last executing test programs: 1m53.914038809s ago: executing program 3 (id=160): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$3(0x3) 1m53.31299708s ago: executing program 3 (id=165): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 1m53.242900803s ago: executing program 3 (id=166): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1m51.676128757s ago: executing program 3 (id=173): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m50.874631405s ago: executing program 3 (id=178): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000c40)={0x3, {{0xa, 0x1e22, 0xc, @mcast1, 0x408}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00'}}]}, 0x110) 1m50.258594226s ago: executing program 3 (id=181): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000100)=0x8000000000000001) 1m49.668132717s ago: executing program 32 (id=181): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000100)=0x8000000000000001) 3.980212472s ago: executing program 0 (id=975): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/177, 0xb1}], 0x1, &(0x7f0000000c80)=""/68, 0x44}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001440)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)='#', 0x1}], 0x1}}], 0x2, 0x40480dc) 3.695471392s ago: executing program 0 (id=977): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.283764216s ago: executing program 0 (id=982): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.18687837s ago: executing program 0 (id=983): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) 2.868891641s ago: executing program 0 (id=987): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x0, 0x0, 0xc9b6}]) 2.590690341s ago: executing program 1 (id=990): r0 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.452775135s ago: executing program 0 (id=1000): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) 2.374492858s ago: executing program 1 (id=993): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={&(0x7f00000005c0)=[r1], 0x1, 0x80800}) 2.167976955s ago: executing program 1 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000150000000000000000000500000a40000000160a01040000000000000000020000040900020073797a30000000000900010073797a300000000014000380080001400000010008"], 0x68}}, 0x0) 1.963921672s ago: executing program 1 (id=1001): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 1.860653316s ago: executing program 2 (id=1002): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0xffffffff, 0xfffbfffd, 0x8, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x0, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 1.860505626s ago: executing program 4 (id=1003): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.74388287s ago: executing program 4 (id=1004): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20012, r0, 0x7b341000) 1.677493702s ago: executing program 2 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.531621347s ago: executing program 2 (id=1006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c0081000500010006000000200013008b6c128cb66c0c026c24861b84cc25c80618b0021885008403e0008c050019000100000008001400", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) 1.531471398s ago: executing program 4 (id=1007): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) 1.45432057s ago: executing program 2 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.387218702s ago: executing program 4 (id=1009): r0 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 1.248669577s ago: executing program 2 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d0318"]) 1.074788003s ago: executing program 2 (id=1011): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.073526913s ago: executing program 1 (id=1012): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 1.038413024s ago: executing program 4 (id=1013): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x6077, &(0x7f0000006480)="$eJzs3V1vHFcZB/BnX7x2XJpGFapCxEWaQmkpzXsC5a0pF1wAEkgo1yRy3SqQAkoColVEXOUCccHLR4Cb3nDRL1K+AuIDECnhqhKUQeM9JxlP1lmnsXd2fX4/yZl59sx4z+Tv8ex6ZvYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf++6PT/Ui4tKv0wOHIj4Tg4h+xIG6Phr1zIW8/DAiDsdmczwXEYPliHr9zX+eiTgbER8djLh77+Za/fDpHfbj3Mkb1z75/nf+8bs/3T780zd/8kG7/UefPfPh729FHPrhax9+cmt3th0AAABKUVVV1Utv84+k9/f9rjsFAMxEPv5XSX5crVar1bta/7E/X/3Zeb0S89Uf9RPVTdVkt5pFRGw016lfMzgdDwALZiM+7roLdEj+RRtGxFNddwKYa72uO8CeuHvv5lov5dtrHg+Ojtvz3ym35L/Ru39/x3bTadrXmMzq5+t2DOLZbfpzYEZ9mCc5/347/0vj9lFabq/zn5Xt8h+Nb30qTs5/0M6/ZUv+f46Ihc2/PzH/UuX8h4+T/8Zggfd/+QMAAAAAsP/lv/8f6vj87/KTb8qOPOr879EZ9QEAAAAAAAAAdtuTjv93n/H/AAAAYG7V79Vrfzn44LHmtf7t+Yu9iKdbywOFSTfLrHbdDwAAAAAAAAAAAAAoyXB8De/FXsRSRDy9ulpVVf3V1K4f15Ouv+hK334oWde/5AEAYOyjg617+XsRKxFxMX3W39Lqah6qrzqwnF/PjpZXqgON97V5Wj+2PNrBC+LhqKq/2UpjvaZp75entbe/X/1co2qwg47NRkdhA0AyPhrddUTaZ6rqmej6VQ6Lwf6//9j/2Ymuf04BAACAvVdVVdVLH+d9JJ3z73fdKQBgFlby8b99XkCtVqvVavX+q5uqyW41i4jYaK5Tv2YwHD8ALJiN+LjrLtAh+RdtGBGHu+4EMNd6XXeAPXH33s21Xsq31zwepPHd87UgW/Lf6G2ul9efNJ2mfY3JrH6+bscgnt2mP8/NqA/zJOffb+d/adw+Ssvtdf6zsl3+9XYe6qA/Xcv5D9r5t+yf/PsT8y9Vzn/4WPkPnjj/rvY1+QMAAAAAUIL89/9Dzv/mTQYAAAAAAACAhXP33s21fC9ePv//+QnL9Zpz7v/cN3L+vR3n7/7f/STn32/n37ogZ9CYv/PGg/z/fe/m2gc3/vW5PJ37/JcGo/q5l3r9wTBd81MtvRVX4mqsx8mHlh9uaT/1UPvSlvbTU9rPPNQ+qtsP5PbjsRa/iKvx5v325SkXRq1Maa+mtOf8B/b/IuX8h42vOv/V1N5rTWt33u8/tN83p5Oe58Lf/vviw3vX7N2Owf1ta6q371gH/dn8P3lqFL+6vn7t+G8u37hx7VSkyZZHT0ea7LKc/1L6yvm/9MK4Pf/eb+6vd94fPXb+8+J2DLfN/4XGfL29L8+4b13I+Y/SV84/H4Em7/+LnP/2+/8rHfQHAAAAAAAAAAAAAAAAHqWqqs1bRC9ExPl0/09X92YCADP1hx+kmSoJ9bjuxXz1R61Wq9XqXaibqslebxaxsnWd8xHx20nfDACYZ/+LiH923Qk6I/+C5c/7q6df6LozwExdf/e9n12+enX92vWuewIAAAAAAAAAfFp5/M+jjfGfN68Dao0bvWX81zfi6MKO/9kfDTbHOk8b9Hw8evzvY/Ho8b+HU55vaUr7aEr78pT2lSntE2/0aMj5P58yzvkfSRtW0vivL3XQn67l/I+lsZ5z/l9qLdfMv/rrIuff35L/iRvv/PLE9Xffe/XKO5ffXn97/eenTp4/e+bc2TPnzp1468rV9ZPjfzvs8d7K+eexr10HWpacf85c/mXJ+X8x1fIvS87/xVTLvyw5//x6T/5lyfnn9z7yL0vO/+VUy78sOf8vp1r+Zcn5v5Jq+Zcl5/+VVMu/LDn/V1Mt/7Lk/I+nWv5lyfmfSLX8y5Lzz2e45F+WnH++skH+Zcn5n061/MuS8z+TavmXJed/NtXyL0vO/1yq5V+WnP/5VMu/LDn/r6Za/mXJ+X8t1fIvS87/tVTLvyw5/6+nWv5lyfl/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP/rqZZ/WR58/r+ZGc/85+8Rc9ANM2YmzXT9mwkAAAAAAAAAAAAAaJvF5cRdbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+9tXrJBD/SQghGLJ2nGDIxrvrt8QEg3n9p6GlaSC0tFDH2OsX8Fu9a0gQapaGtiCQGrW9oBelgChCaqtECKlUoihSkdq7cgXKDWolpFpqqEwElWiBrc6c53l2ZnZ2Zne9mz1zzucTJb9458zMM2fOzO53re8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmu1428wfD2RZlv/b+M+2LLsh//+t2ZH8j/MHN3uFAAAAwLX6ReO/f3tj+sKRFVypaZt/fs2/fmNhYWEh+9ALV375ZwsL6YLxLBvakmWNy6J/+dlPF5q3CZ7MxgYGm/482OPuh3pcPtzj8pEel4/2uHxLj8vHely+ZAcssbX4fUzjxnY1/ndbsUuzm7ORxmW7OlzryYEtg4PxdzkNA43rLIyczM5kZ7OZbGrJdQYa/2TZt3bk9/VAFu9rsOm+tmdZdvXHnzge1zAQ9vGurOXOGpqfux+9JRt/4cefOP7Vuedf2Wn23A1LVpplu3fm6/xUli3+uiobyLakfRLXOdi0zu0d1jnUss6BxvXy/29f59UVrjM+7rGwzu92Wef28LXH7siybD5bdpt2T2aD2XVt95r291hxROS3kT+VL8uGV3Wc7FjBcZJf54d3tB4n7cdk3P87wj4ZXmYNzU/Hjz45umS/r/U4yR91GY7V/LYfyu90bKz5V6stx2q+zSfuXP4Y6PjcdTgG0rHcdAzs7HUMDI4ONY6BwcU172w5BqaXXGcwG2jc15U7ux8Dk3PnLk7OPv7xe86cO3Zq5tTM+empg/v3Hdi/78CByZNnzs5MFf9d3S7tI9dlg+kY3Bnea+Ix+Nq2bZsPyYUvrd/rYKwkr4P8sb/3rnxBNwxmyxzj+Taf2n3tr4P0fb/pdTDc9Dro+J7a4XUwvILXQb7N1d0r+5453PRvpzVs1HvhtqZjYDO/H+b3+YHXLf9euD2s69OvX+33w6Elx0B8WAPhtZd/Jf28N3Zf2C9Lj4vb8guuH238bLfnsWNzc5emszBeFDc1PVftx8t1TY8pW3K8DK76eDnyNz+/67YOX98W9tXY3d2fq3yb/RPdn6vGu/v1o9nl2ZlLYX+OZsX+bPnq3iyMdfZi789O383y/ZmyRJf9mW/zqXuu/WfBlEua3v9Ger3/DY0MF+9/Q2lvjLS8/y19aoYaK8uyq/es7P1vJPz7Yr//3VyS9798X31gT/djIN/m05OrPQaGu77/3RHmQFjP60JiGGvK/b9sXD5fHKZNz2XP42Z4eCQcN8PxHluPm31LrpPfWn7fu6fWdtzsvqP1uWr5uWXlx02vXx+U5rjJ99WfT3U/bvJtnp2+9veOrfF/m947RnsdAyNDo/l6R9JBULzfLWyNx8Ce7Hh2ITubnUjXyZ/l/L4m9q7sGBgN/77Y7x23luQYyPfV5/d2Pwbybb6zb31/dtodvpK2afrZqf33C8tl/tuGF2+vfbetd+bP1/n27707fa1Thsi3eX7/anNG9/10d/jK9R32U/vrZ7lj+kT24uynW8M6zx7o/rupfJubD67weDqSZdlz0881ft8Vfr/79cvf+0bL7307/U75uennHpx8+PurWT8AAGv3y8Z/50eLnzWb/sZ6JX//DwAAAPSFmPsHw0zkfwAAAKiMmPuHwkzkfwAAAKiMmPuHw0xqkv9P33fo6V88kaVPA1wI4uVxNzz0pmK72PGeD38eX1iUf/2tXxl5+jNPrOy+B7Ms+/mDr+q4/ek3xXUVLsZ1vqH160vcevuK7v/RRxa3a/78hKuHituPj2elh0HsKn9rcm/jdscfn27MZx/MGvPh+U8/Wdx+8ee4/ZV9xfZ/GT605MjJgZbr7w7r2RXmePhMmYeOLO6HfMbrPb39Nf900/sW7y9eb2DnSxsP8/O/X9xu/Iyop24qto+Pe7n1/+Nnv/Z0vv1jd3Ze/xODndd/JdzuD8P82eFi++Z9/pmm9f9hWH+8v3i9PV/+dsf1P/OKYvtnwnHxxTDb1/+WP3n1Lzo9X/F+jtxfXC/e/9R/729cL95evP329Y89Md2yP9pv/9kXits5/NGfDDVvH78e7yd69P7W43sgPL8tPfIsy772R1nLfs7eWFzvH9rWH2/v4v2d13932zovDtzeuP7i49nW8ri+8Nd7Oz7euJ4jf7et5fE89Y6w/16Y/E5+u1ceDsdjuPx/vlvcXvuHkTzzjtb3m7j9F7cVr9t4e5Nt63+qbf3zt+f7rvf6H3ihWP8zb97Ssv4j7wzH0wPF7LX+U391Y8v1v/TV4vm49LGJ8xdmL5850bRXm1/HW8a2Xnf9DS956Y3hvbT9z0cvzJ2euTQ+NT6VZeN9+JGBG73+L4f5X8WYX/97KHz/J8Vx97l3Fd+3XvvT4s9Pha8/Gp7P+P3xC38x0nK8tj/v828u5rWu//VhHSv1is/+++0r2vDKB791+e//4Pn2nwvi47n48rHG4/v8jlsalw08W1ze/n7Vy7+9vPV1/YPhqcb8ZtivC+GTmXfeUtxf++3Hzyb53HuK12/8SS5eP2v7PJFtQ62P41rX/4Pwc8y3b219/4vHxzefaPs0523ZQL6E+fD+kM0Xl8et4v7+3NVbOt5f/ByebP6Vq1nmsmYfn508e+b85ccm52Zm5yZnH//40XMXLp+fO9r47NKjH+51/cXX93WN1/eJmYP7s8ar/UIxNthmr//iI8dP3Dt114mZk8cun5x75OLMpVPHZ2ePz5yYvevYyZMzH+t1/TMnDk/vPbTv3r0Tp86cOHzfoUP7Dk2cOX8hX0axqB4OTn1k4vylo42rzB7ef2j6wIH9UxPnLpyYOXzv1NTE5V7Xb3xvmsiv/dGJSzNnj82dOTczMXvm4zOHpw8dPLi356c/nrt4cnZ88tLl85OXZ2cuTRaPZXyu8eX8e1+v61MPsxfC+12bgfDT+fvvPpg+Hzf3lU8ue1PFJq0/nmY/Cp8FFb+/9fpzzP0jYSY1yf8AAABQBzH3hw/+X7xA/gcAAIDKiLl/S5iJ/A8AAACVEXN/kfzH0unf65L/16v//0n9/wb9f/3/TP8/0f/X/8/0//X/e9D/L0X//7T+v/6//j8bpWz9/5D7s61Z5u//AQAAoKJi7r8uzET+BwAAgMqIuf/6MBP5HwAAACoj5v4bwkxqkv+d/1//X/+/W/8/blur/v/w4j3p/5es/7/rP/X/l9D/1//P9P/XbLP78/2+/hL2/7fq/1M2Zev/x9z/kjCTmuR/AAAAqIOY+18aZiL/AwAAQKltWcW2MfffGGYi/wMAAEBlxNy/LcykJvl/8/r/o/r/+v8N5e7/O/9/M/3/Te//O/9/B/r/+v9Zbfr/xQ8L+v/lWf/G9///tOv1nf+fflC2/n/M/f8vzKQm+R8AAADqIOb+l4WZyP8AAABQGTH33xRmIv8DAABAZcTcf3OYSU3yfz3P///DLMv0/zP9f/3/tnXq/+v/bwT9f/3/bja3/5//7NNP/X/n/y/b+kt4/n/9f0qnbP3/mPtfHmZSk/wPAAAAdRBz/y1hJvI/AAAAVEbM/a8IM5H/AQAAoDJi7r81zKQm+b+e/X/n/9f/L2xA/39gWP8/0f/X/8/0//X/e3D+f/3/fl6//r/+P72Vrf8fc/8rw0xqkv8BAACgDmLuvy3MRP4HAACAyoi5/1VhJvI/AAAAVEbM/dvDTGqS//X/9f/1/53/X/9f/38j9Vf/f3DZS/T/C/r/rdav/z+/uAD9/75Zv/6//j+9la3/H3P/q8NMapL/AQAAoA5i7n9NmIn8DwAAAJURc//tYSbyPwAAAFRGzP3jYSY1yf/6//r/+v/6//r/+v8bqb/6/8vT/y/o/7dy/n/9f/1//X+6K1v/P+b+HWEmNcn/AAAAUAcx9+8MM5H/AQAAoDJi7r8jzET+BwAAgMqIuX9XmElN8n9J+/+P6v/r/2f6//r/bftT/1//vxP9f/3/TP9/zTa7P9/v69f/1/+nt7L1/2PuvzPMpCb5HwAAAOog5v67wkzkfwAAAKiMmPtfG2Yi/wMAAEBlxNy/O8ykJvm/pP1/5//X/9f/X0n/f0j/P9P/L70e6//ftm87q6b/r/+f6f+v2Wb35/t9/fr/+v/0Vrb+f8z9rwszqUn+BwAAgDqIuf/1YSbyPwAAAFRGzP13h5nI/wAAAFAZMfdPhJlUOP83Vyoq3v9//j+W2Uz/v6D/3+f9f+f/b1m//n85Of+//n83+v/6//28fv1//X96K1v/P+b+e8JMKpz/AQAAoG5i7t8TZiL/AwAAQGXE3D8ZZiL/AwAAQGXE3D8VZlKT/F/x/v+y9P8L+v9fe3rhRv1//X/9/42k/6//343+v/5/P69f/1//n97K1v+PuX86zKQm+R8AAADqIOb+vWEm8j8AAABURsz9+8JM5H8AAACojJj794eZ1CT/90n/f08qQOn/6/87/7/+v/5/X9H/r2j/P38j0f/X/78wl3aw/r/+v/4/gx2+Vrb+f8z9B8JMapL/AQAAoA5i7j8YZiL/AwAAQGXE3H9vmIn8DwAAAJURc/99YSY1yf990v93/n/9f/3/Jvr/+v/9RP+/ov1/5/9v0P93/n/9f/1/uitb/z/m/kNhJjXJ/wAAAFAHMfe/IcxE/gcAAIDKiLn//jAT+R8AAAD6SqfzEEYx978xzKQm+V//v+r9/4Ut+v/6//r/3dev/7+x9P/1/7vR/9f/7+f16//r/9Nb2fr/MfcfDjOpSf4HAACAOoi5/01hJvI/AAAAVEbM/W8OM5H/AQAAoDJi7j8SZlKT/K//X/X+v/P/6//r//dav/7/xtL/1//vppL9/y3V7/+HH1v0/0vU/8+PIf1/yqhs/f+Y+98SZlKT/A8AAAB1EHP/W8NM5H8AAACojJj73xZmIv8DAABAZcTc//Ywk5rkf/1//X/9f/1//X/9/42k/79h/f/GW6H+f6FU/X/n/9f/d/5//X+SsvX/Y+5/R5hJTfI/AAAA1EHM/e8MM5H/AQAAoDJi7v//YSbyPwAAAFRGzP0PhJnUJP/r/+v/6//r/+v/6/9vJP3/NfX/278dL0v/v6D/vzab3Z/v9/Xr/+v/01vZ+v8x9/9KmElN8j8AAADUQcz9D4aZrCr/D67zqgAAAID1FHP/u8JM/P0/AAAA9JnRZS+Juf9Xw0xqkv/7r/8/3pf9/8F0+/r/+v/6//r/+v/rqaL9/xXT/y/o/6/NZvfn+339+v/6//RWtv5/zP2/FmZSk/wPAAAAdRBz/7vDTOR/AAAAqIyY+389zET+BwAAgMqIuf+hMJOa5P/17v+v+ITFzv/foP+v/6//r/+v/39t9P/1/zP9/zXb7P58v69f/1//n97K1v+Puf83wkxqkv8BAACgDmLufzjMRP4HAACAkjq96mvE3P+eMBP5HwAAACoj5v73hpnUJP/33/n/9f/1//X/9f/1//uJ/r/+fzf6//r//bx+/X/9f3orW/8/5v5Hwkxqkv8BAACgDmLuf1+YifwPAAAAlRFz/2+Gmcj/AAAAUBkx9/9WmElN8r/+v/6//r/+v/6//v9G0v9f2v/P38P0/wv6//r//bx+/X/9f3orW/8/5v73h5nUJP8DAABAHcTc/9thJvI/AAAAVEbM/b8TZiL/AwAAQGXE3P+BMJOa5H/9f/1//X/9f/1//f+NpP/v/P/d6P/r//fz+vX/9f/prWz9/5j7PxhmUpP8DwAAAHUQc//vhpnI/wAAAFAZMfcfDTOR/wEAAKAyYu5/NMykJvlf/1//X/9f/1//X/9/I+n/6/93o/+v/9/P69f/1/+nt7L1/2PuPxZmcqT1bgAAAID+FXP/h8JMavL3/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWZSk/yv/6//r/+v/6//r/+/kfT/9f+70f/X/+/n9ev/6//TW9n6/zH3z4SZ1CT/AwAAQB3E3H8yzET+BwAAgMqIuf9UmIn8DwAAAJURc//pMJOa5H/9/579/4WVnAFS/7/z+vX/S93//+7X29ap/6//vxH0//X/u9H/1//v5/VXsv+fhQNN/591Urb+f8z9Z8JMapL/AQAAoA5i7v9wmIn8DwAAAJURc/9HwkzkfwAAAKiMmPvPhpnUJP/r/zv/v/7/ivr/sZZbpf7/ys7/v3XxfvX/9f/XQv9f/78b/f8+7f/H7w36/9Xr/zv/P+usbP3/mPvPhZnUJP8DAABAHcTcfz7MRP4HAACAyoi5/0KYifwPAAAAlRFz/8Uwk5rkf/3/1fX/B5bpBur/d15/hfr/VTz//8r6/030//X/10L/X/+/G/3/Pu3/B87/r/+v/08vZev/x9z/e2EmNcn/AAAAUAcx918KM5H/AQAAoDJi7v8/9u57ydKy2uP4ZmCGQct74Ba8Ai/Ba7DKOzBHxAhmxYQ5YcKEWcGcc8acc0AxxyotutdaMD3T7+6e3nv2+z7r8/nDdWih5kXRc37F+dbzoLjF/gcAAIBh5O5/cNzSZP/r/73/r//X/+v/9f/bpP/X/0/R/8+0/7/yaH+8/l//r/9nnbn1/7n7HxK3NNn/AAAA0EHu/ofGLfY/AAAADCN3/8PiFvsfAAAAhpG7/+FxS5P9r//X/+v/9f/6f/3/Nun/F9r/r1b6/yMYtv/3/r/+X//PhpzX/8d/4e2q/8/d/4i4pcn+BwAAgA5y9z8ybrH/AQAAYBi5+x8Vt9j/AAAAMIzc/Y+OW5rsf/2//l//r//X/+v/t0n/v9D+3/v/R6L/1//r//X/TDuv/w+76v9z9z8mbmmy/wEAAKCD3P2PjVvsfwAAABhG7v5r4hb7HwAAAIaRu/9xcUuT/a//1//r/xfY/1+h/9f/L4f+X/8/Rf+f/f/l9evr/5fz/fp//T/rza3/z91/bdzSZP8DAABAB7n7Hx+32P8AAAAwjNz9T4hb7H8AAAAYRu7+J8YtTfa//l//r/9fYP/v/X/9/4Lo//X/U/T/3v9f8vfr//X/rLfF/n/vvw6P2//n7n9S3NJk/wMAAEAHufufHLfY/wAAADCM3P1PiVvsfwAAABhG7v7r4pYm+1//r//X/+v/9f/6/23S/+v/p+j/9f9L/n79v/6f9bb+/v/9r9+7R+3/c/dfH7c02f8AAADQQe7+p8Yt9j8AAAAMI3f/0+IW+x8AAACGkbv/6XFLk/2v/9f/393//+8y/b/+X/9/98/1/5uh/9f/T9H/6/+X/P36f/0/6229/1/T+x/87dz9z4hbmux/AAAA6CB3/zPjFvsfAAAAhpG7/1lxi/0PAAAAs3f2iL9f7v5nH/yjmux//b/+3/v/+n/9v/5/m/T/s+3/D/5H71zb6//P3PM3ltz/33z7/r82+n/9/4X6//sd4fv1/3Qwt/4/d/9z4pYm+x8AAAA6yN3/3LjF/gcAAIBh5O6/IW6x/wEAAGAYufufF7c02f/6f/2//l//f27/f6pl/3/Xz/T/26H/n23/P837/0fi/X/9v/f/9f9Mm1v/n7v/+XFLk/0PAAAAHeTuf0HcYv8DAADAMHL3vzBusf8BAABgGLn7XxS3NNn/+n/9v/5f/3+i9/8vH6P/9/7/9uj/9f9T9P/6/yV/v/5f/896c+v/c/ffGLc02f8AAAAwvFOr2v0vjlvsfwAAABhG7v6XxC32PwAAAAwjd/9L45Ym+1//r//X/+v/T9T/D/L+v/5/e/T/+v8pR+3/V/r/+nPZbf9/+pzf0v/r//X/rDO3/j93/8vilib7HwAAAMZz3Xk/yd3/8rjF/gcAAIBh5O5/Rdxi/wMAAMAwcve/Mm5psv/1//p//b/+X/+v/98m/b/+f4r3/5fW/59L/6//1/+zztz6/9z9r4pbmux/AAAA6CB3/6vjFvsfAAAAhpG7/zVxi/0PAAAAw8jd/9q45eD+P3Upv+rS2Wn/n+2G/l//r//fo/+Pf1/1//r/Y9D/6/9XA/b/Zw/59fT/8/p+/b/+n/Xm1v/n7r8pbvH3/wEAAGAYuftfF7fY/wAAADCM3P2vj1vsfwAAABhG7v43xC1N9v9h/f+d997/573/fzT6/wt/v/5/Fv3/Xb+2/l//vzP6/3X9/2VH/v4L/a83/f++0fp/7/8v4/v1//p/1ptb/5+7/41xS5P9DwAAAB3k7n9T3GL/AwAAwDBy998ct9j/AAAAMIzc/W+OW5rs/82//3/1Lvr/u+M6/b/+X//v/f/4+WH9/0H6/+3S/+/w/f8rzv+R/v/cPw/9v/5f/6//Z7vm1v/n7n9L3NJk/wMAAEAHufvfGrfY/wAAADCM3P1vi1vsfwAAAJits8f8/XP3v/3gH91k/2++//f+v/7/mP3/Kf1/0v/Hv6/e/9f/H4P+3/v/K/3/Rdt1P7/079f/6/9Zb279f+7+W/amXr/9DwAAAB3csvePZ1fviFvsfwAAABhG7v53xi32PwAAAAwjd/+74pYm+1//r//fef/v/f9yof7/xlP6f/2//n+K/l//v9L/X7Rd9/NL/379v/6f9ebW/+fuf3fc0mT/AwAAQAe5+98Tt9j/AAAAMIzY/fv/z+/2PwAAAAzpvXv/eHb1vrilyf5v3P9ffdL+/6p7/M/6/wt/v/5/I+//33Lwrz39/4L6/2v0//p//f8U/b/+f8nfP5/+f/+38/821f8zJ3Pr/3P3vz9uabL/AQAAoIPc/R+IW+x/AAAAGEbu/lvjFvsfAAAAhpG7/7a4pcn+b9z/D/L+/wPuiC/Q/4/b/3v/P+4i+3/v/+v/9f+T9P/6/yV//3z6f+//M19z6/9z938wbmmy/wEAAKCD3P0filvsfwAAABhG7v4Pxy32PwAAAAwjd/9H4pYm+1//v/T+3/v/+n/9/2D9/236/+PR/+v/V/r/i7brfn7p36//1/+z3tz6/9z9H41bmux/AAAA6CB3/8fiFvsfAAAAhpG7/+Nxi/0PAAAAw8jd/4m4pcn+1//r/7fV/9/1i+j/m/T/1+r/V97/P5T+X/8