last executing test programs: 5.895669969s ago: executing program 4 (id=810): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r0) 5.739803072s ago: executing program 4 (id=814): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x0, 0x43e}}) 5.597696975s ago: executing program 1 (id=816): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) unlink(&(0x7f0000000280)='./file0\x00') 5.578848117s ago: executing program 4 (id=817): syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x8080, &(0x7f0000009600), 0x1, 0x957a, &(0x7f0000009640)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc038586a, &(0x7f0000000040)={0x4}) 4.712507253s ago: executing program 2 (id=823): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000002c0), 0x4, 0x76b, &(0x7f0000001400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x1, &(0x7f0000000040)="19", 0x42, 0x0, 0x0}) 4.226243127s ago: executing program 2 (id=825): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@gettaction={0x14}, 0x14}}, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 4.06850593s ago: executing program 4 (id=826): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 3.846546139s ago: executing program 2 (id=828): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x100, 0x0, 0xff, 0x1}, 0x20) 3.741240239s ago: executing program 2 (id=829): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) 3.530248338s ago: executing program 2 (id=830): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008050bb61940000102030109022400010100000009040000010301000009210000000122690009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000016c0)={0x24, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002f80)={0x2c, &(0x7f0000002cc0)=ANY=[@ANYBLOB="000069000000690087a6d0129ff2df82c9c062db0f6faeb91f3593caf222be53d708a637800c248f94a3e7e4b08e9222ca1879d2ed7122192fa10004f5cd57650185"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.186393238s ago: executing program 4 (id=832): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000001c0)={{}, "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"}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0x4008941a, 0x0) 3.172137299s ago: executing program 1 (id=833): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 1.91057399s ago: executing program 0 (id=841): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000180)={@desc={0x1, 0x0, @desc3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) 1.840788197s ago: executing program 1 (id=842): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0}}, 0x40000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) 1.606203257s ago: executing program 0 (id=843): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) 1.478527019s ago: executing program 3 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000001000)=[{{&(0x7f0000000280)={0x2, 0x0, @private}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000540)='Ml', 0x2}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}}], 0x1, 0x0) 1.256629569s ago: executing program 4 (id=845): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@ssd_spread}, {@nodatasum}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x65, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB=':']) 1.255962938s ago: executing program 0 (id=855): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x8, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe48) 1.235210321s ago: executing program 3 (id=846): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) 1.01095291s ago: executing program 0 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x6f01, 0xf8}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x20, 0x0, 0x0, 0x18}}}}}, 0x36) 1.01042364s ago: executing program 3 (id=848): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58, &(0x7f0000000100)={[{@dioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@usrjquota}, {@bsdgroups}, {@norecovery}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x22ce5cf0a1c62340) 875.644942ms ago: executing program 1 (id=849): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) 759.983513ms ago: executing program 2 (id=850): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6e6f646973636172642c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6e6f666c7573685f6d657267652c64697361626c655f726f6c6c5f666f72776172642c696e6c696e655f646174612c6673796e635f6d6f64653d706f7369782c686561702c6e6f696e6c696e655f646174612c6e6f657874656e745f63616368652c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c757365725f78617474722c00779cd4f02894cf964d909c186aac251e773b07a2a2349d810b3ec41107242d9e37b999afd91d5fe52bdddd57868a70f0b28523203ce742ef793e984a3e5c4fb9fa37eec6c48714f05711f8f7206ba61dcb3d975e8b544ca8aae49633e3cf0d015e32276cf811c1900db5f8e56ba59a7ec100"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x541b, 0x0) 514.639464ms ago: executing program 0 (id=851): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x834421, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)) 514.448654ms ago: executing program 1 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 473.486488ms ago: executing program 3 (id=853): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000780)="6b10b7101b8e05524818ba1049", 0xd}) 210.052411ms ago: executing program 3 (id=854): r0 = socket$inet6(0xa, 0x2, 0x3a) bind(r0, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x3a) bind(r1, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @private0, @mcast2, {[], @echo_reply}}}}}, 0x0) 129.583658ms ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x31) r2 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xd, 0x0, 0x0) 90.562792ms ago: executing program 3 (id=857): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) 0s ago: executing program 0 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={&(0x7f0000002300)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): .299888][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.310878][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.322710][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.332591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.340673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.351384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.383394][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.403093][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.415505][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.431690][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.442478][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.454657][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.469647][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.505375][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.516860][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.539836][ T3641] device veth0_macvtap entered promiscuous mode [ 69.552931][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.566794][ T3728] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 69.568613][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.588026][ T3728] program syz.2.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.593182][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.605584][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.622600][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.658804][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.685675][ T3641] device veth1_macvtap entered promiscuous mode [ 69.697799][ T3637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.706549][ T3637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.724596][ T3637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741504][ T3637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.786629][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.800283][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.810955][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.821904][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.832134][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.854416][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.865494][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.876087][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.891049][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.901330][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.911939][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.924457][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.935071][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.945436][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.956180][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.967584][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.978091][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.989445][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.003673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.014201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.030820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.040918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.057105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.099176][ T3641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.122544][ T3641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.137112][ T3641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.145868][ T3641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.219571][ T3738] loop2: detected capacity change from 0 to 512 [ 70.244026][ T3738] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.277803][ T3738] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 70.286640][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.301980][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.365660][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.373919][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.382859][ T3738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 70.394061][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.398964][ T3738] System zones: 0-2, 18-18, 34-34 [ 70.406980][ T48] Bluetooth: hci1: command tx timeout [ 70.415296][ T48] Bluetooth: hci2: command tx timeout [ 70.421269][ T3654] Bluetooth: hci3: command tx timeout [ 70.422358][ T3738] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.445064][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.457711][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.465733][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.477671][ T3651] Bluetooth: hci0: command tx timeout [ 70.483125][ T3651] Bluetooth: hci4: command tx timeout [ 70.484983][ T3738] EXT4-fs (loop2): 1 truncate cleaned up [ 70.511159][ T3738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.527544][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.593438][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.626252][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669571][ T26] audit: type=1800 audit(1726197069.295:2): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 70.703650][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.716209][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.753862][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.763037][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.805389][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.814433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.860245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.906159][ T3640] EXT4-fs (loop2): unmounting filesystem. [ 71.143245][ T3752] loop2: detected capacity change from 0 to 512 [ 71.280284][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.287058][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.391832][ T3755] netlink: 972 bytes leftover after parsing attributes in process `syz.4.18'. [ 72.022424][ T3766] loop4: detected capacity change from 0 to 164 [ 72.056337][ T3749] loop1: detected capacity change from 0 to 32768 [ 72.143766][ T3766] isofs: isofs_export_get_parent(): child directory not normalized! [ 72.162099][ T3746] loop3: detected capacity change from 0 to 40427 [ 72.171980][ T3746] ======================================================= [ 72.171980][ T3746] WARNING: The mand mount option has been deprecated and [ 72.171980][ T3746] and is ignored by this kernel. Remove the mand [ 72.171980][ T3746] option from the mount to silence this warning. [ 72.171980][ T3746] ======================================================= [ 72.207081][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.225675][ T3746] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.236795][ T3749] XFS (loop1): Mounting V5 Filesystem [ 72.247763][ T3746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.271881][ T3746] F2FS-fs (loop3): invalid crc value [ 72.348401][ T3746] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.526853][ T3749] XFS (loop1): Ending clean mount [ 72.650670][ T3749] XFS (loop1): User initiated shutdown received. [ 72.671673][ T3749] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 72.750548][ T3749] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 72.765805][ T3746] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.803867][ T3746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.848633][ T3637] XFS (loop1): Unmounting Filesystem [ 72.871123][ T3761] loop2: detected capacity change from 0 to 32768 [ 73.013010][ T3761] find_entry called with index = 0 [ 73.023107][ T3761] read_mapping_page failed! [ 73.028795][ T3761] ERROR: (device loop2): txCommit: [ 73.028795][ T3761] [ 73.070545][ T3761] jfs_unlink: dtDelete returned -116 [ 73.076886][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.088174][ T3796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'. [ 73.107286][ T3761] jfs_unlink: dtDelete returned -116 [ 73.462717][ T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.478382][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.510636][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.537348][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.713203][ T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.742969][ T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.784186][ T22] usb 1-1: Product: syz [ 73.794362][ T22] usb 1-1: Manufacturer: syz [ 73.863133][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 73.889358][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 73.933886][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 73.956469][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 74.173804][ T7] usb 1-1: USB disconnect, device number 2 [ 74.189053][ T3818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.42'. [ 74.602922][ T3828] mmap: syz.1.46 (3828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.895828][ T48] Bluetooth: hci0: unexpected event 0x30 length: 4 > 3 [ 75.590397][ T3862] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 76.574093][ T3854] loop3: detected capacity change from 0 to 32768 [ 76.713000][ T3854] XFS (loop3): Mounting V5 Filesystem [ 76.879081][ T3854] XFS (loop3): Ending clean mount [ 76.957533][ T48] Bluetooth: hci0: command tx timeout [ 77.035202][ T3872] loop4: detected capacity change from 0 to 32768 [ 