d37b9b10c7a8f702547fd86f34b62183cc883e41c40f5b0676eb077bda0204bd08dae7e7922b7934f2b449229950b4fc54cd7dafc709d828e9301be8c767e0f3bc420cd10ee3dac383bb8ab8aefe3515d6b959dfe578d256f375751beecbd24a152939b59f913728e47207b8a642b100aadfc685cd7d77ba43ec2298db4f551d851991723cd1cdd42f2837e7fd5df3dbf52945ea9a97b73d8915336023beb9bd3c91d9b1c7f5d49b0cba9c30016bb3216e9d6e9070a5dff813ce85a2a36fffa6bf750cf21eaa91a754f9788663690189fe58a9205e4733b6ac0711e98123f145a87eceb00561ac7d1a699d00384c57f6dc92939f45956d489946a365440d40911dabed15b67748000e0d244b21276032667f66119a2485f31d2c098da4cbbd0c5bbf8373fb53b662e48fc572b6e6c5700a360c5b905b548eaee0aa928b38703c84f7ed4a9a858801ad26c2911d4bbbfc1f46a070fa64db31a619dad30ba96eea1edccc6b0e67b7acffe1261af8e08ffb27fb625820f7a823c63febe0fb32e8907415a973cb42c8752d6a9ac3af2bcbd91d5e5c3ac288b2e2a92cb860d97cbf2b17da25b5333d90156493076ab457afb59f3443894a3c1d3d8b1ce7cbd47d36a7a64bcb194ea00d46181a7b65e3e104bea46434643ac722d04437b72f518e98289edba99559dd6aa03af60da7a00ad4f6105d31745b808a243c8ee9ebd70fa8516cd471473a1608d206fa93885e696f668a397cf713fe9c2001fdbb6e07f124782f5891bdc238db61a7d7f0575072abfadad9593a6ba8b1c89351784d0c722af86989e137809aa5b7833462a71ceca8d7ee24e883577a128652125bef2bd7558f77bb566719f2672fb07f890f892d2d3a725d1d907a696d2d97065c001cfd9e97d60fe2f584992b9bd80f618531af2f3d5df2c5717da36bb2a64853612b8f1f881c2a306b1e9c4c369e33e5675e0f9195e570ba0b2e0594838ad9aef53686a2c4dfd9eae21a826501af92d48e0d857ee0876cd09996c65b50333ab256b439fe89d836d77135079c51f87b1fb58c446a8d52e3c6432c111af4b66d57306659c81088ea0ef96a2f1b97dfd8beeb578b3016eedb65e2ec190e1ba08c9c37f85e102fdc972c9ba2a4a6f11a79831ed8087a22d1d978f005f6ee8869b8c1717a42b75378a98a5f9b1725cc323151b1996468068afd2827ccede23ffe279aa7b45d7dc683db3a9efb9f7b2093765d7c178c09bc0edeccf18c9ee5845cba0c2dda463989faf6d018e330cb52bc5d7913e6e26ea8cde26b7251d828da7b83a1ecbda1ecb3344b3c60f606a419d868da70ade78c3ecebd9b2bcff9cef2507907f011cdf9b072b1dcc872e5b29365b0f4a7d6c581c9bf42320ad9c3a52b419b73d0c0f616f2f630df9bdb5f3b88bbcdfe618180131be8357099f9e8ea457eb1dcf9324c7081687899fa81bc267e87bdd80b88150f6745cb735936876ca6b3c7a492698d32d762baf5b482fa5f26351cf18018fc1cb49411fb6663c474ea29d2a9d4ad703119fe7a6ed2ce6f97287e7660617c4e38c7b1aa1ee5df253c625a1b1d29c042b6d5dbfb44633dd4c0e93992aff81024c408ff00d24d9c98c07c1d4fe5656e3b053914a09b8f2968008c5c4c115d9f8640136254303cc095f95fa335aa858510dad731af19eb0df690ab0edd2bbed96679dad71ccf94da088cf62b34580548027703f92525b41d36297e71d988901e3e086c0d8f425732e0134a9ac2b111a5745c57d9a138b6a4055e7e3ba220a47fef3474e5bba15d3f4711e1d00f2e29f1a1082f4518a08e36451e887963193b08c3e255f22383c7001540b05836b30e912adaef4130ae8edb9c891c398855b218e76eb94332538b7add4b9261e873a6b91785f5ea6c82306dff166d654987361917fe83fcc5be9be3e8644d96d5a7c7bb445fc1b2c0a48814fabc1b3a190674b5f159a5b041dd317c4cf06076d6c9a7572054a09f2b9b74f14289daf5a16dbe6de85ed6128c91a18518f069451dbe8b9f57dab9bcecb4cc53e6612b90f5e644eaed1765d45ad6e6d9f0358fd3a885df1c572cfdb511bbca345628206d89b16f9251be85e1c617b15302bb86397e0763d757c70362dea82688fe32d0a714d598f3131c2a3a4414898fccdfd901dc8fde466ca269bf211b9863e360ea4aab7fdc107ddfd7ede043708804386e0180542a0802745407ceecf6adb2a9a5614cde89d413f49a32733b875281c8cab7ac5815a92fda65ea23ce2feab66606605f49f526cc336d2a5a067c185845941e4142ba82899966fc95bf40570967ec0a6fe130dccbaca48d251adb0f81a170e3dfac6f02e7c8bb5fa6f5602bdc73267c6756e1a374d5e8b19a92ff39662db3ac9f761b2e9e015c51815e5f111d416ee0a67f3adad81f8c64dad193f19048bb46ad1fa786a0c3f36119bd14bb9ad96f2182a19504e15f2cfd885e5862f4d2467053ee1faa978bd2267d56401a548f17d34adba7e9186a2a58931a69bb815dd50552995aa8ceeb4eda5330227f2078eeb72c9b6845c04679868eb5f6a0f0da8c1ea2b0c7de8781d9fc129561a7b283aa488a117269116f81e44a261ed6c0fc4467125d83fd306bce3c6a29df8db000036cd851d805dda3bf218c800d77fc9837158f883b962efc7886cbe93cc137e0bff8387c4b7d64df8b89805dbf5698babf22be7d735bb7baedd43bb3f577989ddaf83892c55771a10beeb2326f3e766fd40eef0d0ff82969bf5534cbffff4fd493fc34d58f322d22fe21101c4248756ad844876d3a7f3999d14c0962e68eaeac83d44d22d498e04673343f4a3a60abfa4f45ea2af9b65982ff5899fd509beccfc8e7dd125c08096e9e5fb71edc590abdd53592d67afec4d227170c5f6e4f1daceecaec968448c033c0a9b0390a12b5af4b973c0cb7c072bdfc8b4158ea4cc9114816cf1242199d0d62a013c4e9646338bd284fede8c93114d2608c71ae1d0891a3583daa51971a5ba51251f3b9ac6d8a02e0fcb69744a74762e13c24e3f1d8e6e3e2956b99b97506e959ca3c7141faa5e2404c62854ef2b9e75a75760a71003e1b0c004752864f51ed600fc306773f635587504e3cf432d68c2fbce21c26a47dcf3358e434dc2b97941a5bb0e35744e4f3d53fee5719cc931f93e150744baf61754726b84a052bde27f666e472672f1f8f6381bd25bc619ba51a", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) 1m53.815014656s ago: executing program 1 (id=103): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) connect$inet6(r0, 0x0, 0x0) 1m53.456428021s ago: executing program 1 (id=105): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 1m52.811319831s ago: executing program 1 (id=110): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 1m52.255765999s ago: executing program 1 (id=112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000440)={0x0, 0x0, 0x6, "692d02b344e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m51.849417375s ago: executing program 33 (id=112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000440)={0x0, 0x0, 0x6, "692d02b344e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.563090824s ago: executing program 4 (id=722): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, &(0x7f00000003c0)=""/132, 0xaf, 0x40000000, 0x0, 0x0) 4.1871199s ago: executing program 0 (id=726): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa042, 0x7d) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.844607884s ago: executing program 0 (id=730): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.709655576s ago: executing program 4 (id=731): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 3.622642997s ago: executing program 0 (id=732): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0}, 0x14) 3.46003693s ago: executing program 0 (id=734): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962313060f0093d12f3eb82a000827020000008304"], 0x0}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) 3.44602776s ago: executing program 4 (id=735): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x0, 0x7, 0x3, "d5db12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.539291853s ago: executing program 2 (id=745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) 1.819588744s ago: executing program 5 (id=752): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x716, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/159, 0x9f}, 0xfffffffa}], 0x1, 0x10140, 0x0) 1.438757199s ago: executing program 0 (id=753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'cp936'}}, {@gid}, {@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@type={'type', 0x3d, "d0c45522"}}, {@uid}, {@nodecompose}, {@creator={'creator', 0x3d, "85ffdfbe"}}]}, 0x1, 0x6df, &(0x7f0000000c80)="$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") write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1283, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1.324248741s ago: executing program 5 (id=754): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) truncate(&(0x7f0000000400)='./file1\x00', 0x9) 1.258664032s ago: executing program 0 (id=755): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1.166122133s ago: executing program 5 (id=756): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0xf, 0x4) 1.080410245s ago: executing program 5 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) 986.686546ms ago: executing program 4 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 940.811297ms ago: executing program 5 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@printk={@x}]}, 0x0}, 0x94) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 882.795677ms ago: executing program 4 (id=760): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e) close(r2) 841.918338ms ago: executing program 5 (id=761): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 802.353279ms ago: executing program 4 (id=762): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 524.401312ms ago: executing program 2 (id=763): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 408.310244ms ago: executing program 2 (id=764): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7d, &(0x7f0000000000)=r3, 0x8) 323.909345ms ago: executing program 2 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) 87.966229ms ago: executing program 2 (id=766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c7a6", 0x2}], 0x1}, 0x24048811) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000042) 0s ago: executing program 2 (id=767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x2000000, 0x0) kernel console output (not intermixed with test programs): atman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.088226][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.099822][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.110829][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.127620][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.148109][ T6308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.160731][ T6308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.170393][ T6308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.180600][ T6308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.445453][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.483347][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.576395][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.610960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.880530][ T5862] gspca_sonixj: reg_w1 err -71 [ 131.012404][ T5862] sonixj: probe of 5-1:0.0 failed with error -71 [ 131.029646][ T5862] usb 5-1: USB disconnect, device number 2 [ 131.085767][ T6590] loop5: detected capacity change from 0 to 1024 [ 131.117030][ T6590] EXT4-fs: Ignoring removed nobh option [ 131.139563][ T6590] EXT4-fs: Ignoring removed bh option [ 131.163497][ T6590] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.230964][ T6590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.601982][ T6308] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.630349][ T6598] loop0: detected capacity change from 0 to 4096 [ 131.687260][ T6598] NILFS (loop0): invalid segment: Checksum error in segment payload [ 131.715993][ T6598] NILFS (loop0): trying rollback from an earlier position [ 131.790499][ T6598] NILFS (loop0): recovery complete [ 131.817720][ T6604] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.095941][ T6598] overlayfs: upper fs does not support tmpfile. [ 132.133328][ T6598] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.162843][ T6598] overlayfs: failed to set xattr on upper [ 132.168647][ T6598] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.180900][ T6598] overlayfs: ...falling back to index=off. [ 132.181544][ T6615] loop5: detected capacity change from 0 to 256 [ 132.203458][ T6598] overlayfs: ...falling back to uuid=null. [ 132.273438][ T5896] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.281543][ T5802] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.474507][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 132.491440][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.513580][ T6622] loop2: detected capacity change from 0 to 512 [ 132.521061][ T6622] EXT4-fs: Ignoring removed bh option [ 132.542067][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.555759][ T6622] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 132.592471][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.602294][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.624798][ T6622] EXT4-fs (loop2): 1 truncate cleaned up [ 132.635194][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.643193][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.709605][ T5896] usb 5-1: config 0 descriptor?? [ 132.723794][ T5896] hub 5-1:0.0: USB hub found [ 132.825485][ T5839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.850870][ T5839] usb 6-1: config 1 has no interface number 0 [ 132.872125][ T5839] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.902683][ T5839] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 132.923649][ T5839] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8E has an invalid bInterval 183, changing to 11 [ 132.952125][ T5839] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8E has invalid maxpacket 34011, setting to 1024 [ 132.954976][ T5896] hub 5-1:0.0: 1 port detected [ 132.990959][ T5839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.017645][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.032542][ T5839] usb 6-1: Product: syz [ 133.042668][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.058035][ T5839] usb 6-1: Manufacturer: syz [ 133.062928][ T5839] usb 6-1: SerialNumber: syz [ 133.233849][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.240934][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.326273][ T6615] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 133.612166][ T5791] hub 5-1:0.0: activate --> -90 [ 133.662191][ T23] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 133.691555][ T6627] loop0: detected capacity change from 0 to 40427 [ 133.707247][ T6627] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.734993][ T6627] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.773603][ T6627] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.855440][ T23] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 133.875110][ T23] usb 3-1: config 0 has no interface number 0 [ 133.889287][ T6627] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.898179][ T23] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 133.904708][ T6627] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.928090][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.952438][ T23] usb 3-1: Product: syz [ 133.956718][ T23] usb 3-1: Manufacturer: syz [ 133.990103][ T23] usb 3-1: SerialNumber: syz [ 133.997460][ T6615] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 134.019299][ T5839] cdc_ncm 6-1:1.1: bind() failure [ 134.032364][ T23] usb 3-1: config 0 descriptor?? [ 134.058548][ T5791] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 134.082780][ T5791] hub_port_connect: 112 callbacks suppressed [ 134.082798][ T5791] usb 5-1-port1: connect-debounce failed [ 134.102535][ T23] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 134.119428][ T28] audit: type=1804 audit(1752508962.959:130): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.187" name="/newroot/44/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 134.158148][ T5791] usb 5-1-port1: cannot disable (err = -71) [ 134.179162][ T5791] usb 5-1: Failed to suspend device, error -71 [ 134.209439][ T5862] usb 5-1: USB disconnect, device number 3 [ 134.279972][ T5791] usb 6-1: USB disconnect, device number 2 [ 135.345112][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 135.372743][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 135.407789][ T23] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 135.449281][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 135.479883][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 135.502165][ T23] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 135.541156][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 135.595239][ T23] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 135.626207][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 