last executing test programs: 4m51.980307934s ago: executing program 2 (id=1015): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@pptp={0x18, 0x2, {0x2, @local}}, 0x61) 4m51.353486935s ago: executing program 2 (id=1019): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000009a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20040004}}], 0x2, 0x4000040) 4m50.647940581s ago: executing program 2 (id=1023): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x38, 0x39, 0x61, 0x36, 0x36, 0x31, 0x39, 0x32, 0x63, 0x63, 0x32, 0x31, 0x62, 0x37, 0x34, 0x35]}, &(0x7f0000000240)={0x0, "84f1d4151f8496ecc06caf4e9921c62b077a61c6944e770f421914ada2072a6539851ffdfc528eb459938649f5c99ea52bb4d7867c372a8156dd2b5df869a601", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 4m50.156145125s ago: executing program 2 (id=1030): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa0081a, &(0x7f0000000800)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64], 0x21, 0x14fd, &(0x7f0000003f40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0) 4m49.477595857s ago: executing program 2 (id=1041): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,codepage=iso8859-4,dir_umask=00000000000\x00\x00\x00\x0000000005,part=0x000000000000007e,\x00'], 0x1, 0x2fe, &(0x7f0000000240)="$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") open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) 4m48.553416878s ago: executing program 2 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) 4m48.127314607s ago: executing program 32 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) 2m50.711988406s ago: executing program 1 (id=2575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x50, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 2m50.404874354s ago: executing program 1 (id=2581): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') setns(r0, 0x20000000) 2m50.094203057s ago: executing program 1 (id=2583): ioperm(0x0, 0x5, 0x5) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 2m49.840864553s ago: executing program 1 (id=2586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m49.296458794s ago: executing program 1 (id=2588): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7fffffff, 0x80100) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x4, 0xfff, 0x54b91ba6}}) 2m48.276309904s ago: executing program 1 (id=2596): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xe}, 0xc) 2m47.629476759s ago: executing program 33 (id=2596): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xe}, 0xc) 2m42.448308765s ago: executing program 6 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x1800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000d4}, 0x40000) 2m41.99173304s ago: executing program 6 (id=2664): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x28080) poll(&(0x7f0000000280)=[{r0, 0x2005}], 0x1, 0x6) 2m41.790313548s ago: executing program 6 (id=2666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0xf6e2, 0x6, 0x1, 0x5, 0x80000000, 0xd740, 0x99e5, 0xe7}}, @sndinfo={0x20, 0x84, 0x2, {0xc, 0x10202, 0x8000, 0x6}}], 0x50, 0x40010}], 0x1, 0x40001) 2m41.433865875s ago: executing program 6 (id=2671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m41.055534373s ago: executing program 6 (id=2675): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0xec, 0x0, 0x0}) 2m37.152552618s ago: executing program 6 (id=2704): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000001940)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)) 2m36.599386482s ago: executing program 34 (id=2704): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000001940)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)) 3.488530968s ago: executing program 4 (id=4776): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) 3.174419991s ago: executing program 4 (id=4782): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000340)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x61b7, &(0x7f000000c8c0)="$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") rename(&(0x7f0000000600)='./file2\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.919861366s ago: executing program 3 (id=4787): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @private, 0x0, 0x0, 'none\x00', 0x28, 0x1ff}, 0x2c) 2.548124833s ago: executing program 3 (id=4791): r0 = semget$private(0x0, 0x207, 0x87) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f00000000c0)=""/245) 2.136389652s ago: executing program 3 (id=4795): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 1.936598693s ago: executing program 3 (id=4798): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40101, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) 1.90673267s ago: executing program 0 (id=4799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}]}]}, 0x7c}}, 0x0) 1.699225372s ago: executing program 7 (id=4801): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x101100) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 1.684866846s ago: executing program 0 (id=4802): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0) 1.684192549s ago: executing program 3 (id=4803): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.676805739s ago: executing program 8 (id=4804): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001840)=@udp6}, 0x20) 1.406096324s ago: executing program 5 (id=4806): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) 1.366066319s ago: executing program 7 (id=4807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x1e, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "1217551e10f26da62fa357f899c1061aa8edb29edd03d849920270f777a9eb72c1311db4b7b5d23558646b48d8ef295b956f7bcba552362afa3e79f3f2ae16f1f1866554cc40f40c80d3a738e5ecd3273fd2221ec2481bb7d69be6cb3062f83694750c99f04d789ca5fe783faec475f468b42d5ac8c801e5e295077632c5165849901b65cdbb626401b28d85acb67880e450b8c1e8b35298891197a0ee927d6e504b415d"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) 1.365498382s ago: executing program 8 (id=4808): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chown(&(0x7f0000000680)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 1.272626224s ago: executing program 4 (id=4809): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x0, 0xffffffff}, {0x0, 0x8}, 0x0, 0x6}) 1.208517812s ago: executing program 0 (id=4810): r0 = socket$isdn(0x22, 0x2, 0x11) close(r0) 1.148827096s ago: executing program 5 (id=4811): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000600)={0x60, 0x20, 0x2000000, 0x320, 0x0, 0x0, 0x0, 0x0, {0x0, 0x3, 0xfffffffe}, {}, {}, {0x5, 0x0, 0xfffffffe}, 0x0, 0x40, 0x80000, 0x0, 0x0, 0x0, 0x10007, 0x5, 0x0, 0x0, 0x1, 0xc, 0x29, 0x0, 0x0, 0xb}) 1.058701854s ago: executing program 3 (id=4812): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)={[{@usrquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@discard}, {}, {@quota}, {@noquota}, {@quota, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@umask={'umask', 0x3d, 0x81}}, {@usrquota}, {@nodiscard}, {@umask={'umask', 0x3d, 0x1}}, {@grpquota}, {@umask={'umask', 0x3d, 0x20045}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, ']}@}X}[-)+'}}]}, 0xfe, 0x612b, &(0x7f0000006540)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0bER09FbG2vr9aLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAChNVVVVJ33MP5M+33fb7hQAMBX59b9K8vJTX//6n2/9ZZb6o1ar1Wr1FOqmarx7zSIiNpq3qd8zOBwPACfMRnzcdhdokfyL1o+IJ9ruBDDTOm13gGOxtb2+2kn5dpqvB8u77flckH35b3QeXN8xaXqQ0XNMpvX42oxePDOhPwtT6sMsyfl3R/O/tts+TOsdd/7TMin/4e6lT8XJ+fdG8x9xevLvjs2/VDn//iPl35M/AAAAAADMsPz//0stH/+dO/qmHMonHf9dnlIfAAAAAAAAAOBxO+r4fw8Y/w8AAABmVv1Zvfabp/aWTfoutnr51U7EkyPrA4VJF8sstt0PAAAAAAAAAAAAAChJf/cc3qudiEFEPLm4WFVV/dM0Wj+qo97+pCt9+6FkbT/JAwDAro+eGrmWvxMxHxFX03f9DRYXF6tqfmGxWqwW5vL72eHcfLXQ+Fybp/WyueEh3hD3h1X9y+Ybt2s66PPyQe2jv6++r2HVO0THHpNB+mtOaG4pbABIdl+NtrwinTJV9fSkNx+wj/3/FFqKpbYfV8y+th+mAAAAwPGrqqrqpK/zPpOO+Xfb7hQAMBX59X/0uMCR6u6E9ojH8/vVarVarVZ/qrqpGu9es4iIjeZt6vcMhuMHgBNmIz5uuwu0SP5F60fEc213AphpnbY7wLHY2l5f7aR8O83XgzS+ez4XZF/+G52d2+Xbj5seZPQck2k9vjajF89M6M+zU+rDLMn5d0fzv7bbPkzrHXf+0zIp/+HOJXPlyfn3RvMfcXry747Nv1Q5//4j5d+TPwAAAAAAzLD8//9Ljv/mTQYAAAAAAACAE2dre301X/eaj/9/bsx6rv88nXL+nUfNfyHNy/9Ey/l3R/L/8sh6vcb8/Tf39v9/b6+v/v7Ovz6bp4fNfy7PdNIjq5MeEZ10T51+mh5l6x62OegN63sadLq9fjrnpxq8EzfiZqzFhX3rdtPfY699ZV973dPBvvaL+9r7D7Vf2tc+SN87UC3k9nOxGj+Jm/H2TnvdNnfA9s8f0F4d0J7z73n+L1LOv9/4qfNfTO2dkWnt/ofdh/b75nTc/bxx4/O/vHD8m3Ogzeg92LamevvOttCfnb/JE8P42e21W+fuXr9z59ZKpMm+pRcjTR6znP9g52du7/n/hd32/Lzf3F/vfzh85PxnxWb0J+b/QmO+3t6Xpty3NuT8h+kn5/92ah+//5/k/Cfv/y+30B8AAAAAAAAAAAAAAAD4JFVV7Vwi+kZEXE7X/7R1bSYAMF359b9K8nK1Wq1Wq9Wnr26qxnu9WUTEX5u3qd8z/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpi213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+cWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOPPx8743Ocmjf99Nh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5P98Y77zO/8zI8OsljP86OuZ9CXL+ZxuP5zr/L42s18y/+u3M5b9x2BU3o7sv//N33vvp+dvvf/DKjfeuv7v27tqPL62sXLh0+fKVK1fOv3Pj5tqF3X+Pp9czIOefx752HmhZcv45c/mXJef/hVTLvyw5/y+mWv5lyfnn93vyL0vOP3/2kX9Zcv4vpVr+Zcn5fyXV8i/L1vb6XJ3/y6mWf1ny/v/VVMu/LDn/V1It/7Lk/M+lWv5lyfmfT/Uh8vf18KdIzj8f4bL/lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzda4xcZ30G8DN7sdcOIQZCcFIDa8cY4yzZ9SW+0LqYcG2AUiCh0Au2612bBd/w2iVQJJsGSiSMiiqqph/aAkJtpKrCqvhAK0rzoerlU9N+oF8qqkpIjaoQBVSktqLZaua87+uZ2dmZXe94PXve309K/t6dM3POnHlndp+1nx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3z3y+VhRF/b/G/zYVxYvqf94wvqnxuTfc6iMEAAAAVur/Gv9//o70iSNLuFLTNn/3qn/85vz8/HzxweHfHf3y/Hy6YLwoRtcXReOy6Nq/f6jWvE3wWDFWG2r6eKjH7od7XD7S4/LRHpev63H5+h6Xj/W4fMEJWGBD+fOYxo1tb/xxU3lKizuL0cZl2ztc67Ha+qGh+LOchlrjOvOjJ4vZ4nQxU0y1bF9uW2ts/+2t9X29o4j7Gmra15b6Cvnhp0/EY6iFc7y9ZV/XbzP6wZuK8R/98NMn/vjis3d3mj1PQ8vtlce5c1v9OD8bPlMea61Yn85JPM6hpuPc0uExGW45zlrjevU/tx/n80s8zuHrh7mq2h/zsWKo8eenG+dppPnHeuk8bQmf++97i6K4cv2w27dZsK9iqNjY8pmh64/PWLki67dRX0ovLUaWtU63LmGd1uf09tZ12v6ciI//1nC9kUWOoflh+sFn1i143Je7TqP6vV7sudK+Bvv9XBmUNRjXxdONO/14xzW4Pdz/T+9YfA12XDsd1mC6301rcFuvNTi0brhxzOlBqDWuc30N7m7Zfrixp1pjPrOj+xqcvHjm/OTcJz/1+tkzx0/NnJo5u3f37qm9+/cfPHhw8uTs6Zmp8v83eLYH38ZiKD0HtoVzF58Dr23btnmpzn+1f8/DsS7Pw01t2/b7eTjSfudqq/OEXLimy+fGw/WTPnZ1qFjkOdZ4fHat/HmY7nfT83Ck6XnY8WtKh+fhyBKeh/Vtzu9a2vcsI03/dTqGm/W1YFPTGmz/fqR9Dfb7+5FBWYNjYV38667FvxZsCcf7+MRyvx8ZXrAG090Nrz31z6Tv98cONkandXlP/YLb1hWX5mYu3P/o8YsXL+wuwlgVL2taK+3rdWPTfSoWrNehZa/XI7OvevyeDp/fFM7V2Ovr/xtb9LGqb7Pv/u6PVeOrW+fz2fLZPUUYfbba57PTV/P6+UxZssv5rG/z2cmVfy+ecmnT6+/oIq+/Mfe/UO4v3dRjw6Mj5fN3OJ2d0ZbX49aHaqTx2lVr7Pv5yaW9Ho+G/1b79fjOLq/Hm9u27ffr8Wj7nYuvx7VeP+1YmfbHcyysk9NT3V+P69ts3rPcNTnS9fX43jBr4fy/LiSFlIua1s5i6zbta2RkNNyvkbiH1nW6t2X70ZDN6vt6cs+NrdOd95a3NZzu3XWrtU7H27bt9zpNr1eLrdNar5++3Zj2x3MsrIs793Zfp/Vtntq38tfODfGPTa+d63qtwdHhdfVjHk2LsHy9n98Q1+D9xYniXHG6mG5cuq6xnmqNfU08sLQ1uC78t9qvlZu7rMGdbdv2ew2mr2OLrb3ayMI73wftj+dYWBdPPNB9Dda3ecuB/n7vujN8Jm3T9L1r+8/XFvuZ1z1tp+lm/syrfpx/c6D7z2br25w+uNyc2f083Rc+c1uH89T+/F3sOTVdrM552hyO89mDi5+n+vHUt/nyoSWupyNFUVz++IONn/eGv1/580vf/WbL37t0+judyx9/8LnbT/7tco4fgLXvhXJsLL/WNf3N1FL+/h8AAABYE2LuHwozkf8BAACgMmLuj/8qPJH/AQAAoDJi7h8JM8kk/29+y7OzL1wuUjN/PoiXp9PwULld7LhOhY/H56+rf/7Br8/8+C8vL23fQ0VR/OSh3+i4/eaH4nGVxsNxXntr6+cXXvHykvZ/7JHr2zX3178Sbj/en6Uug04V3KmiKL59xxcb+xn/0NXGfOqhY435viuPP1bf5vlD5cfx+s+8rNz+D0L598jJ4y3Xfyach++HOfXOzucjXu8bV1+35cAHru8vXq+27cWNu/3Eh8vbjb8n50uPldvH87zY8f/VF578Rn37R1/T+fgvD3U+/ifD7X49zP95Zbl982NQ/zhe73Ph+OP+4vXu/9p3Oh7/tc+X259/W7ndsTDj/neGj7e/7dnZ5vP1aO14y/0q3l5uF/c/9d3fblweby/efvvxjx292nI+2tfHU/9c3s5k2/bx83E/0V+07b9+O83rM+7/yd861nKee+3/2vueeWX9dtv3f1/bdsNt12//jU1/+LkvdtxfPJ4jf3a+5f4ceW94Hof9P/HhsB7D5f977Yst+42Ovbf19Sdu/5VNl1vuT/SOH5X7v/bGU435H+M//v3bXnT7i6+8un7uiuLp95e312v/p/7oXMvxf/WuXY3HI14eO/rt+19M3P+FT0ycPTd3aXa66aw2fnfOu8rjWT+2YWP9eO8Ir63tHx89d/EjMxfGp8animK8ur9C74Z9LcznynFludff9Uh4PO/5vW9v3PFPX4if/5eHy89ffWf5deu1Ybsvhc9vKh+/+doK9//E1rsaz+/aU+XHLT32Ptiy/T8PLmnDcP/bvy+I6/38yz/SOA/1yxpfN+LzeoXH/73p8na+Fc7rfPjNzNvuur6/5u3j70a4+v7y+b7i8xde5uLj+ifh8X7398vbj8cV7+/3wvcx39nc+noX18e3Lg+1337jt3hcCa8nxZXy8rhVPN9Xn7+r4+HF30NSXLm78fHvpNu5e1l3czFzn5ybPD179tKjkxdn5i5Ozn3yU0fPnLt09uLRxu/yPPrRXte//vq0sfH6ND2zf18xtaEoinPF1Cq8YN2c46//aWnHf/6RE9MHpnZMz5w8funkxUfOz1w4dWJu7sTM9NyO4ydPznyi1/Vnpw/v3nNo74E9E6dmpw8fPHRo76GJ2bPn6odRHlQP+6c+NnH2wtHGVeYO7zu0+4EH9k1NnDk3PXP4wNTUxKVe1298bZqoX/vXJy7MnD5+cfbMzMTc7KdmDu8+tH//np6/DfDM+ZNz45MXLp2dvDQ3c2GyvC/jFxufrn/t63V9qmnu38rvZ9vVyl/EV7znvv3p97PWff0zi95UuUnbLxB9Nvwumn94yfmDS/k45v7RMJNM8j8AAADkIOb+dWEm8j8AAABURsz968NM5H8AAACojJj7x8JMMsn/+v/6/0vr/5eX6//n1f8///GyV7rW+/+xP6//n4db3P9f8f71//X/q9f/X3p/fq0fv/6//j8LDVr/P+b+DUWRZf4HAACAHMTcvzHMRP4HAACAyoi5/7YwE/kfAAAAKiPm/heFmWSS//X/l9T/39OrcFX9/r/3/9f/L9Zm/z8+OPr/2Vh2//4DD7d8qP8f6P/r/+v/6//r/7Nio4tecqv6/zH33x5mkkn+BwAAgBzE3P/iMBP5HwAAACoj5v47wkzkfwAAAKiMmPs3hZlkkv/1/73/v/6//n+l+/8rff//poPR/18bvP9/d/r/Pdxw/39M/38t9v9H+3v8g93/73n4+v/cFIP2/v8x978kzCST/A8AAAA5iLn/pWEm8j8AAABURsz9Lwszkf8BAACgMmLuvzPMJJP8r/+v/6//r/+v/995/73f/7/8k/7/YNH/707/vwfv/59X/7/Pxz/Y/f9+v///6Fvbr6//TyeD1v+Puf/lYSaZ5H8AAADIQcz9d4WZyP8AAABQGTH3vyLMRP4HAACAyoi5f3OYSSb5X/9f/1//X/9f/7/z/nv3/0v6/4NF/787/f8e9P/1//X/l9b/7/DNr/4/nQxa/z/m/rvDTDLJ/wAAAJCDmPvvCTOR/wEAAKAyYu7/qTAT+R8AAAAqI+b+LWEmmeR//X/9f/3/vPr/963T/9f/rzb9/+70/3vQ/9f/1/9f4vv/L7Sc/v/6XjdGZQxa/z/m/leGmWSS/wEAACAHMfe/KsxE/gcAAIDKiLn/1WEm8j8AAABURsz942EmmeR//f9q9f//9K+feHWh/6//32P/Fe3/x2Wg/585/f/u9P970P/X/9f/X5X+P/kYtP5/zP1bw0wyyf8AAACQg5j7t4WZyP8AAABQGTH33xtmIv8DAABAZcTcvz3MJJP8r/9frf5/pP+v/99t/xXt/yf6/3nT/++g6Umq/9+D/r/+f/b9//jdr/4//TFo/f+Y+18TZpJJ/gcAAIAcxNy/I8xE/gcAAIDKiLn/tWEm8j8AAABURsz9O8NMMsn/+v/6//r/+v/6/533r/+/Nun/d7fc/v86/X/9f/3/zPr/3v+f/hq0/n/M/a8LM8kk/wMAAEAOYu7fFWYi/wMAAEBlxH+/Wf67V/kfAAAAqijm/okwk0zyv/6//n9O/f+a/r/+v/5/5en/d+f9/3vQ/9f/1//X/6evBq3/H3P/68NMMsn/AAAAkIOY++8PM5H/AQAAoDJi7p8MM5H/AQAAoDJi7p8KM8kk/+v/6//n1P/3/v/6//r/1af/353+fw/6//r/Vev/F4X+P7fUoPX/Y+7fHWaSSf4HAACAHMTcvyfMRP4HAACAyoi5f2+YifwPAAAAlRFz/74wk0zyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//X7X+v/f/5xYbtP5/zP0PhJlkkv8BAAAgBzH37w8zkf8BAACgMmLuPxBmEvJ/p3/XDQAAAKwtMfcfDDPJ5O//9f8r0v//zb9v2bf+v/5/t/33p/+/Qf8/TP3/wVLR/n/70+KG6f/3oP+v/6//r/9PXw1a/z/m/kNhJpnkfwAAAMhBzP1vCDOR/wEAAKAyYu7/6TAT+R8AAAAqI+b+nwkzyST/6/9XpP/fRv9f/7/b/r3/v/5/lVW0/983ler/D+n/6/8P1vHr/+v/s9DN7//HPy2t/x9z/+Ewk0zyPwAAAOQg5v6fDTOR/wEAAKAyYu5/Y5iJ/A8AAACVEXP/kTCTTPK//r/+v/6//v/N6f+/sWg3iP3/+uLR/68W/f/uKtX/9/7/+v8Ddvz6//r/LDRo7/8fc/+bwkwyyf8AAACQg5j7Hwwzkf8BAACgMmLuf3OYifwPAAAAlRFz/1vCTDLJ//r/+v/6//r/3v+/8/71/9cm/f/u9P970P/X/9f/1/+nrwat/x9z/1vDTDLJ/wAAAJCDmPvfFmYi/wMAAEBlxNz/9jAT+R8AAAAqI+b+d4SZZJL/9f/1//X/9f/1/zvvX/9/bdL/707/vwf9f/1//X/9f/pq0Pr/Mff/XJhJJvkfAAAAchBz/0NhJvI/AAAAVEbM/e8MM5H/AQAAoDJi7n9XmEkm+V//X/9f/1//X/+/8/71/9cm/f/u9P970P/X/9f/1/+nrwat/x9z/7vDTDLJ/wAAAJCDmPt/PsxE/gcAAIDKiLn/PWEm8j8AAABURsz9vxBmkkn+1//X/x+s/v/85ebr6f/r/xf96v/Xr6T/nwX9/+70/3vo0P9fr/+v/6//r//PDRu0/n/M/e8NM8kk/wMAAEAOYu5/X5iJ/A8AAACVEXP/+8NM5H8AAACojJj7Hw4zyST/6/9n2f9Pd3nw+v/e/1//3/v/6/+vjP5/d/r/PXj/f/1//X/9f/pq0Pr/Mfc/EmaSSf4HAACAHMTc/4EwE/kfAAAAKiPm/l8MM5H/AQAAoDJi7v9gmEkm+V//P8v+/wC//3/V+v8jLesjp/7/WNPjmdal/r/+/yrQ/+9O/78H/X/9/0Hu/4fVvGGR6+v/M4gGrf8fc/+Hwkwyyf8AAACQg5j7fynMRP4HAACAyoi5/5fDTOR/AAAAqIyY+38lzCST/K//r/+v/+/9/73/f+f96/+vTfr/3en/96D/r/8/yP3/HvT/GUSD1v+Puf9Xw0wWDX7P/dcS7iYAAAAwQGLu/3CYSSZ//w8AAAA5iLn/aJiJ/A8AAACVEXP/sTCTTPK//n97/z++o6r+v/6//r/+v/7/WtS//v8rbi8K/X/9f/1//X/9f/1/VmLQ+v8x9x8PM8kk/wMAAEAOYu7/tTAT+R8AAAAqI+b+E2Em8j8AAABURsz902EmmeT/W9j/Hx3M/r/3/7/R/v9P9P/1/wP9/870/1eH9//vTv+/B/1//X/9f/1/+mrQ+v8x98+EmWSS/wEAAKDC0o+DY+4/GWYi/wMAAEBlxNx/KsxE/gcAAIDKiLn/I2EmmeR/7/+v/+/9/29F/3+kZXv9/5L+v/5/P+j/d6f/34P+v/6//r/+P301aP3/mPtnw0wyyf8AAACQg5j7PxpmIv8DAABAZcTc/7EwE/kfAAAAKiPm/tNhJpnkf/1//f/c+/+1orji/f/1/zvtX/9/bdL/707/vwf9f/1//X/9f/pq0Pr/MfefCTPJJP8DAABADmLuPxtmIv8DAABAZcTcfy7MRP4HgP9n7y6aJDuvPA7naKSG1cxHmPWsZjmz0nwEb71zhNeOMMgMksxsy8wgMzOTzMzMMjPKKDuiHao+53RXV/a9DdlV977neTbH3aFyZqlTcvxd8YsLADCM3P13j1ua7H/9v/6/e/+/OZLn/+//6/X/p+n/9f+7cKC/v3r7X3e+KPy8/f///O91d9H/6//1/5P0//p//T/nWlr/n7v/HnFLk/0PAAAAHeTuv2fcYv8DAADAMHL33ytusf8BAABgGLn7r4tbmux//b/+X/+v/9/X/9+i/9f/r5vn/0/T/8/Q/+v/9f/6f3Zqaf1/7v57xy1N9j8AAAB0kLv/PnGL/Q8AAADDyN1/37jF/gcAAIBh5O6/X9zSZP/r//X/+v+19P/HPP//nO9H/6//30b/P03/P0P/r//X/+v/2aml9f+5++8ftzTZ/wAAANBB7v4HxC32PwAAAAwjd/8D4xb7HwAAAIaRu/9BcUuT/a//1//r/9fS/x/S8//1//r/lbt5c+bfCfr/g/T/M2b6/81G/z/lgvv57d/eet7/eej/9f8ctLT+P3f/g+OW/99sjl3qNwkAAAAsSu7+h8QtTX7+DwAAAB3k7r8+brH/AQAAYBi5+2+IW5rsf/2//l//r//X/29/ff3/Onn+/7TL7///+z/vdte+/b/n/0/z/P9d9/93fDL0/6zb0vr/3P03xi1N9j8AAAB0kLv/oXGL/Q8AAADDyN3/sLjF/gcAAIBh5O5/eNzSZP/r/0fr//9939ed1f/v1S76f/2//l//Pzr9/zTP/5+x96+5k/VL/b/+3/P/9f9cnqX1/7n7HxG3NNn/AAAA0EHu/kfGLfY/AAAADCN3/6PiFvsfAAAAhpG7/9FxS5P9r/8frf/f/3We/6//3/b6+n/9/8j0/9P0/zNGef7/JX5qjrqfv1xH/f71//p/Dlpa/5+7/zFxS5P9DwAAAB3k7n9s3GL/AwAAwDBy9z8ubrH/AQAAYBi5+x8ftzTZ//p//f86+v98Bf2//v/K9/9J/79O+v9p+v8Zo/T/l+io+/m1v3/9v/6fg5bW/+fuf0Lc0mT/AwAAQAe5+58Yt9j/AAAAMIzc/U+KW+x/AAAAGEbu/ifHLU32v/5f/7+O/t/z//X/nv+v/78w+v9p+v8Z+n/9v/5f/89OLa3/z91/U9zSZP8DAABAB7n7nxK32P8AAAAwjNz9T41b7H8AAAAYRu7+p8UtTfa//l//r//X/+v/t7++/n+d9P/T9P8z9P/6f/2//p+dWlD/f9ZXndg8PW5psv8BAACgg9z9z4hb7H8AAAAYRu7+Z8Yt9j8AAAAMI3f/s+KWJvtf/7+Y/n8v5xur/z+52Wz0/5um/f/Js/4863Op/9f/HwL9/zT9/wz9v/5f/6//Z6cW1P/v/Tp3/7Pjlib7HwAAADrI3f+cuMX+BwAAgGHk7n9u3GL/AwAAwDBy9z8vbmmy//X/i+n/94zV/3v+/7mfj079v+f/H6T/Pxz6/2n6/xn6f/2//l//z04trf/P3f/8uOnYNZf8LQIAAAALk7v/BXFLk5//AwAAQAe5+18Yt9j/AAAAsFI3Hfid3P0vilua7H/9/277/2Nn/Z7+X/9/7udD/6//1/9fefr/afr/Gfp//b/+X//PTi2t/8/d/+K4pcn+BwAAgA5y998ct9j/AAAAMIzc/S+JW+x/AAAAGEbu/pfGLU32v/7f8//1//p//f/219f/r5P+f5r+f4b+X/9/tP3/8TP/Uf/PGC6i/z916tT1V7z/z93/srilyf4HAACADnL3vzxusf8BAABgGLn7XxG32P8AAAAwjNz9r4xbmux//X/T/j8/6uvq/2/YbPT/+n/9v/5/mv5/mv5/hv5f/+/5//p/dmppz//P3f+quKXJ/gcAAIAOcve/Om6x/wEAAGAYuftfE7fY/wAAADCM3P2vjVua7H/9f9P+3/P/9f/6/8Pu/2/f6P8PxSr6/5Pnf/2l9/836v/1/xPa9f93+r99v9T/6/85aGn9f+7+18UtTfY/AAAAdJC7//Vxi/0PAAAAw8jd/4a4xf4HAACAYeTuf2PcdHWT/a//1//r//X/+v/tr3/Iz/8/ttls9P87sIr+f8LS+//dPP//3H/Kz9D/6//X/P71//p/Dlpa/5+7/01xS5P9DwAAAB3k7n9z3GL/AwAAwDBy978lbrH/AQAAYBi5+98atzTZ//p//b/+X/8/fP9/4yr6f8//3xH9/7Rl9P/np//X/6/5/ev/9f9cuKPq/3P3vy1uabL/AQAAoIPc/W+PW+x/AAAAGEbu/nfELfY/AAAADCN3/zvjlib7X/+v/7+Y/j/fp/5/rP7/+OL6/xP7/vuaPP9f/78j+v9p+v8Z+n/9v/7/Jv0/u7S05//n7n9X3NJk/wMAAEAHufvfHbf+r1v7HwAAAIaRu/89cYv9DwAAAMPI3f/euKXJ/tf/6/89/1//P/zz//X/rej/p+n/Z+j/9f/6f8//Z6eW1v/n7n9f3NJk/wMAAEAHufvfH7fY/wAAADCM3P0fiFvsfwAAABhG7v5b4pYm+1//r//X/+v/9f+n/wz1/2PQ/087nP7/pP5f/1/9/L/FPwX6f/3/3NczpqX1/7n7Pxi3NNn/AAAA0EHu/g/FLfY/AAAADCN3/4fjFvsfAAAAVunqLb+Xu/8jcUuT/a//1//r//X/+v/tr6//X6cj6f/zQ6H/9/z/0Kf//699v1rb8//P/d8v/b/+n91bWv+fu/+jcUuT/Q8AAAAd5O7/WNxi/wMAAMAwcvd/PG6x/wEAAGAYufs/Ebc02f/6f/2//l//r//f/vr6/3Xy/P9p+v8Z+v8jfX7+2t+//l//z0FL6/9z938ybmmy/wEAAKCD3P2filvsfwAAABhG7v5Pxy32PwAAAAxjb/dnXNZw/+v/9f/6f/2//n/76+v/10n/P03/P0P/r//X/+v/2aml9f+f2fuqE5vPxi1N9j8AAAB0kLv/c3GL/Q8AAADDyN3/+bjF/gcAAIBh5O7/QtzSZP/r//X/6+j/T506db3+X/+///s50//fqv+n6P+n6f9n6P/1//p//T87tbT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAYeTu/3LcYv8DAADAMHL3fyVuabL/9f8L6P9P6P89/1//v/H8f/3/juj/p+n/Z4zY/5+48G//qPv5y3XU71//r//noKX1/7n7vxq3NNn/AAAA0EHu/q/FLfY/AAAADCN3/9fjFvsfAAAAhpG7/xtxS5P9r/8/vP7/jr93XZ7/f3Kz/f3r//X/+n/9/5Wm/5+m/58xYv9/EY66n1/7+9f/6/85aGn9f+7+b8Yt+4ffNRf3XQIAAABLkrv/W3FLk5//AwAAQAe5+78dt9j/AAAAMIzc/d+JW5rsf/3/Ap7/P2D/7/n/2z8f+v9F9/9X6f/HoP+fpv+fof/X/+v/d9T/56dZ/9/d0vr/3P3fjVua7H8AAADoIHf/9+IW+x8AAACGkbv/+3GL/Q8AAADDyN1/a9xy1v7f1naPQv+v/9f/6//1/9tfX/+/Tvr/aRfa/x/fXF7/n/T/+n/9f9f+3/P/OW1p/X/u/h/ELX7+DwAAAKtzzXl+P3f/D+MW+x8AAACGkbv/R3GL/Q8AAADDyN3/47jltquO6i0dKv2//l//r//X/29/ff3/Oun/p3n+/wz9/y76+Wv1/2P0/5uN/p/Lt7T+P3f/T+IWP/8HAACAYeTu/2ncYv8DAADAMHL3/yxusf8BAABgGLn7fx63NNn/+n/9/2X2/3tppv7/NP3/afr/7fT/h0P/P03/P0P/7/n/+n/P/2enltb/5+7/RdzSZP8DAABAB7n7fxm32P8AAAAwjNz9v4pb7H8AAAAYRu7+X8ctTfb/kfX/8bda/7/6/t/z//X/+n/9/6Lo/6fp/2fo//X/+n/9Pzu1tP4/d/9v4pYm+x8AAAA6yN3/27jF/gcAAIBh5O7/Xdxi/wMAAMAwcvf/Pm5psv89/1//r//X/+v/t7++/n+d9P/T9P/b1R+U/l//r//X/7NTS+v/c/f/IW5psv8BAACgg9z9f4xb7H8AAAAYRu7+2+IW+x8AAACGkbv/T3FLk/2v/9f/6//1//r/7a+v/18n/f+0o+z/7/wf8y/r+f9H3v/nW9D/6//1/+zE0vr/3P1/jlua7H8AAADoIHf/X+IW+x8AAACGkbv/r3GL/Q8AAADDyN3/t7ilyf6f6f+P11+o/5+k/9///vX/2z8f+n/9v/7/ytP/T/P8/xn6f8//1//r/9mppfX/ufv/Hrc02f8AAADQQe7+2+MW+x8AAACGkbv/H3GL/Q8AAADDyN3/z7ilyf73/P819f/X6v/1//p//b/+f4b+f5r+f4b+X/+v/9f/s1NL6/9z9/8rAAD//z66VbA=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 1.017322851s ago: executing program 8 (id=4813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd26, 0x25dfdbff, {0x2}, [@NDTA_NAME={0x8, 0x1, '.