last executing test programs: 1m21.532398564s ago: executing program 0 (id=78): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) 1m21.376603113s ago: executing program 0 (id=80): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101080, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000002000)) 1m21.182169044s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0010007, 0x0, 0x5}]}) 1m20.812869336s ago: executing program 0 (id=86): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 1m20.446596557s ago: executing program 0 (id=91): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r0, 0x402, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r1, 0xffffffffffffffff, 0x43) 1m20.005389912s ago: executing program 0 (id=97): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x21) 1m19.713185099s ago: executing program 32 (id=97): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x21) 6.912220622s ago: executing program 1 (id=678): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x5, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 5.657321974s ago: executing program 1 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x80000000, 0x8, 0x3, 0xfffffff9, 0x5, 0x6, 0x2000400}]}) 5.004221271s ago: executing program 1 (id=688): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000280)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 4.8581169s ago: executing program 1 (id=689): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/25, 0x19) 4.559870697s ago: executing program 3 (id=692): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x3de26bb8a39e0da4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xfeffffff, 0xa99c, 0x0, 0xfffffffffe000001}) 3.898605435s ago: executing program 3 (id=697): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.568839974s ago: executing program 3 (id=699): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.956712439s ago: executing program 3 (id=703): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$2(0x2, 0x6, &(0x7f0000000200)=""/93) 2.892126073s ago: executing program 1 (id=704): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0xfff, 0x560c, {0x7, 0x5d5}, {0xfff8, 0x2}, @cond=[{0xff6a, 0x1, 0xb419, 0x2, 0x7, 0x6}, {0x5c9, 0x0, 0xfffe, 0x1, 0x7, 0xf5c9}]}) 2.457701338s ago: executing program 2 (id=707): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0xa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.170791094s ago: executing program 2 (id=709): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 2.002779044s ago: executing program 2 (id=710): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.843117053s ago: executing program 3 (id=711): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec08000000500000000000000ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x2000c000) 1.73200887s ago: executing program 3 (id=712): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e23, 0x1000000080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x900}, 0x1c, 0x0, 0x0, 0x0, 0x28}, 0x88c0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 656.301722ms ago: executing program 4 (id=715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xbb60, r0, 0x0, 0x0, 0x101, 0x0, 0x1, r0}, 0x0) 509.35039ms ago: executing program 4 (id=716): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2a8, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x294, 0x1, [@m_csum={0xd8, 0x19, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8000, 0xffffffffffffffff, 0xb8b8, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x4, 0x6, 0x1000, 0x101}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0xfffffffffffffff9, 0x9, 0x80000001}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x274bcf77, 0x5, 0x6, 0x8, 0x101}, 0x7d}}]}, {0x39, 0x6, "99599a989bd1b1fba50a4a29ffa7c682e6cfa07125a1335f6cc53bfcbdd0cec4b739e8072ad58b5153a6189bec7e227f7f9f2cb5c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x38, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb0e}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x50, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 472.171352ms ago: executing program 4 (id=718): syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000025c0)=ANY=[], 0x16, 0x236, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1fff) 416.253705ms ago: executing program 2 (id=719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 221.349707ms ago: executing program 2 (id=720): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 221.190367ms ago: executing program 4 (id=721): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x3, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10001}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x3, r1, r1, 0x4, 0x2, 0x2}) 124.078702ms ago: executing program 4 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) 61.391266ms ago: executing program 1 (id=723): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0x0, 0x0, 0x6) 984.979µs ago: executing program 4 (id=724): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000, 0x40000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=725): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x46, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) kernel console output (not intermixed with test programs): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 73.005893][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.024792][ T5832] usb 1-1: USB disconnect, device number 2 [ 73.037899][ T5832] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 73.065864][ T5832] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 73.076806][ T5832] visor 1-1:1.0: device disconnected [ 73.241582][ T5873] XFS (loop3): Ending clean mount [ 73.340981][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 73.523208][ T5819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.743346][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 73.762303][ T5819] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 73.787691][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.807516][ T5819] usb 2-1: Product: syz [ 73.813200][ T5819] usb 2-1: Manufacturer: syz [ 73.817942][ T5819] usb 2-1: SerialNumber: syz [ 73.838657][ T5819] usb 2-1: config 0 descriptor?? [ 73.853886][ T5819] gspca_main: se401-2.14.0 probing 047d:5003 [ 73.928872][ T5909] loop2: detected capacity change from 0 to 32768 [ 73.954045][ T5812] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.954122][ T5909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.20 (5909) [ 74.031182][ T5909] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.044806][ T5909] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 74.071363][ T5909] BTRFS info (device loop2): turning on async discard [ 74.080716][ T5909] BTRFS info (device loop2): use no compression [ 74.105303][ T5909] BTRFS info (device loop2): turning on sync discard [ 74.112019][ T5909] BTRFS info (device loop2): force clearing of disk cache [ 74.133164][ T5909] BTRFS info (device loop2): enabling auto defrag [ 74.139629][ T5909] BTRFS info (device loop2): disabling free space tree [ 74.158188][ T5913] loop3: detected capacity change from 0 to 32768 [ 74.171383][ T5812] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 74.185782][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.197699][ T5913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.19 (5913) [ 74.209986][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.220440][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 74.235240][ T5812] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 74.248088][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.257824][ T5913] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.270884][ T5812] usb 1-1: config 0 descriptor?? [ 74.279911][ T5913] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 74.328656][ T5913] BTRFS info (device loop3): using free space tree [ 74.366714][ T5909] BTRFS info (device loop2): enabling ssd optimizations [ 74.389594][ T5909] BTRFS info (device loop2): rebuilding free space tree [ 74.443714][ T5774] Bluetooth: hci0: command tx timeout [ 74.444152][ T51] Bluetooth: hci1: command tx timeout [ 74.454844][ T5913] BTRFS info (device loop3): enabling ssd optimizations [ 74.461805][ T5913] BTRFS info (device loop3): auto enabling async discard [ 74.504724][ T5819] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 74.514081][ T51] Bluetooth: hci2: command tx timeout [ 74.528883][ T5909] BTRFS info (device loop2): disabling free space tree [ 74.559974][ T5909] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.604164][ T51] Bluetooth: hci3: command tx timeout [ 74.604277][ T5909] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.771564][ T28] usb 2-1: USB disconnect, device number 2 [ 74.821894][ T5812] wacom 0003:056A:0331.0001: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 74.895947][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.101203][ T787] usb 1-1: USB disconnect, device number 3 [ 75.186531][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.805919][ T5963] loop0: detected capacity change from 0 to 128 [ 75.886984][ T5963] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 76.015811][ T5963] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 76.063404][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.264837][ T28] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 76.283288][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.334689][ T28] usb 2-1: config 0 descriptor?? [ 76.343860][ T28] cp210x 2-1:0.0: cp210x converter detected [ 76.768999][ T28] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 76.802230][ T28] usb 2-1: cp210x converter now attached to ttyUSB0 [ 77.065422][ T5812] usb 2-1: USB disconnect, device number 3 [ 77.091176][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.131851][ T5812] cp210x 2-1:0.0: device disconnected [ 77.641613][ T5976] loop2: detected capacity change from 0 to 65536 [ 77.706262][ T5976] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 77.742332][ T5990] loop3: detected capacity change from 0 to 32768 [ 77.787774][ T5990] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.39 (5990) [ 77.835764][ T5990] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 77.843612][ T5976] XFS (loop2): Ending clean mount [ 77.846126][ T5990] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 77.860434][ T5990] BTRFS info (device loop3): using free space tree [ 78.010412][ T5990] BTRFS info (device loop3): enabling ssd optimizations [ 78.030112][ T6009] loop1: detected capacity change from 0 to 4096 [ 78.042872][ T5990] BTRFS info (device loop3): auto enabling async discard [ 78.060686][ T5777] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 78.232203][ T6009] ntfs: volume version 3.1. [ 78.472047][ T6009] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 78.495050][ T5771] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 78.538620][ T6009] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 78.613308][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.757036][ T5761] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop3 scanned by udevd (5761) [ 78.853301][ T5859] usb 3-1: Using ep0 maxpacket: 8 [ 78.868412][ T5859] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 78.886793][ T5859] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.920508][ T5859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.948015][ T5859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.980685][ T5859] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.013512][ T5859] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.032780][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.063226][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.249977][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 79.266814][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.277269][ T8] usb 4-1: config 4 interface 0 has no altsetting 0 [ 79.288409][ T8] usb 4-1: string descriptor 0 read error: -22 [ 79.295651][ T5859] usb 3-1: GET_CAPABILITIES returned 0 [ 79.301972][ T5859] usbtmc 3-1:16.0: can't read capabilities [ 79.308051][ T8] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 79.324047][ T788] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 79.333812][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.358562][ T8] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 79.415666][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 79.431619][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 79.473342][ T8] usb 4-1: media controller created [ 79.544104][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.562147][ T788] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 79.573450][ T5859] usb 3-1: USB disconnect, device number 2 [ 79.581087][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.603242][ T788] usb 1-1: Product: syz [ 79.612836][ T788] usb 1-1: Manufacturer: syz [ 79.627807][ T788] usb 1-1: SerialNumber: syz [ 79.640710][ T6029] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 79.651079][ T788] usb 1-1: config 0 descriptor?? [ 79.844081][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 79.899039][ T8] usb 4-1: USB disconnect, device number 2 [ 79.924634][ T6033] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 80.092845][ T788] airspy 1-1:0.0: Board ID: 00 [ 80.097739][ T788] airspy 1-1:0.0: Firmware version: [ 80.105773][ T6033] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.133915][ T6033] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.158010][ T6033] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 80.173165][ T6033] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.193174][ T6033] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 80.211991][ T6033] usb 2-1: config 7 interface 0 has no altsetting 0 [ 80.219336][ T6033] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 80.234368][ T6033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.480161][ T6048] loop2: detected capacity change from 0 to 32768 [ 80.496789][ T788] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 80.521159][ T6048] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 80.542741][ T788] airspy 1-1:0.0: Registered as swradio24 [ 80.550317][ T788] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 80.565833][ T788] usb 1-1: USB disconnect, device number 4 [ 80.682331][ T6048] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 80.741358][ T6033] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0002/input/input9 [ 80.752124][ T6048] XFS (loop2): Starting recovery (logdev: internal) [ 80.797862][ T6048] XFS (loop2): Ending recovery (logdev: internal) [ 80.832519][ T6048] XFS (loop2): Quotacheck needed: Please wait. [ 80.892565][ T6033] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 80.954443][ T6048] XFS (loop2): Quotacheck: Done. [ 81.048106][ T5812] usb 2-1: USB disconnect, device number 4 [ 81.057178][ T6064] netlink: 168 bytes leftover after parsing attributes in process `syz.3.55'. [ 81.142242][ T6063] fido_id[6063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 81.219707][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 81.691191][ T27] audit: type=1326 audit(1770428869.552:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813fd9aeb9 code=0x7ffc0000 [ 81.753961][ T9] cfg80211: failed to load regulatory.db [ 81.808815][ T27] audit: type=1326 audit(1770428869.552:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813fd9aeb9 code=0x7ffc0000 [ 81.850152][ T6086] vlan2: entered promiscuous mode [ 81.868280][ T6086] bond0: entered promiscuous mode [ 81.881890][ T6086] bond_slave_0: entered promiscuous mode [ 81.893758][ T27] audit: type=1326 audit(1770428869.562:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f813fd9aeb9 code=0x7ffc0000 [ 81.899033][ T6086] bond_slave_1: entered promiscuous mode [ 81.923429][ T27] audit: type=1326 audit(1770428869.562:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.0.