135.656702][ T23] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 135.684310][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 135.704365][ T23] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 135.722781][ T23] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 135.752546][ T23] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 135.786387][ T23] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 135.853299][ T23] usb 3-1: USB disconnect, device number 5 [ 136.352900][ T6664] loop5: detected capacity change from 0 to 32768 [ 136.429308][ T6664] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 136.546193][ T6714] loop4: detected capacity change from 0 to 512 [ 136.563061][ T5832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.572810][ T6714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 136.596320][ T6664] XFS (loop5): Ending clean mount [ 136.630847][ T6664] XFS (loop5): Quotacheck needed: Please wait. [ 136.743594][ T6664] XFS (loop5): Quotacheck: Done. [ 136.752384][ T6714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.804529][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.822816][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 136.837581][ T5832] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 136.845615][ T6714] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.847263][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.868594][ T5832] usb 1-1: Product: syz [ 136.873052][ T5832] usb 1-1: Manufacturer: syz [ 136.877801][ T5832] usb 1-1: SerialNumber: syz [ 136.894931][ T5832] usb 1-1: config 0 descriptor?? [ 136.903412][ T6697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.910899][ T6697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.926334][ T6714] EXT4-fs (loop4): 1 truncate cleaned up [ 136.976852][ T6714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.213193][ T6697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.230813][ T6697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.293770][ T6721] loop2: detected capacity change from 0 to 2048 [ 137.297524][ T6018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.434455][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.526968][ T6308] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 137.556024][ T6721] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 137.562119][ T28] audit: type=1800 audit(1752508966.389:131): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.204" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 137.679179][ T5832] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 137.683449][ T6721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.700308][ T28] audit: type=1800 audit(1752508966.399:132): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.204" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 138.095419][ T5832] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 138.363861][ T5791] usb 1-1: USB disconnect, device number 3 [ 138.392515][ T5832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.612957][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 138.620577][ T5832] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.632504][ T5832] usb 3-1: config 0 has no interface number 0 [ 138.656434][ T5832] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.684062][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.720034][ T5832] usb 3-1: Product: syz [ 138.730115][ T5832] usb 3-1: Manufacturer: syz [ 138.740322][ T5832] usb 3-1: SerialNumber: syz [ 138.773478][ T5832] usb 3-1: config 0 descriptor?? [ 138.794690][ T5832] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.025363][ T5832] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 139.057455][ T5832] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 139.284402][ T6773] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 139.322008][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 139.526314][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 139.526743][ T5862] usb 3-1: USB disconnect, device number 6 [ 139.631482][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.689033][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.720765][ T5862] quatech2 3-1:0.51: device disconnected [ 140.709809][ T6810] loop2: detected capacity change from 0 to 4096 [ 140.789758][ T6788] loop4: detected capacity change from 0 to 40427 [ 140.854145][ T6788] F2FS-fs (loop4): invalid crc value [ 140.870616][ T6810] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 140.907104][ T6788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.086069][ T6788] F2FS-fs (loop4): Start checkpoint disabled! [ 141.132288][ T6788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 141.312131][ T6827] mmap: syz.0.230 (6827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.646888][ T136] kworker/u4:5: attempt to access beyond end of device [ 141.646888][ T136] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 141.687090][ T136] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.703069][ T136] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.732979][ T136] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 142.072330][ T5862] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 142.284932][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 142.326930][ T5862] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 142.342416][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.366344][ T5862] usb 3-1: config 0 descriptor?? [ 142.377620][ T6838] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.731453][ T6853] loop0: detected capacity change from 0 to 32768 [ 142.739086][ T6853] XFS: noikeep mount option is deprecated. [ 142.773583][ T6853] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.837378][ T5862] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 142.887968][ T6853] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 142.925717][ T6853] XFS (loop0): Starting recovery (logdev: internal) [ 142.963131][ T6853] XFS (loop0): Ending recovery (logdev: internal) [ 143.092979][ T6853] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 143.111804][ T6853] XFS (loop0): Unmount and run xfs_repair [ 143.132724][ T6853] XFS (loop0): Internal error i != 1 at line 527 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 143.145147][ T23] usb 3-1: USB disconnect, device number 7 [ 143.149002][ T6853] CPU: 0 PID: 6853 Comm: syz.0.234 Not tainted 6.6.97-syzkaller #0 [ 143.160255][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.170372][ T6853] Call Trace: [ 143.173703][ T6853] [ 143.176705][ T6853] dump_stack_lvl+0x16c/0x230 [ 143.181450][ T6853] ? __xfs_printk+0x90/0x90 [ 143.186021][ T6853] ? show_regs_print_info+0x20/0x20 [ 143.191304][ T6853] xfs_corruption_error+0x122/0x170 [ 143.196564][ T6853] ? xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 143.202084][ T6853] xfs_alloc_fixup_trees+0x614/0x7e0 [ 143.207422][ T6853] ? xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 143.212958][ T6853] ? xfs_alloc_fix_len+0x280/0x280 [ 143.218115][ T6853] ? xfs_alloc_ag_vextent_lastblock+0x3e7/0x690 [ 143.224430][ T6853] xfs_alloc_cur_finish+0xd5/0x470 [ 143.229594][ T6853] ? xfs_allocbt_init_cursor+0x70/0x110 [ 143.235197][ T6853] xfs_alloc_ag_vextent_near+0xd14/0x11e0 [ 143.240969][ T6853] ? __xfs_free_extent_later+0x6d0/0x6d0 [ 143.246680][ T6853] ? xfs_alloc_vextent_near_bno+0x560/0x560 [ 143.252633][ T6853] ? xfs_perag_grab+0x25/0x400 [ 143.257511][ T6853] ? xfs_alloc_vextent_prepare_ag+0x1a1/0x5d0 [ 143.263613][ T6853] xfs_alloc_vextent_iterate_ags+0x609/0x8e0 [ 143.269648][ T6853] xfs_alloc_vextent_start_ag+0x375/0x820 [ 143.275398][ T6853] xfs_bmapi_allocate+0x14bc/0x2b50 [ 143.280644][ T6853] ? xfs_bmapi_write+0x1150/0x1150 [ 143.285799][ T6853] ? rcu_is_watching+0x15/0xb0 [ 143.290732][ T6853] ? xfs_iext_find_level+0x445/0x490 [ 143.296070][ T6853] ? xfs_iext_lookup_extent+0x57e/0x7d0 [ 143.301632][ T6853] ? xfs_iext_prev+0x358/0x370 [ 143.306444][ T6853] ? xfs_iext_get_extent+0x1b9/0x370 [ 143.311816][ T6853] xfs_bmapi_convert_delalloc+0x813/0x1490 [ 143.317678][ T6853] ? xfs_bmap_btree_to_extents+0x800/0x800 [ 143.323550][ T6853] ? xfs_map_blocks+0x542/0xe30 [ 143.328526][ T6853] ? xfs_map_blocks+0x542/0xe30 [ 143.333401][ T6853] ? xfs_iunlock+0x1c0/0x300 [ 143.338019][ T6853] xfs_map_blocks+0x64e/0xe30 [ 143.342733][ T6853] ? xfs_dax_writepages+0x180/0x180 [ 143.347966][ T6853] iomap_do_writepage+0xb43/0x2fb0 [ 143.353109][ T6853] ? lock_chain_count+0x20/0x20 [ 143.358000][ T6853] ? iomap_writepages+0x210/0x210 [ 143.363060][ T6853] write_cache_pages+0x702/0x11f0 [ 143.368116][ T6853] ? iomap_writepages+0x210/0x210 [ 143.373164][ T6853] ? tag_pages_for_writeback+0x480/0x480 [ 143.378828][ T6853] ? __lock_acquire+0x7c80/0x7c80 [ 143.383878][ T6853] ? do_raw_spin_lock+0x121/0x2c0 [ 143.388929][ T6853] ? __rwlock_init+0x150/0x150 [ 143.393720][ T6853] iomap_writepages+0x5e/0x210 [ 143.398568][ T6853] xfs_vm_writepages+0x103/0x160 [ 143.403553][ T6853] ? xfs_vm_read_folio+0x20/0x20 [ 143.408537][ T6853] ? xfs_vm_read_folio+0x20/0x20 [ 143.413492][ T6853] do_writepages+0x3a2/0x600 [ 143.418117][ T6853] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 143.423957][ T6853] ? __lock_acquire+0x7c80/0x7c80 [ 143.429002][ T6853] ? __rwlock_init+0x150/0x150 [ 143.433789][ T6853] ? rcu_is_watching+0x15/0xb0 [ 143.438575][ T6853] ? do_raw_spin_unlock+0x121/0x230 [ 143.443802][ T6853] filemap_fdatawrite_wbc+0x122/0x180 [ 143.449230][ T6853] file_write_and_wait_range+0x171/0x240 [ 143.454932][ T6853] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 143.460355][ T6853] ? xfs_iunlock+0x56/0x300 [ 143.464902][ T6853] xfs_file_fsync+0x197/0x9c0 [ 143.469614][ T6853] ? xfs_file_release+0x20/0x20 [ 143.474489][ T6853] ? xfs_file_buffered_write+0x519/0x940 [ 143.480148][ T6853] ? vfs_fsync_range+0x130/0x1a0 [ 143.485112][ T6853] xfs_file_buffered_write+0x854/0x940 [ 143.490614][ T6853] ? xfs_file_dax_write+0x930/0x930 [ 143.495845][ T6853] ? end_current_label_crit_section+0x149/0x170 [ 143.502121][ T6853] ? xfs_file_write_iter+0x2bf/0x610 [ 143.507458][ T6853] do_iter_write+0x79a/0xc70 [ 143.512102][ T6853] ? vfs_iter_write+0xa0/0xa0 [ 143.516820][ T6853] ? rcu_read_lock_any_held+0xb4/0x120 [ 143.522333][ T6853] do_pwritev+0x205/0x340 [ 143.526719][ T6853] ? do_preadv+0x330/0x330 [ 143.531167][ T6853] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 143.537170][ T6853] ? lock_chain_count+0x20/0x20 [ 143.542051][ T6853] ? lockdep_hardirqs_on+0x98/0x150 [ 143.547264][ T6853] ? __x64_sys_pwritev2+0xbe/0x100 [ 143.552406][ T6853] do_syscall_64+0x55/0xb0 [ 143.556862][ T6853] ? clear_bhb_loop+0x40/0x90 [ 143.561559][ T6853] ? clear_bhb_loop+0x40/0x90 [ 143.566271][ T6853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.572195][ T6853] RIP: 0033:0x7fead058e929 [ 143.576629][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.596299][ T6853] RSP: 002b:00007fead131b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 143.604829][ T6853] RAX: ffffffffffffffda RBX: 00007fead07b5fa0 RCX: 00007fead058e929 [ 143.612827][ T6853] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 143.620828][ T6853] RBP: 00007fead0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 143.628824][ T6853] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 143.636836][ T6853] R13: 0000000000000000 R14: 00007fead07b5fa0 R15: 00007ffd2228b818 [ 143.644852][ T6853] [ 143.679422][ T6853] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 143.687622][ T6853] XFS (loop0): page discard on page ffffea0001b6d780, inode 0x1146, pos 4096. [ 143.718328][ T6853] XFS (loop0): Internal error i != 1 at line 527 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 143.732774][ T6853] CPU: 1 PID: 6853 Comm: syz.0.234 Not tainted 6.6.97-syzkaller #0 [ 143.740735][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.750838][ T6853] Call Trace: [ 143.754160][ T6853] [ 143.757133][ T6853] dump_stack_lvl+0x16c/0x230 [ 143.761871][ T6853] ? __xfs_printk+0x90/0x90 [ 143.766448][ T6853] ? show_regs_print_info+0x20/0x20 [ 143.771734][ T6853] xfs_corruption_error+0x122/0x170 [ 143.777004][ T6853] ? xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 143.782539][ T6853] xfs_alloc_fixup_trees+0x614/0x7e0 [ 143.787894][ T6853] ? xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 143.793431][ T6853] ? xfs_alloc_fix_len+0x280/0x280 [ 143.798608][ T6853] ? xfs_alloc_ag_vextent_lastblock+0x3e7/0x690 [ 143.804922][ T6853] xfs_alloc_cur_finish+0xd5/0x470 [ 143.810103][ T6853] ? xfs_allocbt_init_cursor+0x70/0x110 [ 143.815727][ T6853] xfs_alloc_ag_vextent_near+0xd14/0x11e0 [ 143.821500][ T6853] ? __xfs_free_extent_later+0x6d0/0x6d0 [ 143.827213][ T6853] ? xfs_alloc_vextent_near_bno+0x560/0x560 [ 143.833181][ T6853] ? xfs_perag_grab+0x25/0x400 [ 143.838011][ T6853] ? xfs_alloc_vextent_prepare_ag+0x1a1/0x5d0 [ 143.844145][ T6853] xfs_alloc_vextent_iterate_ags+0x609/0x8e0 [ 143.850211][ T6853] xfs_alloc_vextent_start_ag+0x375/0x820 [ 143.856000][ T6853] xfs_bmapi_allocate+0x14bc/0x2b50 [ 143.861282][ T6853] ? xfs_bmapi_write+0x1150/0x1150 [ 143.866439][ T6853] ? rcu_is_watching+0x15/0xb0 [ 143.871274][ T6853] ? xfs_iext_find_level+0x445/0x490 [ 143.876623][ T6853] ? xfs_iext_lookup_extent+0x57e/0x7d0 [ 143.882222][ T6853] ? xfs_iext_prev+0x358/0x370 [ 143.887053][ T6853] ? xfs_iext_get_extent+0x1b9/0x370 [ 143.892395][ T6853] xfs_bmapi_convert_delalloc+0x813/0x1490 [ 143.898284][ T6853] ? xfs_bmap_btree_to_extents+0x800/0x800 [ 143.904184][ T6853] ? xfs_map_blocks+0x542/0xe30 [ 143.909144][ T6853] ? xfs_map_blocks+0x542/0xe30 [ 143.914049][ T6853] ? xfs_iunlock+0x1c0/0x300 [ 143.918706][ T6853] xfs_map_blocks+0x64e/0xe30 [ 143.923453][ T6853] ? xfs_dax_writepages+0x180/0x180 [ 143.928709][ T6853] ? _raw_spin_unlock+0x40/0x40 [ 143.933626][ T6853] ? __bitmap_set+0x125/0x160 [ 143.938379][ T6853] iomap_do_writepage+0xb43/0x2fb0 [ 143.943566][ T6853] ? lock_chain_count+0x20/0x20 [ 143.948496][ T6853] ? iomap_writepages+0x210/0x210 [ 143.953610][ T6853] write_cache_pages+0x702/0x11f0 [ 143.958706][ T6853] ? iomap_writepages+0x210/0x210 [ 143.963795][ T6853] ? tag_pages_for_writeback+0x480/0x480 [ 143.969499][ T6853] ? __lock_acquire+0x7c80/0x7c80 [ 143.974588][ T6853] ? do_raw_spin_lock+0x121/0x2c0 [ 143.979679][ T6853] ? __rwlock_init+0x150/0x150 [ 143.984516][ T6853] iomap_writepages+0x5e/0x210 [ 143.989358][ T6853] xfs_vm_writepages+0x103/0x160 [ 143.994357][ T6853] ? xfs_vm_read_folio+0x20/0x20 [ 143.999450][ T6853] ? xfs_vm_read_folio+0x20/0x20 [ 144.004437][ T6853] do_writepages+0x3a2/0x600 [ 144.009097][ T6853] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 144.014862][ T6853] ? __lock_acquire+0x7c80/0x7c80 [ 144.019946][ T6853] ? __rwlock_init+0x150/0x150 [ 144.024769][ T6853] ? rcu_is_watching+0x15/0xb0 [ 144.029603][ T6853] ? do_raw_spin_unlock+0x121/0x230 [ 144.034859][ T6853] filemap_fdatawrite_wbc+0x122/0x180 [ 144.040285][ T6853] file_write_and_wait_range+0x171/0x240 [ 144.045980][ T6853] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 144.051428][ T6853] ? xfs_iunlock+0x56/0x300 [ 144.056003][ T6853] xfs_file_fsync+0x197/0x9c0 [ 144.060757][ T6853] ? xfs_file_release+0x20/0x20 [ 144.065670][ T6853] ? xfs_file_buffered_write+0x519/0x940 [ 144.071367][ T6853] ? vfs_fsync_range+0x130/0x1a0 [ 144.076366][ T6853] xfs_file_buffered_write+0x854/0x940 [ 144.081903][ T6853] ? xfs_file_dax_write+0x930/0x930 [ 144.087168][ T6853] ? end_current_label_crit_section+0x149/0x170 [ 144.093484][ T6853] ? xfs_file_write_iter+0x2bf/0x610 [ 144.098860][ T6853] do_iter_write+0x79a/0xc70 [ 144.103523][ T6853] ? vfs_iter_write+0xa0/0xa0 [ 144.108258][ T6853] ? rcu_read_lock_any_held+0xb4/0x120 [ 144.113798][ T6853] do_pwritev+0x205/0x340 [ 144.118184][ T6853] ? do_preadv+0x330/0x330 [ 144.122665][ T6853] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 144.128703][ T6853] ? lock_chain_count+0x20/0x20 [ 144.133623][ T6853] ? lockdep_hardirqs_on+0x98/0x150 [ 144.138872][ T6853] ? __x64_sys_pwritev2+0xbe/0x100 [ 144.144040][ T6853] do_syscall_64+0x55/0xb0 [ 144.148514][ T6853] ? clear_bhb_loop+0x40/0x90 [ 144.153248][ T6853] ? clear_bhb_loop+0x40/0x90 [ 144.157989][ T6853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.163941][ T6853] RIP: 0033:0x7fead058e929 [ 144.168407][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.188069][ T6853] RSP: 002b:00007fead131b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 144.196541][ T6853] RAX: ffffffffffffffda RBX: 00007fead07b5fa0 RCX: 00007fead058e929 [ 144.204575][ T6853] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 144.212694][ T6853] RBP: 00007fead0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.220720][ T6853] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 144.228757][ T6853] R13: 0000000000000000 R14: 00007fead07b5fa0 R15: 00007ffd2228b818 [ 144.236998][ T6853] [ 144.276887][ T6853] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 144.381794][ T6853] XFS (loop0): page discard on page ffffea0001720a80, inode 0x1146, pos 8192. [ 144.425715][ T6853] XFS (loop0): Internal error i != 1 at line 527 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 144.458719][ T6853] CPU: 0 PID: 6853 Comm: syz.0.234 Not tainted 6.6.97-syzkaller #0 [ 144.466792][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.476903][ T6853] Call Trace: [ 144.480244][ T6853] [ 144.483215][ T6853] dump_stack_lvl+0x16c/0x230 [ 144.487945][ T6853] ? __xfs_printk+0x90/0x90 [ 144.492517][ T6853] ? show_regs_print_info+0x20/0x20 [ 144.497796][ T6853] xfs_corruption_error+0x122/0x170 [ 144.503058][ T6853] ? xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 144.508569][ T6853] xfs_alloc_fixup_trees+0x614/0x7e0 [ 144.513906][ T6853] ? xfs_alloc_fixup_trees+0x5ad/0x7e0 [ 144.519433][ T6853] ? xfs_alloc_fix_len+0x280/0x280 [ 144.524618][ T6853] ? xfs_alloc_ag_vextent_lastblock+0x3e7/0x690 [ 144.530927][ T6853] xfs_alloc_cur_finish+0xd5/0x470 [ 144.534445][ T6878] input: syz0 as /devices/virtual/input/input7 [ 144.536084][ T6853] ? xfs_allocbt_init_cursor+0x70/0x110 [ 144.536126][ T6853] xfs_alloc_ag_vextent_near+0xd14/0x11e0 [ 144.553929][ T6853] ? __xfs_free_extent_later+0x6d0/0x6d0 [ 144.559656][ T6853] ? xfs_alloc_vextent_near_bno+0x560/0x560 [ 144.565726][ T6853] ? xfs_perag_grab+0x25/0x400 [ 144.570569][ T6853] ? xfs_alloc_vextent_prepare_ag+0x1a1/0x5d0 [ 144.576714][ T6853] xfs_alloc_vextent_iterate_ags+0x609/0x8e0 [ 144.582783][ T6853] xfs_alloc_vextent_start_ag+0x375/0x820 [ 144.588657][ T6853] xfs_bmapi_allocate+0x14bc/0x2b50 [ 144.593999][ T6853] ? xfs_bmapi_write+0x1150/0x1150 [ 144.599162][ T6853] ? rcu_is_watching+0x15/0xb0 [ 144.604005][ T6853] ? xfs_iext_find_level+0x445/0x490 [ 144.609354][ T6853] ? xfs_iext_lookup_extent+0x57e/0x7d0 [ 144.614952][ T6853] ? xfs_iext_prev+0x358/0x370 [ 144.619777][ T6853] ? xfs_iext_get_extent+0x1b9/0x370 [ 144.625103][ T6853] xfs_bmapi_convert_delalloc+0x813/0x1490 [ 144.630965][ T6853] ? xfs_bmap_btree_to_extents+0x800/0x800 [ 144.636835][ T6853] ? xfs_map_blocks+0x542/0xe30 [ 144.641713][ T6853] ? xfs_map_blocks+0x542/0xe30 [ 144.646606][ T6853] ? xfs_iunlock+0x1c0/0x300 [ 144.651282][ T6853] xfs_map_blocks+0x64e/0xe30 [ 144.656018][ T6853] ? xfs_dax_writepages+0x180/0x180 [ 144.661266][ T6853] iomap_do_writepage+0xb43/0x2fb0 [ 144.666432][ T6853] ? lock_chain_count+0x20/0x20 [ 144.671332][ T6853] ? iomap_writepages+0x210/0x210 [ 144.676391][ T6853] write_cache_pages+0x702/0x11f0 [ 144.681450][ T6853] ? iomap_writepages+0x210/0x210 [ 144.686523][ T6853] ? tag_pages_for_writeback+0x480/0x480 [ 144.692207][ T6853] ? __lock_acquire+0x7c80/0x7c80 [ 144.697260][ T6853] ? do_raw_spin_lock+0x121/0x2c0 [ 144.702316][ T6853] ? __rwlock_init+0x150/0x150 [ 144.707114][ T6853] iomap_writepages+0x5e/0x210 [ 144.711913][ T6853] xfs_vm_writepages+0x103/0x160 [ 144.716883][ T6853] ? xfs_vm_read_folio+0x20/0x20 [ 144.721865][ T6853] ? xfs_vm_read_folio+0x20/0x20 [ 144.726832][ T6853] do_writepages+0x3a2/0x600 [ 144.731485][ T6853] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 144.737232][ T6853] ? __lock_acquire+0x7c80/0x7c80 [ 144.742290][ T6853] ? __rwlock_init+0x150/0x150 [ 144.747107][ T6853] ? rcu_is_watching+0x15/0xb0 [ 144.751916][ T6853] ? do_raw_spin_unlock+0x121/0x230 [ 144.757169][ T6853] filemap_fdatawrite_wbc+0x122/0x180 [ 144.762589][ T6853] file_write_and_wait_range+0x171/0x240 [ 144.768271][ T6853] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 144.773683][ T6853] ? xfs_iunlock+0x56/0x300 [ 144.778220][ T6853] xfs_file_fsync+0x197/0x9c0 [ 144.782936][ T6853] ? xfs_file_release+0x20/0x20 [ 144.787814][ T6853] ? xfs_file_buffered_write+0x519/0x940 [ 144.793473][ T6853] ? vfs_fsync_range+0x130/0x1a0 [ 144.798446][ T6853] xfs_file_buffered_write+0x854/0x940 [ 144.803943][ T6853] ? xfs_file_dax_write+0x930/0x930 [ 144.809197][ T6853] ? end_current_label_crit_section+0x149/0x170 [ 144.815467][ T6853] ? xfs_file_write_iter+0x2bf/0x610 [ 144.820794][ T6853] do_iter_write+0x79a/0xc70 [ 144.825417][ T6853] ? vfs_iter_write+0xa0/0xa0 [ 144.830112][ T6853] ? rcu_read_lock_any_held+0xb4/0x120 [ 144.835607][ T6853] do_pwritev+0x205/0x340 [ 144.839962][ T6853] ? do_preadv+0x330/0x330 [ 144.844417][ T6853] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 144.850422][ T6853] ? lock_chain_count+0x20/0x20 [ 144.855322][ T6853] ? lockdep_hardirqs_on+0x98/0x150 [ 144.860585][ T6853] ? __x64_sys_pwritev2+0xbe/0x100 [ 144.865741][ T6853] do_syscall_64+0x55/0xb0 [ 144.870191][ T6853] ? clear_bhb_loop+0x40/0x90 [ 144.874925][ T6853] ? clear_bhb_loop+0x40/0x90 [ 144.879660][ T6853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.885848][ T6853] RIP: 0033:0x7fead058e929 [ 144.890310][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.910094][ T6853] RSP: 002b:00007fead131b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 144.918540][ T6853] RAX: ffffffffffffffda RBX: 00007fead07b5fa0 RCX: 00007fead058e929 [ 144.926543][ T6853] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 144.934542][ T6853] RBP: 00007fead0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.942551][ T6853] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 144.950546][ T6853] R13: 0000000000000000 R14: 00007fead07b5fa0 R15: 00007ffd2228b818 [ 144.958585][ T6853] [ 145.022439][ T6853] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 145.030510][ T6853] XFS (loop0): page discard on page ffffea0001606ec0, inode 0x1146, pos 65536. [ 145.068680][ T6853] loop0: writeback error on inode 4422, offset 20480, sector 8960 [ 145.264524][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.352758][ T23] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 145.372254][ T23] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 145.420569][ T23] hid-generic 0000:0003:0001.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 145.608614][ T6898] fido_id[6898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.264754][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.418417][ T6913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.455764][ T6905] loop4: detected capacity change from 0 to 32768 [ 146.476840][ T23] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.509585][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.538018][ T6905] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.544651][ T6901] loop2: detected capacity change from 0 to 32768 [ 146.555759][ T23] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.573206][ T23] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.581980][ T23] usb 1-1: Manufacturer: syz [ 146.604554][ T23] usb 1-1: config 0 descriptor?? [ 146.666588][ T6901] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.833361][ T23] rc_core: IR keymap rc-hauppauge not found [ 146.847135][ T23] Registered IR keymap rc-empty [ 146.851159][ T6905] XFS (loop4): Ending clean mount [ 146.871213][ T6905] XFS (loop4): Quotacheck needed: Please wait. [ 146.887645][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 146.919293][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 146.942606][ T6901] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 146.973181][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 146.981716][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.999174][ T6905] XFS (loop4): Quotacheck: Done. [ 147.032638][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.073512][ T6901] XFS (loop2): Starting recovery (logdev: internal) [ 147.168276][ T6901] XFS (loop2): Ending recovery (logdev: internal) [ 147.233829][ T5862] usb 1-1: USB disconnect, device number 4 [ 147.375729][ T6018] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.676515][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.959571][ T6954] loop5: detected capacity change from 0 to 256 [ 148.050652][ T6955] input: syz0 as /devices/virtual/input/input9 [ 148.113939][ T6954] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 148.312175][ T5862] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 148.337818][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.253'. [ 148.415108][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.253'. [ 148.508139][ T5862] usb 5-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 148.530161][ T5862] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.583770][ T5862] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 148.625379][ T5862] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 148.712315][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.746056][ T5862] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 148.781639][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.833499][ T5862] usb 5-1: config 0 descriptor?? [ 148.854905][ T6958] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.318705][ T5862] cypress 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 149.362388][ T5862] cypress 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 149.369549][ T5862] cypress 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 149.425509][ T5862] cypress 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 149.462384][ T5862] cypress 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 149.469535][ T5862] cypress 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 149.510373][ T5862] cypress 0003:04B4:ED81.0004: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.4-1/input0 [ 149.581669][ T5862] usb 5-1: USB disconnect, device number 4 [ 149.616496][ T6963] loop0: detected capacity change from 0 to 32768 [ 149.727307][ T6963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.256 (6963) [ 149.809646][ T6989] fido_id[6989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 149.910080][ T6963] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.955904][ T6963] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 149.995321][ T6963] BTRFS info (device loop0): setting nodatacow, compression disabled [ 150.028547][ T6963] BTRFS info (device loop0): max_inline at 0 [ 150.050432][ T6963] BTRFS info (device loop0): enabling disk space caching [ 150.082204][ T6963] BTRFS info (device loop0): turning off barriers [ 150.104753][ T6963] BTRFS info (device loop0): turning on flush-on-commit [ 150.132116][ T6963] BTRFS info (device loop0): disabling tree log [ 150.148714][ T6963] BTRFS info (device loop0): force clearing of disk cache [ 150.172103][ T6963] BTRFS info (device loop0): enabling ssd optimizations [ 150.212324][ T6963] BTRFS info (device loop0): max_inline at 4096 [ 150.230199][ T6963] BTRFS info (device loop0): disk space caching is enabled [ 150.601258][ T6963] BTRFS info (device loop0): auto enabling async discard [ 150.637795][ T6963] BTRFS info (device loop0): rebuilding free space tree [ 150.730397][ T6985] loop5: detected capacity change from 0 to 32768 [ 150.800080][ T6985] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.261 (6985) [ 150.861198][ T6963] BTRFS info (device loop0): disabling free space tree [ 150.888200][ T6985] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 150.918945][ T6963] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.933063][ T6985] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 150.975897][ T6963] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.986977][ T6985] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 151.007658][ T6985] BTRFS info (device loop5): use lzo compression, level 0 [ 151.061036][ T6985] BTRFS info (device loop5): using free space tree [ 151.308600][ T6985] BTRFS info (device loop5): enabling ssd optimizations [ 151.324376][ T6985] BTRFS info (device loop5): auto enabling async discard [ 151.408846][ T7045] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 151.493838][ T5790] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.561849][ T7045] veth0_vlan: left promiscuous mode [ 151.686764][ T7045] veth0_vlan: entered promiscuous mode [ 151.875183][ T7045] team0: Device veth0_vlan failed to register rx_handler [ 152.194720][ T7058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.317856][ T6308] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 152.533621][ T7045] syz.2.266 (7045) used greatest stack depth: 18824 bytes left [ 152.882547][ T7068] loop4: detected capacity change from 0 to 1024 [ 152.927630][ T7068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.074816][ T7068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.575528][ T6018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.126973][ T7099] loop5: detected capacity change from 0 to 32768 [ 155.183975][ T7099] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 155.235380][ T7099] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 155.413175][ T7099] XFS (loop5): Ending clean mount [ 155.453926][ T7099] XFS (loop5): Quotacheck needed: Please wait. [ 155.590182][ T7099] XFS (loop5): Quotacheck: Done. [ 155.602646][ T7099] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 155.748835][ T7142] input: syz0 as /devices/virtual/input/input10 [ 156.181249][ T7114] loop2: detected capacity change from 0 to 40427 [ 156.243359][ T7114] F2FS-fs (loop2): invalid crc value [ 156.310422][ T7114] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.534369][ T7114] F2FS-fs (loop2): Start checkpoint disabled! [ 156.574389][ T7114] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 156.743601][ T7166] loop0: detected capacity change from 0 to 64 [ 157.189216][ T11] kworker/u4:0: attempt to access beyond end of device [ 157.189216][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 157.220697][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 157.259494][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 157.685316][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 157.982811][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.182983][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 158.202768][ T23] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 158.213696][ T23] usb 6-1: config 0 has no interface number 0 [ 158.235008][ T23] usb 6-1: config 