#{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008a0) 964.189759ms ago: executing program 7 (id=4814): r0 = syz_open_dev$radio(&(0x7f0000000640), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000005c0)={0x98f904, 0x4, @name="3aaf02c2deebee40f08a87f262761dd9db7654c1a0195dbeccee9b62cb69208a"}) 954.518625ms ago: executing program 0 (id=4815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 937.361952ms ago: executing program 5 (id=4816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) 736.775692ms ago: executing program 8 (id=4817): setreuid(0xee01, 0x0) setpriority(0x2, 0x0, 0x4) 681.597978ms ago: executing program 7 (id=4818): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 655.126516ms ago: executing program 0 (id=4819): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15258313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 648.983434ms ago: executing program 5 (id=4820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x20, 0x7}, 0x14) 535.467116ms ago: executing program 4 (id=4821): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x80000001, 0x3, 0x4, 0x100000, 0x28, {}, {0x5, 0x1, 0x3, 0x1, 0x4, 0x7f, "04d20173"}, 0x0, 0x4, {0x0}, 0x9}) 452.577731ms ago: executing program 8 (id=4822): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 396.124529ms ago: executing program 7 (id=4823): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) cachestat(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x2) 374.375721ms ago: executing program 5 (id=4824): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dd:cb2e') 295.271965ms ago: executing program 4 (id=4825): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001dc0)={&(0x7f0000000380)=@in={0x2, 0x3, @local}, 0x10, &(0x7f0000001a80)=[{&(0x7f00000001c0)='\t', 0x1}], 0x1, &(0x7f0000001d40)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x0, 0x5, 0x8aff}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x10}}], 0x38, 0x50}, 0x8050) 168.669855ms ago: executing program 0 (id=4826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x25}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 96.606195ms ago: executing program 8 (id=4827): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@name={'name', 0x3d, 'mask'}}, {@name={'name', 0x3d, '.'}}]}) 76.95414ms ago: executing program 7 (id=4828): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@data_writeback}, {@norecovery}, {@orlov}, {@test_dummy_encryption}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) 58.754995ms ago: executing program 4 (id=4829): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r0, 0x4c09, 0xffffffffffffffff) 0s ago: executing program 5 (id=4830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) kernel console output (not intermixed with test programs): : inode #12: block 32: comm syz.5.2825: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 316.899299][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.985154][T12888] EXT4-fs (loop5): Remounting filesystem read-only [ 316.985922][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.034655][ T29] audit: type=1326 audit(1737320328.659:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.7.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 317.040555][T12888] EXT4-fs warning (device loop5): ext4_empty_dir:3105: inode #12: comm syz.5.2825: directory missing '.' [ 317.094164][ T29] audit: type=1326 audit(1737320328.705:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.7.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 317.215317][ T29] audit: type=1326 audit(1737320328.705:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.7.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 317.338907][ T29] audit: type=1326 audit(1737320328.705:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.7.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 317.531596][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.627889][T12925] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.639368][T12924] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2836'. [ 318.033869][T12943] netlink: 'syz.4.2844': attribute type 2 has an invalid length. [ 318.068465][T12943] netlink: 'syz.4.2844': attribute type 1 has an invalid length. [ 318.076682][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 318.226531][T12950] erspan1: entered promiscuous mode [ 318.279079][ T25] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.287886][ T25] usb 9-1: config 0 has no interface number 0 [ 318.338149][ T25] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 318.360260][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.384107][ T25] usb 9-1: Product: syz [ 318.399658][ T25] usb 9-1: Manufacturer: syz [ 318.421395][ T25] usb 9-1: SerialNumber: syz [ 318.492501][ T25] usb 9-1: config 0 descriptor?? [ 318.509830][T12959] loop4: detected capacity change from 0 to 128 [ 318.563946][T12959] EXT4-fs: Ignoring removed bh option [ 318.658248][T12959] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.698257][T12959] ext4 filesystem being mounted at /522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.752329][ T25] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 318.823305][ T25] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.859990][ T25] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 318.890688][ T25] usb 9-1: media controller created [ 318.967704][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.016623][ T5828] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.094685][ T25] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 319.184514][T12982] loop3: detected capacity change from 0 to 256 [ 319.226323][T12982] exfat: Deprecated parameter 'namecase' [ 319.261267][ T25] usb 9-1: USB disconnect, device number 2 [ 319.290077][T12982] exfat: Deprecated parameter 'namecase' [ 319.418537][T12982] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 320.358671][T13033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 320.451294][T13038] loop7: detected capacity change from 0 to 512 [ 320.526683][T13038] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 320.579026][T13038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 320.593926][T13038] System zones: 1-12 [ 320.598123][T13038] EXT4-fs (loop7): orphan cleanup on readonly fs [ 320.606618][T13038] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2881: bg 0: block 361: padding at end of block bitmap is not set [ 320.669256][T13038] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 320.762822][T13038] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2881: attempt to clear invalid blocks 33619980 len 1 [ 320.824369][T13038] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2881: invalid indirect mapped block 1811939328 (level 0) [ 320.881548][T13038] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2881: invalid indirect mapped block 2 (level 2) [ 320.939757][T13038] EXT4-fs (loop7): 1 truncate cleaned up [ 320.995850][T13038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 321.188168][T13038] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 321.423573][T12257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 321.998195][T13095] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2905'. [ 322.083080][T13097] loop7: detected capacity change from 0 to 1024 [ 322.113511][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 322.399800][ T62] hfsplus: b-tree write err: -5, ino 4 [ 322.661184][T13126] loop5: detected capacity change from 0 to 64 [ 322.747149][T13129] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 323.118501][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 323.378800][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 323.441630][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.461043][ T25] usb 5-1: Product: syz [ 323.469429][ T25] usb 5-1: Manufacturer: syz [ 323.475119][ T25] usb 5-1: SerialNumber: syz [ 323.485821][ T25] usb 5-1: config 0 descriptor?? [ 323.638234][T13168] syz.8.2930 uses old SIOCAX25GETINFO [ 323.754007][ T25] hso 5-1:0.0: Failed to find BULK IN ep [ 323.819348][T13172] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2932'. [ 324.019161][ T5924] usb 5-1: USB disconnect, device number 10 [ 324.030066][T13179] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 324.175217][T13186] No such timeout policy "syz0" [ 324.623936][T13202] IPVS: length: 121 != 8 [ 324.860012][T13210] x_tables: duplicate underflow at hook 4 [ 324.898231][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2953'. [ 325.009770][T13218] loop4: detected capacity change from 0 to 64 [ 325.112943][T13222] cgroup: Unknown subsys name 'net' [ 325.162490][T13224] loop5: detected capacity change from 0 to 8 [ 325.251188][T13224] SQUASHFS error: Failed to read block 0x1ec: -5 [ 325.269765][T13224] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 325.484092][T13236] loop8: detected capacity change from 0 to 128 [ 325.577965][T13240] loop5: detected capacity change from 0 to 164 [ 325.964544][T13254] netlink: 'syz.0.2973': attribute type 9 has an invalid length. [ 325.974109][T13256] loop4: detected capacity change from 0 to 512 [ 325.975998][T13252] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 326.017330][T13256] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 326.048628][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 326.091419][T13256] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 326.130842][T13256] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.2974: corrupted inode contents [ 326.197902][T13256] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.2974: mark_inode_dirty error [ 326.226000][T13256] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2974: invalid indirect mapped block 1 (level 1) [ 326.239736][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 326.248950][T13256] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.2974: corrupted inode contents [ 326.266805][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.300015][ T25] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 326.314297][T13256] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 326.334080][ T25] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 326.349499][T13256] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.2974: corrupted inode contents [ 326.372575][ T25] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 326.394695][T13256] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.2974: mark_inode_dirty error [ 326.412324][ T25] usb 4-1: config 128 has no interface number 0 [ 326.429673][ T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 326.455640][T13256] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 326.476941][ T51] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 326.492667][T13256] EXT4-fs (loop4): 1 truncate cleaned up [ 326.498436][ T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.498480][ T25] usb 4-1: config 128 interface 127 has no altsetting 0 [ 326.517086][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 326.530990][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.555289][ T25] usb 4-1: Product: syz [ 326.559621][ T25] usb 4-1: Manufacturer: syz [ 326.582874][ T25] usb 4-1: SerialNumber: syz [ 326.644512][T13256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.684938][ T51] usb 8-1: config 8 has an invalid interface number: 223 but max is 0 [ 326.713170][ T29] audit: type=1800 audit(1737320337.594:83): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2974" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 326.736103][ T51] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 326.751890][ T51] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 326.762230][ T51] usb 8-1: config 8 has no interface number 0 [ 326.768475][ T51] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 326.780153][ T51] usb 8-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.798194][ T51] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 326.807666][ T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.822923][ T51] usb 8-1: Product: syz [ 326.827949][ T51] usb 8-1: Manufacturer: syz [ 326.841590][ T51] usb 8-1: SerialNumber: syz [ 326.851704][T13279] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 326.866324][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.881450][T13279] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 326.904566][ T25] usb 4-1: USB disconnect, device number 6 [ 327.102097][ T29] audit: type=1326 audit(1737320337.954:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13283 comm="syz.4.2986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7df785d29 code=0x0 [ 327.149076][ T51] usb 8-1: USB disconnect, device number 3 [ 327.193961][T10731] udevd[10731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.427857][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.434727][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.724193][T13306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.803013][T13314] loop8: detected capacity change from 0 to 256 [ 327.853257][T13314] exfat: Deprecated parameter 'utf8' [ 327.903510][T13314] cifs: Unknown parameter '\µbšX1o‘ÿÿÿITäŒ&¬æ:ŨÙ"‚Õëï1:ºÃÃÓ­'Ä4,gCžÊ [ 327.903510][T13314] SÃȘØÈžZ§6ŸÂ' [ 327.929380][T13316] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 329.018453][T13351] loop7: detected capacity change from 0 to 4096 [ 329.072635][T13364] loop3: detected capacity change from 0 to 22 [ 329.088093][T13351] ntfs3(loop7): It is recommened to use chkdsk. [ 329.122740][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 329.132926][T13364] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 329.152664][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 329.161313][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 329.198206][T13364] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 329.228999][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 329.262147][T13367] can0: slcan on ttyS3. [ 329.279456][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc1c00 [ 329.326756][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc2c00 [ 329.366829][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc4c00 [ 329.407759][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffc8c00 [ 329.446771][T13351] ntfs3(loop7): try to read out of volume at offset 0x3fffffd0c00 [ 329.674314][T13366] can0 (unregistered): slcan off ttyS3. [ 329.838391][T13383] netlink: 'syz.5.3029': attribute type 1 has an invalid length. [ 331.006299][T13420] loop7: detected capacity change from 0 to 4096 [ 331.128687][T13378] loop4: detected capacity change from 0 to 32768 [ 331.187516][T13378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3028 (13378) [ 331.296639][T13378] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.352714][T13378] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 331.361257][T13378] BTRFS info (device loop4): using free-space-tree [ 332.103546][ T5828] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.208062][ T5924] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 332.410466][ T5924] usb 9-1: config index 0 descriptor too short (expected 63506, got 18) [ 332.432982][ T5924] usb 9-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 332.457473][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.478192][ T5924] usb 9-1: Product: syz [ 332.522420][ T5924] usb 9-1: Manufacturer: syz [ 332.533605][ T5924] usb 9-1: SerialNumber: syz [ 332.812887][ T5924] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 332.860879][ T5924] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 332.919912][ T5924] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 333.029206][ T5892] usb 9-1: USB disconnect, device number 3 [ 333.124364][ T5892] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 333.182838][ T5892] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 333.196609][T13517] loop3: detected capacity change from 0 to 4096 [ 333.227101][ T5892] visor 9-1:1.0: device disconnected [ 333.265422][T13517] EXT4-fs (loop3): Test dummy encryption mode enabled [ 333.326814][T13517] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 333.369104][T13525] sctp: [Deprecated]: syz.5.3075 (pid 13525) Use of int in max_burst socket option. [ 333.369104][T13525] Use