last executing test programs: 2m37.574943687s ago: executing program 0 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2m36.585516554s ago: executing program 0 (id=980): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) 2m36.428460403s ago: executing program 0 (id=983): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 2m36.209261351s ago: executing program 0 (id=986): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m35.786039924s ago: executing program 0 (id=992): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) 2m35.045528802s ago: executing program 0 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) 2m34.633424356s ago: executing program 32 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) 2m30.612728971s ago: executing program 1 (id=1037): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) cachestat(r0, &(0x7f0000000000)={0x9, 0x1ff}, &(0x7f0000000040), 0x0) 2m29.926001582s ago: executing program 1 (id=1041): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000000100000018f200000000861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r1) 2m29.713465989s ago: executing program 1 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r1, r0}) 2m29.562421145s ago: executing program 1 (id=1046): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000300)={[{@discard}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) 2m29.226237089s ago: executing program 1 (id=1050): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x7, {0x0, 0xea60}, {0x1, 0x8, 0xc1, 0x6a, 0x9, 0x4, "a8ed9837"}, 0xffe, 0x2, {&(0x7f0000002140)=[{0xdc8, 0x8000, {0x0}, 0xc}, {0x9fb, 0xd4, {0x0}, 0x101}]}, 0x5}) 2m27.927318857s ago: executing program 1 (id=1061): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x161}}, {@shortname_winnt}, {@fat=@tz_utc}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}]}, 0xfd, 0x2da, &(0x7f0000000780)="$eJzs3U1rE1sYwPEnaZImKW2yuFy4Fy59uG50M7TxEwRpQQwotSnqQpjaiYaMScnESERsd27d+R2KS3eC9Qt04869uCmC4KYLaaQzmWbaTl9Nmr78f1DO6Zzz5JyZU8ozQ+d0/d6bp5WSY5TMhkSTKlFJLsuGSFai4lvqlFtHIpKQoGW5NvLzy3937z+4lS8UpmZUp/Oz13OqOjb+8fnLd/9/aozMvR/7MCxr2YfrP3Jf1/5e+2d9c9b/9FpDTZ2v1RrmvG3pQtmpGKp3bMt0LC1XHau+o71k1xYXW2pWF0bTi3XLcdSstrRitbRR00a9peZjs1xVwzB0NC2XzdBBjamwg8WVmRkzf6xBosecFE5T6CrX63lzKLSxuHIakwIAAGfL3vxf9uT/kU7Zy/z/SdnRsqPVw/L/qJD/94+b/2+GJo24GOJbNwB5Mx1660b+DwAAAAAAAAAAAAAAAAAAAADAebDRbmfaMcm4ZeBrWESSspn0erUzg54n+sNf9/D1F/G/D4REBjhd9Fjgxb2kiP26WWwWvdJrz5ekLLZYMhEX+eX+PHR49embhakJdWVl1V7qxLsvCQ778b7sdry7VYUfP+nFayB+qVmMSzo4fk4y8lf4+Lld8XERaRYTcvVKIN6QjHx+JDWxZcEduxv/alL1xu3CrvFTbj8AAAAAAC4CQ7dld97/ertJGob624bsavcOdp8PSOaQ5wMqqwnpxsfk39jgzhsAAAAAgMvEab2omLZt1U9eGZ87uE8k9sdD9LmSkuNH9eTSnbOK0flzsAM7t9tt9x/GHPGT36ZE9mmKyr5NYZWsbVuJHp3pdxE5Axe815Vvz7wFPErnQf5WAgAAANAP3aR/0DMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODyOurmYX7/k+w9FhhuaDBnCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwNvwMAAP//u+4PAg==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 2m27.480436292s ago: executing program 33 (id=1061): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x161}}, {@shortname_winnt}, {@fat=@tz_utc}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}]}, 0xfd, 0x2da, &(0x7f0000000780)="$eJzs3U1rE1sYwPEnaZImKW2yuFy4Fy59uG50M7TxEwRpQQwotSnqQpjaiYaMScnESERsd27d+R2KS3eC9Qt04869uCmC4KYLaaQzmWbaTl9Nmr78f1DO6Zzz5JyZU8ozQ+d0/d6bp5WSY5TMhkSTKlFJLsuGSFai4lvqlFtHIpKQoGW5NvLzy3937z+4lS8UpmZUp/Oz13OqOjb+8fnLd/9/aozMvR/7MCxr2YfrP3Jf1/5e+2d9c9b/9FpDTZ2v1RrmvG3pQtmpGKp3bMt0LC1XHau+o71k1xYXW2pWF0bTi3XLcdSstrRitbRR00a9peZjs1xVwzB0NC2XzdBBjamwg8WVmRkzf6xBosecFE5T6CrX63lzKLSxuHIakwIAAGfL3vxf9uT/kU7Zy/z/SdnRsqPVw/L/qJD/94+b/2+GJo24GOJbNwB5Mx1660b+DwAAAAAAAAAAAAAAAAAAAADAebDRbmfaMcm4ZeBrWESSspn0erUzg54n+sNf9/D1F/G/D4REBjhd9Fjgxb2kiP26WWwWvdJrz5ekLLZYMhEX+eX+PHR49embhakJdWVl1V7qxLsvCQ778b7sdry7VYUfP+nFayB+qVmMSzo4fk4y8lf4+Lld8XERaRYTcvVKIN6QjHx+JDWxZcEduxv/alL1xu3CrvFTbj8AAAAAAC4CQ7dld97/ertJGob624bsavcOdp8PSOaQ5wMqqwnpxsfk39jgzhsAAAAAgMvEab2omLZt1U9eGZ87uE8k9sdD9LmSkuNH9eTSnbOK0flzsAM7t9tt9x/GHPGT36ZE9mmKyr5NYZWsbVuJHp3pdxE5Axe815Vvz7wFPErnQf5WAgAAANAP3aR/0DMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODyOurmYX7/k+w9FhhuaDBnCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwNvwMAAP//u+4PAg==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 2m11.958313134s ago: executing program 5 (id=1000): r0 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) sendto$inet(r0, 0x0, 0x1a, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) 2m11.630217202s ago: executing program 5 (id=1146): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c6e6f646973636172642c67727071756f74612c696f636861727365743d63703933322c6e6f646973636172642c71756f74612c6e6f71756f74612c6e6f696e746567726974792c004d5afe2de1b3a136431fa8ea7b501ecb08f40540fff494c16f9b0781a740588d55fa"], 0x1, 0x614f, &(0x7f000000ccc0)="$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") mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0/file0\x00', 0x19a) 2m10.108474577s ago: executing program 5 (id=1162): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000005c0)=[{0x84, 0x77, 0x0, 0x0, @time={0x2, 0x5}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x0, 0x5}, @raw32={[0x80000001, 0x6, 0x10000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0xd, 0xa, 0x3, 0x9, @tick=0xe2, {0xfa, 0x6}, {0x7, 0x20}, @quote={{0x9d, 0x2}, 0x5}}], 0x70) 2m9.537238072s ago: executing program 5 (id=1166): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa5732221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="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", 0x281}], 0x1}}], 0x2, 0x8008800) 2m9.096700103s ago: executing program 34 (id=1166): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="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", 0x281}], 0x1}}], 0x2, 0x8008800) 2.31004166s ago: executing program 2 (id=2557): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000001c0)={0x1, 0x20, 0x2}) 2.152036849s ago: executing program 7 (id=2560): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = io_uring_setup(0x2c4d, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2.143971021s ago: executing program 4 (id=2561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f0000000040)=0x1000) 2.053580742s ago: executing program 2 (id=2562): uname(&(0x7f0000000000)=""/73) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000002c0)) 1.87101987s ago: executing program 7 (id=2565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x54a5, 0xeeee0000, 0x8, 0xffffffffffffffff, 0x29}) 1.797048317s ago: executing program 2 (id=2566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.623127137s ago: executing program 2 (id=2568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x34, r1, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40) 1.622392765s ago: executing program 6 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x70bd25, 0x25dfdbfa, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) 1.471971503s ago: executing program 2 (id=2571): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000680)={'8255\x00', [0x4f29, 0x5, 0x3, 0x9, 0x1, 0xb, 0x12, 0x2, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x9, 0x1887, 0x61, 0x2, 0x8, 0x400009, 0x9, 0x5, 0x99, 0xc0, 0x400, 0xffffffff, 0x8001, 0x2000e69, 0x6, 0x80008, 0x4, 0x0, 0xffff0000]}) 1.467384842s ago: executing program 7 (id=2572): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 1.4442076s ago: executing program 4 (id=2573): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r0, r0, 0x0, 0x68) 1.326966728s ago: executing program 6 (id=2575): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4008810) 1.221338935s ago: executing program 4 (id=2576): syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a824008100020186dd600000000014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.21060481s ago: executing program 7 (id=2577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x3f}, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x150047, r1}) 1.158677623s ago: executing program 6 (id=2578): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3fc, @empty, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'veth1_to_batadv\x00', 0x1}, 0x18) 1.02882043s ago: executing program 4 (id=2580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0) 968.439454ms ago: executing program 7 (id=2581): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x1, 0x5f98, &(0x7f000000efc0)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x201488, 0x0, 0x7, 0x0, &(0x7f0000006380)) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 918.764121ms ago: executing program 6 (id=2582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000002440)={0xa, 0x4e24, 0x2000005, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc63}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000002480)='|', 0x1}], 0x1}}, {{&(0x7f0000002180)={0xa, 0x4e22, 0xfff, @private2, 0x3}, 0x1c, &(0x7f0000002400)=[{&(0x7f00000021c0)="b0", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0xb91c80e, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="ef", 0x1}], 0x1}}], 0x3, 0x40848d1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 841.030504ms ago: executing program 3 (id=2583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 836.889504ms ago: executing program 4 (id=2584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 683.471569ms ago: executing program 6 (id=2585): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000b80)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) 672.732446ms ago: executing program 4 (id=2586): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) 605.631053ms ago: executing program 3 (id=2587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 495.061512ms ago: executing program 2 (id=2588): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x40, 0x14, 0x4, "252ee594"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 493.840164ms ago: executing program 6 (id=2589): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x61c6, &(0x7f000000ac00)="$eJzs3U1vHVf9B/DfffRD/m2tLqr+K4TcBx5KaRInJQQKtF3Agk0XqEtQK9etIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2Ockc2/urZ3avnPt8/lIzsxvzlz7zP3euQ+ZmXsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvfud7a52IePNnacFKxP9FL6IbsVTXqxGxtLqS1+9HxJOx1xxPRMRgIaK+/d4/j0W8FBEfPRqxs7u5Xi++dMh+fPsPf/vtD869/tffDy7854+3ei9PW+/27V/++093jrbNAAAAUJqqqqpO+pj/VPp83227UwDATOTX/yrJy898/at/vP7neeqPWq1Wq9UzqJuqye40i4jYat6mfs/gcDwAnDJb8XHbXaBF8i9aPyLOtd0JYK512u4AJ2Jnd3O9k/LtNF8PVvfb87kgI/lvde5d3zFtepDxc0xm9fjajl48PqU/SzPqwzzJ+XfH839zv32Y1jvp/GdlWv7D/UufipPz743nP+bs5N+dmH+pcv79h8q/J38AAAAAAJhj+f//V1o+/rtw9E05lE86/rs6oz4AAAAAAAAAwHE76vh/9xj/DwAAAOZW/Vm99utH7y+b9l1s9fI3OhGPjK0PFCZdLLPcdj8AAAAAAAAAAAAAoCT9/XN43+hEDCLikeXlqqrqn6bx+mEd9fanXenbDyVr+0keAAD2ffTo2LX8nYjFiHgjfdffYHl5uaoWl5ar5WppIb+fHS4sVkuNz7V5Wi9bGB7iDXF/WNW/bLFxu6aDPi8f1D7+++q/Nax6h+jYMRmke3NKc0thA0Cy/2q04xXpjKmqx6a9+YAR9v8zaCVW2n5cMf/afpgCAAAAJ6+qqqqTvs77qXTMv9t2pwCAmciv/+PHBY5Ud6e0RxzP71er1Wq1Wv2p6qZqsjvNIiK2mrep3zMYjh8ATpmt+LjtLtAi+RetHxFPtt0JYK512u4AJ2Jnd3O9k/LtNF8P0vju+VyQkfy3Onu3y7efND3I+Dkms3p8bUcvHp/Snydm1Id5kvPvjuf/5n77MK130vnPyrT8h3uXzJUn598bz3/M2cm/OzH/UuX8+w+Vf0/+AAAAAAAwx/L//684/ps3GQAAAAAAAABOnZ3dzfV83Ws+/v+ZCeu5/vNsyvl3Hjb/pTQv/1Mt598dy/+LY+v1GvN3X7u///9rd3P9d7f++f95etj8F/JMJz2yOukR0Ul/qdNP06Ns3YO2B71h/ZcGnW6vn875qe515uLIut10f1SDd+JaXI+NWBtpr3s6GGm/NNLef6D98kj7IH3vQLWU28/Hevw4rsfbe+3D0bt9osUD7p/qgPacf8/zf5Fy/v3GT53/cmrvjE1rdz/sPrDfN6eT/s6r1z77i4snvzkH2o7evW1rqrfvmRb6s3efnBvGT29u3Dh/+61bt26sRZqMLL0UaXLMcv6DvZ+F+8//z+635yeg5v5698PhQ+c/L7ajPzX/Zxvz9fY+P+O+tSHnP0w/Of+3U/vk/f805z99/3+hhf4AAAAAAAAAAAAAAADAJ6mqau8S0Vcj4kq6/qetazMBgNnKr/9Vkperj73+/rmIeeqPWq1Wqwusm6rJXmkWEfGX5m3q9ww/n/TLAIB59t+I+HvbnaA18i9Y/r6/evpc250BZurm+x/88K3r1zdu3Gy7JwAAAAAAAADAp5XH/1xtjP/8XESsjK03Mv7ra7F61PE/+3nm3gCjxzzQ9xTb3WGv2xhu/OnYG5/7/P742w+O//1MPDj+dx4Tt9fcjikGB7QPD2hfOKB9ceLS+2lNvNCjIef/dGO88zr/p8aGXy9h/NfxMe9LkPN/pvF4rvP/wth6zfyr38xd/luHXXE7uiP5X7j13k8u3Hz/gxevvffWuxvvbvzo8traxctXrly9evXCO9eub1zc//dkej0Hcv557GvngZYl558zl39Zcv6fS7X8y5Lz/3yq5V+WnH9+vyf/suT882cf+Zcl5/98quVflpz/l1It/7Ls7G4u1Pm/kGr5lyXv/19OtfzLkvN/MdXyL0vO/3yq5V+WnP+FVB8if18Pf4bk/PMRLvt/WXL+a6mWf1ly/pdSLf+y5Pwvp1r+Zcn5v5Rq+Zcl5/+VVMu/LDn/K6mWf1ly/l9NtfzLkvO/mmr5lyXn/7VUy78sOf+vp1r+Zcn5v5xq+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/lVTLvyz3v//fjBkzZvJM289MAAAAAAAAAAAAAMC4WZxO3PY2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/iZvXntEGIgBCd/A2vHGOMs2fUlvvCviwn3AKVAQqEXbNe7Ngu+4bVLoJFsGiiRcFRUUTV90RZQ1EaqKqyKF7RKaV5Uvbxq2hf0TUVVCalRFaKAitRWNFvNOc/zeGZ2dmbWO17PnvP5SPZvd+bMnDNnzszud+3vHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLTl7bNfrmVZVv+T/7Uxy15W/3j9xMb8srfc7C0EAAAAVup/879fvC1dcLiHGzUs87ev+4dvLywsLGQfG/6d0a8tLKQrJrJsdF2W5ddFV//t47XGZYJHs/HaUMPnQ11WP9zl+pEu1492uX6sy/Xrulw/3uX6RTtgkfXFz2PyO9uWf7ix2KXZ7dloft22Nrd6tLZuaCj+LCdXy2+zMHoim8tOZbPZdNPyxbK1fPmnt9TX9Z4srmuoYV2b60fIjx45HrehFvbxtqZ1XbvP6IdvyyZ+/KNHjv/RhefvbDe77oam+yu2c8fW+nZ+MVxSbGstW5f2SdzOoYbt3NzmORlu2s5afrv6x63b+WKP2zl8bTNXVetzPp4N5R8/m++nkcYf66X9tDlc9l93Z1l2+dpmty6zaF3ZULah6ZKha8/PeHFE1u+jfii9MhtZ1nG6pYfjtD5ntjUfp62vifj8bwm3G1liGxqfph9+YWzR877c4zSqP+qlXiutx2C/XyuDcgzG4+LZ/EE/1vYY3BYe/yPblz4G2x47bY7B9LgbjsGt3Y7BobHhfJvTk1DLb3PtGNzVtPxwvqZaPp/b3vkYnLpw+tzU/Oc+/+a508dOzp6cPbNn167pPfv2HThwYOrE3KnZ6eLv69zbg29DNpReA1vDvouvgTe2LNt4qC58o3+vw/EOr8ONLcv2+3U40vrgaqvzglx8TBevjQfrO338ylC2xGssf352rvx1mB53w+twpOF12PZrSpvX4UgPr8P6Mud29vY9y0jDn3bbcKO+FmxsOAZbvx9pPQb7/f3IoByD4+G4+JedS38t2By297HJ5X4/MrzoGEwPN7z31C9J3++PH8hHu+PyrvoVt4xlF+dnz9/78LELF87vysJYFa9qOFZaj9cNDY8pW3S8Di37eD0897rH7mpz+cawr8bfXP9rfMnnqr7M3ns7P1f5V7f2+7Pp0t1ZGH222vuz3Vfz+v5MWbLD/qwv88WplX8vnnJpw/vv6BLvvzH3v1SsL93Vo8OjI8XrdzjtndGm9+Pmp2okf++q5et+caq39+PR8Ge1349v7/B+vKll2X6/H4+2Prj4flzr9tOOlWl9PsfDcXJquvP7cX2ZTbuXe0yOdHw/vjvMWtj/bwpJIeWihmNnqeM2rWtkZDQ8rpG4hubjdE/T8qMhm9XX9dTu6ztOd9xd3NdwenTXrNZxOtGybL+P0/R+tdRxWuv207fr0/p8jofj4vY9nY/T+jLP7F35e+f6+GHDe+dYt2NwdHisvs2j6SAs3u8X1sdj8N7seHY2O5XN5NeO5cdTLV/X5H29HYNj4c9qv1du6nAM7mhZtt/HYPo6ttSxVxtZ/OD7oPX5HA/HxRP3dT4G68u8Y39/v3fdES5JyzR879r687WlfuZ1V8tuupE/86pv51/v7/yz2foypw4sN2d23k/3hEtuKS4aa9xPra/fpV5TM9nq7KdNYTufP7D0fqpvT32Zrx3s8Xg6nGXZpc/cn/+8N/z7yp9d/N63m/7dpd2/6Vz6zP0v3Hrib5az/QCsfS8VY0Pxta7hX6Z6+fd/AAAAYE2IuX8ozET+BwAAgNKIuT/+r/BE/gcAAIDSiLl/JMykIvl/0zuen3vpUpaa+QtBvD7thgeK5WLHdTp8PrFwTf3y+5+c/clfXOpt3UNZlv30gV9vu/ymB+J2FSbCdl59Z/Pli294qaf1H33o2nKN/fWvh/uPj6fXw6BdBXc6y7Knb3s8X8/Ex6/k85kHjubzw5cfe7S+zIsHi8/j7Z97VbH874fy7+ETx5pu/1zYDz8Ic/p97fdHvN23rrxp8/6PXltfvF1t68vzh/3EJ4r7jb8n56uPFsvH/bzU9v/lV576Vn35h9/QfvsvDbXf/qfC/T4Z5n+/tli+8Tmofx5v96Ww/XF98Xb3fvO7bbf/6peL5c+9q1juaJhx/TvC59ve9fxc4/56uHas6XFl7y6Wi+uf/t5v5dfH+4v337r940euNO2P1uPjmX8q7meqZfl4eVxP9Oct66/fT+PxGdf/1G8ebdrP3dZ/9cPPvbZ+v63rv6dlueGW27f+xqY/+NLjbdcXt+fwn55rejyHPxRex2H9T3wiHI/h+v+5+njTeqOjH2p+/4nLf33jpabHE73nx8X6r771ZD7/feInv3fLy259+eXX1/ddlj37keL+uq3/5B+ebdr+b9yxM38+4vWxo9+6/qXE9Z//7OSZs/MX52Ya9mr+u3PeX2zPuvH1G+rbe1t4b239/MjZC5+cPT8xPTGdZRPl/RV61+2bYb5QjMvLvf3Oh8LzedfvPr1h+z9+JV7+zw8Wl195X/F1641hua+GyzcWz99CbYXrf2LLHfnru/ZM8XlTj70PNm/7jwM9LRgef+v3BfF4P/fqT+b7oX5d/nUjvq5XuP3fnynu5zthvy6E38y89Y5r62tcPv5uhCsfKV7vK95/4W0uPq9/HJ7vD/yguP+4XfHxfj98H/PdTc3vd/H4+M6lodb7z3+Lx+XwfpJdLq6PS8X9feXFO9puXvw9JNnlO/PPfzvdz53LephLmf/c/NSpuTMXH566MDt/YWr+c58/cvrsxTMXjuS/y/PIp7rd/tr704b8/Wlmdt/ebHp9lmVns+lVeMPq+/anXwjU2/afe+j4zP7p7TOzJ45dPHHhoXOz508en58/Pjszv/3YiROzn+12+7mZQ7t2H9yzf/fkybmZQwcOHtxzcHLuzNn6biw2qot905+ePHP+SH6T+UN7D+66776905Onz87MHto/PT15sdvt869Nk/Vb/9rk+dlTxy7MnZ6dnJ/7/OyhXQf37dvd9bcBnj53Yn5i6vzFM1MX52fPTxWPZeJCfnH9a1+321NO8/9afD/bqlb8Ir7sg/fsS7+fte7JLyx5V8UiLb9A9Pnwu2j+/hXnDvTyecz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/tf/1//vrf9fXK//X63+/7nPFL3Std7/j/15/f9quMn9/xWvX/9f/798/f/6R2u0/7/M7df/1/9nsUHr/8fcvz7LKpn/AQAAoApi7t8QZiL/AwAAQGnE3H9LmIn8DwAAAKURc//Lwkwqkv/1/3vq/+/uVrgqf//f+f/1/7O12f+PT47+f2Usu3//0QebPtX/D/T/9f/1//X/9f9ZsdElr7lZ/f+Y+28NM6lI/gcAAIAqiLn/5WEm8j8AAACURsz9t4WZyP8AAABQGjH3bwwzqUj+1/93/n/9f/3/Uvf/V3r+/4aN0f9fG5z/v7Nl9//X6f/31v8f1/9fi/3/0f5u/2D3/7tuvv4/N8Sgnf8/5v5XhJlUJP8DAABAFcTc/8owE/kfAAAASiPm/leFmcj/AAAAUBox998eZlKR/K//r/+v/6//r//ffv3dz/9ffKT/P1j0/ztz/v8unP+/Wv3/Pm//YPf/+33+/9F3tt5e/592Bq3/H3P/q8NMKpL/AQAAoApi7r8jzET+BwAAgNKIuf81YSbyPwAAAJRGzP2bwkwqkv/1//X/9f/1//X/26+/e/+/oP8/WPT/O9P/70L/X/9f/7+3/n+bb371/2ln0Pr/MfffGWZSkfwPAAAAVRBz/11hJvI/AAAAlEbM/f8vzET+BwAAgNKIuX9zmElF8r/+v/6//n+1+v/3jOn/6/+XWzn7//37pkT/vwv9f/1//f8ez/+/2HL6/+u63RmlMWj9/5j7XxtmYdNIVfI/AAAAVEHM/a8LM5H/AQAAoDRi7n99mIn8DwAAAKURc/9EmElF8r/+f7n6/3/yV0+8PtP/1//vsv6S9v/jYaD/X3Hl7P/3j/5/F/r/+v/6/6vS/6c6Bq3/H3P/ljCTiuR/AAAAqIKY+7eGmcj/AAAAUBox998dZiL/AwAAQGnE3L8tzKQi+V//v1z9/0j/X/+/0/pL2v9P9P+rTf+/jYYXqf5/F/r/+v+V7//H7371/+mPQev/x9z/hjCTiuR/AAAAqIKY+7eHmcj/AAAAUBox978xzET+BwAAgNKIuX9HmElF8r/+v/6//r/+v/5/+/Xr/69N+v+dLbf/P6b/r/+v/1+x/r/z/9Nfg9b/j7n/TWEmFcn/AAAAUAUx9+8MM5H/AQAAoDTi/98s/t+r/A8AAABlFHP/ZJhJRfK//r/+f5X6/zX9f/1//f/S0//vzPn/u9D/1//X/1/c/1/X9aHn9P9pZ9D6/zH3vznMpCL5HwAAAKog5v57w0zkfwAAACiNmPunwkzkfwAAACiNmPunw0wqkv/1//X/q9T/H/zz/zf3RPX/C/r/+v/Lof/fmf5/F/r/+v9l6/9nmfP/c1MNWv8/5v5dYSYVyf8AAABQBTH37w4zkf8BAACgNGLu3xNmIv8DAABAacTcvzfMpCL5X/+/rP3/hUz/fy32/53/X/9f/3+l9P870//vQv9f/79s/f9+nP9f/58VGLT+f8z994WZVCT/AwAAQBXE3L8vzET+BwAAgNKIuX9/mEnI/+3+XzcAAACwtsTcfyDMpCL//q//X5L+/2/8XdO6nf9f/7/T+vvT/1+v/x+m/v9gKWn/v/Vlcd30/7vQ/9f/1//X/6evBq3/H3P/wTCTiuR/AAAAqIKY+98SZiL/AwAAQGnE3P//w0zkfwAAACiNmPt/JsykIvlf/78k/f8W+v/6/53W7/z/+v9lVtL+f9+Uqv8/pP+v/z9Y26//r//PYje+/x8/6q3/H3P/oTCTiuR/AAAAqIKY+382zET+BwAAgNKIuf+tYSbyPwAAAJRGzP2Hw0wqkv/1//X/9f/1/29M//+tWatB7P/XDx79/3LR/++sVP1/5//X/x+w7df/1/9nsUE7/3/M/W8LM6lI/gcAAIAqiLn//jAT+R8AAABKI+b+t4eZyP8AAABQGjH3vyPMpCL5X/9f/1//X//f+f/br1//f23S/+9M/78L/X/9f/1//X/6atD6/zH3vzPMpCL5HwAAAKog5v53hZnI/wAAAFAaMfe/O8xE/gcAAIDSiLn/PWEmFcn/+v/6//r/+v/6/+3Xr/+/Nun/d6b/34X+v/6//r/+P301aP3/mPvfG2ZSkfwPAAAAVRBz/wNhJvI/AAAAlEbM/e8LM5H/AQAAoDRi7n9/mElF8r/+v/6//r/+v/5/+/Xr/69N+v+d6f93of+v/6//r/9PXw1a/z/m/g+EmVQk/wMAAEAVxNz/c2Em8j8AAACURsz9Hwwzkf8BAACgNGLu//kwk4rkf/1//f/B6v8vXGq8nf6//n/Wr/5//Ua99f/H4v3o/69N+v+d6f930ab/v07/X/9f/1//n+s2aP3/mPs/FGZSkfwPAAAAVRBz/4fDTOR/AAAAKI2Y+z8SZiL/AwAAQGnE3P9gmElF8r/+fyX7/+khD17/3/n/9f+d/1//f2X0/zvT/+/C+f/1//X/9f/pq0Hr/8fc/1CYSUXyPwAAAFRBzP0fDTOR/wEAAKA0Yu7/hTAT+R8AAABKI+b+j4WZVCT/X1f/P5Ze9f+TNdb/H+Dz/5et/z/SdHxUqf8/3vB8puNS/1//fxXo/3em/9+F/r/+/yD3/8PRvH6J2+v/M4gGrf8fc//Hw0wqkv8BAACgCmLu/8UwE/kfAAAA1oL5XhaKuf+XwkzkfwAAACiNmPt/OcykIvnf+f/1//X/G/v/73X+f+f/1/9f4/T/O9P/70L/X/9/kPv/Xej/M4gGrf8fc/+vhJksGfxe+M8eHiYAAAAwQGLu/0SYSUX+/R8AAACqIOb+I2Em8j8AAACURsz9R8NMKpL/9f9b+//xjKr6/9Xs//f7/P/Nx4f+v/6//v+N17/+/2tuzTL9f/1//X/9/9Xs/w/p/1M6g9b/j7n/WJhJRfI/AAAAVEHM/b8aZiL/AwAAQGnE3H88zET+BwAAgNKIuX8mzKSM+b+1VHtz+/+jg9n/d/7/6+3//1T/X/8/0P9vT/9/dTj/f2f6/13o/+v/O/+//j99NWj9/5j7Z8NMypj/AQAAoFrSj4Nj7j8RZiL/AwAAQGnE3H8yzET+BwAAgNKIuf+TYSYVyf/O/6//7/z/N6P/P9K0vP5/YRn9//wm+v/6/+3o/3em/9+F/r/+v/6//j99NWj9/5j758JMKpL/AQAAoApi7v9UmIn8DwAAAKURc/+nw0zkfwAAACiNmPtPhZlUJP/r/+v/V73/X8uyy87/v+b6/zn9f/3/dvT/O9P/70L/X/9f/1//n74atP5/zP2nw0wqkv8BgP9j7z6a5DqvOw43aRJhZX8Er73y0l7RH8Fb71yltTKVA0nlLFE5ByrnnBOVc86ZyjlSkVIVVADOOcBgGrcBTM/0ve95ns0xUIRnhhzQ9TfqxxcA6CB3/13iFvsfAAAAhpG7/65xi/0PAAAAw8jdf7e4pcn+1//r/7v3/6udvP+/96/X/5+l/9f/b8O+/v6a9X/dxaLwi/b///lf1/+//l//r/+fpP/X/+v/udDc+v/c/XePW5rsfwAAAOggd/894hb7HwAAAIaRu/+ecYv9DwAAAMPI3X993NJk/+v/9f/6f/3/nv7/Vv2//n/ZvP8/Tf+/gf5f/6//1/+zVXPr/3P33ytuabL/AQAAoIPc/feOW+x/AAAAGEbu/vvELfY/AAAADCN3/33jlib7X/+v/9f/L6X/P+b9/wu+Hv2//n8d/f80/f8G+n/9v/5f/89Wza3/z91/v7ilyf4HAACADnL33z9usf8BAABgGLn7HxC32P8AAAAwjNz9D4xbmux//b/+X/+/lP7/iN7/1//r/xfultW5fyccdf9/bAv//QH9/7z7/9VK/z/lkvv59V/ecj7/i9D/6//Zb279f+7+B8Ut/7NaHbvSLxIAAACYldz9D45bmvz5PwAAAHSQu/+GuMX+BwAAgGHk7r8xbmmy//X/+v8r6//Pfr/o//X/+n/9/9x4/3/awfv///i3O9+pb//v/f9p3v/fdv9/+jtD/8+yza3/z91/U9zSZP8DAABAB7n7HxK32P8AAAAwjNz9D41b7H8AAAAYRu7+h8UtTfa//n+0/v9f9vy68/r/M7WL9//1//p//f/o9P/TvP+/wZl/zZ2sH+r/9f/e/9f/czBz6/9z9z88bmmy/wEAAKCD3P2PiFvsfwAAABhG7v5Hxi32PwAAAAwjd/+j4pYm+1//P1r/v/fXHd77//p//b/+X/8/T/r/afr/DUZ5//8Kv2t23c8f1K4/f/2//p/95tb/5+5/dNzSZP8DAABAB7n7HxO32P8AAAAwjNz9j41b7H8AAAAYRu7+x8UtTfa//l//v4z+Pz+C/l//f/j9f9L/L5P+f5r+f4NR+v8rtOt+fumfv/5f/89+c+v/c/c/Pm5psv8BAACgg9z9T4hb7H8AAAAYRu7+J8Yt9j8AAAAMI3f/k+KWJvtf/6//X0b/7/1//b/3//X/l0b/P03/v4H+X/+v/9f/s1Vz6/9z998ctzTZ/wAAANBB7v4nxy32PwAAAAwjd/9T4hb7HwAAAIaRu/+pcUuT/a//1//r//X/+v/1H1//v0z6/2n6/w30//p//b/+n62aUf9/3q86sXpa3NJk/wMAAEAHufufHrfY/wAAADCM3P3PiFvsfwAAABhG7v5nxi1N9r/+fzb9/5mcb6z+/+RqtdL/r5r2/yfP++dZ35f6f/3/EdD/T9P/b3D6N+Spq/T/+n/9v/6fLTna/v/0v/On/3sAufufFbc02f8AAADQQe7+Z8ct9j8AAAAMI3f/c+IW+x8AAACGkbv/uXFLk/2v/59N/3/GWP2/9/8v/P7o1P97/38//f/R0P9P0/9v4P3/A/fzV6/0//p//T/nHG3/v/nHufufFzcdu/aKv0QAAABgZnL3Pz9uafLn/wAAANBB7v4XxC32PwAAACzUzft+Jnf/C+OWJvtf/7/d/v/YeT+n/9f/X/j9of/X/+v/D5/+f5r+fwP9v/f/9f/6f7Zqbv1/7v4XxS1N9j8AAAB0kLv/lrjF/gcAAIBh5O5/cdxi/wMAAMAwcve/JG5psv/1/97/1//r//X/6z++/n+Z9P/T9P8b6P/1/7vt/4+f+x8Pt/8/uebX6/85DJfR/586deqGQ+//c/e/NG5psv8BAACgg9z9L4tb7H8AAAAYRu7+l8ct9j8AAAAMI3f/K+KWJvtf/9+0/89v9WX1/zeuVvp//b/+X/8/Tf8/Tf+/gf5f/+/9f/0/WzW39/9z978ybmmy/wEAAKCD3P2vilvsfwAAABhG7v5Xxy32PwAAAAwjd/9r4pYm+1//37T/9/6//l//f9T9/x0r/f+RWET/v+7h7TD3/v8m/b/+f0K7/v9//3vPD/X/+n/2m1v/n7v/tXFLk/0PAAAAHeTuf13cYv8DAADAMHL3vz5usf8BAABgGLn73xA3XdNk/+v/9f/6f/2//n/9xz/i9/+PrVYr/f8WLKL/nzD3/n877/9f+Lv8HP2//n/Jn7/+X//PfnPr/3P3vzFuabL/AQAAoIPc/W+KW+x/AAAAGEbu/jfHLfY/AAAADCN3/1vilib7X/+v/9f/6/+H7/9vWkT/7/3/LdH/T5tH/39x+n/9/5I/f/2//p9Lt6v+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9f/6/8vp//Pz1P+P1f8fn13/f2LP/74m7//r/7dE/z9N/7+B/l//r/+/Wf/PNs3t/f/c/e+MW5rsfwAAAOggd/+74tb/69b+BwAAgGHk7n933GL/AwAAwDBy978nbmmy//X/+n/v/+v/h3//X//fiv5/mv5/A/2//l//7/1/tmpu/X/u/vfGLU32PwAAAHSQu/99cYv9DwAAAMPI3f/+uMX+BwAAgGHk7r81bmmy//X/+n/9v/5f/3/2n6H+fwz6/2lH0/+f1P/r/6ufvyp+F+j/9f+bfj1jmlv/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMHL3fyhusf8BAABgka5Z83O5+z8ctzTZ//p//b/+X/+v/1//8fX/y7ST/j+/KfT/3v8Pffr/f9/zo6W9/3/h//3S/+v/2b659f+5+z8StzTZ/wAAANBB7v6Pxi32PwAAAAwjd//H4hb7HwAAAIaRu//jcUuT/a//1//r//X/+v/1H1//v0ze/5+m/99A/7/T9/OX/vnr//X/7De3/j93/yfilib7HwAAADrI3f/JuMX+BwAAgGHk7v9U3GL/AwAAwDDO7P6Myxruf/2//l//r//X/6//+Pr/ZdL/T9P/b6D/1//r//X/bNXc+v9Pn/lVJ1afiVua7H8AAADoIHf/Z+MW+x8AAACGkbv/c3GL/Q8AAADDyN3/+bilyf7X/+v/l9H/nzp16gb9v/5/79dzrv+/Tf9P0f9P0/9voP/X/+v/9f9s1dz6/9z9X4hbmux/AAAA6CB3/xfjFvsfAAAAhpG7/0txi/0PAAAAw8jd/+W4pcn+1//PoP8/of/3/r/+f+X9f/3/luj/p+n/Nxix/z9x6V/+rvv5g9r156//1/+z39z6/9z9X4lbmux/AAAA6CB3/1fjFvsfAAAAhpG7/2txi/0PAAAAw8jd//W4pcn+1/8fXf9/+u9dl/f/T67Wf/76f/2//l//f9j0/9P0/xuM2P9fhl3380v//PX/+n/2m1v/n7v/G3HL3uF37eV9lQAAAMCc5O7/ZtzS5M//AQAAoIPc/d+KW+x/AAAAGEbu/m/HLU32v/5/Bu//D9j/e/9//feH/n/W/f/V+v8x6P+n6f830P/r//X/W+r/87tZ/9/d3Pr/3P3fiVua7H8AAADoIHf/d+MW+x8AAACGkbv/e3GL/Q8AAADDyN1/W9xy3v5f13aPQv+v/9f/6//1/+s/vv5/mfT/0y61/z++Olj/n/T/+n/9f9f+3/v/nDW3/j93//fjFn/+DwAAAItz7UV+Pnf/D+IW+x8AAACGkbv/h3GL/Q8AAADDyN3/o7jl9qt39SkdKf2//l//r//X/6//+Pr/ZdL/T/P+/wb6/23089fp/8fo/1cr/T8HN7f+P3f/j+MWf/4PAAAAw8jd/5O4xf4HAACAYeTu/2ncYv8DAADAMHL3/yxuabL/9f/6/wP2/2fSTP3/Wfr/s/T/6+n/j4b+f5r+fwP9v/f/9f/e/2er5tb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjNz9v4xb7H8AAAAYRu7+X8UtTfb/zvr/+Fut/198/+/9/0Pv/09/dfp//b/+/1Lp/6fp/zfQ/+v/9f/6f7Zqbv1/7v5fxy1N9j8AAAB0kLv/N3GL/Q8AAADDyN3/27jF/gcAAIBh5O7/XdzSZP97/1//r/+fe/8/9Pv/q5X+X/+/Zfr/afr/9eoflP5f/6//1/+zVXPr/3P3/z5uabL/AQAAoIPc/X+IW+x/AAAAGEbu/tvjFvsfAAAAhpG7/49xS5P9r//X/+v/9f/e/1//8fX/y6T/n7bL/v///nXzh/X+/877//wU9P/6f/0/WzG3/j93/5/ilib7HwAAADrI3f/nuMX+BwAAgGHk7v9L3GL/AwAAwDBy9/81bmmy/zf0/8frL9T/T9L/7/389f/rvz/0//p//f/h0/9Pm+7/z/vd3Oz9/6L/9/6//l//z1bNrf/P3f+3uKXJ/gcAAIAOcvffEbfY/wAAADCM3P1/j1vsfwAAABhG7v5/xC1N9r/3/5fU/1+n/9f/6//1//r/DfT/03b5/v+l0P/r/5f8+ev/9f/sN7f+P3f/PwMAAP//dnFCVw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 437.764169ms ago: executing program 3 (id=2590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 304.816748ms ago: executing program 3 (id=2591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 157.67863ms ago: executing program 3 (id=2592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14, r1, 0x1}, 0x14}}, 0x0) 25.823921ms ago: executing program 7 (id=2593): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x1, 0x3, 0x3, &(0x7f00000002c0)={0x16, "d06dc00906f900c7b5b41220c91bc3ba7051ed5225c7ed57ae58d339cf8b22c22c"}}) 0s ago: executing program 3 (id=2594): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a9, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): attributes in process `syz.6.1542'. [ 248.507984][T10521] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1542'. [ 248.749815][T10496] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.825945][T10496] F2FS-fs (loop3): Start checkpoint disabled! [ 248.879418][T10496] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 248.898774][T10496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 249.001505][T10532] loop6: detected capacity change from 0 to 2048 [ 249.057833][T10532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.157712][ T6900] kworker/u8:19: attempt to access beyond end of device [ 249.157712][ T6900] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.215716][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 249.215741][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.215752][ T6900] Workqueue: writeback wb_workfn (flush-7:3) [ 249.215794][ T6900] Call Trace: [ 249.215802][ T6900] [ 249.215809][ T6900] dump_stack_lvl+0x189/0x250 [ 249.215838][ T6900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.215860][ T6900] ? __pfx_queue_work_on+0x10/0x10 [ 249.215949][ T6900] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.215974][ T6900] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.216005][ T6900] f2fs_handle_critical_error+0x37c/0x540 [ 249.216032][ T6900] f2fs_write_end_io+0x94b/0xc10 [ 249.216073][ T6900] __submit_merged_bio+0x256/0x6a0 [ 249.216101][ T6900] __submit_merged_write_cond+0x255/0x530 [ 249.216154][ T6900] f2fs_write_data_pages+0x2756/0x3290 [ 249.216219][ T6900] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 249.216257][ T6900] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 249.216317][ T6900] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 249.216336][ T6900] ? register_lock_class+0x51/0x320 [ 249.216370][ T6900] ? trace_f2fs_writepages+0x7f/0x200 [ 249.216400][ T6900] ? __lock_acquire+0xab9/0xd20 [ 249.216446][ T6900] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 249.216471][ T6900] do_writepages+0x32e/0x550 [ 249.216498][ T6900] ? reacquire_held_locks+0x127/0x1d0 [ 249.216519][ T6900] ? writeback_sb_inodes+0x3bc/0x1950 [ 249.216549][ T6900] __writeback_single_inode+0x133/0x12f0 [ 249.216580][ T6900] writeback_sb_inodes+0x984/0x1950 [ 249.216632][ T6900] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 249.216701][ T6900] ? rcu_is_watching+0x15/0xb0 [ 249.216728][ T6900] wb_writeback+0x42b/0xb10 [ 249.216758][ T6900] ? queue_io+0x361/0x590 [ 249.216783][ T6900] ? __pfx_wb_writeback+0x10/0x10 [ 249.216813][ T6900] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.216863][ T6900] wb_workfn+0x3f9/0xef0 [ 249.216903][ T6900] ? __pfx_wb_workfn+0x10/0x10 [ 249.216929][ T6900] ? __lock_acquire+0xab9/0xd20 [ 249.216965][ T6900] ? process_one_work+0x868/0x15e0 [ 249.216994][ T6900] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.217022][ T6900] ? process_one_work+0x868/0x15e0 [ 249.217042][ T6900] process_one_work+0x93a/0x15e0 [ 249.217062][ T6900] ? __lock_acquire+0xab9/0xd20 [ 249.217111][ T6900] ? __pfx_process_one_work+0x10/0x10 [ 249.217151][ T6900] ? assign_work+0x3a1/0x410 [ 249.217179][ T6900] worker_thread+0x9b0/0xee0 [ 249.217238][ T6900] kthread+0x711/0x8a0 [ 249.217262][ T6900] ? __pfx_worker_thread+0x10/0x10 [ 249.217284][ T6900] ? __pfx_kthread+0x10/0x10 [ 249.217305][ T6900] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.217327][ T6900] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.217348][ T6900] ? __pfx_kthread+0x10/0x10 [ 249.217366][ T6900] ret_from_fork+0x599/0xb30 [ 249.217391][ T6900] ? __pfx_ret_from_fork+0x10/0x10 [ 249.217429][ T6900] ? __switch_to_asm+0x39/0x70 [ 249.217444][ T6900] ? __switch_to_asm+0x33/0x70 [ 249.217459][ T6900] ? __pfx_kthread+0x10/0x10 [ 249.217479][ T6900] ret_from_fork_asm+0x1a/0x30 [ 249.217521][ T6900] [ 249.217531][ T6900] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.349802][T10502] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.624156][T10502] XFS (loop2): Ending clean mount [ 249.843448][ T5829] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 250.040250][ T5943] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 250.184880][ T30] audit: type=1326 audit(1763529019.840:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.250833][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.278332][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.315813][ T30] audit: type=1326 audit(1763529019.840:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.317714][T10565] set_capacity_and_notify: 1 callbacks suppressed [ 250.317730][T10565] loop4: detected capacity change from 0 to 1024 [ 250.356044][ T5943] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 250.374771][ T5943] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 250.383100][ T5943] usb 7-1: Manufacturer: syz [ 250.393438][ T5943] usb 7-1: config 0 descriptor?? [ 250.399780][ T30] audit: type=1326 audit(1763529019.840:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.432625][T10571] loop3: detected capacity change from 0 to 256 [ 250.469830][ T30] audit: type=1326 audit(1763529019.840:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.495579][ T30] audit: type=1326 audit(1763529019.840:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.519346][ T30] audit: type=1326 audit(1763529019.840:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.542741][ T30] audit: type=1326 audit(1763529019.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.547166][T10565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.579150][T10565] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.659152][ T30] audit: type=1326 audit(1763529019.840:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 250.670803][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.719253][T10570] bond1: (slave veth1_to_bridge): Device is not bonding slave [ 250.768478][T10570] bond1: option active_slave: invalid value (veth1_to_bridge) [ 250.811921][ T5943] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 250.823262][ T5943] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 250.836458][T10570] bond1 (unregistering): Released all slaves [ 250.855840][ T5943] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 250.891303][ T5943] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 250.898958][ T5943] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 250.899181][T10580] loop3: detected capacity change from 0 to 512 [ 250.956733][ T5943] cougar 0003:060B:700A.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 251.015784][T10580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.032670][ T5943] usb 7-1: USB disconnect, device number 3 [ 251.070212][T10581] loop4: detected capacity change from 0 to 8192 [ 251.088495][T10580] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.213813][T10580] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1557: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 251.297046][T10580] EXT4-fs (loop3): Remounting filesystem read-only [ 251.366945][T10586] fido_id[10586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 251.377688][T10592] loop2: detected capacity change from 0 to 1024 [ 251.473288][T10592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 251.511044][T10592] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.614928][T10596] loop7: detected capacity change from 0 to 164 [ 251.660152][T10592] EXT4-fs error (device loop2): ext4_map_blocks:819: inode #15: block 3: comm syz.2.1560: lblock 3 mapped to illegal pblock 3 (length 3) [ 251.700313][T10596] rock: directory entry would overflow storage [ 251.706501][T10596] rock: sig=0x4d4e, size=5, remaining=4 [ 251.720456][T10592] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 251.784263][T10592] EXT4-fs (loop2): This should not happen!! Data will be lost [ 251.784263][T10592] [ 251.910520][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.930712][ T3004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 251.986752][ T3004] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117 [ 252.015493][ T3004] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.015493][ T3004] [ 252.042990][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 252.347320][ T5847] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4 [ 252.799568][T10638] loop4: detected capacity change from 0 to 256 [ 252.829922][T10638] exfat: Deprecated parameter 'namecase' [ 252.891124][T10638] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 253.033161][T10644] loop2: detected capacity change from 0 to 512 [ 253.114509][T10644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.140049][T10644] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.320093][T10644] EXT4-fs error (device loop2): ext4_empty_dir:3080: inode #12: comm syz.2.1584: Directory hole found for htree leaf block 0 [ 253.406102][T10659] loop3: detected capacity change from 0 to 16 [ 253.434032][T10659] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 253.499367][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.643990][T10663] batadv0: entered promiscuous mode [ 253.699652][T10662] batadv0: left promiscuous mode [ 254.067731][T10630] loop7: detected capacity change from 0 to 65536 [ 254.136644][T10630] XFS (loop7): Mounting V5 Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f [ 254.249435][T10630] XFS (loop7): Ending clean mount [ 254.426631][ T9327] XFS (loop7): Unmounting Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f [ 254.771154][T10665] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 254.936732][T10665] XFS (loop3): Ending clean mount [ 254.951532][T10665] XFS (loop3): Quotacheck needed: Please wait. [ 255.071723][T10665] XFS (loop3): Quotacheck: Done. [ 255.287037][ T5834] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 255.486368][T10713] set_capacity_and_notify: 3 callbacks suppressed [ 255.486386][T10713] loop7: detected capacity change from 0 to 256 [ 255.569978][T10713] exfat: Deprecated parameter 'utf8' [ 255.575366][T10713] exfat: Deprecated parameter 'namecase' [ 255.638790][T10713] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 255.796493][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811702][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941081][T10723] loop4: detected capacity change from 0 to 512 [ 256.009974][T10723] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 256.053706][T10706] loop6: detected capacity change from 0 to 32768 [ 256.107938][T10723] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 256.225725][T10733] loop7: detected capacity change from 0 to 64 [ 256.378989][T10735] loop2: detected capacity change from 0 to 64 [ 256.832741][ T6010] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 256.937750][T10746] loop3: detected capacity change from 0 to 4096 [ 256.983295][T10746] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 256.999376][ T6010] usb 8-1: Using ep0 maxpacket: 8 [ 257.049706][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.074288][ T6010] usb 8-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 257.127385][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.177430][ T6010] usb 8-1: config 0 descriptor?? [ 257.494032][ T5847] Bluetooth: hci4: Unable to find connection for big 0xff [ 257.658556][ T6010] thrustmaster 0003:044F:B653.000D: item fetching failed at offset 0/2 [ 257.679363][ T6010] thrustmaster 0003:044F:B653.000D: parse failed [ 257.685806][ T6010] thrustmaster 0003:044F:B653.000D: probe with driver thrustmaster failed with error -22 [ 