last executing test programs: 2m3.875754764s ago: executing program 1 (id=475): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) 2m3.636912464s ago: executing program 1 (id=477): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff5, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x2, 0x2a35, 0x3, 0xffff2d37, 0x2bf4, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x3, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x1000000, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x718902d8, 0x3, 0x5, 0x4, 0xc, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x6, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0x11, 0x312, 0x8, 0x3, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x1, 0x1, 0x6, 0xfffffffd, 0x4a, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x5, 0x4, 0x9, 0x8, 0x9, 0x5, 0x5, 0x3, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x9, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfc, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x1000000b, 0x1, 0xb, 0x5, 0x2, 0x2, 0xc, 0x8, 0x6, 0x6d05, 0x7, 0x3b, 0x3, 0x200, 0x7, 0x3, 0x4, 0xffffffff, 0x0, 0xa2, 0x9, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400000, 0xfffffff9, 0x4, 0x3f, 0x800005, 0x0, 0x9, 0xfffffffb, 0x120002, 0x3, 0x6, 0x9, 0x9, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x105, 0x10000, 0x2006, 0x7fff, 0x8ffff, 0xa621, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xfffffffb, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x6, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0xffffffff, 0x515ffb4b, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2m3.345322356s ago: executing program 1 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, 0x0, &(0x7f0000000a40)=""/4096}, 0x20) 2m2.993711242s ago: executing program 1 (id=483): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m1.465633247s ago: executing program 1 (id=497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x2000000) 2m0.571203046s ago: executing program 1 (id=502): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000ffffff04006efdff0f"]) 2m0.084238797s ago: executing program 32 (id=502): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000ffffff04006efdff0f"]) 54.286930391s ago: executing program 4 (id=1059): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 54.159232867s ago: executing program 4 (id=1060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r2, 0x40d, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008085}, 0x800) 54.110828759s ago: executing program 4 (id=1063): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x5b, "", [{{0x9, 0x4, 0x0, 0x97, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x2aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x0, 0x4}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) 52.664034861s ago: executing program 4 (id=1082): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000700)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x800, 0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x41002, 0x0) mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2040, 0x0) 52.483665929s ago: executing program 4 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.99926414s ago: executing program 4 (id=1088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x7, 0x4, "7a8cfa57"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 51.714190932s ago: executing program 33 (id=1088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x7, 0x4, "7a8cfa57"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.809086491s ago: executing program 6 (id=1412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 8.091200432s ago: executing program 6 (id=1414): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r0, 0x402, 0x91ea6c12f182534) openat(r0, &(0x7f0000000000)='./file0\x00', 0x40543, 0x1) close(0x3) 7.913435139s ago: executing program 6 (id=1415): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 7.610855233s ago: executing program 6 (id=1417): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x11a3, &(0x7f0000001280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r0, &(0x7f0000007700)={0x2020}, 0x2020) 6.718694021s ago: executing program 6 (id=1423): syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000006740)="$eJzs3c2OHFfZB/Cn+ms+/MaxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhceaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoPOeMa5pu99jOdPXM+f2kcdVTp2r6lP5d092uqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvuDM1VEXPp5WnAs4v+iH9GLWGnqtYhYWTuW1x9ExAvxoDmej4jhUkSVG5+NeCMiPj4ace/+rfVm0dk99uM7f/zbb3945Pt//f3w1L//dKP/5rT1bt781b/+fPvJ9xcAAABKVNd1XaWP+cfT5/te150CAOYiv/7XSV6uXrh6c8H6o1arD3w9XLD+qOdRt9WT3W4XEbHZ3qZ5z+B0PAAcMJvxSdddoEPyL9ogIo503QlgoVVdd4B9ce/+rfUq5Vu1Xw/WttvztSC78t+sdu7vmDadZfwak3k9v7aiH89N6c/KnPqwSHL+vfH8L223j9J6+53/vEzLf7R961Nxcv798fzHHJ78exPzL1XOf/BY+fflDwAAAAAACyz///+xjs//Lj39ruzJo87/rs2pDwAAAAAAAADwWXva8f92VMb/AwAAgEXVfFZv/Prow2XTvoutWX6xinhmbH2gMOlmmdWu+wEAAAAAAAAAAAAAJRlsX8N7sYoYRsQzq6t1XTc/beP143ra7Q+60vcfStb1H3kAANj28dGxe/mriOWIuJi+62+4urpa18srq/VqvbKU38+Olpbrldbn2jxtli2N9vCGeDCqm1+23Nqubdbn5Vnt47+veaxR3d9Dx+ajw8ABICK2X43ueUU6ZOr62ej6XQ4Hg+P/8HH8sxddP08BAACA/VfXdV2lr/M+ns7597ruFAAwF/n1f/y8gFqtVqvV6sNXt9WT3W4XEbHZ3qZ5z2A4fgA4YDbjk667QIfkX7RBRLzQdSeAhVZ13QH2xb37t9arlG/Vfj1I47vna0F25b9ZPdgubz9pOsv4NSbzen5tRT+em9Kf5+fUh0WS8++N539pu32U1tvv/OdlWv7Nfh7roD9dy/n3x/Mfc3jy703Mv1Q5/8Fj5d+XPwAAAAAALLD8///HFur87+hJd2emR53/Xdu3RwUAAAAAAACA/XXv/q31fN9rPv//uQnruf/zcMr5V/IvUs4/3f+/c+HNK2Pr9Vvzd995mP8/799a/92Nf/x/nu41/6U8U6VnVpWeEVV6pGqQpk+4Y1NsDfuj5pGGVa8/SNf81MP34kpcjY04vWvdXjoeHraf2dXe9HT4oL3ub7ef3dU+2GnP25/b1T5MVzrVK7n9ZKzHT+JqvPugvWlbmrH/yzPa6xntOf++479IOf9B66fJfzW1V2PTxt07vf857tvTSY/z9pXP//L0/u/OTFtxZ+LyZv9emntvYvsvzpFR/Oz6xrWTNy/fuHHtTKTJrqVnI00+Yzn/YfrJ+b/y8nZ7/rvfPl7v3hk9dv6LYisGO8/ttib/l1vzzf6+Oue+dSHnP0o/Of93U/vk4/8g59+fmv9rHfQHAAAAAAAAAAAAAAAAHqWu6we3iL4dEefT/T9d3ZsJAMxXfv2vk7x8XnX/Sbf/w+796Kr/avWc62rB+jPX+tN6sfqjXsj6PwvWn4Wr2+rJ3moXEfGX9jbNe4ZfTPplAMAi+zQi/t51J+iM/AuWv++vmZ7oujPAXF3/8KMfXb56dePa9a57AgAAAAAAAAA8qTz+51pr/OcTdV3fHltv1/iv78Ta047/OcgzOwOMThmouv/4+/QoW71Rv9cabvzFmDb+93Bn7lHjfw9mPN5wRvtoRvvSjPblGe0Tb/Royfm/2Brv/EREHB8bfr2E8V/Hx7wvQc7/pdbzucn/S2PrtfOvf3OQ8+/tyv/UjQ9+eur6hx+9fuWDy+9vvL/x43Nnzpw+d/78hQsXTr135erG6e1/O+zx/sr557GvXQdalpx/zlz+Zcn5fyHV8i9Lzv+LqZZ/WXL++f2e/MuS88+ffeRflpz/q6mWf1ly/l9OtfzLkvN/LdXyL0vO/yupln9Zcv6vp1r+Zcn5n0y1/MuS8z+V6j3mv7Lf/WI+cv75DJfjvyw5/3xlg/zLkvM/m2r5lyXnfy7V8i9Lzv+NVMu/LDn/r6Za/mXJ+Z9PtfzLkvP/WqrlX5ac/4VUy78sOf+vp1r+Zcn5fyPV8i9Lzv/NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/m+lWv5lefj9/2lmOcaXmDFjpriZrv8yAQAAAAAAAAAAAADj5nE5cdf7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27i1Grru+A/iZvXnjQGIgpE5qwsYxwTib7PoSX2hdTLg23EpCKPSC7XrXZsE3vHYJNKodBUokjIoq2oaHtoBQm5cKq+KBVoDygFpVqkTaB/qCqFB5iKqAAlJVWgFbzZz//78zs7Mzu97x+sw5n48U/7wzZ+acOXNmdr/efOcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN7nzD7KdqWZbVarX8gk1Z9qL6vGFiU+OS117f7QMAAADW7ueNP1+4OV1waAU3alrmn+749lcXFhYWsvcN/+no5xYW0hUTWTa6Icsa10VXvv/+WvMywRPZeG2o6euhHqsf7nH9SI/rR3tcP9bj+g09rh/vcf2SHbDEDVkt3dm2xl835bs0uyUbbVy3rcOtnqhtGKrvu3TbrNa4zcLo8WwuO5nNZtMty+fL1hrLf/3O+rremsV1DTWta0v9CPnxY8fiNtTCPt7Wsq7F+4x++Pps4ic/fuzYX59//rZOs+duaLm/fDu3b61v5yfCJfm21rINaZ/E7Rxq2s4tHZ6T4ZbtrDVuV/97+3a+sMLtHF7czHXV/pyPZ0ONvz/b2E8jtazDftoSLvvpXVmWXVrc7PZllqwrG8o2tlwytPj8jOdHZP0+6ofSS7ORVR2nd67gOK3PmW2tx2n7ayI+/3eG240ssw3NT9MPHx9ret5/tnA1x2lUf9TLvVbaj8F+v1aKcgzG4+LZxoN+suMxuC08/sfuXv4Y7HjsdDgG0+NuOga39joGh8aGG9ucnoRa4zaLx+DOluWHG2uqNeZzd3c/BqfOnzo7Nf+xj987d+roidkTs6d379w5vXvv3v37908dnzs5O53/eZV7u/g2ZkPpNbA17Lv4Gnh127LNh+rCF8eWvP9e7etwvMvrcFPbsv1+HY60P7ja+rwglx7T+WvjPfWdPn55KFvmNdZ4fnas/XWYHnfT63Ck6XXY8XtKh9fhyApeh/Vlzu5Y2c8sI03/ddqG5b8XrO0Y3NR0DLb/PNJ+DPb755GiHIPj4bj47o7lvxdsCdv75ORqfx4ZXnIMpocb3nvql6Sf98f3N0an4/L2+hU3jmUX5mfP3ffo0fPnz+3MwlgXL2s6VtqP141NjylbcrwOrfp4PTR3x5O3d7h8U9hX4/fW/xhf9rmqL7Pnvu7PVeO7W+f92XLpriyMPlvv/dnpu3l9f45l2ee/9fhD33js829Ydn/W8+Ynptb+s3jKpU3vv6PLvP/G3P+LfH3prp4YHh3JX7/Dae+Mtrwftz5VI433rlpj3S9Mrez9eDT8t97vx7d0eT/e3LZsv9+PR9sfXHw/rvX61461aX8+x8NxcnK6+/txfZnNu1Z7TI50fT++K8xa2P+vCUkh5aKmY2e54zata2RkNDyukbiG1uN0d8vyoyGb1df19K6rO06335Xf13B6dIvW6zidaFu238dp+rev5Y7TWq9/fbs67c/neDgubtnd/TitL/PMnrW/d94Q/9r03jnW6xgcHR6rb/NoOggb7/fZwg3xGLwvO5adyU5mM41rxxrHU62xrsn7V3YMjoX/1vu9cnOXY3B727L9PgbT97Hljr3ayNIH3wftz+d4OC6eur/7MVhf5o37+vuz6/ZwSVqm6WfX9n9fW+7fvG5v203X6lgZCdv5rX3d/222vszJ/avNmd330z3hkhs77Kf21+9yr6mZbH320+awnc/vX34/1benvsznDqzweDqUZdnFjzzw7Nb6U5//fuXvLnznqy2/d+n0O52LH3ngRy8+/o+r2X4ABt8v8rEx/17X9Juplfz+HwAAABgIMfcPhZnI/wAAAFAaMffH/ys8kf8BAACgNGLuHwkzqUj+3/zG5+d+cTFLzfyFIF6fdsOD+XKx4zodvp5YWFS//IEvz/73P1xc2bqHsiz72YN/0HH5zQ/G7cpNhO288qbWy5f46r0rWveRRy6m9Tb3178Q7j8+npUeBp0quNNZln395s801jPx/suN+cyDRxrzoUtPPlFf5oUD+dfx9s+9LF/+L0L599Dxoy23fy7shx+EOf22zvsj3u4rl1+zZd97F9cXb1fbelPjYT/1gfx+4+fkfPaJfPm4n5fb/m98+umv1Jd/9FWdt//iUOftfzrc75fD/N9X5Ms3Pwf1r+PtPhm2P64v3u6+L32z4/Zf+VS+/Nk358sdCTOuf3v4etubn59r3l+P1o62PK7sLflycf3T3/njxvXx/uL9t2//+OHLLfuj/fh45t/y+5lqWz5eHtcT/X3b+uv303x8xvU//UdHWvZzr/Vfeei5V9Tvt33997Qtd/YjOxrrX7y/1k9s+stPfqbj+uL2HPrbsy2P59C7w+s4rP+pD4TjMVz/f1fy+2v/dIUj7259/4nLf2HTxZbHE731J/n6r7zuRGNuGL9h440vevFNl15Z33dZ9uyG/P56rf/EX51p2f4v3prvj3h97Oi3r385cf3nPjp5+sz8hbmZtFcfu7nx2Tlvz7cnbu/N4b21/evDZ85/cPbcxPTEdJZNlPcj9K7al8L8UT4udV96Yck76I5HwvN5+59/fePd//rpePm/vye//PLb8u9brw7LfTZcvik8f6tb/1JP3Xlr4/VdeyZs4cLSzwteiy3b/mv/ihYMj7/954J4vJ99+Qcb+6F+XeP7Rnxdr3H7vzeT38/Xwn5dCJ/MvPXWxfU1Lx8/G+Hyw/nrfc37L7zNxef1b8Lz/Y4f5Pcftys+3u+Fn2O+ubn1/S4eH1+7ONR+/41P8bgU3k+yS/n1cam4vy+/cGvHzYufQ5Jduq3x9Z+k+7ltVQ9zOfMfm586OXf6wqNT52fnz0/Nf+zjh0+duXD6/OHGZ3ke/lCv2y++P21svD/NzO7dkzXerc7k4xq73tt/9pFjM/um756ZPX70wvHzj5ydPXfi2Pz8sdmZ+buPHj8++9Fet5+bObhz14Hd+3ZNnpibObj/wIHdBybnTp+pb0a+UT3snf7w5Olzhxs3mT+458DO++/fMz156szM7MF909OTF3rdvvG9abJ+69+fPDd78uj5uVOzk/NzH589uPPA3r27en4a4Kmzx+cnps5dOD11YX723FT+WCbONy6uf+/rdXvKaf4/8p9n29XyD+LL3nXP3vT5rHVffnzZu8oXafsA0efDZ9H880vO7l/J1zH3j4aZVCT/AwAAQBXE3D8WZiL/AwAAQGnE3L8hzET+BwAAgNKIuX88zKQi+b90/f/NF1e0fv3/vvT/Fy7q/+v/D2L//+Gi9f/z9wv9//5Ya/9e/z/Q/9f/1//X/9f/pw+K1v+Puf+GLKtk/gcAAIAqiLl/Y5iJ/A8AAAClEXP/jWEm8j8AAACURsz9LwozqUj+1//X/3f+f/1//f/O69f/H0z6/93p//eg/z+VVav/f6mf26//r//PUkXr/8fc/+Iwk4rkfwAAAKiCmPtvCjOR/wEAAKA0Yu6/OcxE/gcAAIDSiLl/U5hJRfK//r/+v/6//r/+f+f16/8PJv3/7vT/e9D/d/5//X/9f/qqaP3/mPtfEmZSkfwPAAAAVRBz/0vDTOR/AAAAKJ6Rq7tZzP0vCzNZkv+vcgUAAADAdRdz/y1ZWxG8Ir//1//X/y9+/39Duk7/X/8/K2T/fzjT/y8O/f/u9P970P/X/9f/1/+nr4rW/2/k/mw8e3mYSUXyPwAAAFRBzP23hpnI/wAAAFAaMff/UpiJ/A8AAAClEXP/5jCTiuR//X/9/+L3/53/X/+/6P1/5/8vEv3/7vT/e9D/1//X/9f/p6+K1v+Puf+2MJOK5H8AAACogpj7bw8zkf8BAACgNGLu/+UwE/kfAAAASiPm/i1hJhXJ//r/Be//x+ao/r/+v/6//r/+/4ro/3en/9+D/r/+v/6//j99VbT+f8z9rwgzqUj+BwAAgCqIuf+OMBP5HwAAAEoj5v5XhpnI/wAAAFAaMfdPhJlUJP/r/xe8/5/34Mec/1//X/9f/1//f2X0/7vT/+9B/1//vy/9/4WLHfr/G3rdXv+fMipa/z/m/jvDTCqS/wEAAKAKYu7fGmYi/wMAAEBpxNx/V5iJ/A8AAAClEXP/tjCTiuR//f+B6P9n+v/6//r/+v/6/yuj/9+d/n8P+v/6/87/r/9PXxWt/x9z/6vCTCqS/wEAAKAKYu6/O8xE/gcAAIDSiLn/1WEm8j8AAACURsz928NMKpL/9f/1//X/9f/1/zuvX/9/MK21f1//UUD/X/9f/1//X/9f/5/+KFr/P+b+14SZVCT/AwAAQBXE3L8jzET+BwAAgNKIuf+eMBP5HwAAAEoj5v7JMJOK5H/9f/1//X/9f/3/zuvX/x9Mzv/fnf5/D/r/+v/6//r/9FXR+v8x998bZlKR/A8AAABVEHP/fWEm8j8AAACURsz9U2Em8j8AAACURsz902EmFcn/+v/6//r/+v+r6v+/cvF+9f9z+v/Fov/fnf5/DyXp/4+u6kEvut79+bW63tvfn/7/qP4/pVK0/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNy/O8xE/gcAAIDSiLl/T5hJRfK//r/+v/6//r/z/3dev/7/YNL/767//f/4EPX/i9T/v1rXuz8/6Nvv/P/6/yxVtP5/zP33h5lUJP8DAABAFcTcvzfMRP4HAACA0oi5f1+YifwPAAAApRFz//4wk4rkf/1//f/r2f/Pskv6//r/+v/6/32l/9+d8//3oP+v/6//r//PGj38h81fFa3/H3P/gTCTiuR/AAAAqIKY+18bZiL/AwAAQGnE3P8rYSbyPwAAAJRGzP2/GmZSkfyv/9/SPa8/XP1/5//X/9f/b9D/H0z6/93p//eg/6//r/+v/09fLdv/D9F7vfv/MfcfDDOpSP4HAACAKoi5/9fCTOR/AAAAKI2Y+18XZiL/AwAAQGnE3H8ozKQi+V//f/DO/x/rM/r/+v/6/+Xq/4/F+9X/X5M19O8bT63+f6D/r/+v/6//r/9PHxTt/P8x978+zKQi+R8AAACqIOb+B8JM5H8AAAAojZj73xBmIv8DAABAacTc/8Ywk4rkf/3/wev/O/+//r/+f65s/X/n/+8P5//vTv+/B/1//X/9f/1/+qpo/f+Y+98UZlKR/A8AAABVEHP/m8NM5H8AAAAojZj73xJmIv8DAABAacTc/9Ywk4rk/3Xv/zcVhfX/9f/1//X/9f/1//tt7f3/n4U9rf+v/6//r/+v/6//z1oVrf8fc/+vh5lUJP8DAABAFcTc/2CYifwPAAAApRFz/9vCTOR/AAAAKI2Y+98eZlKR/O/8//r/+v/6//r/ndev/z+YnP+/uwHr///8pnC5/n9O/7/Y27/a/v9I29fXpP///eX6/wsb2m+v/8+1ULT+f8z97wgzqUj+BwAAgCqIuf+dYSbyPwAAAJRGzP3vCjOR/wEAAKA0Yu7/jTCTiuR//f/6diy2l/X/y9r/H9L/1//X/68I/f/uBqz/Pwjn/x/W/1+k/+/8//r/tCta/z/m/neHmVQk/wMAAEAVxNz/UJiJ/A8AAAClEXP/w2Em8j8AAACURsz97wkzqUj+1/93/v9q9P+d/z/T/9f/rwj9/+70/3tw/n/9/6L1//9T/5/BVrT+f8z9j4SZVCT/AwAAQBXE3P/eMBP5HwAAAEoj5v7fDDOR/wEAAKA0Yu5/X5hJRfK//v+g9P8nBrT//7j+/zXs/99xU76c/r/+P4v0/7vT/+9B/1//v2j9f+f/Z8AVrf8fc//7w0xWnv/HV7wkAAAAcF3E3P9bYSYV+f0/AAAAVEHM/b8dZiL/AwAAQGnE3P87YSYVyf/6/4PS/3f+/0z/3/n/2x6P/r/+fyfr1/+P7zz6//r/+v+R/r/+v/4/7YrW/4+5/3fDTCqS/wEAAKAKYu7/QJiJ/A8AAAADodP/k90u5v7DYSbyPwAAAJRGzP1Hwkwqkv/1//X/9f8L2v//s63/8t1vv/PITv1//X/9/1VZ1/P/11/8zv+v/6//n+j/6//r/9OuaP3/mPuPhplUJP8DAABAFcTc/3thJvI/AAAAlEbM/cfCTOR/AAAAKI2Y+2fCTCqS//X/9f/1/wva/x/g8//H/aH/36pv/f/4pqv/31Hev09H0bXt/793sSeu/7/a/v9Yx0v1//X/B3n79f/1/1mqaP3/mPtnw0wqkv8BAACgCkLuHzqez8Ur5H8AAAAojZj7T4SZyP8AAABQGjH3fzDMpCL5X/9f/1//X//f+f87r79b/7824vz/RZX69z9tvFD0/9sUp//fmf6//v8gb7/+v/4/SxWt/x9z/1yYSUXyPwAAAFRBzP0fCjOR/wEAAKA0Yu7/cJiJ/A8AAAClEXP/yTCTiuR//X/9f/1//X/9/87rL+z5//X/u1pr/17/P9D/r3b//3/0//X/9f/pj6L1/2PuPxVm8v/s3UeTZfV5x/Hb9uDpKbzwzgtvXOWlXwILe22/AC+88cZVLi9wwDbODMY5YCEJZQmBckABBAIkgXIAJSSUQRLKOaCERqJGRffzPNPh9LndM7dvn/P/fz6LeUx7mntFTc3wm54vp5P9DwAAAD3I3X9l3GL/AwAAQDNy9/9Z3GL/AwAAQDNy9/953NLJ/tf/X0r/f6FS1v/vfv+T6P9/R/9/0Ovr//X/LdP/j9P/L6H/9/x//b/+n5WaWv+fu/8v4pZO9j8AAAD0IHf/X8Yt9j8AAAA0I3f/VXGL/Q8AAADNyN3/V3FLJ/t/T/+/seiz/8+M1/P/W+r/Pf//wNfX/+v/W7be/v/aJ3/m0//r//X/Qf9/qP7/9EGfr/+nRVPr/3P3/3Xc0sn+BwAAgB7k7v+buMX+BwAAgGbk7r86brH/AQAAoBm5+/82bulk/6/u+f9ntj4+0/6/6P/1/1sf0P/r//X/s+X5/+N66v+veujyKx+78zfuOsrr6//1/57/f7T+f+d/zED/z5Cp9f+5+/8ubulk/wMAAEAPcvf/fdxi/wMAAEAzcvf/Q9xi/wMAAEAzcvf/Y9zSyf5fXf8/6+f/F/2//n/rA/p//b/+f7b0/+N66v8v5vX1//p//b/n/7NaU+v/c/f/U9zSyf4HAACAHuTu/+e4xf4HAACAZuTuvyZusf8BAACgGbn7z8Ytnex//f/x9/9P6P/1/3H1//p//f/x0/+P0/8vof/X/+v/9f+s1NT6/9z918Ytnex/AAAA6EHu/n+JW+x/AAAAaEbu/uviFvsfAAAAmpG7/1/jlk72v/7f8//1//p//f/w6+v/50n/P07/v4T+/1L7+cv0//p//T87HbH/Pzfy0/ZK+v/c/f8Wt3Sy/wEAAKAHufv/PW6x/wEAAKAZufv/I26x/wEAAKAZufv/M27pZP/r//X/+n/9/0X3//t/6G3R/w/T/6+H/n/cZPr/jVODH9b/z77/9/x//b/+n12m9vz/3P3/Fbd0sv8BAACgB7n7/ztuGdn/R/7NfAAAAOBE5e7/n7jF1/8BAABg9rI6y93/v3FLJ/tf/6//1//r/z3/f/j1x/r/u3a8P/3/tOj/x02m/z+A/l//P+f3r//X/7Pf1Pr/3P3/F7d0sv8BAACgB7n7r49b7H8AAABoRu7+/49b7H8AAABoRu7+p8Qtnez/4f7/wv9f/384+v/d71//P/zjY1X9f/4d9f+j/f/vev5/n/T/49bf/5/W/+/+++v/j9FJv//G+/8zyz5f/8+QqfX/uftviFs62f8AAADQg9z9T41b7H8AAABoRu7+p8Ut9j8AAAA0I3f/0+OWTva/5//r//X/8+v/Pf9/20k+/3+x9v7/lP7/kPT/4zz/fwn9v/5f/+/5/6zU1Pr/3P03xi2d7H8AAADowY2PL7Z2/zMWC/sfAAAA5mjnnx3Y+wdKQ+7+Z8Yt9j8AAAA0I3f/s+KWTva//l//r//X/+v/h19/Wv2/5/8flv5/3Fz6/zP6/8G3N9P+/1Rj/f9NB33+FPr/a/T/TMyu/v/eCx8/qf4/d/+z45ZO9j8AAAD0IHf/c+IW+x8AAACakbv/uXGL/Q8AAADNyN3/vLilk/1/7P3/mYNfW/+v/9f/6//1//r/VdP/j5tL/+/5/031/57/7/n/+v+OXej/d/98eFL9f+7+58ctnex/AAAA6EHu/hfELfY/AAAANCN3/01xi/0PAAAAzcjd/8K4pZP97/n/+n/9v/5f/z/8+vr/edL/j9P/L6H/1//r//X/rNSu5//vcFL9f+7+m+OWTvY/AAAA9CB3/y1xi/0PAAAAzcjd/6K4xf4HAACAZuTuf3Hc0sn+1/8fb/+fH9f/6/8X+n/9v/5/Lbrt/zeGfiXa74D+/4E/Ofv7uz+i/9f/6//1//p/VmAS/f/5C/92mbv/JXFLJ/sfAAAAepC7/6Vxi/0PAAAAzcjd/7K4xf4HAACAZuTuf3nccsT9/2srfVfro//3/H/9v/5f/z/8+vr/eeq2/z8kz/9fQv+v/9f/6/9ZqUn0/zv+Onf/K+IWX/8HAACAZuTuf2XcYv8DAABAM3L3vypusf8BAACgGbn7Xx23dLL/9f/6f/2//l//P/z6R+//t38kbi6G6f/XQ/8/Tv+/hP5f/6//1/+zUlPr/3P33xq3dLL/AQAAoAe5+18Tt9j/AAAA0Izc/a+NW+x/AAAAaEbu/tfFLZ3sf/2//l//r//X/w+/vuf/z5P+f5z+f7FY3DbyBob6//On9f/6f/2//p+LNLX+P3f/6+OWTvY/AAAA9CB3/21xi/0PAAAAzcjdf3vcYv8DAABAM3L3vyFu6WT/6//1//p//b/+f/j19f/zpP8fp/9fwvP/9f/6f/0/KzW1/j93/x1xSyf7HwAAAHqQu//OuMX+BwAAgGbk7n9j3GL/AwAAQDNy998Vt3Sy//X/+n/9v/7/WPr/s/r/vfT/63F8/f9C/6//1/8vof/X/+v/2Wtd/f+5+Pl+Wf+fu//uuKWT/Q8AAAA9yN1/T9xi/wMAAEAzcve/KW6x/wEAAKAZufvfHLd0sv/1//p//b/+3/P/h19f/z9Pnv8/Tv+/hP5f/6//1/+zUuvq/w/q/ff+de7+t8Qtnex/AAAA6EHu/nvjFvsfAAAAmpG7/764xf4HAACAZuTuf2vc0sn+1//r/3f3/4uF/l//r//ftob+f3Oh/185/f84/f8S+v82+/9fWjTU/5858PP1/0zR1Pr/3P1vi1s62f8AAADQg9z9b49b7H8AAABoRu7+d8Qt9j8AAAA0I3f/O+OWlvb/Ewenb/Pv/0/v+UT9/2KxePhqz//X/4+8vv5/Mv1//VPV/6+O/n+c/n8J/X+b/b/n/+v/OTFT6/9z978rbmlp/wMAAEDncve/O26x/wEAAKAZufvfE7fY/wAAANCM3P3vjVs62f/z7//3fqL+f3FJz//X/299QP+v/9f/z9al9vc3b8avafp//b/+f7Cf3zjg33sW+n/9v/6fAVPr/3P3vy9u6WT/AwAAQA9y998ft9j/AAAA0Izc/Q/ELfY/AAAANCN3//vjlk72v/5f/6//n2f/v6n/1//r/wdN5fn/V1zxew/q//X/Lfb/Y/T/+n/9P3tNrf/P3f+BuKWT/Q8AAAA9yN3/wbjF/gcAAIBm5O7/UNxi/wMAAEAzcvd/OG7pZP/v7/8vW2wXqtuG+v9o1PT/O+j/d79//f/wjw/P/9f/6/+P31T6/2k8/3//r076/yX0//r/dfX/v7n/8/X/tGhq/X/u/gfjlk72PwAAAPQgd/9H4hb7HwAAAJqRu/+jcYv9DwAAAM3I3f9Q3NLJ/vf8f/2//l//r/8ffn39/zzp/8fp/5fQ/196P58/q+r/5/v8/1/W/7M6U+v/c/d/LG7ZGn6/9asX+T8TAAAAmJDc/R+PWzr5+j8AAAD0IHf/J+IW+x8AAACakbv/k3FLJ/tf/6//1//r//X/w6+v/58n/f84/f8S/fT/m0MfPOl+/lKd9Ptvpv/3/H9WaGr9f+7+T8Utnex/AAAAaNvjW9/m7v903GL/AwAAQDNy938mbrH/AQAAoBm5+x+OWzrZ//p//X/7/f8f6f/3vL7+f+39/3V36//XRv+fv6IP0/8v0U//P+ik+/m5v3/9v/6f/abW/+fufyRu6WT/AwAAQA9y9382brH/AQAAoBm5+z8Xt9j/AAAA0Izc/Z+PWzrZ//r/vvr/jUWP/b/n/+v/T7z/36L/X4/59P+3nBr6qOf/6//1//N9//p//T/7Ta3/z93/6MapLvc/AAAAzNUf/PafPnLY7/vo1rebiy/ELfY/AAAANCN3/xfjFvsfAAAAmpG7/0txSyf7X//fV//f5/P/9f/6f/1/T+bT/w/T/+v/9f/zff/6f/0/+02t/8/d/+W4ZcfwG/wP9AAAAAAn51eO9t1z938lbunk6/8AAADQg9z9X41b9u3/84f8U+0AAADA1OTu/1rc0snX//X/E+//F8fU/8f30/9v0//r/4deX/8/T/r/cZfY/5/f0P/r/0fo//X/+n/2mlr/n7v/njsWXe5/AAAAaNSu31H4+ta3m4tvxC32PwAAADQjd/834xb7HwAAAJqRu/9bcUsn+1//P/H+/6Ke/3+m/i/P/++8/79+c/D19f/6/5bp/8d5/v8S+n/9v/5f/89KHaH/3xqkx93/5+7/dtzSyf4HAACAHuTu/07cYv8DAABAM3L3fzdusf8BAACgGbn7vxe3dLL/9f8n0P/fcHqxONb+/xDP/9f/99H/H/D67fT/v3752fv/8I9vv1X/zwXr7P/zx4L+X/+v/9+m/9f/6//Za2rP/8/d//24pZP9DwAAAD3I3f9Y3GL/AwAAQDNy9/8gbnly/993Uu8KAAAAWKXc/T+MWzr5+r/+v8Xn/8+z/89/1ifQ/5+dX/+fTXHv/b/n/+v/9/P8/3H6/yX0//p//b/+n5WaWv+fu/9HcUsn+x8AAAB6kLv/x3FL7v+NI//WPQAAADAxuft/Erf4+j8AAAA0I3f/43FLJ/t/jv3/uT3vcfcn6v8XM+3/k+f/X/g8z//fpv/X/x+F/n+c/n8J/b/+X/+v/2elptb/5+7/adzSyf4HAACAHuTuPxe32P8AAADQjNz9P4tb7H8AAABoRu7+n8ctnez/Ofb/nv+v/9f/6/8X+n/9/wH0/+P0/0vo//X/+n/9Pys1tf4/d/8vAgAA///bQndU") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1842428, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4.764560985s