struct sctp_assoc_value instead [ 333.403405][T13517] System zones: 0-5 [ 333.485102][T13517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.625155][T13533] loop4: detected capacity change from 0 to 512 [ 333.681286][T13533] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 333.732971][T13533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 333.771056][T13533] System zones: 0-1, 15-15, 18-18, 34-34 [ 333.833745][T13533] EXT4-fs (loop4): orphan cleanup on readonly fs [ 333.840366][T13533] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 333.889831][T13533] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 333.915283][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.959895][T13533] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 334.000086][T13533] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.3077: bad orphan inode 16 [ 334.060458][T13533] EXT4-fs (loop4): Remounting filesystem read-only [ 334.105526][T13533] ext4_test_bit(bit=15, block=18) = 1 [ 334.143465][T13533] is_bad_inode(inode)=0 [ 334.160923][T13533] NEXT_ORPHAN(inode)=0 [ 334.175956][T13533] max_ino=32 [ 334.189042][T13533] i_nlink=2 [ 334.210680][T13533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.223108][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 334.295121][T13533] fscrypt (loop4, inode 16): Error -5 getting encryption context [ 334.431431][T13559] openvswitch: netlink: EtherType 0 is less than min 600 [ 334.584924][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.764980][T13569] ax25_connect(): syz.5.3092 uses autobind, please contact jreuter@yaina.de [ 334.877234][T13575] xt_hashlimit: invalid interval [ 335.168596][T13582] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3096'. [ 335.263366][T13582] 0ªX¹¦À: renamed from caif0 [ 335.352168][T13582] 0ªX¹¦À: entered allmulticast mode [ 335.357527][T13582] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 335.534236][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 335.740407][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 335.784652][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.821421][ T5892] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 335.837517][ T5892] usb 5-1: config 8 has no interface number 0 [ 335.851257][ T5892] usb 5-1: config 8 interface 255 has no altsetting 0 [ 335.909109][ T5892] usb 5-1: string descriptor 0 read error: -22 [ 335.933316][ T5892] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 335.968728][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.034751][T13624] hugetlbfs: Bad value for 'gid' [ 336.071416][T13624] hugetlbfs: Bad value for 'gid' [ 336.102783][T13626] netlink: 'syz.7.3113': attribute type 21 has an invalid length. [ 336.141671][T13626] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3113'. [ 336.461740][ T5892] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 336.580388][ T5892] usb 5-1: USB disconnect, device number 11 [ 337.679660][ T51] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 337.839350][T13698] loop8: detected capacity change from 0 to 256 [ 337.912005][ T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.923381][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 337.953426][T13698] FAT-fs (loop8): Directory bread(block 64) failed [ 337.960542][ T51] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.003245][T13698] FAT-fs (loop8): Directory bread(block 65) failed [ 338.022760][T13700] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71) [ 338.051693][ T51] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 338.055302][T13698] FAT-fs (loop8): Directory bread(block 66) failed [ 338.072243][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.091304][ T51] usb 6-1: Product: syz [ 338.095951][ T51] usb 6-1: Manufacturer: syz [ 338.106568][ T51] usb 6-1: SerialNumber: syz [ 338.135098][T13698] FAT-fs (loop8): Directory bread(block 67) failed [ 338.150788][ T51] usb 6-1: config 0 descriptor?? [ 338.166245][T13698] FAT-fs (loop8): Directory bread(block 68) failed [ 338.241950][T13698] FAT-fs (loop8): Directory bread(block 69) failed [ 338.292884][T13698] FAT-fs (loop8): Directory bread(block 70) failed [ 338.324036][T13698] FAT-fs (loop8): Directory bread(block 71) failed [ 338.358520][T13698] FAT-fs (loop8): Directory bread(block 72) failed [ 338.417234][T13698] FAT-fs (loop8): Directory bread(block 73) failed [ 338.636976][ T51] usb 6-1: USB disconnect, device number 8 [ 339.009454][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.535690][T13753] netlink: 'syz.5.3161': attribute type 1 has an invalid length. [ 339.563924][T13755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 339.583202][T13753] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3161'. [ 340.082274][T13775] loop8: detected capacity change from 0 to 1024 [ 340.293043][T13786] xt_hashlimit: overflow, try lower: 3/0 [ 340.334245][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 340.507521][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 340.531531][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 340.572053][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.626864][ T25] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 340.661281][T13795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3177'. [ 340.691348][ T25] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 340.724931][ T25] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 340.776171][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.821265][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.864655][ T25] usb 5-1: Product: syz [ 340.869137][ T25] usb 5-1: Manufacturer: syz [ 340.929755][ T25] usb 5-1: SerialNumber: syz [ 340.998297][T13801] loop7: detected capacity change from 0 to 512 [ 341.035866][T13801] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 341.104594][T13801] EXT4-fs (loop7): 1 truncate cleaned up [ 341.125753][T13801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.206955][T13801] EXT4-fs error (device loop7): ext4_lookup:1813: comm syz.7.3179: inode #13: comm syz.7.3179: iget: illegal inode # [ 341.235195][T13815] loop5: detected capacity change from 0 to 1024 [ 341.242334][T13815] hfsplus: Bad value for 'uid' [ 341.258965][T13815] nfs4: Deprecated parameter 'intr' [ 341.320506][ T25] usb 5-1: USB disconnect, device number 12 [ 341.323993][T13817] loop8: detected capacity change from 0 to 256 [ 341.388631][T13817] FAT-fs (loop8): Directory bread(block 64) failed [ 341.408868][T13817] FAT-fs (loop8): Directory bread(block 65) failed [ 341.446368][T13817] FAT-fs (loop8): Directory bread(block 66) failed [ 341.475198][T13765] loop3: detected capacity change from 0 to 32768 [ 341.488081][T13817] FAT-fs (loop8): Directory bread(block 67) failed [ 341.507536][T12257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.527400][T13817] FAT-fs (loop8): Directory bread(block 68) failed [ 341.555688][T13817] FAT-fs (loop8): Directory bread(block 69) failed [ 341.592206][T13817] FAT-fs (loop8): Directory bread(block 70) failed [ 341.617663][ T6146] udevd[6146]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.651781][T13765] [ 341.651781][T13765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.651781][T13765] [ 341.706739][T13817] FAT-fs (loop8): Directory bread(block 71) failed [ 341.751518][T13817] FAT-fs (loop8): Directory bread(block 72) failed [ 341.774906][T13817] FAT-fs (loop8): Directory bread(block 73) failed [ 341.849923][ T5833] [ 341.849923][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.849923][ T5833] [ 341.899145][ T5833] [ 341.899145][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.899145][ T5833] [ 342.109511][T13837] loop4: detected capacity change from 0 to 1764 [ 342.704160][T13858] netlink: 'syz.4.3199': attribute type 21 has an invalid length. [ 342.736300][T13858] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3199'. [ 343.699465][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3219'. [ 343.931099][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 344.137423][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 344.179617][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.216069][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.266992][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 344.292711][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.324066][ T25] hub 4-1:4.0: USB hub found [ 344.342631][ T5924] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 344.541030][ T5924] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 344.553387][ T25] hub 4-1:4.0: 24 ports detected [ 344.558417][ T25] usb 4-1: selecting invalid altsetting 1 [ 344.563637][ T5924] usb 5-1: config 0 has no interface number 0 [ 344.592230][ T25] hub 4-1:4.0: Using single TT (err -22) [ 344.601427][ T5924] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 344.613339][ T25] hub 4-1:4.0: insufficient power available to use all downstream ports [ 344.715949][ T5924] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 344.743362][ T5924] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 344.751732][ T5924] usb 5-1: Product: syz [ 344.776103][ T5924] usb 5-1: Manufacturer: syz [ 344.780905][ T5924] usb 5-1: SerialNumber: syz [ 344.783114][ T25] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 344.794124][ T5924] usb 5-1: config 0 descriptor?? [ 344.820098][ T5924] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 344.822692][ T25] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 344.866087][ T5924] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 344.906081][ T5924] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 344.921052][ T25] usb 4-1: USB disconnect, device number 7 [ 344.951552][ T5924] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 344.974833][T13952] loop5: detected capacity change from 0 to 1024 [ 344.985393][ T5924] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 345.025348][ T5891] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 345.050626][ T5924] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 345.087657][ T5924] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 345.097312][T13952] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 345.114119][T13958] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 345.125299][ T5924] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 345.158284][ T5924] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 345.166244][T13958] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 345.188197][ T5924] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 345.211393][ T5924] usb 5-1: USB disconnect, device number 13 [ 345.224110][ T5924] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 345.245327][ T5891] usb 8-1: unable to get BOS descriptor or descriptor too short [ 345.269767][ T5924] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 345.271898][ T5891] usb 8-1: config 1 interface 0 has no altsetting 0 [ 345.338424][ T5924] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 345.373014][ T5891] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.393101][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.411531][ T5891] usb 8-1: Product: syz [ 345.415519][ T5924] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 345.418910][ T5891] usb 8-1: Manufacturer: syz [ 345.446426][ T5924] keyspan 5-1:0.107: device disconnected [ 345.458192][ T5891] usb 8-1: SerialNumber: syz [ 345.723261][ T5891] usb 8-1: bad CDC descriptors [ 345.743961][ T5891] usb 8-1: USB disconnect, device number 4 [ 345.996819][T13982] binder: 13981:13982 ioctl c018620c 0 returned -14 [ 346.074879][T13980] loop3: detected capacity change from 0 to 4096 [ 346.541997][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3250'. [ 347.798591][ T5891] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 348.004506][ T5891] usb 9-1: Using ep0 maxpacket: 8 [ 348.027509][ T5891] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 348.057908][ T5891] usb 9-1: config 179 has no interface number 0 [ 348.091618][ T5891] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 348.128229][ T5891] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 348.174003][ T5891] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.207773][T14055] libceph: resolve '400' (ret=-3): failed [ 348.220489][ T5891] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 348.248373][T14032] loop5: detected capacity change from 0 to 32768 [ 348.253755][ T5891] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 348.288318][T14032] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 348.335564][T14032] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 348.383271][ T5891] usb 9-1: config 179 interface 65 has no altsetting 0 [ 348.437610][ T5891] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 348.493585][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.519939][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 348.564732][ T5891] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input20 [ 348.681498][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 348.709584][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 348.732607][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.817859][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 348.849472][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 348.857717][ T5892] usb 5-1: SerialNumber: syz [ 348.897481][ T5892] usb 5-1: config 0 descriptor?? [ 348.916859][ T5913] usb 9-1: USB disconnect, device number 4 [ 348.918341][ T5892] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 348.934881][ T5913] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 348.976284][ T5892] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 349.024248][ T5892] usb 5-1: Failed to create links for entity 255 [ 349.055345][ T5892] usb 5-1: Failed to register entities (-22). [ 349.108744][T14078] xt_cgroup: invalid path, errno=-2 [ 349.161196][ T5924] usb 5-1: USB disconnect, device number 14 [ 349.613998][T14094] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 349.917654][T14107] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 350.702537][T14140] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 350.750687][T14140] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 350.796812][T14140] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 350.832249][T14140] overlayfs: missing 'lowerdir' [ 351.012464][T14152] loop8: detected capacity change from 0 to 1024 [ 351.047121][T14152] EXT4-fs: Ignoring removed nobh option [ 351.073155][T14152] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.137557][T14152] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #11: comm syz.8.3321: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 351.255005][T14152] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3321: couldn't read orphan inode 11 (err -117) [ 351.269491][T14152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.421935][T12529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.894522][T14190] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3339'. [ 352.512234][ T29] audit: type=1400 audit(1737320361.389:85): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=14209 comm="syz.8.3349" [ 353.052814][T14223] loop8: detected capacity change from 0 to 4096 [ 353.128090][T14223] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 353.344629][T14223] ntfs3(loop8): failed to convert "c46c" to macgreek [ 353.731249][T14252] binfmt_misc: register: failed to install interpreter file ./file0 [ 353.887648][T14256] netlink: 'syz.4.3372': attribute type 7 has an invalid length. [ 353.895490][T14256] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3372'. [ 354.145898][T14267] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 354.309883][ T29] audit: type=1326 audit(1737320363.059:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 354.378047][ T29] audit: type=1326 audit(1737320363.068:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 354.445077][T14269] loop5: detected capacity change from 0 to 4096 [ 354.487245][ T29] audit: type=1326 audit(1737320363.087:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 354.532031][T14279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 354.556405][ T29] audit: type=1326 audit(1737320363.087:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 354.668860][ T29] audit: type=1326 audit(1737320363.087:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 355.118090][T14291] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.257502][T14296] loop7: detected capacity change from 0 to 2048 [ 355.405995][T14300] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.421033][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3393'. [ 355.430399][T14275] loop3: detected capacity change from 0 to 32768 [ 355.460441][T14303] loop4: detected capacity change from 0 to 128 [ 355.463129][T14299] netlink: 448 bytes leftover after parsing attributes in process `syz.5.3393'. [ 355.522901][T14275] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 355.558178][T14303] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 355.695988][T14281] loop8: detected capacity change from 0 to 32768 [ 355.803493][T14310] loop7: detected capacity change from 0 to 256 [ 355.810147][T14281] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 355.844058][T14281] JBD2: Ignoring recovery information on journal [ 355.871702][ T5828] sysv_free_block: flc_count > flc_size [ 355.882465][ T5828] sysv_free_block: flc_count > flc_size [ 355.888041][ T5828] sysv_free_block: flc_count > flc_size [ 355.893848][ T5828] sysv_free_block: flc_count > flc_size [ 355.900741][ T5828] sysv_free_block: flc_count > flc_size [ 355.906599][ T5828] sysv_free_block: flc_count > flc_size [ 355.912562][ T5828] sysv_free_block: flc_count > flc_size [ 355.919655][T14313] loop5: detected capacity change from 0 to 64 [ 355.919753][ T5828] sysv_free_block: flc_count > flc_size [ 355.931555][ T5828] sysv_free_block: flc_count > flc_size [ 355.937589][ T5828] sysv_free_block: flc_count > flc_size [ 355.956139][T14310] FAT-fs (loop7): Directory bread(block 64) failed [ 355.974285][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 355.982743][ T5828] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 