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f813fd9aeb9 code=0x0 [ 82.105786][ T6096] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.193873][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.309019][ T6102] Failed to get privilege flags for destination (handle=0x2:0xf7ffffff) [ 82.386790][ T787] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 82.396467][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.413310][ T787] usb 3-1: config 0 descriptor?? [ 82.642833][ T787] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 82.661901][ T787] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 82.662636][ T6113] loop3: detected capacity change from 0 to 1024 [ 82.871670][ T6119] loop1: detected capacity change from 0 to 256 [ 82.898997][ T787] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 82.920996][ T6119] exfat: Deprecated parameter 'utf8' [ 82.933672][ T787] [drm] Initialized udl on minor 2 [ 82.942770][ T6119] exfat: Deprecated parameter 'namecase' [ 82.966062][ T6119] exfat: Deprecated parameter 'utf8' [ 82.996258][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.82'. [ 83.053374][ T6119] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 83.083690][ T6123] kvm: kvm [6122]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x5 [ 83.094133][ T787] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 83.112069][ T787] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 83.136689][ T6119] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 83.368599][ T28] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 83.368773][ T6033] usb 3-1: USB disconnect, device number 3 [ 83.397129][ T28] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 83.438978][ T6132] loop0: detected capacity change from 0 to 1024 [ 83.645451][ T5768] hfsplus: bad catalog entry type [ 83.857545][ T6144] netlink: 'syz.3.92': attribute type 2 has an invalid length. [ 83.868022][ T6144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.92'. [ 84.004038][ T1118] hfsplus: b-tree write err: -5, ino 4 [ 84.123492][ T1099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.225546][ T787] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.236303][ T1099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.313868][ T1099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.424537][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 84.432461][ T787] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 84.447583][ T1099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.461323][ T787] usb 4-1: config 1 has no interface number 0 [ 84.468476][ T787] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.483538][ T787] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.495132][ T787] usb 4-1: config 1 interface 105 has no altsetting 0 [ 84.501175][ T6155] loop2: detected capacity change from 0 to 256 [ 84.506316][ T787] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 84.523613][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.542203][ T787] usb 4-1: Product: syz [ 84.549402][ T787] usb 4-1: Manufacturer: syz [ 84.583277][ T787] usb 4-1: SerialNumber: syz [ 84.613015][ T6146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.643782][ T6146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.701704][ T6155] FAT-fs (loop2): Directory bread(block 64) failed [ 84.742458][ T6155] FAT-fs (loop2): Directory bread(block 65) failed [ 84.774604][ T6155] FAT-fs (loop2): Directory bread(block 66) failed [ 84.781172][ T6155] FAT-fs (loop2): Directory bread(block 67) failed [ 84.853271][ T6155] FAT-fs (loop2): Directory bread(block 68) failed [ 84.859844][ T6155] FAT-fs (loop2): Directory bread(block 69) failed [ 84.940267][ T6155] FAT-fs (loop2): Directory bread(block 70) failed [ 84.993270][ T6155] FAT-fs (loop2): Directory bread(block 71) failed [ 85.052143][ T6155] FAT-fs (loop2): Directory bread(block 72) failed [ 85.063543][ T6155] FAT-fs (loop2): Directory bread(block 73) failed [ 85.158993][ T6146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.173538][ T6146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.454041][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.463316][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.488019][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.504987][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.520323][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.530134][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.646780][ T787] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.675153][ T787] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.705041][ T787] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.825174][ T787] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:02:a3:2e:64:49 [ 85.846554][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.104'. [ 85.879699][ T787] usb 4-1: USB disconnect, device number 3 [ 85.887268][ T787] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 86.023571][ T787] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 86.053789][ T787] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 86.090438][ T787] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 86.423606][ T6173] loop1: detected capacity change from 0 to 32768 [ 86.621463][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 86.657950][ T6173] ea_get: invalid extended attribute [ 86.693306][ T6173] ffff88805d8d3170: 04 00 00 00 .... [ 86.734807][ T6190] ea_get: invalid extended attribute [ 86.740134][ T6190] ffff88805d8d3170: 04 00 00 00 .... [ 86.778302][ T6191] ea_get: invalid extended attribute [ 86.795585][ T6191] ffff88805d8d3170: 04 00 00 00 .... [ 87.186764][ T6181] loop2: detected capacity change from 0 to 32768 [ 87.267887][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.293364][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.300591][ T6163] bridge_slave_0: entered allmulticast mode [ 87.366789][ T6163] bridge_slave_0: entered promiscuous mode [ 87.371958][ T6181] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.379975][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.389054][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.403331][ T6163] bridge_slave_1: entered allmulticast mode [ 87.434715][ T6163] bridge_slave_1: entered promiscuous mode [ 87.505894][ T6181] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free [ 87.525979][ T1099] hsr_slave_0: left promiscuous mode [ 87.545443][ T6181] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 87.561656][ T1099] hsr_slave_1: left promiscuous mode [ 87.574435][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.592525][ T6181] OCFS2: File system is now read-only. [ 87.603426][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.609062][ T6181] (syz.2.105,6181,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 87.624634][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.641534][ T51] Bluetooth: hci0: command tx timeout [ 87.651657][ T6181] (syz.2.105,6181,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 87.652530][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.681122][ T6181] (syz.2.105,6181,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 87.690416][ T1099] bridge_slave_1: left allmulticast mode [ 87.694193][ T6181] (syz.2.105,6181,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 87.703195][ T1099] bridge_slave_1: left promiscuous mode [ 87.707672][ T6181] (syz.2.105,6181,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 87.710922][ T6187] loop3: detected capacity change from 0 to 32768 [ 87.724719][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.732371][ T6181] (syz.2.105,6181,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 87.750904][ T6181] (syz.2.105,6181,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 87.759437][ T1099] bridge_slave_0: left allmulticast mode [ 87.771224][ T1099] bridge_slave_0: left promiscuous mode [ 87.777288][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.778534][ T6181] (syz.2.105,6181,1):ocfs2_symlink:1944 ERROR: status = -30 [ 87.850430][ T1099] veth1_macvtap: left promiscuous mode [ 87.851663][ T6187] add_index: next_index = 0. Resetting! [ 87.856486][ T1099] veth0_macvtap: left promiscuous mode [ 87.856673][ T1099] veth1_vlan: left promiscuous mode [ 87.874773][ T6181] (syz.2.105,6181,0):ocfs2_symlink:2068 ERROR: status = -30 [ 87.888944][ T1099] veth0_vlan: left promiscuous mode [ 87.896385][ T6187] find_entry called with index >= next_index [ 87.913051][ T6187] find_entry called with index >= next_index [ 87.919199][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.948393][ T6187] find_entry called with index >= next_index [ 87.973386][ T6187] find_entry called with index >= next_index [ 88.000184][ T27] audit: type=1800 audit(1770428875.862:6): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.106" name=01 dev="loop3" ino=7 res=0 errno=0 [ 88.082243][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 88.133247][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 88.149121][ T5812] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 88.173201][ T5812] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.196077][ T5812] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 88.223174][ T5812] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.253220][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.268948][ T5812] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.288860][ T5812] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.313210][ T5812] usb 2-1: Product: syz [ 88.317408][ T5812] usb 2-1: Manufacturer: syz [ 88.322067][ T5812] usb 2-1: SerialNumber: syz [ 88.364236][ T5812] usb 2-1: config 0 descriptor?? [ 88.376333][ T5812] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 88.404707][ T5812] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 88.540552][ T6217] loop2: detected capacity change from 0 to 4096 [ 88.557996][ T6217] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 88.680952][ T6213] ldusb 2-1:0.0: Write buffer overflow, 2 bytes dropped [ 88.730645][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 88.740845][ T788] usb 2-1: USB disconnect, device number 5 [ 88.740897][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 88.758520][ T6213] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -32 [ 88.782405][ T788] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 89.160074][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 89.229490][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 89.302917][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.381295][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.713592][ T51] Bluetooth: hci0: command tx timeout [ 89.805321][ T1099] bond0 (unregistering): Released all slaves [ 89.922281][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.935843][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.947962][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 90.088736][ T6238] loop1: detected capacity change from 0 to 512 [ 90.100290][ T6238] EXT4-fs: Ignoring removed i_version option [ 90.117484][ T6238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.159271][ T6238] EXT4-fs (loop1): 1 truncate cleaned up [ 90.172202][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.376141][ T6163] team0: Port device team_slave_0 added [ 90.404424][ T6163] team0: Port device team_slave_1 added [ 90.411431][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.496462][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.514811][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.603776][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.622339][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.643296][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.693617][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.878925][ T6163] hsr_slave_0: entered promiscuous mode [ 90.895920][ T6163] hsr_slave_1: entered promiscuous mode [ 90.912681][ T6163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.921570][ T6163] Cannot create hsr debugfs directory [ 90.971399][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 91.522855][ T6163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.559631][ T6163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.577690][ T6163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.606640][ T6163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.795307][ T51] Bluetooth: hci0: command tx timeout [ 91.930462][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.014532][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.044420][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.051570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.094575][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.101734][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.748770][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.523187][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.545033][ T6163] veth0_vlan: entered promiscuous mode [ 93.557622][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 93.568949][ T6163] veth1_vlan: entered promiscuous mode [ 93.591909][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 93.646210][ T6163] veth0_macvtap: entered promiscuous mode [ 93.663867][ T6163] veth1_macvtap: entered promiscuous mode [ 93.706875][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.733210][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 93.743155][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.765322][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.788314][ T9] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 93.803142][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.812980][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.822801][ T6366] process 'syz.2.152' launched './file0' with NULL argv: empty string added [ 93.823535][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.850567][ T9] usb 2-1: Product: syz [ 93.854808][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.875610][ T9] usb 2-1: Manufacturer: syz [ 93.880236][ T9] usb 2-1: SerialNumber: syz [ 93.885074][ T51] Bluetooth: hci0: command tx timeout [ 93.894719][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.913398][ T9] usb 2-1: config 0 descriptor?? [ 