77.114984][ T3638] XFS (loop3): Unmounting Filesystem [ 77.156066][ T3901] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 77.207052][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.217246][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.281245][ T3903] loop1: detected capacity change from 0 to 512 [ 77.405092][ T3905] loop0: detected capacity change from 0 to 1024 [ 77.446380][ T3903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.491596][ T3903] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 77.692629][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 77.752529][ T64] hfsplus: b-tree write err: -5, ino 4 [ 77.895580][ T3918] loop1: detected capacity change from 0 to 64 [ 77.957857][ T3922] loop3: detected capacity change from 0 to 128 [ 78.009517][ T3922] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 78.060294][ T3920] loop0: detected capacity change from 0 to 4096 [ 78.115310][ T3920] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 78.263093][ T3638] sysv_free_block: trying to free block not in datazone [ 78.287990][ T3638] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 78.352335][ T3926] loop1: detected capacity change from 0 to 2048 [ 78.443066][ T3929] block nbd2: shutting down sockets [ 78.448381][ T3926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.494060][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 78.566711][ T3934] loop3: detected capacity change from 0 to 2048 [ 78.687272][ T3940] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.807297][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.864480][ T3940] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 78.892506][ T3940] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 78.922381][ T3940] Remounting filesystem read-only [ 78.942093][ T3638] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 78.963135][ T3947] vxcan1: tx address claim with dest, not broadcast [ 78.975308][ T3638] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 78.986995][ T3638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.006153][ T3638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.027303][ T3638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.036731][ T3638] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 79.040055][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 79.064345][ T3638] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 79.083797][ T3953] loop0: detected capacity change from 0 to 64 [ 79.091016][ T3638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.117193][ T3638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.126197][ T3638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.197841][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.217099][ T22] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 79.227437][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.257845][ T22] usb 5-1: config 0 descriptor?? [ 79.313978][ T22] comedi comedi0: Wrong number of endpoints [ 79.336988][ T22] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 79.557086][ T3682] usb 5-1: USB disconnect, device number 2 [ 80.365945][ T3990] loop0: detected capacity change from 0 to 256 [ 80.521451][ T3990] FAT-fs (loop0): unable to read block(17179869184) for building NFS inode [ 80.893863][ T3977] loop3: detected capacity change from 0 to 40427 [ 80.908553][ T3977] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.923743][ T3977] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.961215][ T3977] F2FS-fs (loop3): invalid crc value [ 80.985855][ T3979] loop1: detected capacity change from 0 to 40427 [ 80.999018][ T3977] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.085097][ T3979] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.211680][ T3977] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.219551][ T3977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.255515][ T3979] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 81.288245][ T3979] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.389713][ T3979] syz.1.111: attempt to access beyond end of device [ 81.389713][ T3979] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 81.514386][ T33] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 81.530066][ T4022] loop2: detected capacity change from 0 to 8 [ 81.539463][ T152] cfg80211: failed to load regulatory.db [ 81.548149][ T4022] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 81.620549][ T33] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 81.679545][ T4022] cramfs: Error -3 while decompressing! [ 81.685423][ T4022] cramfs: ffffffff974c0518(42)->ffff88807f4b4000(4096) [ 82.559901][ T4051] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.672195][ T4053] loop4: detected capacity change from 0 to 1024 [ 83.245246][ T4077] loop3: detected capacity change from 0 to 2048 [ 83.317592][ T4077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.365915][ T4049] loop2: detected capacity change from 0 to 32768 [ 83.404410][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 83.408956][ T4049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.138 (4049) [ 83.468024][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.478780][ T4049] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.523267][ T4049] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 83.551709][ T4049] BTRFS info (device loop2): using free space tree [ 83.592269][ T4087] loop3: detected capacity change from 0 to 1024 [ 83.646806][ T4087] hfsplus: request for non-existent node 3 in B*Tree [ 83.658929][ T4087] hfsplus: request for non-existent node 3 in B*Tree [ 83.677171][ T3651] Bluetooth: hci2: command 0x0406 tx timeout [ 83.724858][ T26] audit: type=1800 audit(1726197082.345:3): pid=4087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.149" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 83.740143][ T4049] BTRFS info (device loop2): enabling ssd optimizations [ 83.746407][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 83.762382][ T4087] hfsplus: bad catalog folder thread [ 84.062804][ T4112] loop3: detected capacity change from 0 to 512 [ 84.097928][ T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 84.097951][ T4112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.152: inode #1: comm syz.3.152: iget: illegal inode # [ 84.124135][ T4112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.152: error while reading EA inode 1 err=-117 [ 84.141843][ T4112] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.155266][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.156163][ T4112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.152: inode #1: comm syz.3.152: iget: illegal inode # [ 84.197258][ T22] usb 2-1: Product: syz [ 84.201483][ T22] usb 2-1: Manufacturer: syz [ 84.206101][ T22] usb 2-1: SerialNumber: syz [ 84.222569][ T4112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.152: error while reading EA inode 1 err=-117 [ 84.244407][ T4112] EXT4-fs (loop3): 1 orphan inode deleted [ 84.267265][ T4112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.292745][ T22] usb 2-1: config 0 descriptor?? [ 84.322311][ T3640] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.349230][ T22] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 84.389636][ T4115] loop0: detected capacity change from 0 to 764 [ 84.448474][ T3638] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 84.564977][ T3638] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 84.584675][ T22] gspca_sn9c2028: read1 error -32 [ 84.597198][ T3638] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 84.637138][ T22] gspca_sn9c2028: read1 error -32 [ 84.949891][ T41] usb 2-1: USB disconnect, device number 2 [ 85.047076][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 85.085144][ T3638] syz-executor (3638) used greatest stack depth: 19864 bytes left [ 85.256729][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.298159][ T4134] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 85.437666][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.558236][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.587475][ T4139] loop4: detected capacity change from 0 to 64 [ 85.705088][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.869660][ T4145] xt_hashlimit: max too large, truncated to 1048576 [ 85.930707][ T4128] loop0: detected capacity change from 0 to 32768 [ 85.986168][ T4128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.156 (4128) [ 86.069029][ T4128] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.137094][ T4128] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 86.146867][ T4128] BTRFS info (device loop0): setting nodatacow, compression disabled [ 86.225683][ T4128] BTRFS info (device loop0): turning on flush-on-commit [ 86.242881][ T4153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 86.266221][ T4128] BTRFS info (device loop0): enabling auto defrag [ 86.286505][ T4128] BTRFS info (device loop0): max_inline at 0 [ 86.300752][ T4128] BTRFS info (device loop0): using free space tree [ 86.463399][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.478267][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.486445][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.495896][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.506017][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.513557][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.530508][ T3683] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.590785][ T4128] BTRFS info (device loop0): enabling ssd optimizations [ 86.772652][ T4128] BTRFS error (device loop0): target device is invalid! [ 86.901158][ T3639] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.927452][ T3683] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.936239][ T3683] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.989285][ T3683] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.073229][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.160234][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.334936][ T3683] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.350609][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.359502][ T3683] usb 5-1: Product: syz [ 87.363703][ T3683] usb 5-1: Manufacturer: syz [ 87.428428][ T3683] cdc_wdm 5-1:1.0: skipping garbage [ 87.433690][ T3683] cdc_wdm 5-1:1.0: skipping garbage [ 87.451085][ T3683] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 87.470508][ T3683] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.683863][ T945] usb 5-1: USB disconnect, device number 3 [ 87.697268][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 87.704479][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 87.710595][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 87.727152][ T4120] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.793063][ T4160] chnl_net:caif_netlink_parms(): no params data found [ 88.097239][ T4120] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.124997][ T4120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.154056][ T4190] loop1: detected capacity change from 0 to 40427 [ 88.167025][ T4190] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 88.175009][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.189007][ T4120] usb 3-1: config 0 descriptor?? [ 88.197998][ T4190] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.205207][ T4160] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.238317][ T4190] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.248729][ T4160] device bridge_slave_0 entered promiscuous mode [ 88.268949][ T4120] cp210x 3-1:0.0: cp210x converter detected [ 88.322907][ T4211] loop0: detected capacity change from 0 to 32768 [ 88.330240][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.341577][ T4160] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.351273][ T4160] device bridge_slave_1 entered promiscuous mode [ 88.355977][ T4190] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.373291][ T4190] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.401946][ T4211] XFS (loop0): Mounting V5 Filesystem [ 88.448523][ T4190] syz.1.173: attempt to access beyond end of device [ 88.448523][ T4190] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 88.549901][ T3637] syz-executor: attempt to access beyond end of device [ 88.549901][ T3637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.565646][ T48] Bluetooth: hci1: command tx timeout [ 88.614258][ T4211] XFS (loop0): Ending clean mount [ 88.647245][ T4211] XFS (loop0): Quotacheck needed: Please wait. [ 88.705619][ T4160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.708928][ T4120] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 88.775211][ T4120] usb 3-1: cp210x converter now attached to ttyUSB0 [ 88.783599][ T4160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.817953][ T4211] XFS (loop0): Quotacheck: Done. [ 89.012906][ T41] usb 3-1: USB disconnect, device number 2 [ 89.057589][ T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.113306][ T41] cp210x 3-1:0.0: device disconnected [ 89.139414][ T3639] XFS (loop0): Unmounting Filesystem [ 89.299314][ T9] device hsr_slave_0 left promiscuous mode [ 89.376000][ T9] device hsr_slave_1 left promiscuous mode [ 89.422043][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.437416][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.459321][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.472628][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.491091][ T9] device bridge_slave_1 left promiscuous mode [ 89.502123][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.534961][ T9] device bridge_slave_0 left promiscuous mode [ 89.560530][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.730002][ T9] device veth1_macvtap left promiscuous mode [ 89.742270][ T9] device veth0_macvtap left promiscuous mode [ 89.752717][ T9] device veth1_vlan left promiscuous mode [ 89.766041][ T9] device veth0_vlan left promiscuous mode [ 90.637244][ T48] Bluetooth: hci1: command tx timeout [ 90.708354][ T4263] loop4: detected capacity change from 0 to 2048 [ 90.742776][ T4263] UDF-fs: bad mount option "ÿÿ00000000000000000000" or missing value [ 90.835907][ T4263] [U] [ 90.865994][ T4263] [U] ¿ÒLë\ÑÈ‚÷Ï\M+‹… [ 90.883445][ T4263] [U] ¿ŠœØˉQ»ŸK¹A½ÓÒ°¨È×|ÖÞ" [ 90.900980][ T4263] [U] *KÛ¶W—Õ :64]ÀÏT~÷Y“Z~¯½ØQÈ 3ÕSÇ•CPYŒÇƒ®V¤]DB [ 90.908120][ T4263] [U] [ 90.927141][ T4263] [U] [ 90.929901][ T4263] [U] [ 90.932622][ T4263] [U] [ 90.935339][ T4263] [U] [ 90.942831][ T4263] [U] [ 90.945595][ T4263] [U] [ 90.963566][ T4263] [U] [ 90.982849][ T4263] [U] OÍ·GF[{ÞÂ~Ë¿N¤: [ 91.069949][ T4262] [U] EOEŠWÞݪQÅQK?V~ÔW‡¾WÌØ“÷ØNYÖ¹ˆX-Ö6&÷HB<‘&RZÄC‰?Σˆ?