257.857757][ T903] usb 8-1: USB disconnect, device number 4 [ 257.883616][T10786] syz.4.1636 uses obsolete (PF_INET,SOCK_PACKET) [ 257.953650][T10758] loop2: detected capacity change from 0 to 32768 [ 257.998552][ T48] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 258.031784][T10758] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 258.139568][T10758] XFS (loop2): Ending clean mount [ 258.168667][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 258.178095][T10758] XFS (loop2): Quotacheck needed: Please wait. [ 258.179026][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.196206][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.207149][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.238338][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.254465][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.288322][ T48] usb 4-1: config 0 descriptor?? [ 258.329204][T10758] XFS (loop2): Quotacheck: Done. [ 258.453964][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 258.804526][ T48] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 258.864852][ T48] microsoft 0003:045E:07DA.000E: bogus close delimiter [ 258.903436][ T48] microsoft 0003:045E:07DA.000E: item 0 4 2 10 parsing failed [ 258.925227][ T48] microsoft 0003:045E:07DA.000E: parse failed [ 258.981646][ T48] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 259.072492][ T48] usb 4-1: USB disconnect, device number 10 [ 259.397016][T10841] loop4: detected capacity change from 0 to 128 [ 259.426452][T10841] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 259.473773][T10841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.516291][T10845] loop2: detected capacity change from 0 to 256 [ 259.571085][T10845] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 260.248715][ T5902] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 260.439937][ T5902] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.464754][T10882] loop3: detected capacity change from 0 to 1024 [ 260.478105][ T5902] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.491602][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.500074][T10882] EXT4-fs: Ignoring removed bh option [ 260.519292][ T5902] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 260.529447][T10882] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 260.556933][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.591578][ T5902] usb 7-1: config 0 descriptor?? [ 260.607830][T10882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.664580][T10882] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #12: block 7: comm syz.3.1670: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 260.698580][T10882] EXT4-fs (loop3): Remounting filesystem read-only [ 260.715210][T10882] overlayfs: failed to create directory ./file0/work (errno: 30); mounting read-only [ 260.727746][T10882] overlayfs: failed to set uuid (/bus, err=-30); falling back to uuid=null. [ 260.744576][ T5847] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 260.754973][ T5847] Bluetooth: Wrong link type (-22) [ 260.761261][ T5847] Bluetooth: hci1: link tx timeout [ 260.768942][ T5847] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.838333][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.062299][ T5902] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 261.075297][ T5902] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 261.084891][ T5902] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 261.093589][ T5902] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 261.113278][ T5902] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 261.170940][ T5902] hid-steam 0003:28DE:1102.000F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 261.284962][ T5902] usb 7-1: USB disconnect, device number 4 [ 261.401818][T10911] fido_id[10911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 261.801383][T10929] loop4: detected capacity change from 0 to 16 [ 261.838067][T10929] erofs (device loop4): mounted with root inode @ nid 36. [ 261.847003][T10931] loop3: detected capacity change from 0 to 64 [ 261.886828][T10929] erofs (device loop4): readahead error at folio 26 @ nid 36 [ 261.927668][T10929] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 261.968878][T10929] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 262.020449][T10929] erofs (device loop4): readahead error at folio 23 @ nid 36 [ 262.058339][T10929] erofs (device loop4): readahead error at folio 22 @ nid 36 [ 262.108330][T10929] erofs (device loop4): readahead error at folio 21 @ nid 36 [ 262.144684][T10929] erofs (device loop4): readahead error at folio 20 @ nid 36 [ 262.209305][T10929] erofs (device loop4): readahead error at folio 18 @ nid 36 [ 262.238460][T10929] erofs (device loop4): readahead error at folio 16 @ nid 36 [ 262.259220][T10929] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 262.288661][T10929] syz.4.1684: attempt to access beyond end of device [ 262.288661][T10929] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 262.340296][T10929] syz.4.1684: attempt to access beyond end of device [ 262.340296][T10929] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 262.399680][T10929] syz.4.1684: attempt to access beyond end of device [ 262.399680][T10929] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 262.445980][T10929] syz.4.1684: attempt to access beyond end of device [ 262.445980][T10929] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 262.833907][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 262.834335][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 262.859900][T10927] loop7: detected capacity change from 0 to 32768 [ 262.948401][ T30] audit: type=1800 audit(1763529032.600:54): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1683" name="bus" dev="loop7" ino=7 res=0 errno=0 [ 263.026863][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1698'. [ 263.097417][T10969] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 263.147991][T10969] team0: Device ipvlan2 is already an upper device of the team interface [ 263.612618][T10963] loop3: detected capacity change from 0 to 32768 [ 263.672930][T10963] read_mapping_page failed! [ 263.713684][T10963] ERROR: (device loop3): txCommit: [ 263.713684][T10963] [ 263.727471][T10964] loop2: detected capacity change from 0 to 32768 [ 263.744929][T10963] ERROR: (device loop3): remounting filesystem as read-only [ 263.817496][T10964] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.983161][T10964] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 264.007573][T10964] XFS (loop2): Starting recovery (logdev: internal) [ 264.030753][T10964] XFS (loop2): Ending recovery (logdev: internal) [ 264.165125][ T5829] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.863862][T11010] loop2: detected capacity change from 0 to 512 [ 264.931015][T11010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.941768][T10992] loop7: detected capacity change from 0 to 32768 [ 264.959689][T11010] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.005453][T11016] loop6: detected capacity change from 0 to 512 [ 265.030541][T10992] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.044833][T10998] loop3: detected capacity change from 0 to 32768 [ 265.082954][T11016] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 265.141335][T10998] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 265.172938][T10992] XFS (loop7): Ending clean mount [ 265.196209][T11016] EXT4-fs (loop6): 1 truncate cleaned up [ 265.221280][T11016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.255573][T10998] XFS (loop3): Ending clean mount [ 265.321728][T10998] XFS (loop3): Quotacheck needed: Please wait. [ 265.329852][ T9327] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.381026][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.423145][T10998] XFS (loop3): Quotacheck: Done. [ 265.433161][ T8910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.625556][ T5834] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 265.978105][T11045] loop2: detected capacity change from 0 to 256 [ 266.007801][T11045] exfat: Deprecated parameter 'utf8' [ 266.043429][T11045] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 266.249891][T11048] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.297100][T11048] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.464938][ T9327] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.554747][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 266.604299][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 266.655005][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1729'. [ 266.666131][T11063] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 266.674874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.698407][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1729'. [ 266.758386][T11068] netlink: 'syz.7.1729': attribute type 14 has an invalid length. [ 266.813377][T11068] netlink: 'syz.7.1729': attribute type 13 has an invalid length. [ 267.069902][T11074] vlan3: entered promiscuous mode [ 267.117008][T11074] syz_tun: entered promiscuous mode [ 267.327840][T11081] set_capacity_and_notify: 2 callbacks suppressed [ 267.327859][T11081] loop7: detected capacity change from 0 to 512 [ 267.385438][T11081] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.534986][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.559639][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.569187][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.578021][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.585477][T11087] loop6: detected capacity change from 0 to 256 [ 267.605237][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.637379][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.668564][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 267.700102][T11087] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 267.702447][T11081] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 267.777083][T11081] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 268.181457][T11099] loop4: detected capacity change from 0 to 1024 [ 268.330396][ T13] hfsplus: b-tree write err: -5, ino 4 [ 268.591286][T11106] loop4: detected capacity change from 0 to 4096 [ 268.612361][T11110] loop2: detected capacity change from 0 to 4096 [ 268.612535][T11106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.732620][T11114] netlink: 1348 bytes leftover after parsing attributes in process `syz.7.1754'. [ 268.819715][ T3004] ntfs3(loop2): ino=5, mi_enum_attr [ 268.911566][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.991055][T11122] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 269.114644][T11093] loop3: detected capacity change from 0 to 40427 [ 269.160588][T11093] F2FS-fs (loop3): invalid crc value [ 269.292865][T11093] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 269.314308][T11093] F2FS-fs (loop3): Start checkpoint disabled! [ 269.338642][T11093] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 269.354617][T11093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 269.448425][ T5881] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 269.551792][ T3530] kworker/u8:11: attempt to access beyond end of device [ 269.551792][ T3530] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.602665][ T3530] CPU: 0 UID: 0 PID: 3530 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 269.602690][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.602701][ T3530] Workqueue: writeback wb_workfn (flush-7:3) [ 269.602728][ T3530] Call Trace: [ 269.602735][ T3530] [ 269.602743][ T3530] dump_stack_lvl+0x189/0x250 [ 269.602774][ T3530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.602798][ T3530] ? __pfx_queue_work_on+0x10/0x10 [ 269.602819][ T3530] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 269.602842][ T3530] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 269.602876][ T3530] f2fs_handle_critical_error+0x37c/0x540 [ 269.602903][ T3530] f2fs_write_end_io+0x94b/0xc10 [ 269.602942][ T3530] __submit_merged_bio+0x256/0x6a0 [ 269.602967][ T3530] __submit_merged_write_cond+0x255/0x530 [ 269.602993][ T3530] f2fs_write_data_pages+0x2756/0x3290 [ 269.603048][ T3530] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 269.603081][ T3530] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 269.603138][ T3530] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 269.603158][ T3530] ? register_lock_class+0x51/0x320 [ 269.603188][ T3530] ? trace_f2fs_writepages+0x7f/0x200 [ 269.603235][ T3530] ? f2fs_write_node_pages+0x478/0x6e0 [ 269.603258][ T3530] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 269.603290][ T3530] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 269.603311][ T3530] do_writepages+0x32e/0x550 [ 269.603334][ T3530] ? reacquire_held_locks+0x127/0x1d0 [ 269.603356][ T3530] ? writeback_sb_inodes+0x3bc/0x1950 [ 269.603384][ T3530] __writeback_single_inode+0x133/0x12f0 [ 269.603414][ T3530] writeback_sb_inodes+0x984/0x1950 [ 269.603466][ T3530] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 269.603528][ T3530] ? rcu_is_watching+0x15/0xb0 [ 269.603555][ T3530] wb_writeback+0x42b/0xb10 [ 269.603585][ T3530] ? queue_io+0x361/0x590 [ 269.603609][ T3530] ? __pfx_wb_writeback+0x10/0x10 [ 269.603638][ T3530] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.603664][ T3530] wb_workfn+0x3f9/0xef0 [ 269.603698][ T3530] ? __pfx_wb_workfn+0x10/0x10 [ 269.603722][ T3530] ? __lock_acquire+0xab9/0xd20 [ 269.603754][ T3530] ? process_one_work+0x868/0x15e0 [ 269.603780][ T3530] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.603803][ T3530] ? process_one_work+0x868/0x15e0 [ 269.603822][ T3530] process_one_work+0x93a/0x15e0 [ 269.603840][ T3530] ? __lock_acquire+0xab9/0xd20 [ 269.603881][ T3530] ? __pfx_process_one_work+0x10/0x10 [ 269.603911][ T3530] ? assign_work+0x3a1/0x410 [ 269.603936][ T3530] worker_thread+0x9b0/0xee0 [ 269.603983][ T3530] kthread+0x711/0x8a0 [ 269.604004][ T3530] ? __pfx_worker_thread+0x10/0x10 [ 269.604024][ T3530] ? __pfx_kthread+0x10/0x10 [ 269.604043][ T3530] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.604063][ T3530] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.604083][ T3530] ? __pfx_kthread+0x10/0x10 [ 269.604101][ T3530] ret_from_fork+0x599/0xb30 [ 269.604124][ T3530] ? __pfx_ret_from_fork+0x10/0x10 [ 269.604155][ T3530] ? __switch_to_asm+0x39/0x70 [ 269.604179][ T3530] ? __switch_to_asm+0x33/0x70 [ 269.604193][ T3530] ? __pfx_kthread+0x10/0x10 [ 269.604217][ T3530] ret_from_fork_asm+0x1a/0x30 [ 269.604251][ T3530] [ 269.604259][ T3530] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 269.931564][ T5881] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 269.956591][ T5881] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 269.965776][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.973857][ T5881] usb 8-1: Product: syz [ 270.002505][ T5881] usb 8-1: Manufacturer: syz [ 270.007159][ T5881] usb 8-1: SerialNumber: syz [ 270.021234][ T5881] usb 8-1: config 0 descriptor?? [ 270.053844][ T5881] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 270.106653][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.137909][ T5881] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 270.158637][ T5881] usb 8-1: media controller created [ 270.231495][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.287128][T11129] dvb-usb: bulk message failed: -22 (7/0) [ 270.444007][ T5881] DVB: Unable to find symbol mt352_attach() [ 270.480295][T11156] loop6: detected capacity change from 0 to 1024 [ 270.576504][T11156] hfsplus: invalid xattr key length: 0 [ 270.598543][ T5881] DVB: Unable to find symbol nxt6000_attach() [ 270.604834][ T5881] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 270.682898][ T141] hfsplus: b-tree write err: -5, ino 8 [ 270.685350][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input10 [ 270.735388][ T5881] dvb-usb: schedule remote query interval to 1000 msecs. [ 270.793275][ T5881] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 270.825749][ T5881] dvb-usb: bulk message failed: -22 (7/0) [ 270.843388][ T5881] dvb-usb: bulk message failed: -22 (7/0) [ 270.863750][ T5881] usb 8-1: USB disconnect, device number 5 [ 271.029431][T11178] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1782'. [ 271.135981][ T5881] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 271.640282][T11197] ocfs2: block size(16384) > page size(4096) not supported by filesystem [ 271.663982][T11199] loop4: detected capacity change from 0 to 256 [ 271.671070][T11197] (syz.7.1791,11197,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 271.688353][T11197] (syz.7.1791,11197,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 271.745377][T11199] exfat: Deprecated parameter 'namecase' [ 271.816702][T11199] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 271.878137][T11199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 271.997507][T11187] loop3: detected capacity change from 0 to 32768 [ 272.172681][T11183] loop6: detected capacity change from 0 to 32768 [ 272.306143][T11183] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.353300][T11194] loop2: detected capacity change from 0 to 32768 [ 272.373187][T11212] loop4: detected capacity change from 0 to 128 [ 272.407652][T11183] XFS (loop6): Ending clean mount [ 272.479398][T11183] XFS (loop6): Quotacheck needed: Please wait. [ 272.487444][T11194] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.625062][T11183] XFS (loop6): Quotacheck: Done. [ 272.688807][ T8910] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.719348][T11194] XFS (loop2): Ending clean mount [ 272.724026][ T30] audit: type=1326 audit(1763529042.380:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 272.767824][T11194] XFS (loop2): Quotacheck needed: Please wait. [ 272.841571][ T30] audit: type=1326 audit(1763529042.400:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 272.903170][T11231] loop4: detected capacity change from 0 to 256 [ 272.910878][ T30] audit: type=1326 audit(1763529042.410:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 272.968374][T11194] XFS (loop2): Quotacheck: Done. [ 272.976711][T11231] exfat: Deprecated parameter 'namecase' [ 272.991958][T11231] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 272.998340][ T30] audit: type=1326 audit(1763529042.420:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 273.037910][ T30] audit: type=1326 audit(1763529042.420:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 273.103130][T11231] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 273.104003][ T30] audit: type=1326 audit(1763529042.420:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 273.143655][ T30] audit: type=1326 audit(1763529042.420:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 273.181365][T11235] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 273.192592][ T30] audit: type=1326 audit(1763529042.420:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8c38f6c9 code=0x7ffc0000 [ 273.244309][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.502305][T11204] loop7: detected capacity change from 0 to 32768 [ 273.509505][T11238] loop4: detected capacity change from 0 to 64 [ 273.576716][T11204] JBD2: Ignoring recovery information on journal [ 273.742531][T11204] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 274.068192][T11254] loop6: detected capacity change from 0 to 1024 [ 274.116927][ T9327] ocfs2: Unmounting device (7,7) on (node local) [ 274.166540][T11260] loop3: detected capacity change from 0 to 64 [ 274.180252][T11254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.230230][T11260] hfs: request for non-existent node 1280 in B*Tree [ 274.241332][T11260] hfs: request for non-existent node 1280 in B*Tree [ 274.369067][ T3530] hfs: request for non-existent node 1280 in B*Tree [ 274.384545][ T8910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.396349][ T3530] hfs: request for non-existent node 1280 in B*Tree [ 274.633432][T11269] loop7: detected capacity change from 0 to 512 [ 274.677583][T11269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.705096][T11269] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.815772][T11252] loop4: detected capacity change from 0 to 32768 [ 274.892379][T11252] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.902267][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.024188][T11252] XFS (loop4): Ending clean mount [ 275.033707][T11252] XFS (loop4): Quotacheck needed: Please wait. [ 275.134998][T11252] XFS (loop4): Quotacheck: Done. [ 275.157850][T11289] loop7: detected capacity change from 0 to 1024 [ 275.212558][T11289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c018, mo2=0002] [ 275.291556][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.301594][T11289] System zones: 0-1, 3-36 [ 275.320761][T11289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.358138][T11294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.470468][T11289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c018, mo2=0002] [ 275.488624][T11289] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.1819: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 275.546078][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.583270][T11289] EXT4-fs error (device loop7): ext4_quota_enable:7142: comm syz.7.1819: Bad quota inode: 3, type: 0 [ 275.745640][T11289] EXT4-fs warning (device loop7): ext4_enable_quotas:7183: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 275.925577][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.013053][T11310] mkiss: ax0: crc mode is auto. [ 276.135574][T11318] EXT4-fs error (device loop7): ext4_quota_enable:7139: inode #4: comm syz.7.1831: iget: bad i_size value: 1970324836980736 [ 276.278692][T11318] EXT4-fs error (device loop7): ext4_quota_enable:7142: comm syz.7.1831: Bad quota inode: 4, type: 1 [ 276.307965][T11318] EXT4-fs warning (device loop7): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 276.354564][T11318] EXT4-fs (loop7): mount failed [ 276.411253][T11325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.516755][T11331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 276.634765][T11325] EXT4-fs (loop2): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 276.698628][T11325] EXT4-fs (loop2): can't enable nombcache during remount [ 276.806099][T11333] FAT-fs (loop7): Directory bread(block 64) failed [ 276.848529][T11333] FAT-fs (loop7): Directory bread(block 65) failed [ 276.862444][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.868473][T11333] FAT-fs (loop7): Directory bread(block 66) failed [ 276.878082][T11333] FAT-fs (loop7): Directory bread(block 67) failed [ 276.923111][T11333] FAT-fs (loop7): Directory bread(block 68) failed [ 276.950412][T11333] FAT-fs (loop7): Directory bread(block 69) failed [ 276.957418][T11335] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.964600][T11333] FAT-fs (loop7): Directory bread(block 70) failed [ 276.994477][T11323] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1834 (11323) [ 277.007884][T11333] FAT-fs (loop7): Directory bread(block 71) failed [ 277.037166][T11333] FAT-fs (loop7): Directory bread(block 72) failed [ 277.061721][T11338] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.079201][T11333] FAT-fs (loop7): Directory bread(block 73) failed [ 277.118880][T11323] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 277.158400][T11323] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm [ 277.396353][T11323] BTRFS info (device loop6): enabling ssd optimizations [ 277.431105][T11323] BTRFS info (device loop6): turning on async discard [ 277.448339][T11323] BTRFS info (device loop6): enabling free space tree [ 277.451475][T11327] set_capacity_and_notify: 7 callbacks suppressed [ 277.451491][T11327] loop3: detected capacity change from 0 to 40427 [ 277.526601][T11327] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 277.573004][T11327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 277.582319][ T30] audit: type=1800 audit(1763529047.220:63): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1834" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 277.620321][T11363] Bluetooth: MGMT ver 1.23 [ 277.807335][ T8910] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 277.821667][T11369] loop4: detected capacity change from 0 to 64 [ 277.995302][T11327] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 278.110270][T11327] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 278.117352][T11327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.360602][ T5834] syz-executor: attempt to access beyond end of device [ 278.360602][ T5834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.410332][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 278.410356][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.410365][ T5834] Call Trace: [ 278.410371][ T5834] [ 278.410379][ T5834] dump_stack_lvl+0x189/0x250 [ 278.410408][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.410429][ T5834] ? __pfx_queue_work_on+0x10/0x10 [ 278.410447][ T5834] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 278.410467][ T5834] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.410498][ T5834] f2fs_handle_critical_error+0x37c/0x540 [ 278.410523][ T5834] f2fs_write_end_io+0x94b/0xc10 [ 278.410564][ T5834] __submit_merged_bio+0x256/0x6a0 [ 278.410589][ T5834] __submit_merged_write_cond+0x255/0x530 [ 278.410615][ T5834] f2fs_write_data_pages+0x2756/0x3290 [ 278.410673][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.410708][ T5834] ? is_bpf_text_address+0x26/0x2b0 [ 278.410759][ T5834] ? __mod_zone_page_state+0xd7/0x140 [ 278.410791][ T5834] ? folios_put_refs+0x58b/0x670 [ 278.410825][ T5834] ? __pfx_folios_put_refs+0x10/0x10 [ 278.410844][ T5834] ? rcu_is_watching+0x15/0xb0 [ 278.410872][ T5834] ? __lock_acquire+0xab9/0xd20 [ 278.410912][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.410932][ T5834] do_writepages+0x32e/0x550 [ 278.410963][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 278.410988][ T5834] filemap_fdatawrite+0x199/0x240 [ 278.411006][ T5834] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 278.411088][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 278.411111][ T5834] f2fs_sync_dirty_inodes+0x30f/0x830 [ 278.411152][ T5834] f2fs_write_checkpoint+0x93e/0x2440 [ 278.411211][ T5834] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 278.411230][ T5834] ? kasan_record_aux_stack+0xbd/0xd0 [ 278.411314][ T5834] kill_f2fs_super+0x2cc/0x6d0 [ 278.411345][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 278.411387][ T5834] ? shrinker_free+0x2ce/0x3e0 [ 278.411413][ T5834] deactivate_locked_super+0xbc/0x130 [ 278.411436][ T5834] cleanup_mnt+0x425/0x4c0 [ 278.411456][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.411483][ T5834] task_work_run+0x1d4/0x260 [ 278.411506][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 278.411531][ T5834] ? exit_to_user_mode_loop+0x55/0x4f0 [ 278.411559][ T5834] exit_to_user_mode_loop+0xff/0x4f0 [ 278.411579][ T5834] ? rcu_is_watching+0x15/0xb0 [ 278.411601][ T5834] do_syscall_64+0x2e9/0xfa0 [ 278.411626][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.411642][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 278.411664][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.411681][ T5834] RIP: 0033:0x7fbb8c3909f7 [ 278.411698][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 278.411710][ T5834] RSP: 002b:00007ffd3e7eefe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 278.411730][ T5834] RAX: 0000000000000000 RBX: 00007fbb8c411d7d RCX: 00007fbb8c3909f7 [ 278.411742][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3e7ef0a0 [ 278.411752][ T5834] RBP: 00007ffd3e7ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 278.411763][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3e7f0130 [ 278.411774][ T5834] R13: 00007fbb8c411d7d R14: 0000000000043ee2 R15: 00007ffd3e7f0170 [ 278.411811][ T5834] [ 278.411819][ T5834] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 279.650447][T11419] netlink: 'syz.4.1870': attribute type 4 has an invalid length. [ 279.828732][T11431] loop4: detected capacity change from 0 to 64 [ 279.928649][ T5943] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 279.982293][T11438] binder: 11436:11438 ioctl c0306201 200000000680 returned -14 [ 280.067765][T11441] loop4: detected capacity change from 0 to 256 [ 280.089870][T11441] exfat: Deprecated parameter 'utf8' [ 280.095781][T11441] exfat: Deprecated parameter 'namecase' [ 280.105451][T11441] exfat: Deprecated parameter 'utf8' [ 280.126418][ T5943] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.153708][T11441] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 280.168790][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 280.214950][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.247721][ T5943] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.288342][ T5943] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.310953][T11447] batadv0: entered promiscuous mode [ 280.316822][T11447] macvtap1: entered promiscuous mode [ 280.335779][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.361635][ T5943] usb 8-1: config 0 descriptor?? [ 280.393435][T11447] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 280.405841][T11451] loop4: detected capacity change from 0 to 512 [ 280.414220][T11447] batadv0: left promiscuous mode [ 280.424240][T11445] loop2: detected capacity change from 0 to 8192 [ 280.442948][T11445] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.507420][T11451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.528602][T11451] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.621699][T11458] veth0_to_team: entered promiscuous mode [ 280.705343][T11451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1886: bg 0: block 145: padding at end of block bitmap is not set [ 280.808058][ T5943] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 280.861850][ T5943] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 281.040036][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.053825][ T903] usb 8-1: USB disconnect, device number 6 [ 281.173780][T11461] fido_id[11461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 281.395043][T11475] xt_l2tp: invalid flags combination: 0 [ 282.051681][T11497] loop3: detected capacity change from 0 to 64 [ 282.142722][T11499] loop7: detected capacity change from 0 to 1024 [ 282.167637][T11499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.209133][T11499] EXT4-fs (loop7): orphan cleanup on readonly fs [ 282.215594][T11499] EXT4-fs error (device loop7): ext4_quota_enable:7135: comm syz.7.1907: Bad quota inum: 20, type: 1 [ 282.230701][T11499] EXT4-fs warning (device loop7): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-117, ino=20). Please run e2fsck to fix. [ 282.249801][T11499] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 282.259228][T11499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.393056][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.567432][T11483] loop6: detected capacity change from 0 to 32768 [ 282.692181][T11483] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.830086][T11483] XFS (loop6): Ending clean mount [ 282.977738][ T8910] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.309175][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 283.388475][T11544] F2FS-fs: Conflicting test_dummy_encryption options [ 283.494134][T11548] loop6: detected capacity change from 0 to 512 [ 283.520273][T11548] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 283.541157][T11548] EXT4-fs (loop6): invalid journal inode [ 283.561120][T11548] EXT4-fs (loop6): can't get journal size [ 283.591646][T11548] EXT4-fs (loop6): orphan cleanup on readonly fs [ 283.607486][T11548] EXT4-fs (loop6): 1 truncate cleaned up [ 283.616730][T11548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 283.856622][ T8910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.092425][T11571] loop2: detected capacity change from 0 to 16 [ 284.119903][T11571] erofs (device loop2): mounted with root inode @ nid 36. [ 284.144476][T11576] loop7: detected capacity change from 0 to 256 [ 284.180668][T11577] loop4: detected capacity change from 0 to 64 [ 284.187978][T11576] exfat: Deprecated parameter 'utf8' [ 284.199488][T11576] exfat: Deprecated parameter 'namecase' [ 284.207400][T11576] exfat: Deprecated parameter 'namecase' [ 284.255970][T11576] exfat: Deprecated parameter 'utf8' [ 284.275494][T11572] loop3: detected capacity change from 0 to 4096 [ 284.304984][T11576] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 284.340735][T11572] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 284.360352][T11576] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 284.417279][T11572] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 284.465101][T11572] ntfs3(loop3): ino=19, mi_enum_attr [ 284.810028][T11589] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 284.853145][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 284.888463][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 284.944384][T11595] loop2: detected capacity change from 0 to 128 [ 284.960690][T11593] macvlan2: entered promiscuous mode [ 284.992242][T11595] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 285.026758][T11595] hpfs: filesystem error: improperly stopped [ 285.090184][T11595] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 285.097971][T11595] hpfs: You really don't want any checks? You are crazy... [ 285.109544][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1953'. [ 285.158640][T11595] hpfs: hpfs_map_sector(): read error [ 285.164061][T11595] hpfs: code page support is disabled [ 285.227900][T11606] loop3: detected capacity change from 0 to 64 [ 285.237691][T11595] hpfs: hpfs_map_4sectors(): unaligned read [ 285.270883][T11595] hpfs: hpfs_map_4sectors(): unaligned read [ 285.287054][T11595] hpfs: filesystem error: unable to find root dir [ 285.387393][T11608] loop4: detected capacity change from 0 to 2048 [ 285.431899][T11608] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.466001][T11608] NILFS (loop4): mounting unchecked fs [ 285.516962][T11613] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 285.555391][T11608] NILFS (loop4): recovery complete [ 285.583516][T11618] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.839601][T11625] loop7: detected capacity change from 0 to 1024 [ 285.840494][T11625] EXT4-fs: Ignoring removed orlov option [ 285.840523][T11625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.867677][T11625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0082] [ 285.884507][T11625] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.019959][T11639] netlink: 'syz.2.1970': attribute type 2 has an invalid length. [ 286.019980][T11639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1970'. [ 286.356123][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.615692][T11657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.731944][T11657] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.959016][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.171465][T11679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.192553][ T5909] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.335030][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.350212][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.357487][T11687] support for the xor transformation has been removed. [ 287.371153][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.426878][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.488310][ T5909] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 287.497541][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.558133][ T5909] usb 3-1: config 0 descriptor?? [ 287.735346][T11665] set_capacity_and_notify: 2 callbacks suppressed [ 287.735364][T11665] loop4: detected capacity change from 0 to 32768 [ 287.796747][T11665] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 287.897439][T11665] XFS (loop4): Ending clean mount [ 287.915286][T11665] XFS (loop4): Quotacheck needed: Please wait. [ 287.985200][ T5909] apple 0003:05AC:0244.0011: item fetching failed at offset 2/5 [ 288.030174][ T5909] apple 0003:05AC:0244.0011: parse failed [ 288.039863][T11665] XFS (loop4): Quotacheck: Done. [ 288.056162][ T5909] apple 0003:05AC:0244.0011: probe with driver apple failed with error -22 [ 288.133563][T11665] XFS (loop4): syz.4.1980 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 288.184057][ T5943] usb 3-1: USB disconnect, device number 10 [ 288.233105][ T5840] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 288.692792][T11731] loop7: detected capacity change from 0 to 1024 [ 288.802421][T11736] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2009'. [ 288.850474][ T3829] hfsplus: b-tree write err: -5, ino 4 [ 288.939969][T11741] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 288.987325][T11741] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 289.008782][T11741] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 289.058415][T11741] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.079117][T11741] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 289.090968][T11741] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 289.161715][T11741] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.188809][T11741] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 289.215846][T11741] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 289.245808][T11741] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.271132][T11741] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 289.298401][T11741] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.304915][T11741] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.374313][T11741] comedi comedi3: 8255: I/O port conflict (0x800061,4) [ 289.417053][T11757] loop7: detected capacity change from 0 to 128 [ 289.423639][T11741] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.449051][T11741] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 289.462422][T11741] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 289.499147][T11757] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 289.518317][T11741] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 289.524882][T11741] comedi comedi3: 8255: I/O port conflict (0x1000000,4) [ 289.540320][T11757] hpfs: filesystem error: improperly stopped [ 289.546930][T11757] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 289.559620][T11741] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 289.571074][T11757] hpfs: You really don't want any checks? You are crazy... [ 289.601015][T11757] hpfs: hpfs_map_sector(): read error [ 289.606478][T11757] hpfs: code page support is disabled [ 289.649899][T11757] hpfs: hpfs_map_4sectors(): unaligned read [ 289.655997][T11757] hpfs: hpfs_map_4sectors(): unaligned read [ 289.688117][T11757] hpfs: filesystem error: unable to find root dir [ 289.701552][T11765] loop2: detected capacity change from 0 to 128 [ 289.843445][T11765] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.952616][T11765] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.056835][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2028'. [ 290.082154][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.622814][T11770] loop6: detected capacity change from 0 to 32768 [ 290.683861][T11770] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.754297][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 290.804943][T11770] XFS (loop6): Ending clean mount [ 290.977828][ T8910] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.986345][T11806] loop3: detected capacity change from 0 to 1024 [ 291.016805][T11806] EXT4-fs: Ignoring removed orlov option [ 291.048995][T11806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.087181][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 291.190143][T11806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0082] [ 291.306346][T11806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.416611][T11792] loop2: detected capacity change from 0 to 32768 [ 291.809504][T11829] loop2: detected capacity change from 0 to 164 [ 291.952837][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.963010][ T5829] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 292.027626][ T5829] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 292.527017][T11852] gfs2: path_lookup on c::: returned error -2 [ 292.691948][T11856] loop2: detected capacity change from 0 to 512 [ 292.718466][T11834] loop6: detected capacity change from 0 to 32768 [ 292.772701][T11856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.786554][T11856] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.847197][T11834] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 292.867915][T11834] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.944180][T11834] XFS (loop6): Ending clean mount [ 292.952447][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.003080][T11834] XFS (loop6): Quotacheck needed: Please wait. [ 293.078306][ T9228] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 293.127119][T11834] XFS (loop6): Quotacheck: Done. [ 293.246807][ T8910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 293.270187][ T9228] usb 4-1: Using ep0 maxpacket: 16 [ 293.301543][ T9228] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 293.349119][ T9228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 293.383681][ T9228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 293.448314][ T9228] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 293.482093][ T9228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.502361][ T9228] usb 4-1: config 0 descriptor?? [ 293.626954][T11872] loop2: detected capacity change from 0 to 32768 [ 293.675872][T11872] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 293.832145][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.864532][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2069'. [ 293.981767][ T9228] apple 0003:05AC:029F.0012: hidraw0: USB HID v0.01 Device [HID 05ac:029f] on usb-dummy_hcd.3-1/input0 [ 294.124769][ T9228] usb 4-1: USB disconnect, device number 11 [ 294.130778][T11899] loop7: detected capacity change from 0 to 256 [ 294.196158][T11895] fido_id[11895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 294.214064][T11899] FAT-fs (loop7): Directory bread(block 64) failed [ 294.243813][T11899] FAT-fs (loop7): Directory bread(block 65) failed [ 294.275377][T11901] loop6: detected capacity change from 0 to 64 [ 294.292652][T11899] FAT-fs (loop7): Directory bread(block 66) failed [ 294.310659][T11899] FAT-fs (loop7): Directory bread(block 67) failed [ 294.317316][T11899] FAT-fs (loop7): Directory bread(block 68) failed [ 294.331038][T11901] hfs: unexpected record length: entrylength 108 [ 294.358408][T11899] FAT-fs (loop7): Directory bread(block 69) failed [ 294.373972][T11899] FAT-fs (loop7): Directory bread(block 70) failed [ 294.386038][T11899] FAT-fs (loop7): Directory bread(block 71) failed [ 294.392418][ T8910] hfs: node 4:2 still has 1 user(s)! [ 294.396553][T11899] FAT-fs (loop7): Directory bread(block 72) failed [ 294.405002][T11899] FAT-fs (loop7): Directory bread(block 73) failed [ 294.881928][ T30] audit: type=1326 audit(1763529064.540:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 294.972110][ T30] audit: type=1326 audit(1763529064.570:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.074082][ T30] audit: type=1326 audit(1763529064.590:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86ad18f703 code=0x7ffc0000 [ 295.152291][ T30] audit: type=1326 audit(1763529064.590:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.176876][ T30] audit: type=1326 audit(1763529064.600:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.202490][ T30] audit: type=1326 audit(1763529064.600:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.255463][ T30] audit: type=1326 audit(1763529064.600:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.286995][ T30] audit: type=1326 audit(1763529064.600:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.315460][ T30] audit: type=1326 audit(1763529064.600:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.368401][ T48] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 295.368598][ T30] audit: type=1326 audit(1763529064.600:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86ad18f6c9 code=0x7ffc0000 [ 295.570802][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.593261][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.626291][ T48] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 295.659553][ T48] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 295.673575][ T48] usb 7-1: Manufacturer: syz [ 295.709612][ T48] usb 7-1: config 0 descriptor?? [ 295.875145][T11925] loop2: detected capacity change from 0 to 32768 [ 295.958839][T11925] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks" [ 295.984818][T11925] gfs2: fsid=localflocks: Now mounting FS (format 1801)... [ 296.072232][T11925] gfs2: fsid=localflocks.s: journal 0 mapped with 5 extents in 0ms [ 296.119264][T11936] loop7: detected capacity change from 0 to 32768 [ 296.258196][T11925] gfs2: fsid=localflocks.s: first mount done, others may mount [ 296.330265][ T48] uclogic 0003:256C:006D.0013: failed retrieving Huion firmware version: -71 [ 296.389279][ T48] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 296.428943][ T48] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 296.461472][ T48] usb 7-1: USB disconnect, device number 5 [ 296.663656][T11955] loop4: detected capacity change from 0 to 2048 [ 296.764461][T11955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.955249][T11938] loop3: detected capacity change from 0 to 32768 [ 297.031231][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.061563][T11938] gfs2: fsid=_dev_vcsu: Trying to join cluster "lock_dlm", "_dev_vcsu" [ 297.120396][T11938] gfs2: fsid=_dev_vcsu: no fsname found [ 297.255201][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2098'. [ 297.767915][T11990] loop7: detected capacity change from 0 to 256 [ 297.862703][T11990] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 298.077818][T12002] loop3: detected capacity change from 0 to 1024 [ 298.079175][T11990] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 298.109354][T12003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2118'. [ 298.138559][T11990] exFAT-fs (loop7): Filesystem has been set read-only [ 298.152741][T12003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2118'. [ 298.504398][T12012] loop7: detected capacity change from 0 to 512 [ 298.559319][T12012] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2122: inode has both inline data and extents flags [ 298.575007][T12012] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2122: couldn't read orphan inode 15 (err -117) [ 298.601474][T12012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.855493][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.000344][T12025] loop4: detected capacity change from 0 to 1024 [ 299.011031][T11993] loop6: detected capacity change from 0 to 32768 [ 299.029397][T12027] pim6reg: entered allmulticast mode [ 299.064347][T11993] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 299.115693][T11993] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 299.264113][ T12] hfsplus: b-tree write err: -5, ino 4 [ 299.272199][T11993] XFS (loop6): Ending clean mount [ 299.289899][T11993] XFS (loop6): Quotacheck needed: Please wait. [ 299.304227][T12017] loop2: detected capacity change from 0 to 32768 [ 299.331346][T12041] loop3: detected capacity change from 0 to 1024 [ 299.399283][T12017] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 299.459109][T11993] XFS (loop6): Quotacheck: Done. [ 299.541061][T12017] XFS (loop2): Ending clean mount [ 299.561652][T12017] XFS (loop2): Quotacheck needed: Please wait. [ 299.604097][T12055] loop3: detected capacity change from 0 to 1024 [ 299.623895][T12055] EXT4-fs: inline encryption not supported [ 299.638370][T12055] EXT4-fs: Ignoring removed i_version option [ 299.662625][T12017] XFS (loop2): Quotacheck: Done. [ 299.683146][ T8910] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 299.750369][T12055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.966384][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 299.966402][ T30] audit: type=1326 audit(1763529069.620:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.4.2138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6adcd8f6c9 code=0x0 [ 300.010126][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 300.015251][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.226795][T12065] loop7: detected capacity change from 0 to 1024 [ 300.490048][ T6173] hfsplus: b-tree write err: -5, ino 4 [ 300.550153][T12073] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2142'. [ 300.570724][T12073] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2142'. [ 300.979987][T12091] netlink: 'syz.6.2151': attribute type 1 has an invalid length. [ 301.058336][ T5943] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 301.192938][T12101] loop6: detected capacity change from 0 to 1024 [ 301.250585][ T5943] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 301.274839][ T5943] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 301.308932][ T5943] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 301.352639][ T5943] usb 4-1: config 220 has no interface number 2 [ 301.381655][ T5943] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 301.429296][ T5943] usb 4-1: config 220 interface 0 has no altsetting 0 [ 301.448794][ T5943] usb 4-1: config 220 interface 76 has no altsetting 0 [ 301.465820][ T5943] usb 4-1: config 220 interface 1 has no altsetting 0 [ 301.520351][ T5943] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 301.550282][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.575263][ T5943] usb 4-1: Product: syz [ 301.590309][ T5943] usb 4-1: Manufacturer: syz [ 301.610721][ T5943] usb 4-1: SerialNumber: syz [ 301.737708][T12118] loop7: detected capacity change from 0 to 4096 [ 301.804948][T12121] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.881282][ T30] audit: type=1800 audit(1763529071.530:76): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2164" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 301.898632][ T5943] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 301.916436][T12124] loop6: detected capacity change from 0 to 1024 [ 301.920568][ T5943] uvcvideo 4-1:220.0: No valid video chain found. [ 301.965151][ T5943] usb 4-1: selecting invalid altsetting 0 [ 302.044385][ T5943] usb 4-1: selecting invalid altsetting 0 [ 302.071285][ T5943] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 302.105870][T12128] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2168'. [ 302.134636][ T5943] usb 4-1: USB disconnect, device number 12 [ 302.305045][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 302.314447][T12132] loop6: detected capacity change from 0 to 512 [ 302.316163][T12132] EXT4-fs: Ignoring removed oldalloc option [ 302.364708][T12132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c018, mo2=0002] [ 302.384417][T12132] System zones: 1-12 [ 302.429463][T12132] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2169: bg 0: block 257: padding at end of block bitmap is not set [ 302.495500][T12132] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.2169: Parent and EA inode have the same ino 15 [ 302.567191][T12132] EXT4-fs (loop6): 1 orphan inode deleted [ 302.590242][T12132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.804723][ T8910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.938417][ T9228] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 303.090487][ T9228] usb 3-1: Using ep0 maxpacket: 8 [ 303.112512][ T9228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 303.185328][ T9228] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 303.218870][ T9228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.231910][ T9228] usb 3-1: config 0 descriptor?? [ 303.342266][T12131] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 303.355994][T12131] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 303.421792][T12131] F2FS-fs (loop7): invalid crc value [ 303.434165][T12164] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.485337][T12164] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.562260][ T5840] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.743806][ T9228] corsair 0003:1B1C:1B09.0014: unknown main item tag 0x7 [ 303.797484][ T9228] corsair 0003:1B1C:1B09.0014: unknown main item tag 0x0 [ 303.822652][T12131] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 303.828703][ T9228] corsair 0003:1B1C:1B09.0014: unknown main item tag 0x0 [ 303.875413][ T9228] corsair 0003:1B1C:1B09.