last executing test programs: 4m7.501580111s ago: executing program 2 (id=205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname$unix(r0, 0x0, &(0x7f0000000180)) 4m7.289899434s ago: executing program 2 (id=207): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4m6.652512395s ago: executing program 2 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m6.505493507s ago: executing program 2 (id=218): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 4m5.087728548s ago: executing program 2 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x18ccf0, 0x0) 4m3.972797876s ago: executing program 2 (id=242): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@delchain={0x474, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0xfffffff9, 0xffffffff, 0x7bf, {0x8, 0x0, 0x2, 0x30, 0x9, 0x6}, {0x3, 0x1, 0x29, 0x2, 0x101, 0x7}, 0x3, 0x9, 0x4064}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x3c70, 0x7fffffff, 0x42d, 0x8, 0xfffffffc, 0x6, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x101, 0x16ae, 0x0, 0x4, 0x3, 0x0, 0x3, 0x59a72dbb, 0x10, 0xfffffffa, 0x4, 0x1, 0x9300, 0x0, 0x0, 0x7, 0xea, 0x4, 0x8, 0x7, 0x7, 0x1, 0x5e, 0x7, 0x1, 0x1ff, 0x5, 0x8, 0xfffff001, 0x96, 0x6d, 0x6, 0xe879, 0x6, 0x3, 0x4, 0x9, 0x5, 0x9, 0xf6f, 0x3, 0x1, 0x0, 0x95, 0x7fba, 0x3a729f5c, 0x7, 0x1, 0xb, 0x7, 0x8001, 0x8, 0x6, 0x1, 0x9, 0x4, 0x7, 0xc2e, 0x5, 0x9, 0x0, 0x0, 0xd3, 0x40, 0x6, 0xc621, 0x354, 0x7f, 0x7, 0xfffffba2, 0x8, 0x7, 0x80000001, 0x7, 0x6, 0xd, 0x2, 0x0, 0x80000000, 0x6, 0x7a, 0x4, 0x8, 0x7fffffff, 0xd1, 0x3, 0x10, 0xffffffff, 0x10001, 0x4, 0x8fbc, 0x7, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x7, 0x2, 0x2, 0x80000000, 0x0, 0x10, 0x7, 0x9e, 0x5, 0x8000, 0x1, 0x9, 0x4, 0x1ff, 0xb51, 0x7, 0x81, 0x0, 0x6, 0x543a, 0x0, 0xd87, 0x41a09a69, 0x4, 0xa, 0x865e, 0x5, 0x4, 0x400, 0x7, 0x400, 0x7, 0x7, 0x5, 0xe6, 0x80000000, 0x6, 0x9, 0x3, 0x7fffffff, 0xe, 0x5, 0xd9, 0xfff, 0x81, 0x1, 0x9, 0x98, 0x7, 0x2, 0x1, 0x7f61f97b, 0x7, 0x2b1, 0x10001, 0x46, 0x4, 0x401, 0x0, 0x13b, 0xfffffffe, 0x910, 0xca22, 0x4, 0x401, 0x0, 0xffffffff, 0x9, 0x4, 0x400, 0x10, 0x1, 0x7, 0x8, 0x80, 0x8, 0x3, 0x4, 0x2, 0x0, 0x7, 0x7f, 0x3df, 0xfc4, 0x5, 0x7, 0x2, 0x8, 0x1, 0x5, 0x80000001, 0x9, 0x9, 0x6, 0x5, 0x7, 0x4f, 0x0, 0x9, 0x6, 0x7fffffff, 0xc5, 0x9, 0x3, 0x85a, 0x3, 0x2a28, 0x3, 0x33, 0x100, 0x3, 0x3, 0x7ff, 0x6, 0xf8a, 0x4, 0x7, 0x101, 0x8, 0x4321, 0x81, 0x42e, 0x4, 0x7, 0x52, 0x3f2c, 0x6, 0x3, 0x9, 0xff, 0x203, 0xa88, 0x5680, 0x0, 0x2a8d, 0x2, 0xf, 0x5, 0x9, 0x5, 0x100, 0x7, 0x2, 0xf2ba]}]}]}}]}, 0x474}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b"], 0x108}}, 0x0) 4m3.500949983s ago: executing program 32 (id=242): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@delchain={0x474, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0xfffffff9, 0xffffffff, 0x7bf, {0x8, 0x0, 0x2, 0x30, 0x9, 0x6}, {0x3, 0x1, 0x29, 0x2, 0x101, 0x7}, 0x3, 0x9, 0x4064}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x3c70, 0x7fffffff, 0x42d, 0x8, 0xfffffffc, 0x6, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x101, 0x16ae, 0x0, 0x4, 0x3, 0x0, 0x3, 0x59a72dbb, 0x10, 0xfffffffa, 0x4, 0x1, 0x9300, 0x0, 0x0, 0x7, 0xea, 0x4, 0x8, 0x7, 0x7, 0x1, 0x5e, 0x7, 0x1, 0x1ff, 0x5, 0x8, 0xfffff001, 0x96, 0x6d, 0x6, 0xe879, 0x6, 0x3, 0x4, 0x9, 0x5, 0x9, 0xf6f, 0x3, 0x1, 0x0, 0x95, 0x7fba, 0x3a729f5c, 0x7, 0x1, 0xb, 0x7, 0x8001, 0x8, 0x6, 0x1, 0x9, 0x4, 0x7, 0xc2e, 0x5, 0x9, 0x0, 0x0, 0xd3, 0x40, 0x6, 0xc621, 0x354, 0x7f, 0x7, 0xfffffba2, 0x8, 0x7, 0x80000001, 0x7, 0x6, 0xd, 0x2, 0x0, 0x80000000, 0x6, 0x7a, 0x4, 0x8, 0x7fffffff, 0xd1, 0x3, 0x10, 0xffffffff, 0x10001, 0x4, 0x8fbc, 0x7, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x7, 0x2, 0x2, 0x80000000, 0x0, 0x10, 0x7, 0x9e, 0x5, 0x8000, 0x1, 0x9, 0x4, 0x1ff, 0xb51, 0x7, 0x81, 0x0, 0x6, 0x543a, 0x0, 0xd87, 0x41a09a69, 0x4, 0xa, 0x865e, 0x5, 0x4, 0x400, 0x7, 0x400, 0x7, 0x7, 0x5, 0xe6, 0x80000000, 0x6, 0x9, 0x3, 0x7fffffff, 0xe, 0x5, 0xd9, 0xfff, 0x81, 0x1, 0x9, 0x98, 0x7, 0x2, 0x1, 0x7f61f97b, 0x7, 0x2b1, 0x10001, 0x46, 0x4, 0x401, 0x0, 0x13b, 0xfffffffe, 0x910, 0xca22, 0x4, 0x401, 0x0, 0xffffffff, 0x9, 0x4, 0x400, 0x10, 0x1, 0x7, 0x8, 0x80, 0x8, 0x3, 0x4, 0x2, 0x0, 0x7, 0x7f, 0x3df, 0xfc4, 0x5, 0x7, 0x2, 0x8, 0x1, 0x5, 0x80000001, 0x9, 0x9, 0x6, 0x5, 0x7, 0x4f, 0x0, 0x9, 0x6, 0x7fffffff, 0xc5, 0x9, 0x3, 0x85a, 0x3, 0x2a28, 0x3, 0x33, 0x100, 0x3, 0x3, 0x7ff, 0x6, 0xf8a, 0x4, 0x7, 0x101, 0x8, 0x4321, 0x81, 0x42e, 0x4, 0x7, 0x52, 0x3f2c, 0x6, 0x3, 0x9, 0xff, 0x203, 0xa88, 0x5680, 0x0, 0x2a8d, 0x2, 0xf, 0x5, 0x9, 0x5, 0x100, 0x7, 0x2, 0xf2ba]}]}]}}]}, 0x474}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b"], 0x108}}, 0x0) 5.724038961s ago: executing program 4 (id=2647): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 5.271976468s ago: executing program 4 (id=2650): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x3}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.222681958s ago: executing program 4 (id=2640): r0 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000280)={0x0, 0x2, 0x7}) mq_timedreceive(r0, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x100000000000000, 0x0) 2.52527953s ago: executing program 4 (id=2645): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 1.479548316s ago: executing program 4 (id=2666): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 1.394763718s ago: executing program 3 (id=2668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_read_part_table(0x1059, &(0x7f0000001080)="$eJzsz81twkAQBeC3G8s/h7SSSzpID7mkmLgbDvRBL9SAQIts2aID4PB9h9V72pFGE16r5tIWp5ZWkvTLM9d8ZUym1HXopxuz9C5tSEnmbB9pw22LU/771HOGtf19l2trjzWfH3s6dHsq+T0+7U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGP3AAAA//+wdxQs") 1.25827537s ago: executing program 4 (id=2680): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' 1\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.25755105s ago: executing program 0 (id=2681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) 1.124744402s ago: executing program 1 (id=2673): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 999.853494ms ago: executing program 3 (id=2674): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 996.197784ms ago: executing program 1 (id=2684): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100001,user_id=', @ANYRESDEC=0x0]) 930.420235ms ago: executing program 1 (id=2675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write(r0, &(0x7f0000000000)="2e000400", 0x4) 929.551795ms ago: executing program 0 (id=2686): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) 810.374317ms ago: executing program 1 (id=2676): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) truncate(&(0x7f0000000080)='./file1\x00', 0x4) 810.152577ms ago: executing program 3 (id=2677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, 0x0, 0x799, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = syz_clone(0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r0) 802.083617ms ago: executing program 0 (id=2678): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="34000000120001"], 0x34}], 0x1, 0x0, 0x0, 0x8001}, 0x0) 561.389351ms ago: executing program 3 (id=2679): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$eJzs3b+LHHUUAPA3d7O74w/YLaxEcEALq5BLa7NBEhCvMmyhFnqYBOR2ERI48AeOqcTOxtK/QBD8H2xt7CwF/wA7IwRGZnbmdtZM9u7k9sTc59PkZb7vzffN7HA3V9y7D15aHN7O4+6Dz3+LLEtiZxrTeJjEJHai9WWsmX4TAMD/2cOyjD/KpZ7lX79+Ql0SEdmWewMAtuOE7/+NdBX+eCFtAQBbdOudd9+6vr9/4+08z+Lm4qujWfWTffXvcv363fgo5nEnrsY4HkXULwqDqN8WqvBmWZZFmlcm8eqiOJpVlYv3f27O/9PzTbAX45jU0fHbRl3/5v6NvXypU19UfTzb7D+t9r8W43jhuHit/lpPfcyG8dornf6vxDh++TA+jnncrptY1X+xl+dvlN/++dl7VXtVfVIczUZ13kq5225eXODnAwAAAAAAAAAAAAAAAAAAAADA0+lKMztnFPX8nupQM39n91H1n0Hkrcn6fJ5lfdKeqDsfqCzLoozv2vk6V/M8L5vEVX0aL6bdwYIAAAAAAAAAAAAAAAAAAABwed3/5NPDg/n8zr1zCdppAGlE/HUr4t+eZ9o58nJsTh41ex7M5ztNuJ6Tdo/EbpuTRGxso7qIc7otJwXPPNZzE3z/Q29VuvbBpdFZyk7edNC/13kG7dN1eJD038PRcc/Z8iGpB0GscoZxyr2GT1oq4yyP37B3aXzmax8+VwfFhpxINjX2+u/LO9ccSf55FcP6rvaWD5qgU76ek53qeY5sWf7414rEtA4AAAAAAAAAAAAAAAAAANiq1W//9iw+2Fi6U4621hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXKjV3/8/Q1A0xadIHsa9+//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAJ/B0AAP//eWdglQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 558.825291ms ago: executing program 0 (id=2691): socket(0xb, 0x80000, 0x5) r0 = io_uring_setup(0x3aad, &(0x7f0000000340)={0x0, 0xd794, 0x0, 0x6, 0x3d4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) 558.180581ms ago: executing program 1 (id=2682): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000200)={[{@block_validity}]}, 0x7, 0x529, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) 255.910205ms ago: executing program 3 (id=2683): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x2, 0x0}, 0x10) 254.833165ms ago: executing program 0 (id=2694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3.502249ms ago: executing program 3 (id=2685): r0 = epoll_create1(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000000}) 651.22µs ago: executing program 0 (id=2696): r0 = fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2687): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) kernel console output (not intermixed with test programs): use data=ordered instead of data journaling mode [ 239.311494][ T28] audit: type=1326 audit(1752764292.813:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb609f858e7 code=0x7ffc0000 [ 239.321954][ T9287] EXT4-fs (loop1): 1 truncate cleaned up [ 239.342550][ T9287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.355396][ T5159] udevd[5159]: worker [5781] terminated by signal 33 (Unknown signal 33) [ 239.357355][ T28] audit: type=1326 audit(1752764292.813:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb609f2ab19 code=0x7ffc0000 [ 239.406933][ T5159] udevd[5159]: worker [5781] failed while handling '/devices/virtual/block/loop1' [ 239.416692][ T28] audit: type=1326 audit(1752764292.813:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb609f858e7 code=0x7ffc0000 [ 239.442267][ T28] audit: type=1326 audit(1752764292.813:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb609f2ab19 code=0x7ffc0000 [ 239.503094][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.633264][ T28] audit: type=1326 audit(1752764292.813:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb609f858e7 code=0x7ffc0000 [ 239.804859][ T5794] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 239.997446][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.028012][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.055129][ T5794] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 240.100209][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.220749][ T5794] usb 5-1: config 0 descriptor?? [ 240.561967][ T9295] loop3: detected capacity change from 0 to 131072 [ 240.571381][ T9295] F2FS-fs (loop3): inline xattr size is out of range: 6 ~ 903 [ 240.668997][ T5794] zydacron 0003:13EC:0006.001F: unknown main item tag 0x6 [ 240.732958][ T5794] zydacron 0003:13EC:0006.001F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 240.886751][ T9] usb 5-1: USB disconnect, device number 13 [ 240.928908][ T9322] loop0: detected capacity change from 0 to 1024 [ 240.947160][ T9318] fido_id[9318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 240.981945][ T9322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.071915][ T9327] loop3: detected capacity change from 0 to 512 [ 241.260381][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.775799][ T9343] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 241.820800][ T9345] loop4: detected capacity change from 0 to 512 [ 241.912350][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 242.169793][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 242.193658][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 242.215595][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.261144][ T9] usb 4-1: config 0 descriptor?? [ 242.269838][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 242.319732][ T9361] loop4: detected capacity change from 0 to 512 [ 242.332286][ T9359] loop1: detected capacity change from 0 to 1024 [ 242.340390][ T9361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.361428][ T9361] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.392732][ T9359] hfsplus: bad catalog entry type [ 242.433285][ T9361] EXT4-fs (loop4): 1 truncate cleaned up [ 242.486508][ T9361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.577493][ T11] hfsplus: b-tree write err: -5, ino 4 [ 242.638360][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.715342][ T9369] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1279'. [ 242.910000][ T9] gspca_nw80x: reg_w err -71 [ 242.914931][ T9] nw80x: probe of 4-1:0.0 failed with error -71 [ 242.955295][ T9] usb 4-1: USB disconnect, device number 16 [ 242.961120][ T9376] loop4: detected capacity change from 0 to 2048 [ 243.003551][ T9376] EXT4-fs: Ignoring removed bh option [ 243.029482][ T9376] EXT4-fs: Ignoring removed orlov option [ 243.062409][ T9367] loop0: detected capacity change from 0 to 32768 [ 243.093530][ T9367] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 243.113743][ T9376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.127290][ T9376] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.139010][ T9367] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.261883][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.267672][ T9367] XFS (loop0): Ending clean mount [ 243.285171][ T9367] XFS (loop0): Quotacheck needed: Please wait. [ 243.431995][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 243.435765][ T9367] XFS (loop0): Quotacheck: Done. [ 243.472969][ T9394] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 243.615538][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.465073][ T9418] netlink: 'syz.4.1298': attribute type 2 has an invalid length. [ 244.644746][ T3370] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 244.840380][ T9424] loop0: detected capacity change from 0 to 256 [ 244.848819][ T3370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.852755][ T9424] exfat: Deprecated parameter 'namecase' [ 244.871051][ T3370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.891733][ T9426] "syz.4.1302" (9426) uses obsolete ecb(arc4) skcipher [ 244.899008][ T9424] exfat: Deprecated parameter 'utf8' [ 244.909369][ T3370] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 244.923357][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.956884][ T3370] usb 2-1: config 0 descriptor?? [ 244.966832][ T9404] loop3: detected capacity change from 0 to 131072 [ 244.967922][ T9424] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 245.004308][ T9404] F2FS-fs (loop3): QUOTA feature is enabled, so ignore jquota_fmt [ 245.014445][ T9404] F2FS-fs (loop3): invalid crc value [ 245.031802][ T9424] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 245.048031][ T9404] F2FS-fs (loop3): Found nat_bits in checkpoint [ 245.097055][ T9404] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 245.112522][ T9404] F2FS-fs (loop3): Failed to read root inode [ 245.191458][ T9430] loop4: detected capacity change from 0 to 512 [ 245.207943][ T9430] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.283569][ T9430] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1303: invalid block [ 245.308147][ T9430] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1303: invalid indirect mapped block 10 (level 1) [ 245.330055][ T9430] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1303: invalid indirect mapped block 8 (level 1) [ 245.367084][ T9430] EXT4-fs (loop4): 1 truncate cleaned up [ 245.402113][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.415483][ T3370] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 245.441442][ T3370] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 245.452166][ T9433] Illegal XDP return value 16128 on prog (id 77) dev N/A, expect packet loss! [ 245.584697][ T3370] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device [ 245.624573][ T3370] arvo 0003:1E7D:30D4.0020: couldn't install keyboard [ 245.659391][ T3370] arvo: probe of 0003:1E7D:30D4.0020 failed with error -71 [ 245.682574][ T3370] usb 2-1: USB disconnect, device number 19 [ 245.701131][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.887743][ T9442] loop0: detected capacity change from 0 to 1024 [ 246.205895][ T9453] loop0: detected capacity change from 0 to 64 [ 246.594860][ T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 246.809671][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 246.822694][ T55] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.859316][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.864558][ T9449] loop3: detected capacity change from 0 to 32768 [ 246.884447][ T55] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 246.902264][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.922923][ T9449] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 246.929486][ T9469] loop0: detected capacity change from 0 to 4096 [ 246.943413][ T55] usb 5-1: config 0 descriptor?? [ 246.974260][ T9469] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 247.052023][ T9449] XFS (loop3): Ending clean mount [ 247.102054][ T9469] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 247.122916][ T9449] syz.3.1311 (9449) used greatest stack depth: 20264 bytes left [ 247.227799][ T5788] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 247.455239][ T55] wacom 0003:056A:00CC.0021: hidraw0: USB HID v7d.d9 Device [HID 056a:00cc] on usb-dummy_hcd.4-1/input0 [ 247.615817][ T55] usb 5-1: USB disconnect, device number 14 [ 247.668095][ T9486] fido_id[9486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 248.565800][ T9524] loop1: detected capacity change from 0 to 512 [ 248.604533][ T9524] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.674938][ T9524] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 248.751827][ T9524] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 248.830314][ T9524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 248.863784][ T9524] System zones: 0-2, 18-18, 34-35 [ 248.909994][ T9524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.917332][ T9520] loop0: detected capacity change from 0 to 32768 [ 248.989184][ T9520] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.100182][ T9520] XFS (loop0): Ending clean mount [ 249.145374][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.288736][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.904875][ T5842] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 249.930662][ T9555] loop4: detected capacity change from 0 to 32768 [ 249.980160][ T9560] loop0: detected capacity change from 0 to 256 [ 250.021499][ T9560] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 250.107914][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 250.121358][ T5842] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 250.147534][ T5842] usb 2-1: config 0 has no interface number 0 [ 250.167125][ T5842] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.198800][ T5842] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.212180][ T5842] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 250.224957][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 250.237021][ T5842] usb 2-1: Product: syz [ 250.241232][ T5842] usb 2-1: SerialNumber: syz [ 250.256124][ T5842] usb 2-1: config 0 descriptor?? [ 250.269041][ T5842] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 250.269226][ T9565] loop3: detected capacity change from 0 to 256 [ 250.287023][ T5842] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input36 [ 250.321500][ T9565] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 250.520062][ C0] cm109_urb_ctl_callback: 1 callbacks suppressed [ 250.520087][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.521142][ T3370] usb 2-1: USB disconnect, device number 20 [ 250.526462][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 250.644816][ T3370] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 251.126506][ T9583] loop0: detected capacity change from 0 to 16 [ 251.163366][ T9583] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.188866][ T9585] loop1: detected capacity change from 0 to 512 [ 251.263775][ T9585] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 251.294575][ T9585] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.1368: iget: bad i_size value: 12154757448730 [ 251.323284][ T9585] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1368: couldn't read orphan inode 13 (err -117) [ 251.404245][ T9591] loop0: detected capacity change from 0 to 1024 [ 251.419225][ T9585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.433030][ T9567] loop3: detected capacity change from 0 to 32768 [ 251.477123][ T9567] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 251.499008][ T9591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.560689][ T9591] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.624258][ T9567] XFS (loop3): Ending clean mount [ 251.667495][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.710431][ T9591] EXT4-fs: Ignoring removed orlov option [ 251.719810][ T9591] EXT4-fs: can't change dax mount option while remounting [ 251.826639][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 251.868938][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.154927][ T5797] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 252.344792][ T5797] usb 5-1: Using ep0 maxpacket: 16 [ 252.363409][ T5797] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 252.378286][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.400025][ T5797] usb 5-1: Product: syz [ 252.404237][ T5797] usb 5-1: Manufacturer: syz [ 252.414099][ T5797] usb 5-1: SerialNumber: syz [ 252.441536][ T5797] ssu100 5-1:254.0: Quatech SSU-100 USB to Serial Driver converter detected [ 252.514232][ T9625] syz.0.1380 (9625): drop_caches: 2 [ 252.531778][ T9620] syz.0.1380 (9620): drop_caches: 2 [ 252.790367][ T9636] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1387'. [ 252.947266][ T9640] loop1: detected capacity change from 0 to 256 [ 253.007121][ T9640] FAT-fs (loop1): Directory bread(block 64) failed [ 253.013931][ T9640] FAT-fs (loop1): Directory bread(block 65) failed [ 253.035000][ T9640] FAT-fs (loop1): Directory bread(block 66) failed [ 253.041632][ T9640] FAT-fs (loop1): Directory bread(block 67) failed [ 253.059947][ T9640] FAT-fs (loop1): Directory bread(block 68) failed [ 253.071363][ T5797] ssu100: probe of 5-1:254.0 failed with error -71 [ 253.084772][ T9640] FAT-fs (loop1): Directory bread(block 69) failed [ 253.099423][ T5797] usb 5-1: USB disconnect, device number 15 [ 253.113430][ T9640] FAT-fs (loop1): Directory bread(block 70) failed [ 253.129443][ T9640] FAT-fs (loop1): Directory bread(block 71) failed [ 253.147557][ T9640] FAT-fs (loop1): Directory bread(block 72) failed [ 253.154151][ T9640] FAT-fs (loop1): Directory bread(block 73) failed [ 253.334012][ T9650] loop0: detected capacity change from 0 to 64 [ 253.458470][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 253.458484][ T28] audit: type=1800 audit(1752764307.143:117): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1395" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 253.776087][ T9664] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 253.806241][ T9664] batman_adv: batadv0: Adding interface: team0 [ 253.812458][ T9664] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.864884][ T9664] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 253.896047][ T9665] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 253.923839][ T9665] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1402'. [ 253.944591][ T9665] team0: entered promiscuous mode [ 253.952733][ T9665] team_slave_0: entered promiscuous mode [ 253.961966][ T9665] team_slave_1: entered promiscuous mode [ 253.973094][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.984186][ T9665] batman_adv: batadv0: Interface activated: team0 [ 253.987770][ T9667] loop4: detected capacity change from 0 to 1024 [ 254.003243][ T9665] batman_adv: batadv0: Interface deactivated: team0 [ 254.023531][ T9665] batman_adv: batadv0: Removing interface: team0 [ 254.046223][ T9665] bridge0: port 4(team0) entered blocking state [ 254.053143][ T9665] bridge0: port 4(team0) entered disabled state [ 254.066917][ T9669] loop3: detected capacity change from 0 to 128 [ 254.084981][ T9665] team0: entered allmulticast mode [ 254.096027][ T9665] team_slave_0: entered allmulticast mode [ 254.106927][ T9665] team_slave_1: entered allmulticast mode [ 254.146292][ T9665] bridge0: port 4(team0) entered blocking state [ 254.153312][ T9665] bridge0: port 4(team0) entered forwarding state [ 254.202618][ T9669] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 254.325659][ T9669] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.404477][ T9660] loop0: detected capacity change from 0 to 32768 [ 254.427591][ T9660] XFS: noikeep mount option is deprecated. [ 254.461186][ T9660] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.585276][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.632258][ T9694] loop1: detected capacity change from 0 to 512 [ 254.664382][ T9660] XFS (loop0): Ending clean mount [ 254.702448][ T9660] XFS (loop0): Quotacheck needed: Please wait. [ 254.726797][ T9694] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1409: invalid indirect mapped block 10 (level 1) [ 254.765853][ T9660] XFS (loop0): Quotacheck: Done. [ 254.786833][ T9694] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1409: invalid indirect mapped block 8 (level 1) [ 254.803268][ T9694] EXT4-fs (loop1): 1 truncate cleaned up [ 254.822523][ T9694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.846062][ T5842] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 254.890753][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.942587][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.047506][ T5842] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 255.071503][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.104919][ T5842] usb 5-1: config 0 has no interface number 0 [ 255.142688][ T5842] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 255.158550][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.195006][ T5842] usb 5-1: Product: syz [ 255.199246][ T5842] usb 5-1: Manufacturer: syz [ 255.234871][ T5842] usb 5-1: SerialNumber: syz [ 255.256912][ T5842] usb 5-1: config 0 descriptor?? [ 255.287232][ T5842] hub 5-1:0.31: bad descriptor, ignoring hub [ 255.306427][ T5842] hub: probe of 5-1:0.31 failed with error -5 [ 255.335657][ T5842] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 255.342111][ T5842] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 255.361873][ T5842] usb 5-1: Failed to create links for entity 6 [ 255.368970][ T5842] usb 5-1: Failed to register entities (-22). [ 255.617901][ T5842] usb 5-1: USB disconnect, device number 16 [ 255.673287][ T9717] usb usb8: usbfs: process 9717 (syz.1.1421) did not claim interface 0 before use [ 255.901132][ T9705] loop0: detected capacity change from 0 to 32768 [ 255.945548][ T9705] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.104809][ T9705] XFS (loop0): Ending clean mount [ 256.145121][ T5842] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 256.260551][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.380199][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 256.412085][ T5842] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 256.427506][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.436959][ T5842] usb 2-1: Product: syz [ 256.441208][ T5842] usb 2-1: Manufacturer: syz [ 256.459205][ T5842] usb 2-1: SerialNumber: syz [ 256.471424][ T5842] usb 2-1: config 0 descriptor?? [ 256.502363][ T5842] usbtouchscreen: probe of 2-1:0.0 failed with error -32 [ 256.642441][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.705453][ T3370] usb 2-1: USB disconnect, device number 21 [ 256.916455][ T9744] loop4: detected capacity change from 0 to 32768 [ 256.951265][ T9746] loop0: detected capacity change from 0 to 32768 [ 256.977573][ T9744] find_entry called with index = 0 [ 256.993171][ T9744] read_mapping_page failed! [ 257.002453][ T9744] ERROR: (device loop4): txCommit: [ 257.002453][ T9744] [ 257.216398][ T9749] loop3: detected capacity change from 0 to 2048 [ 257.318074][ T9749] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 257.419216][ T9758] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.419587][ T9749] bio_check_eod: 58 callbacks suppressed [ 257.419600][ T9749] syz.3.1433: attempt to access beyond end of device [ 257.419600][ T9749] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 257.486232][ T9759] loop0: detected capacity change from 0 to 128 [ 257.586037][ T9759] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.680395][ T9759] ext4 filesystem being mounted at /337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.869176][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.909687][ T9770] loop3: detected capacity change from 0 to 1024 [ 258.105543][ T12] hfsplus: b-tree write err: -5, ino 4 [ 258.599914][ T9794] loop1: detected capacity change from 0 to 16 [ 258.620945][ T9794] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 259.535915][ T9810] loop1: detected capacity change from 0 to 32768 [ 259.678539][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 260.604192][ T9839] loop3: detected capacity change from 0 to 8192 [ 260.652293][ T9839] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 260.657696][ T9830] loop1: detected capacity change from 0 to 32768 [ 260.679624][ T9839] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 260.689094][ T9839] REISERFS (device loop3): using ordered data mode [ 260.695740][ T9839] reiserfs: using flush barriers [ 260.704739][ T9839] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.723015][ T9839] REISERFS (device loop3): checking transaction log (loop3) [ 260.763490][ T9830] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 260.830850][ T5797] kernel write not supported for file /input/event2 (pid: 5797 comm: kworker/1:5) [ 260.971478][ T9839] REISERFS (device loop3): Using tea hash to sort names [ 260.981526][ T28] audit: type=1800 audit(1752764314.653:118): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1469" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 261.014827][ T9839] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 261.129996][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 261.501297][ T9858] loop3: detected capacity change from 0 to 512 [ 261.525570][ T9858] EXT4-fs: Ignoring removed nobh option [ 261.549890][ T9858] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1480: iget: bad i_size value: 38620345925642 [ 261.581630][ T9858] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1480: couldn't read orphan inode 15 (err -117) [ 261.620317][ T9858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.682150][ T9852] loop4: detected capacity change from 0 to 32768 [ 261.833461][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.938653][ T9867] loop0: detected capacity change from 0 to 64 [ 262.009259][ T9869] loop4: detected capacity change from 0 to 128 [ 262.043271][ T9867] hfs: keylen 1794 too large [ 262.071076][ T9869] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.096861][ T9867] hfs: keylen 1794 too large [ 262.104273][ T9869] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.348243][ T6501] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.555125][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1493'. [ 262.706104][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 262.725435][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 262.765125][ T9892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 262.875552][ T3370] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 262.945731][ T9903] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1502'. [ 262.945781][ T9903] netlink: 'syz.3.1502': attribute type 3 has an invalid length. [ 262.955229][ T9905] loop0: detected capacity change from 0 to 256 [ 262.956444][ T9905] FAT-fs (loop0): Unrecognized mount option "coDepage=865" or missing value [ 263.026128][ T6988] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.090300][ T3370] usb 2-1: Using ep0 maxpacket: 32 [ 263.092240][ T3370] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.111571][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1503'. [ 263.111661][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1503'. [ 263.112086][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1503'. [ 263.155021][ T3370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.155067][ T3370] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 263.155090][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.191870][ T3370] usb 2-1: config 0 descriptor?? [ 263.603528][ T9922] loop4: detected capacity change from 0 to 4096 [ 263.617092][ T3370] corsair-cpro 0003:1B1C:0C10.0022: item fetching failed at offset 2/5 [ 263.651023][ T3370] corsair-cpro: probe of 0003:1B1C:0C10.0022 failed with error -22 [ 263.659377][ T9922] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 263.746336][ T9928] loop0: detected capacity change from 0 to 512 [ 263.765310][ T9928] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 263.802460][ T9928] EXT4-fs (loop0): invalid journal inode [ 263.820890][ T9] usb 2-1: USB disconnect, device number 22 [ 263.821432][ T9928] EXT4-fs (loop0): can't get journal size [ 263.843113][ T9922] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 263.859650][ T9928] EXT4-fs (loop0): 1 truncate cleaned up [ 263.871573][ T9928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.890030][ T2990] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 263.899883][ T6501] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 263.910595][ T6501] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 263.942361][ T6501] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 263.959622][ T12] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 263.980622][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.074918][ T9934] loop4: detected capacity change from 0 to 16 [ 264.082044][ T9934] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 264.119872][ T6284] udevd[6284]: incorrect cramfs checksum on /dev/loop4 [ 264.192799][ T6284] udevd[6284]: incorrect cramfs checksum on /dev/loop4 [ 264.456078][ T9947] 9pnet_rdma: rdma_create_trans (9947): problem binding to privport: 13 [ 264.555124][ T9951] tipc: Enabling of bearer rejected, failed to enable media [ 264.663689][ T9953] loop1: detected capacity change from 0 to 4096 [ 265.010036][ T9965] tipc: Enabling of bearer rejected, failed to enable media [ 265.711511][ T9997] ptrace attach of "./syz-executor exec"[6501] was attempted by ""[9997] [ 266.443109][T10032] loop3: detected capacity change from 0 to 512 [ 266.521206][T10032] EXT4-fs (loop3): 1 orphan inode deleted [ 266.536316][T10032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.553244][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 266.582005][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 1 [ 266.605431][T10032] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.677903][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.879769][T10046] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.888816][T10046] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.897646][T10046] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.906417][T10046] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.463180][T10062] loop0: detected capacity change from 0 to 128 [ 267.474880][ T5797] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 267.503322][T10062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.517225][T10062] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.643095][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.694816][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 267.703188][ T5797] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 267.730631][ T5797] usb 4-1: config 0 has no interface number 0 [ 267.738012][ T5797] usb 4-1: config 0 interface 217 has no altsetting 0 [ 267.770165][ T5797] usb 4-1: New USB device found, idVendor=5372, idProduct=2303, bcdDevice=a1.0d [ 267.800158][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.820652][ T5797] usb 4-1: Product: syz [ 267.825238][ T5797] usb 4-1: Manufacturer: syz [ 267.829860][ T5797] usb 4-1: SerialNumber: syz [ 267.848782][ T5797] usb 4-1: config 0 descriptor?? [ 267.871665][ T5797] pl2303 4-1:0.217: required interrupt-in endpoint missing [ 268.651647][T10073] loop1: detected capacity change from 0 to 32768 [ 268.738797][ T28] audit: type=1800 audit(1752764322.423:119): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1580" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 268.741530][T10073] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 268.741530][T10073] [ 268.811545][T10073] ERROR: (device loop1): remounting filesystem as read-only [ 268.833968][T10073] xtLookup: xtSearch returned -5 [ 269.363267][T10084] loop1: detected capacity change from 0 to 1024 [ 269.413330][T10082] loop0: detected capacity change from 0 to 32768 [ 269.706380][T10088] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 269.777548][ T12] hfsplus: b-tree write err: -5, ino 4 [ 270.135568][ T27] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 270.222189][ T5797] usb 4-1: USB disconnect, device number 17 [ 270.347970][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.374796][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.394711][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.428013][ T27] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 270.454788][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.492728][ T27] usb 5-1: config 0 descriptor?? [ 270.629604][T10109] bridge0: port 3(syz_tun) entered blocking state [ 270.639714][T10109] bridge0: port 3(syz_tun) entered disabled state [ 270.646649][T10109] syz_tun: entered allmulticast mode [ 270.654520][T10109] syz_tun: entered promiscuous mode [ 270.665979][T10109] bridge0: port 3(syz_tun) entered blocking state [ 270.674122][T10109] bridge0: port 3(syz_tun) entered forwarding state [ 270.817825][T10115] loop3: detected capacity change from 0 to 512 [ 270.831069][T10115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.871653][T10115] EXT4-fs (loop3): 1 truncate cleaned up [ 270.889784][T10115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.918416][T10115] EXT4-fs error (device loop3): ext4_ext_precache:627: inode #15: comm syz.3.1600: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 270.950382][ T27] kye 0003:0458:5011.0023: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 271.006474][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.021402][ T27] kye 0003:0458:5011.0023: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 271.045909][T10122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1601'. [ 271.070404][ T27] kye 0003:0458:5011.0023: tablet-enabling feature report not found [ 271.094861][T10122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1601'. [ 271.104085][ T27] kye 0003:0458:5011.0023: tablet enabling failed [ 271.140654][ T27] usb 5-1: USB disconnect, device number 17 [ 271.148179][T10119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1601'. [ 271.222263][T10126] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 271.243376][T10123] fido_id[10123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 271.495487][T10135] warning: `syz.3.1607' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 271.831252][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 271.915068][ T5842] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 272.107581][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.129146][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.148632][ T5842] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 272.176105][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.203960][ T5842] usb 4-1: config 0 descriptor?? [ 272.525054][ T5797] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 272.634003][ T5842] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 272.643910][ T5842] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 272.669413][ T5842] lenovo 0003:17EF:6047.0024: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 272.710290][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 272.749595][ T5797] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.762210][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.779271][ T5797] usb 2-1: Product: syz [ 272.783486][ T5797] usb 2-1: Manufacturer: syz [ 272.791957][ T5797] usb 2-1: SerialNumber: syz [ 272.800511][ T5797] usb 2-1: config 0 descriptor?? [ 272.829029][ T5842] lenovo 0003:17EF:6047.0024: Failed to switch F7/9/11 mode: -71 [ 272.848892][ T5842] lenovo 0003:17EF:6047.0024: Failed to switch middle button: -71 [ 272.863394][ T5842] lenovo 0003:17EF:6047.0024: Fn-lock setting failed: -71 [ 272.874007][ T5842] lenovo 0003:17EF:6047.0024: Sensitivity setting failed: -71 [ 272.911805][ T5842] usb 4-1: USB disconnect, device number 18 [ 273.016684][ T5797] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.427595][ T5797] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 273.451128][ T5797] usb 2-1: USB disconnect, device number 23 [ 273.482189][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 273.600208][T10214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1645'. [ 273.614911][ T5856] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 273.814987][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 273.823431][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.844933][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.869187][ T5856] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 273.902593][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.928677][ T5856] usb 5-1: config 0 descriptor?? [ 274.373571][ T5856] wacom 0003:056A:0084.0025: unbalanced collection at end of report description [ 274.395381][ T5856] wacom 0003:056A:0084.0025: parse failed [ 274.401312][ T5856] wacom: probe of 0003:056A:0084.0025 failed with error -22 [ 274.415001][ T5797] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 274.574532][ T3370] usb 5-1: USB disconnect, device number 18 [ 274.629623][ T5797] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 274.655430][ T5797] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 274.664536][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.700319][ T5797] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 274.700402][T10240] loop0: detected capacity change from 0 to 32768 [ 274.760888][T10240] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 274.864946][ T5789] (syz-executor,5789,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 274.904964][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 275.245616][T10268] option changes via remount are deprecated (pid=10267 comm=syz.4.1669) [ 275.556206][T10262] loop0: detected capacity change from 0 to 32768 [ 275.604947][T10262] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.663894][T10262] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 275.702698][T10262] XFS (loop0): Starting recovery (logdev: internal) [ 275.733531][T10262] XFS (loop0): Ending recovery (logdev: internal) [ 275.744445][T10262] XFS (loop0): Quotacheck needed: Please wait. [ 275.756175][ T5797] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 275.800446][T10262] XFS (loop0): Quotacheck: Done. [ 275.856615][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.923013][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 275.938904][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 275.951070][T10294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1677'. [ 275.966733][ T5797] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 276.008841][ T5797] stv0680 4-1:4.0: last error: 0, command = 0x56 [ 276.061152][ T5797] usb 4-1: USB disconnect, device number 19 [ 276.758556][T10311] netlink: 4108 bytes leftover after parsing attributes in process `syz.4.1685'. [ 276.831719][T10303] loop0: detected capacity change from 0 to 32768 [ 276.898852][T10303] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.930942][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 277.184069][T10334] loop3: detected capacity change from 0 to 256 [ 277.276773][T10303] XFS (loop0): Ending clean mount [ 277.282229][T10334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 277.336662][T10303] XFS (loop0): Quotacheck needed: Please wait. [ 277.428967][T10303] XFS (loop0): Quotacheck: Done. [ 277.622160][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.684862][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 277.885199][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 