0 interface 230 has no altsetting 0 [ 158.245987][ T23] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 158.261116][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.280827][ T23] usb 6-1: Product: syz [ 158.287422][ T23] usb 6-1: Manufacturer: syz [ 158.297906][ T23] usb 6-1: SerialNumber: syz [ 158.319524][ T23] usb 6-1: config 0 descriptor?? [ 158.370820][ T23] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 158.418253][ T23] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 158.595194][ T7213] loop0: detected capacity change from 0 to 256 [ 158.748410][ T28] audit: type=1804 audit(1752508987.589:133): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.306" name="/newroot/71/file0/bus" dev="loop0" ino=1048604 res=1 errno=0 [ 158.837585][ T28] audit: type=1804 audit(1752508987.629:134): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.306" name="/newroot/71/file0/bus" dev="loop0" ino=1048604 res=1 errno=0 [ 159.282342][ T7231] loop0: detected capacity change from 0 to 1024 [ 159.340394][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.673142][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.124919][ T7255] veth3: entered allmulticast mode [ 160.353967][ T7263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 160.355100][ T7241] loop4: detected capacity change from 0 to 32768 [ 160.452619][ T7241] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.627886][ T7272] loop2: detected capacity change from 0 to 1024 [ 160.655575][ T23] ums-usbat: probe of 6-1:0.230 failed with error -5 [ 160.694842][ T7272] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 160.720141][ T7241] XFS (loop4): Ending clean mount [ 160.741696][ T7272] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 160.752500][ T7241] XFS (loop4): Quotacheck needed: Please wait. [ 160.898047][ T7241] XFS (loop4): Quotacheck: Done. [ 160.910589][ T5839] usb 6-1: USB disconnect, device number 3 [ 160.975870][ T7283] loop0: detected capacity change from 0 to 1024 [ 160.993299][ T7283] EXT4-fs: Ignoring removed orlov option [ 161.099322][ T7283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.254700][ T6018] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.389155][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.173265][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.393149][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 162.414231][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.444907][ T23] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 162.465700][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.489360][ T23] usb 6-1: config 0 descriptor?? [ 162.927844][ T23] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 162.946630][ T23] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 162.964773][ T23] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 162.979753][ T23] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 162.995204][ T23] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 163.013709][ T23] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 163.430319][ T7334] loop4: detected capacity change from 0 to 32768 [ 163.496887][ T5791] usb 6-1: USB disconnect, device number 4 [ 163.524211][ T7334] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.590590][ T7334] XFS (loop4): Ending clean mount [ 163.606698][ T7334] XFS (loop4): Quotacheck needed: Please wait. [ 163.649387][ T7334] XFS (loop4): Quotacheck: Done. [ 165.261271][ T6018] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.844725][ T7379] vlan2: entered allmulticast mode [ 165.849946][ T7379] macvtap0: entered allmulticast mode [ 165.882192][ T7379] veth0_macvtap: entered allmulticast mode [ 166.050737][ T7389] loop4: detected capacity change from 0 to 512 [ 166.282130][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 166.337665][ T7389] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.352102][ T7389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.369745][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.347'. [ 166.388654][ T7389] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.339: bad orphan inode 131083 [ 166.429255][ T7389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.474491][ T23] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.522929][ T23] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.558684][ T23] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.597907][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.620627][ T7388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.670181][ T23] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 166.920521][ T7389] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 166.976330][ T23] usb 6-1: USB disconnect, device number 5 [ 167.063555][ T7389] overlayfs: upper fs needs to support d_type. [ 167.327859][ T7389] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 167.367688][ T7389] overlayfs: upper fs does not support tmpfile. [ 167.440279][ T7389] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 167.564625][ T7438] loop0: detected capacity change from 0 to 512 [ 167.650438][ T7438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.692231][ T7438] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.883548][ T28] audit: type=1800 audit(1752508996.729:135): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 168.193760][ T6018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.279799][ T7456] loop5: detected capacity change from 0 to 512 [ 168.359920][ T7456] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.406889][ T7456] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 168.419435][ T7456] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.354: Corrupt directory, running e2fsck is recommended [ 168.436207][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.519281][ T7456] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -12 [ 168.542400][ T7456] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.354: corrupted in-inode xattr: invalid ea_ino [ 168.544264][ T7463] loop4: detected capacity change from 0 to 1024 [ 168.634014][ T7456] EXT4-fs (loop5): Remounting filesystem read-only [ 168.692323][ T7456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.733246][ T7463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.829951][ T7463] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.856342][ T7456] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.892257][ T7456] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 168.946522][ T7456] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.354: Corrupt directory, running e2fsck is recommended [ 168.997124][ T28] audit: type=1804 audit(1752508997.839:136): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.355" name="/newroot/58/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 168.999596][ T7463] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 1: comm syz.4.355: lblock 1 mapped to illegal pblock 1 (length 7) [ 169.043435][ T7477] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.354: directory missing '.' [ 169.048328][ T5839] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.109914][ T7463] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 169.129708][ T7480] loop0: detected capacity change from 0 to 256 [ 169.137899][ T6308] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.164518][ T7480] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.176677][ T7463] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.176677][ T7463] [ 169.232104][ T7480] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 169.272938][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 169.283624][ T5839] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 169.312137][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.327230][ T7480] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 169.365839][ T7484] loop5: detected capacity change from 0 to 764 [ 169.373403][ T5839] usb 3-1: config 0 descriptor?? [ 169.443951][ T5839] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 169.479971][ T7484] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 169.498410][ T6018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.335908][ T7506] trusted_key: syz.4.367 sent an empty control message without MSG_MORE. [ 170.640352][ T5839] gspca_sonixj: reg_w1 err -71 [ 170.692382][ T5839] sonixj: probe of 3-1:0.0 failed with error -71 [ 170.721033][ T5839] usb 3-1: USB disconnect, device number 8 [ 170.892301][ T6575] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.082219][ T6575] usb 1-1: Using ep0 maxpacket: 32 [ 171.092481][ T6575] usb 1-1: config 0 has no interfaces? [ 171.101596][ T6575] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 171.121181][ T6575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.148236][ T6575] usb 1-1: config 0 descriptor?? [ 171.377212][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 171.642602][ T7540] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 172.044841][ T5791] usb 1-1: USB disconnect, device number 5 [ 172.464102][ T7560] loop0: detected capacity change from 0 to 512 [ 172.593786][ T7560] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.682683][ T7560] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.379: casefold flag without casefold feature [ 172.769971][ T7560] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.379: couldn't read orphan inode 15 (err -117) [ 172.810183][ T7543] loop5: detected capacity change from 0 to 32768 [ 172.843983][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.867645][ T7543] XFS: attr2 mount option is deprecated. [ 172.941581][ T7543] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 172.995279][ T7543] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.168502][ T7543] XFS (loop5): Ending clean mount [ 173.214698][ T7543] XFS (loop5): Quotacheck needed: Please wait. [ 173.281390][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.357235][ T7543] XFS (loop5): Quotacheck: Done. [ 173.760659][ T28] audit: type=1804 audit(1752509002.559:137): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.374" name="/newroot/47/file0/bus" dev="loop5" ino=4426 res=1 errno=0 [ 174.033200][ T6308] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.131671][ T7557] loop2: detected capacity change from 0 to 32768 [ 174.241735][ T7557] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.567560][ T7557] XFS (loop2): Ending clean mount [ 174.648887][ T7557] XFS (loop2): Quotacheck needed: Please wait. [ 174.790559][ T7557] XFS (loop2): Quotacheck: Done. [ 174.952423][ T7562] loop4: detected capacity change from 0 to 262144 [ 175.021708][ T7562] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.082175][ T7562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.329818][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.367383][ T7592] loop5: detected capacity change from 0 to 512 [ 175.393074][ T7592] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.446893][ T7592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 175.472344][ T7592] System zones: 1-12 [ 175.510014][ T7592] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: inode #11: comm syz.5.382: missing EA_INODE flag [ 175.592319][ T7592] EXT4-fs (loop5): Remounting filesystem read-only [ 175.599247][ T7592] EXT4-fs (loop5): 1 orphan inode deleted [ 175.671402][ T7592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.938385][ T6308] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.311060][ T7614] loop2: detected capacity change from 0 to 256 [ 176.832303][ T6575] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.952262][ T5862] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.038438][ T6575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.051556][ T6575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.067472][ T6575] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.078340][ T6575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.099180][ T6575] usb 1-1: config 0 descriptor?? [ 177.142450][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 177.159213][ T5862] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.169574][ T5862] usb 3-1: config 179 has no interface number 0 [ 177.182357][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 177.194182][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 177.206591][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.218371][ T5862] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 177.230430][ T5862] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.244410][ T5862] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.253920][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.275579][ T7620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.619643][ T7625] loop4: detected capacity change from 0 to 2048 [ 177.632209][ T7625] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.678212][ T7625] syz.4.384: attempt to access beyond end of device [ 177.678212][ T7625] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 177.695362][ T7626] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.839297][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.850344][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.871138][ T7625] Remounting filesystem read-only [ 177.878288][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.879561][ T7628] NILFS (loop4): mounting fs with errors [ 177.888625][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.926597][ T7625] Remounting filesystem read-only [ 177.942126][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.952627][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.967249][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.977809][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.993026][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.004316][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.015603][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.026102][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.039278][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.049655][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.059969][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.070335][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.080762][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.091146][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.115557][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.125963][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.138907][ T5839] usb 3-1: USB disconnect, device number 9 [ 178.138958][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 178.153223][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 178.158300][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.172126][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.190138][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.201307][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.214683][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.215790][ T6575] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input12 [ 178.225034][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.247155][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.257630][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.270654][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.281129][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.291124][ T7625] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.302203][ T7625] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.312273][ T28] audit: type=1800 audit(1752509007.149:138): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.384" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 178.469161][ T6575] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input13 [ 178.549374][ T6575] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input14 [ 178.615982][ T6575] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input15 [ 178.705637][ T6575] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 178.802645][ T6575] usb 1-1: USB disconnect, device number 6 [ 178.892148][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.980476][ T7639] fido_id[7639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 179.048191][ T7641] loop2: detected capacity change from 0 to 2048 [ 179.066296][ T7641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.101246][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.135600][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.173289][ T23] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.201706][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.233139][ T23] usb 6-1: SerialNumber: syz [ 179.243194][ T28] audit: type=1800 audit(1752509008.079:139): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.399" name="bus" dev="loop2" ino=1436 res=0 errno=0 [ 179.535095][ T23] usb 6-1: 0:2 : does not exist [ 179.608719][ T23] usb 6-1: USB disconnect, device number 6 [ 180.000111][ T7643] loop4: detected capacity change from 0 to 32768 [ 180.004453][ T7656] loop2: detected capacity change from 0 to 4096 [ 180.017316][ T7656] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 180.120122][ T112] ERROR: (device loop4): diUpdatePMap: the inode is not allocated in the working map [ 180.120122][ T112] [ 180.153918][ T112] ERROR: (device loop4): remounting filesystem as read-only [ 180.367277][ T7668] loop2: detected capacity change from 0 to 2048 [ 180.401715][ T7668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 180.475401][ T7668] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.499473][ T7668] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 10 with error 28 [ 180.512764][ T7668] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.512764][ T7668] [ 180.523285][ T7668] EXT4-fs (loop2): Total free blocks count 0 [ 180.536772][ T7668] EXT4-fs (loop2): Free/Dirty block details [ 180.543523][ T7668] EXT4-fs (loop2): free_blocks=2415919104 [ 180.549499][ T7668] EXT4-fs (loop2): dirty_blocks=16 [ 180.556993][ T7668] EXT4-fs (loop2): Block reservation details [ 180.563266][ T7668] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 180.576616][ T7673] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 181.552231][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 181.608178][ T28] audit: type=1326 audit(1752509010.449:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7fc00000 [ 181.668271][ T28] audit: type=1326 audit(1752509010.449:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd3c4d8e929 code=0x7fc00000 [ 181.724705][ T28] audit: type=1326 audit(1752509010.449:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7fc00000 [ 181.749186][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.776695][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.790754][ T28] audit: type=1326 audit(1752509010.449:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7fc00000 [ 181.807509][ T23] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 181.837659][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.877564][ T23] usb 6-1: config 0 descriptor?? [ 182.066745][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 182.076896][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 182.111124][ T7724] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.120549][ T7724] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.129434][ T7724] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.138295][ T7724] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.186329][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 182.213441][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 182.304474][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 182.333771][ T7728] netlink: 'syz.2.433': attribute type 15 has an invalid length. [ 182.341650][ T7728] netlink: 'syz.2.433': attribute type 18 has an invalid length. [ 182.369753][ T23] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x3 [ 182.406255][ T7728] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.415704][ T7728] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.424606][ T7728] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.433581][ T7728] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.447332][ T7728] vxlan0: entered promiscuous mode [ 182.455038][ T23] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 182.640299][ T5862] usb 6-1: USB disconnect, device number 7 [ 183.701395][ T7753] loop0: detected capacity change from 0 to 32768 [ 183.727576][ T7753] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.444 (7753) [ 183.792086][ T7753] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 183.806665][ T7753] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 183.819298][ T7753] BTRFS info (device loop0): using free space tree [ 183.921345][ T7779] loop4: detected capacity change from 0 to 2048 [ 183.940814][ T7753] BTRFS info (device loop0): enabling ssd optimizations [ 183.968377][ T7753] BTRFS info (device loop0): auto enabling async discard [ 183.976839][ T7779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.060114][ T28] audit: type=1800 audit(1752509012.899:144): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.453" name="file2" dev="loop4" ino=1336 res=0 errno=0 [ 184.316990][ T7804] block nbd5: shutting down sockets [ 184.415168][ T5790] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 184.584970][ T5862] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.676372][ T7815] 9pnet: p9_errstr2errno: server reported unknown error ¯Sx7FÑÿ1ÀÜÀ¡H;9ì‰:Z6 [ 184.795645][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.812506][ T5862] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.821786][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.838630][ T5862] usb 5-1: config 0 descriptor?? [ 185.053114][ T5862] usbhid 5-1:0.0: can't add hid device: -71 [ 185.059157][ T5862] usbhid: probe of 5-1:0.0 failed with error -71 [ 185.067244][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 185.079126][ T5862] usb 5-1: USB disconnect, device number 5 [ 185.172184][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.274195][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.287037][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.297425][ T5896] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.306815][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.314914][ T5896] usb 6-1: SerialNumber: syz [ 185.330681][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 185.352460][ T7826] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 185.366662][ T23] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 185.382319][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.400633][ T23] usb 1-1: Product: syz [ 185.405161][ T23] usb 1-1: Manufacturer: syz [ 185.409806][ T23] usb 1-1: SerialNumber: syz [ 185.418866][ T23] usb 1-1: config 0 descriptor?? [ 185.508758][ T7828] bpf setsockopt: ignoring program buffer with optlen=4904 (max_optlen=4096) [ 185.559315][ T5896] usb 6-1: 0:2 : does not exist [ 185.591697][ T5896] usb 6-1: USB disconnect, device number 8 [ 185.637490][ T5839] kernel write not supported for file bpf-prog (pid: 5839 comm: kworker/1:5) [ 185.647939][ T23] hso 1-1:0.0: Can't find BULK IN endpoint [ 185.653412][ T5862] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 185.662706][ T23] usb-storage 1-1:0.0: USB Mass Storage device detected [ 185.846807][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 185.856408][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.858168][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.873352][ T5862] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.878284][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.888762][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.904939][ T5862] usb 5-1: config 0 descriptor?? [ 185.921187][ T5839] usb 1-1: USB disconnect, device number 7 [ 186.287891][ T7839] netlink: 'syz.5.472': attribute type 11 has an invalid length. [ 186.296921][ T7839] netlink: 'syz.5.472': attribute type 15 has an invalid length. [ 186.304889][ T7839] netlink: 'syz.5.472': attribute type 16 has an invalid length. [ 186.314040][ T7839] netlink: 'syz.5.472': attribute type 21 has an invalid length. [ 186.322193][ T7839] netlink: 'syz.5.472': attribute type 25 has an invalid length. [ 186.330193][ T7839] netlink: 'syz.5.472': attribute type 27 has an invalid length. [ 186.343694][ T5862] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 186.355698][ T7839] netlink: 'syz.5.472': attribute type 28 has an invalid length. [ 186.363843][ T7839] netlink: 'syz.5.472': attribute type 29 has an invalid length. [ 186.464911][ T7841] loop5: detected capacity change from 0 to 2048 [ 186.484120][ T7841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.628523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 186.642067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 186.807236][ T7847] loop0: detected capacity change from 0 to 1024 [ 186.822900][ T7849] netlink: 9 bytes leftover after parsing attributes in process `syz.5.477'. [ 186.835372][ T5839] usb 5-1: USB disconnect, device number 6 [ 186.896390][ T7849] netlink: 9 bytes leftover after parsing attributes in process `syz.5.477'. [ 186.907512][ T7847] hfsplus: xattr searching failed [ 186.934948][ T7847] hfsplus: xattr searching failed [ 187.114309][ T7858] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 187.366161][ T7863] loop5: detected capacity change from 0 to 8192 [ 187.380777][ T7863] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.402246][ T7863] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 187.411570][ T7863] REISERFS (device loop5): using ordered data mode [ 187.422355][ T5896] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.432194][ T7863] reiserfs: using flush barriers [ 187.439410][ T7863] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.456807][ T7863] REISERFS (device loop5): checking transaction log (loop5) [ 187.557136][ T7863] REISERFS (device loop5): Using tea hash to sort names [ 187.566209][ T7863] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 187.623150][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 187.640869][ T5896] usb 1-1: config 0 has no interfaces? [ 187.649990][ T5896] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 187.660767][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.681612][ T5896] usb 1-1: config 0 descriptor?? [ 187.934875][ T5896] usb 1-1: USB disconnect, device number 8 [ 188.099893][ T7880] loop4: detected capacity change from 0 to 8192 [ 188.117719][ T7880] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.141867][ T7883] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 188.151359][ T7880] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 188.167553][ T7880] REISERFS (device loop4): using ordered data mode [ 188.203632][ T7880] reiserfs: using flush barriers [ 188.215872][ T7880] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.251532][ T7880] REISERFS (device loop4): checking transaction log (loop4) [ 188.261068][ T7880] REISERFS (device loop4): Using tea hash to sort names [ 188.292630][ T7880] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 188.296790][ T7889] loop5: detected capacity change from 0 to 256 [ 188.318229][ T7889] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.328995][ T7889] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 188.378708][ T7889] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 188.862107][ T5862] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.071802][ T5862] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.102120][ T5862] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.144393][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.187288][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.214128][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.233773][ T5862] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.248670][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.249867][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.496'. [ 189.260667][ T5862] usb 1-1: Product: syz [ 189.276187][ T5862] usb 1-1: Manufacturer: syz [ 189.288040][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 189.298018][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 189.311308][ T5862] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 189.336080][ T5862] cdc_wdm 1-1:1.0: Unknown control protocol [ 189.399192][ T7899] loop2: detected capacity change from 0 to 32768 [ 189.433486][ T7899] XFS: ikeep mount option is deprecated. [ 189.477059][ T7913] loop4: detected capacity change from 0 to 8 [ 189.548336][ T7899] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.599896][ T28] audit: type=1800 audit(1752509018.429:145): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.501" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 189.747849][ T7899] XFS (loop2): Ending clean mount [ 189.766258][ T7899] XFS (loop2): Quotacheck needed: Please wait. [ 189.852664][ T7899] XFS (loop2): Quotacheck: Done. [ 190.194462][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.809597][ T7937] loop5: detected capacity change from 0 to 40427 [ 190.818694][ T7937] F2FS-fs (loop5): build fault injection attr: rate: 693, type: 0x7ffff [ 190.828091][ T7937] F2FS-fs (loop5): heap/no_heap options were deprecated [ 190.837843][ T7937] F2FS-fs (loop5): invalid crc value [ 190.859638][ T7937] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.955776][ T7937] F2FS-fs (loop5): Start checkpoint disabled! [ 190.963498][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.984725][ T7937] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 191.123947][ T5896] usb 1-1: USB disconnect, device number 9 [ 191.380730][ T1303] kworker/u4:8: attempt to access beyond end of device [ 191.380730][ T1303] loop5: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 191.514242][ T1303] F2FS-fs (loop5): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xe97/0x17f0 [ 191.580543][ T1303] kworker/u4:8: attempt to access beyond end of device [ 191.580543][ T1303] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.642134][ T1303] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 191.649121][ T1303] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 191.724545][ T1303] F2FS-fs (loop5): Stopped filesystem due to reason: 1 [ 192.370249][ T27] usb 3-1: device descriptor read/all, error -71 [ 192.712925][ T5839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.864442][ T23] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 192.902800][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 192.916870][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 192.942925][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.963060][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.975822][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.989880][ T5839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.999207][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.054497][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 