355.990792][T14310] FAT-fs (loop7): Directory bread(block 65) failed [ 355.997422][T14310] FAT-fs (loop7): Directory bread(block 66) failed [ 356.045615][T14313] hfs: request for non-existent node 16777216 in B*Tree [ 356.052892][T14313] hfs: request for non-existent node 16777216 in B*Tree [ 356.060868][T14310] FAT-fs (loop7): Directory bread(block 67) failed [ 356.076017][T14310] FAT-fs (loop7): Directory bread(block 68) failed [ 356.078588][T14281] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 356.082724][T14310] FAT-fs (loop7): Directory bread(block 69) failed [ 356.141886][T14316] x_tables: unsorted underflow at hook 3 [ 356.146718][T14310] FAT-fs (loop7): Directory bread(block 70) failed [ 356.196683][T14310] FAT-fs (loop7): Directory bread(block 71) failed [ 356.213415][T14318] cgroup: name respecified [ 356.219352][T14310] FAT-fs (loop7): Directory bread(block 72) failed [ 356.225918][T14310] FAT-fs (loop7): Directory bread(block 73) failed [ 356.405969][T12529] ocfs2: Unmounting device (7,8) on (node local) [ 356.462015][T14324] loop4: detected capacity change from 0 to 256 [ 357.092232][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 357.246572][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 357.321158][T14352] loop8: detected capacity change from 0 to 256 [ 357.363783][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3416'. [ 357.415972][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3416'. [ 357.448300][T14352] FAT-fs (loop8): Directory bread(block 64) failed [ 357.461191][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 357.470802][T14352] FAT-fs (loop8): Directory bread(block 65) failed [ 357.490882][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.511405][T14352] FAT-fs (loop8): Directory bread(block 66) failed [ 357.529568][T14352] FAT-fs (loop8): Directory bread(block 67) failed [ 357.541308][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 357.553375][T14352] FAT-fs (loop8): Directory bread(block 68) failed [ 357.584514][ T5913] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 357.603527][T14352] FAT-fs (loop8): Directory bread(block 69) failed [ 357.614959][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.623020][ T5913] usb 5-1: Product: syz [ 357.632699][T14352] FAT-fs (loop8): Directory bread(block 70) failed [ 357.640007][ T5913] usb 5-1: Manufacturer: syz [ 357.644667][ T5913] usb 5-1: SerialNumber: syz [ 357.653220][ T5913] usb 5-1: config 0 descriptor?? [ 357.676401][T14352] FAT-fs (loop8): Directory bread(block 71) failed [ 357.723052][T14352] FAT-fs (loop8): Directory bread(block 72) failed [ 357.730236][T14352] FAT-fs (loop8): Directory bread(block 73) failed [ 357.824911][T14365] loop7: detected capacity change from 0 to 256 [ 357.833752][T14363] loop5: detected capacity change from 0 to 512 [ 357.865686][T14365] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 358.019222][T14363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.087562][T14363] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.150559][ T5924] usb 5-1: USB disconnect, device number 15 [ 358.383203][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.555664][T14357] loop3: detected capacity change from 0 to 32768 [ 358.648736][T14357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3417 (14357) [ 358.735736][T14357] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.788178][T14357] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 358.860288][T14357] BTRFS info (device loop3): using free-space-tree [ 358.978366][T14391] loop4: detected capacity change from 0 to 4096 [ 359.503073][ T5833] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.986406][T14432] loop4: detected capacity change from 0 to 512 [ 360.154554][T14432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.203943][T14432] ext4 filesystem being mounted at /603/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.251818][T14432] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.3447: corrupted xattr block 33: bad e_name length [ 360.542294][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.269104][T14427] loop8: detected capacity change from 0 to 32768 [ 361.523753][T14427] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 361.591098][T14427] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.661079][T14491] loop3: detected capacity change from 0 to 256 [ 361.712427][T14427] XFS (loop8): Ending clean mount [ 361.731776][T14493] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 361.835007][T14427] XFS (loop8): Quotacheck needed: Please wait. [ 361.972630][T14500] loop4: detected capacity change from 0 to 256 [ 362.095121][T14427] XFS (loop8): Quotacheck: Done. [ 362.502671][T12529] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 362.563011][T14518] netlink: 'syz.7.3481': attribute type 21 has an invalid length. [ 362.609258][T14518] netlink: 'syz.7.3481': attribute type 6 has an invalid length. [ 362.617104][T14518] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3481'. [ 363.063293][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3491'. [ 363.543407][T14555] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3501'. [ 363.547725][T14558] netlink: 'syz.5.3500': attribute type 2 has an invalid length. [ 363.584212][T14555] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3501'. [ 363.593485][T14557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3502'. [ 363.747223][T14564] xt_l2tp: missing protocol rule (udp|l2tpip) [ 364.884228][ T51] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 365.053087][T14560] loop3: detected capacity change from 0 to 32768 [ 365.118252][T14560] (syz.3.3503,14560,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 365.122649][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 365.194382][ T51] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 365.206115][T14560] (syz.3.3503,14560,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 365.240536][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 365.276222][ T51] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 365.301996][T14560] JBD2: Ignoring recovery information on journal [ 365.311716][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.365201][ T51] usb 5-1: Product: syz [ 365.403912][ T51] usb 5-1: Manufacturer: syz [ 365.436650][ T51] usb 5-1: SerialNumber: syz [ 365.480967][ T51] usb 5-1: config 0 descriptor?? [ 365.491470][T14587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.513012][T14560] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 365.575774][T14616] loop7: detected capacity change from 0 to 8 [ 365.762524][ T51] usb 5-1: USB disconnect, device number 16 [ 366.326374][T14634] loop5: detected capacity change from 0 to 256 [ 366.335287][T14634] exfat: Deprecated parameter 'namecase' [ 366.376640][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 366.563372][T14634] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 366.600272][T14639] netlink: 'syz.4.3533': attribute type 32 has an invalid length. [ 366.642092][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'. [ 366.683164][T14639] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 366.824581][T14636] loop7: detected capacity change from 0 to 4096 [ 366.861895][T14641] loop8: detected capacity change from 0 to 4096 [ 366.871183][T14641] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 367.005012][T14641] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 367.084240][T14636] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 367.084240][T14636] [ 367.554703][T14667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3543'. [ 367.592260][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 367.622034][T14673] tmpfs: Bad value for 'mpol' [ 368.754685][T14721] netlink: 'syz.4.3563': attribute type 30 has an invalid length. [ 368.795445][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 369.012313][ T8] usb 9-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 369.021602][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.111056][ T8] usb 9-1: config 0 descriptor?? [ 369.358913][ T8] usb 9-1: string descriptor 0 read error: -71 [ 369.365252][ T8] ldusb 9-1:0.0: Interrupt in endpoint not found [ 369.425408][ T8] usb 9-1: USB disconnect, device number 5 [ 369.581505][T14746] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 369.815744][T14702] loop5: detected capacity change from 0 to 32768 [ 369.833820][T14702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3556 (14702) [ 369.970295][T14702] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.031380][T14702] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 370.087781][T14702] BTRFS info (device loop5): using free-space-tree [ 370.754269][ T5830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.963077][T14812] xt_l2tp: missing protocol rule (udp|l2tpip) [ 371.191534][T14821] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3593'. [ 372.076685][T14807] loop3: detected capacity change from 0 to 32768 [ 372.295655][T14846] loop7: detected capacity change from 0 to 4096 [ 372.385160][T14846] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 372.446798][T14854] xt_TCPMSS: Only works on TCP SYN packets [ 372.741045][T14859] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 373.100515][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'. [ 373.415309][T14871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.522828][T14877] loop7: detected capacity change from 0 to 256 [ 373.618463][T14877] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 373.786330][T14882] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.897374][T14857] loop8: detected capacity change from 0 to 32768 [ 373.986945][T14857] ERROR: (device loop8): xtSearch: XT_GETPAGE: xtree page corrupt [ 373.986945][T14857] [ 374.063369][T14857] ERROR: (device loop8): remounting filesystem as read-only [ 374.066513][T14889] loop7: detected capacity change from 0 to 128 [ 374.071002][T14857] xtLookup: xtSearch returned -5 [ 374.297669][T14889] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.397816][T14889] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.496427][T14889] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 1029 (only 1 groups) [ 374.666317][T14905] loop5: detected capacity change from 0 to 64 [ 374.708009][T12257] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.040220][T14914] loop7: detected capacity change from 0 to 1024 [ 375.160190][T14914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.282410][T14924] loop3: detected capacity change from 0 to 64 [ 375.408146][T12257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.967311][T14945] netlink: 'syz.3.3652': attribute type 3 has an invalid length. [ 376.017860][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 376.294150][ T5913] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 376.522396][ T5913] usb 1-1: config 1 has an invalid interface number: 17 but max is 1 [ 376.558526][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.607368][ T5913] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 376.649819][ T5913] usb 1-1: config 1 has no interface number 2 [ 376.682739][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.727298][ T5913] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.767598][ T5913] usb 1-1: config 1 interface 1 has no altsetting 0 [ 376.809403][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.835771][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.885680][ T5913] usb 1-1: Product: syz [ 376.890348][ T5913] usb 1-1: Manufacturer: syz [ 376.894976][ T5913] usb 1-1: SerialNumber: syz [ 377.069379][T14983] loop5: detected capacity change from 0 to 1024 [ 377.123169][T14983] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 377.156052][T14983] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 377.168228][ T5913] usb 1-1: selecting invalid altsetting 0 [ 377.176079][T14942] loop7: detected capacity change from 0 to 32768 [ 377.202815][ T5913] usb 1-1: selecting invalid altsetting 0 [ 377.208664][ T5913] cdc_ncm 1-1:1.0: bind() failure [ 377.224420][T14983] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 377.260833][ T5913] cdc_ncm 1-1:1.17: CDC Union missing and no IAD found [ 377.312802][ T5913] cdc_ncm 1-1:1.17: bind() failure [ 377.313060][T14942] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 377.391022][ T5913] usb 1-1: selecting invalid altsetting 0 [ 377.397113][T14990] netlink: 'syz.3.3672': attribute type 13 has an invalid length. [ 377.408502][T14983] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #5: comm syz.5.3669: unexpected bad inode w/o EXT4_IGET_BAD [ 377.414593][T14942] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 377.424927][ T5913] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -22 [ 377.454066][T14990] netlink: 'syz.3.3672': attribute type 3 has an invalid length. [ 377.466698][T14942] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 377.486822][ T5913] usb 1-1: selecting invalid altsetting 0 [ 377.492789][T14983] EXT4-fs (loop5): no journal found [ 377.506498][T14983] EXT4-fs (loop5): can't get journal size [ 377.512573][T14942] OCFS2: File system is now read-only. [ 377.513142][ T5913] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -22 [ 377.536982][T14983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 377.556610][T14942] (syz.7.3650,14942,1):ocfs2_search_chain:1814 ERROR: status = -30 [ 377.561699][ T5913] usb 1-1: selecting invalid altsetting 0 [ 377.571525][ T5913] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 377.618190][ T5913] usb 1-1: USB disconnect, device number 15 [ 377.658768][T14942] (syz.7.3650,14942,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 377.666774][T14942] (syz.7.3650,14942,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 377.698163][T14942] (syz.7.3650,14942,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 377.737059][T14942] (syz.7.3650,14942,1):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 377.777110][T14942] (syz.7.3650,14942,1):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 377.796543][T14942] (syz.7.3650,14942,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 377.816476][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.843132][T14942] (syz.7.3650,14942,1):ocfs2_mknod:385 ERROR: status = -30 [ 377.871571][T14942] (syz.7.3650,14942,1):ocfs2_mknod:502 ERROR: status = -30 [ 377.931354][T14942] (syz.7.3650,14942,1):ocfs2_create:676 ERROR: status = -30 [ 378.047288][T15006] loop8: detected capacity change from 0 to 64 [ 378.130107][T15006] syz.8.3679: attempt to access beyond end of device [ 378.130107][T15006] loop8: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 378.159325][T12257] ocfs2: Unmounting device (7,7) on (node local) [ 378.177887][T15006] Buffer I/O error on dev loop8, logical block 32767, async page read [ 378.597635][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3687'. [ 378.745798][T15031] loop7: detected capacity change from 0 to 8 [ 378.817359][T15031] SQUASHFS error: Failed to read block 0x2d7: -5 [ 378.823934][T15031] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 378.955222][T15038] netlink: 'syz.0.3694': attribute type 21 has an invalid length. [ 379.170888][T15046] netlink: 'syz.8.3699': attribute type 25 has an invalid length. [ 379.222422][T15048] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 379.384815][T15055] loop3: detected capacity change from 0 to 512 [ 379.540573][T15055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.557051][T15055] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.771160][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.819230][T15075] sctp: [Deprecated]: syz.7.3711 (pid 15075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.819230][T15075] Use struct sctp_sack_info instead [ 380.117318][T15078] loop5: detected capacity change from 0 to 4096 [ 380.138058][T15078] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 380.426599][T15078] ntfs3(loop5): ino=0, attr_set_size [ 380.459231][T15078] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 380.983860][ T51] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 381.192425][ T51] usb 9-1: Using ep0 maxpacket: 16 [ 381.209139][ T51] usb 9-1: config 8 has an invalid interface number: 206 but max is 0 [ 381.241679][ T51] usb 9-1: config 8 has no interface number 0 [ 381.265625][ T51] usb 9-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 381.321933][ T51] usb 9-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 381.366563][ T51] usb 9-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 381.402787][ T51] usb 9-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.457503][ T51] usb 9-1: config 8 interface 206 has no altsetting 0 [ 381.487377][ T51] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 381.508511][ T51] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.541938][ T51] usb 9-1: Product: syz [ 381.546169][ T51] usb 9-1: Manufacturer: syz [ 381.574527][ T51] usb 9-1: SerialNumber: syz [ 381.837919][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 381.857334][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 381.865837][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 381.875200][ T51] garmin_gps 9-1:8.206: Garmin GPS usb/tty converter detected [ 381.901249][ T51] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 381.927907][ T51] usb 9-1: USB disconnect, device number 6 [ 381.953373][T15151] loop4: detected capacity change from 0 to 256 [ 381.956747][ T51] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 382.020470][ T51] garmin_gps 9-1:8.206: device disconnected [ 382.022453][T15151] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 382.101448][T15151] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 382.174873][T15151] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 382.443807][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3752'. [ 382.621801][T15165] xt_l2tp: v2 doesn't support IP mode [ 382.766649][T15172] loop8: detected capacity change from 0 to 764 [ 382.807985][T15172] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 382.959845][T15179] loop3: detected capacity change from 0 to 64 [ 