ÊÃß¾Ù¨ [ 91.561055][ T9] team0 (unregistering): Port device team_slave_1 removed [ 91.648329][ T9] team0 (unregistering): Port device team_slave_0 removed [ 91.756614][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.844608][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.083142][ T4284] loop4: detected capacity change from 0 to 32768 [ 92.111862][ T4284] XFS (loop4): Mounting V5 Filesystem [ 92.251581][ T4284] XFS (loop4): Ending clean mount [ 92.281497][ T4284] XFS (loop4): Quotacheck needed: Please wait. [ 92.366159][ T4284] XFS (loop4): Quotacheck: Done. [ 92.446639][ T3641] XFS (loop4): Unmounting Filesystem [ 92.567274][ T9] bond0 (unregistering): Released all slaves [ 92.666126][ T4160] team0: Port device team_slave_0 added [ 92.707232][ T4272] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 92.717044][ T48] Bluetooth: hci1: command tx timeout [ 92.737186][ T4272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.744973][ T4272] IPv6: NLM_F_CREATE should be set when creating new route [ 92.834848][ T4160] team0: Port device team_slave_1 added [ 92.998764][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.005918][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.124348][ T4160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.172396][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.204436][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.279896][ T4160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.298441][ T4301] loop2: detected capacity change from 0 to 4096 [ 93.406443][ T4301] ntfs: volume version 3.1. [ 93.458680][ T4160] device hsr_slave_0 entered promiscuous mode [ 93.514251][ T4160] device hsr_slave_1 entered promiscuous mode [ 93.562582][ T4160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.578219][ T4160] Cannot create hsr debugfs directory [ 93.679100][ T4316] loop4: detected capacity change from 0 to 1024 [ 93.940613][ T4230] hfsplus: b-tree write err: -5, ino 4 [ 94.156464][ T4327] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.186255][ T4327] team0: Device ipvlan2 failed to register rx_handler [ 94.797275][ T48] Bluetooth: hci1: command tx timeout [ 95.105547][ T4160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.160527][ T4160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.214128][ T4160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.246715][ T4160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.445555][ T4359] loop0: detected capacity change from 0 to 4096 [ 95.490828][ T4359] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 95.582396][ T4160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.623079][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.677930][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.709423][ T4160] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.752666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.773638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.800452][ T4359] ntfs3: loop0: failed to convert "c46c" to iso8859-13 [ 95.835876][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.843144][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.862192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.885605][ T4375] syz.1.225 (4375) used greatest stack depth: 19488 bytes left [ 95.893813][ T4380] syz.2.226 uses obsolete (PF_INET,SOCK_PACKET) [ 95.919728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.944469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.020057][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.027269][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.101602][ T4381] tun0: tun_chr_ioctl cmd 1074025694 [ 96.188942][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.210214][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.255342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.273277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.306784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.349637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.386305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.442294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.503341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.515164][ T4394] loop2: detected capacity change from 0 to 4096 [ 96.543386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.560706][ T4394] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 96.588624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.602092][ T4403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.233'. [ 96.621711][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.304401][ T4427] netlink: 'syz.2.240': attribute type 29 has an invalid length. [ 97.354515][ T4427] netlink: 'syz.2.240': attribute type 29 has an invalid length. [ 97.373129][ T4431] netlink: 'syz.2.240': attribute type 29 has an invalid length. [ 97.471116][ T4432] netlink: 'syz.2.240': attribute type 29 has an invalid length. [ 97.508484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.554254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.569434][ T4438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 97.584677][ T4160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.704876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.729846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.776820][ T26] audit: type=1400 audit(1726197096.395:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A2020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153 pid=4440 comm="syz.2.244" [ 97.841549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.877892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.926862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.979454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.019058][ T4160] device veth0_vlan entered promiscuous mode [ 98.069787][ T4160] device veth1_vlan entered promiscuous mode [ 98.138137][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.138927][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.148613][ T4160] device veth0_macvtap entered promiscuous mode [ 98.168218][ T4160] device veth1_macvtap entered promiscuous mode [ 98.214443][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.214511][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.214524][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.214540][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.214551][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.214566][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.214577][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.214591][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.223302][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.223453][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.224173][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.224839][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.582110][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.619699][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.650744][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.681228][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.729291][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.764769][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.803192][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.856388][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.883533][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.939823][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.968644][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.990066][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.014619][ T4160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.042556][ T4160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.068105][ T4160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.092914][ T4160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.145287][ T4464] sp0: Synchronizing with TNC [ 99.160861][ T4445] loop0: detected capacity change from 0 to 32768 [ 99.287769][ T4447] loop4: detected capacity change from 0 to 32768 [ 99.417983][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.426160][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.481186][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.555888][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.581658][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.684558][ T4457] loop1: detected capacity change from 0 to 32768 [ 99.700245][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.843731][ T4457] XFS (loop1): Mounting V5 Filesystem [ 100.042984][ T4457] XFS (loop1): Ending clean mount [ 100.224298][ T3637] XFS (loop1): Unmounting Filesystem [ 100.311036][ T4499] loop3: detected capacity change from 0 to 512 [ 100.397005][ T4499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.457248][ T4499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.510988][ T4499] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 100.526761][ T4504] loop2: detected capacity change from 0 to 2048 [ 100.542456][ T4499] EXT4-fs (loop3): group descriptors corrupted! [ 100.663061][ T4505] loop0: detected capacity change from 0 to 4096 [ 100.693376][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.789564][ T4505] ntfs: volume version 3.1. [ 100.829292][ T4505] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.877133][ T4505] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.914967][ T4505] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 100.916097][ T3640] EXT4-fs (loop2): unmounting filesystem. [ 101.082345][ T4523] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 101.139723][ T4523] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 101.151934][ T4527] netem: unknown loss type 0 [ 101.177228][ T4527] netem: change failed [ 101.427171][ T41] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.481673][ T4120] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.680671][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 101.812118][ T41] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 101.827363][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.858620][ T41] usb 2-1: config 0 descriptor?? [ 101.867090][ T4120] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 101.896505][ T4120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.909506][ T41] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 101.938068][ T4120] usb 4-1: config 0 descriptor?? [ 101.979859][ T4120] gspca_main: spca508-2.14.0 probing 8086:0110 [ 102.198202][ T4120] gspca_spca508: reg_read err -32 [ 102.228824][ T4536] loop2: detected capacity change from 0 to 32768 [ 102.247183][ T4120] gspca_spca508: reg_read err -32 [ 102.254771][ T4536] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.268 (4536) [ 102.295276][ T4536] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.314406][ T4540] loop4: detected capacity change from 0 to 32768 [ 102.321657][ T4536] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 102.343981][ T4536] BTRFS info (device loop2): setting nodatasum [ 102.378485][ T4536] BTRFS info (device loop2): max_inline at 0 [ 102.384671][ T4536] BTRFS info (device loop2): using free space tree [ 102.414091][ T4540] XFS (loop4): Mounting V5 Filesystem [ 102.475251][ T4540] XFS (loop4): Ending clean mount [ 102.506689][ T4540] XFS (loop4): Quotacheck needed: Please wait. [ 102.508187][ T4120] gspca_spca508: reg_read err -71 [ 102.547058][ T4120] gspca_spca508: reg_read err -71 [ 102.568504][ T4120] gspca_spca508: reg write: error -71 [ 102.574212][ T4120] spca508: probe of 4-1:0.0 failed with error -71 [ 102.583446][ T4120] usb 4-1: USB disconnect, device number 2 [ 102.661877][ T4540] XFS (loop4): Quotacheck: Done. [ 102.799384][ T41] gspca_vc032x: reg_w err -71 [ 102.804654][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.827541][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.841992][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.846203][ T3641] XFS (loop4): Unmounting Filesystem [ 102.853053][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.869071][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.874428][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.883105][ T4591] sctp: [Deprecated]: syz.0.275 (pid 4591) Use of int in maxseg socket option. [ 102.883105][ T4591] Use struct sctp_assoc_value instead [ 102.898568][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.903916][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.910138][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.915550][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.921538][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.926860][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.942555][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.952722][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.977162][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.982511][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.998506][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.003942][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.015655][ T41] gspca_vc032x: Unknown sensor... [ 103.021885][ T41] vc032x: probe of 2-1:0.0 failed with error -22 [ 103.040032][ T41] usb 2-1: USB disconnect, device number 3 [ 103.175973][ T3640] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.617472][ T4118] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.840877][ T4611] loop3: detected capacity change from 0 to 1024 [ 103.930735][ T4611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.940907][ T4615] program syz.2.