ago: executing program 5 (id=1440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b, 0x0, 0x400000000000}]}) 4.40704401s ago: executing program 6 (id=1444): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}, 0x14) 4.323596854s ago: executing program 5 (id=1446): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = fanotify_init(0x18, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.48766709s ago: executing program 2 (id=1458): r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r1, 0x5) sendfile(r0, r1, 0x0, 0xffff) 3.386550494s ago: executing program 2 (id=1459): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x5, 0x2, "ed46"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000b40)={0x20, 0x9, 0xf, "78a91ad4e5b6c1c4da4270ef951660"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0x2}, 0x0, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0xf27}, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) 3.347096346s ago: executing program 5 (id=1460): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r0) 3.210598702s ago: executing program 5 (id=1461): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.006935014s ago: executing program 0 (id=1465): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000a00)="05030500d3fc0300000047887f0509101128fdf2b990788345e5e66a", 0x1c, 0x24004054, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @random="11ed0124352a"}, 0x14) 1.901689908s ago: executing program 0 (id=1466): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000840)={0x3, 0x3, 0x9, 0x6, 0xf1e, 0x6, "991deb753abfea8f408844d477546aef", 0x2, 0x36, 0xe2, 0x7, 0xc, 0xad, 0xee}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", '\x00', ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "0000effffffff700c00500", "000000000000000400"]}) 1.787106863s ago: executing program 0 (id=1467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r0, r1) 1.717082746s ago: executing program 0 (id=1468): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x64000512) 1.649983959s ago: executing program 0 (id=1469): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r0], 0x44}}, 0x40000) 1.568568822s ago: executing program 0 (id=1471): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.418456739s ago: executing program 3 (id=1472): setresuid(0x0, 0xee01, 0x0) r0 = io_uring_setup(0x4af, &(0x7f0000000000)={0x0, 0x512a, 0x800, 0x1, 0x237}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/117, 0x75}], 0x1) 1.333392043s ago: executing program 2 (id=1473): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="011b27"], 0x1c}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) 1.315118284s ago: executing program 3 (id=1474): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, 0x8, 0x3) 1.252077987s ago: executing program 5 (id=1475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x34, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_DPS={0xfea0, 0x3, {0xa, 0x5, 0x0, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xb, 0x0, 0x7}}]}}]}, 0x64}}, 0x24008004) 1.194969039s ago: executing program 2 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000fc7f96e3850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 1.16570543s ago: executing program 3 (id=1477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 1.039184405s ago: executing program 2 (id=1478): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x1b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 1.021672096s ago: executing program 5 (id=1479): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x6d, 0x5, &(0x7f0000000240)={0x5, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) 944.84454ms ago: executing program 3 (id=1480): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 844.132204ms ago: executing program 3 (id=1481): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) 744.769518ms ago: executing program 3 (id=1482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 2 (id=1483): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000740)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d6b6f69382d722c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d6d6163726f6d616e69616e2c6e6f6e756d7461696c3d302c696f636861727365743d63703836392c73686f72746e616d653d6d697865642c726f6469722c757466383d302c696f636861727365743d6370313235312c726f6469722c636f6465706167653d3835372c756e695f786c6174653d312c757466383d302c6e6f6e756d7461696c3d302c0060d0b8e433d64fabbd5fbb138bd4a49132cc22766c2f21b435173e87f2e7c003a204c2f7b2f40b6b7407"], 0x27, 0x358, &(0x7f0000000c40)="$eJzs3T1oJGUYAOB3bza/ciaFEBSE1U6Q4xKx0CrhOOEwhZ4s/jUuJtEzsx4ksJArsreNYqnYCFrZWWh5tViI2FnYeoKcJzZed3CHI7uzP7M/kSgm8bjnKcLLO9+73zszX9jJ35c3VmN7Yyq2bt26EbOzpSivnluN26VYjFORRO5qjGiNJgCAe8ntLIs/slwhvTR59EfzvWj6GHoDAI5G5/3/rdODxMxJdgMAHIcDvv4f9cLE7OUjawsAOEJj7/+PDx0e+TZ/uf87AQDAveulV197fm094mKlMhtRf79RbVTj2cHxtUdvXoo0NuNsLMTdiPxBIX9aaH987sL6+bOVtl8Xo9quaFQj6s1GNX9SWEuiXT8Ty7EQi936rF+ftOuXO/WViLja7Mwf9VKjOhXz7fqtuPTTfCSxEgvx0Fh9xIX18yuV7gtU6736ZkQrZnsn0e7/TCzED2/G5UhjI9q1g/73lyuVc9l6ob7W+UHIxkncEAAAAAAAAAAAAAAAAAAAAAAA7gtnKn2L/f1vsnqz8d7F0QGLxf11GtX88NpWZ3+fVr4/UDbT253ng2R0f6Dh/Xka1XKcOtEzBwAAAAAAAAAAAAAAAAAAgP+PUkxHLU03d3b3rmwXg2Yh8+53X34zF6Nj3kkGmSjnLzc0ppuLQlUS/fKsX54lQ2O6QRIxGPzFtX7HeSaZcC5jZzETEcOZUrenWpqefuyXT8cm3buy/ecgk8TYZRkOSt2ZC4fqD+apg6p6zU58wZW/masdXM+y7KB+9j8Zr4pSRHnsxv0Xwbc33n74qd2lpzuZr7ubPjzx5MLL1z/+/LftWhrdS5Om0zu7d7N/N1eWDK2fUvc6l2LCYpsYtAaZ1s7uXi358fdXHvnw+6Exc2OLpDd7IVPutzE7fLtrafrV6OzTeVA66C6PBFMTFv/k4PU7/dX7zy/m0mertWv7P988bFXhE8tGHQAAAAAAAAAAAAAAAAAAcCwKfyse8cBhq5558Wi7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjNfj//4WgNZY5THCnGeOHZjZ3dg+cfO5YTxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYXwEAAP//IZFqGg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020) kernel console output (not intermixed with test programs): 152.685978][ T6353] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 152.701617][ T6332] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.741159][ T6332] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 152.780444][ T6332] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 152.801318][ T6332] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.878568][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 153.171641][ T6351] loop3: detected capacity change from 0 to 32768 [ 153.912882][ T6366] loop5: detected capacity change from 0 to 32768 [ 154.023869][ T951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.213728][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 154.220692][ T951] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 154.239037][ T5394] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.239085][ T951] usb 3-1: config 0 has no interface number 0 [ 154.280244][ T951] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 154.290851][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.299025][ T951] usb 3-1: Product: syz [ 154.303297][ T951] usb 3-1: Manufacturer: syz [ 154.310810][ T951] usb 3-1: SerialNumber: syz [ 154.338230][ T951] usb 3-1: config 0 descriptor?? [ 154.361250][ T951] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 154.446332][ T5394] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 154.467311][ T5394] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.496086][ T5394] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.532680][ T5394] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.541740][ T5394] usb 1-1: Product: syz [ 154.546213][ T5394] usb 1-1: Manufacturer: syz [ 154.550839][ T5394] usb 1-1: SerialNumber: syz [ 154.565810][ T951] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 154.591519][ T5394] usb 1-1: config 0 descriptor?? [ 154.598063][ T951] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 154.621291][ T6387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 154.650290][ T5394] usb 1-1: selecting invalid altsetting 0 [ 155.087538][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 155.097311][ T951] usb 3-1: USB disconnect, device number 8 [ 155.114961][ T951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 155.139366][ T951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 155.197917][ T951] quatech2 3-1:0.51: device disconnected [ 155.334758][ T6420] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 155.607911][ T6427] loop4: detected capacity change from 0 to 8192 [ 155.628771][ T6427] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.642945][ T6427] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 155.656107][ T6427] REISERFS (device loop4): using ordered data mode [ 155.663919][ T6427] reiserfs: using flush barriers [ 155.677213][ T6427] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.768974][ T6433] loop3: detected capacity change from 0 to 1024 [ 155.790148][ T6427] REISERFS (device loop4): checking transaction log (loop4) [ 155.859687][ T6433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.935674][ T6433] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.018460][ T26] audit: type=1800 audit(1778619886.498:7): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.762" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 156.054733][ T6427] REISERFS (device loop4): Using tea hash to sort names [ 156.063805][ T5394] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.069618][ T6433] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.762: lblock 0 mapped to illegal pblock 0 (length 1) [ 156.077243][ T6427] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 156.153879][ T6433] EXT4-fs (loop3): Remounting filesystem read-only [ 156.161724][ T6433] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.762: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 156.223272][ T6429] loop5: detected capacity change from 0 to 40427 [ 156.254157][ T5394] usb 3-1: Using ep0 maxpacket: 8 [ 156.262931][ T5394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.273110][ T6433] EXT4-fs (loop3): Remounting filesystem read-only [ 156.355797][ T5394] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 156.377449][ T5394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.430987][ T5394] usb 3-1: config 0 descriptor?? [ 156.457057][ T5394] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 156.490950][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 156.619539][ T5398] usb 1-1: USB disconnect, device number 6 [ 156.900188][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.950037][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.959150][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.961371][ T6455] loop4: detected capacity change from 0 to 128 [ 156.968173][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.968217][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.968241][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.968263][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.968286][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 156.968307][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 157.028649][ T6453] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0012 with DS=0x6 [ 157.266954][ T5394] gspca_vc032x: reg_w err -71 [ 157.271739][ T5394] vc032x: probe of 3-1:0.0 failed with error -71 [ 157.298301][ T5394] usb 3-1: USB disconnect, device number 9 [ 157.999624][ T6467] loop3: detected capacity change from 0 to 8192 [ 158.046964][ T6467] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.060675][ T6467] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 158.070549][ T6467] REISERFS (device loop3): using ordered data mode [ 158.077741][ T6467] reiserfs: using flush barriers [ 158.085570][ T6467] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.105825][ T6467] REISERFS (device loop3): checking transaction log (loop3) [ 158.169114][ T6467] REISERFS (device loop3): Using tea hash to sort names [ 158.176603][ T6467] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.192017][ T6467] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 158.231100][ T6462] loop5: detected capacity change from 0 to 40427 [ 158.272603][ T6462] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 158.330116][ T6462] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 158.422965][ T6462] F2FS-fs (loop5): invalid crc value [ 158.472055][ T6462] F2FS-fs (loop5): Found nat_bits in checkpoint [ 158.570250][ T6483] loop3: detected capacity change from 0 to 256 [ 158.616560][ T6462] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 158.630599][ T6483] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 158.648960][ T6462] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 158.658244][ T6488] loop4: detected capacity change from 0 to 256 [ 158.702395][ T6488] exfat: Deprecated parameter 'utf8' [ 158.750320][ T6488] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 159.234326][ T6499] loop3: detected capacity change from 0 to 1024 [ 159.251892][ T6499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.276349][ T6499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.339497][ T6499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 159.366909][ T6499] System zones: 0-1, 3-36 [ 159.406799][ T6499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.454916][ T6505] loop4: detected capacity change from 0 to 8192 [ 159.518652][ T6505] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.636273][ T6505] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 159.705793][ T6505] REISERFS (device loop4): using ordered data mode [ 159.712433][ T6505] reiserfs: using flush barriers [ 159.728548][ T6505] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.825106][ T6505] REISERFS (device loop4): checking transaction log (loop4) [ 159.871852][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 160.060552][ T6508] loop5: detected capacity change from 0 to 32768 [ 160.148599][ T6505] REISERFS (device loop4): Using tea hash to sort names [ 160.191861][ T6505] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 160.235792][ T6505] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 160.411068][ T6523] netlink: 308 bytes leftover after parsing attributes in process `syz.0.794'. [ 160.530762][ T6494] loop2: detected capacity change from 0 to 40427 [ 160.602543][ T6494] F2FS-fs (loop2): invalid crc value [ 160.669481][ T6494] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.911697][ T6494] F2FS-fs (loop2): Start checkpoint disabled! [ 160.975778][ T6494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 161.669973][ T6519] loop3: detected capacity change from 0 to 32768 [ 161.749273][ T6549] loop0: detected capacity change from 0 to 4096 [ 161.757652][ T6519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 161.777888][ T6533] loop5: detected capacity change from 0 to 32768 [ 161.784482][ T6519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 161.821667][ T6551] loop4: detected capacity change from 0 to 1024 [ 161.843993][ T6519] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 161.888404][ T6549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.905105][ T5038] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 161.912509][ T5038] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 161.989495][ T6533] XFS (loop5): Mounting V5 Filesystem [ 162.010367][ T5038] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms [ 162.030373][ T5038] gfs2: fsid=syz:syz.0: jid=0: Done [ 162.031944][ T5720] kworker/u4:8: attempt to access beyond end of device [ 162.031944][ T5720] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 162.036739][ T6519] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 162.138843][ T6533] XFS (loop5): Ending clean mount [ 162.176441][ T6519] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 162.231140][ T4320] hfsplus: b-tree write err: -5, ino 25 [ 162.236103][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 162.242689][ T4320] hfsplus: b-tree write err: -5, ino 4 [ 162.244126][ T6519] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 162.244126][ T6519] inode = 12 2341 [ 162.244126][ T6519] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 162.278924][ T4320] hfsplus: b-tree write err: -5, ino 2 [ 162.383968][ T4320] hfsplus: b-tree write err: -5, ino 17 [ 162.450970][ T6519] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 162.518913][ T5682] XFS (loop5): Unmounting Filesystem [ 162.535726][ T6519] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6519 [syz.3.792] iterate_dir+0x218/0x560 [ 162.563107][ T6568] loop4: detected capacity change from 0 to 128 [ 162.588668][ T6519] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 162.602522][ T6519] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 162.635781][ T6568] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 162.647101][ T6519] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 162.657459][ T6519] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 162.714863][ T6568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.749644][ T6519] gfs2: fsid=syz:syz.0: File system withdrawn [ 162.792303][ T6519] CPU: 0 PID: 6519 Comm: syz.3.792 Not tainted syzkaller #0 [ 162.799644][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.809732][ T6519] Call Trace: [ 162.813040][ T6519] [ 162.815989][ T6519] dump_stack_lvl+0x188/0x24e [ 162.820706][ T6519] ? kobject_uevent_env+0x35f/0x8a0 [ 162.825934][ T6519] ? show_regs_print_info+0x12/0x12 [ 162.831166][ T6519] ? load_image+0x400/0x400 [ 162.835682][ T6519] ? kobject_uevent_env+0x35f/0x8a0 [ 162.840924][ T6519] gfs2_withdraw+0xde6/0x15d0 [ 162.845625][ T6519] ? gfs2_lm+0x240/0x240 [ 162.849869][ T6519] ? load_image+0x400/0x400 [ 162.854377][ T6519] ? gfs2_consist_inode_i+0xf1/0x110 [ 162.859664][ T6519] gfs2_dirent_scan+0x525/0x650 [ 162.864527][ T6519] ? gfs2_dirent_scan+0x650/0x650 [ 162.869554][ T6519] gfs2_dir_read+0x7d1/0x1800 [ 162.874237][ T6519] ? inode_dio_wait+0x25a/0x2d0 [ 162.879091][ T6519] ? inode_owner_or_capable+0x200/0x200 [ 162.884642][ T6519] ? __might_sleep+0xd0/0xd0 [ 162.889237][ T6519] ? gfs2_dir_hash_inval+0x70/0x70 [ 162.894352][ T6519] ? gfs2_glock_nq+0xcf0/0x14e0 [ 162.899209][ T6519] ? gfs2_glock_wait+0x20b/0x2a0 [ 162.904154][ T6519] gfs2_readdir+0x169/0x1d0 [ 162.908667][ T6519] ? gfs2_fallocate+0x4b0/0x4b0 [ 162.913514][ T6519] ? iterate_dir+0x218/0x560 [ 162.918106][ T6519] ? iterate_dir+0x10d/0x560 [ 162.922783][ T6519] ? down_read_killable+0x1cc/0x340 [ 162.927988][ T6519] ? fsnotify_perm+0x248/0x550 [ 162.932763][ T6519] iterate_dir+0x218/0x560 [ 162.937184][ T6519] ? gfs2_fallocate+0x4b0/0x4b0 [ 162.942045][ T6519] __se_sys_getdents64+0xf2/0x270 [ 162.947079][ T6519] ? __x64_sys_getdents64+0x80/0x80 [ 162.952397][ T6519] ? filldir+0x700/0x700 [ 162.956739][ T6519] ? lockdep_hardirqs_on+0x94/0x140 [ 162.961943][ T6519] do_syscall_64+0x4c/0xa0 [ 162.966365][ T6519] ? clear_bhb_loop+0x60/0xb0 [ 162.971041][ T6519] ? clear_bhb_loop+0x60/0xb0 [ 162.975730][ T6519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.981805][ T6519] RIP: 0033:0x7f8b7f19ce59 [ 162.986228][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.005924][ T6519] RSP: 002b:00007f8b80078028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 163.014425][ T6519] RAX: ffffffffffffffda RBX: 00007f8b7f415fa0 RCX: 00007f8b7f19ce59 [ 163.022829][ T6519] RDX: 0000000000000029 RSI: 9999999999999999 RDI: 0000000000000004 [ 163.030808][ T6519] RBP: 00007f8b7f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 163.038777][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.046766][ T6519] R13: 00007f8b7f416038 R14: 00007f8b7f415fa0 R15: 00007fffa8574348 [ 163.054756][ T6519] [ 163.280833][ T6577] loop2: detected capacity change from 0 to 4096 [ 163.684422][ T4275] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 163.694314][ T6585] netlink: 44 bytes leftover after parsing attributes in process `syz.5.806'. [ 163.710949][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 164.291630][ T6612] program syz.0.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.723793][ T951] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 164.916735][ T951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.938875][ T951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.995136][ T951] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.025656][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.044730][ T6645] loop4: detected capacity change from 0 to 64 [ 165.054435][ T951] usb 6-1: Product: syz [ 165.064869][ T951] usb 6-1: Manufacturer: syz [ 165.075173][ T951] usb 6-1: SerialNumber: syz [ 165.518144][ T951] usb 6-1: 0:2 : does not exist [ 165.550643][ T6662] Cannot find add_set index 4 as target [ 165.552244][ T6656] loop3: detected capacity change from 0 to 4096 [ 165.952506][ T951] usb 6-1: USB disconnect, device number 3 [ 166.492809][ T6690] loop2: detected capacity change from 0 to 256 [ 166.609897][ T6688] loop0: detected capacity change from 0 to 4096 [ 166.636480][ T6690] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 166.680757][ T6688] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 166.749366][ T6690] exFAT-fs (loop2): error, broken FAT chain. [ 166.812971][ T6690] exFAT-fs (loop2): Filesystem has been set read-only [ 166.880935][ T6690] exFAT-fs (loop2): error, failed to bmap (inode : ffff88807092b560 iblock : 0, err : -5) [ 166.893226][ T6698] ntfs3: loop0: failed to convert "076c" to cp932 [ 167.331811][ T6717] loop4: detected capacity change from 0 to 256 [ 167.585728][ T6724] netlink: 120 bytes leftover after parsing attributes in process `syz.3.858'. [ 168.268835][ T6754] loop0: detected capacity change from 0 to 128 [ 168.270592][ T6753] netlink: 7 bytes leftover after parsing attributes in process `syz.3.868'. [ 168.305019][ T6754] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 168.337913][ T6754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.527577][ T6760] netlink: 'syz.5.870': attribute type 2 has an invalid length. [ 168.780862][ T6769] loop4: detected capacity change from 0 to 64 [ 168.818978][ T6769] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 169.059311][ T6776] program syz.2.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.161317][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 169.212093][ T6781] device netdevsim0 entered promiscuous mode [ 169.265683][ T6781] device netdevsim0 left promiscuous mode [ 169.301844][ T6786] loop4: detected capacity change from 0 to 256 [ 169.433056][ T26] audit: type=1800 audit(1778619899.908:8): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.879" name="file1" dev="loop4" ino=1048647 res=0 errno=0 [ 169.686739][ T6799] device dummy0 entered promiscuous mode [ 169.723343][ T6799] device dummy0 left promiscuous mode [ 169.793236][ T6804] loop4: detected capacity change from 0 to 512 [ 169.893772][ T5036] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.086551][ T5036] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.113767][ T5036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.158116][ T5036] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.194048][ T5036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.226735][ T5036] usb 4-1: SerialNumber: syz [ 170.462210][ T5036] usb 4-1: 0:2 : does not exist [ 170.508812][ T5036] usb 4-1: USB disconnect, device number 6 [ 170.679100][ T6826] loop4: detected capacity change from 0 to 64 [ 170.775087][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.877371][ T4374] kworker/u4:7: attempt to access beyond end of device [ 170.877371][ T4374] loop4: rw=1, sector=553, nr_sectors = 56 limit=64 [ 170.959964][ T11] kworker/u4:1: attempt to access beyond end of device [ 170.959964][ T11] loop4: rw=2049, sector=609, nr_sectors = 1064 limit=64 [ 171.506605][ T6842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 171.513798][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.559529][ T6846] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 171.566098][ T6846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.625906][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 171.679709][ T6842] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(5) [ 171.686281][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.694291][ T6846] vhci_hcd vhci_hcd.0: Device attached [ 171.761385][ T6850] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 171.767951][ T6850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.794094][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 171.883923][ T5036] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 171.923938][ T6850] vhci_hcd vhci_hcd.0: Device attached [ 171.959761][ T6856] vhci_hcd: connection closed [ 171.962366][ T6852] vhci_hcd: connection closed [ 171.967464][ T6847] vhci_hcd: connection closed [ 171.972354][ T6843] vhci_hcd: connection reset by peer [ 171.992851][ T4320] vhci_hcd: stop threads [ 171.994384][ T4320] vhci_hcd: release socket [ 171.995656][ T4320] vhci_hcd: disconnect device [ 171.996012][ T4320] vhci_hcd: stop threads [ 171.996022][ T4320] vhci_hcd: release socket [ 171.996632][ T4320] vhci_hcd: disconnect device [ 171.998514][ T4320] vhci_hcd: stop threads [ 171.998525][ T4320] vhci_hcd: release socket [ 171.998581][ T4320] vhci_hcd: disconnect device [ 171.999632][ T4320] vhci_hcd: stop threads [ 171.999642][ T4320] vhci_hcd: release socket [ 171.999696][ T4320] vhci_hcd: disconnect device [ 172.042564][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.042564][ T4374] loop4: rw=1, sector=1673, nr_sectors = 2496 limit=64 [ 172.052667][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.052667][ T4374] loop4: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 172.052953][ T4374] Buffer I/O error on dev loop4, logical block 4169, lost async page write [ 172.053042][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.053042][ T4374] loop4: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 172.053064][ T4374] Buffer I/O error on dev loop4, logical block 4170, lost async page write [ 172.053092][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.053092][ T4374] loop4: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 172.053113][ T4374] Buffer I/O error on dev loop4, logical block 4172, lost async page write [ 172.053141][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.053141][ T4374] loop4: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 172.053161][ T4374] Buffer I/O error on dev loop4, logical block 4173, lost async page write [ 172.053189][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.053189][ T4374] loop4: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 172.057250][ T4374] Buffer I/O error on dev loop4, logical block 4174, lost async page write [ 172.057296][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.057296][ T4374] loop4: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 172.057318][ T4374] Buffer I/O error on dev loop4, logical block 4175, lost async page write [ 172.057412][ T4374] kworker/u4:7: attempt to access beyond end of device [ 172.057412][ T4374] loop4: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 172.057434][ T4374] Buffer I/O error on dev loop4, logical block 4176, lost async page write [ 172.057465][ T4374] Buffer I/O error on dev loop4, logical block 4177, lost async page write [ 172.057633][ T4374] Buffer I/O error on dev loop4, logical block 4196, lost async page write [ 172.057665][ T4374] Buffer I/O error on dev loop4, logical block 4197, lost async page write [ 172.379492][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 172.873802][ T5398] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.959598][ T6874] loop2: detected capacity change from 0 to 32768 [ 173.040427][ T26] audit: type=1800 audit(1778619903.518:9): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.905" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 173.063834][ T5398] usb 1-1: Using ep0 maxpacket: 16 [ 173.073633][ T5398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.126209][ T6893] loop3: detected capacity change from 0 to 4096 [ 173.133290][ T5398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.148024][ T6898] loop5: detected capacity change from 0 to 256 [ 173.167302][ T6893] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.199077][ T5398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.218486][ T6898] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 173.261614][ T5398] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.281161][ T6898] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 173.341052][ T5398] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.447199][ T5398] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.494651][ T5398] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.543773][ T5398] usb 1-1: Manufacturer: syz [ 173.565993][ T5398] usb 1-1: config 0 descriptor?? [ 173.627620][ T6907] loop4: detected capacity change from 0 to 512 [ 173.698988][ T6907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.824076][ T6907] EXT4-fs (loop4): 1 truncate cleaned up [ 173.837832][ T6893] EXT4-fs (loop3): Test dummy encryption mode enabled [ 173.880389][ T6907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.906383][ T6893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.089604][ T6921] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.912: corrupted xattr block 33 [ 174.178964][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 174.193771][ T5398] rc_core: IR keymap rc-hauppauge not found [ 174.200389][ T5398] Registered IR keymap rc-empty [ 174.209492][ T6921] EXT4-fs (loop4): Remounting filesystem read-only [ 174.220450][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.274112][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.315896][ T5398] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 174.377479][ T5398] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 174.396465][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 174.541558][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.590076][ T6940] loop4: detected capacity change from 0 to 16 [ 174.603991][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.644269][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.660758][ T6940] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.738513][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.740190][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 174.758329][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.766852][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.774105][ T6945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.782235][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.791370][ T6945] device bridge_slave_0 left promiscuous mode [ 174.805027][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.816293][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.873788][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.901426][ T6942] loop5: detected capacity change from 0 to 4096 [ 174.913833][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.963804][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.003933][ T5398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.065946][ T5398] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 175.084815][ T5398] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.161953][ T5398] usb 1-1: USB disconnect, device number 7 [ 175.226801][ T6959] loop3: detected capacity change from 0 to 256 [ 175.245411][ T5682] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 175.262196][ T5682] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 175.323449][ T6961] loop4: detected capacity change from 0 to 256 [ 175.391206][ T6961] exfat: Deprecated parameter 'utf8' [ 175.466049][ T6961] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 175.782656][ T6970] loop3: detected capacity change from 0 to 512 [ 175.853529][ T6970] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.929: bad orphan inode 13 [ 175.912264][ T6970] ext4_test_bit(bit=12, block=4) = 1 [ 175.960911][ T6970] is_bad_inode(inode)=0 [ 175.992563][ T6970] NEXT_ORPHAN(inode)=0 [ 176.003739][ T6970] max_ino=32 [ 176.007051][ T6970] i_nlink=1 [ 176.010258][ T6970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.047845][ T6977] loop0: detected capacity change from 0 to 2048 [ 176.086756][ T6970] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.929: Hash code is SIPHASH, but hash not in dirent [ 176.151451][ T6970] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.929: Corrupt directory, running e2fsck is recommended [ 176.184086][ T6977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.201019][ T6977] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.265594][ T6970] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.929: path /172/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 176.295946][ T6984] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.929: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 176.327926][ T6970] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.929: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 176.339625][ T6987] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.931: bg 0: block 345: padding at end of block bitmap is not set [ 176.453788][ T6987] EXT4-fs (loop0): Remounting filesystem read-only [ 176.526867][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 176.719650][ T6998] loop3: detected capacity change from 0 to 512 [ 176.720548][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 176.733219][ T6998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.780007][ T6998] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 176.808283][ T6998] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 176.851345][ T6998] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 176.896751][ T6998] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 176.940271][ T6998] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.983403][ T6998] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.935: bg 0: block 34: padding at end of block bitmap is not set [ 177.023903][ T5036] vhci_hcd: vhci_device speed not set [ 177.121026][ T6998] Quota error (device loop3): write_blk: dquota write failed [ 177.145578][ T6998] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 177.147512][ T7015] loop4: detected capacity change from 0 to 512 [ 177.160785][ T6998] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.935: Failed to acquire dquot type 1 [ 177.199559][ T7015] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.941: iget: bad i_size value: 38620345925642 [ 177.218921][ T7018] loop0: detected capacity change from 0 to 128 [ 177.224943][ T7015] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.941: couldn't read orphan inode 15 (err -117) [ 177.241604][ T7018] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.258365][ T37] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.275288][ T7015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.278270][ T6998] EXT4-fs (loop3): 1 truncate cleaned up [ 177.318347][ T6998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.361654][ T7015] EXT4-fs (loop4): shut down requested (0) [ 177.363806][ T7018] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.391476][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.479972][ T6998] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.935: deleted inode referenced: 12 [ 177.525495][ T37] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 177.563981][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 177.574478][ T37] usb 6-1: config 0 interface 0 has no altsetting 0 [ 177.599639][ T37] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.624677][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 177.625355][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.646136][ T37] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.654495][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.669768][ T37] usb 6-1: Product: syz [ 177.674120][ T37] usb 6-1: Manufacturer: syz [ 177.691842][ T37] usb 6-1: SerialNumber: syz [ 177.693399][ T26] audit: type=1326 audit(1778619908.