383.429537][T15195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3768'. [ 383.638590][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 383.680158][T15189] loop3: detected capacity change from 0 to 8192 [ 383.707386][T15189] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.844248][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 383.879431][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.913048][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 383.944119][ T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 383.974292][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 384.034454][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.072589][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.137453][ T8] usb 6-1: SerialNumber: syz [ 384.182970][ T8] cdc_acm 6-1:1.0: skipping garbage [ 384.196566][ T8] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 384.402231][T15222] loop8: detected capacity change from 0 to 256 [ 384.484981][T15222] exfat: Deprecated parameter 'utf8' [ 384.526793][ T5891] usb 6-1: USB disconnect, device number 9 [ 384.591621][T15222] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 385.512622][ T5891] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 385.700443][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 385.709608][T15272] syz.4.3797: attempt to access beyond end of device [ 385.709608][T15272] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 385.750118][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.783329][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 385.793453][T15272] gfs2: error -5 reading superblock [ 385.798864][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 385.826874][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 385.888738][ T5891] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 385.901552][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 385.942895][ T5891] usb 4-1: Product: syz [ 385.956906][ T5891] usb 4-1: Manufacturer: syz [ 385.961580][ T5891] usb 4-1: SerialNumber: syz [ 385.969316][T15276] netlink: 512 bytes leftover after parsing attributes in process `syz.0.3800'. [ 386.001291][ T5891] usb 4-1: config 0 descriptor?? [ 386.008512][ T5891] usb 4-1: NFC: intf ffff888056ff3000 id ffffffff8f30f040 [ 386.177319][T15282] loop8: detected capacity change from 0 to 64 [ 386.287746][ T25] usb 4-1: USB disconnect, device number 8 [ 386.294264][ T51] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 386.477365][ T51] usb 8-1: Using ep0 maxpacket: 16 [ 386.492970][ T51] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 386.504961][ T51] usb 8-1: config 0 has no interface number 0 [ 386.521573][ T51] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 386.563451][ T51] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 386.596476][ T51] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 386.626705][ T51] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 386.654112][ T51] usb 8-1: Product: syz [ 386.658394][ T51] usb 8-1: SerialNumber: syz [ 386.687410][ T51] usb 8-1: config 0 descriptor?? [ 386.708642][ T51] cm109 8-1:0.8: invalid payload size 1024, expected 4 [ 386.732901][T15256] loop5: detected capacity change from 0 to 32768 [ 386.743708][ T51] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input21 [ 386.848932][T15256] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 386.923094][T15256] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 387.129469][T15256] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 387.178157][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 387.195941][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 387.264304][ T5913] usb 8-1: USB disconnect, device number 5 [ 387.264344][ C1] cm109 8-1:0.8: cm109_urb_irq_callback: urb status -71 [ 387.277165][ C1] cm109 8-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 387.302373][T15306] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.341687][T15311] loop4: detected capacity change from 0 to 512 [ 387.352283][ T5913] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 387.354398][T15306] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.434095][T15311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 387.435606][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 221ms [ 387.453891][T15306] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.469416][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 387.477961][T15256] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 387.485321][T15311] ext4 filesystem being mounted at /680/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.491047][T15306] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.822055][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 388.043314][T15325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3821'. [ 388.521000][T15343] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 388.613454][T15346] loop7: detected capacity change from 0 to 16 [ 388.655573][T15346] erofs (device loop7): mounted with root inode @ nid 36. [ 388.701546][T15346] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 388.762905][T15346] erofs (device loop7): failed to decompress -23 in[64, 4032] out[1851] [ 388.798610][T15346] erofs (device loop7): read error -117 @ 43 of nid 36 [ 388.946989][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 389.153029][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 389.180520][ T25] usb 5-1: config 8 has an invalid interface number: 4 but max is 1 [ 389.213474][ T25] usb 5-1: config 8 has an invalid interface number: 149 but max is 1 [ 389.243936][ T25] usb 5-1: config 8 has no interface number 0 [ 389.261017][ T25] usb 5-1: config 8 has no interface number 1 [ 389.289872][ T25] usb 5-1: config 8 interface 4 has no altsetting 0 [ 389.311785][ T25] usb 5-1: config 8 interface 149 has no altsetting 0 [ 389.320999][T15370] loop5: detected capacity change from 0 to 64 [ 389.336623][ T25] usb 5-1: New USB device found, idVendor=1bbb, idProduct=011e, bcdDevice=7c.dc [ 389.339757][T15331] loop8: detected capacity change from 0 to 32768 [ 389.378756][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.405972][T15331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3825 (15331) [ 389.409468][ T25] usb 5-1: Product: syz [ 389.481008][ T25] usb 5-1: Manufacturer: syz [ 389.502427][ T25] usb 5-1: SerialNumber: syz [ 389.518685][T15331] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.586329][T15331] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 389.611603][T15331] BTRFS info (device loop8): using free-space-tree [ 389.794019][ T25] option 5-1:8.149: GSM modem (1-port) converter detected [ 389.869407][T15331] BTRFS info (device loop8): rebuilding free space tree [ 389.878535][ T25] usb 5-1: USB disconnect, device number 17 [ 389.891558][ T25] option 5-1:8.149: device disconnected [ 390.127109][T15395] loop5: detected capacity change from 0 to 512 [ 390.136251][T12529] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.179332][T15395] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.295719][T15395] EXT4-fs error (device loop5): __ext4_iget:4984: inode #15: block 1803188595: comm syz.5.3847: invalid block [ 390.421155][T15395] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3847: couldn't read orphan inode 15 (err -117) [ 390.527785][T15395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.599289][T15369] loop3: detected capacity change from 0 to 32768 [ 390.662897][T15369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3841 (15369) [ 390.759924][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.784047][T15369] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.829514][T15369] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 390.865083][T15369] BTRFS info (device loop3): using free-space-tree [ 391.021250][T15420] loop5: detected capacity change from 0 to 256 [ 391.044789][T15422] loop8: detected capacity change from 0 to 512 [ 391.098298][T15420] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 391.330324][T15422] EXT4-fs error (device loop8): __ext4_iget:4984: inode #11: block 16: comm syz.8.3849: invalid block [ 391.364823][T15422] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3849: couldn't read orphan inode 11 (err -117) [ 391.491808][T15422] EXT4-fs (loop8): 1 truncate cleaned up [ 391.510957][T15422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.755651][ T5833] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.758984][T15447] loop4: detected capacity change from 0 to 256 [ 391.812891][T15447] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 391.862803][T12529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.163446][T15457] cgroup: subsys name conflicts with all [ 392.410647][T15463] loop4: detected capacity change from 0 to 1024 [ 392.566682][T15463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.696051][ T51] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 392.768321][T15461] loop7: detected capacity change from 0 to 32768 [ 392.781804][T15472] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3865'. [ 392.891972][ T51] usb 9-1: Using ep0 maxpacket: 8 [ 392.904807][ T51] usb 9-1: config 1 has an invalid interface number: 6 but max is 0 [ 392.978240][ T51] usb 9-1: config 1 has no interface number 0 [ 392.984874][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.066914][ T51] usb 9-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 393.112330][ T51] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.171867][ T51] usb 9-1: Product: syz [ 393.177383][T15461] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 393.205531][ T51] usb 9-1: Manufacturer: syz [ 393.210396][ T51] usb 9-1: SerialNumber: syz [ 393.259067][T15461] bcachefs (loop7): initializing new filesystem [ 393.283322][T15461] bcachefs (loop7): going read-write [ 393.334546][T15461] bcachefs (loop7): marking superblocks [ 393.385102][T15490] syz.4.3877 uses obsolete (PF_INET,SOCK_PACKET) [ 393.396550][T15489] netlink: 'syz.3.3880': attribute type 1 has an invalid length. [ 393.441645][T15489] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.3880'. [ 393.554618][ T51] usb 9-1: palm_os_4_probe - error -71 getting connection info [ 393.562731][ T51] visor 9-1:1.6: Handspring Visor / Palm OS converter detected [ 393.572236][ T51] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 393.606187][ T51] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 393.607653][T15461] bcachefs (loop7): initializing freespace [ 393.638692][ T51] usb 9-1: USB disconnect, device number 7 [ 393.690377][ T51] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 393.704795][T15461] bcachefs (loop7): done initializing freespace [ 393.713210][T15461] bcachefs (loop7): reading snapshots table [ 393.791565][T15461] bcachefs (loop7): reading snapshots done [ 393.828693][ T51] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 393.901553][ T51] visor 9-1:1.6: device disconnected [ 393.990676][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.997577][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.017549][T15461] bcachefs (loop7): done starting filesystem [ 394.126296][T15502] loop5: detected capacity change from 0 to 2048 [ 394.195428][T15507] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.280972][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.363359][T15461] syz.7.3871 (15461) used greatest stack depth: 12248 bytes left [ 394.393583][T15502] Remounting filesystem read-only [ 394.419123][T12257] bcachefs (loop7): shutting down [ 394.447041][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.450073][T12257] bcachefs (loop7): going read-only [ 394.457550][T15509] overlayfs: conflicting options: userxattr,verity=on [ 394.489984][T12257] bcachefs (loop7): finished waiting for writes to stop [ 394.515819][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.534144][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.544368][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.579747][T12257] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 394.606351][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.632082][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.641828][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.651537][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.662710][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.677027][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.701910][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.754723][T12257] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 8 [ 394.772524][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.804553][T15516] loop4: detected capacity change from 0 to 128 [ 394.812260][T12257] bcachefs (loop7): shutdown complete, journal seq 9 [ 394.826045][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.835171][T12257] bcachefs (loop7): marking filesystem clean [ 394.895690][T15516] befs: (loop4): invalid magic header [ 394.917032][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 394.935652][T12257] bcachefs (loop7): shutdown complete [ 395.033956][T15502] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 395.100474][ T29] audit: type=1800 audit(1737320400.708:91): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3884" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 395.120456][T15525] loop8: detected capacity change from 0 to 256 [ 395.252882][T15529] loop3: detected capacity change from 0 to 1024 [ 395.350940][T15529] fuse: Bad value for 'fd' [ 395.546921][ T3527] hfsplus: b-tree write err: -5, ino 4 [ 395.579720][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'. [ 396.181841][T15560] loop4: detected capacity change from 0 to 2048 [ 396.243544][T15560] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 396.267080][T15560] NILFS (loop4): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 396.279581][T15566] netlink: 'syz.0.3917': attribute type 4 has an invalid length. [ 396.394796][T15560] kAFS: No cell specified [ 396.406568][ T29] audit: type=1326 audit(1737320401.927:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.3.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4ab85d29 code=0x7ffc0000 [ 396.526062][ T29] audit: type=1326 audit(1737320401.927:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.3.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4ab85d29 code=0x7ffc0000 [ 396.607038][ T29] audit: type=1326 audit(1737320401.927:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.3.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0f4ab85d29 code=0x7ffc0000 [ 396.632991][T15575] loop5: detected capacity change from 0 to 512 [ 396.643939][T15575] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 396.703840][ T29] audit: type=1326 audit(1737320401.927:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.3.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4ab85d29 code=0x7ffc0000 [ 396.769819][T15575] EXT4-fs (loop5): 1 truncate cleaned up [ 396.776739][T15575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.870092][T15575] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3921: corrupted in-inode xattr: overlapping e_value [ 396.889183][ T29] audit: type=1326 audit(1737320401.927:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15568 comm="syz.3.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4ab85d29 code=0x7ffc0000 [ 396.972795][T15575] EXT4-fs (loop5): Remounting filesystem read-only [ 396.980395][T15583] netlink: 'syz.8.3924': attribute type 7 has an invalid length. [ 397.008016][T15583] netlink: 'syz.8.3924': attribute type 8 has an invalid length. [ 397.026684][T15575] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1772: inode #15: comm syz.5.3921: unable to update i_inline_off [ 397.194390][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.296139][T15595] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551359) [ 397.336486][T15595] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 397.631572][T15603] Cannot find del_set index 4 as target [ 398.774207][T15599] loop5: detected capacity change from 0 to 32768 [ 398.804752][T15599] (syz.5.3932,15599,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.872124][T15599] (syz.5.3932,15599,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.958898][T15599] JBD2: Ignoring recovery information on journal [ 399.013030][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 399.127809][T15599] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 399.216432][T15647] loop3: detected capacity change from 0 to 4096 [ 399.237539][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 399.261199][T15647] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 399.294722][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.302821][ T8] usb 5-1: config 0 has no interface number 0 [ 399.340704][ T8] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 399.347973][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 399.350911][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.425792][ T8] usb 5-1: Product: syz [ 399.434820][ T8] usb 5-1: Manufacturer: syz [ 399.439473][ T8] usb 5-1: SerialNumber: syz [ 399.462958][ T8] usb 5-1: config 0 descriptor?? [ 399.470543][T15659] loop7: detected capacity change from 0 to 764 [ 399.513452][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 399.556601][T15659] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 399.580992][T15647] ntfs3(loop3): failed to convert "c46c" to iso8859-15 [ 399.601586][T15659] Symlink component flag not implemented [ 399.630590][T15659] Symlink component flag not implemented (7) [ 399.893490][T15667] netlink: 'syz.3.3964': attribute type 3 has an invalid length. [ 399.915062][T15667] netlink: 'syz.3.3964': attribute type 1 has an invalid length. [ 399.942457][T15667] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3964'. [ 399.958156][ T8] gspca_spca1528: reg_w err -71 [ 399.974173][T15667] nbd: couldn't find device at index 63 [ 400.004491][ T8] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 400.031503][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'. [ 400.050496][ T8] usb 5-1: USB disconnect, device number 18 [ 400.659092][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3977'. [ 400.822292][T15701] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 401.012102][T15711] netlink: 172 bytes leftover after parsing attributes in process `syz.8.3983'. [ 401.598978][T15732] xt_nat: multiple ranges no longer supported [ 401.734215][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3995'. [ 401.909960][T15742] tmpfs: Bad value for 'mpol' [ 402.988250][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'. [ 403.053966][T15782] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4019'. [ 403.058278][ T29] audit: type=1326 audit(1737320408.065:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.7.