/Rf+v/1/y92+s/7+X/p9xza3/z93/ybilyf4HAACADnL3fypusf8BAABgGLn7Px232P8AAAAwjNz9n4kb7nuf3X3SZp0+5OfRm+v/9f/e/9f/e/9f/79N+n/9/xT9f+P+/7KT/8d1mP7f+/8MbG79f+7+z8Yt/v4/AAAADCN3/+fiFvsfAAAAhpG7//Nxi/0PAAAAw8jd/4W4pcn+1//r//X/i+3/r9L/n/v9+v950v/r/6fo/xv3/wN8v/5f/896c+v/c/d/MW5psv8BAACgg9z9X4pb7H8AAAAYRu7+L8ct9j8AAAAMI3f/V+KWJvtf/6//1/8vtv/3/v+B79f/z5P+X/8/Rf+v/1/y9+v/9f+sN7f+P3f/V+OWJvsfAAAAOsjd/7W4xf4HAACAYeTu/3rcYv8DAADAMHL3fyNuabL/9f/6f/2//l//r//fpkve/5/a/K+x0v/r/w+h/9f/6//1/0ybW/+fu/+bcUuT/Q8AAAAd5O6/PW6x/wEAAGAYufu/FbfY/wAAADCM3P3fjlua7P+R+/+p303/v0//r/9f6f8P9v9n8uf6/83w/r/+f4r+f+D+/8xGPnF336//1/+zEXPr/3P3fyduabL/AQAAoIPc/d+NW+x/AAAAGEbu/u/FLfY/AAAADCN3//fjlib7f+T+f4r+f5/+X/+/0v97/3/L9P/6/yn6/4H7f+//6/9hd/3/6dUh/X/u/h/ELU32PwAAAHSQu/+HcYv9DwAAAMPI3f+juMX+BwAAgGHk7v9x3DLO/n/grRP/pP5/4/3/3l9E+n/9/0r/r//X/+/R/+v/p+j/9f9L/n79v/6f9eb2/n/u/p/ELePsfwAAAGgvd/9P4xb7HwAAAIaRu/9ncYv9DwAAAMPI3f/zuKXJ/tf/e/9f/9+q/798daT+P/8V1v/r/09O/6//n6L/1/8v+fv1//p/1ptb/5+7/xdxS5P9DwAAAB3k7v9l3GL/AwAAwDBy9/8qbrH/AQAAYBi5+38dtzTZ//p//b/+v1X/7/1//f8lp//X/0/R/+v/l/z92f/nX3f6f/0/55tb/5+7/zdxS5P9DwAAAB3k7v9t3GL/AwAAwDBy9/8ubrH/AQAAYBi5+38ftzTZ//r/Wff/mbnr//X/+n/9v/7/EPp//f9K/3/Rdt3PL/37vf+v/2e9ufX/ufvviFua7H8AAADoIHf/H+IW+x8AAACGkbv/j3GL/Q8AAADDyN1/Z9zSZP/r/2fd/3v//2L7/yv1//p//f9c6P/1/1P0//r/JX+//l//z3pz6/9z9/8pbmmy/wEAAKCD3P1/jlvsfwAAABhG7v6/xC32PwAAAAwjd/9f45Ym+1//r/8/fv9/uv68Z9v/e///Hv3/mdVqpf+f+n79/3aN2/+f0f/r/0/c/99w0/6P9f/L/H79v/6f9ebW/+fu/1vc0mT/AwAAQAe5+/8et9j/AAAAMIzc/f+IW+x/AAAAGEbu/n/GLU32v/5f/z/k+//6f+//6/9nY9z+3/v/+n/v/+v/9f/6f9aZW/+fu/9fcUuT/Q8AAAAd5O7/d9xi/wMAAMAwcvf/J26x/wEAAGAYufv/G7c02f/6f/2//l//r//X/2+T/l//P0X/r/9f8vfr//X/rDe3/j93//8DAAD//2FtLh4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000202c0), 0x440, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 7.13318ms ago: executing program 4 (id=1014): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 1 (id=1022): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0x0, 0xee00) kernel console output (not intermixed with test programs): 2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 89.585821][ T5938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.690643][ T5938] syz.2.45: attempt to access beyond end of device [ 89.690643][ T5938] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 89.833493][ T5771] syz-executor: attempt to access beyond end of device [ 89.833493][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.862957][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 90.107361][ T8] usb 1-1: USB disconnect, device number 3 [ 90.303779][ T5969] loop0: detected capacity change from 0 to 128 [ 90.676434][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.876083][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.896277][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.918839][ T23] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 90.930637][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.948412][ T23] usb 4-1: Product: syz [ 90.955019][ T23] usb 4-1: Manufacturer: syz [ 90.973170][ T23] usb 4-1: SerialNumber: syz [ 90.982254][ T23] usb 4-1: config 0 descriptor?? [ 91.228846][ T5971] warning: `syz.3.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.248149][ T5975] loop2: detected capacity change from 0 to 32768 [ 91.266816][ T23] usb 4-1: USB disconnect, device number 2 [ 91.301873][ T5975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.46 (5975) [ 91.396988][ T5975] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.427201][ T5975] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.435928][ T5975] BTRFS info (device loop2): force clearing of disk cache [ 91.467181][ T5975] BTRFS info (device loop2): metadata ratio 0 [ 91.473345][ T5975] BTRFS info (device loop2): enabling ssd optimizations [ 91.475843][ T5990] loop1: detected capacity change from 0 to 1024 [ 91.490632][ T5975] BTRFS info (device loop2): using spread ssd allocation scheme [ 91.506906][ T5975] BTRFS info (device loop2): using free space tree [ 91.604226][ T5990] hfsplus: bad catalog entry type [ 91.643822][ T42] hfsplus: b-tree write err: -5, ino 25 [ 91.669291][ T42] hfsplus: b-tree write err: -5, ino 4 [ 91.675061][ T42] hfsplus: b-tree write err: -5, ino 2 [ 91.696718][ T42] hfsplus: b-tree write err: -5, ino 26 [ 91.706775][ T5975] BTRFS info (device loop2): auto enabling async discard [ 91.768067][ T5975] BTRFS info (device loop2): rebuilding free space tree [ 91.807571][ T6008] process 'syz.1.60' launched '/dev/fd/3' with NULL argv: empty string added [ 92.128820][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.155644][ T5986] loop0: detected capacity change from 0 to 40427 [ 92.172219][ T5986] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 92.185955][ T5986] F2FS-fs (loop0): invalid crc value [ 92.201263][ T5986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.333569][ T5986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.378296][ T6016] f2fs_ckpt-7:0: attempt to access beyond end of device [ 92.378296][ T6016] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 92.434784][ T6016] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 92.442810][ T6016] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 93.100994][ T6031] loop2: detected capacity change from 0 to 128 [ 93.149497][ T27] audit: type=1800 audit(1775089443.770:4): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.67" name="file2" dev="loop2" ino=1048593 res=0 errno=0 [ 93.187485][ T5811] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 93.377303][ T6036] capability: warning: `syz.2.69' uses 32-bit capabilities (legacy support in use) [ 93.383476][ T5811] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.414763][ T5811] usb 4-1: config 0 has no interface number 0 [ 93.426073][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 93.456325][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.485212][ T5811] usb 4-1: Product: syz [ 93.495352][ T5811] usb 4-1: Manufacturer: syz [ 93.505531][ T5811] usb 4-1: SerialNumber: syz [ 93.525266][ T5811] usb 4-1: config 0 descriptor?? [ 93.544865][ T5811] hub 4-1:0.132: bad descriptor, ignoring hub [ 93.552704][ T6038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.70'. [ 93.566091][ T5811] hub: probe of 4-1:0.132 failed with error -5 [ 93.595865][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input10 [ 93.641407][ T6040] program syz.2.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.700979][ T6022] loop0: detected capacity change from 0 to 32768 [ 93.737876][ T6022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.71 (6022) [ 93.809938][ T6022] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.843464][ T6022] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.876406][ T6022] BTRFS info (device loop0): force clearing of disk cache [ 93.883612][ T6022] BTRFS info (device loop0): metadata ratio 0 [ 93.923175][ T6022] BTRFS info (device loop0): enabling ssd optimizations [ 93.937119][ T6022] BTRFS info (device loop0): using spread ssd allocation scheme [ 93.960097][ T6022] BTRFS info (device loop0): using free space tree [ 94.016798][ T6055] pimreg: tun_chr_ioctl cmd 1074025676 [ 94.022980][ T6055] pimreg: owner set to 270 [ 94.064225][ T6022] BTRFS info (device loop0): auto enabling async discard [ 94.093194][ T6022] BTRFS info (device loop0): rebuilding free space tree [ 94.368818][ T5774] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.464924][ T788] usb 2-1: USB disconnect, device number 3 [ 94.695066][ T5811] usb 4-1: USB disconnect, device number 3 [ 94.857563][ T6044] loop2: detected capacity change from 0 