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 177.697722][ T126] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.751744][ T37] usb 6-1: config 0 descriptor?? [ 177.762638][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.771121][ T7009] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 177.773372][ T126] usb 3-1: SerialNumber: syz [ 177.778874][ T26] audit: type=1326 audit(1778619908.208:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 177.822322][ T37] usb 6-1: selecting invalid altsetting 0 [ 177.914426][ T26] audit: type=1326 audit(1778619908.208:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 178.010215][ T26] audit: type=1326 audit(1778619908.208:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 178.016413][ T126] usb 3-1: 0:2 : does not exist [ 178.109776][ T26] audit: type=1326 audit(1778619908.208:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 178.175738][ T126] usb 3-1: USB disconnect, device number 10 [ 178.247278][ T26] audit: type=1326 audit(1778619908.208:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 178.339903][ T26] audit: type=1326 audit(1778619908.208:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c39ce59 code=0x7ffc0000 [ 178.522618][ T7041] loop0: detected capacity change from 0 to 1024 [ 178.543109][ T7041] EXT4-fs: inline encryption not supported [ 178.630768][ T7041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.652641][ T7041] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.669932][ T7028] loop4: detected capacity change from 0 to 40427 [ 178.700904][ T7028] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 178.714990][ T7028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 178.727656][ T7041] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.952: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.749717][ T7028] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 178.776431][ T7028] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 178.820842][ T7028] F2FS-fs (loop4): invalid crc value [ 178.826941][ T7041] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 178.865232][ T7028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.870158][ T7041] EXT4-fs (loop0): This should not happen!! Data will be lost [ 178.870158][ T7041] [ 178.901419][ T7052] loop2: detected capacity change from 0 to 128 [ 178.917591][ T7048] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.952: lblock 0 mapped to illegal pblock 0 (length 3) [ 178.981009][ T7052] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.009476][ T7052] hpfs: filesystem error: improperly stopped [ 179.011238][ T7048] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 179.017890][ T7052] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.036786][ T7028] F2FS-fs (loop4): Start checkpoint disabled! [ 179.046293][ T7048] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.046293][ T7048] [ 179.061341][ T7052] hpfs: You really don't want any checks? You are crazy... [ 179.073509][ T7052] hpfs: hpfs_map_sector(): read error [ 179.093777][ T7052] hpfs: code page support is disabled [ 179.094681][ T7028] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 179.106424][ T7052] hpfs: hpfs_map_4sectors(): unaligned read [ 179.123709][ T7028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 179.128668][ T7052] hpfs: hpfs_map_4sectors(): unaligned read [ 179.153064][ T32] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 1) [ 179.184892][ T7052] hpfs: filesystem error: unable to find root dir [ 179.201971][ T32] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 179.251661][ T7028] bio_check_eod: 64 callbacks suppressed [ 179.251680][ T7028] syz.4.947: attempt to access beyond end of device [ 179.251680][ T7028] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 179.263113][ T32] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.263113][ T32] [ 179.317358][ T7052] hpfs: hpfs_map_4sectors(): unaligned read [ 179.329066][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 179.370268][ T7052] hpfs: hpfs_map_sector(): read error [ 179.671861][ T4371] kworker/u4:6: attempt to access beyond end of device [ 179.671861][ T4371] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 179.687687][ T26] audit: type=1326 audit(1778619910.168:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.957" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad739ce59 code=0x7ffc0000 [ 179.806929][ T5037] usb 6-1: USB disconnect, device number 4 [ 180.369398][ T7070] loop0: detected capacity change from 0 to 512 [ 180.441808][ T7070] FAT-fs (loop0): Directory bread(block 199916) failed [ 180.458355][ T7070] FAT-fs (loop0): Directory bread(block 199917) failed [ 180.485598][ T7070] FAT-fs (loop0): Directory bread(block 199918) failed [ 180.503880][ T7070] FAT-fs (loop0): Directory bread(block 199919) failed [ 180.510830][ T7070] FAT-fs (loop0): Directory bread(block 199920) failed [ 180.544234][ T7070] FAT-fs (loop0): Directory bread(block 199921) failed [ 180.567165][ T7070] FAT-fs (loop0): Directory bread(block 199922) failed [ 180.579486][ T7070] FAT-fs (loop0): Directory bread(block 199923) failed [ 180.664747][ T7070] FAT-fs (loop0): Directory bread(block 199916) failed [ 180.672281][ T7070] FAT-fs (loop0): Directory bread(block 199917) failed [ 180.672622][ T7063] loop2: detected capacity change from 0 to 32768 [ 181.055474][ T7080] loop0: detected capacity change from 0 to 64 [ 181.069322][ T7081] xt_connbytes: Forcing CT accounting to be enabled [ 181.471457][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 181.518015][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 181.584548][ T7072] loop5: detected capacity change from 0 to 32768 [ 182.035535][ T7074] loop3: detected capacity change from 0 to 40427 [ 182.074207][ T7074] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 182.110362][ T7074] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 182.148396][ T7074] F2FS-fs (loop3): invalid crc value [ 182.157949][ T7097] loop5: detected capacity change from 0 to 1024 [ 182.171712][ T7074] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 182.363824][ T5038] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.392440][ T7102] loop2: detected capacity change from 0 to 512 [ 182.410542][ T7074] F2FS-fs (loop3): Start checkpoint disabled! [ 182.498916][ T7074] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.529880][ T7074] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 182.553890][ T5038] usb 5-1: Using ep0 maxpacket: 32 [ 182.562086][ T5038] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 182.635438][ T5038] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.642105][ T5038] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 182.712557][ T5038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.758767][ T5038] usb 5-1: config 0 descriptor?? [ 182.983060][ T4320] kworker/u4:5: attempt to access beyond end of device [ 182.983060][ T4320] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.190639][ T7118] loop5: detected capacity change from 0 to 256 [ 183.222147][ T7118] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 183.288992][ T7122] loop0: detected capacity change from 0 to 512 [ 183.335440][ T7122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.424439][ T7122] EXT4-fs (loop0): 1 truncate cleaned up [ 183.430147][ T7122] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.577011][ T5038] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 183.587022][ T5038] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 183.610668][ T5038] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 183.628583][ T5038] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 183.656510][ T5038] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 183.699947][ T5038] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 183.831260][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 184.083890][ T5038] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-110) [ 184.107211][ T5038] corsair-psu: probe of 0003:1B1C:1C09.0003 failed with error -110 [ 184.149800][ T5038] usb 5-1: USB disconnect, device number 2 [ 184.216556][ T7148] loop3: detected capacity change from 0 to 512 [ 184.276919][ T7148] FAT-fs (loop3): Directory bread(block 199916) failed [ 184.303877][ T7148] FAT-fs (loop3): Directory bread(block 199917) failed [ 184.319921][ T7148] FAT-fs (loop3): Directory bread(block 199918) failed [ 184.341644][ T7148] FAT-fs (loop3): Directory bread(block 199919) failed [ 184.390277][ T7148] FAT-fs (loop3): Directory bread(block 199920) failed [ 184.419776][ T7148] FAT-fs (loop3): Directory bread(block 199921) failed [ 184.452538][ T7148] FAT-fs (loop3): Directory bread(block 199922) failed [ 184.478660][ T7147] fido_id[7147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 184.480549][ T7148] FAT-fs (loop3): Directory bread(block 199923) failed [ 184.680426][ T7148] FAT-fs (loop3): Directory bread(block 199916) failed [ 184.693841][ T7148] FAT-fs (loop3): Directory bread(block 199917) failed [ 184.834693][ T7157] loop5: detected capacity change from 0 to 256 [ 184.863376][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 184.863390][ T26] audit: type=1800 audit(1778619915.338:28): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.999" name="file1" dev="loop5" ino=1048661 res=0 errno=0 [ 185.289405][ T7169] loop3: detected capacity change from 0 to 512 [ 185.328698][ T7169] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.386497][ T5037] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 185.424097][ T7169] EXT4-fs (loop3): 1 truncate cleaned up [ 185.429800][ T7169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.452199][ T7174] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 185.606702][ T5037] usb 5-1: Using ep0 maxpacket: 8 [ 185.613204][ T7179] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.1004: corrupted xattr block 33 [ 185.617410][ T5037] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.663738][ T5037] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.689475][ T5037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.702271][ T5037] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 185.730417][ T7181] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1009: bad orphan inode 13 [ 185.733005][ T7179] EXT4-fs (loop3): Remounting filesystem read-only [ 185.761101][ T5037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.830608][ T7181] ext4_test_bit(bit=12, block=4) = 1 [ 185.849551][ T5037] usb 5-1: config 0 descriptor?? [ 185.912903][ T7181] is_bad_inode(inode)=0 [ 185.943273][ T7181] NEXT_ORPHAN(inode)=0 [ 185.957103][ T7181] max_ino=32 [ 185.960423][ T7181] i_nlink=1 [ 185.968695][ T7181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.969533][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 186.062348][ T7181] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.1009: Hash code is SIPHASH, but hash not in dirent [ 186.108326][ T7181] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1009: Corrupt directory, running e2fsck is recommended [ 186.130591][ T7181] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.1009: path /211/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 186.163176][ T7181] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1009: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 186.205467][ T7191] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.1009: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 186.290215][ T5037] smartjoyplus 0003:6666:8804.0004: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0 [ 186.303351][ T5037] smartjoyplus 0003:6666:8804.0004: Force feedback for SmartJoy PLUS PS2/USB adapter [ 186.341248][ T7196] set_capacity_and_notify: 2 callbacks suppressed [ 186.341264][ T7196] loop0: detected capacity change from 0 to 256 [ 186.387754][ T7196] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 186.404830][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 186.524449][ T951] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.553902][ T26] audit: type=1800 audit(1778619917.018:29): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1015" name="file1" dev="loop0" ino=1048662 res=0 errno=0 [ 186.602092][ T37] usb 5-1: USB disconnect, device number 3 [ 186.640257][ T7197] fido_id[7197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 186.713974][ T951] usb 6-1: Using ep0 maxpacket: 8 [ 186.730366][ T951] usb 6-1: config 0 has no interfaces? [ 186.752358][ T951] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.762116][ T7201] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 186.770842][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.784606][ T951] usb 6-1: config 0 descriptor?? [ 186.847530][ T4371] Bluetooth: hci5: Frame reassembly failed (-84) [ 186.872901][ T7203] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 186.882616][ T4371] Bluetooth: hci6: Frame reassembly failed (-84) [ 186.933565][ T7192] loop3: detected capacity change from 0 to 40427 [ 186.950166][ T7192] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 186.958847][ T7192] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 186.968177][ T7192] F2FS-fs (loop3): invalid crc value [ 186.979554][ T7192] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.008574][ T5038] usb 6-1: USB disconnect, device number 5 [ 187.055678][ T7192] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.063003][ T7192] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.519081][ T7209] loop4: detected capacity change from 0 to 32768 [ 187.534448][ T7209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1019 (7209) [ 187.572104][ T7209] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.585333][ T7209] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 187.594690][ T7209] BTRFS info (device loop4): setting nodatasum [ 187.603181][ T7211] loop3: detected capacity change from 0 to 64 [ 187.610537][ T7209] BTRFS info (device loop4): force zlib compression, level 3 [ 187.619088][ T7209] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 187.634988][ T7209] BTRFS info (device loop4): use lzo compression, level 0 [ 187.655191][ T7209] BTRFS info (device loop4): turning on flush-on-commit [ 187.656057][ T7211] hfs: bad catalog entry type 0 [ 187.662174][ T7209] BTRFS info (device loop4): enabling auto defrag [ 187.662228][ T7209] BTRFS info (device loop4): max_inline at 4096 [ 187.662250][ T7209] BTRFS info (device loop4): using free space tree [ 187.821427][ T7209] BTRFS info (device loop4): enabling ssd optimizations [ 187.934142][ T7235] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1024'. [ 188.099268][ T4280] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.367400][ T7245] netlink: 'syz.3.1028': attribute type 3 has an invalid length. [ 188.638964][ T7250] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.667548][ T7253] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1029'. [ 188.685933][ T7250] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.729195][ T7255] loop4: detected capacity change from 0 to 512 [ 188.827106][ T7255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.848853][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 188.850646][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.879411][ T7260] net_ratelimit: 5203 callbacks suppressed [ 188.879427][ T7260] IPVS: lc: FWM 3 0x00000003 - no destination available [ 188.882817][ T7255] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.923842][ T4286] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 189.029611][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.124315][ T7253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.162087][ T7253] bond0 (unregistering): Released all slaves [ 189.191022][ T7246] bond0 speed is unknown, defaulting