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 403.161064][ T29] audit: type=1326 audit(1737320408.065:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.7.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 403.183617][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.264113][ T29] audit: type=1326 audit(1737320408.102:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.7.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 403.346267][ T29] audit: type=1326 audit(1737320408.102:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.7.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 403.441886][ T29] audit: type=1326 audit(1737320408.102:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.7.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 403.688517][T15808] loop8: detected capacity change from 0 to 764 [ 403.865782][ T29] audit: type=1326 audit(1737320408.803:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15813 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 403.888262][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.994181][ T29] audit: type=1326 audit(1737320408.840:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15813 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 404.074050][ T29] audit: type=1326 audit(1737320408.840:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15813 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 404.120392][ T25] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 404.193055][ T29] audit: type=1326 audit(1737320408.840:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15813 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 404.259578][ T29] audit: type=1326 audit(1737320408.840:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15813 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb948385d29 code=0x7ffc0000 [ 404.334171][ T25] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 404.342973][ T25] usb 5-1: config 0 has no interface number 0 [ 404.375743][T15830] sctp: [Deprecated]: syz.8.4043 (pid 15830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.375743][T15830] Use struct sctp_sack_info instead [ 404.388344][ T25] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=89.97 [ 404.412362][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.461647][ T25] usb 5-1: Product: syz [ 404.486344][ T25] usb 5-1: Manufacturer: syz [ 404.504730][ T25] usb 5-1: SerialNumber: syz [ 404.535123][ T25] usb 5-1: config 0 descriptor?? [ 404.603568][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4047'. [ 404.613316][T15838] x_tables: duplicate underflow at hook 3 [ 404.770966][ T5891] usb 5-1: USB disconnect, device number 19 [ 405.031424][T15854] loop3: detected capacity change from 0 to 1024 [ 405.319227][ T57] hfsplus: b-tree write err: -5, ino 4 [ 405.677688][T15872] netlink: 26 bytes leftover after parsing attributes in process `syz.8.4064'. [ 405.884218][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.891959][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.096630][T15880] loop8: detected capacity change from 0 to 8 [ 406.387610][T15888] netlink: 'syz.0.4072': attribute type 1 has an invalid length. [ 406.412551][T15888] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4072'. [ 406.432798][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'. [ 406.919104][T15856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.963740][T15856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.349425][T15911] QAT: Stopping all acceleration devices. [ 407.494617][T15856] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.519505][T15856] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.538702][T15856] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.558829][T15856] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.644391][T15918] usb usb8: usbfs: process 15918 (syz.3.4087) did not claim interface 1 before use [ 407.840655][ T8] dummy0 speed is unknown, defaulting to 1000 [ 408.478936][T15945] loop7: detected capacity change from 0 to 1024 [ 408.735529][T15952] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4104'. [ 408.753281][T15945] hfsplus: request for non-existent node 211 in B*Tree [ 408.784865][T15945] hfsplus: request for non-existent node 211 in B*Tree [ 408.800813][T15956] loop3: detected capacity change from 0 to 256 [ 408.879287][T15956] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 408.917815][T15957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.138669][T15963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4109'. [ 409.614451][T15946] loop5: detected capacity change from 0 to 32768 [ 409.653166][T15981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4116'. [ 409.669816][T15946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4101 (15946) [ 409.766094][T15946] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.844387][T15946] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 409.879286][T15946] BTRFS info (device loop5): using free-space-tree [ 410.075033][ T1313] BTRFS warning (device loop5): checksum verify failed on logical 5341184 mirror 1 wanted 0x823bfd7f7e9be03398f3b4608dbcdb455eebd9c4b9dd73a747777bf050b6b650 found 0xc421cb5e459da459abf89c627420310ab3df5071d5d0dc99366afdc4d7a31d15 level 0 [ 410.099998][T15946] BTRFS error (device loop5): failed to load root free space [ 410.266962][T16009] xt_hashlimit: size too large, truncated to 1048576 [ 410.560193][T15946] BTRFS error (device loop5): open_ctree failed [ 411.501786][T16042] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 411.595577][T16042] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 411.626842][T16042] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 411.953892][T16055] loop5: detected capacity change from 0 to 2048 [ 412.039939][T16055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.523077][ T29] audit: type=1326 audit(1737320416.796:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.4.4155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7df785d29 code=0x0 [ 412.578078][ T5137] Bluetooth: hci1: Malformed Event: 0x02 [ 412.734442][T16081] loop3: detected capacity change from 0 to 128 [ 412.757731][T16082] CIFS mount error: No usable UNC path provided in device string! [ 412.757731][T16082] [ 412.793425][T16082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 412.835512][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'. [ 414.407581][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4184'. [ 414.445233][T16142] IPv6: Can't replace route, no match found [ 414.672499][T16153] loop5: detected capacity change from 0 to 64 [ 415.229222][T16162] netlink: 'syz.5.4193': attribute type 1 has an invalid length. [ 415.359655][T16133] loop7: detected capacity change from 0 to 32768 [ 415.404460][T16133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4182 (16133) [ 415.491336][T16133] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 415.536963][T16133] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 415.562863][T16133] BTRFS info (device loop7): using free-space-tree [ 415.681079][ T5137] Bluetooth: hci1: Malformed LE Event: 0x0d [ 415.875510][T16133] BTRFS info (device loop7): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 416.352178][T12257] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.734285][T16214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4211'. [ 417.159690][T16228] sock: sock_timestamping_bind_phc: sock not bind to device [ 417.207972][T16230] netlink: 'syz.7.4204': attribute type 3 has an invalid length. [ 417.239513][T16230] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4204'. [ 417.356545][ T5924] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 417.394478][T16236] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.497209][T16236] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.572964][ T5924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.600105][ T5924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.628540][ T5924] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.689353][ T5924] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 417.736058][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.761612][ T5924] usb 6-1: Product: syz [ 417.784792][ T5924] usb 6-1: Manufacturer: syz [ 417.803283][ T5924] usb 6-1: SerialNumber: syz [ 417.878140][ T5924] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 417.915188][ T5924] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 417.924867][ T5924] cdc_ncm 6-1:1.0: bind() failure [ 417.935303][ T5924] usb-storage 6-1:1.0: USB Mass Storage device detected [ 417.984390][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.993181][ T5924] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 418.080749][T16255] binder: 16254:16255 ioctl 400c620e 200001c0 returned -22 [ 418.212758][ T5924] usb 6-1: USB disconnect, device number 10 [ 418.427630][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.240787][T16287] loop8: detected capacity change from 0 to 4096 [ 419.302542][T16287] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 419.402780][T16298] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4249'. [ 419.445043][T16287] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 419.532339][T16301] syz.5.4250: attempt to access beyond end of device [ 419.532339][T16301] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 419.593780][T16301] MINIX-fs: unable to read superblock [ 419.819491][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 419.898630][T16310] bridge2: entered promiscuous mode [ 420.208015][T16324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.409629][T16334] xt_limit: Overflow, try lower: 0/0 [ 420.617996][T16341] NILFS (nullb0): couldn't find nilfs on the device [ 420.832796][T16348] netlink: 'syz.4.4274': attribute type 1 has an invalid length. [ 420.971752][T16354] loop3: detected capacity change from 0 to 1024 [ 420.981851][T16356] x_tables: duplicate entry at hook 1 [ 421.279793][T16366] netlink: 'syz.8.4283': attribute type 1 has an invalid length. [ 421.489537][T16375] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 421.703966][T16383] loop7: detected capacity change from 0 to 764 [ 421.945548][T16388] loop8: detected capacity change from 0 to 2048 [ 422.052977][T16396] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.171370][T16388] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 422.284144][T16388] Remounting filesystem read-only [ 422.694320][T16417] netlink: 'syz.5.4309': attribute type 1 has an invalid length. [ 422.743055][T16417] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4309'. [ 423.148194][T16434] : entered promiscuous mode [ 423.219209][T16437] loop7: detected capacity change from 0 to 16 [ 423.287080][T16437] erofs (device loop7): mounted with root inode @ nid 36. [ 423.586336][T16450] loop4: detected capacity change from 0 to 256 [ 423.626570][T16450] exfat: Deprecated parameter 'utf8' [ 423.636837][T16450] exfat: Deprecated parameter 'namecase' [ 423.656919][T16452] loop7: detected capacity change from 0 to 1024 [ 423.666452][T16450] exfat: Deprecated parameter 'utf8' [ 423.716972][T16450] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 423.809702][T16452] hfsplus: xattr searching failed [ 423.956347][ T29] audit: type=1326 audit(1737320427.346:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.8.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acf985d29 code=0x7ffc0000 [ 424.038277][ T29] audit: type=1326 audit(1737320427.346:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.8.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acf985d29 code=0x7ffc0000 [ 424.060814][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.158224][ T29] audit: type=1326 audit(1737320427.383:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.8.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6acf985d29 code=0x7ffc0000 [ 424.203687][ T29] audit: type=1326 audit(1737320427.383:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.8.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acf985d29 code=0x7ffc0000 [ 424.227425][ T29] audit: type=1326 audit(1737320427.383:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.8.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acf985d29 code=0x7ffc0000 [ 424.296033][T16468] loop8: detected capacity change from 0 to 512 [ 424.320051][T16468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.396896][T16468] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.4335: corrupted in-inode xattr: invalid ea_ino [ 424.419988][T16468] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4335: couldn't read orphan inode 15 (err -117) [ 424.444234][T16479] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 424.451961][T16468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.518449][T16468] VFS: Lookup of 'file1' in ext4 loop8 would have caused loop [ 424.669581][T12529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.678419][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4342'. [ 424.859588][T16490] loop3: detected capacity change from 0 to 164 [ 424.912385][T16496] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4343'. [ 424.948730][T16490] rock: directory entry would overflow storage [ 424.956162][T16497] netlink: 'syz.0.4347': attribute type 2 has an invalid length. [ 424.964597][T16490] rock: sig=0x4543, size=28, remaining=18 [ 425.158076][ T5913] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 425.383811][ T5913] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 425.392963][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.434393][ T5913] usb 5-1: Product: syz [ 425.460970][ T5913] usb 5-1: Manufacturer: syz [ 425.465643][ T5913] usb 5-1: SerialNumber: syz [ 425.507092][ T5913] usb 5-1: config 0 descriptor?? [ 425.753521][ T5913] hso 5-1:0.0: Failed to find BULK IN ep [ 425.763337][ T5913] usb-storage 5-1:0.0: USB Mass Storage device detected [ 425.882983][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.988322][ T5913] usb 5-1: USB disconnect, device number 20 [ 426.334183][T16501] loop7: detected capacity change from 0 to 32768 [ 426.483277][T16509] loop5: detected capacity change from 0 to 32768 [ 426.532639][T16509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4353 (16509) [ 426.577470][T16509] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.620360][T16539] loop8: detected capacity change from 0 to 64 [ 426.666679][T16509] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 426.695455][T16541] netlink: 'syz.0.4368': attribute type 2 has an invalid length. [ 426.719115][T16509] BTRFS info (device loop5): using free-space-tree [ 426.829045][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4370'. [ 427.149018][T16565] loop7: detected capacity change from 0 to 512 [ 427.208834][T16565] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 427.306257][T16565] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4369: invalid indirect mapped block 83886080 (level 1) [ 427.323278][T16565] EXT4-fs (loop7): Remounting filesystem read-only [ 427.330108][T16565] EXT4-fs (loop7): 1 orphan inode deleted [ 427.336341][ T5830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 427.336446][T16565] EXT4-fs (loop7): 1 truncate cleaned up [ 427.370194][T16565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.734517][T12257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.028992][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4376'. [ 429.155186][T16623] dummy0 speed is unknown, defaulting to 1000 [ 429.214518][ T5137] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 429.355906][T16593] loop3: detected capacity change from 0 to 32768 [ 429.393304][T16593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4385 (16593) [ 429.532056][ T5137] Bluetooth: hci2: command 0x0406 tx timeout [ 429.552117][T16593] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.583830][T16593] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 429.674802][T16593] BTRFS info (device loop3): using free-space-tree [ 430.132856][ T5833] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.463783][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 430.666376][ T8] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 430.721762][ T8] usb 5-1: config 0 has no interface number 0 [ 430.728493][ T8] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 430.747020][ T8] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.768738][ T8] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 430.778784][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.787277][ T8] usb 5-1: Product: syz [ 430.799527][ T8] usb 5-1: Manufacturer: syz [ 430.804178][ T8] usb 5-1: SerialNumber: syz [ 430.844117][ T8] usb 5-1: config 0 descriptor?? [ 430.852036][T16667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.887694][ T8] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 430.962672][ T8] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 431.291466][T16686] gretap1: entered allmulticast mode [ 431.393869][T16690] netlink: 'syz.0.4423': attribute type 3 has an invalid length. [ 431.405652][ T8] usb 5-1: USB disconnect, device number 21 [ 431.424380][T16690] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4423'. [ 431.429064][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 431.503453][ T8] cyberjack 5-1:0.69: device disconnected [ 431.894165][T16673] loop7: detected capacity change from 0 to 32768 [ 432.012003][ T51] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 432.070518][ T51] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 432.106109][T16708] loop8: detected capacity change from 0 to 1024 [ 432.187955][ T51] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 432.376561][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4437'. [ 432.437404][ T1313] hfsplus: b-tree write err: -5, ino 4 [ 432.533424][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4440'. [ 432.668724][T16723] loop8: detected capacity change from 0 to 64 [ 432.771568][T16727] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4443'. [ 432.821388][T16730] loop7: detected capacity change from 0 to 512 [ 432.911295][T16730] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.417370][T12257] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 433.616693][ T5913] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 433.676777][T16760] netlink: 'syz.0.4456': attribute type 2 has an invalid length. [ 433.790553][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 433.808477][ T5913] usb 9-1: config 14 has an invalid interface number: 120 but max is 0 [ 433.822857][ T5913] usb 9-1: config 14 has no interface number 0 [ 433.844414][ T5913] usb 9-1: config 14 interface 120 has no altsetting 0 [ 433.869069][ T29] audit: type=1326 audit(1737320436.502:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.7.