to 32768 [ 94.959828][ T6044] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.096505][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.214318][ T6044] XFS (loop2): Ending clean mount [ 95.336320][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 95.348907][ T5811] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 95.360599][ T6085] loop1: detected capacity change from 0 to 8192 [ 95.367227][ T5811] usb 4-1: config 0 has no interface number 0 [ 95.380872][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 95.399915][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.409749][ T5811] usb 4-1: Product: syz [ 95.414422][ T5811] usb 4-1: Manufacturer: syz [ 95.419482][ T5811] usb 4-1: SerialNumber: syz [ 95.426713][ T5811] usb 4-1: config 0 descriptor?? [ 95.432766][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.438993][ T5811] hub 4-1:0.132: bad descriptor, ignoring hub [ 95.447715][ T6085] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.449352][ T5811] hub: probe of 4-1:0.132 failed with error -5 [ 95.475676][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input11 [ 95.512171][ T6085] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 95.524172][ T6085] REISERFS (device loop1): using ordered data mode [ 95.532340][ T6085] reiserfs: using flush barriers [ 95.542668][ T6085] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.561811][ T6085] REISERFS (device loop1): checking transaction log (loop1) [ 95.948558][ T6085] REISERFS (device loop1): Using tea hash to sort names [ 95.978567][ T6085] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.129274][ T6088] loop2: detected capacity change from 0 to 2048 [ 96.168354][ T6088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.181172][ T6092] loop0: detected capacity change from 0 to 32768 [ 97.250538][ T6097] loop3: detected capacity change from 0 to 32768 [ 97.283452][ T6097] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.86 (6097) [ 97.373305][ T6097] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.419510][ T6097] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 97.452057][ T6097] BTRFS info (device loop3): force clearing of disk cache [ 97.458324][ T6094] loop1: detected capacity change from 0 to 32768 [ 97.475962][ T6097] BTRFS info (device loop3): metadata ratio 0 [ 97.503721][ T6097] BTRFS info (device loop3): enabling ssd optimizations [ 97.543862][ T6097] BTRFS info (device loop3): using spread ssd allocation scheme [ 97.558527][ T6094] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 97.580984][ T6097] BTRFS info (device loop3): using free space tree [ 97.690671][ T6094] XFS (loop1): Ending clean mount [ 97.766024][ T6097] BTRFS info (device loop3): auto enabling async discard [ 97.796906][ T6097] BTRFS info (device loop3): rebuilding free space tree [ 97.878820][ T6094] syz.1.84 (6094) used greatest stack depth: 20008 bytes left [ 97.887123][ T6100] loop2: detected capacity change from 0 to 32768 [ 97.996790][ T5767] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 98.077843][ T6100] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 98.096912][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.103738][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.304879][ T23] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 98.336351][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.345762][ T23] usb 1-1: Product: syz [ 98.362132][ T23] usb 1-1: Manufacturer: syz [ 98.376949][ T23] usb 1-1: SerialNumber: syz [ 98.441401][ T5768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (5768) [ 98.574533][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 98.747560][ T23] rtl8150 1-1:1.0: couldn't reset the device [ 98.760413][ T23] rtl8150: probe of 1-1:1.0 failed with error -5 [ 98.798528][ T23] usb 1-1: USB disconnect, device number 4 [ 99.175137][ T6146] hub 8-0:1.0: USB hub found [ 99.199064][ T6146] hub 8-0:1.0: 1 port detected [ 99.626487][ T5811] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 99.824463][ T5811] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 99.834217][ T5811] usb 1-1: config 0 has no interface number 0 [ 99.858362][ T5811] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 99.885404][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.894299][ T5811] usb 1-1: Product: syz [ 99.898664][ T5811] usb 1-1: Manufacturer: syz [ 99.903299][ T5811] usb 1-1: SerialNumber: syz [ 99.912186][ T5811] usb 1-1: config 0 descriptor?? [ 99.925117][ T5811] hub 1-1:0.132: bad descriptor, ignoring hub [ 99.943320][ T5811] hub: probe of 1-1:0.132 failed with error -5 [ 99.964908][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input12 [ 100.100807][ T788] usb 4-1: USB disconnect, device number 4 [ 100.575082][ T23] usb 1-1: USB disconnect, device number 5 [ 100.796340][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.862317][ T6193] batadv0: entered promiscuous mode [ 100.872177][ T6193] bond0: entered promiscuous mode [ 100.877632][ T6193] bond_slave_0: entered promiscuous mode [ 100.884290][ T6193] bond_slave_1: entered promiscuous mode [ 100.893980][ T6193] hsr1: entered allmulticast mode [ 100.899126][ T6193] batadv0: entered allmulticast mode [ 100.904628][ T6193] bond0: entered allmulticast mode [ 100.910246][ T6193] bond_slave_0: entered allmulticast mode [ 100.916385][ T6193] bond_slave_1: entered allmulticast mode [ 100.922620][ T6193] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.931472][ T6193] batadv0: left promiscuous mode [ 100.937262][ T6193] bond0: left promiscuous mode [ 100.942064][ T6193] bond_slave_0: left promiscuous mode [ 100.947784][ T6193] bond_slave_1: left promiscuous mode [ 100.986621][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 100.994691][ T23] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 101.004811][ T23] usb 1-1: config 0 has no interface number 0 [ 101.017734][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 101.027052][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.035100][ T23] usb 1-1: Product: syz [ 101.039975][ T23] usb 1-1: Manufacturer: syz [ 101.044712][ T23] usb 1-1: SerialNumber: syz [ 101.060159][ T23] usb 1-1: config 0 descriptor?? [ 101.087572][ T23] hub 1-1:0.132: bad descriptor, ignoring hub [ 101.093810][ T23] hub: probe of 1-1:0.132 failed with error -5 [ 101.111064][ T23] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input13 [ 101.426661][ T6199] loop3: detected capacity change from 0 to 256 [ 101.671448][ T6203] loop2: detected capacity change from 0 to 256 [ 101.914411][ T6208] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 102.184273][ T6216] netlink: 27 bytes leftover after parsing attributes in process `syz.1.126'. [ 102.402107][ T6223] netlink: 80 bytes leftover after parsing attributes in process `syz.1.129'. [ 102.513147][ T6225] loop3: detected capacity change from 0 to 1024 [ 102.548644][ T6225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.659641][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.781557][ T6225] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 102.875262][ T6236] loop2: detected capacity change from 0 to 16 [ 102.882812][ T6225] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.931826][ T6236] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.975317][ T6239] loop1: detected capacity change from 0 to 64 [ 102.981577][ T6236] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1416] out[3560] [ 102.981991][ T6236] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 80 of nid 36 [ 103.139360][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.170944][ T6239] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 103.391570][ T6248] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 103.398545][ T6248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.419169][ T6248] vhci_hcd vhci_hcd.0: Device attached [ 103.421770][ T6252] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.440120][ T6248] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 103.446707][ T6248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.455685][ T6248] vhci_hcd vhci_hcd.0: Device attached [ 103.464855][ T6248] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 103.471477][ T6248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.486674][ T6248] vhci_hcd vhci_hcd.0: Device attached [ 103.559249][ T6248] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 103.566027][ T6248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.575174][ T6248] vhci_hcd vhci_hcd.0: Device attached [ 103.587284][ T6255] vhci_hcd: connection closed [ 103.589050][ T6253] vhci_hcd: connection closed [ 103.595471][ T6249] vhci_hcd: connection closed [ 103.601423][ T42] vhci_hcd: stop threads [ 103.617439][ T42] vhci_hcd: release socket [ 103.649852][ T42] vhci_hcd: disconnect device [ 103.663396][ T42] vhci_hcd: stop threads [ 103.671334][ T6258] vhci_hcd: connection closed [ 103.671791][ T42] vhci_hcd: release socket [ 103.686661][ T23] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 103.701900][ T42] vhci_hcd: disconnect device [ 103.717894][ T42] vhci_hcd: stop threads [ 103.723026][ T42] vhci_hcd: release socket [ 103.728048][ T42] vhci_hcd: disconnect device [ 103.735919][ T42] vhci_hcd: stop threads [ 103.740808][ T42] vhci_hcd: release socket [ 103.755934][ T42] vhci_hcd: disconnect device [ 104.163704][ T6268] loop0: detected capacity change from 0 to 2048 [ 104.231993][ T6270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.316497][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.427122][ T6268] syz.0.143 (6268) used greatest stack depth: 19696 bytes left [ 104.538089][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 104.550132][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 104.569712][ T8] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 104.583652][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.598570][ T8] usb 4-1: Product: syz [ 104.604583][ T8] usb 4-1: Manufacturer: syz [ 104.614501][ T8] usb 4-1: SerialNumber: syz [ 104.641936][ T8] usb 4-1: config 0 descriptor?? [ 104.659380][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 105.062996][ T8] gspca_se401: Too many frame sizes [ 105.266028][ T8] usb 4-1: USB disconnect, device number 5 [ 105.600516][ T5808] usb 1-1: USB disconnect, device number 6 [ 106.128032][ T5808] hid-generic 0005:15C2:0000.0001: item fetching failed at offset 0/1 [ 106.137759][ T5808] hid-generic: probe of 0005:15C2:0000.0001 failed with error -22 [ 106.421418][ T6314] loop2: detected capacity change from 0 to 512 [ 106.457622][ T6314] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.164: bad orphan inode 11862016 [ 106.474712][ T6314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.520679][ T6314] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.621469][ T6321] Bluetooth: MGMT ver 1.22 [ 106.628336][ T27] audit: type=1800 audit(1775089713.264:5): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.164" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 106.668602][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.715429][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.868865][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.909288][ T788] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 106.924705][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.953745][ T788] usb 1-1: Product: syz [ 106.972017][ T788] usb 1-1: Manufacturer: syz [ 106.977545][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 106.991112][ T788] usb 1-1: SerialNumber: syz [ 107.007742][ T788] usb 1-1: selecting invalid altsetting 1 [ 107.038479][ T788] usb 1-1: unit 6 not found! [ 107.212406][ T788] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 107.232603][ T788] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 107.266677][ T788] usb 1-1: selecting invalid altsetting 1 [ 107.280683][ T788] usb 1-1: unit 6 not found! [ 107.396333][ T5808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.433884][ T788] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 107.445999][ T788] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 107.468914][ T788] usb 1-1: selecting invalid altsetting 1 [ 107.490455][ T6324] loop3: detected capacity change from 0 to 40427 [ 107.492265][ T788] usb 1-1: unit 6 not found! [ 107.514157][ T6324] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 107.521447][ T6324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 107.521984][ T788] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 107.553021][ T6324] F2FS-fs (loop3): invalid crc value [ 107.596284][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 107.627206][ T5808] usb 2-1: config 0 has no interfaces? [ 107.634494][ T5808] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.665769][ T5808] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.673063][ T788] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 107.686906][ T5808] usb 2-1: Manufacturer: syz [ 107.714465][ T5808] usb 2-1: config 0 descriptor?? [ 107.723560][ T788] usb 1-1: USB disconnect, device number 7 [ 107.818887][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.880562][ T6324] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 107.905540][ T6324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.934121][ T6335] loop2: detected capacity change from 0 to 32768 [ 107.970571][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 107.985187][ T6324] syz.3.166: attempt to access beyond end of device [ 107.985187][ T6324] loop3: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 108.012021][ T5808] usb 2-1: USB disconnect, device number 4 [ 108.034985][ T27] audit: type=1800 audit(1775089714.664:6): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.171" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 108.063890][ T6324] syz.3.166: attempt to access beyond end of device [ 108.063890][ T6324] loop3: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 108.195925][ T5780] syz-executor: attempt to access beyond end of device [ 108.195925][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.217653][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.540461][ T6344] loop0: detected capacity change from 0 to 8192 [ 108.595141][ T6344] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.646495][ T6344] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 108.713681][ T6344] REISERFS (device loop0): using ordered data mode [ 108.760123][ T6344] reiserfs: using flush barriers [ 108.792052][ T6344] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.862664][ T23] vhci_hcd: vhci_device speed not set [ 108.894376][ T6344] REISERFS (device loop0): checking transaction log (loop0) [ 108.946873][ T6344] REISERFS (device loop0): Using r5 hash to sort names [ 108.955099][ T6344] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 109.156391][ T2180] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.369228][ T2180] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.411197][ T2180] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.417326][ T6349] loop2: detected capacity change from 0 to 32768 [ 109.434442][ T2180] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.452379][ T6349] [ 109.452379][ T6349] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.452379][ T6349] [ 109.463544][ T2180] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.515051][ T2180] usb 2-1: Product: syz [ 109.544840][ T2180] usb 2-1: Manufacturer: syz [ 109.556383][ T2180] usb 2-1: SerialNumber: syz [ 109.569035][ T2180] usb 2-1: config 0 descriptor?? [ 109.610731][ T2180] usb 2-1: selecting invalid altsetting 0 [ 109.736402][ T6358] syz_tun: entered allmulticast mode [ 109.758906][ T6357] syz_tun: left allmulticast mode [ 109.917851][ T5808] usb 2-1: USB disconnect, device number 5 [ 110.027657][ T5771] [ 110.027657][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.027657][ T5771] [ 110.044873][ T5771] [ 110.044873][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.044873][ T5771] [ 110.232248][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.309281][ T6362] netlink: 264 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.370484][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.514104][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.538851][ T6366] loop2: detected capacity change from 0 to 256 [ 110.683743][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.738673][ T6366] FAT-fs (loop2): Directory bread(block 64) failed [ 110.745712][ T6366] FAT-fs (loop2): Directory bread(block 65) failed [ 110.779892][ T6366] FAT-fs (loop2): Directory bread(block 66) failed [ 110.821518][ T6366] FAT-fs (loop2): Directory bread(block 67) failed [ 110.854557][ T6366] FAT-fs (loop2): Directory bread(block 68) failed [ 110.887520][ T6372] 9p: Unknown access argument : -22 [ 110.893138][ T6366] FAT-fs (loop2): Directory bread(block 69) failed [ 110.926862][ T6366] FAT-fs (loop2): Directory bread(block 70) failed [ 110.933491][ T6366] FAT-fs (loop2): Directory bread(block 71) failed [ 110.966747][ T6366] FAT-fs (loop2): Directory bread(block 72) failed [ 110.993706][ T6366] FAT-fs (loop2): Directory bread(block 73) failed [ 111.096387][ T27] audit: type=1800 audit(1775089717.714:7): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.186" name=B4 dev="loop2" ino=1048595 res=0 errno=0 [ 111.137836][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.158269][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.174978][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.208182][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.216124][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.225028][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.718962][ T6392] loop0: detected capacity change from 0 to 64 [ 111.764348][ T6392] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 111.849238][ T6397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 112.346561][ T2180] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.536748][ T6418] tmpfs: Too few inodes for current use [ 112.577374][ T2180] usb 2-1: Using ep0 maxpacket: 32 [ 112.605267][ T2180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.625419][ T2180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.651377][ T2180] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.676418][ T2180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.726896][ T2180] usb 2-1: config 0 descriptor?? [ 112.744107][ T2180] hub 2-1:0.0: USB hub found [ 112.822312][ T6420] loop0: detected capacity change from 0 to 4096 [ 112.877654][ T6420] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 112.947892][ T2180] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 113.025015][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 113.312340][ T5085] Bluetooth: hci3: command tx timeout [ 113.396023][ T2180] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 113.426036][ T2180] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22 [ 113.726624][ T5810] usb 2-1: USB disconnect, device number 6 [ 113.854423][ T1138] hsr_slave_0: left promiscuous mode [ 113.868587][ T1138] hsr_slave_1: left promiscuous mode [ 113.916605][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.926331][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.952188][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.987210][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.050826][ T1138] bridge_slave_1: left allmulticast mode [ 114.073056][ T1138] bridge_slave_1: left promiscuous mode [ 114.087284][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.114465][ T1138] bridge_slave_0: left allmulticast mode [ 114.120487][ T1138] bridge_slave_0: left promiscuous mode [ 114.136465][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.239199][ T1138] veth1_macvtap: left promiscuous mode [ 114.249764][ T1138] veth0_macvtap: left promiscuous mode [ 114.256771][ T1138] veth1_vlan: left promiscuous mode [ 114.264391][ T1138] veth0_vlan: left promiscuous mode [ 114.986541][ T6458] loop1: detected capacity change from 0 to 32768 [ 115.037249][ T6458] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 115.212379][ T6458] XFS (loop1): Ending clean mount [ 115.315362][ T6458] XFS (loop1): User initiated shutdown received. [ 115.333333][ T6458] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 115.385903][ T6458] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 115.396965][ T5085] Bluetooth: hci3: command tx timeout [ 115.513379][ T5767] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 115.974026][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 116.027915][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 116.079904][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.129805][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.186415][ T788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.376772][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 116.402799][ T788] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 116.411365][ T788] usb 2-1: config 0 has no interface number 0 [ 116.421045][ T788] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 116.449803][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.458743][ T788] usb 2-1: Product: syz [ 116.463319][ T788] usb 2-1: Manufacturer: syz [ 116.468044][ T788] usb 2-1: SerialNumber: syz [ 116.475356][ T788] usb 2-1: config 0 descriptor?? [ 116.504854][ T788] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 116.637752][ T1138] bond0 (unregistering): Released all slaves [ 116.757596][ T6450] batadv_slave_0: entered promiscuous mode [ 116.765647][ T6450] batman_adv: batadv0: Adding interface: macvtap1 [ 116.773488][ T6450] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.802092][ T6450] batman_adv: batadv0: Interface activated: macvtap1 [ 116.875087][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.883594][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.901142][ T6374] bridge_slave_0: entered allmulticast mode [ 116.932617][ T6374] bridge_slave_0: entered promiscuous mode [ 116.982548][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.998638][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.006013][ T6374] bridge_slave_1: entered allmulticast mode [ 117.014796][ T6374] bridge_slave_1: entered promiscuous mode [ 117.103195][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.109407][ T788] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 117.121972][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.153166][ T788] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 117.224141][ T6374] team0: Port device team_slave_0 added [ 117.257143][ T6374] team0: Port device team_slave_1 added [ 117.304997][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 117.309896][ T9] usb 2-1: USB disconnect, device number 7 [ 117.361097][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 117.400507][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.410850][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.439552][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 117.456738][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.468811][ T5085] Bluetooth: hci3: command tx timeout [ 117.482001][ T9] quatech2 2-1:0.51: device disconnected [ 117.497324][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.504336][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.535852][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.592925][ T6374] hsr_slave_0: entered promiscuous mode [ 117.604644][ T6374] hsr_slave_1: entered promiscuous mode [ 117.612512][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.621487][ T6374] Cannot create hsr debugfs directory [ 117.869127][ T6374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.883996][ T6374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.921226][ T6374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.951038][ T6374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.104979][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.138584][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.167735][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.174899][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.195960][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.203276][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.263270][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.591407][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.974821][ T6374] veth0_vlan: entered promiscuous mode [ 118.990745][ T6374] veth1_vlan: entered promiscuous mode [ 119.030407][ T6374] veth0_macvtap: entered promiscuous mode [ 119.042450][ T6374] veth1_macvtap: entered promiscuous mode [ 119.074178][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.088670][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.100392][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.119810][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.130397][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.141460][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.155087][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.177983][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.189456][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.199830][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.211661][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.226231][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.239661][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.252623][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.274063][ T6374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.283306][ T6374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.292654][ T6374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.302965][ T6374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.426314][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.434317][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.496826][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.504720][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.547328][ T5085] Bluetooth: hci3: command tx timeout [ 119.986837][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 119.998274][ T6557] loop0: detected capacity change from 0 to 1024 [ 120.325386][ T1138] hfsplus: b-tree write err: -5, ino 25 [ 120.348090][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 120.355289][ T1138] hfsplus: b-tree write err: -5, ino 2 [ 120.516355][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.720068][ T8] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 120.749500][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 120.801045][ T8] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 120.824525][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.843309][ T8] usb 2-1: Product: syz [ 120.845915][ T5810] IPVS: starting estimator thread 0... [ 120.853173][ T8] usb 2-1: Manufacturer: syz [ 120.861957][ T6585] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 120.867371][ T8] usb 2-1: SerialNumber: syz [ 120.897237][ T8] usb 2-1: config 0 descriptor?? [ 120.909525][ T8] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 120.963361][ T6586] IPVS: using max 18 ests per chain, 43200 per kthread [ 121.195993][ T6597] loop4: detected capacity change from 0 to 512 [ 121.263502][ T6597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.236: invalid indirect mapped block 10 (level 1) [ 121.282476][ T6597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.236: invalid indirect mapped block 8 (level 1) [ 121.310467][ T6597] EXT4-fs (loop4): 1 truncate cleaned up [ 121.319066][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.434801][ T6374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.477797][ T6603] loop0: detected capacity change from 0 to 128 [ 121.653795][ T6606] loop4: detected capacity change from 0 to 1024 [ 121.720279][ T8] gspca_sunplus: reg_r err -71 [ 121.725186][ T8] sunplus: probe of 2-1:0.0 failed with error -71 [ 121.793839][ T8] usb 2-1: USB disconnect, device number 8 [ 121.875930][ T42] hfsplus: b-tree write err: -5, ino 25 [ 121.895699][ T42] hfsplus: b-tree write err: -5, ino 4 [ 121.917132][ T42] hfsplus: b-tree write err: -5, ino 2 [ 122.077478][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 122.106943][ T5808] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.291938][ T5808] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 122.324383][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.363621][ T5808] usb 1-1: Product: syz [ 122.387145][ T5808] usb 1-1: Manufacturer: syz [ 122.392003][ T5808] usb 1-1: SerialNumber: syz [ 122.450243][ T5808] usb 1-1: config 0 descriptor?? [ 122.464709][ T5808] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 122.622868][ T6629] loop1: detected capacity change from 0 to 8192 [ 122.681186][ T6629] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.768936][ T6629] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 122.833643][ T6629] REISERFS (device loop1): using ordered data mode [ 122.884096][ T6629] reiserfs: using flush barriers [ 122.927678][ T6629] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.979106][ T6629] REISERFS (device loop1): checking transaction log (loop1) [ 123.001271][ T6645] loop4: detected capacity change from 0 to 1024 [ 123.143812][ T27] audit: type=1800 audit(1775089729.774:8): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.248" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 123.316953][ T6629] REISERFS (device loop1): Using tea hash to sort names [ 123.334893][ T6629] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 123.368793][ T5808] gspca_sunplus: reg_w_riv err -71 [ 123.374061][ T5808] sunplus: probe of 1-1:0.0 failed with error -71 [ 123.376371][ T3479] hfsplus: b-tree write err: -5, ino 25 [ 123.416659][ T5808] usb 1-1: USB disconnect, device number 8 [ 123.436500][ T3479] hfsplus: b-tree write err: -5, ino 4 [ 123.452760][ T3479] hfsplus: b-tree write err: -5, ino 2 [ 123.498511][ T3479] hfsplus: b-tree write err: -5, ino 20 [ 123.530177][ T6652] loop2: detected capacity change from 0 to 64 [ 123.668244][ T27] audit: type=1800 audit(1775089730.304:9): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.250" name="file2" dev="loop2" ino=21 res=0 errno=0 [ 124.075624][ T6665] loop0: detected capacity change from 0 to 256 [ 