to 1000 [ 189.207087][ T7250] siw: device registration error -19 [ 189.224777][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 189.263794][ T5038] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 189.290947][ T7266] loop0: detected capacity change from 0 to 2048 [ 189.303127][ T7266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.456614][ T5038] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.474645][ T5038] usb 6-1: not running at top speed; connect to a high speed hub [ 189.532147][ T5038] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 189.572072][ T5038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.582079][ T5038] usb 6-1: Product: syz [ 189.603120][ T5038] usb 6-1: Manufacturer: syz [ 189.621288][ T5038] usb 6-1: SerialNumber: syz [ 189.651954][ T7279] loop3: detected capacity change from 0 to 256 [ 189.720622][ T7279] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 189.856190][ T5038] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 189.930126][ T7287] loop2: detected capacity change from 0 to 64 [ 189.970180][ T7291] loop3: detected capacity change from 0 to 512 [ 190.011544][ T7291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.101956][ T7291] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1045: iget: bad i_size value: 38620345925642 [ 190.122634][ T7298] loop4: detected capacity change from 0 to 256 [ 190.151687][ T65] kworker/u4:4: attempt to access beyond end of device [ 190.151687][ T65] loop2: rw=2049, sector=681, nr_sectors = 288 limit=64 [ 190.177941][ T7298] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 190.200708][ T7291] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1045: couldn't read orphan inode 15 (err -117) [ 190.246081][ T7291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.423787][ T5037] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.435253][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 190.469096][ T5038] gp8psk: usb out operation failed. [ 190.476396][ T5038] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 190.514653][ T5038] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 190.563539][ T5038] usb 6-1: USB disconnect, device number 6 [ 190.623738][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 190.630749][ T5037] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 190.656144][ T5037] usb 1-1: config 0 has no interface number 0 [ 190.675439][ T5037] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 190.725788][ T5037] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 190.751231][ T5037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.775423][ T5037] usb 1-1: Product: syz [ 190.781003][ T5037] usb 1-1: Manufacturer: syz [ 190.798018][ T5037] usb 1-1: SerialNumber: syz [ 190.820460][ T5037] usb 1-1: config 0 descriptor?? [ 190.830619][ T7296] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.036235][ T7309] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.048695][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.048695][ T4371] loop2: rw=1, sector=969, nr_sectors = 2720 limit=64 [ 191.055894][ T7310] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1051'. [ 191.077644][ T7296] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.124766][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.124766][ T4371] loop2: rw=1, sector=3689, nr_sectors = 480 limit=64 [ 191.160418][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.160418][ T4371] loop2: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 191.179705][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 191.185783][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 191.189497][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 191.208869][ T4371] buffer_io_error: 54 callbacks suppressed [ 191.208886][ T4371] Buffer I/O error on dev loop2, logical block 4169, lost async page write [ 191.271343][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.271343][ T4371] loop2: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 191.308013][ T7310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.355953][ T7310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.356548][ T4371] Buffer I/O error on dev loop2, logical block 4170, lost async page write [ 191.365414][ T7314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 191.404127][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.404127][ T4371] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 191.404946][ T5036] infiniband syz1: ib_query_port failed (-19) [ 191.426329][ T4371] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 191.428304][ T7317] set_capacity_and_notify: 1 callbacks suppressed [ 191.428318][ T7317] loop5: detected capacity change from 0 to 256 [ 191.435891][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.435891][ T4371] loop2: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 191.474628][ T7310] bond0 (unregistering): Released all slaves [ 191.494919][ T7317] exfat: Deprecated parameter 'utf8' [ 191.498512][ T5037] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 191.523397][ T5394] bond0 speed is unknown, defaulting to 1000 [ 191.528671][ T5037] asix: probe of 1-1:0.188 failed with error -71 [ 191.529475][ T7309] bond0 speed is unknown, defaulting to 1000 [ 191.545894][ T7317] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 191.564458][ T4371] Buffer I/O error on dev loop2, logical block 4173, lost async page write [ 191.573268][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.573268][ T4371] loop2: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 191.587803][ T26] audit: type=1800 audit(1778619922.068:30): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1053" name="file1" dev="loop3" ino=1048663 res=0 errno=0 [ 191.617718][ T5037] usb 1-1: USB disconnect, device number 8 [ 191.648995][ T4371] Buffer I/O error on dev loop2, logical block 4174, lost async page write [ 191.675180][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.675180][ T4371] loop2: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 191.748392][ T7309] siw: device registration error -19 [ 191.754150][ T4371] Buffer I/O error on dev loop2, logical block 4175, lost async page write [ 191.762803][ T4371] kworker/u4:6: attempt to access beyond end of device [ 191.762803][ T4371] loop2: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 191.780573][ T4371] Buffer I/O error on dev loop2, logical block 4176, lost async page write [ 191.790065][ T4371] Buffer I/O error on dev loop2, logical block 4177, lost async page write [ 191.808828][ T4371] Buffer I/O error on dev loop2, logical block 4196, lost async page write [ 191.856450][ T4371] Buffer I/O error on dev loop2, logical block 4197, lost async page write [ 192.058543][ T7323] loop5: detected capacity change from 0 to 2048 [ 192.100076][ T7323] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 192.122394][ T7323] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.299810][ T7336] loop0: detected capacity change from 0 to 256 [ 192.311251][ T7337] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1057: bg 0: block 345: padding at end of block bitmap is not set [ 192.335187][ T7337] EXT4-fs (loop5): Remounting filesystem read-only [ 192.350152][ T7336] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 192.469220][ T5682] EXT4-fs (loop5): unmounting filesystem. [ 192.526434][ T5394] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.617155][ T7341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1066'. [ 192.713821][ T5394] usb 5-1: Using ep0 maxpacket: 16 [ 192.721172][ T7347] program syz.0.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.722030][ T5394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 192.765424][ T5394] usb 5-1: config 1 interface 0 altsetting 151 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 192.785530][ T5394] usb 5-1: config 1 interface 0 has no altsetting 0 [ 192.796308][ T5394] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40 [ 192.805966][ T5394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.814741][ T5394] usb 5-1: Product: syz [ 192.819042][ T5394] usb 5-1: Manufacturer: syz [ 192.824277][ T5394] usb 5-1: SerialNumber: syz [ 192.898655][ T7351] loop5: detected capacity change from 0 to 4096 [ 192.924656][ T7351] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 193.049733][ T5394] usbhid 5-1:1.0: can't add hid device: -71 [ 193.055900][ T5394] usbhid: probe of 5-1:1.0 failed with error -71 [ 193.100523][ T5394] usb 5-1: USB disconnect, device number 4 [ 193.235912][ T5682] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 193.249771][ T5682] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 193.277569][ T5682] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 193.673089][ T7377] loop4: detected capacity change from 0 to 256 [ 193.822442][ T4280] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 193.841357][ T4280] FAT-fs (loop4): Filesystem has been set read-only [ 193.863628][ T4280] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 194.143210][ T7372] loop5: detected capacity change from 0 to 40427 [ 194.167811][ T7372] F2FS-fs (loop5): Invalid log blocks per segment (1) [ 194.195655][ T7372] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 194.212978][ T7372] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 194.221641][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227080][ T7372] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 194.227988][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.299006][ T7372] F2FS-fs (loop5): invalid crc value [ 194.339878][ T7372] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.424638][ T4320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.500769][ T7372] F2FS-fs (loop5): Start checkpoint disabled! [ 194.532487][ T4320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.549891][ T7372] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 194.557377][ T7372] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 194.647663][ T4320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.739084][ T7395] loop0: detected capacity change from 0 to 1024 [ 194.844931][ T7395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 194.869481][ T7395] System zones: 0-1, 3-36 [ 194.886809][ T7400] loop2: detected capacity change from 0 to 512 [ 194.895993][ T7395] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1090: bad orphan inode 134217728 [ 194.937068][ T7401] loop3: detected capacity change from 0 to 512 [ 194.945741][ T4320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.961891][ T7400] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.995630][ T7395] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.044893][ T7401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.064128][ T7401] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.072536][ T7400] EXT4-fs (loop2): 1 truncate cleaned up [ 195.093787][ T7400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.257267][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 195.390319][ T7400] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.1094: corrupted xattr block 33 [ 195.433466][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 195.459140][ T7409] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 195.459140][ T7409] The task syz.5.1093 (7409) triggered the difference, watch for misbehavior. [ 195.495361][ T7400] EXT4-fs (loop2): Remounting filesystem read-only [ 195.700011][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 195.809406][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.829721][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.841169][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.849603][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.858771][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.866303][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.044279][ T7422] netlink: 'syz.2.1098': attribute type 5 has an invalid length. [ 196.665413][ T7448] loop5: detected capacity change from 0 to 8 [ 196.727027][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 196.783108][ T7452] loop3: detected capacity change from 0 to 128 [ 196.835970][ T951] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.865285][ T7448] SQUASHFS error: Unable to read inode 0x24 [ 196.920427][ T7452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.945099][ T7452] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.976854][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.093771][ T951] usb 1-1: Using ep0 maxpacket: 32 [ 197.102485][ T951] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 197.164352][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.169261][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.182203][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.205368][ T7416] device bridge_slave_0 entered promiscuous mode [ 197.261004][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 197.344571][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.352156][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.390291][ T7416] device bridge_slave_1 entered promiscuous mode [ 197.391072][ T7466] loop5: detected capacity change from 0 to 64 [ 197.429569][ T951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 197.452591][ T7433] loop2: detected capacity change from 0 to 40427 [ 197.472248][ T951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.515278][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.529028][ T7433] F2FS-fs (loop2): invalid crc value [ 197.544630][ T951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 197.567031][ T951] usb 1-1: media controller created [ 197.577196][ T7433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.654013][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.765495][ T7433] F2FS-fs (loop2): Start checkpoint disabled! [ 197.782087][ T951] az6027: usb out operation failed. (-71) [ 197.793351][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.802664][ T951] az6027: usb out operation failed. (-71) [ 197.802721][ T951] stb0899_attach: Driver disabled by Kconfig [ 197.802731][ T951] az6027: no front-end attached [ 197.802731][ T951] [ 197.816721][ T951] az6027: usb out operation failed. (-71) [ 197.837489][ T951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 197.849344][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 197.861001][ T7433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 197.884290][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 197.968478][ T951] dvb-usb: schedule remote query interval to 400 msecs. [ 197.995987][ T951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 198.016738][ T7416] team0: Port device team_slave_0 added [ 198.065659][ T951] usb 1-1: USB disconnect, device number 9 [ 198.084234][ T7416] team0: Port device team_slave_1 added [ 198.169909][ T951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 198.528127][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.555035][ T7469] loop5: detected capacity change from 0 to 32768 [ 198.563139][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.632228][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.764037][ T7469] XFS (loop5): Mounting V5 Filesystem [ 198.786595][ T4320] device hsr_slave_0 left promiscuous mode [ 198.824973][ T4320] device hsr_slave_1 left promiscuous mode [ 198.938606][ T7469] XFS (loop5): Ending clean mount [ 198.951008][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.973829][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.988019][ T7495] loop2: detected capacity change from 0 to 1024 [ 198.997289][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.044391][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.082600][ T4320] device bridge_slave_1 left promiscuous mode [ 199.108963][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.124296][ T5682] XFS (loop5): Unmounting Filesystem [ 199.143916][ T951] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.152149][ T4320] device bridge_slave_0 left promiscuous mode [ 199.164621][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.353865][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 199.365902][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.391259][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.402484][ T951] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 199.429744][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.467702][ T951] usb 1-1: config 0 descriptor?? [ 199.498943][ T4320] device veth1_macvtap left promiscuous mode [ 199.516669][ T4320] device veth0_macvtap left promiscuous mode [ 199.537107][ T4320] device veth1_vlan left promiscuous mode [ 199.563476][ T4320] device veth0_vlan left promiscuous mode [ 199.779302][ T7486] loop3: detected capacity change from 0 to 32768 [ 199.843584][ T7486] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 199.966165][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 200.049687][ T7507] loop5: detected capacity change from 0 to 1024 [ 200.060492][ T4260] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 200.083324][ T7507] EXT4-fs: Ignoring removed orlov option [ 200.097424][ T951] usb 1-1: string descriptor 0 read error: -71 [ 200.157024][ T951] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 200.173917][ T951] letsketch: probe of 0003:6161:4D15.0005 failed with error -32 [ 200.204182][ T951] usb 1-1: USB disconnect, device number 10 [ 200.230755][ T7507] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 200.460009][ T5682] EXT4-fs (loop5): unmounting filesystem. [ 200.513373][ T7500] loop2: detected capacity change from 0 to 40427 [ 200.570306][ T7500] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 200.591926][ T7500] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 200.638900][ T7500] F2FS-fs (loop2): invalid crc value [ 200.722770][ T7500] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 200.961229][ T7500] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 201.013841][ T7500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 201.260079][ T7500] bio_check_eod: 74 callbacks suppressed [ 201.260099][ T7500] syz.2.1119: attempt to access beyond end of device [ 201.260099][ T7500] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 201.421177][ T4275] syz-executor: attempt to access beyond end of device [ 201.421177][ T4275] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.021071][ T7532] loop3: detected capacity change from 0 to 40427 [ 202.053871][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 202.083526][ T7532] F2FS-fs (loop3): invalid crc value [ 202.111917][ T7532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.173115][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 202.230882][ T7532] F2FS-fs (loop3): Start checkpoint disabled! [ 202.262941][ T7532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 202.305043][ T7540] loop0: detected capacity change from 0 to 40427 [ 202.339507][ T7540] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 202.379814][ T7540] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.399034][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 202.412106][ T7540] F2FS-fs (loop0): invalid crc value [ 202.457165][ T7540] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 202.603787][ T7556] program syz.2.