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 433.874150][ T5913] usb 9-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=f4.15 [ 433.945804][ T29] audit: type=1326 audit(1737320436.502:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.7.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 433.972764][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.012398][ T5913] usb 9-1: Product: syz [ 434.027559][T16728] loop3: detected capacity change from 0 to 32768 [ 434.041317][ T5913] usb 9-1: Manufacturer: syz [ 434.057057][ T5913] usb 9-1: SerialNumber: syz [ 434.079855][ T29] audit: type=1326 audit(1737320436.539:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.7.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 434.091462][T16728] (syz.3.4442,16728,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.168819][T16728] (syz.3.4442,16728,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.179911][ T29] audit: type=1326 audit(1737320436.539:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.7.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 434.266203][T16728] JBD2: Ignoring recovery information on journal [ 434.303410][ T29] audit: type=1326 audit(1737320436.539:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.7.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bb85d29 code=0x7ffc0000 [ 434.414830][ T5913] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.444790][T16728] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 434.506283][ T5913] snd-usb-audio 9-1:14.120: probe with driver snd-usb-audio failed with error -2 [ 434.562319][ T5913] usb 9-1: USB disconnect, device number 8 [ 434.777095][ T6146] udevd[6146]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:14.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.911630][T16795] loop4: detected capacity change from 0 to 256 [ 434.953649][T16795] FAT-fs (loop4): Directory bread(block 64) failed [ 434.961123][T16795] FAT-fs (loop4): Directory bread(block 65) failed [ 434.967931][T16795] FAT-fs (loop4): Directory bread(block 66) failed [ 435.014590][T16795] FAT-fs (loop4): Directory bread(block 67) failed [ 435.021299][T16795] FAT-fs (loop4): Directory bread(block 68) failed [ 435.087903][T16795] FAT-fs (loop4): Directory bread(block 69) failed [ 435.098014][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 435.166119][T16795] FAT-fs (loop4): Directory bread(block 70) failed [ 435.209536][T16795] FAT-fs (loop4): Directory bread(block 71) failed [ 435.216178][T16795] FAT-fs (loop4): Directory bread(block 72) failed [ 435.231195][T16803] binfmt_misc: register: failed to install interpreter file ./file0 [ 435.303144][T16795] FAT-fs (loop4): Directory bread(block 73) failed [ 435.392746][T16807] loop7: detected capacity change from 0 to 256 [ 435.455394][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4480'. [ 436.152788][T16833] netlink: 'syz.8.4489': attribute type 5 has an invalid length. [ 436.213470][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 436.341530][T16837] bridge3: entered promiscuous mode [ 436.404482][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 436.422068][T16837] bridge3: entered allmulticast mode [ 436.433005][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 83, setting to 64 [ 436.459118][ T8] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 436.481308][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.503213][ T8] usb 4-1: Product: syz [ 436.507438][ T8] usb 4-1: Manufacturer: syz [ 436.537234][ T8] usb 4-1: SerialNumber: syz [ 436.590861][ T8] usb 4-1: config 0 descriptor?? [ 436.629185][T16827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 436.651251][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 436.657237][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 436.717888][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.947222][T16819] loop5: detected capacity change from 0 to 32768 [ 437.036266][ T5892] usb 4-1: USB disconnect, device number 9 [ 437.109924][T16819] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 437.415018][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 437.506216][ T5913] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 437.692215][ T5913] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 437.701166][T16876] loop4: detected capacity change from 0 to 764 [ 437.720620][ T5913] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 437.758025][ T5913] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 437.776447][T16876] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 437.797927][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.845458][ T5913] usb 8-1: Product: syz [ 437.849709][ T5913] usb 8-1: Manufacturer: syz [ 437.863498][ T5913] usb 8-1: SerialNumber: syz [ 437.867507][T16879] netlink: 'syz.3.4513': attribute type 2 has an invalid length. [ 437.878336][T16880] netlink: 'syz.0.4512': attribute type 1 has an invalid length. [ 437.905246][ T5913] usb 8-1: config 0 descriptor?? [ 437.918759][T16863] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 437.941128][T16863] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.226988][T16863] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.253759][T16889] netlink: 'syz.0.4515': attribute type 21 has an invalid length. [ 438.256115][T16863] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.261732][T16889] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4515'. [ 438.579858][ T5913] Error reading MAC address [ 438.624118][ T5913] usb 8-1: USB disconnect, device number 6 [ 438.798766][T16902] netlink: 'syz.0.4521': attribute type 1 has an invalid length. [ 439.053723][T16911] program syz.5.4527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.079264][T16914] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 439.642136][T16933] kernel read not supported for file / ÏüâW)éÇ-ë: (pid: 16933 comm: syz.0.4537) [ 439.703322][ T29] audit: type=1800 audit(1737320441.883:118): pid=16933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4537" name=2009CFFCC3A25729E9C72DEB3A dev="mqueue" ino=42612 res=0 errno=0 [ 439.937853][T16945] loop3: detected capacity change from 0 to 512 [ 439.973090][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4545'. [ 440.111887][T16945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.164676][T16957] netlink: 'syz.7.4548': attribute type 1 has an invalid length. [ 440.172930][T16945] ext4 filesystem being mounted at /810/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.347668][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.416551][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.435014][T16965] loop5: detected capacity change from 0 to 64 [ 440.626358][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 440.771445][T16975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4559'. [ 441.405720][T16950] loop8: detected capacity change from 0 to 32768 [ 441.480045][T16950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4546 (16950) [ 441.610710][T16950] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 441.685656][T16950] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 441.730469][T16950] BTRFS info (device loop8): using free-space-tree [ 442.531229][T16991] loop7: detected capacity change from 0 to 32768 [ 442.739533][T12529] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.962599][T17045] program syz.3.4584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.029049][T17043] loop5: detected capacity change from 0 to 4096 [ 443.109859][T17043] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 443.317488][T17043] ntfs3(loop5): failed to convert "c46c" to euc-jp [ 443.411712][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.486822][T17053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.609811][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.808010][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.962219][T17070] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4596'. [ 443.973665][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.000613][T17070] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4596'. [ 444.153323][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.349392][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.446841][T17090] loop5: detected capacity change from 0 to 8 [ 444.509258][T17090] SQUASHFS error: Unable to read directory block [629:0] [ 444.963299][T17099] loop7: detected capacity change from 0 to 4096 [ 445.001394][T17099] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 445.125659][T17099] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 445.149666][T17099] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 445.217601][T17099] ntfs3(loop7): ino=1e, "file1" failed to parse mft record [ 445.229484][T17099] ntfs3(loop7): ino=1e, "file1" attr_set_size [ 445.239475][T17107] loop5: detected capacity change from 0 to 4096 [ 445.281171][T17107] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 445.375026][T17107] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 445.409588][T17115] dummy0 speed is unknown, defaulting to 1000 [ 445.623810][T17125] loop7: detected capacity change from 0 to 1024 [ 445.761664][T17131] loop3: detected capacity change from 0 to 256 [ 446.240735][T17145] netlink: 'syz.5.4632': attribute type 1 has an invalid length. [ 446.410615][T17149] usb usb8: usbfs: process 17149 (syz.8.4634) did not claim interface 0 before use [ 446.449120][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.635555][T17158] overlay: Unknown parameter 'reiser\s\' [ 446.783696][T17159] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4637'. [ 446.822194][T17162] loop8: detected capacity change from 0 to 512 [ 446.858301][T17168] xt_TCPMSS: Only works on TCP SYN packets [ 446.868581][T17162] EXT4-fs: Ignoring removed orlov option [ 446.874675][T17163] dummy0 speed is unknown, defaulting to 1000 [ 446.909546][T17162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.990301][T17162] EXT4-fs (loop8): orphan cleanup on readonly fs [ 447.032123][T17162] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4640: bg 0: block 248: padding at end of block bitmap is not set [ 447.141605][T17162] Quota error (device loop8): write_blk: dquota write failed [ 447.165431][T17162] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 447.215153][T17162] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4640: Failed to acquire dquot type 1 [ 447.293260][T17162] EXT4-fs (loop8): 1 truncate cleaned up [ 447.334500][T17162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 447.337997][T17184] loop3: detected capacity change from 0 to 256 [ 447.512259][T17162] EXT4-fs: Ignoring removed orlov option [ 447.530090][T17162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.600328][T17162] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 447.649878][T17195] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 447.729401][T17162] EXT4-fs error (device loop8): __ext4_remount:6749: comm syz.8.4640: Abort forced by user [ 447.821929][T17162] EXT4-fs (loop8): Remounting filesystem read-only [ 447.841791][T17162] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 447.852457][T17162] ext4 filesystem being remounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.913359][T17205] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 447.942072][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.949902][T17199] loop3: detected capacity change from 0 to 2048 [ 448.053083][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.095189][T17199] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.4657: bad orphan inode 8192 [ 448.139490][T17199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.146815][T12529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.361102][T17217] loop4: detected capacity change from 0 to 128 [ 448.757035][T17231] tmpfs: Bad value for 'mpol' [ 448.813396][T17235] autofs4:pid:17235:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 448.961122][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.218836][T17245] loop8: detected capacity change from 0 to 1024 [ 449.325943][T17245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.546488][T17259] loop5: detected capacity change from 0 to 128 [ 449.612674][T12529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.707821][T17259] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 449.792911][T17259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.651553][T17247] loop3: detected capacity change from 0 to 32768 [ 450.672629][T17289] loop4: detected capacity change from 0 to 1764 [ 450.735423][T17295] loop5: detected capacity change from 0 to 512 [ 450.771962][T17247] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 450.778950][T17295] EXT4-fs: Ignoring removed i_version option [ 450.803445][T17295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 450.955811][T17247] XFS (loop3): Ending clean mount [ 450.996782][T17295] EXT4-fs (loop5): 1 truncate cleaned up [ 451.051783][T17295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.114375][T17295] EXT4-fs error (device loop5): ext4_find_extent:902: inode #15: comm syz.5.4702: inode has invalid extent depth: 25964 [ 451.156851][T17295] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 451.166075][ T5892] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 451.277068][ T5833] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 451.395945][ T5892] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.408117][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.418298][ T5892] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 451.493106][ T5892] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 451.502408][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.579072][ T5892] usb 9-1: config 0 descriptor?? [ 451.604726][T17322] netlink: 'syz.0.4712': attribute type 10 has an invalid length. [ 452.066892][ T5892] Bluetooth: Can't get version to change to load ram patch err [ 452.123466][ T5892] Bluetooth: Loading patch file failed [ 452.129038][ T5892] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 452.197577][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 452.206064][ T5892] usb 9-1: USB disconnect, device number 9 [ 452.425249][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 452.457191][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 452.511002][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 452.554424][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 452.611859][ T8] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 452.621911][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.629959][ T8] usb 4-1: Product: syz [ 452.648379][ T8] usb 4-1: Manufacturer: syz [ 452.664220][ T8] usb 4-1: SerialNumber: syz [ 452.692810][ T8] usb 4-1: config 0 descriptor?? [ 452.716284][ T8] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 452.954021][ T8] scsi host1: usb-storage 4-1:0.0 [ 452.964045][T17367] loop7: detected capacity change from 0 to 64 [ 452.985830][ T8] usb 4-1: USB disconnect, device number 10 [ 453.389648][T17377] loop8: detected capacity change from 0 to 1024 [ 453.472366][T17378] block device autoloading is deprecated and will be removed. [ 453.475875][ T5891] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 453.522988][T17378] syz.4.4734: attempt to access beyond end of device [ 453.522988][T17378] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 453.659996][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 453.702767][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.735940][ T5891] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=66.4d [ 453.745056][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.762764][ T5891] usb 6-1: Product: syz [ 453.777999][ T5891] usb 6-1: Manufacturer: syz [ 453.786156][ T5891] usb 6-1: SerialNumber: syz [ 453.833395][ T5891] usb 6-1: config 0 descriptor?? [ 453.859633][ T5891] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 453.996746][T17395] netlink: 'syz.7.4745': attribute type 1 has an invalid length. [ 454.313662][ T5891] gspca_m5602: Failed to find a sensor [ 454.319360][ T5891] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 454.364494][ T5891] usb 6-1: USB disconnect, device number 11 [ 454.536023][T17413] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 454.583219][T17415] loop4: detected capacity change from 0 to 128 [ 454.745093][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4758'. [ 455.766802][T17463] loop5: detected capacity change from 0 to 256 [ 455.785568][T17463] exfat: Deprecated parameter 'utf8' [ 455.880009][T17463] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 455.976961][T17463] overlay: filesystem on ./file0 not supported [ 456.200823][T17477] loop8: detected capacity change from 0 to 256 [ 456.277204][T17477] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 456.784244][T17489] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4792'. [ 456.894375][T17493] netlink: 