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.007275][ T4118] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.036947][ T4118] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.087038][ T4118] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.096275][ T4118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.147833][ T4593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.521492][ T945] usb 1-1: USB disconnect, device number 3 [ 104.947973][ T26] audit: type=1326 audit(1726197103.565:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7c17def9 code=0x7ffc0000 [ 105.006283][ T26] audit: type=1326 audit(1726197103.595:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f0d7c17def9 code=0x7ffc0000 [ 105.021551][ T4118] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.087742][ T26] audit: type=1326 audit(1726197103.595:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7c17def9 code=0x7ffc0000 [ 105.277269][ T4118] usb 3-1: Using ep0 maxpacket: 8 [ 105.343628][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 105.373164][ T4630] loop1: detected capacity change from 0 to 32768 [ 105.397306][ T4118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.408508][ T4650] netlink: 124 bytes leftover after parsing attributes in process `syz.4.297'. [ 105.449648][ T4118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.500511][ T4118] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 105.520099][ T4118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.543965][ T4118] usb 3-1: config 0 descriptor?? [ 105.563584][ T4630] XFS (loop1): Mounting V5 Filesystem [ 105.655677][ T4662] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 105.673510][ T4630] XFS (loop1): Ending clean mount [ 105.700082][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 105.779792][ T4630] syz.1.290 (4630) used greatest stack depth: 17688 bytes left [ 105.840069][ T3637] XFS (loop1): Unmounting Filesystem [ 105.961571][ T4646] loop3: detected capacity change from 0 to 40427 [ 106.018107][ T4646] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 106.041971][ T4118] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 106.065700][ T4646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.074724][ T4118] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 106.101406][ T4118] saitek 0003:06A3:0CCD.0001: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 106.123271][ T4646] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.234674][ T4646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.252133][ T4646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.280438][ T4118] usb 3-1: USB disconnect, device number 3 [ 106.352423][ T26] audit: type=1804 audit(1726197104.975:8): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.296" name="/newroot/11/bus/file0" dev="loop3" ino=10 res=1 errno=0 [ 106.386236][ T4674] loop4: detected capacity change from 0 to 2048 [ 106.465153][ T4677] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.555468][ T4677] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 106.572980][ T4677] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 106.583356][ T4677] Remounting filesystem read-only [ 106.604195][ T4230] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 106.614012][ T4230] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 106.639797][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.695041][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.735799][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.770563][ T4685] loop0: detected capacity change from 0 to 64 [ 106.771527][ T4230] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 106.822330][ T4230] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 106.857264][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.866179][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.927602][ T4685] syz.0.306: attempt to access beyond end of device [ 106.927602][ T4685] loop0: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 106.934945][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.963051][ T4685] syz.0.306: attempt to access beyond end of device [ 106.963051][ T4685] loop0: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 107.018479][ T4230] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 107.026708][ T4230] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 107.027088][ T4685] syz.0.306: attempt to access beyond end of device [ 107.027088][ T4685] loop0: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 107.053358][ T4685] syz.0.306: attempt to access beyond end of device [ 107.053358][ T4685] loop0: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 107.071155][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.083739][ T4685] syz.0.306: attempt to access beyond end of device [ 107.083739][ T4685] loop0: rw=34817, sector=179, nr_sectors = 140 limit=64 [ 107.091523][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.127430][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.172665][ T4230] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 107.188552][ T4230] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 107.207362][ T4230] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 107.214797][ T4230] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 107.262500][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.299439][ T4230] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 107.334839][ T4691] loop1: detected capacity change from 0 to 4096 [ 107.338362][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.366700][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.384423][ T4230] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 107.386960][ T4691] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 107.415852][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.459728][ T4230] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 107.467077][ T4699] capability: warning: `syz.2.313' uses 32-bit capabilities (legacy support in use) [ 107.483009][ T4230] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 107.493217][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.511811][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.529459][ T4230] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.547116][ T4674] NILFS (loop4): mounting fs with errors [ 107.584172][ T4674] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 107.603384][ T4674] Remounting filesystem read-only [ 107.610089][ T4674] NILFS (loop4): error -5 reading inode: ino=18 [ 107.616471][ T4674] NILFS (loop4): cannot mark inode dirty (ino=18): error -5 loading inode block [ 107.654090][ T4674] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 107.683324][ T4674] NILFS (loop4): error -5 reading inode: ino=18 [ 107.696124][ T4674] NILFS (loop4): cannot mark inode dirty (ino=18): error -5 loading inode block [ 107.720714][ T4674] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 107.746602][ T26] audit: type=1326 audit(1726197106.365:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc357def9 code=0x7fc00000 [ 107.783795][ T4674] NILFS (loop4): error -5 reading inode: ino=18 [ 107.799091][ T4674] NILFS (loop4): cannot mark inode dirty (ino=18): error -5 loading inode block [ 107.877200][ T26] audit: type=1326 audit(1726197106.365:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fbbc357def9 code=0x7fc00000 [ 107.967054][ T3641] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 107.986994][ T26] audit: type=1326 audit(1726197106.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc357def9 code=0x7fc00000 [ 108.033030][ T3641] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 108.052477][ T26] audit: type=1326 audit(1726197106.365:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc357def9 code=0x7fc00000 [ 108.081412][ T4706] loop0: detected capacity change from 0 to 512 [ 108.087967][ T3641] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 108.102133][ T4706] EXT4-fs: Ignoring removed orlov option [ 108.118171][ T3641] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 108.131187][ T4706] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.144504][ T3641] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 108.168469][ T3641] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 108.176006][ T3641] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 108.217365][ T3641] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 108.250233][ T4706] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 108.268587][ T3641] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 108.296300][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.318793][ T4706] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.317: invalid indirect mapped block 2683928664 (level 1) [ 108.354735][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.400601][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.425757][ T4706] EXT4-fs (loop0): 1 truncate cleaned up [ 108.458726][ T4706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.465678][ T3641] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 108.492089][ T4703] loop2: detected capacity change from 0 to 32768 [ 108.527287][ T4706] EXT4-fs: user quota file already specified [ 108.529158][ T3641] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 108.550785][ T4695] loop3: detected capacity change from 0 to 32768 [ 108.557761][ T3641] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 108.568275][ T3641] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 108.575616][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.584666][ T3641] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 108.591902][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.602751][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.611768][ T3641] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 108.620693][ T3641] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.652919][ T4703] XFS (loop2): Mounting V5 Filesystem [ 108.669555][ T4695] XFS (loop3): Mounting V5 Filesystem [ 108.698357][ T3639] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 108.765402][ T3639] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 108.785141][ T4732] PKCS7: Unknown OID: [5] 0.0 [ 108.785868][ T3639] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 108.810680][ T4695] XFS (loop3): Ending clean mount [ 108.835055][ T4703] XFS (loop2): Ending clean mount [ 108.878548][ T4732] PKCS7: Only support pkcs7_signedData type [ 108.898814][ T3639] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 108.931687][ T3639] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 109.034183][ T3640] XFS (loop2): Unmounting Filesystem [ 109.360655][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 109.534588][ T4743] loop4: detected capacity change from 0 to 128 [ 109.541440][ T4160] XFS (loop3): Unmounting Filesystem [ 109.593822][ T4193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.669114][ T4743] CUSE: unknown device info "à40tCÓûwÃØ­¿VŸÎ‰ø÷×ûÿ`ÛýuH~ ï¾" [ 109.746969][ T4743] CUSE: unknown device info "Ð)œÊ‚iÛV¹˜ˆ´~®êÞµ~wz÷3÷_ûßÞ“ÓH4l©?DºíË5NVÑ¢¹~yøèÃÑýÂ3Ë¿jÖõ±-oÝ.áÖ]—" [ 109.806930][ T4743] CUSE: unknown device info "½ÍпûïM;W" [ 109.812791][ T4743] CUSE: unknown device info "@çiÝSÄz‚öz²" [ 109.822622][ T4193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.855206][ T4743] CUSE: DEVNAME unspecified [ 109.927813][ T4745] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 109.980781][ T4193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.083924][ T4748] loop1: detected capacity change from 0 to 2048 [ 110.146798][ T4193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.159159][ T4748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.236245][ T4750] loop4: detected capacity change from 0 to 2048 [ 110.438205][ T4756] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.577712][ T4759] loop3: detected capacity change from 0 to 22 [ 110.614024][ T4759] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 110.681819][ T4759] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 110.952715][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.964460][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.972809][ T3654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.982704][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.991424][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.999002][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.475757][ T4786] sg_write: process 37 (syz.3.342) changed security contexts after opening file descriptor, this is not allowed. [ 111.880995][ T4766] chnl_net:caif_netlink_parms(): no params data found [ 112.535405][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.557219][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.577395][ T4766] device bridge_slave_0 entered promiscuous mode [ 112.587976][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.627187][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.643205][ T4766] device bridge_slave_1 entered promiscuous mode [ 112.821812][ T4766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.948385][ T4793] loop4: detected capacity change from 0 to 32768 [ 112.997951][ T4793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.344 (4793) [ 113.037460][ T48] Bluetooth: hci2: command tx timeout [ 113.127645][ T4793] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.155908][ T4813] loop1: detected capacity change from 0 to 40427 [ 113.187458][ T4793] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 113.216576][ T4793] BTRFS info (device loop4): using free space tree [ 113.225584][ T4813] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 113.267026][ T4813] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.294466][ T4813] F2FS-fs (loop1): invalid crc value [ 113.323491][ T4846] loop2: detected capacity change from 0 to 190 [ 113.361955][ T4813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.386191][ T4846] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 113.399406][ T4766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.461202][ T4846] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 113.477328][ T4846] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 113.552844][ T4846] ntfs: volume version 0.0. [ 113.574961][ T4846] ntfs: (device loop2): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 113.593454][ T4813] F2FS-fs (loop1): Start checkpoint disabled! [ 113.596145][ T4846] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 113.608477][ T4846] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 113.621861][ T4793] BTRFS info (device loop4): enabling ssd optimizations [ 113.622368][ T4846] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 113.642947][ T4846] syz.2.361: attempt to access beyond end of device [ 113.642947][ T4846] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 113.658204][ T4846] ntfs: (device loop2): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x45. [ 113.726560][ T4846] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 113.772371][ T4813] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.787343][ T4846] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 113.794221][ T4813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 113.940525][ T4766] team0: Port device team_slave_0 added [ 113.972512][ T4766] team0: Port device team_slave_1 added [ 114.004221][ T4846] syz.2.361: attempt to access beyond end of device [ 114.004221][ T4846] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 114.045158][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 114.297327][ T4193] device hsr_slave_0 left promiscuous mode [ 114.312793][ T4193] device hsr_slave_1 left promiscuous mode [ 114.333517][ T4193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.359414][ T4193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.415295][ T4193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.433705][ T4193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.478154][ T4193] device bridge_slave_1 left promiscuous mode [ 114.484436][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.561168][ T4193] device bridge_slave_0 left promiscuous mode [ 114.580596][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.679022][ T3641] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.737768][ T4840] loop3: detected capacity change from 0 to 40427 [ 114.766789][ T4840] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 114.790187][ T4840] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.848447][ T4840] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 114.898290][ T4840] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 114.969124][ T4840] F2FS-fs (loop3): invalid crc value [ 115.020590][ T4193] device veth1_macvtap left promiscuous mode [ 115.022116][ T4840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.026665][ T4193] device veth0_macvtap left promiscuous mode [ 115.039896][ T4193] device veth1_vlan left promiscuous mode [ 115.046088][ T4193] device veth0_vlan left promiscuous mode [ 115.117080][ T48] Bluetooth: hci2: command tx timeout [ 115.137369][ T4840] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.144604][ T4840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.447026][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.505506][ T33] kworker/u4:2: attempt to access beyond end of device [ 115.505506][ T33] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.597630][ T4882] loop1: detected capacity change from 0 to 32768 [ 115.621046][ T4882] XFS: attr2 mount option is deprecated. [ 115.626965][ T4882] XFS: ikeep mount option is deprecated. [ 115.640290][ T4882] XFS: noikeep mount option is deprecated. [ 115.706996][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 115.744461][ T4882] XFS (loop1): Mounting V5 Filesystem [ 115.853553][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 115.874483][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 115.886689][ T22] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 115.909468][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.933492][ T4882] XFS (loop1): Ending clean mount [ 115.955895][ T4882] XFS (loop1): Quotacheck needed: Please wait. [ 115.971734][ T22] usb 3-1: config 0 descriptor?? [ 116.074508][ T4882] XFS (loop1): Quotacheck: Done. [ 116.236834][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.269707][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.383127][ T3637] XFS (loop1): Unmounting Filesystem [ 116.538785][ T22] hid (null): bogus close delimiter [ 116.544427][ T22] hid (null): invalid report_size 59136 [ 116.553698][ T22] hid (null): report_id 48035 is invalid [ 116.571524][ T22] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 116.585934][ T22] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 116.593843][ T22] hid-generic 0003:0158:0100.0002: bogus close delimiter [ 116.602737][ T4903] loop3: detected capacity change from 0 to 32768 [ 116.610619][ T22] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 116.631161][ T22] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 116.679443][ T4193] team0 (unregistering): Port device team_slave_1 removed [ 116.684002][ T4903] XFS (loop3): Mounting V5 Filesystem [ 116.766410][ T3684] usb 3-1: USB disconnect, device number 4 [ 116.821922][ T4193] team0 (unregistering): Port device team_slave_0 removed [ 116.831445][ T4903] XFS (loop3): Ending clean mount [ 116.901052][ T4903] XFS (loop3): User initiated shutdown received. [ 116.921309][ T4903] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 116.965605][ T4903] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 116.993724][ T4193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.021852][ T4160] XFS (loop3): Unmounting Filesystem [ 117.082780][ T4193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.200519][ T48] Bluetooth: hci2: command tx timeout [ 117.578561][ T4923] loop2: detected capacity change from 0 to 2048 [ 117.643933][ T4926] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.131541][ T4193] bond0 (unregistering): Released all slaves [ 118.276381][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.293743][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.387146][ T4766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.453751][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.477147][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.557100][ T4766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.760332][ T4766] device hsr_slave_0 entered promiscuous mode [ 118.820821][ T4766] device hsr_slave_1 entered promiscuous mode [ 118.847595][ T4766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.866850][ T4766] Cannot create hsr debugfs directory [ 119.141420][ T4963] netlink: 'syz.4.387': attribute type 18 has an invalid length. [ 119.277164][ T48] Bluetooth: hci2: command tx timeout [ 119.822694][ T4982] device wlan1 entered promiscuous mode [ 119.840897][ T4943] loop1: detected capacity change from 0 to 32768 [ 119.843151][ T4981] device wlan1 left promiscuous mode [ 119.889822][ T4943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.380 (4943) [ 120.026286][ T4943] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.057293][ T4943] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 120.076429][ T4943] BTRFS info (device loop1): use no compression [ 120.093187][ T4943] BTRFS info (device loop1): force zlib compression, level 3 [ 120.141226][ T4943] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 120.224415][ T4943] BTRFS info (device loop1): use lzo compression, level 0 [ 120.267026][ T4943] BTRFS info (device loop1): turning on flush-on-commit [ 120.284850][ T4943] BTRFS info (device loop1): enabling auto defrag [ 120.315584][ T4943] BTRFS info (device loop1): using free space tree [ 120.331887][ T4994] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 120.363192][ T4994] netlink: 'syz.3.397': attribute type 2 has an invalid length. [ 120.407826][ T4994] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 120.517150][ T4943] BTRFS info (device loop1): enabling ssd optimizations [ 120.590465][ T4766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.639930][ T4766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.680360][ T4766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.702521][ T3637] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.718053][ T4766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.731665][ T3684] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.977241][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 121.097214][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.147620][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.167578][ T4766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.240232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.258472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.295823][ T4766] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.321856][ T5039] loop3: detected capacity change from 0 to 256 [ 121.330067][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.347956][ T3684] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 121.357771][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.378548][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.386682][ T3684] usb 3-1: Product: syz [ 121.404416][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.411995][ T4193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.427315][ T3684] usb 3-1: Manufacturer: syz [ 121.431982][ T3684] usb 3-1: SerialNumber: syz [ 121.453146][ T5039] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 121.503884][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.526292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.567832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.599834][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.607029][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.797645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.816073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.843515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.869720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.914590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.967971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.976801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.026797][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.046083][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.078998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.098263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.235525][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.427545][ T3684] appletouch 3-1:1.0: Failed to request geyser raw mode [ 122.434653][ T3684] appletouch: probe of 3-1:1.0 failed with error -5 [ 122.509071][ T3684] usb 3-1: USB disconnect, device number 5 [ 122.889584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.903456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.954254][ T4766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.077137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.098594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.179921][ T5088] loop2: detected capacity change from 0 to 164 [ 123.214234][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.234901][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.248181][ T4766] device veth0_vlan entered promiscuous mode [ 123.262907][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.275393][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.292618][ T4766] device veth1_vlan entered promiscuous mode [ 123.335982][ T4766] device veth0_macvtap entered promiscuous mode [ 123.346594][ T4766] device veth1_macvtap entered promiscuous mode [ 123.395738][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.438030][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.463436][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.534637][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.552922][ T5097] loop3: detected capacity change from 0 to 512 [ 123.626294][ T5097] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 123.627797][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.660707][ T5097] UDF-fs: Scanning with blocksize 512 failed [ 123.675493][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.700221][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.719606][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.729895][ T5097] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 123.764765][ T5097] UDF-fs: Scanning with blocksize 1024 failed [ 123.765286][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.783261][ T5097] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 123.807066][ T5097] UDF-fs: Scanning with blocksize 2048 failed [ 123.824380][ T5097] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 123.844473][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.868267][ T5097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.875744][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.916445][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.944143][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.970380][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.003986][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.042426][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.063952][ T5107] loop1: detected capacity change from 0 to 4096 [ 124.077082][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.085074][ T5107] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 124.126935][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.157172][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.186303][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.217312][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.249191][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.280261][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.312255][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.359055][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.388054][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.431817][ T4766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.457019][ T4766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.513774][ T4766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.533156][ T4766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.814132][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.836001][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.924290][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.964828][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.007096][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.051740][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.298884][ T5138] loop1: detected capacity change from 0 to 256 [ 125.418423][ T5113] loop2: detected capacity change from 0 to 32768 [ 125.461109][ T5142] netlink: 'syz.4.435': attribute type 12 has an invalid length. [ 125.968895][ T5153] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 126.356548][ T5161] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 126.374608][ T5161] netlink: 56 bytes leftover after parsing attributes in process `syz.4.441'. [ 126.437582][ T5163] loop3: detected capacity change from 0 to 256 [ 126.503981][ T5163] FAT-fs (loop3): Directory bread(block 64) failed [ 126.513970][ T5163] FAT-fs (loop3): Directory bread(block 65) failed [ 126.521916][ T5139] loop0: detected capacity change from 0 to 32768 [ 126.526708][ T5163] FAT-fs (loop3): Directory bread(block 66) failed [ 126.538381][ T5163] FAT-fs (loop3): Directory bread(block 67) failed [ 126.545662][ T5163] FAT-fs (loop3): Directory bread(block 68) failed [ 126.549871][ T5139] XFS: noikeep mount option is deprecated. [ 126.563857][ T5163] FAT-fs (loop3): Directory bread(block 69) failed [ 126.578009][ T5163] FAT-fs (loop3): Directory bread(block 70) failed [ 126.586147][ T5163] FAT-fs (loop3): Directory bread(block 71) failed [ 126.625211][ T5139] XFS (loop0): Mounting V5 Filesystem [ 126.632002][ T5163] FAT-fs (loop3): Directory bread(block 72) failed [ 126.641640][ T5163] FAT-fs (loop3): Directory bread(block 73) failed [ 126.715530][ T5174] loop4: detected capacity change from 0 to 2048 [ 126.804975][ T5139] XFS (loop0): Ending clean mount [ 126.823645][ T5139] XFS (loop0): Quotacheck needed: Please wait. [ 126.857619][ T5174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.866199][ T5174] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 126.884644][ T5139] XFS (loop0): Quotacheck: Done. [ 126.939217][ T5174] fs-verity (loop4, inode 13): Unknown hash algorithm number: 0 [ 127.054063][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 127.077353][ T5183] loop3: detected capacity change from 0 to 128 [ 127.123404][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 127.123421][ T26] audit: type=1800 audit(1726197125.745:13): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.447" name="file2" dev="loop3" ino=1048611 res=0 errno=0 [ 127.179120][ T4766] XFS (loop0): Unmounting Filesystem [ 127.321012][ T5187] process 'syz.4.448' launched './file0' with NULL argv: empty string added [ 127.346928][ T26] audit: type=1804 audit(1726197125.885:14): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.447" name="/newroot/45/file0/file2" dev="loop3" ino=1048611 res=1 errno=0 [ 127.750916][ T5200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.456'. [ 129.189639][ T5220] loop0: detected capacity change from 0 to 32768 [ 129.233816][ T5220] XFS: ikeep mount option is deprecated. [ 129.253133][ T5220] XFS: noikeep mount option is deprecated. [ 129.309230][ T5223] loop3: detected capacity change from 0 to 32768 [ 129.338102][ T5223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.466 (5223) [ 129.375024][ T5220] XFS (loop0): Mounting V5 Filesystem [ 129.392316][ T5223] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.454961][ T5223] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 129.502761][ T5223] BTRFS info (device loop3): using free space tree [ 129.575598][ T5220] XFS (loop0): Ending clean mount [ 129.600807][ T5220] XFS (loop0): Quotacheck needed: Please wait. [ 129.662583][ T5264] loop1: detected capacity change from 0 to 1024 [ 129.752188][ T5220] XFS (loop0): Quotacheck: Done. [ 129.900170][ T5223] BTRFS info (device loop3): enabling ssd optimizations [ 130.154520][ T4766] XFS (loop0): Unmounting