277.895621][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.930409][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.954695][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 278.001841][ T9] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 278.030565][ T9] usb 2-1: config 7 interface 0 has no altsetting 0 [ 278.053961][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 278.094802][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.178514][T10356] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 278.304842][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 278.335412][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 278.583278][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0026/input/input39 [ 278.651563][ T9] kye 0003:0458:5010.0026: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 278.904927][ T9] usb 2-1: USB disconnect, device number 24 [ 279.215026][T10384] loop0: detected capacity change from 0 to 8 [ 279.233780][T10384] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 279.279996][ T6988] udevd[6988]: incorrect cramfs checksum on /dev/loop0 [ 279.315881][T10384] cramfs: Error -5 while decompressing! [ 279.342024][T10384] cramfs: ffffffff96fdb298(16)->ffff888052d5d000(4096) [ 279.371648][T10384] cramfs: Error -5 while decompressing! [ 279.377363][T10384] cramfs: ffffffff96fdb298(16)->ffff888052d5d000(4096) [ 279.398729][ T28] audit: type=1800 audit(1752764333.063:120): pid=10384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1713" name="file0" dev="loop0" ino=244 res=0 errno=0 [ 279.429036][ T6988] udevd[6988]: incorrect cramfs checksum on /dev/loop0 [ 279.535556][T10388] loop0: detected capacity change from 0 to 512 [ 279.555355][T10388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 279.583799][T10388] EXT4-fs (loop0): 1 orphan inode deleted [ 279.618077][T10388] EXT4-fs (loop0): 1 truncate cleaned up [ 279.647220][T10388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.663460][ T5797] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.744899][T10388] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 279.818526][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.885595][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 279.903284][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.935294][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.955256][ T5797] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 279.964354][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.997107][ T5797] usb 4-1: config 0 descriptor?? [ 280.049822][T10407] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1724'. [ 280.060246][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1724'. [ 280.440719][T10423] netlink: 'syz.4.1732': attribute type 13 has an invalid length. [ 280.454904][ T5797] ft260 0003:0403:6030.0027: item fetching failed at offset 0/2 [ 280.478112][ T5797] ft260 0003:0403:6030.0027: failed to parse HID [ 280.484714][T10423] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1732'. [ 280.497008][T10425] loop1: detected capacity change from 0 to 1024 [ 280.500580][ T5797] ft260: probe of 0003:0403:6030.0027 failed with error -22 [ 280.513694][T10425] EXT4-fs: Invalid gid value -1 [ 280.534712][T10423] : renamed from syz_tun (while UP) [ 280.557639][T10423] : refused to change device tx_queue_len [ 280.563749][T10423] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 280.707959][T10429] loop0: detected capacity change from 0 to 2048 [ 280.713103][ T55] usb 4-1: USB disconnect, device number 20 [ 280.824933][T10429] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.908282][T10436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.925652][ T6992] udevd[6992]: incorrect nilfs2 checksum on /dev/loop0 [ 281.401288][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 281.442982][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 281.542208][T10444] loop3: detected capacity change from 0 to 2048 [ 281.647696][T10445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.775031][ T28] audit: type=1800 audit(1752764335.453:121): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1743" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 281.860439][T10444] NILFS (loop3): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0 [ 281.934751][T10444] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 281.964136][T10444] Remounting filesystem read-only [ 282.101373][ T5788] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 282.141222][ T5788] NILFS (loop3): discard dirty page: offset=4096, ino=16 [ 282.170483][ T5788] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 282.202063][ T5788] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 282.229145][ T5788] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 282.267305][ T5788] NILFS (loop3): discard dirty block: blocknr=30, size=1024 [ 282.293614][ T5788] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 282.328467][ T5788] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 282.367607][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.408305][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.431702][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.470770][ T5788] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 282.496654][ T5788] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 282.514299][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.540931][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.567356][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.592591][ T5788] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 282.622576][ T5788] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 282.673288][ T5788] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 282.713079][ T5788] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 282.742202][ T5788] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 282.935907][T10432] loop1: detected capacity change from 0 to 262144 [ 283.032081][T10432] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.084887][T10432] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 283.689954][T10487] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1759'. [ 283.729887][T10489] loop0: detected capacity change from 0 to 64 [ 284.105348][T10462] loop3: detected capacity change from 0 to 40427 [ 284.122491][T10462] F2FS-fs (loop3): build fault injection attr: rate: 4, type: 0x7ffff [ 284.154848][T10462] F2FS-fs (loop3): Image doesn't support compression [ 284.174242][T10462] F2FS-fs (loop3): Image doesn't support compression [ 284.201614][T10462] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 284.238001][T10462] F2FS-fs (loop3): invalid crc value [ 284.264902][T10462] f2fs_printk: 1 callbacks suppressed [ 284.264919][T10462] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 284.325623][T10462] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 284.386988][T10462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 284.496778][ T28] audit: type=1326 audit(1752764338.173:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 284.524097][T10462] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 284.561279][T10462] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 284.596560][T10462] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 284.609879][ T28] audit: type=1326 audit(1752764338.173:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 284.632312][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.687901][T10462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 284.704813][ T28] audit: type=1326 audit(1752764338.243:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 284.774739][ T28] audit: type=1326 audit(1752764338.243:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 284.858089][ T28] audit: type=1326 audit(1752764338.243:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 284.881315][T10462] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_node_page+0x17b/0xf40 [ 284.945888][ T28] audit: type=1326 audit(1752764338.243:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 284.977968][ T5788] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 285.017833][ T28] audit: type=1326 audit(1752764338.243:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 285.059898][T10495] loop1: detected capacity change from 0 to 32768 [ 285.079166][T10495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1764 (10495) [ 285.094791][ T28] audit: type=1326 audit(1752764338.243:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0998e929 code=0x7ffc0000 [ 285.163110][T10495] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.172619][T10497] loop0: detected capacity change from 0 to 32768 [ 285.204949][T10495] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 285.213662][T10495] BTRFS info (device loop1): using free space tree [ 285.270211][T10497] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.335549][T10495] BTRFS info (device loop1): enabling ssd optimizations [ 285.342559][T10495] BTRFS info (device loop1): auto enabling async discard [ 285.374095][T10497] XFS (loop0): Ending clean mount [ 285.727522][ T5789] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.745170][ T5787] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.834384][T10533] loop3: detected capacity change from 0 to 2048 [ 285.955401][T10533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.978887][ T6988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (6988) [ 286.059244][ T28] audit: type=1800 audit(1752764339.743:130): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1769" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 286.296863][T10543] sg_write: process 867 (syz.0.1772) changed security contexts after opening file descriptor, this is not allowed. [ 286.396902][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.716826][T10549] loop0: detected capacity change from 0 to 128 [ 286.775863][T10549] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 286.793421][T10547] loop3: detected capacity change from 0 to 4096 [ 286.875001][T10549] ext4 filesystem being mounted at /412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.979267][T10547] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 287.044410][T10549] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 12829 (only 1 groups) [ 287.193475][T10541] loop1: detected capacity change from 0 to 32768 [ 287.206424][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.524947][ T55] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 287.744708][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 287.752115][ T55] usb 4-1: config 1 has an invalid interface number: 85 but max is 0 [ 287.765031][ T55] usb 4-1: config 1 has no interface number 0 [ 287.797815][ T55] usb 4-1: New USB device found, idVendor=07c9, idProduct=b010, bcdDevice=fc.3f [ 287.814688][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.839711][ T55] usb 4-1: Product: syz [ 287.844531][ T55] usb 4-1: Manufacturer: syz [ 287.854166][ T55] usb 4-1: SerialNumber: syz [ 288.305993][ T55] kaweth 4-1:1.85: Firmware present in device. [ 288.368079][T10581] loop1: detected capacity change from 0 to 256 [ 288.476247][ T55] kaweth 4-1:1.85: Error reading configuration (-71), no net device created [ 288.499252][ T55] kaweth: probe of 4-1:1.85 failed with error -5 [ 288.524954][ T55] usb 4-1: USB disconnect, device number 21 [ 289.442420][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 289.549426][T10602] loop3: detected capacity change from 0 to 1024 [ 290.052879][ T28] audit: type=1326 audit(1752764343.733:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea38e929 code=0x7ffc0000 [ 290.078477][T10621] loop3: detected capacity change from 0 to 512 [ 290.080664][ T28] audit: type=1326 audit(1752764343.733:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea38e929 code=0x7ffc0000 [ 290.127246][T10621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.151858][ T28] audit: type=1326 audit(1752764343.753:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06ea38e929 code=0x7ffc0000 [ 290.194786][ T5794] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 290.204971][T10621] EXT4-fs (loop3): 1 truncate cleaned up [ 290.207153][ T28] audit: type=1326 audit(1752764343.753:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06ea38e963 code=0x7ffc0000 [ 290.222090][T10621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.268684][ T28] audit: type=1326 audit(1752764343.753:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06ea38d3df code=0x7ffc0000 [ 290.349595][ T28] audit: type=1326 audit(1752764343.763:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f06ea38e9b7 code=0x7ffc0000 [ 290.400308][ T28] audit: type=1326 audit(1752764343.763:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06ea38d290 code=0x7ffc0000 [ 290.416792][ T5794] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.433512][ T28] audit: type=1326 audit(1752764343.763:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06ea38e52b code=0x7ffc0000 [ 290.442479][ T5794] usb 5-1: config 0 has no interface number 0 [ 290.484048][ T5794] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 290.493467][ T28] audit: type=1326 audit(1752764343.803:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06ea38d58a code=0x7ffc0000 [ 290.509405][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.544485][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.554477][ T28] audit: type=1326 audit(1752764343.803:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06ea38d58a code=0x7ffc0000 [ 290.584286][ T5794] usb 5-1: config 0 descriptor?? [ 290.608335][ T5794] usb 5-1: selecting invalid altsetting 1 [ 290.614259][ T5794] dvb_ttusb_budget: ttusb_init_controller: error [ 290.638137][ T5794] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 290.748129][T10633] nbd: must specify an index to disconnect [ 290.757010][T10635] loop1: detected capacity change from 0 to 16 [ 290.819628][ T5794] DVB: Unable to find symbol cx22700_attach() [ 290.826600][T10635] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.937858][T10635] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 290.959231][ T5794] DVB: Unable to find symbol tda10046_attach() [ 290.966923][T10641] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 290.969194][T10635] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 290.984783][ T5794] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 291.001033][T10641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.025101][ T5794] usb 5-1: USB disconnect, device number 19 [ 291.060338][T10635] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 291.329469][T10650] loop1: detected capacity change from 0 to 256 [ 291.730024][T10664] loop3: detected capacity change from 0 to 1024 [ 291.777350][T10664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.824204][T10672] loop0: detected capacity change from 0 to 512 [ 291.955185][ T5794] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 