93.937813][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.991191][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.056131][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.112019][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.143642][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.166450][ T9] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 94.190706][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.222102][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.298597][ T6163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.314001][ T6163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.332907][ T6163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353602][ T6163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.477239][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.483473][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.485332][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.498529][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.500451][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.515984][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.516128][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.516262][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.516400][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.516535][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.516685][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.558498][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.563208][ T6381] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.620383][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.635462][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.675425][ T787] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.702717][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.728601][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 94.768935][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.798452][ T787] usb 4-1: config 0 descriptor?? [ 94.885522][ T9] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 95.226531][ T5859] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.252711][ T787] apple 0003:05AC:027A.0003: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 95.330634][ T9] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 95.347819][ T9] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 95.444237][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 95.451597][ T5859] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 95.493483][ T5859] usb 3-1: config 0 has no interface number 0 [ 95.495278][ T23] usb 4-1: USB disconnect, device number 4 [ 95.545117][ T5859] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 95.579248][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.603156][ T5859] usb 3-1: Product: syz [ 95.610676][ T5859] usb 3-1: Manufacturer: syz [ 95.628141][ T5859] usb 3-1: SerialNumber: syz [ 95.648409][ T5859] usb 3-1: config 0 descriptor?? [ 95.675615][ T5859] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 95.677388][ T787] usb 2-1: USB disconnect, device number 6 [ 95.773507][ T6414] loop4: detected capacity change from 0 to 256 [ 95.780786][ T6414] exfat: Deprecated parameter 'namecase' [ 95.791694][ T6414] exfat: Deprecated parameter 'utf8' [ 95.840317][ T6414] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 95.910125][ T5859] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 95.926919][ T5859] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 96.414011][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 96.416556][ T23] usb 3-1: USB disconnect, device number 4 [ 96.451698][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 96.464123][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.513438][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 96.552464][ T23] quatech2 3-1:0.51: device disconnected [ 96.663412][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 96.680293][ T787] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 96.710089][ T787] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.746447][ T787] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.770263][ T787] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.786530][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.800423][ T787] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.811545][ T787] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.820251][ T787] usb 5-1: Product: syz [ 96.824936][ T787] usb 5-1: Manufacturer: syz [ 96.837434][ T787] usb 5-1: SerialNumber: syz [ 96.854862][ T787] usb 5-1: config 0 descriptor?? [ 96.868610][ T787] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.883485][ T787] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.953356][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.983240][ T5859] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.061354][ T6451] tun0: tun_chr_ioctl cmd 1074025692 [ 97.153527][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 97.171154][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.173342][ T6421] ldusb 5-1:0.0: Write buffer overflow, 2 bytes dropped [ 97.193592][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 97.201709][ T8] usb 2-1: config 4 interface 0 has no altsetting 0 [ 97.209683][ T5859] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 97.221376][ T5859] usb 4-1: config 0 has no interface number 0 [ 97.221859][ T5805] usb 5-1: USB disconnect, device number 2 [ 97.227625][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 97.232420][ T5859] usb 4-1: config 0 interface 147 has no altsetting 0 [ 97.240805][ T6421] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 97.262222][ T8] usb 2-1: string descriptor 0 read error: -22 [ 97.270515][ T5859] usb 4-1: New USB device found, idVendor=1342, idProduct=0204, bcdDevice=40.e2 [ 97.283317][ T8] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 97.292691][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.301016][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.310270][ T5859] usb 4-1: Product: syz [ 97.314750][ T5859] usb 4-1: Manufacturer: syz [ 97.333717][ T5805] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 97.335025][ T5859] usb 4-1: SerialNumber: syz [ 97.347906][ T8] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 97.388077][ T5859] usb 4-1: config 0 descriptor?? [ 97.394609][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.427781][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 97.445162][ T8] usb 2-1: media controller created [ 97.511789][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.607362][ T6441] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 97.672365][ T5859] kaweth 4-1:0.147: Firmware present in device. [ 97.809272][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 97.835733][ T5859] kaweth 4-1:0.147: Statistics collection: 0 [ 97.848815][ T5859] kaweth 4-1:0.147: Multicast filter limit: 0 [ 97.866025][ T5859] kaweth 4-1:0.147: MTU: 0 [ 97.870492][ T5859] kaweth 4-1:0.147: Read MAC address 00:00:00:00:00:00 [ 97.911620][ T8] usb 2-1: USB disconnect, device number 7 [ 98.239385][ T5859] kaweth 4-1:0.147: Error setting SOFS wait [ 98.257680][ T5859] kaweth: probe of 4-1:0.147 failed with error -5 [ 98.286496][ T5859] usb 4-1: USB disconnect, device number 5 [ 98.440903][ T6488] loop4: detected capacity change from 0 to 4096 [ 99.621592][ T6513] loop2: detected capacity change from 0 to 4096 [ 99.648010][ T6513] ntfs3: Unknown parameter 'windowv_names' [ 99.863115][ C0] sched: RT throttling activated [ 100.138052][ T6497] loop4: detected capacity change from 0 to 32768 [ 100.242263][ T6497] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.358996][ T6497] XFS (loop4): Ending clean mount [ 100.409538][ T6497] XFS (loop4): Quotacheck needed: Please wait. [ 100.481070][ T6497] XFS (loop4): Quotacheck: Done. [ 100.641488][ T6163] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.870074][ T6533] loop2: detected capacity change from 0 to 512 [ 100.929071][ T6533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.978889][ T6533] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.045617][ T6500] loop1: detected capacity change from 0 to 262144 [ 101.055183][ T6500] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.185 (6500) [ 101.074858][ T6500] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 101.085071][ T6500] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 101.094469][ T6500] BTRFS info (device loop1): using free space tree [ 101.163200][ T6500] BTRFS info (device loop1): enabling ssd optimizations [ 101.252680][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.366604][ T5775] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 102.383320][ T5859] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.558478][ T6588] loop1: detected capacity change from 0 to 256 [ 102.583205][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.585138][ T6588] FAT-fs (loop1): Unrecognized mount option "uni_xlate?1" or missing value [ 102.621095][ T5859] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 102.635811][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.648661][ T5859] usb 4-1: Product: syz [ 102.652846][ T5859] usb 4-1: Manufacturer: syz [ 102.657973][ T5859] usb 4-1: SerialNumber: syz [ 102.665441][ T5859] usb 4-1: config 0 descriptor?? [ 102.672858][ T5859] hub 4-1:0.0: bad descriptor, ignoring hub [ 102.683150][ T5859] hub: probe of 4-1:0.0 failed with error -5 [ 102.689888][ T5859] f81232 4-1:0.0: f81534a converter detected [ 102.793824][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 102.797634][ T6588] tipc: Started in network mode [ 102.806669][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.812912][ T6588] tipc: Node identity 5f3d302c73686f72, cluster identity 4711 [ 102.832247][ T6588] tipc: Enabling of bearer rejected, failed to enable media [ 102.839926][ T23] usb 5-1: config 4 interface 0 has no altsetting 0 [ 102.862812][ T23] usb 5-1: string descriptor 0 read error: -22 [ 102.879387][ T23] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 102.894964][ T5859] usb 4-1: f81534a converter now attached to ttyUSB0 [ 102.909669][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.003990][ T23] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 103.023008][ T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.065904][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 103.098346][ T23] usb 5-1: media controller created [ 103.169807][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.269725][ T6584] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 103.290568][ T5859] usb 4-1: USB disconnect, device number 6 [ 103.328714][ T5859] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 103.356504][ T5859] f81232 4-1:0.0: device disconnected [ 103.472159][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.555478][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.609712][ T23] usb 5-1: USB disconnect, device number 3 [ 103.753351][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 103.778837][ T787] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 103.797403][ T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 103.833283][ T787] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 103.863210][ T787] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 103.876759][ T6615] netlink: 428 bytes leftover after parsing attributes in process `syz.3.209'. [ 103.876821][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.209'. [ 103.941931][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.982796][ T787] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 104.022595][ T787] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 104.042794][ T787] usb 2-1: Product: syz [ 104.049704][ T787] usb 2-1: Manufacturer: syz [ 104.071502][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 104.086007][ T787] usb 2-1: SerialNumber: syz [ 104.096112][ T787] usb 2-1: config 0 descriptor?? [ 104.106290][ T787] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 104.138911][ T787] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 104.656567][ T8] usb 2-1: USB disconnect, device number 8 [ 104.685331][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 104.785283][ T6637] loop3: detected capacity change from 0 to 32768 [ 104.809427][ T6637] JBD2: Ignoring recovery information on journal [ 104.858099][ T6637] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.933439][ T6637] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 104.951275][ T6637] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 104.961180][ T6637] OCFS2: File system is now read-only. [ 104.966820][ T6637] (syz.3.215,6637,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 104.974629][ T6637] (syz.3.215,6637,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 104.982379][ T6637] (syz.3.215,6637,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 104.992936][ T6637] (syz.3.215,6637,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 105.002742][ T6637] (syz.3.215,6637,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 105.011584][ T6637] (syz.3.215,6637,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 105.019934][ T6637] (syz.3.215,6637,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 105.028710][ T6637] (syz.3.215,6637,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 105.037090][ T6637] (syz.3.215,6637,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 105.045508][ T6637] (syz.3.215,6637,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 105.053992][ T6637] (syz.3.215,6637,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 105.062432][ T6637] (syz.3.215,6637,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 105.071538][ T6637] (syz.3.215,6637,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 105.080906][ T6637] (syz.3.215,6637,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 105.089155][ T6637] (syz.3.215,6637,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 105.097050][ T6637] (syz.3.215,6637,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 105.106651][ T6637] (syz.3.215,6637,1):ocfs2_mknod:298 ERROR: status = -30 [ 105.113759][ T6637] (syz.3.215,6637,1):ocfs2_mknod:502 ERROR: status = -30 [ 105.120809][ T6637] (syz.3.215,6637,1):ocfs2_create:676 ERROR: status = -30 [ 105.150449][ T6637] syz.3.215 (6637) used greatest stack depth: 17712 bytes left [ 105.248958][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 105.403919][ T6653] loop1: detected capacity change from 0 to 4096 [ 105.574782][ T6658] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.691722][ T6653] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 105.747083][ T6653] Remounting filesystem read-only [ 105.861939][ T6668] pim6reg: entered allmulticast mode [ 105.887777][ T6667] pim6reg: left allmulticast mode [ 105.940165][ T6653] NILFS (loop1): the device already has a read-only mount. [ 106.068256][ T5775] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 106.084095][ T5775] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 106.122140][ T6672] loop3: detected capacity change from 0 to 16 [ 106.159043][ T6650] loop2: detected capacity change from 0 to 32768 [ 106.164864][ T6672] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.273936][ T6650] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.557627][ T6675] loop4: detected capacity change from 0 to 8192 [ 106.602417][ T6675] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.672571][ T6650] XFS (loop2): Ending clean mount [ 106.703881][ T6675] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 106.728227][ T6675] REISERFS (device loop4): using ordered data mode [ 106.731147][ T6650] XFS (loop2): Quotacheck needed: Please wait. [ 106.735273][ T6675] reiserfs: using flush barriers [ 106.769120][ T6675] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.824179][ T6675] REISERFS (device loop4): checking transaction log (loop4) [ 106.848590][ T6650] XFS (loop2): Quotacheck: Done. [ 107.080847][ T6675] REISERFS (device loop4): Using tea hash to sort names [ 107.096477][ T6675] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 107.297352][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.043261][ T5805] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.215173][ T6724] loop1: detected capacity change from 0 to 4096 [ 108.223709][ T6728] loop2: detected capacity change from 0 to 512 [ 108.245734][ T6724] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 108.268353][ T5805] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.278682][ T6724] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 108.280402][ T6724] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 108.325063][ T5805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.348840][ T5805] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 108.368545][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.411167][ T5805] usb 5-1: config 0 descriptor?? [ 108.542307][ T6728] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.553738][ T6728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.600742][ T6728] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.241: bad orphan inode 131083 [ 108.625180][ T6728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.899366][ T5805] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x1 [ 108.933452][ T5805] holtek_kbd 0003:04D9:A055.0004: item fetching failed at offset 2/3 [ 108.946757][ T6745] loop3: detected capacity change from 0 to 256 [ 108.954974][ T5805] holtek_kbd: probe of 0003:04D9:A055.0004 failed with error -22 [ 108.974512][ T6745] exfat: Deprecated parameter 'utf8' [ 109.002017][ T6728] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 109.036757][ T6745] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 109.176876][ T5859] usb 5-1: USB disconnect, device number 4 [ 109.266714][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.419586][ T6751] loop1: detected capacity change from 0 to 4096 [ 109.438912][ T6751] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 109.509253][ T6751] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 109.564848][ T6751] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 109.617891][ T6751] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 109.652373][ T6751] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 109.667926][ T6764] capability: warning: `syz.3.251' uses 32-bit capabilities (legacy support in use) [ 109.717411][ T6751] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 109.743301][ T6764] loop3: detected capacity change from 0 to 64 [ 109.747358][ T6751] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 109.827153][ T6751] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 109.856087][ T6751] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 109.918532][ T6751] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 109.964005][ T6751] ntfs: volume version 3.1. [ 110.368488][ T6778] netlink: 'syz.4.254': attribute type 3 has an invalid length. [ 110.423247][ T5805] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.528715][ T6765] loop2: detected capacity change from 0 to 32768 [ 110.536668][ T6784] Zero length message leads to an empty skb [ 110.614368][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 110.660608][ T5805] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 110.703305][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.727066][ T5805] usb 4-1: config 0 descriptor?? [ 110.948910][ T5805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 110.985360][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.024200][ T5805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 111.037859][ T5805] usb 4-1: media controller created [ 111.119531][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.201125][ T5805] az6027: usb out operation failed. (-71) [ 111.237983][ T5805] az6027: usb out operation failed. (-71) [ 111.272229][ T5805] stb0899_attach: Driver disabled by Kconfig [ 111.283204][ T5805] az6027: no front-end attached [ 111.283204][ T5805] [ 111.310754][ T5805] az6027: usb out operation failed. (-71) [ 111.316727][ T5805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 111.350925][ T5805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 111.364275][ T6810] loop2: detected capacity change from 0 to 2048 [ 111.412512][ T5805] dvb-usb: schedule remote query interval to 400 msecs. [ 111.426585][ T5805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 111.467867][ T5805] usb 4-1: USB disconnect, device number 7 [ 111.469491][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 111.649843][ T6810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.730800][ T6810] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 111.735234][ T5805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 111.779438][ T6810] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.779438][ T6810] [ 111.831998][ T6810] EXT4-fs (loop2): Total free blocks count 0 [ 111.853611][ T6810] EXT4-fs (loop2): Free/Dirty block details [ 111.866309][ T6810] EXT4-fs (loop2): free_blocks=2415919104 [ 111.872285][ T6810] EXT4-fs (loop2): dirty_blocks=32 [ 111.878349][ T6810] EXT4-fs (loop2): Block reservation details [ 111.884781][ T6810] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 111.912623][ T6828] input: syz1 as /devices/virtual/input/input11 [ 112.155249][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 112.476411][ T6846] loop2: detected capacity change from 0 to 2048 [ 112.544229][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.608358][ T6846] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.754962][ T6846] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3 [ 112.835110][ T6866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.851493][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.129406][ T6880] loop1: detected capacity change from 0 to 16 [ 113.148859][ T6880] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.185760][ T6880] capability: warning: `syz.1.279' uses deprecated v2 capabilities in a way that may be insecure [ 113.330171][ T6033] kernel read not supported for file /dsp (pid: 6033 comm: kworker/0:5) [ 113.663766][ T6898] veth0: entered promiscuous mode [ 113.694835][ T6896] veth0: left promiscuous mode [ 113.741801][ T6901] loop4: detected capacity change from 0 to 512 [ 113.836138][ T6901] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.287: corrupted in-inode xattr: invalid ea_ino [ 113.888164][ T6901] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.287: couldn't read orphan inode 15 (err -117) [ 113.913234][ T787] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 114.004702][ T6901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.105567][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.126894][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 114.161330][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.191723][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.220438][ T6163] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.225507][ T787] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.248937][ T787] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.283194][ T787] usb 2-1: Manufacturer: syz [ 114.308184][ T787] usb 2-1: config 0 descriptor?? [ 114.372709][ T6893] loop3: detected capacity change from 0 to 32768 [ 114.447115][ T6922] loop2: detected capacity change from 0 to 1024 [ 114.462083][ T6893] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.615912][ T6893] XFS (loop3): Ending clean mount [ 114.677456][ T6893] XFS (loop3): Quotacheck needed: Please wait. [ 114.730272][ T6893] XFS (loop3): Quotacheck: Done. [ 114.788753][ T787] rc_core: IR keymap rc-hauppauge not found [ 114.821197][ T787] Registered IR keymap rc-empty [ 114.839967][ T1118] hfsplus: bad catalog file entry [ 114.854557][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.866287][ T1118] hfsplus: b-tree write err: -5, ino 3 [ 114.897179][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.970276][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.005169][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 115.073324][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.091912][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.119318][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.224544][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.264157][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.323321][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.384138][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.421584][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.477582][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.533246][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.577949][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.633534][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.693590][ T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.746286][ T787] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.756509][ T787] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.784886][ T787] usb 2-1: USB disconnect, device number 9 [ 115.999372][ T6969] loop2: detected capacity change from 0 to 4096 [ 116.083982][ T6969] ntfs: volume version 3.1. [ 116.145600][ T6969] __ntfs_error: 13 callbacks suppressed [ 116.145615][ T6969] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 116.193264][ T5805] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.213897][ T6969] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 116.249840][ T6969] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 116.261174][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.414715][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 116.453432][ T5805] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.499916][ T5805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.507496][ T5805] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 116.521366][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.575359][ T5805] usb 5-1: config 0 descriptor?? [ 116.690306][ T6990] loop2: detected capacity change from 0 to 1024 [ 116.772646][ T6990] hfsplus: bad catalog entry type [ 116.825731][ T1099] hfsplus: b-tree write err: -5, ino 4 [ 117.030259][ T5805] aquacomputer_d5next 0003:0C70:F00E.0005: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.4-1/input0 [ 117.082180][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 117.375445][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 117.399310][ T7014] batman_adv: batadv0: Adding interface: macvtap0 [ 117.405996][ T7014] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.426835][ T5805] usb 5-1: USB disconnect, device number 5 [ 117.439324][ T7014] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 117.674334][ T7022] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 117.921551][ T7032] loop2: detected capacity change from 0 to 4096 [ 117.933398][ T7032] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 117.984823][ T7032] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 118.274227][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 118.281285][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.873265][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.940567][ T7066] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 118.945216][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 119.078947][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 119.084552][ T7072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.099812][ T787] usb 2-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 119.112894][ T787] usb 2-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 119.128044][ T787] usb 2-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.141381][ T27] audit: type=1326 audit(1770428907.012:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca3a59aeb9 code=0x0 [ 119.163406][ T5774] Bluetooth: hci0: command 0x0405 tx timeout [ 119.168746][ T787] usb 2-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.179748][ T7072] wireguard0: entered promiscuous mode [ 119.186051][ T7072] wireguard0: entered allmulticast mode [ 119.193771][ T787] usb 2-1: config 173 interface 0 has no altsetting 0 [ 119.200763][ T787] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.237618][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.654847][ T7083] loop4: detected capacity change from 0 to 256 [ 119.699994][ T787] hid (null): nested delimiters [ 119.716255][ T7083] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.718647][ T787] hid (null): nested delimiters [ 119.738708][ T787] hid (null): nested delimiters [ 119.743786][ T787] hid (null): report_id 24797 is invalid [ 119.969520][ T6033] usb 2-1: USB disconnect, device number 10 [ 120.033559][ T7091] loop3: detected capacity change from 0 to 256 [ 120.326335][ T7097] loop3: detected capacity change from 0 to 128 [ 120.381443][ T7093] loop2: detected capacity change from 0 to 32768 [ 120.386752][ T7097] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.409309][ T7097] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.436182][ T7093] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 120.473231][ T7093] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.498231][ T7093] (syz.2.338,7093,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 120.506658][ T7093] (syz.2.338,7093,0):ocfs2_search_chain:1761 ERROR: status = -12 [ 120.514662][ T7093] (syz.2.338,7093,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 120.522414][ T7093] (syz.2.338,7093,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -12 [ 120.530814][ T7093] (syz.2.338,7093,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12 [ 120.539222][ T7093] (syz.2.338,7093,0):__ocfs2_claim_clusters:2365 ERROR: status = -12 [ 120.547355][ T7093] (syz.2.338,7093,0):__ocfs2_claim_clusters:2373 ERROR: status = -12 [ 120.555502][ T7093] (syz.2.338,7093,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 120.567006][ T7093] (syz.2.338,7093,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 120.576238][ T7093] (syz.2.338,7093,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 120.585425][ T7093] (syz.2.338,7093,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 120.594833][ T7093] (syz.2.338,7093,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 120.603604][ T7093] (syz.2.338,7093,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 120.612733][ T7093] (syz.2.338,7093,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 120.622991][ T7093] (syz.2.338,7093,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 120.632420][ T7093] (syz.2.338,7093,0):ocfs2_symlink:1914 ERROR: status = -12 [ 120.639911][ T7093] (syz.2.338,7093,0):ocfs2_symlink:2068 ERROR: status = -12 [ 120.712215][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.794499][ T6033] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.806231][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 121.023189][ T6033] usb 5-1: Using ep0 maxpacket: 16 [ 121.035344][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.067447][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.113377][ T6033] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.156723][ T6033] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.193185][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.218750][ T6033] usb 5-1: config 0 descriptor?? [ 121.352777][ T7123] loop3: detected capacity change from 0 to 4096 [ 121.374792][ T7123] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 121.400262][ T7123] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 121.412365][ T7123] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 121.453480][ T7123] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 121.465050][ T7123] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 121.489116][ T7123] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 121.503547][ T7123] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 121.564318][ T7123] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 121.633381][ T7123] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 121.692908][ T7123] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 121.694317][ T6033] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input13 [ 121.730688][ T7123] ntfs: volume version 3.1. [ 121.757289][ T6033] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 122.025734][ T6033] usb 5-1: USB disconnect, device number 6 [ 122.438042][ T7142] loop2: detected capacity change from 0 to 128 [ 122.486115][ T7142] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 122.517504][ T7142] hpfs: filesystem error: improperly stopped [ 122.527281][ T7142] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 122.535258][ T7142] hpfs: You really don't want any checks? You are crazy... [ 122.561026][ T7142] hpfs: hpfs_map_sector(): read error [ 122.581975][ T7142] hpfs: code page support is disabled [ 122.604533][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 122.631082][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 122.646447][ T7142] hpfs: filesystem error: unable to find root dir [ 122.756098][ T7142] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 123.141259][ T7159] netlink: 152 bytes leftover after parsing attributes in process `syz.2.366'. [ 123.157846][ T7159] tipc: Started in network mode [ 123.162766][ T7159] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 123.179809][ T7159] tipc: Enabled bearer , priority 10 [ 123.359746][ T7167] loop3: detected capacity change from 0 to 512 [ 123.367765][ T7167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.379954][ T7167] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.391019][ T7167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.422899][ T7167] EXT4-fs (loop3): 1 truncate cleaned up [ 123.439055][ T7167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.668380][ T7175] loop1: detected capacity change from 0 to 2048 [ 123.671988][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.733520][ T7175] loop1: p2 < > p4 [ 123.749080][ T7175] loop1: p4 size 262144 extends beyond EOD, truncated [ 123.836136][ T5775] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 123.836249][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.844168][ T5759] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.912117][ T5759] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.912625][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.959709][ T5759] Buffer I/O error on dev loop1p4, logical block 1, async page read [ 123.964496][ T5778] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 124.003404][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.016158][ T5778] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 124.055047][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.103203][ T5778] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 124.123774][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.161105][ T5778] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 124.190151][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.223154][ T5778] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 124.305376][ T6033] tipc: Node number set to 4269801514 [ 124.344598][ T7192] loop2: detected capacity change from 0 to 4096 [ 124.408933][ T7192] ntfs: volume version 3.1. [ 124.426741][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 124.440448][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 125.045192][ T7201] loop2: detected capacity change from 0 to 8192 [ 125.085133][ T7201] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.152530][ T7201] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 125.162618][ T7201] REISERFS (device loop2): using ordered data mode [ 125.169260][ T7201] reiserfs: using flush barriers [ 125.199578][ T7201] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.216236][ T7201] REISERFS (device loop2): checking transaction log (loop2) [ 125.228086][ T7201] REISERFS (device loop2): Using r5 hash to sort names [ 125.238250][ T7201] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 125.260144][ T7201] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 125.333258][ T7201] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 125.355684][ T7201] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 125.400101][ T7207] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 125.425558][ T7201] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 125.618197][ T7197] loop4: detected capacity change from 0 to 32768 [ 125.699755][ T7197] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.822786][ T7197] XFS (loop4): Ending clean mount [ 125.862379][ T7197] XFS (loop4): Quotacheck needed: Please wait. [ 125.976950][ T7197] XFS (loop4): Quotacheck: Done. [ 126.330617][ T6163] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.620854][ T7230] loop2: detected capacity change from 0 to 1024 [ 126.633983][ T8] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 126.843849][ T7239] loop4: detected capacity change from 0 to 256 [ 126.856981][ T7239] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.875634][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.903214][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.909785][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 126.909797][ T27] audit: type=1800 audit(1770428914.772:18): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.397" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 126.931515][ T8] usb 2-1: Product: syz [ 126.963654][ T8] usb 2-1: Manufacturer: syz [ 126.968396][ T8] usb 2-1: SerialNumber: syz [ 126.983242][ T27] audit: type=1800 audit(1770428914.812:19): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.397" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 127.009930][ T8] usb 2-1: config 0 descriptor?? [ 127.014449][ T7242] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 127.048749][ T7242] FAT-fs (loop4): Filesystem has been set read-only [ 127.073644][ T7242] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 127.261897][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.408589][ T7237] loop3: detected capacity change from 0 to 32768 [ 127.429375][ T7237] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.396 (7237) [ 127.472727][ T7237] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 127.483640][ T7241] loop2: detected capacity change from 0 to 32768 [ 127.498078][ T7237] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 127.522215][ T7237] BTRFS info (device loop3): enabling disk space caching [ 127.531402][ T7237] BTRFS info (device loop3): force clearing of disk cache [ 127.539011][ T7237] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.549457][ T7237] BTRFS info (device loop3): use zstd compression, level 3 [ 127.556830][ T7237] BTRFS info (device loop3): disk space caching is enabled [ 127.577710][ T7241] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 127.698085][ T7237] BTRFS info (device loop3): enabling ssd optimizations [ 127.718203][ T7237] BTRFS info (device loop3): auto enabling async discard [ 127.764873][ T7237] BTRFS info (device loop3): rebuilding free space tree [ 127.838490][ T7237] BTRFS info (device loop3): disabling free space tree [ 127.858176][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 127.872531][ T7237] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.900529][ T8] usb 2-1: USB disconnect, device number 11 [ 127.911556][ T7237] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.056136][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 128.151966][ T5771] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.968437][ T7294] loop3: detected capacity change from 0 to 128 [ 129.013354][ T7294] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 129.055218][ T7294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.347532][ T7277] loop1: detected capacity change from 0 to 32768 [ 129.387406][ T7304] autofs4:pid:7304:autofs_fill_super: called with bogus options [ 129.429300][ T7303] program syz.2.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.472511][ T7277] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.591887][ T7277] XFS (loop1): Ending clean mount [ 129.720599][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.884901][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 130.024657][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 130.685445][ T7342] loop4: detected capacity change from 0 to 32768 [ 130.719402][ T7342] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.815373][ T7342] XFS (loop4): Ending clean mount [ 130.839174][ T27] audit: type=1800 audit(1770428918.702:20): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.433" name="file2" dev="loop4" ino=9287 res=0 errno=0 [ 130.899550][ T6163] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.043204][ T28] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.151097][ T7364] loop4: detected capacity change from 0 to 16 [ 131.187784][ T7364] erofs: (device loop4): mounted with root inode @ nid 36. [ 131.225655][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.270253][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.299852][ T28] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 131.310205][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.334693][ T28] usb 4-1: config 0 descriptor?? [ 131.779622][ T28] pantherlord 0003:0F30:0111.0008: item fetching failed at offset 2/5 [ 131.788613][ T28] pantherlord 0003:0F30:0111.0008: parse failed [ 131.797866][ T28] pantherlord: probe of 0003:0F30:0111.0008 failed with error -22 [ 131.837928][ T7384] loop4: detected capacity change from 0 to 256 [ 131.864389][ T7384] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 131.949147][ T27] audit: type=1800 audit(1770428919.812:21): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.447" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 131.976519][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 131.979560][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.023231][ T27] audit: type=1800 audit(1770428919.842:22): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.447" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 132.066054][ T28] usb 4-1: USB disconnect, device number 8 [ 132.693564][ T7408] mmap: syz.4.458 (7408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.831727][ T7392] loop1: detected capacity change from 0 to 32768 [ 132.918002][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924531][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.022833][ T7419] loop2: detected capacity change from 0 to 2048 [ 133.074641][ T7419] UDF-fs: bad mount option "defcont‡Þð+Ì8rÛ8xtroot}®°oèDÉ·°BúpM#d%" or missing value [ 133.210190][ T7416] loop4: detected capacity change from 0 to 8192 [ 133.253728][ T7416] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.271515][ T7416] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 133.282030][ T7416] REISERFS (device loop4): using ordered data mode [ 133.288904][ T7416] reiserfs: using flush barriers [ 133.307147][ T7416] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.324126][ T7416] REISERFS (device loop4): checking transaction log (loop4) [ 133.337996][ T7426] Bluetooth: MGMT ver 1.22 [ 133.342727][ T7416] REISERFS (device loop4): Using r5 hash to sort names [ 133.377317][ T7416] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 133.391288][ T7416] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 133.490931][ T7416] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 133.506957][ T7416] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 133.530688][ T7416] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 133.627023][ T7432] loop2: detected capacity change from 0 to 256 [ 133.711624][ T7432] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.782099][ T27] audit: type=1800 audit(1770428921.642:23): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=1048617 res=0 errno=0 [ 133.861562][ T27] audit: type=1800 audit(1770428921.702:24): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=1048617 res=0 errno=0 [ 133.902344][ T7441] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 133.958468][ T7441] FAT-fs (loop2): Filesystem has been set read-only [ 134.008612][ T7441] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 134.149497][ T7445] Context (ID=0x1) not attached to queue pair (handle=0x2:0x40) [ 134.328342][ T7450] loop4: detected capacity change from 0 to 1024 [ 134.358531][ T7450] EXT4-fs: Ignoring removed oldalloc option [ 134.386107][ T7450] EXT4-fs: Ignoring removed bh option [ 134.405623][ T7450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.495566][ T7450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.616155][ T7450] EXT4-fs error (device loop4): mb_free_blocks:1954: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 134.682482][ T6163] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.945985][ T7469] loop2: detected capacity change from 0 to 16 [ 134.967738][ T7469] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 135.139995][ T7447] loop3: detected capacity change from 0 to 40427 [ 135.220096][ T7447] F2FS-fs (loop3): invalid crc value [ 135.305003][ T7447] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.323943][ T7481] loop4: detected capacity change from 0 to 524287936 [ 135.512699][ T7447] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.690505][ T7475] f2fs_ckpt-7:3: attempt to access beyond end of device [ 135.690505][ T7475] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.766604][ T7475] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 135.944153][ T7502] loop6: detected capacity change from 0 to 524287999 [ 136.220785][ T7504] program syz.2.