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.673359][ T7540] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 202.702440][ T7540] F2FS-fs (loop0): Start checkpoint disabled! [ 202.741152][ T7540] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.750090][ T7540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 202.904696][ T4371] kworker/u4:6: attempt to access beyond end of device [ 202.904696][ T4371] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.975481][ T11] kworker/u4:1: attempt to access beyond end of device [ 202.975481][ T11] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 203.296320][ T7561] loop0: detected capacity change from 0 to 64 [ 203.342715][ T26] audit: type=1800 audit(1778619933.818:31): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1136" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 203.493844][ T7563] loop3: detected capacity change from 0 to 2048 [ 203.599884][ T7563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.699670][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 203.867835][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.882919][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.912048][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.078525][ T7416] device hsr_slave_0 entered promiscuous mode [ 204.105725][ T7416] device hsr_slave_1 entered promiscuous mode [ 204.123812][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 204.154593][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.183315][ T7416] Cannot create hsr debugfs directory [ 204.314901][ T7584] loop0: Can't mount, would change RO state [ 204.534025][ T5392] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.735685][ T5392] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.759366][ T5392] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.810889][ T7576] loop3: detected capacity change from 0 to 32768 [ 204.821649][ T5392] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.861550][ T5392] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.874886][ T7576] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 204.881847][ T5392] usb 1-1: Product: syz [ 204.903915][ T5392] usb 1-1: Manufacturer: syz [ 204.908565][ T5392] usb 1-1: SerialNumber: syz [ 204.984575][ T5392] usb 1-1: config 0 descriptor?? [ 205.005419][ T7416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.037124][ T5392] usb 1-1: selecting invalid altsetting 0 [ 205.052280][ T7416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.164361][ T7416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.246200][ T7416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.397217][ T5392] usb 1-1: USB disconnect, device number 11 [ 205.407233][ T4264] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 205.602017][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.660287][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.686571][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.709888][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.713787][ T5038] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 205.753941][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.763638][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.794626][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.801755][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.851288][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.880954][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.917216][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.923901][ T5038] usb 6-1: Using ep0 maxpacket: 16 [ 205.942413][ T5038] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.950174][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.957325][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.961721][ T5038] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 206.004460][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.020863][ T5038] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 206.040415][ T5038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.047726][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.070844][ T5038] usb 6-1: Product: syz [ 206.089491][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.091119][ T5038] usb 6-1: Manufacturer: syz [ 206.112678][ T5038] usb 6-1: SerialNumber: syz [ 206.163941][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.198188][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.245233][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.266672][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.315501][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.336947][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.347851][ T5038] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 206.379073][ T7416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.383449][ T5038] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 206.423882][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.434280][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.443476][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.479954][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 206.529346][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 206.749205][ T5038] usb 6-1: 2:1 : can't get Cluster Descriptor [ 207.123810][ T5038] usb 6-1: USB disconnect, device number 7 [ 207.149995][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.172696][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.221294][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.387285][ T7652] device erspan0 entered promiscuous mode [ 207.571007][ T7661] program syz.3.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.851070][ T7667] loop2: detected capacity change from 0 to 4096 [ 207.909186][ T7675] loop3: detected capacity change from 0 to 128 [ 207.998362][ T7677] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.005182][ T7675] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.037252][ T7675] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.146446][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 208.650677][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.664854][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.685931][ T7691] loop3: detected capacity change from 0 to 2048 [ 208.718440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.750898][ T7691] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 208.757658][ T7669] loop0: detected capacity change from 0 to 32768 [ 208.763464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.821943][ T7416] device veth0_vlan entered promiscuous mode [ 208.829629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.853293][ T7691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.869833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.922155][ T7416] device veth1_vlan entered promiscuous mode [ 208.996505][ T7669] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.031612][ T7669] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 209.050009][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.074291][ T7669] BTRFS info (device loop0): using free space tree [ 209.157122][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.247312][ T7710] program syz.5.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.254526][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.270747][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.277295][ T7707] loop2: detected capacity change from 0 to 4096 [ 209.288094][ T7416] device veth0_macvtap entered promiscuous mode [ 209.295512][ T7707] EXT4-fs: inline encryption not supported [ 209.313581][ T7707] EXT4-fs (loop2): Test dummy encryption mode enabled [ 209.336927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.371357][ T7707] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 209.377474][ T7416] device veth1_macvtap entered promiscuous mode [ 209.415131][ T7707] System zones: 0-5 [ 209.422447][ T7707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.430665][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.523914][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.543827][ T7669] BTRFS info (device loop0): enabling ssd optimizations [ 209.580341][ T7707] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 209.604739][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.687480][ T7732] loop5: detected capacity change from 0 to 1024 [ 209.694083][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.721852][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.760381][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.803935][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.832791][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.890811][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.926107][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.965185][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.036723][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.101853][ T7707] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 210.113452][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.148610][ T7707] overlayfs: upper fs does not support tmpfile. [ 210.157329][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.197013][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.220565][ T7669] BTRFS info (device loop0): balance: start [ 210.224182][ T7745] loop3: detected capacity change from 0 to 256 [ 210.270546][ T7707] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 210.287415][ T7746] loop5: detected capacity change from 0 to 1024 [ 210.317114][ T7745] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.345099][ T7669] BTRFS info (device loop0): balance: ended with status: 0 [ 210.362501][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.400807][ T7745] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 210.432531][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.462616][ T7745] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 210.527575][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.568972][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.625543][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.661855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.671966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.723122][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 210.747732][ T7416] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.764071][ T7416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.784435][ T7416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.797169][ T7416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.826348][ T4282] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.030127][ T7760] loop5: detected capacity change from 0 to 1024 [ 211.165810][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.192301][ T7760] hfsplus: xattr exists yet [ 211.204466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.242783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.401201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.416450][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.456506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.482081][ T65] hfsplus: b-tree write err: -5, ino 8 [ 211.775975][ T7772] loop6: detected capacity change from 0 to 64 [ 212.045557][ T9] kworker/u4:0: attempt to access beyond end of device [ 212.045557][ T9] loop6: rw=2049, sector=1257, nr_sectors = 376 limit=64 [ 212.142090][ T26] audit: type=1800 audit(1778619942.618:32): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1187" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 212.397893][ T7761] XFS (loop2): Mounting V5 Filesystem [ 212.595118][ T7761] XFS (loop2): Ending clean mount [ 212.910547][ T4275] XFS (loop2): Unmounting Filesystem [ 213.123388][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.123388][ T9] loop6: rw=1, sector=1633, nr_sectors = 2536 limit=64 [ 213.173130][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.173130][ T9] loop6: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 213.234415][ T9] buffer_io_error: 62 callbacks suppressed [ 213.234429][ T9] Buffer I/O error on dev loop6, logical block 4169, lost async page write [ 213.299142][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.299142][ T9] loop6: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 213.368785][ T9] Buffer I/O error on dev loop6, logical block 4170, lost async page write [ 213.404790][ T7812] set_capacity_and_notify: 2 callbacks suppressed [ 213.404805][ T7812] loop0: detected capacity change from 0 to 2048 [ 213.408622][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.408622][ T9] loop6: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 213.507919][ T7816] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.524070][ T9] Buffer I/O error on dev loop6, logical block 4172, lost async page write [ 213.532756][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.532756][ T9] loop6: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 213.633013][ T7820] NILFS (loop0): unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰" [ 213.633703][ T9] Buffer I/O error on dev loop6, logical block 4173, lost async page write [ 213.730035][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.730035][ T9] loop6: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 213.779653][ T9] Buffer I/O error on dev loop6, logical block 4174, lost async page write [ 213.812106][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.812106][ T9] loop6: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 213.843384][ T9] Buffer I/O error on dev loop6, logical block 4175, lost async page write [ 213.882082][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1208'. [ 213.891557][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.891557][ T9] loop6: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 213.926340][ T7829] netem: change failed [ 213.964408][ T9] Buffer I/O error on dev loop6, logical block 4176, lost async page write [ 213.973087][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.973087][ T9] loop6: rw=1, sector=4177, nr_sectors = 1 limit=64 [ 214.041049][ T9] Buffer I/O error on dev loop6, logical block 4177, lost async page write [ 214.084297][ T9] Buffer I/O error on dev loop6, logical block 4196, lost async page write [ 214.134674][ T9] Buffer I/O error on dev loop6, logical block 4197, lost async page write [ 214.206559][ T7842] loop3: detected capacity change from 0 to 64 [ 214.520401][ T7851] loop2: detected capacity change from 0 to 256 [ 215.439245][ T7844] loop0: detected capacity change from 0 to 40427 [ 215.475856][ T7844] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 215.482250][ T7844] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 215.558910][ T7844] F2FS-fs (loop0): invalid crc value [ 215.681516][ T7844] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 215.748945][ T7876] loop5: detected capacity change from 0 to 4096 [ 215.934267][ T7844] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 215.941403][ T7844] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.295234][ T5682] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 216.301759][ T5682] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 216.755457][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1235'. [ 217.311401][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.356844][ T7929] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1241'. [ 217.449341][ T7931] loop3: detected capacity change from 0 to 1024 [ 217.902304][ T7947] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 217.952566][ T7950] program syz.6.