291.990607][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.148203][ T5794] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.168270][ T5794] usb 5-1: config 0 has no interface number 0 [ 292.185031][ T5794] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 292.207488][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.231059][ T5794] usb 5-1: config 0 descriptor?? [ 292.249192][ T5794] usb 5-1: selecting invalid altsetting 1 [ 292.268779][ T5794] dvb_ttusb_budget: ttusb_init_controller: error [ 292.280432][ T5794] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 292.393076][ T5794] DVB: Unable to find symbol cx22700_attach() [ 292.456473][ T5794] DVB: Unable to find symbol tda10046_attach() [ 292.465957][ T55] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 292.476473][ T5794] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 292.511717][ T5794] usb 5-1: USB disconnect, device number 20 [ 292.669050][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.680549][T10696] loop1: detected capacity change from 0 to 64 [ 292.718791][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.738803][ T55] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 292.748574][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.780079][ T55] usb 4-1: config 0 descriptor?? [ 292.829499][T10698] loop0: detected capacity change from 0 to 512 [ 293.154544][T10702] loop1: detected capacity change from 0 to 8192 [ 293.208371][ T55] zydacron 0003:13EC:0006.0028: unknown main item tag 0x6 [ 293.222933][ T55] zydacron 0003:13EC:0006.0028: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 293.248596][T10702] loop1: p1 p2 p4 [ 293.255543][T10702] loop1: p1 size 108920841 extends beyond EOD, truncated [ 293.289428][T10702] loop1: p2 start 861536256 is beyond EOD, truncated [ 293.312853][T10702] loop1: p4 size 65536 extends beyond EOD, truncated [ 293.410793][T10711] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 293.481745][ T5794] usb 4-1: USB disconnect, device number 22 [ 293.539795][T10713] sp0: Synchronizing with TNC [ 293.660404][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 293.673148][ T6284] udevd[6284]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 293.822784][T10722] loop0: detected capacity change from 0 to 512 [ 293.839561][T10722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.871694][T10722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.885447][T10722] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.894932][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 293.954928][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.127347][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.150075][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.180347][ T27] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 294.210571][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.235832][ T27] usb 2-1: config 0 descriptor?? [ 294.460283][T10745] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 294.630153][T10735] loop3: detected capacity change from 0 to 32768 [ 294.657758][T10735] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 294.666860][T10735] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 294.679970][ T27] cypress 0003:04B4:DE61.0029: unknown main item tag 0x0 [ 294.692897][ T27] cypress 0003:04B4:DE61.0029: unknown main item tag 0x0 [ 294.707417][ T27] cypress 0003:04B4:DE61.0029: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 294.729277][T10735] XFS (loop3): Ending clean mount [ 294.753584][T10735] XFS (loop3): Quotacheck needed: Please wait. [ 294.849960][T10735] XFS (loop3): Quotacheck: Done. [ 294.957496][ T6762] usb 2-1: USB disconnect, device number 25 [ 294.966972][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.235446][T10765] loop3: detected capacity change from 0 to 256 [ 295.285970][T10765] exfat: Deprecated parameter 'namecase' [ 295.304758][T10765] exfat: Deprecated parameter 'utf8' [ 295.353505][T10765] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 295.391333][T10765] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 295.409034][T10769] loop0: detected capacity change from 0 to 1024 [ 295.474271][T10769] hfsplus: bad catalog entry type [ 295.546042][ T11] hfsplus: b-tree write err: -5, ino 4 [ 295.968089][ T50] Bluetooth: hci0: link tx timeout [ 295.978556][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 296.989088][T10836] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 297.056838][T10834] loop1: detected capacity change from 0 to 4096 [ 297.123206][T10834] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 297.169649][T10834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.378141][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.595689][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 297.595706][ T28] audit: type=1326 audit(1752764351.273:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb609f8e929 code=0x7ffc0000 [ 297.663115][ T28] audit: type=1326 audit(1752764351.313:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb609f8e929 code=0x7ffc0000 [ 297.694327][ T28] audit: type=1326 audit(1752764351.313:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb609f8e929 code=0x7ffc0000 [ 297.769055][ T28] audit: type=1326 audit(1752764351.313:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb609f8e929 code=0x7ffc0000 [ 297.995157][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 298.021304][T10880] usb usb8: usbfs: process 10880 (syz.3.1899) did not claim interface 0 before use [ 298.915306][ T55] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 299.119276][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.135635][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 299.149585][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.182571][ T55] usb 2-1: config 0 descriptor?? [ 299.402589][ T55] (null): keene_cmd_main failed (-71) [ 299.448033][ T55] video4linux radio48: keene_cmd_main failed (-71) [ 299.464009][ T55] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 299.514127][ T55] usb 2-1: USB disconnect, device number 26 [ 299.880035][T10935] loop0: detected capacity change from 0 to 256 [ 299.919061][T10935] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3b112d97, utbl_chksum : 0xe619d30d) [ 299.985612][ T5856] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 300.190349][ T5856] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 300.214734][ T5856] usb 5-1: config 0 has no interface number 0 [ 300.227289][ T5856] usb 5-1: config 0 interface 98 has no altsetting 0 [ 300.261715][ T5856] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 300.273843][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.282062][ T5856] usb 5-1: Product: syz [ 300.286325][ T5856] usb 5-1: Manufacturer: syz [ 300.290938][ T5856] usb 5-1: SerialNumber: syz [ 300.305454][ T5856] usb 5-1: config 0 descriptor?? [ 300.534135][ T5856] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 300.773759][T10959] "syz.0.1938" (10959) uses obsolete ecb(arc4) skcipher [ 300.832101][T10963] loop3: detected capacity change from 0 to 512 [ 300.842235][T10961] overlay: Unknown parameter '\ns_resolver' [ 300.851319][T10963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.870813][T10963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 300.928584][T10963] EXT4-fs (loop3): 1 truncate cleaned up [ 300.935575][T10963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.036537][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.058401][ T5856] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 301.522662][ T5856] usb 5-1: failed to restore interface 98 altsetting 4 (error=-71) [ 301.565005][ T5856] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 301.565098][ T5856] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 301.565260][T10982] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1945'. [ 301.567461][ T6762] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 301.567484][ T6762] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 301.583127][ T5856] usb 5-1: USB disconnect, device number 21 [ 301.720589][T10989] tipc: Enabled bearer , priority 0 [ 301.901598][T10996] loop0: detected capacity change from 0 to 22 [ 301.921157][T10996] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 301.948975][T10996] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 301.997240][ T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 302.103450][T11001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1958'. [ 302.195713][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 302.212923][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.224875][ T55] usb 4-1: config 6 has an invalid interface number: 3 but max is 2 [ 302.233440][ T55] usb 4-1: config 6 has an invalid interface number: 255 but max is 2 [ 302.246642][ T55] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 302.277289][ T55] usb 4-1: config 6 has no interface number 0 [ 302.286799][T11009] loop1: detected capacity change from 0 to 256 [ 302.287417][ T55] usb 4-1: config 6 has no interface number 1 [ 302.313144][ T55] usb 4-1: too many endpoints for config 6 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 302.328028][ T50] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 302.349328][ T28] audit: type=1800 audit(1752764356.033:158): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1961" name="file1" dev="loop1" ino=1048737 res=0 errno=0 [ 302.354702][ T55] usb 4-1: config 6 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 302.372656][T11009] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 302.420684][ T55] usb 4-1: config 6 interface 2 has no altsetting 0 [ 302.439146][ T55] usb 4-1: config 6 interface 255 has no altsetting 0 [ 302.479852][ T55] usb 4-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 302.509732][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.536916][ T55] usb 4-1: Product: syz [ 302.554691][ T55] usb 4-1: Manufacturer: syz [ 302.559402][ T55] usb 4-1: SerialNumber: syz [ 302.813640][ T55] usb 4-1: selecting invalid altsetting 0 [ 302.827766][ T55] usb 4-1: Could not set interface, error -22 [ 302.890436][ T55] usb 4-1: USB disconnect, device number 23 [ 303.255675][T11022] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 303.328690][T11022] batman_adv: batadv0: Adding interface: team0 [ 303.339202][T11022] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.392948][T11022] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 303.444187][T11025] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 303.504768][T11025] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1967'. [ 303.588984][T11025] team0: entered promiscuous mode [ 303.607069][T11025] team_slave_0: entered promiscuous mode [ 303.633016][T11025] team_slave_1: entered promiscuous mode [ 303.664583][T11025] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.702267][T11025] batman_adv: batadv0: Interface activated: team0 [ 303.724997][T11025] batman_adv: batadv0: Interface deactivated: team0 [ 303.769256][T11025] batman_adv: batadv0: Removing interface: team0 [ 303.809566][T11025] bridge0: port 3(team0) entered blocking state [ 303.848617][T11025] bridge0: port 3(team0) entered disabled state [ 303.861619][T11025] team0: entered allmulticast mode [ 303.884084][T11025] team_slave_0: entered allmulticast mode [ 303.913680][T11025] team_slave_1: entered allmulticast mode [ 303.951602][T11025] bridge0: port 3(team0) entered blocking state [ 303.958111][T11025] bridge0: port 3(team0) entered forwarding state [ 304.829566][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 305.386036][T11088] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 305.584884][ T5794] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 305.764753][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 305.771445][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.783266][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.793111][ T5794] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.802242][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.814894][ T5794] usb 4-1: config 0 descriptor?? [ 305.822457][ T5794] hub 4-1:0.0: USB hub found [ 306.032197][ T5794] hub 4-1:0.0: 7 ports detected [ 306.037763][ T5794] hub 4-1:0.0: insufficient power available to use all downstream ports [ 306.232840][ T5794] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 306.240252][ T5794] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 306.250876][ T5794] usbhid 4-1:0.0: can't add hid device: -71 [ 306.257164][ T5794] usbhid: probe of 4-1:0.0 failed with error -71 [ 306.296214][ T5794] usb 4-1: USB disconnect, device number 24 [ 306.407149][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 306.417156][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 306.426042][ T50] Bluetooth: hci3: hardware error 0x00 [ 306.980052][T11101] loop0: detected capacity change from 0 to 128 [ 307.017510][T11106] loop1: detected capacity change from 0 to 128 [ 307.035527][T11101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 307.100678][T11101] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.158392][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 307.167928][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 307.177516][T11112] netlink: 'syz.4.2017': attribute type 14 has an invalid length. [ 307.185883][T11112] netlink: 'syz.4.2017': attribute type 12 has an invalid length. [ 307.282417][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.308039][T11116] usb usb8: usbfs: process 11116 (syz.4.2011) did not claim interface 0 before use [ 307.559628][T11122] loop0: detected capacity change from 0 to 2048 [ 307.589282][T11122] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 307.639516][T11129] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.650821][T11122] syz.0.2007: attempt to access beyond end of device [ 307.650821][T11122] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 307.654850][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 307.695112][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 307.711913][T11128] nbd: socks must be embedded in a SOCK_ITEM attr [ 308.268331][T11154] loop3: detected capacity change from 0 to 1024 [ 308.298106][T11154] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 308.326808][T11154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.453896][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.474871][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 308.814876][T11165] loop0: detected capacity change from 0 to 4096 [ 309.072926][T11171] program syz.4.