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.2-1/input0 [ 303.920911][T12131] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 303.968830][T12131] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 303.977441][ T9228] usb 3-1: USB disconnect, device number 11 [ 304.067884][T12131] syz.7.2170: attempt to access beyond end of device [ 304.067884][T12131] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.195988][T12186] fido_id[12186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 304.622103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 304.788438][T12200] set_capacity_and_notify: 3 callbacks suppressed [ 304.788457][T12200] loop4: detected capacity change from 0 to 2048 [ 304.893650][T12187] loop6: detected capacity change from 0 to 32768 [ 304.905560][T12200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.127679][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.148550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 306.308790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.538899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.548612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 306.573548][T12194] loop3: detected capacity change from 0 to 32768 [ 306.608698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.617419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.741301][T12194] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 306.741301][T12194] [ 306.796089][T12194] ERROR: (device loop3): remounting filesystem as read-only [ 306.820444][T12229] loop6: detected capacity change from 0 to 32768 [ 306.930204][T12194] non-latin1 character 0x3ff found in JFS file name [ 306.965659][T12194] mount with iocharset=utf8 to access [ 307.169405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 307.202161][T12268] loop2: detected capacity change from 0 to 256 [ 307.259055][T12268] exfat: Deprecated parameter 'namecase' [ 307.288394][T12268] exfat: Deprecated parameter 'utf8' [ 307.335414][T12268] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 307.618812][T12272] netlink: 'syz.6.2230': attribute type 3 has an invalid length. [ 307.783891][T12275] loop2: detected capacity change from 0 to 1024 [ 307.845571][T12275] syz.2.2231: attempt to access beyond end of device [ 307.845571][T12275] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 308.011489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 308.053874][T12261] loop7: detected capacity change from 0 to 32768 [ 308.074950][ T1324] hfsplus: b-tree write err: -5, ino 8 [ 308.158545][T12261] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.190814][T12291] loop3: detected capacity change from 0 to 2048 [ 308.259600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 308.292481][T12261] XFS (loop7): Ending clean mount [ 308.397781][T12291] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 308.581228][T12291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.590765][ T9327] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.731914][T12300] loop2: detected capacity change from 0 to 4096 [ 308.763495][T12300] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 308.891225][T12300] ntfs3(loop2): ino=19, mi_enum_attr [ 309.000121][T12300] ntfs3(loop2): failed to convert "c46c" to iso8859-2 [ 309.008802][T12300] ntfs3(loop2): ino=20, mi_enum_attr [ 309.106562][T12282] loop6: detected capacity change from 0 to 32768 [ 309.207759][T12282] JBD2: Ignoring recovery information on journal [ 309.398957][T12282] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 309.803298][T12307] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 309.850724][T12307] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x21 dinode [ 309.861317][T12307] XFS (loop2): Unmount and run xfs_repair [ 309.867027][T12307] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 309.874485][T12307] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 309.883413][T12307] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.892324][T12307] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 69 c5 80 b8 ..e.....4.Xhi... [ 309.901401][T12307] 00000030: 34 f7 58 68 69 c5 80 b8 00 00 00 00 00 00 00 00 4.Xhi........... [ 309.910476][T12307] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.920168][T12307] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 309.929209][T12307] 00000060: ff ff ff ff f6 31 a3 b2 00 00 00 00 00 00 00 02 .....1.......... [ 309.938892][T12307] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 309.947821][T12307] XFS (loop2): metadata inode 0x21 type 5 is corrupt [ 309.955157][T12307] XFS (loop2): failed to read RT inodes [ 309.961347][T12307] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 309.994734][T12282] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 310.040120][T12298] set_capacity_and_notify: 1 callbacks suppressed [ 310.040137][T12298] loop4: detected capacity change from 0 to 32768 [ 310.054441][T12282] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 310.066711][T12298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2239 (12298) [ 310.094900][T12282] OCFS2: File system is now read-only. [ 310.154404][T12282] (syz.6.2235,12282,1):ocfs2_trim_mainbm:7629 ERROR: status = -30 [ 310.298605][T12298] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.327992][T12298] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 310.508547][ T8910] ocfs2: Unmounting device (7,6) on (node local) [ 310.682888][T12298] BTRFS info (device loop4): enabling ssd optimizations [ 310.747567][T12298] BTRFS info (device loop4): turning on async discard [ 310.794678][T12298] BTRFS info (device loop4): enabling free space tree [ 311.181599][ T5840] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.203640][T12348] loop7: detected capacity change from 0 to 32768 [ 312.302390][ T30] audit: type=1800 audit(1763529081.950:77): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2251" name="file2" dev="loop7" ino=5 res=0 errno=0 [ 312.456834][ T5202] udevd[5202]: worker [11951] terminated by signal 33 (Unknown signal 33) [ 312.500166][ T5202] udevd[5202]: worker [11951] failed while handling '/devices/virtual/block/loop4' [ 312.666543][T12383] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2268'. [ 312.683773][T12355] loop3: detected capacity change from 0 to 32768 [ 312.731520][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2268'. [ 312.766712][T12355] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 312.801534][T12366] loop2: detected capacity change from 0 to 32768 [ 312.896817][T12366] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 312.916611][T12355] XFS (loop3): Ending clean mount [ 312.964453][T12355] XFS (loop3): Quotacheck needed: Please wait. [ 313.045594][T12366] XFS (loop2): Ending clean mount [ 313.063829][T12366] XFS (loop2): Quotacheck needed: Please wait. [ 313.064800][T12355] XFS (loop3): Quotacheck: Done. [ 313.177776][T12366] XFS (loop2): Quotacheck: Done. [ 313.234469][ T5834] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 313.280245][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 313.560780][T12422] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2279'. [ 313.610438][T12422] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 313.956011][T12438] loop7: detected capacity change from 0 to 512 [ 313.974367][T12440] loop4: detected capacity change from 0 to 256 [ 314.042216][T12438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.062047][T12440] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012064, chksum : 0xb4f3aa4f, utbl_chksum : 0xe619d30d) [ 314.078501][T12438] ext4 filesystem being mounted at /183/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.126313][T12438] EXT4-fs warning (device loop7): verify_group_input:156: Last group not full [ 314.188368][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 314.196427][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2286'. [ 314.223619][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2286'. [ 314.248626][T12445] netlink: 'syz.6.2286': attribute type 11 has an invalid length. [ 314.258565][T12445] netlink: 'syz.6.2286': attribute type 13 has an invalid length. [ 314.273505][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.701839][T12462] loop3: detected capacity change from 0 to 128 [ 314.715639][T12462] EXT4-fs: Ignoring removed orlov option [ 314.780255][T12462] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.810348][T12462] ext4 filesystem being mounted at /495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 315.074780][T12474] loop7: detected capacity change from 0 to 4096 [ 315.075662][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.175368][T12474] NILFS (loop7): invalid segment: Checksum error in segment payload [ 315.238939][T12474] NILFS (loop7): trying rollback from an earlier position [ 315.296398][T12474] NILFS (loop7): recovery complete [ 315.313982][T12484] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.351636][T12485] tipc: Started in network mode [ 315.373350][T12485] tipc: Node identity fc, cluster identity 4711 [ 315.382183][T12485] tipc: Enabling of bearer rejected, failed to enable media [ 315.395139][T12487] loop3: detected capacity change from 0 to 736 [ 315.608322][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 315.688091][T12495] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2309'. [ 315.702305][T12495] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 315.781161][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 315.819860][ T48] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.831534][T12501] loop7: detected capacity change from 0 to 1024 [ 315.850569][ T48] usb 3-1: config 179 has no interface number 0 [ 315.857593][ T48] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 315.870686][T12501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.902257][T12501] EXT4-fs: Ignoring removed bh option [ 315.903925][T12503] loop3: detected capacity change from 0 to 256 [ 315.925005][ T48] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 315.939910][ T48] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 315.952597][T12501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.954544][T12503] exfat: Deprecated parameter 'utf8' [ 315.978430][ T48] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 315.981652][T12503] exfat: Deprecated parameter 'utf8' [ 315.990330][ T48] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.990384][ T48] usb 3-1: config 179 interface 65 has no altsetting 0 [ 315.990425][ T48] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 315.990445][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.005607][ T48] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 316.066521][T12503] exfat: Deprecated parameter 'namecase' [ 316.076074][T12503] exFAT-fs (loop3): error, The cluster chain has a loop [ 316.083692][T12503] exFAT-fs (loop3): Filesystem has been set read-only [ 316.090794][T12503] exFAT-fs (loop3): failed to count the number of clusters in root [ 316.098895][T12503] exFAT-fs (loop3): failed to recognize exfat type [ 316.108642][ T5187] input input11: unable to receive magic message: -110 [ 316.183313][ T5187] input input11: unable to receive magic message: -32 [ 316.244390][ T5187] input input11: unable to receive magic message: -32 [ 316.326013][T12501] EXT4-fs: Ignoring removed orlov option [ 316.336601][ T5187] input input11: unable to receive magic message: -32 [ 316.339835][T12501] EXT4-fs (loop7): can't enable nombcache during remount [ 316.344618][ T5187] input input11: unable to receive magic message: -32 [ 316.347617][ T5187] input input11: unable to receive magic message: -32 [ 316.377160][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.499710][ T5886] usb 3-1: USB disconnect, device number 12 [ 316.499834][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 316.611224][T12516] loop3: detected capacity change from 0 to 512 [ 316.631233][T12516] EXT4-fs: Ignoring removed orlov option [ 316.650400][T12516] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 316.686792][T12516] EXT4-fs error (device loop3): ext4_iget_extra_inode:5079: inode #15: comm syz.3.2318: corrupted in-inode xattr: e_value size too large [ 316.717510][T12516] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2318: couldn't read orphan inode 15 (err -117) [ 316.745197][T12516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.832793][T12521] vlan2: entered promiscuous mode [ 316.844198][T12521] hsr0: entered promiscuous mode [ 316.869230][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.929170][T12523] veth1_macvtap: left promiscuous mode [ 316.934699][T12523] macsec0: entered promiscuous mode [ 316.951803][T12526] loop3: detected capacity change from 0 to 256 [ 316.967599][T12524] veth1_macvtap: entered promiscuous mode [ 316.971722][T12526] exfat: Deprecated parameter 'utf8' [ 316.976145][T12524] macsec0: left promiscuous mode [ 317.021354][T12526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 317.242786][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.254686][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.381517][T12532] loop7: detected capacity change from 0 to 4096 [ 317.406541][T12536] loop3: detected capacity change from 0 to 64 [ 317.448405][ T48] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 317.521754][T12538] syz.6.2328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 317.549057][ T5834] hfs: node 4:3 still has 1 user(s)! [ 317.586579][T12532] ntfs3(loop7): failed to convert "0080" to cp1250 [ 317.605468][T12532] ntfs3(loop7): failed to convert name for inode 1e. [ 317.621978][T12532] ntfs3(loop7): ino=1f, mi_enum_attr [ 317.627512][T12532] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 317.638683][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 317.656881][ T48] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 317.679108][ T48] usb 3-1: config 0 has no interface number 0 [ 317.685296][ T48] usb 3-1: config 0 interface 48 has no altsetting 0 [ 317.724703][ T48] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 317.757908][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.767267][ T48] usb 3-1: Product: syz [ 317.772711][ T48] usb 3-1: Manufacturer: syz [ 317.782840][ T48] usb 3-1: SerialNumber: syz [ 317.818472][T12544] loop6: detected capacity change from 0 to 256 [ 317.819584][ T48] usb 3-1: config 0 descriptor?? [ 317.903708][T12544] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 318.049379][T12552] loop7: detected capacity change from 0 to 512 [ 318.129615][T12552] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2334: inode has both inline data and extents flags [ 318.144454][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.155155][T12552] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2334: couldn't read orphan inode 15 (err -117) [ 318.171721][T12552] EXT4-fs (loop7): mounted filesystem 00000000-0000-007f-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.199698][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.239809][ T5848] Bluetooth: hci0: Unknown advertising packet type: 0x35 [ 318.239874][ T5848] Bluetooth: hci0: Malformed LE Event: 0x0d [ 318.253893][ T48] usb 3-1: USB disconnect, device number 13 [ 318.332158][ T9327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-007f-0000-000000000000. [ 319.035188][T12563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2338 (12563) [ 319.101542][T12563] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.134618][T12563] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 319.153226][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2352'. [ 319.379040][T12563] BTRFS info (device loop7): checking UUID tree [ 319.415256][T12563] BTRFS info (device loop7): setting nodatasum [ 319.429408][T12563] BTRFS info (device loop7): setting nodatacow [ 319.442522][T12563] BTRFS info (device loop7): turning off barriers [ 319.460857][T12563] BTRFS info (device loop7): turning on async discard [ 319.491558][T12563] BTRFS info (device loop7): enabling free space tree [ 319.518349][T12563] BTRFS info (device loop7): max_inline set to 4096 [ 319.690857][ T9327] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.911608][T12586] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 319.961575][ T48] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.047875][T12586] XFS (loop2): Ending clean mount [ 320.133380][T12586] XFS (loop2): Quotacheck needed: Please wait. [ 320.198410][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 320.225481][ T48] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 320.259733][ T48] usb 4-1: config 0 has no interface number 0 [ 320.265896][ T48] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 320.298446][T12586] XFS (loop2): Quotacheck: Done. [ 320.320386][ T48] usb 4-1: config 0 interface 96 has no altsetting 0 [ 320.340246][ T48] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 320.380776][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.403016][ T48] usb 4-1: Product: syz [ 320.407239][ T48] usb 4-1: Manufacturer: syz [ 320.416594][T12636] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2364'. [ 320.426472][ T48] usb 4-1: SerialNumber: syz [ 320.426735][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 320.436547][ T48] usb 4-1: config 0 descriptor?? [ 320.678671][ T48] usb 4-1: USB disconnect, device number 13 [ 320.930876][T12648] netlink: 'syz.4.2371': attribute type 1 has an invalid length. [ 321.101324][T12654] set_capacity_and_notify: 3 callbacks suppressed [ 321.101342][T12654] loop2: detected capacity change from 0 to 2048 [ 321.140038][T12660] loop6: detected capacity change from 0 to 128 [ 321.154452][T12654] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 321.188583][T12654] NILFS (loop2): mounting unchecked fs [ 321.261202][T12654] NILFS (loop2): recovery complete [ 321.296528][T12663] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.635843][T12677] veth1_macvtap: left promiscuous mode [ 321.641568][T12677] macsec0: entered promiscuous mode [ 321.646968][T12677] macsec0: entered allmulticast mode [ 321.661463][T12677] veth1_macvtap: entered promiscuous mode [ 321.667559][T12677] veth1_macvtap: entered allmulticast mode [ 321.673979][T12677] macsec0: left promiscuous mode [ 321.679435][T12677] macsec0: left allmulticast mode [ 321.684584][T12677] veth1_macvtap: left allmulticast mode [ 321.954206][T12685] loop4: detected