193.082548][ T23] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 193.093315][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.106701][ T23] usb 6-1: config 0 descriptor?? [ 193.116924][ T7969] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 193.238236][ T5839] usb 5-1: GET_CAPABILITIES returned 0 [ 193.244020][ T5839] usbtmc 5-1:16.0: can't read capabilities [ 193.401254][ T7986] loop2: detected capacity change from 0 to 128 [ 193.428819][ T7986] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.444203][ T7986] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.515094][ T5862] usb 5-1: USB disconnect, device number 7 [ 193.550920][ T23] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 193.629829][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.762169][ T23] usb 6-1: USB disconnect, device number 9 [ 194.679926][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687166][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.970893][ T8005] loop0: detected capacity change from 0 to 40427 [ 194.982218][ T8005] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 195.007113][ T8005] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 195.018838][ T8005] F2FS-fs (loop0): heap/no_heap options were deprecated [ 195.038475][ T8005] F2FS-fs (loop0): invalid crc value [ 195.050648][ T8005] F2FS-fs (loop0): Found nat_bits in checkpoint [ 195.126449][ T8005] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 195.137247][ T8005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 195.197153][ T8005] ALSA: mixer_oss: invalid OSS volume '' [ 195.210226][ T8005] ALSA: mixer_oss: invalid OSS volume 'ent_cache,noinline_xattr,fastbo' [ 195.304367][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.542274][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 195.557482][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.585509][ T23] usb 5-1: config 0 has no interface number 0 [ 195.615761][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.651345][ T8014] loop2: detected capacity change from 0 to 65536 [ 195.659858][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.676083][ T23] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 195.687734][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.706818][ T8014] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 195.730911][ T23] usb 5-1: config 0 descriptor?? [ 195.750778][ T8014] XFS (loop2): Ending clean mount [ 195.758080][ T8014] XFS (loop2): Quotacheck needed: Please wait. [ 195.799620][ T8014] XFS (loop2): Quotacheck: Done. [ 195.932846][ T5788] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 196.037816][ T8031] loop5: detected capacity change from 0 to 512 [ 196.122353][ T8031] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.544: corrupted in-inode xattr: e_value size too large [ 196.180969][ T8031] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.544: couldn't read orphan inode 15 (err -117) [ 196.227439][ T8031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.358091][ T8031] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #2: block 12: comm syz.5.544: lblock 3 mapped to illegal pblock 12 (length 1) [ 196.383296][ T23] uclogic 0003:28BD:0094.000A: pen parameters not found [ 196.405248][ T23] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 196.415536][ T8038] capability: warning: `syz.0.546' uses 32-bit capabilities (legacy support in use) [ 196.451082][ T6308] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.764631][ T5896] usb 5-1: USB disconnect, device number 8 [ 196.879649][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 197.012212][ T5862] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 197.112428][ T8040] loop2: detected capacity change from 0 to 65536 [ 197.127934][ T8040] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 197.155195][ T8040] XFS (loop2): Ending clean mount [ 197.165052][ T8040] XFS (loop2): Quotacheck needed: Please wait. [ 197.201839][ T8040] XFS (loop2): Quotacheck: Done. [ 197.202164][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 197.225947][ T5862] usb 6-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.239188][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.248469][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 197.257751][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.269490][ T5862] usb 6-1: config 0 descriptor?? [ 197.288212][ T5788] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 197.721306][ T8065] loop4: detected capacity change from 0 to 1024 [ 197.773567][ T8065] EXT4-fs: Ignoring removed nobh option [ 197.779252][ T8065] EXT4-fs: Ignoring removed bh option [ 197.829154][ T8065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.900455][ T8065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.044334][ T5862] usbhid 6-1:0.0: can't add hid device: -71 [ 198.050419][ T5862] usbhid: probe of 6-1:0.0 failed with error -71 [ 198.111796][ T5862] usb 6-1: USB disconnect, device number 10 [ 198.116757][ T6018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.129906][ T8063] loop0: detected capacity change from 0 to 40427 [ 198.138145][ T8063] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 198.170977][ T8063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 198.191718][ T8063] F2FS-fs (loop0): invalid crc value [ 198.227591][ T8063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.236882][ T8073] loop4: detected capacity change from 0 to 256 [ 198.252380][ T8073] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 198.259753][ T8075] loop2: detected capacity change from 0 to 512 [ 198.279369][ T8075] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.288079][ T8073] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 198.292467][ T8075] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 198.308854][ T8073] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 198.317739][ T8073] UDF-fs: Scanning with blocksize 512 failed [ 198.325759][ T8063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 198.327887][ T8075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 198.333095][ T8063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.352263][ T8075] System zones: 1-12 [ 198.356915][ T8075] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.553: corrupted in-inode xattr: e_value size too large [ 198.357297][ T8073] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 198.392803][ T8075] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.553: couldn't read orphan inode 15 (err -117) [ 198.416683][ T8073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.434214][ T8075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.467448][ T8063] syz.0.555: attempt to access beyond end of device [ 198.467448][ T8063] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.495708][ T8063] syz.0.555: attempt to access beyond end of device [ 198.495708][ T8063] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 198.582583][ T8075] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.553: Unrecognised inode hash code 4 [ 198.594082][ T8075] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.553: Corrupt directory, running e2fsck is recommended [ 198.608245][ T8075] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.553: Unrecognised inode hash code 4 [ 198.619799][ T8075] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.553: Corrupt directory, running e2fsck is recommended [ 198.659032][ T5790] syz-executor: attempt to access beyond end of device [ 198.659032][ T5790] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 198.690740][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 198.711823][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 198.732365][ T58] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 198.765486][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.784884][ T58] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 198.966443][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 199.181521][ C1] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 200.115733][ T8104] loop4: detected capacity change from 0 to 8 [ 200.172960][ T8104] SQUASHFS error: zlib decompression failed, data probably corrupt [ 200.181005][ T8104] SQUASHFS error: Failed to read block 0x9b: -5 [ 200.212428][ T8104] SQUASHFS error: Unable to read metadata cache entry [99] [ 200.240723][ T8104] SQUASHFS error: Unable to read inode 0x127 [ 200.248090][ T8095] loop2: detected capacity change from 0 to 131072 [ 200.256719][ T8095] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 200.264999][ T8095] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 200.286596][ T8095] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.352228][ T8095] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 200.359355][ T8095] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 200.372398][ T27] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 200.465274][ T28] audit: type=1326 audit(1752509029.309:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3c4d2ab19 code=0x7ffc0000 [ 200.508609][ T28] audit: type=1326 audit(1752509029.309:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7ffc0000 [ 200.584697][ T28] audit: type=1326 audit(1752509029.309:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3c4d2ab19 code=0x7ffc0000 [ 200.640759][ T27] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 200.649373][ T27] usb 6-1: config 150 has no interface number 0 [ 200.672127][ T27] usb 6-1: config 150 interface 204 has no altsetting 0 [ 200.686411][ T28] audit: type=1326 audit(1752509029.309:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7ffc0000 [ 200.722204][ T27] usb 6-1: config 150 interface 1 has no altsetting 0 [ 200.754229][ T27] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 200.777408][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.785657][ T28] audit: type=1326 audit(1752509029.309:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3c4d2ab19 code=0x7ffc0000 [ 200.824179][ T27] usb 6-1: Product: syz [ 200.832964][ T27] usb 6-1: Manufacturer: syz [ 200.837697][ T27] usb 6-1: SerialNumber: syz [ 200.849220][ T28] audit: type=1326 audit(1752509029.309:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3c4d2ab19 code=0x7ffc0000 [ 200.912645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 200.931454][ T28] audit: type=1326 audit(1752509029.309:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7ffc0000 [ 201.016605][ T28] audit: type=1326 audit(1752509029.329:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3c4d2ab19 code=0x7ffc0000 [ 201.082277][ T28] audit: type=1326 audit(1752509029.329:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c4d8e929 code=0x7ffc0000 [ 201.137497][ T27] xr_serial 6-1:150.204: xr_serial converter detected [ 201.203612][ T28] audit: type=1326 audit(1752509029.339:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3c4d2ab19 code=0x7ffc0000 [ 201.955411][ T27] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 202.197845][ T5846] usb 6-1: USB disconnect, device number 11 [ 202.211234][ T5846] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 202.228613][ T5846] xr_serial 6-1:150.204: device disconnected [ 202.275274][ T8128] loop0: detected capacity change from 0 to 32768 [ 202.307752][ T8128] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 202.328575][ T8128] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 202.438765][ T8128] overlayfs: upper fs does not support tmpfile. [ 202.453881][ T8128] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 202.460921][ T8128] overlayfs: failed to set xattr on upper [ 202.466761][ T8128] overlayfs: ...falling back to redirect_dir=nofollow. [ 202.474406][ T8128] overlayfs: ...falling back to index=off. [ 202.480262][ T8128] overlayfs: ...falling back to uuid=null. [ 202.486181][ T8128] overlayfs: upper fs missing required features. [ 202.502145][ T5839] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.583976][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 202.692112][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 202.704594][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.732089][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.741913][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 202.759222][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.791239][ T5839] usb 3-1: config 0 descriptor?? [ 203.134126][ T8150] loop5: detected capacity change from 0 to 2048 [ 203.151488][ T8150] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 203.166323][ T8150] UDF-fs: Scanning with blocksize 512 failed [ 203.179861][ T8150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.219047][ T5839] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input17 [ 203.335923][ T5839] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 203.600075][ T8161] loop5: detected capacity change from 0 to 8192 [ 203.615361][ T8161] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.035371][ T5896] usb 3-1: USB disconnect, device number 12 [ 204.223550][ T8176] loop5: detected capacity change from 0 to 128 [ 204.241420][ T8176] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 204.259934][ T8176] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.322117][ T5862] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.397932][ T6308] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.523387][ T5862] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.531604][ T5862] usb 1-1: config 0 has no interface number 0 [ 204.538442][ T5862] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.547691][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.559679][ T5862] usb 1-1: config 0 descriptor?? [ 204.574527][ T5862] cp210x 1-1:0.1: cp210x converter detected [ 204.980179][ T8190] loop2: detected capacity change from 0 to 32768 [ 204.989871][ T5862] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 205.009930][ T8190] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.047465][ T8190] XFS (loop2): Ending clean mount [ 205.122098][ T8190] loop2: detected capacity change from 32768 to 64 [ 205.141079][ T8190] syz.2.604: attempt to access beyond end of device [ 205.141079][ T8190] loop2: rw=2048, sector=12252, nr_sectors = 4 limit=64 [ 205.211603][ T5788] syz-executor: attempt to access beyond end of device [ 205.211603][ T5788] loop2: rw=432129, sector=112, nr_sectors = 16 limit=64 [ 205.217670][ T5862] usb 1-1: cp210x converter now attached to ttyUSB0 [ 205.237148][ T24] XFS (loop2): log I/O error -5 [ 205.242796][ T24] XFS (loop2): Filesystem has been shut down due to log error (0x2). [ 205.250890][ T24] XFS (loop2): Please unmount the filesystem and rectify the problem(s). [ 205.263586][ T5788] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.476124][ T5862] usb 1-1: USB disconnect, device number 10 [ 205.486864][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.504524][ T5862] cp210x 1-1:0.1: device disconnected [ 206.351702][ T8234] loop0: detected capacity change from 0 to 256 [ 206.396996][ T8234] FAT-fs (loop0): Directory bread(block 64) failed [ 206.405558][ T8234] FAT-fs (loop0): Directory bread(block 65) failed [ 206.422407][ T8234] FAT-fs (loop0): Directory bread(block 66) failed [ 206.429103][ T8234] FAT-fs (loop0): Directory bread(block 67) failed [ 206.439360][ T8234] FAT-fs (loop0): Directory bread(block 68) failed [ 206.452133][ T8234] FAT-fs (loop0): Directory bread(block 69) failed [ 206.460634][ T8234] FAT-fs (loop0): Directory bread(block 70) failed [ 206.474440][ T8234] FAT-fs (loop0): Directory bread(block 71) failed [ 206.481366][ T8234] FAT-fs (loop0): Directory bread(block 72) failed [ 206.488232][ T8234] FAT-fs (loop0): Directory bread(block 73) failed [ 206.742518][ T8238] loop4: detected capacity change from 0 to 32768 [ 206.750283][ T8238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.622 (8238) [ 206.764912][ T8238] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.776356][ T8238] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 206.785318][ T8238] BTRFS info (device loop4): use no compression [ 206.791686][ T8238] BTRFS info (device loop4): setting nodatacow, compression disabled [ 206.799849][ T8238] BTRFS info (device loop4): turning on sync discard [ 206.806706][ T8238] BTRFS info (device loop4): force clearing of disk cache [ 206.813939][ T8238] BTRFS info (device loop4): turning on async discard [ 206.820748][ T8238] BTRFS info (device loop4): turning off async discard [ 206.827702][ T8238] BTRFS info (device loop4): using free space tree [ 206.859205][ T8238] BTRFS info (device loop4): enabling ssd optimizations [ 206.867397][ T8238] BTRFS info (device loop4): rebuilding free space tree [ 206.882195][ T5846] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.039668][ T6018] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.084710][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 207.106163][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.132085][ T5846] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 207.162099][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.181058][ T5846] usb 3-1: config 0 descriptor?? [ 207.205712][ T5846] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 207.606538][ T5144] bcm5974 3-1:0.0: could not read from device [ 207.632237][ T5144] bcm5974 3-1:0.0: could not read from device [ 207.650103][ T5846] bcm5974 3-1:0.0: could not read from device [ 207.666833][ T5846] input: failed to attach handler mousedev to device input18, error: -5 [ 207.687167][ T5144] bcm5974 3-1:0.0: could not read from device [ 207.700125][ T5846] usb 3-1: USB disconnect, device number 13 [ 207.848135][ T8271] loop5: detected capacity change from 0 to 8192 [ 208.352880][ T8272] loop4: detected capacity change from 0 to 40427 [ 208.387105][ T8272] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 208.402266][ T8272] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 208.437536][ T8272] F2FS-fs (loop4): invalid crc value [ 208.457261][ T8272] F2FS-fs (loop4): Found nat_bits in checkpoint [ 208.558347][ T8272] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 208.567851][ T8272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 208.684714][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.719023][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.734895][ T8295] F2FS-fs (loop4): Found FS corruption, run fsck to fix. [ 208.752140][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.770027][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.787999][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.801534][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.809326][ T27] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 208.835797][ T8272] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 209.044086][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.062499][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 209.092078][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.101811][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 209.129196][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 209.152700][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.161826][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.180294][ T8306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.212261][ T27] usb 3-1: Manufacturer: syz [ 209.220214][ T27] usb 3-1: config 0 descriptor?? [ 209.235022][ T8309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.292176][ T8309] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 209.363605][ T8309] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 209.622280][ T27] rc_core: IR keymap rc-hauppauge not found [ 209.629764][ T27] Registered IR keymap rc-empty [ 209.651537][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.702274][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.751275][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 209.782717][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 209.832489][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.882168][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.922184][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.962187][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.002132][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.052682][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.102155][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.142109][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.162542][ T5862] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 210.178567][ T8314] loop4: detected capacity change from 0 to 32768 [ 210.182152][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.232143][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.240889][ T8314] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.263613][ T27] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.292027][ T27] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.316532][ T27] usb 3-1: USB disconnect, device number 14 [ 210.359651][ T8314] XFS (loop4): Ending clean mount [ 210.372065][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 210.391941][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.449578][ T5862] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 210.500487][ T5862] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 210.515088][ T8319] loop5: detected capacity change from 0 to 32768 [ 210.526770][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.551273][ T5862] usb 1-1: Product: syz [ 210.571033][ T5862] usb 1-1: Manufacturer: syz [ 210.576369][ T5862] usb 1-1: SerialNumber: syz [ 210.589312][ T8319] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.727234][ T6018] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.757343][ T8319] XFS (loop5): Ending clean mount [ 210.817971][ T5862] usb 1-1: Limiting number of CPorts to U8_MAX [ 210.829130][ T5862] usb 1-1: Not enough endpoints found in device, aborting! [ 211.049407][ T5839] usb 1-1: USB disconnect, device number 11 [ 211.139346][ T8345] syzkaller1: entered promiscuous mode [ 211.147904][ T8345] syzkaller1: entered allmulticast mode [ 211.228188][ T6308] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.524971][ T8347] loop2: detected capacity change from 0 to 40427 [ 211.550561][ T8347] F2FS-fs (loop2): invalid crc value [ 211.564404][ T8347] F2FS-fs (loop2): Found nat_bits in checkpoint [ 211.626777][ T8347] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 211.721765][ T8347] syz.2.651: attempt to access beyond end of device [ 211.721765][ T8347] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 211.840866][ T5788] syz-executor: attempt to access beyond end of device [ 211.840866][ T5788] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 211.856627][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 211.898298][ T8358] loop4: detected capacity change from 0 to 64 [ 211.966731][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 211.966748][ T28] audit: type=1800 audit(1752509040.809:276): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.654" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 212.106492][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 212.112780][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 212.285953][ T8362] input: syz0 as /devices/virtual/input/input20 [ 212.397318][ T8364] loop4: detected capacity change from 0 to 4096 [ 212.430975][ T8364] NILFS (loop4): invalid segment: Checksum error in segment payload [ 212.439625][ T8364] NILFS (loop4): trying rollback from an earlier position [ 212.466885][ T8364] NILFS (loop4): recovery complete [ 212.492499][ T8368] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.527361][ T8371] loop0: detected capacity change from 0 to 64 [ 212.588280][ T8371] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 212.622615][ T8364] overlayfs: upper fs does not support tmpfile. [ 212.634261][ T8364] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 212.647745][ T8364] overlayfs: failed to set xattr on upper [ 212.654375][ T8364] overlayfs: ...falling back to redirect_dir=nofollow. [ 212.663111][ T8364] overlayfs: ...falling back to index=off. [ 212.669088][ T8364] overlayfs: ...falling back to uuid=null. [ 213.107097][ T8373] loop2: detected capacity change from 0 to 32768 [ 213.129642][ T8373] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 213.138371][ T8373] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 213.188581][ T8373] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 213.206975][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 213.215555][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 213.313234][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms [ 213.320940][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 213.349375][ T8373] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 213.462261][ T5862] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.664191][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 213.684733][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 213.711499][ T5862] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 213.727547][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.746211][ T5862] usb 5-1: Product: syz [ 213.750765][ T5862] usb 5-1: Manufacturer: syz [ 213.782078][ T5862] usb 5-1: SerialNumber: syz [ 213.793224][ T5862] usb 5-1: config 0 descriptor?? [ 213.807405][ T8385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.823425][ T8385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.886612][ T8382] loop5: detected capacity change from 0 to 40427 [ 213.911232][ T8382] F2FS-fs (loop5): invalid crc value [ 213.943307][ T8382] F2FS-fs (loop5): Found nat_bits in checkpoint [ 214.064751][ T8385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.072328][ T8385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.094340][ T8382] F2FS-fs (loop5): Start checkpoint disabled! [ 214.122277][ T8382] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 214.321676][ T58] kworker/u4:4: attempt to access beyond end of device [ 214.321676][ T58] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 214.336024][ T58] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 214.344005][ T58] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 214.352517][ T58] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 214.493287][ T5862] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 214.562344][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 214.774844][ T5839] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 214.786236][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.797589][ T5839] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.806801][ T5839] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.814951][ T5839] usb 3-1: Manufacturer: syz [ 214.822237][ T5839] usb 3-1: config 0 descriptor?? [ 214.895897][ T5862] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 214.923681][ T5839] rc_core: IR keymap rc-hauppauge not found [ 214.933993][ T5839] Registered IR keymap rc-empty [ 214.945733][ T5839] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 214.968341][ T5839] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 215.092741][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 215.108919][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.118024][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.135712][ T5862] usb 5-1: USB disconnect, device number 9 [ 215.155800][ T5839] usb 3-1: USB disconnect, device number 15 [ 215.162803][ T8416] loop0: detected capacity change from 0 to 256 [ 215.194003][ T8416] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.207375][ T8416] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 215.234380][ T8416] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 215.326567][ T8416] exFAT-fs (loop0): invalid start cluster (2155875139) [ 215.521219][ T8426] input: syz0 as /devices/virtual/input/input22 [ 215.927826][ T8436] pim6reg1: entered promiscuous mode [ 215.962271][ T8436] pim6reg1: entered allmulticast mode [ 216.478665][ T23] Process accounting resumed [ 217.125014][ T8449] loop5: detected capacity change from 0 to 40427 [ 217.158617][ T8449] F2FS-fs (loop5): Found nat_bits in checkpoint [ 217.260009][ T8449] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 217.425643][ T6308] syz-executor: attempt to access beyond end of device [ 217.425643][ T6308] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.458975][ T6308] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 217.631441][ T8471] loop4: detected capacity change from 0 to 32768 [ 217.665507][ T8471] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.725339][ T8471] XFS (loop4): Ending clean mount [ 217.951792][ T6018] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.464835][ T8497] loop4: detected capacity change from 0 to 8 [ 219.404510][ T8499] loop5: detected capacity change from 0 to 40427 [ 219.424746][ T8499] F2FS-fs (loop5): invalid crc value [ 219.436535][ T8499] F2FS-fs (loop5): Found nat_bits in checkpoint [ 219.499972][ T8499] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 219.635284][ T8499] syz.5.703: attempt to access beyond end of device [ 219.635284][ T8499] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.763464][ T6308] syz-executor: attempt to access beyond end of device [ 219.763464][ T6308] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 219.779276][ T6308] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 220.604787][ T8532] loop4: detected capacity change from 0 to 32768 [ 220.621221][ T8532] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.668849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 220.689176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 220.700807][ T8532] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 220.747373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 220.802980][ T8532] XFS (loop4): Starting recovery (logdev: internal) [ 220.830794][ T8532] XFS (loop4): Ending recovery (logdev: internal) [ 221.340805][ T8551] loop2: detected capacity change from 0 to 32768 [ 221.369645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 221.383720][ T8551] JBD2: Ignoring recovery information on journal [ 221.512950][ T8551] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.529702][ T6018] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.005165][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 222.448846][ T8593] loop2: detected capacity change from 0 to 128 [ 222.461542][ T8593] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.475687][ T8593] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.503746][ T8593] syz.2.736 (pid 8593) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 222.547510][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.683071][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 222.712299][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 