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.684457][ T5859] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.896663][ T7520] loop1: detected capacity change from 0 to 128 [ 136.915694][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 136.949594][ T5859] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.959600][ T7520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.989671][ T5859] usb 3-1: config 0 has no interface number 0 [ 137.002003][ T5859] usb 3-1: config 0 interface 184 has no altsetting 0 [ 137.020587][ T7520] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.078675][ T5859] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.088145][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.097237][ T5859] usb 3-1: Product: syz [ 137.101426][ T5859] usb 3-1: Manufacturer: syz [ 137.122950][ T5859] usb 3-1: SerialNumber: syz [ 137.138892][ T5859] usb 3-1: config 0 descriptor?? [ 137.150819][ T7520] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.165298][ T5859] smsc75xx v1.0.0 [ 137.256834][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.669293][ T7525] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.503 (7525) [ 137.701309][ T7525] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.713368][ T7525] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 137.723940][ T7525] BTRFS info (device loop3): using free space tree [ 137.791188][ T7536] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.807544][ T27] audit: type=1800 audit(1770428925.672:25): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 137.911749][ T7525] BTRFS info (device loop3): enabling ssd optimizations [ 137.933271][ T7525] BTRFS info (device loop3): auto enabling async discard [ 137.966538][ T7552] netlink: 'syz.1.508': attribute type 12 has an invalid length. [ 137.992242][ T5859] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 137.993310][ T7552] netlink: 'syz.1.508': attribute type 28 has an invalid length. [ 138.024162][ T5859] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 138.060480][ T5859] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.062294][ T7552] netlink: 148 bytes leftover after parsing attributes in process `syz.1.508'. [ 138.093210][ T5859] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 138.102883][ T5859] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 138.149755][ T5859] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 138.174038][ T5859] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 138.250264][ T5859] usb 3-1: USB disconnect, device number 5 [ 138.338947][ T5771] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.583514][ T5778] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (5778) [ 138.753888][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 138.814379][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.823793][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.893082][ T7568] sp0: Synchronizing with TNC [ 138.971597][ T7573] sctp: [Deprecated]: syz.3.516 (pid 7573) Use of int in maxseg socket option. [ 138.971597][ T7573] Use struct sctp_assoc_value instead [ 138.989039][ T7566] [U] è`` [ 138.991115][ T7575] set_capacity_and_notify: 2 callbacks suppressed [ 138.991127][ T7575] loop1: detected capacity change from 0 to 256 [ 139.074116][ T7575] exfat: Deprecated parameter 'utf8' [ 139.079538][ T7575] exfat: Deprecated parameter 'utf8' [ 139.149868][ T8] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 139.162039][ T8] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 139.170619][ T8] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 139.220752][ T7575] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 139.285386][ T8] hid-generic 0006:0004:0009.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 139.587483][ T7580] fido_id[7580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.967395][ T7596] loop4: detected capacity change from 0 to 1024 [ 140.125829][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 140.135490][ T7596] hfsplus: b-tree write err: -5, ino 3 [ 140.237889][ T7606] loop1: detected capacity change from 0 to 128 [ 140.251864][ T48] hfsplus: b-tree write err: -5, ino 3 [ 140.419618][ T7612] loop4: detected capacity change from 0 to 512 [ 140.457741][ T7612] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.482792][ T7613] loop3: detected capacity change from 0 to 2048 [ 140.508034][ T7613] EXT4-fs: Ignoring removed bh option [ 140.553746][ T7612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.531: bg 0: block 248: padding at end of block bitmap is not set [ 140.617995][ T2957] kworker/u4:10: attempt to access beyond end of device [ 140.617995][ T2957] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 140.633743][ T7612] Quota error (device loop4): write_blk: dquota write failed [ 140.650026][ T7613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.685721][ T7612] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 140.726815][ T7612] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.531: Failed to acquire dquot type 1 [ 140.796147][ T7612] EXT4-fs (loop4): 1 truncate cleaned up [ 140.826651][ T7612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.909857][ T2957] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.936784][ T7612] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 140.973800][ T7612] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 140.983638][ T2957] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 141.003272][ T2957] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.003272][ T2957] [ 141.012945][ T2957] EXT4-fs (loop3): Total free blocks count 0 [ 141.019153][ T2957] EXT4-fs (loop3): Free/Dirty block details [ 141.025161][ T2957] EXT4-fs (loop3): free_blocks=2415919104 [ 141.030923][ T2957] EXT4-fs (loop3): dirty_blocks=16 [ 141.036151][ T2957] EXT4-fs (loop3): Block reservation details [ 141.042166][ T2957] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 141.056060][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.068272][ T6163] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.214489][ T7628] loop3: detected capacity change from 0 to 1024 [ 141.233349][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 141.259431][ T7628] hfsplus: bad catalog entry type [ 141.309584][ T1118] hfsplus: b-tree write err: -5, ino 4 [ 141.419800][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.446334][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 141.466285][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.505056][ T8] usb 2-1: config 0 descriptor?? [ 141.524634][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 141.885925][ T7629] loop4: detected capacity change from 0 to 32768 [ 141.942090][ T27] audit: type=1800 audit(1770428929.802:26): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.539" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 141.942709][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 142.174718][ T7642] tmpfs: Cannot retroactively limit size [ 142.195732][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 142.213994][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 142.234449][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 142.260524][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 142.267610][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 142.301791][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 142.329981][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 142.347530][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 142.372752][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 142.396011][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 142.405068][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 142.433916][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 142.443677][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.470455][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.491052][ T8] pwc: Registered as video103. [ 142.502640][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 142.556890][ T8] usb 2-1: USB disconnect, device number 12 [ 143.172055][ T7650] loop2: detected capacity change from 0 to 40427 [ 143.224316][ T7650] F2FS-fs (loop2): invalid crc value [ 143.243786][ T7650] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.268740][ T7663] sctp: [Deprecated]: syz.4.554 (pid 7663) Use of int in maxseg socket option. [ 143.268740][ T7663] Use struct sctp_assoc_value instead [ 143.318027][ T7653] loop3: detected capacity change from 0 to 32768 [ 143.353480][ T7650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 143.467498][ T27] audit: type=1800 audit(1770428931.322:27): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.550" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 143.511630][ T7653] syz.3.550: attempt to access beyond end of device [ 143.511630][ T7653] loop3: rw=34817, sector=4680064, nr_sectors = 120 limit=32768 [ 143.531271][ T112] blkno = 8ed30, nblocks = f [ 143.538896][ T112] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 143.538896][ T112] [ 143.578352][ T112] ERROR: (device loop3): remounting filesystem as read-only [ 143.710509][ T5777] syz-executor: attempt to access beyond end of device [ 143.710509][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.745569][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 143.824461][ T7659] loop1: detected capacity change from 0 to 32768 [ 143.866365][ T7659] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.552 (7659) [ 143.933209][ T7659] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 143.959716][ T7659] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 143.978781][ T7659] BTRFS info (device loop1): enabling disk space caching [ 144.005617][ T7659] BTRFS info (device loop1): force clearing of disk cache [ 144.044676][ T7659] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.096138][ T7659] BTRFS info (device loop1): use zstd compression, level 3 [ 144.133198][ T7659] BTRFS info (device loop1): disk space caching is enabled [ 144.338184][ T7659] BTRFS info (device loop1): enabling ssd optimizations [ 144.377415][ T7659] BTRFS info (device loop1): auto enabling async discard [ 144.428221][ T7659] BTRFS info (device loop1): rebuilding free space tree [ 144.516464][ T7659] BTRFS info (device loop1): disabling free space tree [ 144.547945][ T7659] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.592955][ T7659] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.989975][ T5775] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 145.223084][ T7718] loop3: detected capacity change from 0 to 128 [ 145.623232][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.701432][ T11] kworker/u4:0: attempt to access beyond end of device [ 145.701432][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 145.826022][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 145.838051][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.858019][ T5859] hid-generic 0005:0C45:1010.000A: item fetching failed at offset 3/5 [ 145.858037][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.873832][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.893414][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.906818][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.916158][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.976056][ T5859] hid-generic: probe of 0005:0C45:1010.000A failed with error -22 [ 146.056783][ T7743] netlink: 64 bytes leftover after parsing attributes in process `syz.1.581'. [ 146.151364][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 146.163307][ T23] usbtmc 3-1:16.0: can't read capabilities [ 146.374679][ T7750] syz.1.584 uses obsolete (PF_INET,SOCK_PACKET) [ 146.379428][ T9] usb 3-1: USB disconnect, device number 6 [ 146.540831][ T7738] loop4: detected capacity change from 0 to 32768 [ 146.560919][ T7738] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.577 (7738) [ 146.621476][ T7738] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 146.642174][ T7738] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 146.658884][ T7738] BTRFS info (device loop4): enabling disk space caching [ 146.670496][ T7738] BTRFS info (device loop4): force clearing of disk cache [ 146.678765][ T7738] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 146.689309][ T7738] BTRFS info (device loop4): use zstd compression, level 3 [ 146.700993][ T7738] BTRFS info (device loop4): disk space caching is enabled [ 146.848046][ T7738] BTRFS info (device loop4): enabling ssd optimizations [ 146.867273][ T7780] loop1: detected capacity change from 0 to 64 [ 146.869277][ T7738] BTRFS info (device loop4): auto enabling async discard [ 146.900690][ T7738] BTRFS info (device loop4): rebuilding free space tree [ 146.974390][ T7738] BTRFS info (device loop4): disabling free space tree [ 147.002847][ T7738] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.033369][ T7738] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.089138][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.131463][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.186163][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.245619][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.462136][ T6163] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.948001][ T7809] program syz.4.