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.570444][T11167] loop3: detected capacity change from 0 to 32768 [ 309.615298][T11167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2034 (11167) [ 309.686526][T11167] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.719195][T11188] loop1: detected capacity change from 0 to 256 [ 309.724531][T11167] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 309.761673][T11188] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 309.764923][T11167] BTRFS info (device loop3): enabling auto defrag [ 309.802993][T11167] BTRFS info (device loop3): doing ref verification [ 309.847566][T11167] BTRFS info (device loop3): use no compression [ 309.853880][T11167] BTRFS info (device loop3): force clearing of disk cache [ 309.874667][T11167] BTRFS info (device loop3): max_inline at 4096 [ 309.918017][T11167] BTRFS info (device loop3): disabling free space tree [ 310.058207][T11167] BTRFS info (device loop3): enabling ssd optimizations [ 310.074846][T11167] BTRFS info (device loop3): auto enabling async discard [ 310.097061][T11167] BTRFS info (device loop3): rebuilding free space tree [ 310.160208][T11167] BTRFS info (device loop3): disabling free space tree [ 310.190304][T11167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 310.243862][T11167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 310.478472][T11223] loop0: detected capacity change from 0 to 512 [ 310.492641][ T5788] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.525575][T11223] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.550357][T11223] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 310.637981][T11223] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 310.719283][T11223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 310.771649][T11223] System zones: 0-2, 18-18, 34-35 [ 310.820218][T11223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.134979][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.613594][T11250] loop3: detected capacity change from 0 to 1024 [ 311.824478][ T12] hfsplus: b-tree write err: -5, ino 8 [ 311.949113][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2068'. [ 311.967870][T11258] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2068'. [ 311.981651][T11258] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 312.790015][T11285] loop0: detected capacity change from 0 to 4096 [ 312.821357][T11285] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 313.018462][T11285] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 313.079638][ T12] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 313.099127][ T5789] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 313.112008][T11279] loop1: detected capacity change from 0 to 32768 [ 313.129472][ T5789] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 313.144774][ T5789] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 313.164822][ T27] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 313.177266][ T11] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 313.201300][T11294] loop3: detected capacity change from 0 to 256 [ 313.290158][T11294] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 313.383892][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 313.396264][ T27] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.417380][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.424077][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 313.433328][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.450273][ T27] usb 5-1: config 0 descriptor?? [ 313.907896][ T27] corsair-cpro 0003:1B1C:0C10.002A: item fetching failed at offset 2/5 [ 313.935734][ T27] corsair-cpro: probe of 0003:1B1C:0C10.002A failed with error -22 [ 314.050893][T11312] syz.3.2093 (11312): drop_caches: 4 [ 314.172236][ T5842] usb 5-1: USB disconnect, device number 22 [ 314.257850][T11321] tipc: Enabling of bearer rejected, failed to enable media [ 314.515299][T11329] loop0: detected capacity change from 0 to 2048 [ 314.537517][T11329] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 314.558344][T11329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.759629][T11337] loop3: detected capacity change from 0 to 256 [ 314.768031][T11337] FAT-fs (loop3): Unrecognized mount option "coDepage=865" or missing value [ 314.971004][T11345] loop0: detected capacity change from 0 to 16 [ 315.009525][T11345] erofs: (device loop0): mounted with root inode @ nid 36. [ 315.068871][ T28] audit: type=1800 audit(1752764368.753:159): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2110" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 315.175141][T11351] loop3: detected capacity change from 0 to 64 [ 315.250409][T11355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2122'. [ 315.349682][T11349] loop1: detected capacity change from 0 to 8192 [ 315.385460][T11349] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 315.424313][T11349] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 315.434326][T11349] REISERFS (device loop1): using ordered data mode [ 315.442079][T11349] reiserfs: using flush barriers [ 315.454681][T11349] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 315.485463][T11349] REISERFS (device loop1): checking transaction log (loop1) [ 315.775103][T11349] REISERFS (device loop1): Using tea hash to sort names [ 315.806333][T11349] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 316.575230][T11376] loop3: detected capacity change from 0 to 1024 [ 316.617212][T11376] EXT4-fs: Ignoring removed nobh option [ 316.622834][T11376] EXT4-fs: Ignoring removed oldalloc option [ 316.651320][T11376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.744251][T11376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.764818][T11383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2128'. [ 317.367631][ T28] audit: type=1800 audit(1752764371.053:160): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2124" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 317.452097][T11394] loop1: detected capacity change from 0 to 32768 [ 317.460740][T11394] XFS: noikeep mount option is deprecated. [ 317.471466][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.567643][T11394] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.702728][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 317.711915][T11394] XFS (loop1): Ending clean mount [ 317.738911][T11394] XFS (loop1): Quotacheck needed: Please wait. [ 317.828098][T11394] XFS (loop1): Quotacheck: Done. [ 318.040559][T11424] loop3: detected capacity change from 0 to 512 [ 318.044245][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 318.094431][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.108316][T11424] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2143: iget: bad extended attribute block 1 [ 318.126495][T11424] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2143: couldn't read orphan inode 15 (err -117) [ 318.171610][T11424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.201498][T11424] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 318.250007][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.735486][T11439] pim6reg: entered allmulticast mode [ 319.833752][T11459] loop0: detected capacity change from 0 to 2048 [ 319.894704][T11461] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.038557][T11463] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 320.069725][T11463] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 320.110811][T11463] Remounting filesystem read-only [ 320.124730][T11463] NILFS (loop0): error -5 truncating bmap (ino=16) [ 320.148010][T11463] syz.0.2158 (11463) used greatest stack depth: 19952 bytes left [ 320.215309][ T5789] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 320.234753][ T5789] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 320.258086][ T5789] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 320.277634][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.295198][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.312672][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.324401][ T5789] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 320.336097][T11451] loop3: detected capacity change from 0 to 32768 [ 320.343976][ T5789] NILFS (loop0): discard dirty block: blocknr=3, size=1024 [ 320.352471][T11451] XFS: noikeep mount option is deprecated. [ 320.360179][ T5789] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 320.373039][ T5789] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 320.389290][ T5789] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 320.404991][ T5789] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 320.420605][ T5789] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 320.435224][T11451] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.454815][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.463759][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.474539][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.508351][ T5789] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 320.520678][T11457] loop1: detected capacity change from 0 to 32768 [ 320.529330][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.569037][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.579509][T11451] XFS (loop3): Ending clean mount [ 320.603592][T11451] XFS (loop3): Quotacheck needed: Please wait. [ 320.613158][ T5789] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 320.634570][T11457] ERROR: (device loop1): duplicateIXtree: [ 320.634570][T11457] [ 320.647441][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.658054][T11457] ERROR: (device loop1): remounting filesystem as read-only [ 320.670264][ T5789] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 320.679354][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.688542][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.702376][ T5789] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 320.710231][T11451] XFS (loop3): Quotacheck: Done. [ 320.744810][ T5789] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 320.845199][ T27] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 320.903352][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.054835][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 321.066793][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.076726][ T27] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 321.123510][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.143542][ T27] usb 5-1: Product: syz [ 321.156908][ T27] usb 5-1: Manufacturer: syz [ 321.161677][ T27] usb 5-1: SerialNumber: syz [ 321.198375][ T27] usb 5-1: config 0 descriptor?? [ 321.583464][T11498] netlink: 'syz.0.2173': attribute type 21 has an invalid length. [ 321.644859][ T27] gs_usb 5-1:0.0: Configuring for 225 interfaces [ 321.651278][ T27] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 321.688614][ T27] gs_usb: probe of 5-1:0.0 failed with error -22 [ 321.849963][ T27] usb 5-1: USB disconnect, device number 23 [ 322.245687][ T5842] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 322.445207][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 322.460997][ T5842] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 322.472426][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.493238][ T5842] usb 4-1: config 0 descriptor?? [ 322.959035][ T5842] input: HID 28bd:1903 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.002B/input/input40 [ 322.999816][ T5842] uclogic 0003:28BD:1903.002B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0 [ 323.166728][ T27] usb 4-1: USB disconnect, device number 25 [ 324.084859][ T5842] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 324.267294][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 324.279885][ T5842] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 324.289110][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.297450][ T5842] usb 4-1: Product: syz [ 324.301738][ T5842] usb 4-1: Manufacturer: syz [ 324.306458][ T5842] usb 4-1: SerialNumber: syz [ 324.313840][ T5842] usb 4-1: config 0 descriptor?? [ 324.325614][ T5842] usbtouchscreen: probe of 4-1:0.0 failed with error -32 [ 324.547181][ T27] usb 4-1: USB disconnect, device number 26 [ 325.179894][T11609] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2222'. [ 325.189200][T11609] netlink: 'syz.4.2222': attribute type 3 has an invalid length. [ 325.296838][T11615] loop3: detected capacity change from 0 to 128 [ 325.307367][T11616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2223'. [ 325.318066][T11616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2223'. [ 325.328337][T11613] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2223'. [ 325.339650][T11615] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.361224][T11615] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.442760][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.026024][ T5797] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 326.204721][ T5797] usb 4-1: Using ep0 maxpacket: 16 [ 326.211354][ T5797] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 326.222017][ T5797] usb 4-1: config 0 has no interface number 0 [ 326.228213][ T5797] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.239309][ T5797] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 326.250551][ T5797] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 326.259676][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 326.269787][ T5797] usb 4-1: Product: syz [ 326.273973][ T5797] usb 4-1: SerialNumber: syz [ 326.281090][ T5797] usb 4-1: config 0 descriptor?? [ 326.290230][ T5797] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 326.298127][ T5797] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input42 [ 326.582253][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.582617][ T55] usb 4-1: USB disconnect, device number 27 [ 326.589238][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 326.631929][ T55] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 326.996049][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 327.066059][T11657] ptrace attach of "./syz-executor exec"[5789] was attempted by ""[11657] [ 327.293054][T11665] loop3: detected capacity change from 0 to 256 [ 327.318676][T11665] FAT-fs (loop3): Directory bread(block 64) failed [ 327.329530][T11665] FAT-fs (loop3): Directory bread(block 65) failed [ 327.336856][T11665] FAT-fs (loop3): Directory bread(block 66) failed [ 327.343421][T11665] FAT-fs (loop3): Directory bread(block 67) failed [ 327.354546][T11665] FAT-fs (loop3): Directory bread(block 68) failed [ 327.361408][T11665] FAT-fs (loop3): Directory bread(block 69) failed [ 327.373471][T11665] FAT-fs (loop3): Directory bread(block 70) failed [ 327.380348][T11665] FAT-fs (loop3): Directory bread(block 71) failed [ 327.389064][T11665] FAT-fs (loop3): Directory bread(block 72) failed [ 327.395741][T11665] FAT-fs (loop3): Directory bread(block 73) failed [ 327.396562][ T55] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 327.607599][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.620016][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.635855][ T55] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 327.649147][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.659637][ T55] usb 5-1: config 0 descriptor?? [ 327.832642][T11667] loop3: detected capacity