Filesystem [ 130.550356][ T33] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 130.715555][ T4160] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.232825][ T5274] loop4: detected capacity change from 0 to 32768 [ 131.695121][ T5314] loop0: detected capacity change from 0 to 512 [ 131.855962][ T5314] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 131.875882][ T5314] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.494: invalid indirect mapped block 8 (level 2) [ 131.924562][ T5314] EXT4-fs (loop0): Remounting filesystem read-only [ 131.938127][ T5314] EXT4-fs (loop0): 1 truncate cleaned up [ 131.943922][ T5314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.041820][ T5314] EXT4-fs (loop0): shut down requested (2) [ 132.171187][ T4766] EXT4-fs (loop0): unmounting filesystem. [ 132.719104][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.725461][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.804310][ T5310] loop3: detected capacity change from 0 to 40427 [ 132.851931][ T5310] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 132.867763][ T5310] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 132.901686][ T5310] F2FS-fs (loop3): invalid crc value [ 132.945486][ T5310] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.946137][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 133.108132][ T5346] input: syz0 as /devices/virtual/input/input9 [ 133.196528][ T5310] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 133.236962][ T5310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.298962][ T5343] loop1: detected capacity change from 0 to 8192 [ 133.363378][ T5343] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.442976][ T5359] loop2: detected capacity change from 0 to 128 [ 133.456470][ T4160] syz-executor: attempt to access beyond end of device [ 133.456470][ T4160] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.470975][ T5343] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 133.520382][ T5343] REISERFS (device loop1): using ordered data mode [ 133.607008][ T5343] reiserfs: using flush barriers [ 133.637336][ T5343] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.689962][ T5343] REISERFS (device loop1): checking transaction log (loop1) [ 133.832735][ T5365] loop0: detected capacity change from 0 to 1024 [ 133.847890][ T5365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.923319][ T5365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.046617][ T5343] REISERFS (device loop1): Using tea hash to sort names [ 134.070483][ T4766] EXT4-fs (loop0): unmounting filesystem. [ 134.085634][ T5343] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 134.103723][ T5373] loop4: detected capacity change from 0 to 512 [ 134.167069][ T3685] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.218572][ T5373] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 134.259605][ T5373] EXT4-fs (loop4): 1 truncate cleaned up [ 134.268946][ T26] audit: type=1804 audit(1726197132.885:15): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.504" name="/newroot/102/file0/file0" dev="loop1" ino=4 res=1 errno=0 [ 134.291639][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.438192][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 134.447557][ T3685] usb 3-1: Using ep0 maxpacket: 16 [ 134.577508][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.611228][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.631641][ T3685] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.635531][ T5380] loop3: detected capacity change from 0 to 8192 [ 134.666135][ T3685] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.686658][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.690365][ T5380] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.721190][ T3685] usb 3-1: config 0 descriptor?? [ 134.735010][ T5380] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 134.745382][ T5380] REISERFS (device loop3): using ordered data mode [ 134.752907][ T5380] reiserfs: using flush barriers [ 134.777981][ T5380] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.838933][ T5380] REISERFS (device loop3): checking transaction log (loop3) [ 135.091903][ T5380] REISERFS (device loop3): Using tea hash to sort names [ 135.102263][ T5393] loop1: detected capacity change from 0 to 2048 [ 135.107468][ T5380] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 135.162971][ T5394] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.207980][ T5380] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 135.231445][ T3685] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.257753][ T3685] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.265040][ T3685] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 135.387210][ T3685] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10 [ 135.654176][ T5391] loop0: detected capacity change from 0 to 32768 [ 135.677643][ T5391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.526 (5391) [ 135.755700][ T3685] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 135.792687][ T3685] usb 3-1: USB disconnect, device number 6 [ 135.820011][ T5391] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.845091][ T5391] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 135.873671][ T5391] BTRFS info (device loop0): using free space tree [ 136.157521][ T5391] BTRFS info (device loop0): enabling ssd optimizations [ 136.192845][ T5396] loop4: detected capacity change from 0 to 40427 [ 136.228555][ T5396] F2FS-fs (loop4): invalid crc value [ 136.250263][ T5396] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.424892][ T5396] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.433080][ T4193] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 136.458008][ T5425] loop3: detected capacity change from 0 to 256 [ 136.533901][ T5425] FAT-fs (loop3): Directory bread(block 64) failed [ 136.567437][ T5425] FAT-fs (loop3): Directory bread(block 65) failed [ 136.579082][ T5425] FAT-fs (loop3): Directory bread(block 66) failed [ 136.592636][ T5425] FAT-fs (loop3): Directory bread(block 67) failed [ 136.608353][ T4766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.644952][ T5425] FAT-fs (loop3): Directory bread(block 68) failed [ 136.672506][ T5425] FAT-fs (loop3): Directory bread(block 69) failed [ 136.699273][ T5425] FAT-fs (loop3): Directory bread(block 70) failed [ 136.761180][ T5425] FAT-fs (loop3): Directory bread(block 71) failed [ 136.813116][ T5425] FAT-fs (loop3): Directory bread(block 72) failed [ 136.826515][ T5425] FAT-fs (loop3): Directory bread(block 73) failed [ 137.343954][ T5444] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 137.383794][ T5444] netlink: 'syz.0.539': attribute type 2 has an invalid length. [ 137.414520][ T5444] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 138.043365][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 138.561957][ T5482] loop1: detected capacity change from 0 to 512 [ 138.614310][ T5482] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.695771][ T5482] EXT4-fs (loop1): 1 truncate cleaned up [ 138.702478][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.880512][ T5482] fscrypt (loop1, inode 18): Unsupported encryption flags (0xc5) [ 139.164672][ T3637] EXT4-fs (loop1): unmounting filesystem. [ 139.233551][ T5500] loop3: detected capacity change from 0 to 256 [ 139.636097][ T5513] Â: renamed from pim6reg1 [ 139.700285][ T5517] loop0: detected capacity change from 0 to 2048 [ 139.715447][ T5511] loop1: detected capacity change from 0 to 4096 [ 139.762751][ T5520] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.817022][ T5522] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.542404][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 140.617534][ T4203] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.866965][ T4203] usb 1-1: Using ep0 maxpacket: 32 [ 140.886831][ T5535] loop3: detected capacity change from 0 to 32768 [ 140.911754][ T5535] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.580 (5535) [ 140.936267][ T5535] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 140.951844][ T5535] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 140.965842][ T5535] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.980600][ T5535] BTRFS info (device loop3): use lzo compression, level 0 [ 140.992282][ T5535] BTRFS info (device loop3): using free space tree [ 141.007430][ T4203] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.030569][ T3684] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.160555][ T5565] netlink: 284 bytes leftover after parsing attributes in process `syz.4.589'. [ 141.211929][ T5567] loop2: detected capacity change from 0 to 2048 [ 141.227308][ T4203] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.236741][ T5535] BTRFS info (device loop3): enabling ssd optimizations [ 141.245066][ T4203] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.253878][ T4203] usb 1-1: Product: syz [ 141.258823][ T4203] usb 1-1: Manufacturer: syz [ 141.263851][ T4203] usb 1-1: SerialNumber: syz [ 141.273348][ T4203] usb 1-1: config 0 descriptor?? [ 141.297880][ T5539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.317194][ T5573] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.450384][ T4160] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 141.549492][ T3685] usb 1-1: USB disconnect, device number 4 [ 141.577373][ T3684] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 141.627775][ T3684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.663913][ T3684] usb 2-1: Product: syz [ 141.675213][ T3684] usb 2-1: Manufacturer: syz [ 141.680675][ T3684] usb 2-1: SerialNumber: syz [ 141.702729][ T3684] usb 2-1: config 0 descriptor?? [ 142.142802][ T5592] loop4: detected capacity change from 0 to 2048 [ 142.244367][ T3684] usb 2-1: Firmware: major: 0, minor: 203, hardware type: UNKNOWN (143) [ 142.342557][ T5592] loop4: p4 < > [ 142.359708][ T5598] ax25_connect(): syz.4.596 uses autobind, please contact jreuter@yaina.de [ 142.480617][ T3684] usb 2-1: failed to fetch extended address, random address set [ 142.507760][ T3684] usb 2-1: atusb_probe: initialization failed, error = -524 [ 142.515593][ T3684] atusb: probe of 2-1:0.0 failed with error -524 [ 142.576567][ T3684] usb 2-1: USB disconnect, device number 4 [ 142.580925][ T5603] bridge_slave_0: default FDB implementation only supports local addresses [ 142.614286][ T3629] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.639371][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 143.350615][ T5619] loop0: detected capacity change from 0 to 4096 [ 143.386307][ T5619] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 143.477669][ T5621] loop4: detected capacity change from 0 to 4096 [ 143.486259][ T5619] ntfs3: loop0: Failed to load $Extend. [ 143.514711][ T5621] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 143.614405][ T5621] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 143.737655][ T5621] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 144.197016][ T4598] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.224545][ T5617] loop1: detected capacity change from 0 to 32768 [ 144.334202][ T5617] XFS (loop1): Mounting V5 Filesystem [ 144.471255][ T5617] XFS (loop1): Ending clean mount [ 144.494225][ T5617] XFS (loop1): Quotacheck needed: Please wait. [ 144.576139][ T5617] XFS (loop1): Quotacheck: Done. [ 144.582254][ T4598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.644884][ T4598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.747779][ T3637] XFS (loop1): Unmounting Filesystem [ 144.763578][ T4598] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.795990][ T4598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.823933][ T4598] usb 4-1: SerialNumber: syz [ 145.109988][ T5667] loop0: detected capacity change from 0 to 512 [ 145.119844][ T4598] usb 4-1: 0:2 : does not exist [ 145.138161][ T5667] EXT4-fs: Ignoring removed orlov option [ 145.153857][ T4598] usb 4-1: unit 49 not found! [ 145.159349][ T4598] usb 4-1: unit 55 not found! [ 145.215914][ T5667] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.627: couldn't read orphan inode 16 (err -116) [ 145.221609][ T5672] loop4: detected capacity change from 0 to 256 [ 145.242792][ T5667] EXT4-fs (loop0): Remounting filesystem read-only [ 145.257192][ T5667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.295465][ T5667] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 145.306746][ T4598] usb 4-1: USB disconnect, device number 3 [ 145.320704][ T5667] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.627: corrupted xattr block 19 [ 145.338831][ T5667] EXT4-fs (loop0): Remounting filesystem read-only [ 145.346110][ T5672] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.367058][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 145.387038][ T5676] tipc: Started in network mode [ 145.391983][ T5676] tipc: Node identity 40000020000000006e, cluster identity 8 [ 145.447560][ T4766] EXT4-fs (loop0): unmounting filesystem. [ 146.192742][ T5706] net veth1_virt_wifi : renamed from virt_wifi0 [ 146.799856][ T5719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.338094][ T5702] loop1: detected capacity change from 0 to 32768 [ 147.375357][ T5702] [ 147.375357][ T5702] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.375357][ T5702] [ 147.451086][ T5702] find_entry called with index = 0 [ 147.472712][ T5702] read_mapping_page failed! [ 147.512262][ T5702] ERROR: (device loop1): txCommit: [ 147.512262][ T5702] [ 147.687727][ T3637] [ 147.687727][ T3637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.687727][ T3637] [ 147.720917][ T3637] [ 147.720917][ T3637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.720917][ T3637] [ 147.862528][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.974621][ T5740] loop3: detected capacity change from 0 to 8192 [ 148.117331][ T5744] binder: 5743:5744 ioctl c0306201 200002c0 returned -14 [ 148.139534][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 148.417375][ T22] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.435783][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.464399][ T22] usb 3-1: Product: syz [ 148.473041][ T22] usb 3-1: Manufacturer: syz [ 148.487603][ T22] usb 3-1: SerialNumber: syz [ 148.505334][ T22] r8152-cfgselector 3-1: config 0 descriptor?? [ 148.632400][ T5758] loop0: detected capacity change from 0 to 4096 [ 148.660841][ T5758] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 148.753456][ T5758] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 148.795832][ T5758] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 148.852294][ T5758] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 148.885613][ T5758] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 148.948699][ T5758] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 148.969037][ T5758] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 149.007146][ T22] r8152-cfgselector 3-1: Unknown version 0x0000 [ 149.023963][ T22] r8152-cfgselector 3-1: bad CDC descriptors [ 149.057129][ T22] r8152-cfgselector 3-1: Unknown version 0x0000 [ 149.074658][ T5758] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 149.087323][ T22] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 149.117125][ T5758] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 149.176974][ T5758] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 149.211419][ T5758] ntfs: volume version 3.1. [ 149.365252][ T5779] loop4: detected capacity change from 0 to 8 [ 149.556256][ T5760] loop3: detected capacity change from 0 to 32768 [ 149.657850][ T5760] XFS (loop3): Mounting V5 Filesystem [ 149.767888][ T5760] XFS (loop3): Ending clean mount [ 149.841356][ T5802] netlink: 'syz.1.685': attribute type 10 has an invalid length. [ 149.866273][ T5802] bond0: (slave bond_slave_0): Releasing backup interface [ 149.885972][ T4160] XFS (loop3): Unmounting Filesystem [ 149.947797][ T5806] loop0: detected capacity change from 0 to 256 [ 150.203146][ T5808] loop4: detected capacity change from 0 to 4096 [ 150.316057][ T3631] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.471668][ T5820] loop2: detected capacity change from 0 to 512 [ 150.512979][ T5820] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 150.548264][ T5820] UDF-fs: Scanning with blocksize 512 failed [ 150.565578][ T5820] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 150.618479][ T5820] UDF-fs: Scanning with blocksize 1024 failed [ 150.648430][ T5820] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 150.673414][ T5820] UDF-fs: Scanning with blocksize 2048 failed [ 150.680288][ T4203] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.701405][ T5820] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 150.701547][ T5823] loop4: detected capacity change from 0 to 2048 [ 150.741494][ T5820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.947814][ T4203] usb 2-1: Using ep0 maxpacket: 32 [ 151.234576][ T5835] loop4: detected capacity change from 0 to 512 [ 151.241840][ T4203] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 151.267067][ T4203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.275246][ T5835] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.295657][ T4203] usb 2-1: Product: syz [ 151.313466][ T4203] usb 2-1: Manufacturer: syz [ 151.327609][ T4203] usb 2-1: SerialNumber: syz [ 151.337290][ T5835] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.702: iget: bad extra_isize 7 (inode size 256) [ 151.355602][ T4203] usb 2-1: config 0 descriptor?? [ 151.371989][ T5835] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.702: couldn't read orphan inode 15 (err -117) [ 151.402145][ T5843] program syz.3.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.421638][ T5835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.557570][ T5821] loop0: detected capacity change from 0 to 32768 [ 151.603206][ T5821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.695 (5821) [ 151.628941][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 151.658099][ T4599] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.707279][ T5821] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.723591][ T5821] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 151.743894][ T5821] BTRFS info (device loop0): setting nodatacow, compression disabled [ 151.788308][ T5821] BTRFS info (device loop0): disabling tree log [ 151.794633][ T5821] BTRFS info (device loop0): turning on sync discard [ 151.856511][ T5821] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.877063][ T5821] BTRFS info (device loop0): force zstd compression, level 3 [ 151.897065][ T4599] usb 3-1: Using ep0 maxpacket: 16 [ 151.907595][ T5821] BTRFS info (device loop0): using free space tree [ 152.077285][ T4203] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 152.098789][ T4203] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 152.105676][ T4203] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 152.118682][ T5821] BTRFS info (device loop0): enabling ssd optimizations [ 152.178144][ T4599] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 152.192103][ T4203] peak_usb: probe of 2-1:0.0 failed with error -22 [ 152.246437][ T4599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.281931][ T4599] usb 3-1: Product: syz [ 152.286214][ T4599] usb 3-1: Manufacturer: syz [ 152.298130][ T4203] usb 2-1: USB disconnect, device number 5 [ 152.319296][ T4599] usb 3-1: SerialNumber: syz [ 152.331482][ T4599] usb 3-1: config 0 descriptor?? [ 152.388533][ T4599] as10x_usb: device has been detected [ 152.409952][ T4599] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 152.443220][ T4766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.479289][ T4599] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 152.536846][ T4599] as10x_usb: error during firmware upload part1 [ 152.563579][ T4599] Registered device Sky IT Digital Key (green led) [ 152.727770][ T5841] random: crng reseeded on system resumption [ 153.162087][ T5893] loop3: detected capacity change from 0 to 2048 [ 153.243665][ T5893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.602317][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 153.658644][ T5907] usb usb1: usbfs: process 5907 (syz.1.724) did not claim interface 0 before use [ 153.711089][ T4599] usb 3-1: USB disconnect, device number 8 [ 153.754211][ T4599] Unregistered device Sky IT Digital Key (green led) [ 153.787479][ T4599] as10x_usb: device has been disconnected [ 153.817299][ T5911] loop3: detected capacity change from 0 to 8 [ 153.877427][ T5914] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 154.914680][ T5937] loop2: detected capacity change from 0 to 256 [ 155.114615][ T5939] loop0: detected capacity change from 0 to 4096 [ 155.331140][ T5950] loop2: detected capacity change from 0 to 512 [ 155.425207][ T5950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.517109][ T5950] ext4 filesystem being mounted at /172/bus supports timestamps until 2038 (0x7fffffff) [ 155.568790][ T3640] EXT4-fs (loop2): unmounting filesystem. [ 155.832720][ T5970] netlink: 'syz.4.748': attribute type 10 has an invalid length. [ 155.840972][ T5587] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.875583][ T5970] bond0: (slave bond_slave_0): Releasing backup interface [ 155.889226][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 155.889242][ T26] audit: type=1326 audit(1726197154.515:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6d7def9 code=0x7ffc0000 [ 155.971732][ T26] audit: type=1326 audit(1726197154.555:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6fc6d7def9 code=0x7ffc0000 [ 156.030542][ T26] audit: type=1326 audit(1726197154.555:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6d7def9 code=0x7ffc0000 [ 156.087107][ T5587] usb 2-1: Using ep0 maxpacket: 16 [ 156.114256][ T5974] loop3: detected capacity change from 0 to 4096 [ 156.153267][ T5974] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 156.207209][ T5587] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.224712][ T5587] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.322757][ T5974] ntfs3: loop3: failed to convert "c46c" to cp862 [ 156.387405][ T5587] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.429846][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.458450][ T5587] usb 2-1: Product: syz [ 156.462678][ T5587] usb 2-1: Manufacturer: syz [ 156.477025][ T5587] usb 2-1: SerialNumber: syz [ 156.490412][ T5587] r8152-cfgselector 2-1: config 0 descriptor?? [ 156.620053][ T5991] loop0: detected capacity change from 0 to 128 [ 156.645613][ T5991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.655997][ T5991] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 156.731262][ T4766] EXT4-fs (loop0): unmounting filesystem. [ 156.788228][ T5587] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 157.005743][ T3682] usb 2-1: USB disconnect, device number 6 [ 157.029242][ T5976] loop2: detected capacity change from 0 to 32768 [ 157.036458][ T5976] XFS: attr2 mount option is deprecated. [ 157.125045][ T5976] XFS (loop2): Mounting V5 Filesystem [ 157.262718][ T5976] XFS (loop2): Ending clean mount [ 157.288558][ T5976] XFS (loop2): Quotacheck needed: Please wait. [ 157.404866][ T5976] XFS (loop2): Quotacheck: Done. [ 157.455395][ T6017] loop3: detected capacity change from 0 to 2048 [ 157.488241][ T6017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.543285][ T3640] XFS (loop2): Unmounting Filesystem [ 157.647285][ T4598] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.902036][ T4598] usb 5-1: Using ep0 maxpacket: 32 [ 158.187415][ T4598] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 158.216981][ T4598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.225044][ T4598] usb 5-1: Product: syz [ 158.252458][ T4598] usb 5-1: Manufacturer: syz [ 158.258311][ T4598] usb 5-1: SerialNumber: syz [ 158.291278][ T4598] usb 5-1: config 0 descriptor?? [ 158.338610][ T4598] hub 5-1:0.0: bad descriptor, ignoring hub [ 158.348458][ T4598] hub: probe of 5-1:0.0 failed with error -5 [ 158.361683][ T4598] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 158.480336][ T6047] netlink: 368 bytes leftover after parsing attributes in process `syz.2.781'. [ 158.705905][ T6037] loop0: detected capacity change from 0 to 32768 [ 158.730352][ T6037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.777 (6037) [ 158.764446][ T6037] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.785570][ T6037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 158.806078][ T6037] BTRFS info (device loop0): setting nodatacow, compression disabled [ 158.823307][ T6037] BTRFS info (device loop0): enabling ssd optimizations [ 158.840667][ T6037] BTRFS info (device loop0): using spread ssd allocation scheme [ 158.887117][ T6037] BTRFS info (device loop0): force clearing of disk cache [ 158.894341][ T6037] BTRFS info (device loop0): max_inline at 0 [ 158.936952][ T6037] BTRFS info (device loop0): using free space tree [ 158.954325][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 158.987155][ T4598] gspca_vc032x: reg_r err -71 [ 158.991943][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.027370][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032729][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.087399][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.092904][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.103044][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.119137][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.127243][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.144897][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.152154][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.176220][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.186997][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.197534][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.213165][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.223312][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.229022][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.234544][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.240567][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.246038][ T4598] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.253272][ T4598] gspca_vc032x: Unknown sensor... [ 159.259350][ T4598] vc032x: probe of 5-1:0.0 failed with error -22 [ 159.297962][ T6037] BTRFS info (device loop0): rebuilding free space tree [ 159.298167][ T4598] usb 5-1: USB disconnect, device number 4 [ 159.326086][ T6068] loop3: detected capacity change from 0 to 4096 [ 159.360215][ T6068] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 159.469937][ T6068] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 159.508984][ T6037] BTRFS info (device loop0): resizing devid 73709551615 [ 159.516588][ T6037] BTRFS info (device loop0): resizer unable to find device 73709551615 [ 159.546291][ T6068] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 159.606050][ T6068] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 159.665013][ T4766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.671358][ T6068] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 159.746980][ T6068] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 159.818493][ T6068] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 159.848478][ T6068] ntfs: volume version 3.1. [ 159.952816][ T6053] loop1: detected capacity change from 0 to 40427 [ 160.088640][ T6053] F2FS-fs (loop1): invalid crc value [ 160.158613][ T6053] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.372096][ T6053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 160.466640][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 160.485187][ T6053] syz.1.784: attempt to access beyond end of device [ 160.485187][ T6053] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.921328][ T6112] loop4: detected capacity change from 0 to 256 [ 160.981380][ T6088] loop2: detected capacity change from 0 to 32768 [ 161.062295][ T6115] netlink: 19 bytes leftover after parsing attributes in process `syz.3.802'. [ 161.087920][ T6112] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 161.100490][ T6088] XFS (loop2): Mounting V5 Filesystem [ 161.295385][ T6088] XFS (loop2): Ending clean mount [ 161.333953][ T6088] XFS (loop2): Quotacheck needed: Please wait. [ 161.410643][ T6088] XFS (loop2): Quotacheck: Done. [ 161.500521][ T6134] device dummy0 entered promiscuous mode [ 161.536389][ T6131] device dummy0 left promiscuous mode [ 161.691323][ T3640] XFS (loop2): Unmounting Filesystem [ 161.718491][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 162.361861][ T6156] loop3: detected capacity change from 0 to 256 [ 162.431251][ T6156] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 162.849655][ T6164] loop3: detected capacity change from 0 to 1024 [ 162.910050][ T6166] loop2: detected capacity change from 0 to 2048 [ 163.014800][ T6166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.047481][ T6150] loop4: detected capacity change from 0 to 32768 [ 163.080173][ T6166] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038 (0x7fffffff) [ 163.095515][ T6150] XFS (loop4): Mounting V5 Filesystem [ 163.170938][ T6150] XFS (loop4): Ending clean mount [ 163.207199][ T6153] loop0: detected capacity change from 0 to 32768 [ 163.242445][ T6153] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.818 (6153) [ 163.270406][ T3640] EXT4-fs (loop2): unmounting filesystem. [ 163.367101][ T6153] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 163.397213][ T6153] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 163.413150][ T3641] XFS (loop4): Unmounting Filesystem [ 163.452643][ T6149] loop1: detected capacity change from 0 to 40427 [ 163.459495][ T6153] BTRFS info (device loop0): disabling tree log [ 163.466148][ T6153] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 163.527058][ T6149] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 163.533714][ T6149] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.542981][ T6153] BTRFS info (device loop0): trying to use backup root at mount time [ 163.561222][ T6153] BTRFS info (device loop0): setting nodatacow, compression disabled [ 163.604617][ T6153] BTRFS info (device loop0): enabling ssd optimizations [ 163.637853][ T6153] BTRFS info (device loop0): using