'syz.3.4795': attribute type 3 has an invalid length. [ 457.410018][T17473] loop4: detected capacity change from 0 to 32768 [ 457.445606][T17509] loop3: detected capacity change from 0 to 128 [ 457.492901][T17512] syz.0.4802: attempt to access beyond end of device [ 457.492901][T17512] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 457.507002][T17473] find_entry called with index = 0 [ 457.514115][T17509] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.558132][T17512] hpfs: hpfs_map_sector(): read error [ 457.640882][T17509] ext4 filesystem being mounted at /850/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 457.700470][T17519] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4806'. [ 457.765750][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4807'. [ 457.950416][T17526] delete_channel: no stack [ 457.964260][ T5833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.031277][T17561] cgroup: name respecified [ 459.107002][T17564] loop7: detected capacity change from 0 to 1024 [ 459.132565][T17565] [ 459.134937][T17565] ====================================================== [ 459.142059][T17565] WARNING: possible circular locking dependency detected [ 459.149092][T17565] 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 Not tainted [ 459.156217][T17565] ------------------------------------------------------ [ 459.163338][T17565] syz.4.4829/17565 is trying to acquire lock: [ 459.169423][T17565] ffff8881437a86f8 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x43f/0x900 [ 459.179432][T17565] [ 459.179432][T17565] but task is already holding lock: [ 459.186809][T17565] ffff8881437a80a8 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 459.196644][T17565] [ 459.196644][T17565] which lock already depends on the new lock. [ 459.196644][T17565] [ 459.207062][T17565] [ 459.207062][T17565] the existing dependency chain (in reverse order) is: [ 459.216083][T17565] [ 459.216083][T17565] -> #6 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 459.223636][T17537] loop3: detected capacity change from 0 to 32768 [ 459.224731][T17565] lock_acquire+0x1ed/0x550 [ 459.233025][T17564] EXT4-fs: Ignoring removed orlov option [ 459.236146][T17565] blk_mq_submit_bio+0x1536/0x2390 [ 459.236184][T17565] __submit_bio+0x2c6/0x560 [ 459.252455][T17565] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 459.258623][T17565] ext4_commit_super+0x2e0/0x450 [ 459.264110][T17565] ext4_handle_error+0x71a/0x8e0 [ 459.269607][T17565] __ext4_error+0x277/0x3b0 [ 459.272195][T17564] EXT4-fs (loop7): Test dummy encryption mode enabled [ 459.274647][T17565] ext4_validate_block_bitmap+0xdf9/0x1200 [ 459.287755][T17565] ext4_read_block_bitmap_nowait+0x61f/0xa80 [ 459.294288][T17565] ext4_mb_init_cache+0x413/0x13f0 [ 459.299950][T17565] ext4_mb_init_group+0x329/0x600 [ 459.300806][T17564] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 459.305493][T17565] ext4_mb_load_buddy_gfp+0xc49/0xe60 [ 459.305533][T17565] ext4_free_blocks+0xc9c/0x2240 [ 459.327727][T17565] ext4_clear_blocks+0x334/0x3b0 [ 459.328279][T17564] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 459.333199][T17565] ext4_ind_truncate+0x76b/0xd60 [ 459.348211][T17565] ext4_truncate+0x9f0/0x11c0 [ 459.353433][T17565] ext4_evict_inode+0x90f/0xf50 [ 459.356029][T17564] EXT4-fs (loop7): invalid journal inode [ 459.358808][T17565] evict+0x4ea/0x9a0 [ 459.358839][T17565] ext4_orphan_cleanup+0xb77/0x13d0 [ 459.364667][T17564] EXT4-fs (loop7): can't get journal size [ 459.368842][T17565] ext4_fill_super+0x64dc/0x6e60 [ 459.385768][T17565] get_tree_bdev_flags+0x48e/0x5c0 [ 459.391425][T17565] vfs_get_tree+0x92/0x2b0 [ 459.396391][T17565] do_new_mount+0x2be/0xb40 [ 459.401450][T17565] __se_sys_mount+0x2d6/0x3c0 [ 459.406767][T17565] do_syscall_64+0xf3/0x230 [ 459.411827][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.418287][T17565] [ 459.418287][T17565] -> #5 (&ei->i_data_sem){++++}-{4:4}: [ 459.425975][T17565] lock_acquire+0x1ed/0x550 [ 459.431029][T17565] down_write+0x99/0x220 [ 459.435819][T17565] ext4_map_blocks+0x7a6/0x1990 [ 459.441219][T17565] ext4_do_writepages+0x21c7/0x3df0 [ 459.446972][T17565] ext4_writepages+0x213/0x3c0 [ 459.452275][T17565] do_writepages+0x361/0x880 [ 459.455470][T17564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.457377][T17565] __writeback_single_inode+0x14f/0x10d0 [ 459.457412][T17565] writeback_sb_inodes+0x820/0x1360 [ 459.457437][T17565] __writeback_inodes_wb+0x11b/0x260 [ 459.457462][T17565] wb_writeback+0x427/0xb80 [ 459.457485][T17565] wb_workfn+0xc4b/0x1080 [ 459.457525][T17565] process_scheduled_works+0xa68/0x1840 [ 459.457552][T17565] worker_thread+0x870/0xd30 [ 459.457578][T17565] kthread+0x2f2/0x390 [ 459.457613][T17565] ret_from_fork+0x4d/0x80 [ 459.518039][T17565] ret_from_fork_asm+0x1a/0x30 [ 459.523330][T17565] [ 459.523330][T17565] -> #4 (jbd2_handle){++++}-{0:0}: [ 459.530639][T17565] lock_acquire+0x1ed/0x550 [ 459.535667][T17565] start_this_handle+0x1eb4/0x2110 [ 459.541302][T17565] jbd2__journal_start+0x2da/0x5d0 [ 459.546935][T17565] __ext4_journal_start_sb+0x239/0x600 [ 459.552925][T17565] ext4_dirty_inode+0x92/0x110 [ 459.558220][T17565] __mark_inode_dirty+0x2f0/0xe90 [ 459.563795][T17565] touch_atime+0x413/0x690 [ 459.568752][T17565] ext4_file_mmap+0x18c/0x540 [ 459.573969][T17565] __mmap_region+0x2250/0x2d30 [ 459.579283][T17565] mmap_region+0x226/0x2c0 [ 459.584260][T17565] do_mmap+0x97a/0x10d0 [ 459.588961][T17565] vm_mmap_pgoff+0x1dd/0x3d0 [ 459.594082][T17565] ksys_mmap_pgoff+0x4eb/0x720 [ 459.599391][T17565] do_syscall_64+0xf3/0x230 [ 459.604444][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.610897][T17565] [ 459.610897][T17565] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 459.618492][T17565] lock_acquire+0x1ed/0x550 [ 459.623540][T17565] __might_fault+0xc6/0x120 [ 459.628576][T17565] _copy_from_user+0x2a/0xc0 [ 459.633718][T17565] blk_trace_ioctl+0x1ad/0x9a0 [ 459.639020][T17565] blkdev_ioctl+0x40c/0x6a0 [ 459.644063][T17565] __se_sys_ioctl+0xf7/0x170 [ 459.649193][T17565] do_syscall_64+0xf3/0x230 [ 459.654273][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.660725][T17565] [ 459.660725][T17565] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 459.668579][T17565] lock_acquire+0x1ed/0x550 [ 459.673614][T17565] __mutex_lock+0x1ac/0xee0 [ 459.678663][T17565] blk_mq_init_sched+0x3fa/0x830 [ 459.684147][T17565] elevator_init_mq+0x20e/0x320 [ 459.689525][T17565] add_disk_fwnode+0x10d/0xf80 [ 459.694830][T17565] sd_probe+0xba6/0x1100 [ 459.699596][T17565] really_probe+0x2ba/0xad0 [ 459.704708][T17565] __driver_probe_device+0x1a2/0x390 [ 459.710513][T17565] driver_probe_device+0x50/0x430 [ 459.716067][T17565] __device_attach_driver+0x2d6/0x530 [ 459.721969][T17565] bus_for_each_drv+0x250/0x2e0 [ 459.727360][T17565] __device_attach_async_helper+0x22d/0x300 [ 459.733819][T17565] async_run_entry_fn+0xaa/0x420 [ 459.739281][T17565] process_scheduled_works+0xa68/0x1840 [ 459.745344][T17565] worker_thread+0x870/0xd30 [ 459.750455][T17565] kthread+0x2f2/0x390 [ 459.755047][T17565] ret_from_fork+0x4d/0x80 [ 459.760081][T17565] ret_from_fork_asm+0x1a/0x30 [ 459.765372][T17565] [ 459.765372][T17565] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 459.774257][T17565] lock_acquire+0x1ed/0x550 [ 459.779304][T17565] blk_queue_enter+0xe1/0x600 [ 459.784521][T17565] blk_mq_alloc_request+0x4fa/0xaa0 [ 459.790292][T17565] scsi_execute_cmd+0x16c/0x10e0 [ 459.795751][T17565] read_capacity_16+0x2b4/0x1450 [ 459.801217][T17565] sd_revalidate_disk+0x1013/0xbce0 [ 459.806944][T17565] sd_probe+0x9fa/0x1100 [ 459.811706][T17565] really_probe+0x2ba/0xad0 [ 459.816749][T17565] __driver_probe_device+0x1a2/0x390 [ 459.822638][T17565] driver_probe_device+0x50/0x430 [ 459.828183][T17565] __device_attach_driver+0x2d6/0x530 [ 459.834074][T17565] bus_for_each_drv+0x250/0x2e0 [ 459.839451][T17565] __device_attach_async_helper+0x22d/0x300 [ 459.845864][T17565] async_run_entry_fn+0xaa/0x420 [ 459.851329][T17565] process_scheduled_works+0xa68/0x1840 [ 459.857390][T17565] worker_thread+0x870/0xd30 [ 459.862499][T17565] kthread+0x2f2/0x390 [ 459.867088][T17565] ret_from_fork+0x4d/0x80 [ 459.872022][T17565] ret_from_fork_asm+0x1a/0x30 [ 459.877304][T17565] [ 459.877304][T17565] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 459.884959][T17565] validate_chain+0x18ef/0x5920 [ 459.890350][T17565] __lock_acquire+0x1397/0x2100 [ 459.895743][T17565] lock_acquire+0x1ed/0x550 [ 459.900784][T17565] __mutex_lock+0x1ac/0xee0 [ 459.905841][T17565] loop_reconfigure_limits+0x43f/0x900 [ 459.911819][T17565] lo_ioctl+0x1351/0x1f50 [ 459.916664][T17565] blkdev_ioctl+0x57f/0x6a0 [ 459.921683][T17565] __se_sys_ioctl+0xf7/0x170 [ 459.926795][T17565] do_syscall_64+0xf3/0x230 [ 459.931829][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.938260][T17565] [ 459.938260][T17565] other info that might help us debug this: [ 459.938260][T17565] [ 459.948487][T17565] Chain exists of: [ 459.948487][T17565] &q->limits_lock --> &ei->i_data_sem --> &q->q_usage_counter(io)#23 [ 459.948487][T17565] [ 459.962703][T17565] Possible unsafe locking scenario: [ 459.962703][T17565] [ 459.970161][T17565] CPU0 CPU1 [ 459.975530][T17565] ---- ---- [ 459.980883][T17565] lock(&q->q_usage_counter(io)#23); [ 459.986273][T17565] lock(&ei->i_data_sem); [ 459.993296][T17565] lock(&q->q_usage_counter(io)#23); [ 460.001202][T17565] lock(&q->limits_lock); [ 460.005636][T17565] [ 460.005636][T17565] *** DEADLOCK *** [ 460.005636][T17565] [ 460.013785][T17565] 3 locks held by syz.4.4829/17565: [ 460.018988][T17565] #0: ffff8880253acb60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 460.027993][T17565] #1: ffff8881437a80a8 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 460.038232][T17565] #2: ffff8881437a80e0 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 460.048637][T17565] [ 460.048637][T17565] stack backtrace: [ 460.054628][T17565] CPU: 0 UID: 0 PID: 17565 Comm: syz.4.4829 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 460.065590][T17565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 460.075661][T17565] Call Trace: [ 460.078954][T17565] [ 460.081887][T17565] dump_stack_lvl+0x241/0x360 [ 460.086630][T17565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.091934][T17565] ? __pfx__printk+0x10/0x10 [ 460.096545][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.102197][T17565] print_circular_bug+0x13a/0x1b0 [ 460.107254][T17565] check_noncircular+0x36a/0x4a0 [ 460.112235][T17565] ? __pfx_check_noncircular+0x10/0x10 [ 460.117735][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.123383][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.129029][T17565] validate_chain+0x18ef/0x5920 [ 460.133939][T17565] ? __pfx_validate_chain+0x10/0x10 [ 460.139179][T17565] ? __pfx_validate_chain+0x10/0x10 [ 460.144494][T17565] ? __pfx_validate_chain+0x10/0x10 [ 460.149702][T17565] ? lockdep_unlock+0x16a/0x300 [ 460.154560][T17565] ? __pfx_lockdep_unlock+0x10/0x10 [ 460.159769][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.165426][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.171079][T17565] ? mark_lock+0x9a/0x360 [ 460.175475][T17565] __lock_acquire+0x1397/0x2100 [ 460.180367][T17565] lock_acquire+0x1ed/0x550 [ 460.184887][T17565] ? loop_reconfigure_limits+0x43f/0x900 [ 460.190563][T17565] ? __pfx_lock_acquire+0x10/0x10 [ 460.195611][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.201266][T17565] ? __pfx___might_resched+0x10/0x10 [ 460.206562][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.212216][T17565] ? mark_lock+0x9a/0x360 [ 460.216586][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.222285][T17565] __mutex_lock+0x1ac/0xee0 [ 460.226822][T17565] ? loop_reconfigure_limits+0x43f/0x900 [ 460.232476][T17565] ? loop_reconfigure_limits+0x43f/0x900 [ 460.238111][T17565] ? __pfx___mutex_lock+0x10/0x10 [ 460.243165][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.248811][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.254459][T17565] ? shmem_statfs+0x225/0x2c0 [ 460.259149][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.264802][T17565] ? vfs_statfs+0x18e/0x2c0 [ 460.269315][T17565] loop_reconfigure_limits+0x43f/0x900 [ 460.274793][T17565] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 460.280799][T17565] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 460.286698][T17565] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 460.293031][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.298663][T17565] ? finish_wait+0xd4/0x1e0 [ 460.303343][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.308977][T17565] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 460.314707][T17565] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 460.320796][T17565] ? __pfx_autoremove_wake_function+0x10/0x10 [ 460.326875][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.332685][T17565] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 460.338586][T17565] ? lo_ioctl+0x1344/0x1f50 [ 460.343092][T17565] lo_ioctl+0x1351/0x1f50 [ 460.347441][T17565] ? mark_lock+0x9a/0x360 [ 460.351788][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.357425][T17565] ? validate_chain+0x11e/0x5920 [ 460.362369][T17565] ? __pfx_lo_ioctl+0x10/0x10 [ 460.367048][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.372680][T17565] ? mark_lock+0x9a/0x360 [ 460.377023][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.382674][T17565] ? __lock_acquire+0x1397/0x2100 [ 460.387740][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.393385][T17565] ? __pfx_lock_acquire+0x10/0x10 [ 460.398408][T17565] ? is_bpf_text_address+0x26/0x2a0 [ 460.403609][T17565] ? __pfx_lock_release+0x10/0x10 [ 460.408635][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.414274][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.419908][T17565] ? preempt_count_add+0x93/0x190 [ 460.424962][T17565] ? 0xffffffffa0000810 [ 460.429130][T17565] ? 0xffffffffa0000810 [ 460.433284][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.439016][T17565] ? is_bpf_text_address+0x285/0x2a0 [ 460.444334][T17565] ? is_bpf_text_address+0x26/0x2a0 [ 460.449558][T17565] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.455795][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.461426][T17565] ? kernel_text_address+0xa7/0xe0 [ 460.466636][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.472275][T17565] ? __kernel_text_address+0xd/0x40 [ 460.477475][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.483109][T17565] ? unwind_get_return_address+0x4d/0x90 [ 460.488753][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.494396][T17565] ? arch_stack_walk+0xfd/0x150 [ 460.499260][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.504890][T17565] ? stack_trace_save+0x118/0x1d0 [ 460.509914][T17565] ? __pfx_stack_trace_save+0x10/0x10 [ 460.515292][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.520923][T17565] ? stack_depot_save_flags+0x37/0x940 [ 460.526427][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.532094][T17565] ? kasan_save_track+0x51/0x80 [ 460.536950][T17565] ? kasan_save_track+0x3f/0x80 [ 460.541815][T17565] ? kasan_save_free_info+0x40/0x50 [ 460.547135][T17565] ? __kasan_slab_free+0x59/0x70 [ 460.552253][T17565] ? kfree+0x196/0x430 [ 460.556337][T17565] ? tomoyo_path_number_perm+0x679/0x860 [ 460.562007][T17565] ? security_file_ioctl+0xc6/0x2a0 [ 460.567226][T17565] ? __se_sys_ioctl+0x46/0x170 [ 460.572002][T17565] ? do_syscall_64+0xf3/0x230 [ 460.576695][T17565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.582801][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.588450][T17565] ? do_vfs_ioctl+0xf07/0x2e40 [ 460.593225][T17565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 460.598263][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.603922][T17565] ? mark_lock+0x9a/0x360 [ 460.608275][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.613918][T17565] ? tomoyo_path_number_perm+0x206/0x860 [ 460.619570][T17565] ? __pfx_lock_release+0x10/0x10 [ 460.624596][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.630233][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.635867][T17565] ? tomoyo_path_number_perm+0x679/0x860 [ 460.641551][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.647185][T17565] ? tomoyo_path_number_perm+0x679/0x860 [ 460.652833][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.658487][T17565] ? blkdev_common_ioctl+0xfb2/0x2460 [ 460.664031][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.669666][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.675295][T17565] ? __lock_acquire+0x1397/0x2100 [ 460.680335][T17565] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 460.685968][T17565] ? tomoyo_path_number_perm+0x206/0x860 [ 460.691624][T17565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.697656][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.703297][T17565] ? file_to_blk_mode+0xcc/0x140 [ 460.708258][T17565] ? __pfx_lo_ioctl+0x10/0x10 [ 460.712946][T17565] blkdev_ioctl+0x57f/0x6a0 [ 460.717466][T17565] ? __pfx_blkdev_ioctl+0x10/0x10 [ 460.722662][T17565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.728302][T17565] ? __pfx_blkdev_ioctl+0x10/0x10 [ 460.733379][T17565] __se_sys_ioctl+0xf7/0x170 [ 460.737973][T17565] do_syscall_64+0xf3/0x230 [ 460.742489][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.748396][T17565] RIP: 0033:0x7ff7df785d29 [ 460.752808][T17565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.772420][T17565] RSP: 002b:00007ff7e05ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.780838][T17565] RAX: ffffffffffffffda RBX: 00007ff7df975fa0 RCX: 00007ff7df785d29 [ 460.788925][T17565] RDX: ffffffffffffffff RSI: 0000000000004c09 RDI: 0000000000000003 [ 460.796898][T17565] RBP: 00007ff7df801b08 R08: 0000000000000000 R09: 0000000000000000 [ 460.804894][T17565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.812870][T17565] R13: 0000000000000000 R14: 00007ff7df975fa0 R15: 00007ffeb38676c8 [ 460.820886][T17565] [ 460.831347][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.837763][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.845059][T12257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.846422][T17565] Invalid logical block size (-1)