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.504107][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.704214][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 148.725185][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.753180][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.774640][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.794936][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.821489][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.842280][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.103284][ T787] usb 3-1: GET_CAPABILITIES returned 0 [ 149.133221][ T787] usbtmc 3-1:16.0: can't read capabilities [ 149.180684][ T7837] netlink: 124 bytes leftover after parsing attributes in process `syz.4.616'. [ 149.350847][ T5859] usb 3-1: USB disconnect, device number 7 [ 149.423004][ T7833] loop1: detected capacity change from 0 to 32768 [ 149.504976][ T27] audit: type=1800 audit(1770428937.372:28): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 150.098011][ T7841] loop3: detected capacity change from 0 to 32768 [ 150.168405][ T7841] JBD2: Ignoring recovery information on journal [ 150.250575][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 150.319949][ T7841] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.688718][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 151.252154][ T7881] bridge0: port 3(syz_tun) entered blocking state [ 151.280033][ T7881] bridge0: port 3(syz_tun) entered disabled state [ 151.290410][ T7881] syz_tun: entered allmulticast mode [ 151.320576][ T7881] syz_tun: entered promiscuous mode [ 151.330286][ T7886] xt_hashlimit: size too large, truncated to 1048576 [ 151.339133][ T7881] bridge0: port 3(syz_tun) entered blocking state [ 151.346079][ T7881] bridge0: port 3(syz_tun) entered forwarding state [ 151.510710][ T7889] net_ratelimit: 44 callbacks suppressed [ 151.510727][ T7889] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 151.812003][ T7871] loop2: detected capacity change from 0 to 40427 [ 151.846827][ T7871] F2FS-fs (loop2): Invalid log sectorsize (131081) [ 151.856911][ T7871] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.886601][ T7871] F2FS-fs (loop2): invalid crc value [ 152.183312][ T7871] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.211075][ T7871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.495713][ T7905] loop3: detected capacity change from 0 to 256 [ 152.562895][ T27] audit: type=1800 audit(1770428940.422:29): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.645" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 152.575421][ T7905] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 152.602596][ T7905] FAT-fs (loop3): Filesystem has been set read-only [ 152.645832][ T7905] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 153.576527][ T7927] input: syz1 as /devices/virtual/input/input15 [ 153.766191][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.978452][ T23] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 154.008325][ T23] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 154.030697][ T23] usb 4-1: Product: syz [ 154.040809][ T23] usb 4-1: Manufacturer: syz [ 154.055716][ T23] usb 4-1: SerialNumber: syz [ 154.082508][ T23] usb 4-1: config 0 descriptor?? [ 154.104890][ T23] ch341 4-1:0.0: ch341-uart converter detected [ 154.921087][ T23] usb 4-1: failed to send control message: -71 [ 154.932318][ T23] ch341-uart: probe of ttyUSB0 failed with error -71 [ 154.953090][ T23] usb 4-1: USB disconnect, device number 9 [ 154.967587][ T23] ch341 4-1:0.0: device disconnected [ 155.004265][ T787] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 155.197277][ T787] usb 3-1: unable to get BOS descriptor set [ 155.212220][ T787] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 155.234173][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.253302][ T787] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 155.273225][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.294215][ T787] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 155.323221][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.340961][ T787] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 155.361306][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.382070][ T787] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 155.392597][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.417009][ T787] usb 3-1: string descriptor 0 read error: -22 [ 155.424120][ T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.444383][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.513606][ T787] usb 3-1: invalid UAC_HEADER (v1) [ 155.641378][ T787] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 155.674066][ T7956] loop3: detected capacity change from 0 to 2048 [ 155.775939][ T7956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.817159][ T8] usb 3-1: USB disconnect, device number 8 [ 155.960956][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.119280][ T7961] loop3: detected capacity change from 0 to 1024 [ 156.215676][ T7961] hfsplus: request for non-existent node 62977 in B*Tree [ 156.257873][ T7961] hfsplus: request for non-existent node 62977 in B*Tree [ 156.323336][ T1099] hfsplus: b-tree write err: -5, ino 3 [ 157.214468][ T787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.401773][ T7970] loop3: detected capacity change from 0 to 40427 [ 157.414777][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 157.428662][ T7970] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 157.434163][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.449095][ T7970] F2FS-fs (loop3): Image doesn't support compression [ 157.462851][ T7970] F2FS-fs (loop3): Image doesn't support compression [ 157.471683][ T787] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 157.492643][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.494714][ T7970] F2FS-fs (loop3): invalid crc value [ 157.510488][ T787] usb 3-1: Product: syz [ 157.517014][ T787] usb 3-1: Manufacturer: syz [ 157.521705][ T787] usb 3-1: SerialNumber: syz [ 157.537944][ T787] usb 3-1: config 0 descriptor?? [ 157.563265][ T7970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.713469][ T7970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.894059][ T5771] syz-executor: attempt to access beyond end of device [ 157.894059][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.923234][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 157.968912][ T787] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 157.992276][ T7982] loop1: detected capacity change from 0 to 40427 [ 158.026190][ T7982] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 158.061547][ T7982] F2FS-fs (loop1): invalid crc value [ 158.086478][ T7982] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.169309][ T787] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 158.215998][ T787] gs_usb: probe of 3-1:0.0 failed with error -71 [ 158.245230][ T787] usb 3-1: USB disconnect, device number 9 [ 158.293354][ T7982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.388110][ T5775] syz-executor: attempt to access beyond end of device [ 158.388110][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.408765][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 158.544045][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.547049][ T7994] netlink: 80 bytes leftover after parsing attributes in process `syz.3.679'. [ 158.743291][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 158.754688][ T8] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 158.795646][ T8] usb 5-1: config 0 has no interface number 0 [ 158.822834][ T8] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 158.832564][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.850595][ T8] usb 5-1: Product: syz [ 158.855151][ T8] usb 5-1: Manufacturer: syz [ 158.859766][ T8] usb 5-1: SerialNumber: syz [ 158.875634][ T8] usb 5-1: config 0 descriptor?? [ 158.884142][ T8] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 158.892663][ T8] pctv452e: pctv452e_power_ctrl: 1 [ 158.892663][ T8] [ 158.923666][ T8] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 158.923666][ T8] [ 158.943201][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 158.952966][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.977543][ T8] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 158.993992][ T8] usb 5-1: media controller created [ 159.000788][ T8] dvb-usb: bulk message failed: -22 (8/0) [ 159.026852][ T8] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 159.049930][ T8] dvb-usb: MAC address reading failed. [ 159.055726][ T8007] loop3: detected capacity change from 0 to 8 [ 159.074442][ T8007] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 159.095507][ T8009] loop2: detected capacity change from 0 to 256 [ 159.110152][ T5778] udevd[5778]: incorrect cramfs checksum on /dev/loop3 [ 159.118714][ T7991] dvb-usb: bulk message failed: -22 (7/0) [ 159.143855][ T7991] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 159.158136][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.191766][ T5778] udevd[5778]: incorrect cramfs checksum on /dev/loop3 [ 159.315189][ T8] DVB: Unable to find symbol stb0899_attach() [ 159.321354][ T8] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 159.473243][ T8] rc_core: IR keymap rc-tt-1500 not found [ 159.483248][ T8] Registered IR keymap rc-empty [ 159.489193][ T8] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 159.525769][ T8] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16 [ 159.557007][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 159.573201][ T8] pctv452e: pctv452e_power_ctrl: 0 [ 159.573201][ T8] [ 159.587451][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 159.677340][ T8024] loop3: detected capacity change from 0 to 512 [ 159.687394][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 159.703715][ T8] dvb-usb: error -22 while querying for an remote control event. [ 159.743699][ T8024] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.819878][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.820093][ T8] usb 5-1: USB disconnect, device number 7 [ 159.843186][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 159.851239][ T9] dvb-usb: error -22 while querying for an remote control event. [ 159.877329][ T8024] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.939384][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 159.969531][ T8031] loop4: detected capacity change from 0 to 16 [ 159.993821][ T8031] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.035852][ T8031] syz.4.695: attempt to access beyond end of device [ 160.035852][ T8031] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 160.096119][ T27] audit: type=1800 audit(1770428947.952:30): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.692" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 160.140045][ T8033] loop2: detected capacity change from 0 to 4096 [ 160.147294][ T8031] syz.4.695: attempt to access beyond end of device [ 160.147294][ T8031] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 160.199481][ T8035] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.234784][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.305821][ T27] audit: type=1800 audit(1770428948.172:31): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.696" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 160.396103][ T8014] loop1: detected capacity change from 0 to 40427 [ 160.463557][ T8014] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 160.512006][ T8014] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 160.542071][ T8014] F2FS-fs (loop1): invalid crc value [ 160.624517][ T8014] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.636188][ T8044] loop3: detected capacity change from 0 to 512 [ 160.677977][ T8044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.740490][ T8044] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.818196][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 160.851898][ T8014] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.856104][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 160.886668][ T8014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.899764][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 160.934864][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1, rec_len=0, size=2048 fake=0 [ 160.973643][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 161.009249][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 161.038932][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'. [ 161.043719][ T8044] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.699: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 161.076201][ T8044] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 18: comm syz.3.699: lblock 23 mapped to illegal pblock 18 (length 1) [ 161.137722][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.331352][ T8060] loop2: detected capacity change from 0 to 128 [ 161.359110][ T8060] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 161.377668][ T8060] hpfs: filesystem error: improperly stopped [ 161.384706][ T8060] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 161.392530][ T8060] hpfs: You really don't want any checks? You are crazy... [ 161.423779][ T8060] hpfs: hpfs_map_sector(): read error [ 161.429183][ T8060] hpfs: code page support is disabled [ 161.459558][ T8060] hpfs: hpfs_map_4sectors(): unaligned read [ 161.479796][ T8060] hpfs: hpfs_map_4sectors(): unaligned read [ 161.510473][ T8060] hpfs: filesystem error: unable to find root dir [ 161.597747][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 162.343369][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.413380][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.533206][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 162.541135][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.556002][ T9] usb 2-1: config 179 has no interface number 0 [ 162.562366][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 162.576101][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 162.587466][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.598844][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 162.611301][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.625113][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.637984][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.646652][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.662093][ T8076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.669351][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.673455][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.681969][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.705258][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.713767][ T8] usb 3-1: SerialNumber: syz [ 162.873218][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 162.880881][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.893182][ T23] usb 4-1: config 0 has no interface number 0 [ 162.902387][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.917879][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.941153][ T23] usb 4-1: Product: syz [ 162.949176][ T23] usb 4-1: Manufacturer: syz [ 162.957092][ T23] usb 4-1: SerialNumber: syz [ 162.957224][ T8] usb 3-1: 0:2 : does not exist [ 162.977309][ T23] usb 4-1: config 0 descriptor?? [ 162.988780][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.027841][ T8] usb 3-1: USB disconnect, device number 10 [ 163.090558][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.111713][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 163.206994][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 163.231244][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 163.430888][ T23] usb 2-1: USB disconnect, device number 13 [ 163.430888][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.446487][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.455284][ T23] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 163.639666][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.650102][ T787] usb 4-1: USB disconnect, device number 10 [ 163.676779][ T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 163.709839][ T8095] loop4: detected capacity change from 0 to 64 [ 163.713031][ T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 163.761151][ T787] quatech2 4-1:0.51: device disconnected [ 163.774572][ T8095] minix_free_block (loop4:21): bit already cleared [ 163.782002][ T8095] Trying to free block not in datazone [ 163.883605][ T8099] loop2: detected capacity