change from 0 to 32768 [ 327.854398][T11667] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2248 (11667) [ 327.900355][T11667] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 327.912758][T11667] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 327.923847][T11667] BTRFS info (device loop3): using free space tree [ 328.002926][T11667] BTRFS info (device loop3): enabling ssd optimizations [ 328.024798][T11667] BTRFS info (device loop3): auto enabling async discard [ 328.128663][ T55] lenovo 0003:17EF:6047.002C: unknown main item tag 0x0 [ 328.154677][ T55] lenovo 0003:17EF:6047.002C: unknown main item tag 0x0 [ 328.171161][ T55] lenovo 0003:17EF:6047.002C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 328.290895][ T5788] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 328.334925][ T55] lenovo 0003:17EF:6047.002C: Failed to switch F7/9/11 mode: -71 [ 328.359790][ T55] lenovo 0003:17EF:6047.002C: Failed to switch middle button: -71 [ 328.404841][ T55] lenovo 0003:17EF:6047.002C: Fn-lock setting failed: -71 [ 328.424543][ T55] lenovo 0003:17EF:6047.002C: Sensitivity setting failed: -71 [ 328.475019][ T55] usb 5-1: USB disconnect, device number 24 [ 328.652177][ T6988] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 11 /dev/loop3 scanned by udevd (6988) [ 328.790539][T11672] loop1: detected capacity change from 0 to 32768 [ 328.836403][T11702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2257'. [ 328.866740][T11702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2257'. [ 328.894936][T11701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2257'. [ 329.206023][T11708] ptrace attach of "./syz-executor exec"[5788] was attempted by ""[11708] [ 329.340673][ T28] audit: type=1326 audit(1752764383.023:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.3.2262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06ea38e929 code=0x0 [ 330.185612][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 330.275921][T11753] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2282'. [ 330.276188][T11751] loop3: detected capacity change from 0 to 512 [ 330.384756][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 330.391541][T11755] process 'syz.4.2283' launched '/dev/fd/3' with NULL argv: empty string added [ 330.401937][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.413177][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.427854][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 330.444679][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.465164][ T9] usb 2-1: config 0 descriptor?? [ 330.904134][ T9] wacom 0003:056A:0084.002D: unbalanced collection at end of report description [ 330.920489][ T9] wacom 0003:056A:0084.002D: parse failed [ 330.927245][ T9] wacom: probe of 0003:056A:0084.002D failed with error -22 [ 331.034552][T11780] loop3: detected capacity change from 0 to 256 [ 331.072129][T11780] FAT-fs (loop3): Directory bread(block 64) failed [ 331.080305][T11780] FAT-fs (loop3): Directory bread(block 65) failed [ 331.087182][T11780] FAT-fs (loop3): Directory bread(block 66) failed [ 331.093740][T11780] FAT-fs (loop3): Directory bread(block 67) failed [ 331.101063][T11780] FAT-fs (loop3): Directory bread(block 68) failed [ 331.107790][T11780] FAT-fs (loop3): Directory bread(block 69) failed [ 331.114426][T11780] FAT-fs (loop3): Directory bread(block 70) failed [ 331.128717][T11780] FAT-fs (loop3): Directory bread(block 71) failed [ 331.138909][T11780] FAT-fs (loop3): Directory bread(block 72) failed [ 331.142456][ T27] usb 2-1: USB disconnect, device number 27 [ 331.153414][T11780] FAT-fs (loop3): Directory bread(block 73) failed [ 331.271231][T11784] loop3: detected capacity change from 0 to 1024 [ 331.471077][T11789] [U] [ 331.862460][T11811] loop3: detected capacity change from 0 to 64 [ 331.988402][T11816] loop1: detected capacity change from 0 to 1024 [ 332.106674][T11818] tipc: Enabled bearer , priority 10 [ 333.085028][ T27] tipc: Node number set to 1509949440 [ 333.121732][T11848] loop3: detected capacity change from 0 to 1024 [ 333.232064][ T12] hfsplus: b-tree write err: -5, ino 4 [ 334.058590][T11878] loop1: detected capacity change from 0 to 1024 [ 334.088657][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2341'. [ 334.118640][T11878] hfsplus: can't free extent [ 334.142245][T11878] hfsplus: can't free extent [ 334.159209][T11878] hfsplus: can't free extent [ 334.302504][T11884] loop1: detected capacity change from 0 to 256 [ 334.363000][T11884] FAT-fs (loop1): Directory bread(block 64) failed [ 334.371893][T11884] FAT-fs (loop1): Directory bread(block 65) failed [ 334.382569][T11884] FAT-fs (loop1): Directory bread(block 66) failed [ 334.390554][T11884] FAT-fs (loop1): Directory bread(block 67) failed [ 334.401599][T11884] FAT-fs (loop1): Directory bread(block 68) failed [ 334.403249][T11887] loop3: detected capacity change from 0 to 2048 [ 334.409611][T11884] FAT-fs (loop1): Directory bread(block 69) failed [ 334.440631][T11884] FAT-fs (loop1): Directory bread(block 70) failed [ 334.447381][T11884] FAT-fs (loop1): Directory bread(block 71) failed [ 334.460856][T11884] FAT-fs (loop1): Directory bread(block 72) failed [ 334.468852][T11884] FAT-fs (loop1): Directory bread(block 73) failed [ 334.489283][T11887] loop3: p1 < > p3 [ 334.499389][T11887] loop3: p3 size 134217728 extends beyond EOD, truncated [ 334.828701][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 334.842200][ T6992] udevd[6992]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 334.912630][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 334.935148][ T6284] udevd[6284]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 335.417751][T11896] loop3: detected capacity change from 0 to 32768 [ 335.489158][T11896] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 335.489158][T11896] [ 335.525273][T11896] ERROR: (device loop3): remounting filesystem as read-only [ 335.559574][T11898] loop1: detected capacity change from 0 to 32768 [ 336.120472][T11912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2358'. [ 336.209574][T11914] loop1: detected capacity change from 0 to 4096 [ 336.228389][T11914] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 336.705373][ T27] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 336.760372][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'. [ 336.773402][T11929] loop1: detected capacity change from 0 to 2048 [ 336.805255][T11929] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 336.840106][T11929] UDF-fs: unknown compression code (0) [ 336.908317][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 336.940027][ T27] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 336.960607][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.997071][ T27] usb 4-1: config 0 descriptor?? [ 337.012647][T11918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.469219][ T27] elan 0003:04F3:0755.002E: unknown main item tag 0x0 [ 337.476273][ T27] elan 0003:04F3:0755.002E: item fetching failed at offset 3/5 [ 337.495424][ T27] elan 0003:04F3:0755.002E: Hid Parse failed [ 337.501535][ T27] elan: probe of 0003:04F3:0755.002E failed with error -22 [ 337.671453][ T27] usb 4-1: USB disconnect, device number 28 [ 337.733105][T11954] atomic_op ffff888059508998 conn xmit_atomic 0000000000000000 [ 337.745100][ T5842] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 337.937373][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 337.944157][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.955275][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.967893][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.980845][ T5842] usb 5-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 337.990918][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.002118][ T5842] usb 5-1: config 0 descriptor?? [ 338.457726][ T5842] ortek 0003:05A4:1700.002F: item fetching failed at offset 2/5 [ 338.479075][ T5842] ortek: probe of 0003:05A4:1700.002F failed with error -22 [ 338.563659][T11968] netlink: 'syz.3.2384': attribute type 4 has an invalid length. [ 338.584036][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2384'. [ 338.660383][ T55] usb 5-1: USB disconnect, device number 25 [ 338.967175][T11962] loop1: detected capacity change from 0 to 40427 [ 339.006943][T11962] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 339.032845][T11962] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 339.087700][T11962] F2FS-fs (loop1): invalid crc value [ 339.143450][T11962] F2FS-fs (loop1): Found nat_bits in checkpoint [ 339.238052][T11962] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 339.248375][T11962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 340.304908][ T5842] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 340.462166][T12019] loop3: detected capacity change from 0 to 256 [ 340.506449][ T5842] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 340.524703][ T5842] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 340.538770][ T5842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 340.553273][ T5842] usb 2-1: config 1 has no interface number 0 [ 340.559900][ T5842] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 340.571270][ T5842] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 340.601833][ T5842] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 340.624998][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.657788][ T5842] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 341.237218][ T5842] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 341.299224][T12053] tipc: Enabling of bearer rejected, failed to enable media [ 341.435431][T12059] 9pnet_rdma: rdma_create_trans (12059): problem binding to privport: 13 [ 341.453795][ T5842] usb 2-1: USB disconnect, device number 28 [ 341.463754][ T5842] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 341.555248][ T55] kernel write not supported for file /input/event2 (pid: 55 comm: kworker/0:2) [ 341.654021][T12067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2430'. [ 342.039188][T12081] loop3: detected capacity change from 0 to 8192 [ 342.082044][T12081] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 342.151882][T12081] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 342.162811][T12081] REISERFS (device loop3): using ordered data mode [ 342.169530][T12081] reiserfs: using flush barriers [ 342.187041][T12081] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 342.224732][T12081] REISERFS (device loop3): checking transaction log (loop3) [ 342.265902][T12081] REISERFS (device loop3): Using r5 hash to sort names [ 342.289224][T12081] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 342.337632][T12081] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 342.421579][T12081] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 342.457508][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 342.467090][T12081] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 342.494722][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 342.517099][T12096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 343.019842][T12115] loop3: detected capacity change from 0 to 64 [ 343.198576][T12121] loop3: detected capacity change from 0 to 1024 [ 343.445938][ T1324] hfsplus: b-tree write err: -5, ino 4 [ 343.505570][T12127] option changes via remount are deprecated (pid=12126 comm=syz.0.2458) [ 344.214885][ T5842] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 344.414749][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 344.444068][ T5842] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 344.468010][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.478067][ T5842] usb 2-1: Product: syz [ 344.482275][ T5842] usb 2-1: Manufacturer: syz [ 344.492257][ T5842] usb 2-1: SerialNumber: syz [ 344.508574][ T5842] ssu100 2-1:254.0: Quatech SSU-100 USB to Serial Driver converter detected [ 344.658379][T12160] loop3: detected capacity change from 0 to 32768 [ 345.543109][T12204] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2494'. [ 345.552387][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2494'. [ 345.574202][ T5842] ssu100: probe of 2-1:254.0 failed with error -71 [ 345.595067][ T5842] usb 2-1: USB disconnect, device number 29 [ 345.895503][T12214] netlink: 'syz.0.2500': attribute type 13 has an invalid length. [ 345.911873][T12218] loop3: detected capacity change from 0 to 2048 [ 345.918706][T12214] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2500'. [ 345.920326][T12218] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 345.950824][T12216] syz.1.2501 (12216) used greatest stack depth: 18768 bytes left [ 345.952735][T12214] : renamed from syz_tun (while UP) [ 346.000562][T12214] : refused to change device tx_queue_len [ 346.016000][T12214] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 346.018675][T12220] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.054769][ T6988] udevd[6988]: incorrect nilfs2 checksum on /dev/loop3 [ 346.730950][T12232] loop3: detected capacity change from 0 to 2048 [ 346.847307][T12232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.071461][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.583996][T12239] loop3: detected capacity change from 0 to 32768 [ 348.606505][T12239] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.670217][T12239] XFS (loop3): Ending clean mount [ 348.678658][T12239] XFS (loop3): Quotacheck needed: Please wait. [ 348.719205][T12239] XFS (loop3): Quotacheck: Done. [ 348.824946][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.414861][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 349.555225][ T55] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 349.656158][T12285] tipc: Enabling of bearer rejected, failed to enable media [ 349.744707][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 349.762712][ T55] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.774515][ T55] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.785434][ T55] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.795182][ T55] usb 4-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 349.808201][ T55] usb 4-1: config 7 interface 0 has no altsetting 0 [ 349.815442][ T55] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 349.824525][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.260554][ T55] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0030/input/input43 [ 350.380557][ T55] kye 0003:0458:5010.0030: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 350.495267][ T5797] usb 4-1: USB disconnect, device number 29 [ 351.121553][T12298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2533'. [ 351.386916][T12312] loop3: detected capacity change from 0 to 256 [ 351.453817][T12312] FAT-fs (loop3): Directory bread(block 64) failed [ 351.478252][T12312] FAT-fs (loop3): Directory bread(block 65) failed [ 351.494390][T12312] FAT-fs (loop3): Directory bread(block 66) failed [ 351.512515][T12317] IPVS: Error connecting to the multicast addr [ 351.520036][T12312] FAT-fs (loop3): Directory bread(block 67) failed [ 351.530161][T12312] FAT-fs (loop3): Directory bread(block 68) failed [ 351.548247][T12312] FAT-fs (loop3): Directory bread(block 69) failed [ 351.579227][T12312] FAT-fs (loop3): Directory bread(block 70) failed [ 351.604742][T12312] FAT-fs (loop3): Directory bread(block 71) failed [ 351.611439][T12312] FAT-fs (loop3): Directory bread(block 72) failed [ 351.637958][T12312] FAT-fs (loop3): Directory bread(block 73) failed [ 352.074929][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2555'. [ 352.160746][T12348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2558'. [ 352.502048][T12348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.518108][T12348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.532382][T12348] bond0 (unregistering): Released all slaves [ 352.856433][ T11] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 353.049935][T12363] loop3: detected capacity change from 0 to 32768 [ 353.104920][T12363] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 353.200713][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 353.720682][T12393] program syz.4.