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.292516][ T7967] loop0: detected capacity change from 0 to 128 [ 218.327722][ T7967] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.360576][ T7967] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.373910][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.541841][ T4374] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.583861][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 218.610594][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.636014][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.672041][ T22] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 218.703250][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.728461][ T22] usb 3-1: config 0 descriptor?? [ 219.345128][ T22] usb 3-1: string descriptor 0 read error: -71 [ 219.386228][ T22] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 219.408993][ T7992] loop3: detected capacity change from 0 to 512 [ 219.425766][ T22] letsketch: probe of 0003:6161:4D15.0006 failed with error -32 [ 219.440975][ T22] usb 3-1: USB disconnect, device number 11 [ 219.861127][ T8006] loop0: detected capacity change from 0 to 256 [ 219.902668][ T8004] loop3: detected capacity change from 0 to 4096 [ 219.910326][ T8001] loop5: detected capacity change from 0 to 8192 [ 219.986190][ T8004] ntfs: volume version 3.1. [ 220.006193][ T8001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.051624][ T8004] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 220.074696][ T8001] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 220.115560][ T8001] REISERFS (device loop5): using ordered data mode [ 220.122114][ T8001] reiserfs: using flush barriers [ 220.136814][ T8004] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 220.179435][ T8004] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 220.223091][ T8001] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.254758][ T8004] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 220.311420][ T8001] REISERFS (device loop5): checking transaction log (loop5) [ 220.330431][ T8004] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 220.364647][ T8001] REISERFS (device loop5): Using r5 hash to sort names [ 220.383048][ T8004] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 220.411493][ T8001] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 220.496892][ T26] audit: type=1800 audit(1778619950.978:33): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1266" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 221.159765][ T8037] loop2: detected capacity change from 0 to 2048 [ 221.281792][ T8037] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 221.289619][ T8037] UDF-fs: Scanning with blocksize 512 failed [ 221.346234][ T8037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.398481][ T8046] device erspan0 entered promiscuous mode [ 221.454346][ T26] audit: type=1800 audit(1778619951.928:34): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1278" name="file1" dev="loop2" ino=818 res=0 errno=0 [ 221.914207][ T8054] loop0: detected capacity change from 0 to 4096 [ 221.932198][ T8054] EXT4-fs: inline encryption not supported [ 221.956496][ T8054] EXT4-fs (loop0): Test dummy encryption mode enabled [ 222.006975][ T8054] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 222.013926][ T5037] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 222.042552][ T8054] System zones: 0-5 [ 222.083362][ T8034] loop6: detected capacity change from 0 to 40427 [ 222.101962][ T8034] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 222.121443][ T8054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 222.144435][ T8034] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 222.164332][ T8034] F2FS-fs (loop6): invalid crc value [ 222.203832][ T5037] usb 4-1: Using ep0 maxpacket: 16 [ 222.209445][ T8034] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 222.212720][ T5037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.244457][ T5037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.254680][ T5037] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 222.278555][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.326871][ T5037] usb 4-1: config 0 descriptor?? [ 222.432082][ T8034] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 222.444173][ T8034] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 222.592334][ T8034] bio_check_eod: 153 callbacks suppressed [ 222.592355][ T8034] syz.6.1276: attempt to access beyond end of device [ 222.592355][ T8034] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 222.681692][ T8054] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 222.725705][ T8054] overlayfs: upper fs does not support tmpfile. [ 222.747279][ T8054] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 222.957912][ T5037] usb 4-1: string descriptor 0 read error: -71 [ 222.991008][ T5037] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 223.009692][ T5037] letsketch: probe of 0003:6161:4D15.0007 failed with error -32 [ 223.048081][ T5037] usb 4-1: USB disconnect, device number 7 [ 223.069670][ T7416] syz-executor: attempt to access beyond end of device [ 223.069670][ T7416] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.312583][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 223.515498][ T8091] random: crng reseeded on system resumption [ 223.780337][ T8097] loop6: detected capacity change from 0 to 2048 [ 223.857056][ T8101] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.997827][ T7765] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 224.197454][ T7765] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.225246][ T7765] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 224.265916][ T7765] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 224.305786][ T7765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.316761][ T8114] loop5: detected capacity change from 0 to 64 [ 224.618311][ T8103] loop0: detected capacity change from 0 to 32768 [ 224.631862][ T8103] XFS: attr2 mount option is deprecated. [ 224.700582][ T8103] XFS (loop0): Mounting V5 Filesystem [ 224.743103][ T7765] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 224.760220][ T7765] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 224.791593][ T8103] XFS (loop0): Ending clean mount [ 224.804665][ T7765] input: failed to attach handler kbd to device input9, error: -5 [ 224.809001][ T8103] XFS (loop0): Quotacheck needed: Please wait. [ 224.855655][ T7765] usb 3-1: USB disconnect, device number 12 [ 224.942686][ T8103] XFS (loop0): Quotacheck: Done. [ 224.977068][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 225.102114][ T4282] XFS (loop0): Unmounting Filesystem [ 225.349131][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.349131][ T4320] loop5: rw=1, sector=681, nr_sectors = 3048 limit=64 [ 225.398161][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.398161][ T4320] loop5: rw=1, sector=3729, nr_sectors = 440 limit=64 [ 225.426671][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.426671][ T4320] loop5: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 225.444854][ T5037] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 225.458257][ T4320] buffer_io_error: 126 callbacks suppressed [ 225.458272][ T4320] Buffer I/O error on dev loop5, logical block 4169, lost async page write [ 225.473019][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.473019][ T4320] loop5: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 225.492565][ T4320] Buffer I/O error on dev loop5, logical block 4170, lost async page write [ 225.501524][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.501524][ T4320] loop5: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 225.521085][ T4320] Buffer I/O error on dev loop5, logical block 4172, lost async page write [ 225.531153][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.531153][ T4320] loop5: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 225.568642][ T4320] Buffer I/O error on dev loop5, logical block 4173, lost async page write [ 225.578026][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.578026][ T4320] loop5: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 225.592272][ T4320] Buffer I/O error on dev loop5, logical block 4174, lost async page write [ 225.629564][ T4320] kworker/u4:5: attempt to access beyond end of device [ 225.629564][ T4320] loop5: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 225.651088][ T4320] Buffer I/O error on dev loop5, logical block 4175, lost async page write [ 225.661104][ T4320] Buffer I/O error on dev loop5, logical block 4176, lost async page write [ 225.675330][ T5037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.691115][ T5037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.701674][ T4320] Buffer I/O error on dev loop5, logical block 4177, lost async page write [ 225.754966][ T4320] Buffer I/O error on dev loop5, logical block 4196, lost async page write [ 225.763637][ T4320] Buffer I/O error on dev loop5, logical block 4197, lost async page write [ 225.769475][ T5037] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.825661][ T5037] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.855001][ T5037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.900313][ T5037] usb 7-1: config 0 descriptor?? [ 226.084795][ T8151] loop0: detected capacity change from 0 to 2048 [ 226.137996][ T8151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.350136][ T5037] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 226.371326][ T5037] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 226.400076][ T5037] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 226.439549][ T5037] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 226.598635][ T8166] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1315'. [ 226.709644][ T5037] usb 7-1: USB disconnect, device number 2 [ 226.880762][ T8167] fido_id[8167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 227.092574][ T8184] loop2: detected capacity change from 0 to 1024 [ 227.159352][ T8184] EXT4-fs: inline encryption not supported [ 227.255084][ T8184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.292987][ T8184] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.363177][ T8184] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.1322: lblock 0 mapped to illegal pblock 0 (length 6) [ 227.506573][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 227.661905][ T8176] loop3: detected capacity change from 0 to 32768 [ 227.720121][ T8176] find_entry called with index >= next_index [ 227.769820][ T8176] find_entry called with index >= next_index [ 227.777354][ T8176] find_entry called with index >= next_index [ 227.804309][ T8176] find_entry called with index >= next_index [ 227.810356][ T8176] find_entry called with index >= next_index [ 227.874000][ T8176] add_index: next_index = 0. Resetting! [ 227.879697][ T8176] find_entry called with index >= next_index [ 227.933865][ T8176] find_entry called with index >= next_index [ 227.939901][ T8176] find_entry called with index >= next_index [ 227.982788][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1331'. [ 227.989390][ T8176] find_entry called with index >= next_index [ 228.093443][ T8176] non-latin1 character 0x3ff found in JFS file name [ 228.133111][ T8176] mount with iocharset=utf8 to access [ 229.263792][ T5037] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 229.465995][ T5037] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.496416][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.556988][ T5037] usb 6-1: config 0 descriptor?? [ 229.585557][ T5037] cp210x 6-1:0.0: cp210x converter detected [ 229.895719][ T8231] loop3: detected capacity change from 0 to 40427 [ 229.906546][ T8231] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 229.936889][ T8231] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 229.988893][ T5037] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 230.030449][ T5037] usb 6-1: cp210x converter now attached to ttyUSB0 [ 230.056493][ T8235] loop6: detected capacity change from 0 to 32768 [ 230.074543][ T8235] XFS: attr2 mount option is deprecated. [ 230.113010][ T8231] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.146725][ T8235] XFS (loop6): Mounting V5 Filesystem [ 230.208209][ T8235] XFS (loop6): Ending clean mount [ 230.233225][ T5394] usb 6-1: USB disconnect, device number 8 [ 230.238828][ T8235] XFS (loop6): Quotacheck needed: Please wait. [ 230.254351][ T5394] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.312473][ T5394] cp210x 6-1:0.0: device disconnected [ 230.380348][ T8231] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 230.413705][ T8231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.423244][ T8259] loop0: detected capacity change from 0 to 4096 [ 230.431005][ T8235] XFS (loop6): Quotacheck: Done. [ 230.520394][ T8259] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 230.667989][ T7416] XFS (loop6): Unmounting Filesystem [ 230.746431][ T8274] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 231.073469][ T4371] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 231.126401][ T4282] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 231.133156][ T4282] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 231.199545][ T4282] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 231.234597][ T4320] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 231.241616][ T4282] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 231.270383][ T4282] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 231.367773][ T8289] loop5: detected capacity change from 0 to 256 Stopping sshd: [ 231.495205][ T8289] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 231.723901][ T951] usb 3-1: new high-speed USB device number 13 using dummy_hcd stopped /usr/sbin/sshd (pid 4022) OK [ 231.881073][ T8303] loop3: detected capacity change from 0 to 256 [ 231.933800][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 231.940760][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 231.971561][ T8303] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.996503][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.037100][ T951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.079523][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 Stopping crond: [ 232.123440][ T951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 232.159490][ T951] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 232.191729][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.231490][ T951] usb 3-1: config 0 descriptor?? [ 232.254340][ T8293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 stopped /usr/sbin/crond (pid 4010) OK [ 232.606950][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1365'. [ 232.616726][ T4277] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 232.619596][ T7765] usb 3-1: USB disconnect, device number 13 [ 233.072607][ T8327] loop6: detected capacity change from 0 to 8192 [ 233.131557][ T8327] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.233921][ T8327] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 233.243165][ T8327] REISERFS (device loop6): using ordered data mode [ 233.283729][ T8327] reiserfs: using flush barriers [ 233.287388][ T8341] sctp: [Deprecated]: syz.5.1372 (pid 8341) Use of int in max_burst socket option. [ 233.287388][ T8341] Use struct sctp_assoc_value instead [ 233.312725][ T8327] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.372364][ T8346] program syz.3.