capacity change from 0 to 512 [ 321.990037][T12685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 322.056758][T12685] EXT4-fs (loop4): 1 truncate cleaned up [ 322.087935][T12685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.195005][T12658] loop7: detected capacity change from 0 to 40427 [ 322.209048][ T30] audit: type=1800 audit(1763529091.850:78): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2387" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 322.268769][T12658] F2FS-fs (loop7): invalid crc value [ 322.374658][T12700] loop3: detected capacity change from 0 to 128 [ 322.429781][T12700] FAT-fs (loop3): bogus number of reserved sectors [ 322.436470][T12700] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 322.482423][T12700] FAT-fs (loop3): Can't find a valid FAT filesystem [ 322.544042][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.577042][T12658] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 322.647542][T12658] F2FS-fs (loop7): Start checkpoint disabled! [ 322.679321][T12658] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 322.729657][T12658] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 322.749550][ T5909] kernel write not supported for file /sequencer (pid: 5909 comm: kworker/0:5) [ 322.979784][T12695] loop2: detected capacity change from 0 to 32768 [ 323.123905][ T114] read_mapping_page failed! [ 323.321329][ T5848] Bluetooth: hci3: unexpected event for opcode 0x080b [ 323.556235][T12728] loop3: detected capacity change from 0 to 128 [ 323.583070][T12730] loop6: detected capacity change from 0 to 128 [ 323.614662][T12730] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 323.648480][T12730] hpfs: filesystem error: improperly stopped [ 323.685379][T12730] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 323.725921][T12730] hpfs: You really don't want any checks? You are crazy... [ 323.758988][T12730] hpfs: hpfs_map_sector(): read error [ 323.798659][T12730] hpfs: code page support is disabled [ 323.804195][T12730] hpfs: hpfs_map_4sectors(): unaligned read [ 323.839508][T12730] hpfs: hpfs_map_4sectors(): unaligned read [ 323.845548][T12730] hpfs: filesystem error: unable to find root dir [ 324.485138][T12740] loop3: detected capacity change from 0 to 32768 [ 324.506689][T12740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2412 (12740) [ 324.535314][T12755] loop2: detected capacity change from 0 to 16 [ 324.558020][T12740] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.570117][T12755] erofs (device loop2): mounted with root inode @ nid 36. [ 324.581596][T12740] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 324.749251][T12740] BTRFS info (device loop3): enabling ssd optimizations [ 324.760602][T12740] BTRFS info (device loop3): turning on async discard [ 324.785372][T12740] BTRFS info (device loop3): enabling free space tree [ 324.948982][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.787247][T12784] find_entry called with index >= next_index [ 325.815518][T12784] find_entry called with index >= next_index [ 325.846357][T12784] find_entry called with index >= next_index [ 326.517409][T12811] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2438'. [ 326.751791][T12816] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2440'. [ 326.790021][T12796] syz.3.2431 (12796): drop_caches: 2 [ 327.173397][T12809] set_capacity_and_notify: 1 callbacks suppressed [ 327.173414][T12809] loop2: detected capacity change from 0 to 40427 [ 327.226870][T12809] F2FS-fs (loop2): invalid crc value [ 327.280744][T12838] loop6: detected capacity change from 0 to 512 [ 327.364147][T12809] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 327.364152][T12838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 327.364365][T12838] System zones: [ 327.387945][T12809] F2FS-fs (loop2): Start checkpoint disabled! [ 327.415213][T12838] 1-12 [ 327.424352][T12838] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.2450: Directory hole found for htree index block 0 [ 327.451396][T12809] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 327.463313][T12809] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 327.488898][T12838] EXT4-fs (loop6): Remounting filesystem read-only [ 327.505180][T12838] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 327.525414][T12838] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 327.549833][T12838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.659077][T12809] F2FS-fs (loop2): Skipping Checkpoint. Checkpoints currently disabled. [ 327.752801][ T8910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.801403][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 327.981600][ T5886] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 328.000124][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.035416][ T5886] usb 4-1: config 0 descriptor?? [ 328.098571][T12858] vlan2: entered promiscuous mode [ 328.111537][T12858] geneve1: entered promiscuous mode [ 328.125008][T12858] vlan2: entered allmulticast mode [ 328.134841][T12858] geneve1: entered allmulticast mode [ 328.232714][T12860] loop2: detected capacity change from 0 to 16 [ 328.271858][T12860] erofs (device loop2): mounted with root inode @ nid 36. [ 328.272390][ T5886] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 328.472435][ T5886] [drm:udl_init] *ERROR* Selecting channel failed [ 328.532082][ T5886] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 328.573520][ T5886] [drm] Initialized udl on minor 2 [ 328.599803][ T5886] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 328.618561][ T5886] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 328.631691][ T9228] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 328.645069][ T5886] usb 4-1: USB disconnect, device number 14 [ 328.653410][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 328.663731][ T9228] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 328.674273][ T30] audit: type=1326 audit(1763529098.330:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.7.2465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86ad18f6c9 code=0x0 [ 329.031079][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2473'. [ 329.556782][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2484'. [ 329.566192][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 329.664995][T12917] netlink: 'syz.2.2487': attribute type 4 has an invalid length. [ 329.673546][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'. [ 329.681477][ T5886] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 329.708510][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 329.715462][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.738382][ T5909] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 329.756915][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.775463][ T5909] usb 4-1: config 0 descriptor?? [ 329.848492][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 329.855343][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.866533][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.876654][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.890462][ T5886] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.899770][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.911493][ T5886] usb 7-1: config 0 descriptor?? [ 330.193297][T12923] loop2: detected capacity change from 0 to 32768 [ 330.199160][ T5909] elo 0003:04E7:0009.0015: unknown main item tag 0x1 [ 330.218800][ T5909] elo 0003:04E7:0009.0015: item fetching failed at offset 4/5 [ 330.220904][T12923] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2490 (12923) [ 330.228174][ T5909] elo 0003:04E7:0009.0015: parse failed [ 330.248946][ T5909] elo 0003:04E7:0009.0015: probe with driver elo failed with error -22 [ 330.254932][T12923] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 330.281821][T12923] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 330.337108][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.348700][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.356975][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.366564][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.375659][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.385508][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.433655][T12923] BTRFS info (device loop2): enabling ssd optimizations [ 330.440959][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.465539][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.473123][T12923] BTRFS info (device loop2): turning on async discard [ 330.480499][ T5886] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 330.485171][ T903] usb 4-1: USB disconnect, device number 15 [ 330.493808][T12923] BTRFS info (device loop2): enabling free space tree [ 330.493834][T12923] BTRFS info (device loop2): use zstd compression, level 3 [ 330.542663][ T5886] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0016/input/input14 [ 330.697012][ T5886] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 330.723761][ T5829] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 330.759956][ T5886] usb 7-1: USB disconnect, device number 6 [ 330.815352][T12940] fido_id[12940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 330.922781][ T12] wlan1: Trigger new scan to find an IBSS to join [ 331.296683][T12950] loop6: detected capacity change from 0 to 128 [ 331.342815][T12950] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 331.380042][T12950] hpfs: filesystem error: improperly stopped [ 331.409812][T12950] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 331.436218][T12950] hpfs: You really don't want any checks? You are crazy... [ 331.497622][T12950] hpfs: hpfs_map_sector(): read error [ 331.533816][T12950] hpfs: code page support is disabled [ 331.549669][T12950] hpfs: hpfs_map_4sectors(): unaligned read [ 331.565999][T12950] hpfs: hpfs_map_4sectors(): unaligned read [ 331.576220][T12950] hpfs: filesystem error: unable to find root dir [ 331.634641][T12950] hpfs: hpfs_map_4sectors(): unaligned read [ 331.723696][T12965] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2502'. [ 331.734017][T12965] netlink: 'syz.4.2502': attribute type 9 has an invalid length. [ 331.753558][T12965] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2502'. [ 331.778784][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2502'. [ 331.908513][ T5996] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 332.036276][T12956] loop3: detected capacity change from 0 to 40427 [ 332.061710][ T5886] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 332.072376][ T5996] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.087203][T12956] F2FS-fs (loop3): invalid crc value [ 332.089585][ T5996] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.101418][ T5996] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 332.113642][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.124912][ T5996] usb 3-1: config 0 descriptor?? [ 332.240601][ T5886] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 332.247279][T12956] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 332.258538][ T5886] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 332.280667][T12956] F2FS-fs (loop3): Start checkpoint disabled! [ 332.289428][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 332.299974][T12956] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 332.306514][ T5886] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 332.319286][T12956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 332.327707][T12969] loop4: detected capacity change from 0 to 32768 [ 332.339347][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.344042][T12969] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2504 (12969) [ 332.383060][T12969] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 332.383312][ T5886] usb 7-1: config 0 descriptor?? [ 332.394588][T12969] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 332.411458][T12967] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 332.419590][T12967] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 332.455031][ T3004] kworker/u8:9: attempt to access beyond end of device [ 332.455031][ T3004] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.471883][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 332.471905][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.471913][ T3004] Workqueue: writeback wb_workfn (flush-7:3) [ 332.471936][ T3004] Call Trace: [ 332.471942][ T3004] [ 332.471948][ T3004] dump_stack_lvl+0x189/0x250 [ 332.471971][ T3004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.471988][ T3004] ? __pfx_queue_work_on+0x10/0x10 [ 332.472005][ T3004] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 332.472023][ T3004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.472048][ T3004] f2fs_handle_critical_error+0x37c/0x540 [ 332.472077][ T3004] f2fs_write_end_io+0x94b/0xc10 [ 332.472108][ T3004] __submit_merged_bio+0x256/0x6a0 [ 332.472127][ T3004] __submit_merged_write_cond+0x255/0x530 [ 332.472147][ T3004] f2fs_write_data_pages+0x2756/0x3290 [ 332.472189][ T3004] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 332.472215][ T3004] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 332.472260][ T3004] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 332.472286][ T3004] ? trace_f2fs_writepages+0x7f/0x200 [ 332.472301][ T3004] ? f2fs_write_node_pages+0x478/0x6e0 [ 332.472318][ T3004] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 332.472342][ T3004] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 332.472359][ T3004] do_writepages+0x32e/0x550 [ 332.472376][ T3004] ? reacquire_held_locks+0x127/0x1d0 [ 332.472394][ T3004] ? writeback_sb_inodes+0x3bc/0x1950 [ 332.472424][ T3004] __writeback_single_inode+0x133/0x12f0 [ 332.472447][ T3004] writeback_sb_inodes+0x984/0x1950 [ 332.472487][ T3004] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 332.472537][ T3004] ? rcu_is_watching+0x15/0xb0 [ 332.472557][ T3004] wb_writeback+0x42b/0xb10 [ 332.472580][ T3004] ? queue_io+0x361/0x590 [ 332.472598][ T3004] ? __pfx_wb_writeback+0x10/0x10 [ 332.472621][ T3004] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.472643][ T3004] wb_workfn+0x3f9/0xef0 [ 332.472669][ T3004] ? __pfx_wb_workfn+0x10/0x10 [ 332.472687][ T3004] ? __lock_acquire+0xab9/0xd20 [ 332.472712][ T3004] ? process_one_work+0x868/0x15e0 [ 332.472734][ T3004] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.472753][ T3004] ? process_one_work+0x868/0x15e0 [ 332.472768][ T3004] process_one_work+0x93a/0x15e0 [ 332.472783][ T3004] ? __lock_acquire+0xab9/0xd20 [ 332.472816][ T3004] ? __pfx_process_one_work+0x10/0x10 [ 332.472840][ T3004] ? assign_work+0x3a1/0x410 [ 332.472860][ T3004] worker_thread+0x9b0/0xee0 [ 332.472899][ T3004] kthread+0x711/0x8a0 [ 332.472915][ T3004] ? __pfx_worker_thread+0x10/0x10 [ 332.472932][ T3004] ? __pfx_kthread+0x10/0x10 [ 332.472946][ T3004] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.472964][ T3004] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.472981][ T3004] ? __pfx_kthread+0x10/0x10 [ 332.472996][ T3004] ret_from_fork+0x599/0xb30 [ 332.473016][ T3004] ? __pfx_ret_from_fork+0x10/0x10 [ 332.473042][ T3004] ? __switch_to_asm+0x39/0x70 [ 332.473053][ T3004] ? __switch_to_asm+0x33/0x70 [ 332.473064][ T3004] ? __pfx_kthread+0x10/0x10 [ 332.473124][ T3004] ret_from_fork_asm+0x1a/0x30 [ 332.473151][ T3004] [ 332.473187][ T3004] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 332.802516][ T5996] kye 0003:0458:501B.