spread ssd allocation scheme [ 163.649201][ T6149] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.667597][ T6153] BTRFS info (device loop0): using free space tree [ 163.826598][ T6149] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 163.889275][ T6149] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.203830][ T4766] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 164.323103][ T3637] syz-executor: attempt to access beyond end of device [ 164.323103][ T3637] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 164.430211][ T4598] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.697189][ T4598] usb 3-1: Using ep0 maxpacket: 8 [ 164.817252][ T4598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.840640][ T4598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.027330][ T4598] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 165.050792][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.097438][ T4598] usb 3-1: Product: syz [ 165.101676][ T4598] usb 3-1: Manufacturer: syz [ 165.106315][ T4598] usb 3-1: SerialNumber: syz [ 165.301328][ T6215] loop4: detected capacity change from 0 to 32768 [ 165.324972][ T6230] loop3: detected capacity change from 0 to 1764 [ 165.381171][ T6215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.832 (6215) [ 165.445635][ T6215] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.474832][ T6215] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 165.506742][ T6215] BTRFS info (device loop4): using free space tree [ 165.645172][ T6238] loop0: detected capacity change from 0 to 2048 [ 165.727986][ T6242] loop3: detected capacity change from 0 to 4096 [ 165.732793][ T6249] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.833540][ T4598] hid (null): report_id 2668810406 is invalid [ 165.884939][ T6215] BTRFS info (device loop4): enabling ssd optimizations [ 165.905808][ T4598] asus 0003:0B05:19B6.0004: report_id 2668810406 is invalid [ 165.945474][ T4598] asus 0003:0B05:19B6.0004: item 0 4 1 8 parsing failed [ 165.953964][ T4598] asus 0003:0B05:19B6.0004: Asus hid parse failed: -22 [ 165.967626][ T4598] asus: probe of 0003:0B05:19B6.0004 failed with error -22 [ 166.083541][ T4598] usb 3-1: USB disconnect, device number 9 [ 166.192074][ T3641] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.641931][ T6273] loop3: detected capacity change from 0 to 2048 [ 166.695615][ T6273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.798512][ T6273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.857735][ T6273] EXT4-fs (loop3): shut down requested (2) [ 166.999063][ T4160] EXT4-fs (loop3): unmounting filesystem. [ 167.072047][ T6286] loop0: detected capacity change from 0 to 512 [ 167.156042][ T6286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.183753][ T6286] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038 (0x7fffffff) [ 167.349583][ T6286] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 167.472846][ T4766] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /80/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.562353][ T6297] ================================================================== [ 167.570560][ T6297] BUG: KASAN: use-after-free in cpu_map_generic_redirect+0x1c7/0x650 [ 167.578752][ T6297] Read of size 8 at addr ffff8880797e2418 by task syz.3.857/6297 [ 167.586506][ T6297] [ 167.588866][ T6297] CPU: 1 PID: 6297 Comm: syz.3.857 Not tainted 6.1.110-syzkaller #0 [ 167.596868][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 167.606955][ T6297] Call Trace: [ 167.610258][ T6297] [ 167.613211][ T6297] dump_stack_lvl+0x1e3/0x2cb [ 167.617933][ T6297] ? nf_tcp_handle_invalid+0x642/0x642 [ 167.623437][ T6297] ? panic+0x764/0x764 [ 167.627549][ T6297] ? _printk+0xd1/0x111 [ 167.631737][ T6297] ? __virt_addr_valid+0x17f/0x530 [ 167.636976][ T6297] ? __virt_addr_valid+0x17f/0x530 [ 167.642117][ T6297] print_report+0x15f/0x4f0 [ 167.646649][ T6297] ? __virt_addr_valid+0x17f/0x530 [ 167.651884][ T6297] ? __virt_addr_valid+0x17f/0x530 [ 167.657044][ T6297] ? __virt_addr_valid+0x45b/0x530 [ 167.662285][ T6297] ? __phys_addr+0xb6/0x170 [ 167.666829][ T6297] ? cpu_map_generic_redirect+0x1c7/0x650 [ 167.672579][ T6297] kasan_report+0x136/0x160 [ 167.677112][ T6297] ? cpu_map_generic_redirect+0x1c7/0x650 [ 167.682868][ T6297] cpu_map_generic_redirect+0x1c7/0x650 [ 167.688446][ T6297] ? cpu_map_enqueue+0x370/0x370 [ 167.693416][ T6297] xdp_do_generic_redirect+0x401/0x850 [ 167.698907][ T6297] do_xdp_generic+0x50b/0x6d0 [ 167.703614][ T6297] ? trace_xdp_exception+0x280/0x280 [ 167.708933][ T6297] ? tun_get_user+0x24ee/0x42d0 [ 167.713844][ T6297] ? tun_get_user+0x24ee/0x42d0 [ 167.718747][ T6297] tun_get_user+0x261e/0x42d0 [ 167.723474][ T6297] ? rcu_read_unlock+0xa0/0xa0 [ 167.728270][ T6297] ? tun_get+0x1e/0x2f0 [ 167.732467][ T6297] ? __lock_acquire+0x1f80/0x1f80 [ 167.737539][ T6297] ? tun_get+0x1e/0x2f0 [ 167.741724][ T6297] ? tun_get+0x27d/0x2f0 [ 167.746010][ T6297] tun_chr_write_iter+0x10c/0x1f0 [ 167.751071][ T6297] vfs_write+0x857/0xbc0 [ 167.755435][ T6297] ? file_end_write+0x250/0x250 [ 167.760322][ T6297] ? __fget_files+0x28/0x4a0 [ 167.765026][ T6297] ? __fget_files+0x435/0x4a0 [ 167.769730][ T6297] ? __fdget_pos+0x1db/0x360 [ 167.774357][ T6297] ? ksys_write+0x77/0x2c0 [ 167.778795][ T6297] ksys_write+0x19c/0x2c0 [ 167.783146][ T6297] ? print_irqtrace_events+0x210/0x210 [ 167.788641][ T6297] ? __ia32_sys_read+0x80/0x80 [ 167.793424][ T6297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 167.799433][ T6297] ? lockdep_hardirqs_on+0x94/0x130 [ 167.804656][ T6297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 167.810663][ T6297] do_syscall_64+0x3b/0xb0 [ 167.815115][ T6297] ? clear_bhb_loop+0x45/0xa0 [ 167.819826][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.825756][ T6297] RIP: 0033:0x7f0d7c17c9df [ 167.830218][ T6297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 167.849865][ T6297] RSP: 002b:00007f0d7cee5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 167.858330][ T6297] RAX: ffffffffffffffda RBX: 00007f0d7c335f80 RCX: 00007f0d7c17c9df [ 167.866330][ T6297] RDX: 000000000000fdef RSI: 00000000200000c0 RDI: 00000000000000c8 [ 167.874339][ T6297] RBP: 00007f0d7c1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 167.882340][ T6297] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 167.890339][ T6297] R13: 0000000000000000 R14: 00007f0d7c335f80 R15: 00007fffef98e9c8 [ 167.898352][ T6297] [ 167.901384][ T6297] [ 167.903716][ T6297] Allocated by task 6037: [ 167.908068][ T6297] kasan_set_track+0x4b/0x70 [ 167.912694][ T6297] __kasan_kmalloc+0x97/0xb0 [ 167.917311][ T6297] alloc_mnt_ns+0xaf/0x3b0 [ 167.921778][ T6297] mount_subtree+0x98/0x4f0 [ 167.926310][ T6297] btrfs_mount+0x479/0xb40 [ 167.930763][ T6297] legacy_get_tree+0xeb/0x180 [ 167.935474][ T6297] vfs_get_tree+0x88/0x270 [ 167.939923][ T6297] do_new_mount+0x2ba/0xb40 [ 167.944457][ T6297] __se_sys_mount+0x2d5/0x3c0 [ 167.949166][ T6297] do_syscall_64+0x3b/0xb0 [ 167.953617][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.959543][ T6297] [ 167.961878][ T6297] Last potentially related work creation: [ 167.967609][ T6297] kasan_save_stack+0x3b/0x60 [ 167.972323][ T6297] __kasan_record_aux_stack+0xb0/0xc0 [ 167.977723][ T6297] insert_work+0x54/0x3d0 [ 167.982076][ T6297] __queue_work+0xb4b/0xf90 [ 167.986592][ T6297] queue_work_on+0x14b/0x250 [ 167.991196][ T6297] cpu_map_free+0xd7/0x1b0 [ 167.995630][ T6297] process_one_work+0x8a9/0x11d0 [ 168.000606][ T6297] worker_thread+0xa47/0x1200 [ 168.003849][ T6275] loop4: detected capacity change from 0 to 32768 [ 168.005307][ T6297] kthread+0x28d/0x320 [ 168.005330][ T6297] ret_from_fork+0x1f/0x30 [ 168.005357][ T6297] [ 168.005363][ T6297] Second to last potentially related work creation: [ 168.005370][ T6297] kasan_save_stack+0x3b/0x60 [ 168.033911][ T6297] __kasan_record_aux_stack+0xb0/0xc0 [ 168.035024][ T6275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.845 (6275) [ 168.039298][ T6297] call_rcu+0x163/0xa10 [ 168.039323][ T6297] __cpu_map_entry_replace+0x74/0x170 [ 168.039346][ T6297] cpu_map_free+0xd7/0x1b0 [ 168.039365][ T6297] process_one_work+0x8a9/0x11d0 [ 168.039390][ T6297] worker_thread+0xa47/0x1200 [ 168.039411][ T6297] kthread+0x28d/0x320 [ 168.039427][ T6297] ret_from_fork+0x1f/0x30 [ 168.039453][ T6297] [ 168.039457][ T6297] The buggy address belongs to the object at ffff8880797e2400 [ 168.039457][ T6297] which belongs to the cache kmalloc-cg-256 of size 256 [ 168.039476][ T6297] The buggy address is located 24 bytes inside of [ 168.039476][ T6297] 256-byte region [ffff8880797e2400, ffff8880797e2500) [ 168.039497][ T6297] [ 168.039501][ T6297] The buggy address belongs to the physical page: [ 168.039523][ T6297] page:ffffea0001e5f880 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880797e3e00 pfn:0x797e2 [ 168.039548][ T6297] head:ffffea0001e5f880 order:1 compound_mapcount:0 compound_pincount:0 [ 168.039564][ T6297] memcg:ffff888057213e01 [ 168.039573][ T6297] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 168.155115][ T6297] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017c42c80 [ 168.163727][ T6297] raw: ffff8880797e3e00 000000008010000a 00000001ffffffff ffff888057213e01 [ 168.172317][ T6297] page dumped because: kasan: bad access detected [ 168.178743][ T6297] page_owner tracks the page as allocated [ 168.184542][ T6297] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3640, tgid 3640 (syz-executor), ts 68806358569, free_ts 68786139626 [ 168.207819][ T6297] post_alloc_hook+0x18d/0x1b0 [ 168.212589][ T6297] get_page_from_freelist+0x322e/0x33b0 [ 168.218135][ T6297] __alloc_pages+0x28d/0x770 [ 168.222724][ T6297] alloc_slab_page+0x6a/0x150 [ 168.227404][ T6297] new_slab+0x84/0x2d0 [ 168.231498][ T6297] ___slab_alloc+0xc20/0x1270 [ 168.236277][ T6297] __kmem_cache_alloc_node+0x19f/0x260 [ 168.241755][ T6297] __kmalloc_node+0xa2/0x230 [ 168.246352][ T6297] kvmalloc_node+0x6e/0x180 [ 168.250864][ T6297] nf_hook_entries_grow+0x331/0x760 [ 168.256065][ T6297] __nf_register_net_hook+0x29c/0x930 [ 168.261438][ T6297] nf_register_net_hook+0xac/0x180 [ 168.266554][ T6297] nf_register_net_hooks+0x3d/0x1a0 [ 168.271757][ T6297] ip6t_register_table+0x4d0/0x7b0 [ 168.276887][ T6297] ip6table_security_table_init+0x3e/0x60 [ 168.282653][ T6297] xt_find_table_lock+0x2cc/0x3a0 [ 168.287707][ T6297] page last free stack trace: [ 168.292376][ T6297] free_unref_page_prepare+0xf63/0x1120 [ 168.297924][ T6297] free_unref_page+0x33/0x3e0 [ 168.302600][ T6297] qlist_free_all+0x76/0xe0 [ 168.307110][ T6297] kasan_quarantine_reduce+0x156/0x170 [ 168.312660][ T6297] __kasan_slab_alloc+0x1f/0x70 [ 168.317613][ T6297] slab_post_alloc_hook+0x52/0x3a0 [ 168.322731][ T6297] kmem_cache_alloc_lru+0x10c/0x2d0 [ 168.327934][ T6297] sock_alloc_inode+0x24/0xc0 [ 168.332611][ T6297] new_inode_pseudo+0x61/0x1d0 [ 168.337383][ T6297] __sock_create+0x11f/0x910 [ 168.341978][ T6297] __sys_socket+0x136/0x3a0 [ 168.346487][ T6297] __x64_sys_socket+0x76/0x80 [ 168.351172][ T6297] do_syscall_64+0x3b/0xb0 [ 168.355602][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.361565][ T6297] [ 168.363955][ T6297] Memory state around the buggy address: [ 168.369585][ T6297] ffff8880797e2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 168.377652][ T6297] ffff8880797e2380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 168.385739][ T6297] >ffff8880797e2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.393894][ T6297] ^ [ 168.399092][ T6297] ffff8880797e2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.407156][ T6297] ffff8880797e2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 168.415214][ T6297] ================================================================== [ 168.423423][ T6297] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 168.431173][ T6297] CPU: 1 PID: 6297 Comm: syz.3.857 Not tainted 6.1.110-syzkaller #0 [ 168.439186][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 168.449284][ T6297] Call Trace: [ 168.452589][ T6297] [ 168.455553][ T6297] dump_stack_lvl+0x1e3/0x2cb [ 168.460286][ T6297] ? nf_tcp_handle_invalid+0x642/0x642 [ 168.465781][ T6297] ? panic+0x764/0x764 [ 168.469883][ T6297] ? rcu_is_watching+0x11/0xb0 [ 168.474677][ T6297] ? vscnprintf+0x59/0x80 [ 168.479038][ T6297] panic+0x318/0x764 [ 168.482963][ T6297] ? check_panic_on_warn+0x1d/0xa0 [ 168.488112][ T6297] ? memcpy_page_flushcache+0xfc/0xfc [ 168.493595][ T6297] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 168.499502][ T6297] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 168.505410][ T6297] ? _raw_spin_unlock+0x40/0x40 [ 168.510269][ T6297] ? print_report+0x4a3/0x4f0 [ 168.514958][ T6297] check_panic_on_warn+0x7e/0xa0 [ 168.519906][ T6297] ? cpu_map_generic_redirect+0x1c7/0x650 [ 168.525723][ T6297] end_report+0x66/0x110 [ 168.529983][ T6297] kasan_report+0x143/0x160 [ 168.534661][ T6297] ? cpu_map_generic_redirect+0x1c7/0x650 [ 168.540389][ T6297] cpu_map_generic_redirect+0x1c7/0x650 [ 168.545944][ T6297] ? cpu_map_enqueue+0x370/0x370 [ 168.551673][ T6297] xdp_do_generic_redirect+0x401/0x850 [ 168.557147][ T6297] do_xdp_generic+0x50b/0x6d0 [ 168.561863][ T6297] ? trace_xdp_exception+0x280/0x280 [ 168.567155][ T6297] ? tun_get_user+0x24ee/0x42d0 [ 168.572022][ T6297] ? tun_get_user+0x24ee/0x42d0 [ 168.576886][ T6297] tun_get_user+0x261e/0x42d0 [ 168.581587][ T6297] ? rcu_read_unlock+0xa0/0xa0 [ 168.586371][ T6297] ? tun_get+0x1e/0x2f0 [ 168.590538][ T6297] ? __lock_acquire+0x1f80/0x1f80 [ 168.595580][ T6297] ? tun_get+0x1e/0x2f0 [ 168.599756][ T6297] ? tun_get+0x27d/0x2f0 [ 168.604005][ T6297] tun_chr_write_iter+0x10c/0x1f0 [ 168.609043][ T6297] vfs_write+0x857/0xbc0 [ 168.613300][ T6297] ? file_end_write+0x250/0x250 [ 168.618255][ T6297] ? __fget_files+0x28/0x4a0 [ 168.622845][ T6297] ? __fget_files+0x435/0x4a0 [ 168.627525][ T6297] ? __fdget_pos+0x1db/0x360 [ 168.632117][ T6297] ? ksys_write+0x77/0x2c0 [ 168.636627][ T6297] ksys_write+0x19c/0x2c0 [ 168.640959][ T6297] ? print_irqtrace_events+0x210/0x210 [ 168.646523][ T6297] ? __ia32_sys_read+0x80/0x80 [ 168.651305][ T6297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 168.657288][ T6297] ? lockdep_hardirqs_on+0x94/0x130 [ 168.662694][ T6297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 168.669549][ T6297] do_syscall_64+0x3b/0xb0 [ 168.674154][ T6297] ? clear_bhb_loop+0x45/0xa0 [ 168.678936][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.684860][ T6297] RIP: 0033:0x7f0d7c17c9df [ 168.689276][ T6297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 168.708888][ T6297] RSP: 002b:00007f0d7cee5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 168.717312][ T6297] RAX: ffffffffffffffda RBX: 00007f0d7c335f80 RCX: 00007f0d7c17c9df [ 168.725291][ T6297] RDX: 000000000000fdef RSI: 00000000200000c0 RDI: 00000000000000c8 [ 168.733265][ T6297] RBP: 00007f0d7c1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 168.741236][ T6297] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 168.749215][ T6297] R13: 0000000000000000 R14: 00007f0d7c335f80 R15: 00007fffef98e9c8 [ 168.757194][ T6297] [ 168.760500][ T6297] Kernel Offset: disabled [ 168.764852][ T6297] Rebooting in 86400 seconds..