222.882887][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 222.897731][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.910563][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.920558][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.931252][ T5862] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 222.937972][ T8606] loop2: detected capacity change from 0 to 128 [ 222.952215][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.959068][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.969417][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.969426][ T5862] usb 5-1: Product: syz [ 222.969445][ T5862] usb 5-1: Manufacturer: syz [ 222.989192][ T23] usb 1-1: config 0 descriptor?? [ 222.995774][ T5862] usb 5-1: SerialNumber: syz [ 223.004830][ T5862] usb 5-1: config 0 descriptor?? [ 223.012688][ T5862] ch341 5-1:0.0: ch341-uart converter detected [ 223.110913][ T8609] syz.2.741: attempt to access beyond end of device [ 223.110913][ T8609] loop2: rw=2049, sector=145, nr_sectors = 456 limit=128 [ 223.284119][ T58] kworker/u4:4: attempt to access beyond end of device [ 223.284119][ T58] loop2: rw=1, sector=601, nr_sectors = 440 limit=128 [ 223.437321][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.444823][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.454167][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.463458][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.470923][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.482071][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.489357][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.496933][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.504295][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.511570][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 223.525260][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input23 [ 223.541942][ T23] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 223.692297][ T5896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 223.747493][ T8590] loop0: detected capacity change from 0 to 1024 [ 223.801378][ T23] usb 1-1: USB disconnect, device number 12 [ 223.905087][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.916400][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.931591][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.950099][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.960644][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.973292][ T5896] usb 3-1: config 0 descriptor?? [ 224.036488][ T5862] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 224.292153][ T5839] usb 5-1: USB disconnect, device number 10 [ 224.302905][ T5839] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 224.311787][ T5839] ch341 5-1:0.0: device disconnected [ 224.404915][ T5896] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 224.435096][ T5896] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 224.489003][ T8635] loop0: detected capacity change from 0 to 1024 [ 224.553125][ T8637] loop5: detected capacity change from 0 to 2048 [ 224.564126][ T1303] hfsplus: b-tree write err: -5, ino 4 [ 224.568850][ T8637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.725089][ T5791] usb 3-1: USB disconnect, device number 16 [ 224.912130][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 224.935998][ T8648] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.102074][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 225.109520][ T5896] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 225.117873][ T5896] usb 1-1: config 0 has no interface number 0 [ 225.127612][ T5896] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 225.141153][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.153296][ T5896] usb 1-1: Product: syz [ 225.157521][ T5896] usb 1-1: Manufacturer: syz [ 225.165542][ T5896] usb 1-1: SerialNumber: syz [ 225.173052][ T5896] usb 1-1: config 0 descriptor?? [ 225.182710][ T5896] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 225.312159][ T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 225.381134][ T8652] loop5: detected capacity change from 0 to 32768 [ 225.399508][ T5896] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 225.426433][ T5896] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 225.441902][ T8652] (syz.5.761,8652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.456908][ T8652] (syz.5.761,8652,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.499089][ T8652] JBD2: Ignoring recovery information on journal [ 225.512543][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 225.529756][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 225.550234][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.562345][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.574648][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.583247][ T8652] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 225.591182][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.626648][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.643703][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.827321][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 225.842374][ T5791] usb 1-1: USB disconnect, device number 13 [ 225.851446][ T8652] [ 225.853838][ T8652] ====================================================== [ 225.860889][ T8652] WARNING: possible circular locking dependency detected [ 225.867949][ T8652] 6.6.97-syzkaller #0 Not tainted [ 225.873007][ T8652] ------------------------------------------------------ [ 225.880037][ T8652] syz.5.761/8652 is trying to acquire lock: [ 225.885942][ T8652] ffff88805343bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 225.895285][ T8652] [ 225.895285][ T8652] but task is already holding lock: [ 225.902661][ T8652] ffff888028ea0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 225.911915][ T8652] [ 225.911915][ T8652] which lock already depends on the new lock. [ 225.911915][ T8652] [ 225.922334][ T8652] [ 225.922334][ T8652] the existing dependency chain (in reverse order) is: [ 225.931362][ T8652] [ 225.931362][ T8652] -> #4 (jbd2_handle){++++}-{0:0}: [ 225.938694][ T8652] start_this_handle+0x1e9d/0x20c0 [ 225.944349][ T8652] jbd2__journal_start+0x2bb/0x5b0 [ 225.949996][ T8652] jbd2_journal_start+0x2a/0x40 [ 225.955387][ T8652] ocfs2_start_trans+0x376/0x6c0 [ 225.960863][ T8652] ocfs2_reserve_local_alloc_bits+0xaef/0x24b0 [ 225.967553][ T8652] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 225.974413][ T8652] ocfs2_mknod+0xdee/0x20f0 [ 225.979459][ T8652] ocfs2_mkdir+0x196/0x410 [ 225.984408][ T8652] vfs_mkdir+0x296/0x440 [ 225.989181][ T8652] do_mkdirat+0x1d4/0x440 [ 225.994042][ T8652] __x64_sys_mkdirat+0x89/0xa0 [ 225.999344][ T8652] do_syscall_64+0x55/0xb0 [ 226.004302][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.010732][ T8652] [ 226.010732][ T8652] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 226.019259][ T8652] down_read+0x46/0x2e0 [ 226.023949][ T8652] ocfs2_start_trans+0x36a/0x6c0 [ 226.029424][ T8652] ocfs2_reserve_local_alloc_bits+0xaef/0x24b0 [ 226.036116][ T8652] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 226.042978][ T8652] ocfs2_mknod+0xdee/0x20f0 [ 226.048014][ T8652] ocfs2_mkdir+0x196/0x410 [ 226.052967][ T8652] vfs_mkdir+0x296/0x440 [ 226.057743][ T8652] do_mkdirat+0x1d4/0x440 [ 226.062607][ T8652] __x64_sys_mkdirat+0x89/0xa0 [ 226.067904][ T8652] do_syscall_64+0x55/0xb0 [ 226.072856][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.079283][ T8652] [ 226.079283][ T8652] -> #2 (sb_internal#7){.+.+}-{0:0}: [ 226.086773][ T8652] ocfs2_start_trans+0x26b/0x6c0 [ 226.092243][ T8652] ocfs2_truncate_file+0x611/0x13a0 [ 226.097982][ T8652] ocfs2_setattr+0x150d/0x1b20 [ 226.103294][ T8652] notify_change+0xb0d/0xe10 [ 226.108430][ T8652] do_truncate+0x19b/0x220 [ 226.113385][ T8652] path_openat+0x298c/0x3190 [ 226.118506][ T8652] do_filp_open+0x1c5/0x3d0 [ 226.123543][ T8652] do_sys_openat2+0x12c/0x1c0 [ 226.128762][ T8652] __x64_sys_creat+0x90/0xb0 [ 226.133895][ T8652] do_syscall_64+0x55/0xb0 [ 226.138847][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.145273][ T8652] [ 226.145273][ T8652] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 226.154074][ T8652] down_write+0x97/0x1f0 [ 226.158849][ T8652] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 226.165369][ T8652] ocfs2_truncate_file+0xd84/0x13a0 [ 226.171108][ T8652] ocfs2_setattr+0x150d/0x1b20 [ 226.176414][ T8652] notify_change+0xb0d/0xe10 [ 226.181545][ T8652] do_truncate+0x19b/0x220 [ 226.186494][ T8652] path_openat+0x298c/0x3190 [ 226.191617][ T8652] do_filp_open+0x1c5/0x3d0 [ 226.196744][ T8652] do_sys_openat2+0x12c/0x1c0 [ 226.201958][ T8652] __x64_sys_creat+0x90/0xb0 [ 226.207097][ T8652] do_syscall_64+0x55/0xb0 [ 226.212069][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.218496][ T8652] [ 226.218496][ T8652] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 226.226331][ T8652] __lock_acquire+0x2ddb/0x7c80 [ 226.231718][ T8652] lock_acquire+0x197/0x410 [ 226.236754][ T8652] down_read+0x46/0x2e0 [ 226.241445][ T8652] ocfs2_init_acl+0x2fa/0x720 [ 226.246658][ T8652] ocfs2_mknod+0x12e5/0x20f0 [ 226.251784][ T8652] ocfs2_mkdir+0x196/0x410 [ 226.256736][ T8652] vfs_mkdir+0x296/0x440 [ 226.261516][ T8652] do_mkdirat+0x1d4/0x440 [ 226.266380][ T8652] __x64_sys_mkdirat+0x89/0xa0 [ 226.271682][ T8652] do_syscall_64+0x55/0xb0 [ 226.276638][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.283069][ T8652] [ 226.283069][ T8652] other info that might help us debug this: [ 226.283069][ T8652] [ 226.293309][ T8652] Chain exists of: [ 226.293309][ T8652] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 226.293309][ T8652] [ 226.307064][ T8652] Possible unsafe locking scenario: [ 226.307064][ T8652] [ 226.314519][ T8652] CPU0 CPU1 [ 226.319887][ T8652] ---- ---- [ 226.325272][ T8652] rlock(jbd2_handle); [ 226.329454][ T8652] lock(&journal->j_trans_barrier); [ 226.337306][ T8652] lock(jbd2_handle); [ 226.343914][ T8652] rlock(&oi->ip_xattr_sem); [ 226.348602][ T8652] [ 226.348602][ T8652] *** DEADLOCK *** [ 226.348602][ T8652] [ 226.356751][ T8652] 8 locks held by syz.5.761/8652: [ 226.361778][ T8652] #0: ffff88805c374418 (sb_writers#35){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 226.371034][ T8652] #1: ffff88805343c2d8 (&type->i_mutex_dir_key#20/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460 [ 226.381776][ T8652] #2: ffff8880535809d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 226.395484][ T8652] #3: ffff88805342ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 226.409170][ T8652] #4: ffff888053582658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 226.423120][ T8652] #5: ffff88805c374608 (sb_internal#7){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 226.432382][ T8652] #6: ffff88805da730e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 226.443249][ T8652] #7: ffff888028ea0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 226.452984][ T8652] [ 226.452984][ T8652] stack backtrace: [ 226.458884][ T8652] CPU: 1 PID: 8652 Comm: syz.5.761 Not tainted 6.6.97-syzkaller #0 [ 226.466800][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.476869][ T8652] Call Trace: [ 226.480159][ T8652] [ 226.483105][ T8652] dump_stack_lvl+0x16c/0x230 [ 226.487810][ T8652] ? load_image+0x3b0/0x3b0 [ 226.492335][ T8652] ? show_regs_print_info+0x20/0x20 [ 226.497554][ T8652] ? print_circular_bug+0x12b/0x1a0 [ 226.502770][ T8652] check_noncircular+0x2bd/0x3c0 [ 226.507731][ T8652] ? print_deadlock_bug+0x5d0/0x5d0 [ 226.512954][ T8652] ? lockdep_lock+0xe0/0x220 [ 226.517587][ T8652] ? _find_first_zero_bit+0xd3/0x100 [ 226.522903][ T8652] __lock_acquire+0x2ddb/0x7c80 [ 226.527781][ T8652] ? verify_lock_unused+0x140/0x140 [ 226.532999][ T8652] ? verify_lock_unused+0x140/0x140 [ 226.538220][ T8652] ? __ocfs2_journal_access+0x612/0x7f0 [ 226.543790][ T8652] lock_acquire+0x197/0x410 [ 226.548311][ T8652] ? ocfs2_init_acl+0x2fa/0x720 [ 226.553180][ T8652] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 226.558839][ T8652] ? __might_sleep+0xe0/0xe0 [ 226.563447][ T8652] ? read_lock_is_recursive+0x20/0x20 [ 226.568833][ T8652] ? do_raw_spin_lock+0x121/0x2c0 [ 226.573877][ T8652] ? jbd2_journal_put_journal_head+0x129/0x710 [ 226.580047][ T8652] down_read+0x46/0x2e0 [ 226.584222][ T8652] ? ocfs2_init_acl+0x2fa/0x720 [ 226.589093][ T8652] ocfs2_init_acl+0x2fa/0x720 [ 226.593788][ T8652] ? ocfs2_acl_chmod+0x320/0x320 [ 226.598738][ T8652] ? dquot_alloc_inode+0x8ac/0xa40 [ 226.603875][ T8652] ? ocfs2_journal_access+0x40/0x40 [ 226.609088][ T8652] ? ocfs2_block_signals+0x95/0xd0 [ 226.614229][ T8652] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 226.620320][ T8652] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 226.626070][ T8652] ocfs2_mknod+0x12e5/0x20f0 [ 226.630689][ T8652] ? ocfs2_mkdir+0x410/0x410 [ 226.635295][ T8652] ? verify_lock_unused+0x140/0x140 [ 226.640529][ T8652] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 226.646274][ T8652] ? __lock_acquire+0x7c80/0x7c80 [ 226.651317][ T8652] ? do_raw_spin_lock+0x121/0x2c0 [ 226.656375][ T8652] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 226.662383][ T8652] ? __lock_acquire+0x7c80/0x7c80 [ 226.667423][ T8652] ? __rwlock_init+0x150/0x150 [ 226.672202][ T8652] ? do_raw_spin_unlock+0x121/0x230 [ 226.677425][ T8652] ? put_pid+0xde/0x120 [ 226.681602][ T8652] ocfs2_mkdir+0x196/0x410 [ 226.686034][ T8652] ? make_kgid+0x640/0x640 [ 226.690467][ T8652] ? apparmor_path_mkdir+0x1a7/0x220 [ 226.695768][ T8652] ? ocfs2_symlink+0x2550/0x2550 [ 226.700723][ T8652] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 226.705678][ T8652] ? inode_permission+0xf3/0x480 [ 226.710625][ T8652] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 226.715666][ T8652] ? security_inode_mkdir+0xb7/0x100 [ 226.720976][ T8652] vfs_mkdir+0x296/0x440 [ 226.725240][ T8652] do_mkdirat+0x1d4/0x440 [ 226.729585][ T8652] ? vfs_mkdir+0x440/0x440 [ 226.734022][ T8652] __x64_sys_mkdirat+0x89/0xa0 [ 226.738810][ T8652] do_syscall_64+0x55/0xb0 [ 226.743246][ T8652] ? clear_bhb_loop+0x40/0x90 [ 226.747939][ T8652] ? clear_bhb_loop+0x40/0x90 [ 226.752636][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.758544][ T8652] RIP: 0033:0x7f8384b8d197 [ 226.762971][ T8652] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.782606][ T8652] RSP: 002b:00007f8385ab1e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 226.791039][ T8652] RAX: ffffffffffffffda RBX: 00007f8385ab1ef0 RCX: 00007f8384b8d197 [ 226.799549][ T8652] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c [ 226.807534][ T8652] RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000 [ 226.815517][ T8652] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680 [ 226.823504][ T8652] R13: 00007f8385ab1eb0 R14: 0000000000000000 R15: 0000000000000000 [ 226.831502][ T8652] [ 226.835646][ T5791] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 226.850582][ T5791] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 226.862713][ T5791] quatech2 1-1:0.51: device disconnected [ 226.868872][ T27] usb 5-1: usb_control_msg returned -32 [ 226.874563][ T27] usbtmc 5-1:16.0: can't read capabilities [ 227.026838][ T8652] syz.5.761 (8652) used greatest stack depth: 18736 bytes left [ 227.067228][ T6308] ocfs2: Unmounting device (7,5) on (node local) [ 227.462822][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 228.604610][ T5791] usb 5-1: USB disconnect, device number 11