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.451187][ T8327] REISERFS (device loop6): checking transaction log (loop6) Stopping dhcpcd... [ 233.516940][ T8327] REISERFS (device loop6): Using r5 hash to sort names [ 233.591053][ T8327] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. stopped /sbin/dhcpcd (pid 3932) [ 234.113850][ T8371] loop0: detected capacity change from 0 to 2048 [ 234.128538][ T8363] loop2: detected capacity change from 0 to 4096 [ 234.151903][ T8371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.212392][ T8363] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 234.392220][ T8363] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 234.437250][ T8371] UDF-fs: error (device loop0): udf_rename: directory (ino 1345) has parent entry pointing to another inode (1376 != 1367) [ 234.467079][ T8363] ntfs3: loop2: Failed to load $Extend. Stopping network: [ 234.990427][ T8398] loop0: detected capacity change from 0 to 8 [ 235.125796][ T8398] SQUASHFS error: xz decompression failed, data probably corrupt [ 235.205434][ T8398] SQUASHFS error: Failed to read block 0x108: -5 [ 235.249161][ T8398] SQUASHFS error: Unable to read metadata cache entry [106] [ 235.282311][ T8398] SQUASHFS error: Unable to read inode 0x11f [ 235.511349][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1395'. [ 235.548448][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1395'. [ 235.629484][ T8383] loop3: detected capacity change from 0 to 32768 [ 235.652044][ T8383] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.1386 (8383) [ 235.710403][ T8383] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 235.740638][ T8383] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.761413][ T8383] BTRFS info (device loop3): using free space tree [ 236.091413][ T8383] BTRFS info (device loop3): enabling ssd optimizations [ 236.536565][ T4270] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f OK [ 236.740826][ T5394] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 236.944636][ T5394] usb 1-1: Using ep0 maxpacket: 32 [ 236.951560][ T5394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 Stopping iptables: [ 236.983188][ T5394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.007471][ T5394] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 237.038755][ T5394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.099395][ T5394] usb 1-1: config 0 descriptor?? OK Stopping system message bus: [ 237.576398][ T5394] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 237.773892][ T5392] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 238.003928][ T5392] usb 6-1: Using ep0 maxpacket: 8 [ 238.011234][ T5392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 238.037784][ T5038] usb 1-1: USB disconnect, device number 12 [ 238.060724][ T5392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.110442][ T8487] fido_id[8487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 238.137034][ T5392] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.166694][ T5392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 238.210701][ T5392] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 238.241633][ T5392] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 238.279799][ T5392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.324793][ T5392] usb 6-1: config 0 descriptor?? [ 238.330566][ T8473] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 238.601033][ T4285] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 238.610087][ T5394] usb 6-1: USB disconnect, device number 9 done [ 238.979442][ T8508] loop3: detected capacity change from 0 to 2048 [ 239.053256][ T8508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.245851][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.334642][ T8505] loop6: detected capacity change from 0 to 8192 [ 239.382816][ T8512] device batadv_slave_0 entered promiscuous mode [ 239.467338][ T8512] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 239.791337][ T8524] loop3: detected capacity change from 0 to 64 [ 239.871046][ T8524] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 240.100698][ T8532] program syz.0.1427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.404682][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 241.056280][ T8527] loop6: detected capacity change from 0 to 32768 [ 241.108782][ T8527] [ 241.108782][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.108782][ T8527] [ 241.184845][ T26] audit: type=1326 audit(1778619971.668:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad739ce59 code=0x7ffc0000 [ 241.219647][ T8527] ERROR: (device loop6): diWrite: ixpxd invalid [ 241.219647][ T8527] killall: can't kill pid 7029: No such process [ 241.317427][ T26] audit: type=1326 audit(1778619971.698:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad739ce59 code=0x7ffc0000 [ 241.353891][ T8565] program syz.5.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.364134][ T8527] ERROR: (device loop6): txCommit: [ 241.364134][ T8527] [ 241.407833][ T8527] [ 241.407833][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.407833][ T8527] [ 241.449325][ T26] audit: type=1326 audit(1778619971.708:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad739ce59 code=0x7ffc0000 [ 241.485035][ T8527] [ 241.485035][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.485035][ T8527] [ 241.552233][ T8527] [ 241.552233][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.552233][ T8527] [ 241.592939][ T8527] [ 241.592939][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.592939][ T8527] [ 241.604772][ T26] audit: type=1326 audit(1778619971.708:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffad739ce59 code=0x7ffc0000 [ 241.656971][ T8527] [ 241.656971][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.656971][ T8527] [ 241.688678][ T8527] [ 241.688678][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.688678][ T8527] [ 241.712922][ T8574] device macvlan0 entered promiscuous mode [ 241.725233][ T26] audit: type=1326 audit(1778619971.708:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.2.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffad739ce59 code=0x7ffc0000 [ 241.770367][ T8527] [ 241.770367][ T8527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.770367][ T8527] [ 241.805180][ T106] [ 241.805180][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.805180][ T106] [ 241.823159][ T8574] device ipvlan1 entered promiscuous mode [ 241.837118][ T8574] device ipvlan1 left promiscuous mode [ 241.879276][ T8574] device macvlan0 left promiscuous mode [ 241.896773][ T7416] [ 241.896773][ T7416] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.896773][ T7416] [ 241.940250][ T7416] [ 241.940250][ T7416] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.940250][ T7416] Stopping klogd: OK Stopping acpid: [ 242.743888][ T951] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.935726][ T951] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.943743][ T8475] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 242.967090][ T951] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 242.993742][ T951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 243.016618][ T951] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 243.033762][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.041772][ T951] usb 1-1: Product: syz [ 243.047015][ T951] usb 1-1: Manufacturer: syz [ 243.078936][ T951] usb 1-1: SerialNumber: syz [ 243.134210][ T8475] usb 4-1: Using ep0 maxpacket: 16 [ 243.142243][ T8475] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 243.163817][ T8475] usb 4-1: config 0 has no interface number 0 [ 243.169987][ T8475] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 243.180756][ T8475] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 243.193361][ T8475] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 243.202833][ T8475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.210992][ T8475] usb 4-1: Product: syz [ 243.215579][ T8475] usb 4-1: Manufacturer: syz [ 243.220195][ T8475] usb 4-1: SerialNumber: syz [ 243.226550][ T8475] usb 4-1: config 0 descriptor?? [ 243.232144][ T8614] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.241073][ T8614] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.248511][ T5392] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.300217][ T951] usb 1-1: Can't get UAC3 power state for id 10 [ 243.339600][ T951] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 243.357712][ T951] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 243.393770][ T5037] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 243.423036][ T951] usb 1-1: USB disconnect, device number 13 [ 243.438854][ T5392] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 243.448831][ T5392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.462469][ T5392] usb 3-1: Product: syz [ 243.470050][ T8614] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.473204][ T5392] usb 3-1: Manufacturer: syz [ 243.477569][ T8614] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.482550][ T5392] usb 3-1: SerialNumber: syz [ 243.595237][ T5037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.606358][ T5037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.616211][ T5037] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 243.625397][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.637149][ T5037] usb 6-1: config 0 descriptor?? OK Stopping syslogd: [ 244.055491][ T5037] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 244.062602][ T5037] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 stopped /sbin/syslogd (pid 3620) OK [ 244.100337][ T5037] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 244.110039][ T8475] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 244.120287][ T5037] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 244.120343][ T5037] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 244.159234][ T5392] rtl8150 3-1:1.0: eth9: rtl8150 is detected [ 244.170084][ T8475] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 244.204750][ T8475] asix: probe of 4-1:0.251 failed with error -71 [ 244.214529][ T8475] usb 4-1: USB disconnect, device number 8 [ 244.392970][ T5392] usb 3-1: USB disconnect, device number 14 [ 244.453859][ T5037] hid-led: probe of 0003:27B8:01ED.000A failed with error -71 [ 244.466608][ T5037] usb 6-1: USB disconnect, device number 10 umount: can't remount debugfs read-only [ 245.059139][ T5392] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 245.155038][ T8670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1475'. [ 245.209697][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1477'. [ 245.253809][ T5392] usb 1-1: Using ep0 maxpacket: 16 [ 245.262882][ T5392] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.314145][ T5392] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 245.341650][ T5392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.383615][ T5392] usb 1-1: config 0 descriptor?? [ 245.609915][ T5037] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 245.794987][ T5037] usb 6-1: Using ep0 maxpacket: 16 [ 245.797807][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.827255][ T5037] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 245.828530][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.848653][ T5037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.864131][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.870053][ T5037] usb 6-1: Product: syz [ 245.878120][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.890187][ T5037] usb 6-1: Manufacturer: syz [ 245.905257][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.908106][ T5037] usb 6-1: SerialNumber: syz [ 245.912439][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.912466][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.912488][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.912510][ T5392] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 245.912530][ T5392] zeroplus 0003:0C12:0030.000B: item fetching failed at offset 12/41 [ 245.913033][ T5392] zeroplus 0003:0C12:0030.000B: parse failed [ 246.043040][ T5392] zeroplus: probe of 0003:0C12:0030.000B failed with error -22 [ 246.076690][ T5392] usb 1-1: USB disconnect, device number 14 [ 246.203303][ T5037] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 246.244517][ T5037] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.273340][ T5037] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 246.293179][ T5037] usb 6-1: media controller created umount: sysfs bu[ 246.349265][ T8686] loop2: detected capacity change from 0 to 256 sy - remounted r[ 246.352750][ T5037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. ead-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.209 closed by remote host. Sent SIGTERM to[ 246.490051][ T8686] FAT-fs (loop2): Directory bread(block 64) failed all processes [ 246.524044][ T8686] FAT-fs (loop2): Directory bread(block 65) failed [ 246.584658][ T8686] FAT-fs (loop2): Directory bread(block 66) failed [ 246.589247][ T5037] zl10353_read_register: readreg error (reg=127, ret==-71) [ 246.591797][ T8686] FAT-fs (loop2): Directory bread(block 67) failed [ 246.644545][ T8686] FAT-fs (loop2): Directory bread(block 68) failed [ 246.669062][ T8686] FAT-fs (loop2): Directory bread(block 69) failed [ 246.687499][ T5037] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5 [ 246.715008][ T5037] usb 6-1: USB disconnect, device number 11 [ 246.722287][ T8686] FAT-fs (loop2): Directory bread(block 70) failed [ 246.776961][ T8686] FAT-fs (loop2): Directory bread(block 71) failed [ 246.825316][ T8686] FAT-fs (loop2): Directory bread(block 72) failed [ 246.831950][ T8686] FAT-fs (loop2): Directory bread(block 73) failed [ 247.420183][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.555300][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.648801][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.711434][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.650769][ T65] device hsr_slave_0 left promiscuous mode [ 248.657194][ T65] device hsr_slave_1 left promiscuous mode [ 248.663426][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.671047][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.679439][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.688383][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.695912][ T65] device bridge_slave_1 left promiscuous mode [ 248.702057][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.710629][ T65] device bridge_slave_0 left promiscuous mode [ 248.716856][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.741443][ T65] device veth1_macvtap left promiscuous mode [ 248.747955][ T65] device veth0_macvtap left promiscuous mode [ 248.754058][ T65] device veth1_vlan left promiscuous mode [ 248.759807][ T65] device veth0_vlan left promiscuous mode [ 249.301312][ T65] team0 (unregistering): Port device team_slave_1 removed [ 249.347545][ T65] team0 (unregistering): Port device team_slave_0 removed [ 249.388332][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.430044][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.738406][ T65] bond0 (unregistering): Released all slaves [ 250.244935][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.323510][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.400383][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.451610][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.583376][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.656013][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.742173][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.811636][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.891681][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.973151][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.029238][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.068095][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.640987][ T65] device hsr_slave_0 left promiscuous mode [ 252.647814][ T65] device hsr_slave_1 left promiscuous mode [ 252.654180][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.661565][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.670869][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.678747][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.686417][ T65] device bridge_slave_1 left promiscuous mode [ 252.692561][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.705455][ T65] device hsr_slave_0 left promiscuous mode [ 252.712271][ T65] device hsr_slave_1 left promiscuous mode [ 252.718554][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.726447][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.734155][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.741734][ T65] device bridge_slave_1 left promiscuous mode [ 252.748067][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.756628][ T65] device bridge_slave_0 left promiscuous mode [ 252.762952][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.778496][ T65] device hsr_slave_0 left promiscuous mode [ 252.785399][ T65] device hsr_slave_1 left promiscuous mode [ 252.791624][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.799369][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.806909][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.814337][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.821746][ T65] device bridge_slave_1 left promiscuous mode [ 252.828017][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.835895][ T65] device bridge_slave_0 left promiscuous mode [ 252.842021][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.896249][ T65] device veth1_macvtap left promiscuous mode [ 252.902280][ T65] device veth0_macvtap left promiscuous mode [ 252.908479][ T65] device veth1_vlan left promiscuous mode [ 252.914414][ T65] device veth0_vlan left promiscuous mode [ 252.920986][ T65] device veth1_macvtap left promiscuous mode [ 252.927132][ T65] device veth0_macvtap left promiscuous mode [ 252.933172][ T65] device veth1_vlan left promiscuous mode [ 252.938995][ T65] device veth0_vlan left promiscuous mode [ 252.948118][ T65] device veth1_macvtap left promiscuous mode [ 252.954435][ T65] device veth0_macvtap left promiscuous mode [ 252.960602][ T65] device veth1_vlan left promiscuous mode [ 252.966726][ T65] device veth0_vlan left promiscuous mode [ 253.601061][ T65] team0 (unregistering): Port device team_slave_1 removed [ 253.647105][ T65] team0 (unregistering): Port device team_slave_0 removed [ 254.522212][ T65] team0 (unregistering): Port device team_slave_1 removed [ 254.569516][ T65] team0 (unregistering): Port device team_slave_0 removed [ 254.617529][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.660807][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.963271][ T65] bond0 (unregistering): Released all slaves [ 255.456632][ T65] team0 (unregistering): Port device team_slave_1 removed [ 255.498952][ T65] team0 (unregistering): Port device team_slave_0 removed [ 255.538696][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.582600][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.657861][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664253][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.889489][ T65] bond0 (unregistering): Released all slaves serialport: VM disconnected.