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.204847][ T55] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 354.323806][T12405] loop3: detected capacity change from 0 to 32768 [ 354.350545][T12405] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 354.409219][ T55] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 354.418433][ T55] usb 5-1: config 0 has no interface number 0 [ 354.440880][ T55] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 354.465994][T12405] XFS (loop3): Ending clean mount [ 354.471238][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.481431][ T55] usb 5-1: Product: syz [ 354.488231][ T55] usb 5-1: Manufacturer: syz [ 354.490147][T12405] XFS (loop3): Quotacheck needed: Please wait. [ 354.493071][ T55] usb 5-1: SerialNumber: syz [ 354.509146][ T55] usb 5-1: config 0 descriptor?? [ 354.553318][T12405] XFS (loop3): Quotacheck: Done. [ 354.569714][ T28] audit: type=1800 audit(1752764408.253:162): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2586" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 354.594745][ T5797] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 354.623982][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 354.758147][ T55] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 354.786163][ T55] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 354.795699][ T55] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 354.804828][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 354.805442][ T55] usb 5-1: media controller created [ 354.816075][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 354.818392][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.835083][ T5797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 354.868068][ T5797] usb 2-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 354.894920][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.899382][ T55] DVB: Unable to find symbol dib7000p_attach() [ 354.925914][ T5797] usb 2-1: config 0 descriptor?? [ 354.926458][ T55] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 354.953898][ T55] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 354.980158][ T55] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 354.983702][T12423] netlink: 'syz.3.2590': attribute type 28 has an invalid length. [ 354.991629][ T55] usb 5-1: media controller created [ 355.011036][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.028541][ T55] dib0700: the master dib7090 has to be initialized first [ 355.038972][ T55] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 355.131501][ T55] rc_core: IR keymap rc-dib0700-rc5 not found [ 355.140392][ T55] Registered IR keymap rc-empty [ 355.149139][ T55] dvb-usb: could not initialize remote control. [ 355.157343][ T55] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 355.361040][ T5797] wacom 0003:056A:0301.0031: unbalanced delimiter at end of report description [ 355.371826][ T5797] wacom 0003:056A:0301.0031: parse failed [ 355.378086][ T5797] wacom: probe of 0003:056A:0301.0031 failed with error -22 [ 355.407887][ T55] usb 5-1: USB disconnect, device number 26 [ 355.448079][ T55] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 355.577161][ T5797] usb 2-1: USB disconnect, device number 30 [ 355.758015][T12445] loop3: detected capacity change from 0 to 16 [ 355.779202][T12445] erofs: (device loop3): mounted with root inode @ nid 36. [ 355.950040][T12445] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 355.968171][T12445] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 355.994858][T12445] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 356.220517][T12458] usb usb8: usbfs: process 12458 (syz.0.2606) did not claim interface 0 before use [ 356.485641][ T55] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 356.696722][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.715635][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 356.736133][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.743173][T12486] loop3: detected capacity change from 0 to 1024 [ 356.753185][ T55] usb 2-1: config 0 descriptor?? [ 356.786087][T12486] EXT4-fs: Ignoring removed nobh option [ 356.804934][T12486] EXT4-fs: Ignoring removed bh option [ 356.853502][T12486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.028452][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.193113][ T55] lg-g15 0003:046D:C222.0032: unknown main item tag 0x0 [ 357.245599][ T55] lg-g15 0003:046D:C222.0032: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 357.409328][ T55] usb 2-1: USB disconnect, device number 31 [ 357.629741][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2630'. [ 357.639098][T12510] netlink: 'syz.4.2630': attribute type 5 has an invalid length. [ 358.713399][T12522] loop3: detected capacity change from 0 to 32768 [ 358.743088][T12522] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 358.802710][T12522] XFS (loop3): Ending clean mount [ 358.872151][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 362.134817][T12573] loop3: detected capacity change from 0 to 1024 [ 362.179355][T12573] hfsplus: bad catalog entry type [ 362.272677][ T11] hfsplus: b-tree write err: -5, ino 4 [ 362.782944][T12597] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2665'. [ 362.960101][T12599] loop3: detected capacity change from 0 to 8192 [ 363.042007][T12599] loop3: p1 p2 p4 [ 363.052832][T12599] loop3: p1 size 108920841 extends beyond EOD, truncated [ 363.071623][T12599] loop3: p2 start 861536256 is beyond EOD, truncated [ 363.100912][T12599] loop3: p4 size 65536 extends beyond EOD, truncated [ 363.211869][ T5842] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 363.355539][ T6284] udevd[6284]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 363.358718][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 363.405121][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.435837][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.475787][ T5842] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 363.498765][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2678'. [ 363.501699][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.527673][ T5842] usb 5-1: config 0 descriptor?? [ 363.734849][T12630] loop3: detected capacity change from 0 to 256 [ 363.966541][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 363.979619][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 364.001384][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 364.012170][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 364.022587][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 364.039767][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 364.047990][ T5842] hkems 0003:2006:0118.0033: unknown main item tag 0x0 [ 364.061787][ T5842] hkems 0003:2006:0118.0033: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 364.075206][ T5842] hkems 0003:2006:0118.0033: no inputs found [ 364.081682][ T5842] hkems 0003:2006:0118.0033: force feedback init failed [ 364.165353][ T6762] ------------[ cut here ]------------ [ 364.171397][ T6762] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 364.211430][ T6762] WARNING: CPU: 0 PID: 6762 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 364.220829][ T6762] Modules linked in: [ 364.224887][ T6762] CPU: 0 PID: 6762 Comm: kworker/0:6 Not tainted 6.6.98-syzkaller #0 [ 364.233099][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.243306][ T6762] Workqueue: events request_firmware_work_func [ 364.250126][ T6762] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 364.256135][ T6762] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 aa d3 c9 ff 49 8b 17 48 c7 c7 c0 b2 ba 8a 48 89 de e8 38 04 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 82 8f 72 ff [ 364.275939][ T6762] RSP: 0000:ffffc90003b27800 EFLAGS: 00010246 [ 364.282085][ T6762] RAX: 1d12d634319da600 RBX: ffffffff8b2146a0 RCX: ffff888026ec8000 [ 364.290091][ T6762] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 364.298191][ T6762] RBP: dffffc0000000000 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 364.300974][T12639] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.306250][ T6762] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffffffff16428d8 [ 364.320679][ T6762] R13: 0000000000000001 R14: ffff88805f52f9b0 R15: ffff88807e44c008 [ 364.328727][ T6762] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 364.337797][ T6762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.344456][ T6762] CR2: 0000001b31216ff8 CR3: 0000000075642000 CR4: 00000000003506f0 [ 364.353116][ T6762] Call Trace: [ 364.356431][ T6762] [ 364.359380][ T6762] ? sysfs_unmerge_group+0x10d/0x130 [ 364.364865][ T6762] device_del+0x251/0x900 [ 364.369236][ T6762] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 364.375268][ T6762] ? kill_device+0x160/0x160 [ 364.379912][ T6762] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 364.385890][ T6762] ? _raw_spin_unlock+0x40/0x40 [ 364.390782][ T6762] ? complete_all+0x2d/0x1d0 [ 364.395476][ T6762] ? __fw_load_abort+0x8b/0x1a0 [ 364.400367][ T6762] firmware_fallback_sysfs+0x682/0x940 [ 364.405957][ T6762] _request_firmware+0xed9/0x1510 [ 364.411105][ T6762] ? request_firmware+0x50/0x50 [ 364.415998][ T6762] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 364.422058][ T6762] ? read_lock_is_recursive+0x20/0x20 [ 364.427475][ T6762] request_firmware_work_func+0xb0/0x1b0 [ 364.433218][ T6762] ? process_scheduled_works+0x957/0x15b0 [ 364.438976][ T6762] process_scheduled_works+0xa45/0x15b0 [ 364.444687][ T6762] ? assign_work+0x400/0x400 [ 364.449318][ T6762] ? assign_work+0x39e/0x400 [ 364.454545][ T6762] worker_thread+0xa55/0xfc0 [ 364.459177][ T6762] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 364.465327][ T6762] ? _raw_spin_unlock+0x40/0x40 [ 364.469066][ T5797] usb 5-1: USB disconnect, device number 27 [ 364.470194][ T6762] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 364.470241][ T6762] kthread+0x2fa/0x390 [ 364.486400][ T6762] ? pr_cont_work+0x560/0x560 [ 364.491190][ T6762] ? kthread_blkcg+0xd0/0xd0 [ 364.495810][ T6762] ret_from_fork+0x48/0x80 [ 364.500252][ T6762] ? kthread_blkcg+0xd0/0xd0 [ 364.504940][ T6762] ret_from_fork_asm+0x11/0x20 [ 364.509750][ T6762] [ 364.512870][ T6762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 364.520157][ T6762] CPU: 0 PID: 6762 Comm: kworker/0:6 Not tainted 6.6.98-syzkaller #0 [ 364.528219][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.538269][ T6762] Workqueue: events request_firmware_work_func [ 364.544425][ T6762] Call Trace: [ 364.547695][ T6762] [ 364.550617][ T6762] dump_stack_lvl+0x16c/0x230 [ 364.555292][ T6762] ? show_regs_print_info+0x20/0x20 [ 364.560486][ T6762] ? load_image+0x3b0/0x3b0 [ 364.564995][ T6762] panic+0x2c0/0x710 [ 364.568889][ T6762] ? bpf_jit_dump+0xd0/0xd0 [ 364.573397][ T6762] ? ret_from_fork_asm+0x11/0x20 [ 364.578336][ T6762] __warn+0x2e0/0x470 [ 364.582312][ T6762] ? sysfs_remove_group+0x178/0x2a0 [ 364.587504][ T6762] ? sysfs_remove_group+0x178/0x2a0 [ 364.592692][ T6762] report_bug+0x2be/0x4f0 [ 364.597015][ T6762] ? sysfs_remove_group+0x178/0x2a0 [ 364.602201][ T6762] ? sysfs_remove_group+0x178/0x2a0 [ 364.607390][ T6762] ? sysfs_remove_group+0x17a/0x2a0 [ 364.612576][ T6762] handle_bug+0xcf/0x120 [ 364.616813][ T6762] exc_invalid_op+0x1a/0x50 [ 364.621324][ T6762] asm_exc_invalid_op+0x1a/0x20 [ 364.626194][ T6762] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 364.632006][ T6762] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 aa d3 c9 ff 49 8b 17 48 c7 c7 c0 b2 ba 8a 48 89 de e8 38 04 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 82 8f 72 ff [ 364.651623][ T6762] RSP: 0000:ffffc90003b27800 EFLAGS: 00010246 [ 364.657690][ T6762] RAX: 1d12d634319da600 RBX: ffffffff8b2146a0 RCX: ffff888026ec8000 [ 364.665678][ T6762] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 364.673654][ T6762] RBP: dffffc0000000000 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 364.681626][ T6762] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffffffff16428d8 [ 364.689592][ T6762] R13: 0000000000000001 R14: ffff88805f52f9b0 R15: ffff88807e44c008 [ 364.697571][ T6762] ? sysfs_unmerge_group+0x10d/0x130 [ 364.702878][ T6762] device_del+0x251/0x900 [ 364.707252][ T6762] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 364.713154][ T6762] ? kill_device+0x160/0x160 [ 364.717738][ T6762] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 364.723629][ T6762] ? _raw_spin_unlock+0x40/0x40 [ 364.728479][ T6762] ? complete_all+0x2d/0x1d0 [ 364.733060][ T6762] ? __fw_load_abort+0x8b/0x1a0 [ 364.737996][ T6762] firmware_fallback_sysfs+0x682/0x940 [ 364.743462][ T6762] _request_firmware+0xed9/0x1510 [ 364.748494][ T6762] ? request_firmware+0x50/0x50 [ 364.753342][ T6762] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 364.759318][ T6762] ? read_lock_is_recursive+0x20/0x20 [ 364.764686][ T6762] request_firmware_work_func+0xb0/0x1b0 [ 364.770320][ T6762] ? process_scheduled_works+0x957/0x15b0 [ 364.776038][ T6762] process_scheduled_works+0xa45/0x15b0 [ 364.781597][ T6762] ? assign_work+0x400/0x400 [ 364.786190][ T6762] ? assign_work+0x39e/0x400 [ 364.790774][ T6762] worker_thread+0xa55/0xfc0 [ 364.795361][ T6762] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 364.801250][ T6762] ? _raw_spin_unlock+0x40/0x40 [ 364.806091][ T6762] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 364.811991][ T6762] kthread+0x2fa/0x390 [ 364.816051][ T6762] ? pr_cont_work+0x560/0x560 [ 364.820720][ T6762] ? kthread_blkcg+0xd0/0xd0 [ 364.825304][ T6762] ret_from_fork+0x48/0x80 [ 364.829714][ T6762] ? kthread_blkcg+0xd0/0xd0 [ 364.834294][ T6762] ret_from_fork_asm+0x11/0x20 [ 364.839062][ T6762] [ 364.842309][ T6762] Kernel Offset: disabled [ 364.846704][ T6762] Rebooting in 86400 seconds..