change from 0 to 16 [ 163.903568][ T8099] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.926224][ T8099] syz.2.720: attempt to access beyond end of device [ 163.926224][ T8099] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 163.945462][ T8099] syz.2.720: attempt to access beyond end of device [ 163.945462][ T8099] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 163.971612][ T8099] syz.2.720: attempt to access beyond end of device [ 163.971612][ T8099] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 164.090963][ T5777] BUG: Bad page state in process syz-executor pfn:56399 [ 164.099114][ T5777] page:ffffea000158e640 refcount:0 mapcount:0 mapping:ffff88805b112280 index:0x2 pfn:0x56399 [ 164.109781][ T5777] aops:z_erofs_cache_aops ino:0 [ 164.115053][ T5777] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 164.123306][ T5777] page_type: 0xffffffff() [ 164.127667][ T5777] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805b112280 [ 164.136450][ T5777] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 164.145488][ T5777] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 164.152799][ T5777] page_owner tracks the page as allocated [ 164.159091][ T5777] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8099, tgid 8098 (syz.2.720), ts 163925897934, free_ts 163818504460 [ 164.181518][ T5777] post_alloc_hook+0x1c1/0x200 [ 164.186575][ T5777] get_page_from_freelist+0x1951/0x19e0 [ 164.192714][ T5777] __alloc_pages+0x1f0/0x460 [ 164.197470][ T5777] z_erofs_do_read_page+0x2181/0x36b0 [ 164.202866][ T5777] z_erofs_readahead+0x88b/0xda0 [ 164.207899][ T5777] read_pages+0x189/0x850 [ 164.212247][ T5777] page_cache_ra_unbounded+0x68a/0x770 [ 164.217762][ T5777] force_page_cache_ra+0x2c1/0x320 [ 164.222890][ T5777] generic_fadvise+0x47e/0x780 [ 164.227712][ T5777] __x64_sys_fadvise64+0x140/0x180 [ 164.232850][ T5777] do_syscall_64+0x55/0xa0 [ 164.237370][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.243311][ T5777] page last free stack trace: [ 164.248000][ T5777] free_unref_page_prepare+0x7b2/0x8c0 [ 164.253524][ T5777] free_unref_page_list+0xbe/0x860 [ 164.258658][ T5777] release_pages+0x1f7a/0x2200 [ 164.263552][ T5777] tlb_flush_mmu+0x377/0x510 [ 164.268162][ T5777] tlb_finish_mmu+0xc3/0x1d0 [ 164.272765][ T5777] exit_mmap+0x428/0xb90 [ 164.277126][ T5777] __mmput+0x118/0x3c0 [ 164.281209][ T5777] exit_mm+0x1f2/0x2c0 [ 164.285357][ T5777] do_exit+0x8dd/0x2460 [ 164.290112][ T5777] do_group_exit+0x21b/0x2d0 [ 164.294866][ T5777] get_signal+0x12fc/0x13f0 [ 164.299392][ T5777] arch_do_signal_or_restart+0xc2/0x800 [ 164.305005][ T5777] exit_to_user_mode_loop+0x70/0x110 [ 164.310311][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 164.315919][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 164.321403][ T5777] do_syscall_64+0x61/0xa0 [ 164.325979][ T5777] Modules linked in: [ 164.329920][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 164.337463][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.347521][ T5777] Call Trace: [ 164.350797][ T5777] [ 164.353723][ T5777] dump_stack_lvl+0x18c/0x250 [ 164.358398][ T5777] ? asm_sysvec_call_function_single+0x1a/0x20 [ 164.364552][ T5777] ? show_regs_print_info+0x20/0x20 [ 164.369750][ T5777] ? asm_sysvec_call_function_single+0x1a/0x20 [ 164.375916][ T5777] bad_page+0x14b/0x170 [ 164.380071][ T5777] free_unref_page_prepare+0x85f/0x8c0 [ 164.385533][ T5777] free_unref_page+0x32/0x2e0 [ 164.390208][ T5777] ? __folio_put+0xef/0x210 [ 164.394726][ T5777] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 164.401155][ T5777] erofs_shrink_workstation+0x11f/0x290 [ 164.406711][ T5777] ? erofs_shrinker_unregister+0x170/0x170 [ 164.412519][ T5777] ? io_schedule+0xd0/0xd0 [ 164.416946][ T5777] ? kobject_put+0x428/0x460 [ 164.421545][ T5777] erofs_shrinker_unregister+0x5d/0x170 [ 164.427093][ T5777] erofs_put_super+0x4e/0x150 [ 164.431772][ T5777] ? erofs_free_inode+0xb0/0xb0 [ 164.436619][ T5777] generic_shutdown_super+0x134/0x2b0 [ 164.441992][ T5777] kill_block_super+0x44/0x90 [ 164.446667][ T5777] erofs_kill_sb+0x4c/0x140 [ 164.451170][ T5777] deactivate_locked_super+0x97/0x100 [ 164.456535][ T5777] cleanup_mnt+0x43b/0x4d0 [ 164.460950][ T5777] task_work_run+0x1d4/0x260 [ 164.465545][ T5777] ? task_work_cancel+0x220/0x220 [ 164.470571][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 164.476031][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 164.481310][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 164.486855][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 164.492309][ T5777] do_syscall_64+0x61/0xa0 [ 164.496721][ T5777] ? clear_bhb_loop+0x40/0x90 [ 164.501393][ T5777] ? clear_bhb_loop+0x40/0x90 [ 164.506065][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.511950][ T5777] RIP: 0033:0x7fca3a59c117 [ 164.516373][ T5777] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 164.535974][ T5777] RSP: 002b:00007ffed7349d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 164.544381][ T5777] RAX: 0000000000000000 RBX: 00007fca3a60471f RCX: 00007fca3a59c117 [ 164.552343][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed7349e50 [ 164.560305][ T5777] RBP: 00007ffed7349e50 R08: 00007ffed734ae50 R09: 00000000ffffffff [ 164.568268][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed734aee0 [ 164.576228][ T5777] R13: 00007fca3a60471f R14: 0000000000028099 R15: 00007ffed734af20 [ 164.584207][ T5777] [ 164.588077][ T5777] Disabling lock debugging due to kernel taint [ 164.594340][ T5777] BUG: Bad page state in process syz-executor pfn:55d97 [ 164.601843][ T5777] page:ffffea00015765c0 refcount:0 mapcount:0 mapping:ffff88805b112280 index:0x3 pfn:0x55d97 [ 164.612077][ T5777] aops:z_erofs_cache_aops ino:0 [ 164.616980][ T5777] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 164.624724][ T5777] page_type: 0xffffffff() [ 164.629057][ T5777] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805b112280 [ 164.637667][ T5777] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 164.646293][ T5777] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 164.653594][ T5777] page_owner tracks the page as allocated [ 164.659305][ T5777] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8099, tgid 8098 (syz.2.720), ts 163925914258, free_ts 163818497663 [ 164.681260][ T5777] post_alloc_hook+0x1c1/0x200 [ 164.686061][ T5777] get_page_from_freelist+0x1951/0x19e0 [ 164.691613][ T5777] __alloc_pages+0x1f0/0x460 [ 164.696250][ T5777] z_erofs_do_read_page+0x2181/0x36b0 [ 164.702126][ T5777] z_erofs_readahead+0x88b/0xda0 [ 164.707154][ T5777] read_pages+0x189/0x850 [ 164.711490][ T5777] page_cache_ra_unbounded+0x68a/0x770 [ 164.716995][ T5777] force_page_cache_ra+0x2c1/0x320 [ 164.722117][ T5777] generic_fadvise+0x47e/0x780 [ 164.726916][ T5777] __x64_sys_fadvise64+0x140/0x180 [ 164.732042][ T5777] do_syscall_64+0x55/0xa0 [ 164.736486][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.742390][ T5777] page last free stack trace: [ 164.747081][ T5777] free_unref_page_prepare+0x7b2/0x8c0 [ 164.752549][ T5777] free_unref_page_list+0xbe/0x860 [ 164.758009][ T5777] release_pages+0x1f7a/0x2200 [ 164.762784][ T5777] tlb_flush_mmu+0x377/0x510 [ 164.767503][ T5777] tlb_finish_mmu+0xc3/0x1d0 [ 164.772102][ T5777] exit_mmap+0x428/0xb90 [ 164.776373][ T5777] __mmput+0x118/0x3c0 [ 164.780446][ T5777] exit_mm+0x1f2/0x2c0 [ 164.784548][ T5777] do_exit+0x8dd/0x2460 [ 164.788718][ T5777] do_group_exit+0x21b/0x2d0 [ 164.793333][ T5777] get_signal+0x12fc/0x13f0 [ 164.797838][ T5777] arch_do_signal_or_restart+0xc2/0x800 [ 164.803880][ T5777] exit_to_user_mode_loop+0x70/0x110 [ 164.809190][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 164.814828][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 164.820296][ T5777] do_syscall_64+0x61/0xa0 [ 164.824767][ T5777] Modules linked in: [ 164.828667][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Tainted: G B syzkaller #0 [ 164.837678][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.847715][ T5777] Call Trace: [ 164.850978][ T5777] [ 164.853893][ T5777] dump_stack_lvl+0x18c/0x250 [ 164.858562][ T5777] ? show_regs_print_info+0x20/0x20 [ 164.863756][ T5777] ? swiotlb_print_info+0x70/0x70 [ 164.868780][ T5777] bad_page+0x14b/0x170 [ 164.872917][ T5777] free_unref_page_prepare+0x85f/0x8c0 [ 164.878366][ T5777] free_unref_page+0x32/0x2e0 [ 164.883027][ T5777] ? __folio_put+0xef/0x210 [ 164.887513][ T5777] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 164.893919][ T5777] erofs_shrink_workstation+0x11f/0x290 [ 164.899454][ T5777] ? erofs_shrinker_unregister+0x170/0x170 [ 164.905251][ T5777] ? io_schedule+0xd0/0xd0 [ 164.909672][ T5777] ? kobject_put+0x428/0x460 [ 164.914270][ T5777] erofs_shrinker_unregister+0x5d/0x170 [ 164.919817][ T5777] erofs_put_super+0x4e/0x150 [ 164.924483][ T5777] ? erofs_free_inode+0xb0/0xb0 [ 164.929316][ T5777] generic_shutdown_super+0x134/0x2b0 [ 164.934678][ T5777] kill_block_super+0x44/0x90 [ 164.939339][ T5777] erofs_kill_sb+0x4c/0x140 [ 164.943830][ T5777] deactivate_locked_super+0x97/0x100 [ 164.949189][ T5777] cleanup_mnt+0x43b/0x4d0 [ 164.953595][ T5777] task_work_run+0x1d4/0x260 [ 164.958176][ T5777] ? task_work_cancel+0x220/0x220 [ 164.963190][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 164.968641][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 164.973921][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 164.979454][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 164.984902][ T5777] do_syscall_64+0x61/0xa0 [ 164.989312][ T5777] ? clear_bhb_loop+0x40/0x90 [ 164.993973][ T5777] ? clear_bhb_loop+0x40/0x90 [ 164.998637][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.004519][ T5777] RIP: 0033:0x7fca3a59c117 [ 165.008929][ T5777] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 165.028525][ T5777] RSP: 002b:00007ffed7349d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 165.036931][ T5777] RAX: 0000000000000000 RBX: 00007fca3a60471f RCX: 00007fca3a59c117 [ 165.044888][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed7349e50 [ 165.052849][ T5777] RBP: 00007ffed7349e50 R08: 00007ffed734ae50 R09: 00000000ffffffff [ 165.060806][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed734aee0 [ 165.068765][ T5777] R13: 00007fca3a60471f R14: 0000000000028099 R15: 00007ffed734af20 [ 165.076727][ T5777] [ 165.079866][ T5777] BUG: Bad page state in process syz-executor pfn:55cf2 [ 165.087849][ T5777] page:ffffea0001573c80 refcount:0 mapcount:0 mapping:ffff88805b112280 index:0x4 pfn:0x55cf2 [ 165.098153][ T5777] aops:z_erofs_cache_aops ino:0 [ 165.103018][ T5777] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 165.111236][ T5777] page_type: 0xffffffff() [ 165.115657][ T5777] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805b112280 [ 165.124272][ T5777] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 165.132849][ T5777] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 165.140146][ T5777] page_owner tracks the page as allocated [ 165.145881][ T5777] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8099, tgid 8098 (syz.2.720), ts 163925931109, free_ts 163818490960 [ 165.167786][ T5777] post_alloc_hook+0x1c1/0x200 [ 165.172558][ T5777] get_page_from_freelist+0x1951/0x19e0 [ 165.178117][ T5777] __alloc_pages+0x1f0/0x460 [ 165.182709][ T5777] z_erofs_do_read_page+0x2181/0x36b0 [ 165.188101][ T5777] z_erofs_readahead+0x88b/0xda0 [ 165.193044][ T5777] read_pages+0x189/0x850 [ 165.197392][ T5777] page_cache_ra_unbounded+0x68a/0x770 [ 165.202851][ T5777] force_page_cache_ra+0x2c1/0x320 [ 165.207989][ T5777] generic_fadvise+0x47e/0x780 [ 165.213016][ T5777] __x64_sys_fadvise64+0x140/0x180 [ 165.218233][ T5777] do_syscall_64+0x55/0xa0 [ 165.222654][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.228559][ T5777] page last free stack trace: [ 165.233292][ T5777] free_unref_page_prepare+0x7b2/0x8c0 [ 165.238760][ T5777] free_unref_page_list+0xbe/0x860 [ 165.243913][ T5777] release_pages+0x1f7a/0x2200 [ 165.248673][ T5777] tlb_flush_mmu+0x377/0x510 [ 165.253284][ T5777] tlb_finish_mmu+0xc3/0x1d0 [ 165.257885][ T5777] exit_mmap+0x428/0xb90 [ 165.262123][ T5777] __mmput+0x118/0x3c0 [ 165.266242][ T5777] exit_mm+0x1f2/0x2c0 [ 165.270315][ T5777] do_exit+0x8dd/0x2460 [ 165.274511][ T5777] do_group_exit+0x21b/0x2d0 [ 165.279100][ T5777] get_signal+0x12fc/0x13f0 [ 165.283631][ T5777] arch_do_signal_or_restart+0xc2/0x800 [ 165.289187][ T5777] exit_to_user_mode_loop+0x70/0x110 [ 165.294512][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 165.300063][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 165.305543][ T5777] do_syscall_64+0x61/0xa0 [ 165.309966][ T5777] Modules linked in: [ 165.314519][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Tainted: G B syzkaller #0 [ 165.323553][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 165.333598][ T5777] Call Trace: [ 165.336867][ T5777] [ 165.339781][ T5777] dump_stack_lvl+0x18c/0x250 [ 165.344444][ T5777] ? show_regs_print_info+0x20/0x20 [ 165.349628][ T5777] ? swiotlb_print_info+0x70/0x70 [ 165.354646][ T5777] bad_page+0x14b/0x170 [ 165.358792][ T5777] free_unref_page_prepare+0x85f/0x8c0 [ 165.364248][ T5777] free_unref_page+0x32/0x2e0 [ 165.368931][ T5777] ? __folio_put+0xef/0x210 [ 165.373432][ T5777] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 165.379840][ T5777] erofs_shrink_workstation+0x11f/0x290 [ 165.385379][ T5777] ? erofs_shrinker_unregister+0x170/0x170 [ 165.391173][ T5777] ? io_schedule+0xd0/0xd0 [ 165.395579][ T5777] ? kobject_put+0x428/0x460 [ 165.400162][ T5777] erofs_shrinker_unregister+0x5d/0x170 [ 165.405696][ T5777] erofs_put_super+0x4e/0x150 [ 165.410370][ T5777] ? erofs_free_inode+0xb0/0xb0 [ 165.415211][ T5777] generic_shutdown_super+0x134/0x2b0 [ 165.420577][ T5777] kill_block_super+0x44/0x90 [ 165.425249][ T5777] erofs_kill_sb+0x4c/0x140 [ 165.429746][ T5777] deactivate_locked_super+0x97/0x100 [ 165.435106][ T5777] cleanup_mnt+0x43b/0x4d0 [ 165.439515][ T5777] task_work_run+0x1d4/0x260 [ 165.444098][ T5777] ? task_work_cancel+0x220/0x220 [ 165.449115][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 165.454566][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 165.459843][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 165.465383][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 165.470829][ T5777] do_syscall_64+0x61/0xa0 [ 165.475238][ T5777] ? clear_bhb_loop+0x40/0x90 [ 165.479901][ T5777] ? clear_bhb_loop+0x40/0x90 [ 165.484565][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.490445][ T5777] RIP: 0033:0x7fca3a59c117 [ 165.494846][ T5777] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 165.514441][ T5777] RSP: 002b:00007ffed7349d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 165.522844][ T5777] RAX: 0000000000000000 RBX: 00007fca3a60471f RCX: 00007fca3a59c117 [ 165.530804][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed7349e50 [ 165.538761][ T5777] RBP: 00007ffed7349e50 R08: 00007ffed734ae50 R09: 00000000ffffffff [ 165.546716][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed734aee0 [ 165.554675][ T5777] R13: 00007fca3a60471f R14: 0000000000028099 R15: 00007ffed734af20 [ 165.562637][ T5777]