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 332.803359][T12969] BTRFS info (device loop4): enabling ssd optimizations [ 332.817703][ T5996] kye 0003:0458:501B.0017: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 332.831172][ T5996] kye 0003:0458:501B.0017: tablet-enabling feature report not found [ 332.839390][ T5996] kye 0003:0458:501B.0017: tablet enabling failed [ 332.853142][ T5996] usb 3-1: USB disconnect, device number 14 [ 332.887354][T12969] BTRFS info (device loop4): turning on async discard [ 332.897458][T12969] BTRFS info (device loop4): enabling free space tree [ 332.950828][ T5886] logitech 0003:046D:CA03.0018: hidraw0: USB HID v0.47 Device [HID 046d:ca03] on usb-dummy_hcd.6-1/input0 [ 332.989493][ T5886] logitech 0003:046D:CA03.0018: no inputs found [ 333.048565][T12989] fido_id[12989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 333.215026][ T5840] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 333.256485][ T5996] usb 7-1: USB disconnect, device number 7 [ 333.302387][T12992] fido_id[12992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 333.917028][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 333.952070][ T1324] wlan1: Trigger new scan to find an IBSS to join [ 334.091476][T13008] loop3: detected capacity change from 0 to 4096 [ 334.176164][T13014] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.894051][ T12] wlan1: Creating new IBSS network, BSSID c6:9a:f3:a2:f8:a7 [ 335.197242][T13053] loop3: detected capacity change from 0 to 128 [ 335.232190][T13053] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 335.282899][T13053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.321431][ T5847] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 335.425143][T13060] loop4: detected capacity change from 0 to 128 [ 335.485678][T13060] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 335.585963][T13060] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 335.586029][T13060] FAT-fs (loop4): Filesystem has been set read-only [ 335.802668][T13073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2543'. [ 335.812356][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 336.022344][T13078] loop4: detected capacity change from 0 to 1024 [ 336.055827][T13078] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 336.111743][T13078] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.2545: lblock 2 mapped to illegal pblock 2 (length 1) [ 336.132004][T13078] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 336.149241][T13078] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.2545: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.198551][T13088] loop3: detected capacity change from 0 to 256 [ 336.249950][T13078] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 336.298748][T13078] EXT4-fs error (device loop4): ext4_acquire_dquot:6948: comm syz.4.2545: Failed to acquire dquot type 0 [ 336.379856][T13078] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6316: Corrupt filesystem [ 336.407703][T13097] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2552'. [ 336.421552][T13078] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.2545: mark_inode_dirty error [ 336.442977][T13078] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 336.454894][ T48] kernel read not supported for file /comedi4 (pid: 48 comm: kworker/1:1) [ 336.484255][T13078] EXT4-fs (loop4): 1 orphan inode deleted [ 336.485400][T13092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2552'. [ 336.516978][ T6900] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.541105][T13078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.591429][ T6900] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 336.605221][ T6900] EXT4-fs error (device loop4): ext4_release_dquot:6984: comm kworker/u8:19: Failed to release dquot type 0 [ 336.757043][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.793727][T13109] loop3: detected capacity change from 0 to 512 [ 336.803923][ T6900] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.846969][ T6900] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 336.857997][T13109] EXT4-fs (loop3): orphan cleanup on readonly fs [ 336.907010][T13109] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2559: error while reading EA inode 32 err=-116 [ 336.926371][T13109] EXT4-fs (loop3): Remounting filesystem read-only [ 336.929455][ T6900] EXT4-fs error (device loop4): ext4_release_dquot:6984: comm kworker/u8:19: Failed to release dquot type 0 [ 336.933226][T13109] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 336.979960][T13109] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 337.028681][T13109] EXT4-fs (loop3): 1 orphan inode deleted [ 337.031706][ T5840] EXT4-fs error (device loop4): __ext4_get_inode_loc:4836: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 337.036064][T13109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 337.068014][ T5840] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6316: Corrupt filesystem [ 337.107309][ T5840] EXT4-fs error (device loop4): ext4_quota_off:7232: inode #3: comm syz-executor: mark_inode_dirty error [ 337.313562][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.570394][T13138] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 337.600287][T13138] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 337.606834][T13138] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 337.630277][T13138] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 337.636875][T13138] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 337.665936][T13138] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 337.699230][T13138] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 337.712772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.763231][T13138] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 337.783581][T13138] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 337.820792][T13138] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 337.823630][T13148] IPVS: stopping backup sync thread 11122 ... [ 337.849437][T13138] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 337.873040][T13138] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 337.882703][T13150] loop3: detected capacity change from 0 to 128 [ 337.924477][T13138] comedi comedi3: 8255: I/O port conflict (0x61,4) [ 337.971615][T13138] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 337.996629][T13138] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 338.023602][T13138] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 338.086138][T13138] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 338.128722][T13138] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 338.135262][T13138] comedi comedi3: 8255: I/O port conflict (0xc0,4) [ 338.195250][T13138] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 338.218649][T13138] comedi comedi3: 8255: I/O port conflict (0x2000e69,4) [ 338.228369][T13138] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 338.248417][T13138] comedi comedi3: 8255: I/O port conflict (0x80008,4) [ 338.264399][T13138] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 338.709407][T13154] loop7: detected capacity change from 0 to 32768 [ 338.763834][ T5996] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 338.928711][ T5996] usb 3-1: Using ep0 maxpacket: 32 [ 338.950638][ T5996] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 338.966601][ T5996] usb 3-1: config 0 has no interface number 0 [ 338.986126][ T5996] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 339.004613][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.021132][ T5996] usb 3-1: Product: syz [ 339.028858][ T5996] usb 3-1: Manufacturer: syz [ 339.034086][T13180] loop3: detected capacity change from 0 to 1024 [ 339.035954][ T5996] usb 3-1: SerialNumber: syz [ 339.050266][ T5996] usb 3-1: config 0 descriptor?? [ 339.065779][ T5996] smsc95xx v2.0.0 [ 339.075636][T13168] loop6: detected capacity change from 0 to 32768 [ 339.101223][T13180] hfsplus: bad catalog entry type [ 339.106372][T13168] ================================================================== [ 339.106393][T13168] BUG: KASAN: slab-use-after-free in dtSearch+0x1683/0x21b0 [ 339.121743][T13168] Read of size 1 at addr ffff888055beab90 by task syz.6.2589/13168 [ 339.129648][T13168] [ 339.131997][T13168] CPU: 0 UID: 0 PID: 13168 Comm: syz.6.2589 Not tainted syzkaller #0 PREEMPT(full) [ 339.132022][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.132033][T13168] Call Trace: [ 339.132041][T13168] [ 339.132049][T13168] dump_stack_lvl+0x189/0x250 [ 339.132077][T13168] ? __kasan_check_byte+0x12/0x40 [ 339.132100][T13168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.132123][T13168] ? lock_release+0x4b/0x3d0 [ 339.132149][T13168] ? __virt_addr_valid+0x4a5/0x5c0 [ 339.132168][T13168] print_report+0xca/0x240 [ 339.132188][T13168] ? dtSearch+0x1683/0x21b0 [ 339.132211][T13168] kasan_report+0x118/0x150 [ 339.132239][T13168] ? dtSearch+0x1683/0x21b0 [ 339.132266][T13168] dtSearch+0x1683/0x21b0 [ 339.132296][T13168] ? __kmalloc_noprof+0x43e/0x800 [ 339.132323][T13168] jfs_lookup+0x155/0x380 [ 339.132341][T13168] ? __pfx_jfs_lookup+0x10/0x10 [ 339.132354][T13168] ? d_alloc_parallel+0x14ac/0x1610 [ 339.132380][T13168] ? __lock_acquire+0xab9/0xd20 [ 339.132400][T13168] ? __pfx_d_alloc_parallel+0x10/0x10 [ 339.132419][T13168] ? __raw_spin_lock_init+0x45/0x100 [ 339.132438][T13168] ? __init_waitqueue_head+0xa9/0x150 [ 339.132458][T13168] __lookup_slow+0x297/0x3d0 [ 339.132475][T13168] ? __pfx___lookup_slow+0x10/0x10 [ 339.132497][T13168] ? down_read+0x1ad/0x2e0 [ 339.132514][T13168] lookup_slow+0x53/0x70 [ 339.132530][T13168] walk_component+0x2d2/0x400 [ 339.132546][T13168] ? path_lookupat+0x156/0x430 [ 339.132570][T13168] path_lookupat+0x163/0x430 [ 339.132594][T13168] filename_lookup+0x212/0x570 [ 339.132618][T13168] ? __pfx_filename_lookup+0x10/0x10 [ 339.132652][T13168] ? strncpy_from_user+0x150/0x2c0 [ 339.132675][T13168] ? getname_flags+0x1e5/0x540 [ 339.132699][T13168] user_path_at+0x3a/0x60 [ 339.132715][T13168] __se_sys_chdir+0x91/0x280 [ 339.132734][T13168] ? __pfx___se_sys_chdir+0x10/0x10 [ 339.132755][T13168] ? do_syscall_64+0xbe/0xfa0 [ 339.132778][T13168] do_syscall_64+0xfa/0xfa0 [ 339.132800][T13168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.132816][T13168] ? clear_bhb_loop+0x60/0xb0 [ 339.132835][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.132851][T13168] RIP: 0033:0x7fdd5c78f6c9 [ 339.132868][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.132884][T13168] RSP: 002b:00007fdd5d62e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 339.132903][T13168] RAX: ffffffffffffffda RBX: 00007fdd5c9e5fa0 RCX: 00007fdd5c78f6c9 [ 339.132917][T13168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 339.132930][T13168] RBP: 00007fdd5c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.132941][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.132953][T13168] R13: 00007fdd5c9e6038 R14: 00007fdd5c9e5fa0 R15: 00007ffd46fe3e28 [ 339.132975][T13168] [ 339.132981][T13168] [ 339.416258][T13168] Allocated by task 12695: [ 339.420782][T13168] kasan_save_track+0x3e/0x80 [ 339.425455][T13168] __kasan_slab_alloc+0x6c/0x80 [ 339.430293][T13168] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 339.436092][T13168] jfs_alloc_inode+0x28/0x70 [ 339.440667][T13168] alloc_inode+0x6a/0x1b0 [ 339.444980][T13168] new_inode+0x22/0x170 [ 339.449122][T13168] jfs_fill_super+0x569/0xd80 [ 339.453785][T13168] get_tree_bdev_flags+0x40e/0x4d0 [ 339.458888][T13168] vfs_get_tree+0x92/0x2b0 [ 339.463296][T13168] do_new_mount+0x302/0xa10 [ 339.467833][T13168] __se_sys_mount+0x313/0x410 [ 339.472496][T13168] do_syscall_64+0xfa/0xfa0 [ 339.476989][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.482864][T13168] [ 339.485198][T13168] Freed by task 12: [ 339.488984][T13168] kasan_save_track+0x3e/0x80 [ 339.493646][T13168] kasan_save_free_info+0x46/0x50 [ 339.498651][T13168] __kasan_slab_free+0x5c/0x80 [ 339.503401][T13168] kmem_cache_free+0x197/0x640 [ 339.508151][T13168] rcu_core+0xcab/0x1770 [ 339.512391][T13168] handle_softirqs+0x27d/0x880 [ 339.517185][T13168] do_softirq+0xec/0x180 [ 339.521434][T13168] __local_bh_enable_ip+0x17d/0x1c0 [ 339.526633][T13168] nsim_dev_trap_report_work+0x7c7/0xb80 [ 339.532256][T13168] process_one_work+0x93a/0x15e0 [ 339.537200][T13168] worker_thread+0x9b0/0xee0 [ 339.541776][T13168] kthread+0x711/0x8a0 [ 339.545832][T13168] ret_from_fork+0x599/0xb30 [ 339.550408][T13168] ret_from_fork_asm+0x1a/0x30 [ 339.555157][T13168] [ 339.557462][T13168] Last potentially related work creation: [ 339.563159][T13168] kasan_save_stack+0x3e/0x60 [ 339.567822][T13168] kasan_record_aux_stack+0xbd/0xd0 [ 339.573001][T13168] call_rcu+0x157/0x9c0 [ 339.577144][T13168] evict+0x931/0xae0 [ 339.581023][T13168] jfs_put_super+0x148/0x190 [ 339.585689][T13168] generic_shutdown_super+0x135/0x2c0 [ 339.591133][T13168] kill_block_super+0x44/0x90 [ 339.595796][T13168] deactivate_locked_super+0xbc/0x130 [ 339.601150][T13168] cleanup_mnt+0x425/0x4c0 [ 339.605548][T13168] task_work_run+0x1d4/0x260 [ 339.610214][T13168] exit_to_user_mode_loop+0xff/0x4f0 [ 339.615495][T13168] do_syscall_64+0x2e9/0xfa0 [ 339.620076][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.625956][T13168] [ 339.628261][T13168] The buggy address belongs to the object at ffff888055bea4a0 [ 339.628261][T13168] which belongs to the cache jfs_ip of size 2216 [ 339.641953][T13168] The buggy address is located 1776 bytes inside of [ 339.641953][T13168] freed 2216-byte region [ffff888055bea4a0, ffff888055bead48) [ 339.656095][T13168] [ 339.658419][T13168] The buggy address belongs to the physical page: [ 339.664835][T13168] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55be8 [ 339.673757][T13168] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 339.682244][T13168] memcg:ffff888033dfe301 [ 339.686468][T13168] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 339.694020][T13168] page_type: f5(slab) [ 339.697986][T13168] raw: 00fff00000000040 ffff888143e853c0 dead000000000122 0000000000000000 [ 339.706555][T13168] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff888033dfe301 [ 339.715132][T13168] head: 00fff00000000040 ffff888143e853c0 dead000000000122 0000000000000000 [ 339.723791][T13168] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff888033dfe301 [ 339.732453][T13168] head: 00fff00000000003 ffffea000156fa01 00000000ffffffff 00000000ffffffff [ 339.741116][T13168] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 339.749769][T13168] page dumped because: kasan: bad access detected [ 339.756254][T13168] page_owner tracks the page as allocated [ 339.761996][T13168] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9251, tgid 9250 (syz.5.1146), ts 208666721361, free_ts 22224820342 [ 339.784300][T13168] post_alloc_hook+0x234/0x290 [ 339.789061][T13168] get_page_from_freelist+0x2365/0x2440 [ 339.794596][T13168] __alloc_frozen_pages_noprof+0x181/0x370 [ 339.800389][T13168] alloc_pages_mpol+0x232/0x4a0 [ 339.805230][T13168] allocate_slab+0x86/0x3b0 [ 339.809713][T13168] ___slab_alloc+0xf56/0x1990 [ 339.814381][T13168] __slab_alloc+0x65/0x100 [ 339.818787][T13168] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 339.824583][T13168] jfs_alloc_inode+0x28/0x70 [ 339.829164][T13168] alloc_inode+0x6a/0x1b0 [ 339.833486][T13168] iget_locked+0x135/0x6c0 [ 339.837885][T13168] jfs_iget+0x24/0x470 [ 339.841943][T13168] jfs_lookup+0x1c5/0x380 [ 339.846259][T13168] __lookup_slow+0x297/0x3d0 [ 339.850835][T13168] lookup_slow+0x53/0x70 [ 339.855151][T13168] walk_component+0x2d2/0x400 [ 339.859811][T13168] page last free pid 1 tgid 1 stack trace: [ 339.865684][T13168] __free_frozen_pages+0xbc8/0xd30 [ 339.870782][T13168] free_contig_range+0x1bd/0x4a0 [ 339.875710][T13168] destroy_args+0x69/0x660 [ 339.880113][T13168] debug_vm_pgtable+0x38f/0x3a0 [ 339.884948][T13168] do_one_initcall+0x1fb/0x870 [ 339.889699][T13168] do_initcall_level+0x104/0x190 [ 339.894626][T13168] do_initcalls+0x59/0xa0 [ 339.898951][T13168] kernel_init_freeable+0x334/0x4b0 [ 339.904146][T13168] kernel_init+0x1d/0x1d0 [ 339.908477][T13168] ret_from_fork+0x599/0xb30 [ 339.913105][T13168] ret_from_fork_asm+0x1a/0x30 [ 339.917863][T13168] [ 339.920172][T13168] Memory state around the buggy address: [ 339.925790][T13168] ffff888055beaa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.933840][T13168] ffff888055beab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.941887][T13168] >ffff888055beab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.949933][T13168] ^ [ 339.954512][T13168] ffff888055beac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.962558][T13168] ffff888055beac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.970599][T13168] ================================================================== [ 340.008564][T13168] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 340.015818][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.6.2589 Not tainted syzkaller #0 PREEMPT(full) [ 340.025204][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.035448][T13168] Call Trace: [ 340.038741][T13168] [ 340.041681][T13168] dump_stack_lvl+0x99/0x250 [ 340.046295][T13168] ? __asan_memcpy+0x40/0x70 [ 340.050904][T13168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.056126][T13168] ? __pfx__printk+0x10/0x10 [ 340.060741][T13168] vpanic+0x237/0x6d0 [ 340.064732][T13168] ? __pfx_vpanic+0x10/0x10 [ 340.069269][T13168] ? preempt_schedule+0xae/0xc0 [ 340.074120][T13168] ? __pfx_preempt_schedule+0x10/0x10 [ 340.079493][T13168] panic+0xb9/0xc0 [ 340.083298][T13168] ? __pfx_panic+0x10/0x10 [ 340.087737][T13168] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 340.093642][T13168] ? dtSearch+0x1683/0x21b0 [ 340.098150][T13168] check_panic_on_warn+0x89/0xb0 [ 340.103078][T13168] ? dtSearch+0x1683/0x21b0 [ 340.107575][T13168] end_report+0x6f/0x160 [ 340.111811][T13168] kasan_report+0x129/0x150 [ 340.116312][T13168] ? dtSearch+0x1683/0x21b0 [ 340.120814][T13168] dtSearch+0x1683/0x21b0 [ 340.125147][T13168] ? __kmalloc_noprof+0x43e/0x800 [ 340.130198][T13168] jfs_lookup+0x155/0x380 [ 340.134527][T13168] ? __pfx_jfs_lookup+0x10/0x10 [ 340.139375][T13168] ? d_alloc_parallel+0x14ac/0x1610 [ 340.144577][T13168] ? __lock_acquire+0xab9/0xd20 [ 340.149434][T13168] ? __pfx_d_alloc_parallel+0x10/0x10 [ 340.154800][T13168] ? __raw_spin_lock_init+0x45/0x100 [ 340.160098][T13168] ? __init_waitqueue_head+0xa9/0x150 [ 340.165498][T13168] __lookup_slow+0x297/0x3d0 [ 340.170085][T13168] ? __pfx___lookup_slow+0x10/0x10 [ 340.175244][T13168] ? down_read+0x1ad/0x2e0 [ 340.179650][T13168] lookup_slow+0x53/0x70 [ 340.183969][T13168] walk_component+0x2d2/0x400 [ 340.188636][T13168] ? path_lookupat+0x156/0x430 [ 340.193400][T13168] path_lookupat+0x163/0x430 [ 340.198001][T13168] filename_lookup+0x212/0x570 [ 340.202781][T13168] ? __pfx_filename_lookup+0x10/0x10 [ 340.208090][T13168] ? strncpy_from_user+0x150/0x2c0 [ 340.213207][T13168] ? getname_flags+0x1e5/0x540 [ 340.217986][T13168] user_path_at+0x3a/0x60 [ 340.222325][T13168] __se_sys_chdir+0x91/0x280 [ 340.226908][T13168] ? __pfx___se_sys_chdir+0x10/0x10 [ 340.232113][T13168] ? do_syscall_64+0xbe/0xfa0 [ 340.236887][T13168] do_syscall_64+0xfa/0xfa0 [ 340.241394][T13168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.247455][T13168] ? clear_bhb_loop+0x60/0xb0 [ 340.252125][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.258252][T13168] RIP: 0033:0x7fdd5c78f6c9 [ 340.262665][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.282265][T13168] RSP: 002b:00007fdd5d62e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 340.290685][T13168] RAX: ffffffffffffffda RBX: 00007fdd5c9e5fa0 RCX: 00007fdd5c78f6c9 [ 340.298651][T13168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 340.306624][T13168] RBP: 00007fdd5c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 340.314586][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.322546][T13168] R13: 00007fdd5c9e6038 R14: 00007fdd5c9e5fa0 R15: 00007ffd46fe3e28 [ 340.330576][T13168] [ 340.334057][T13168] Kernel Offset: disabled [ 340.338368][T13168] Rebooting in 86400 seconds..