124.229757][ T6668] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 124.564388][ T6673] loop1: detected capacity change from 0 to 4096 [ 124.946361][ T5808] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 125.128934][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.156454][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.193852][ T5808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 125.236355][ T5808] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 125.270132][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.298817][ T5808] usb 1-1: config 0 descriptor?? [ 125.301114][ T6696] loop2: detected capacity change from 0 to 1024 [ 125.351832][ T6699] netlink: 200 bytes leftover after parsing attributes in process `syz.1.265'. [ 125.672193][ T42] hfsplus: b-tree write err: -5, ino 25 [ 125.689837][ T42] hfsplus: b-tree write err: -5, ino 4 [ 125.695718][ T42] hfsplus: b-tree write err: -5, ino 2 [ 125.751339][ T42] hfsplus: b-tree write err: -5, ino 17 [ 125.768653][ T5808] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 125.787976][ T5808] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 125.835709][ T5808] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 125.849751][ T5808] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 125.890890][ T5808] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 125.938759][ T5808] cypress 0003:04B4:0001.0003: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 126.024550][ T5808] usb 1-1: USB disconnect, device number 9 [ 126.045713][ T6716] binder: 6714:6716 ioctl 40046205 0 returned -22 [ 126.215470][ T6713] fido_id[6713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.542201][ T6725] loop2: detected capacity change from 0 to 128 [ 126.626031][ T6725] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 126.645156][ T6725] FAT-fs (loop2): Filesystem has been set read-only [ 127.009710][ T6736] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 128.267401][ T6769] bridge1: entered promiscuous mode [ 128.362551][ T6748] loop1: detected capacity change from 0 to 32768 [ 128.475845][ T6775] loop7: detected capacity change from 0 to 7 [ 128.540356][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.556283][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.565986][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.575706][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.585177][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.606374][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.615809][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.629371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.638680][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.650471][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.659702][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.715992][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.737667][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.746926][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.754878][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.761824][ T6778] loop4: detected capacity change from 0 to 1024 [ 128.764690][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 128.779083][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.788465][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 128.796542][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 128.804492][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 128.889327][ T6778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.913794][ T6778] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.036073][ T6778] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: comm syz.4.293: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.158855][ T6778] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 129.213255][ T6778] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.213255][ T6778] [ 129.331587][ T6374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.768987][ T6780] loop2: detected capacity change from 0 to 40427 [ 129.829836][ T6780] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff [ 129.875799][ T6780] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 129.907062][ T6780] F2FS-fs (loop2): Image doesn't support compression [ 129.925791][ T6780] F2FS-fs (loop2): invalid crc value [ 129.952666][ T6780] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.019278][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.109812][ T6780] F2FS-fs (loop2): Start checkpoint disabled! [ 130.168065][ T6780] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 130.236958][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 130.258278][ T788] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.286293][ T788] usb 1-1: config 0 has no interface number 0 [ 130.318748][ T788] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.347112][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.375579][ T788] usb 1-1: Product: syz [ 130.390149][ T788] usb 1-1: Manufacturer: syz [ 130.401827][ T788] usb 1-1: SerialNumber: syz [ 130.430906][ T788] usb 1-1: config 0 descriptor?? [ 130.461008][ T788] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.595034][ T3479] kworker/u4:9: attempt to access beyond end of device [ 130.595034][ T3479] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 130.614952][ T3479] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 130.650171][ T3479] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 131.067292][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.123063][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.270797][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.280432][ T788] usb 1-1: USB disconnect, device number 10 [ 131.300144][ T788] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.358897][ T788] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.383024][ T788] quatech2 1-1:0.51: device disconnected [ 132.523091][ T6841] loop4: detected capacity change from 0 to 40427 [ 132.545231][ T6841] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 132.561641][ T6841] F2FS-fs (loop4): Image doesn't support compression [ 132.563773][ T6876] loop1: detected capacity change from 0 to 64 [ 132.571394][ T6841] F2FS-fs (loop4): Image doesn't support compression [ 132.584549][ T6841] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 132.645732][ T6841] F2FS-fs (loop4): invalid crc value [ 132.671942][ T6841] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.854781][ T6841] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.019517][ T6374] syz-executor: attempt to access beyond end of device [ 133.019517][ T6374] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.044072][ T6374] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 133.182123][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.193088][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.896440][ T2180] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.099086][ T2180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.122225][ T2180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.140317][ T2180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.165711][ T2180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.196094][ T2180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 134.233571][ T2180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.272285][ T2180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.296557][ T2180] usb 1-1: Product: syz [ 134.301579][ T2180] usb 1-1: Manufacturer: syz [ 134.312949][ T2180] usb 1-1: SerialNumber: syz [ 134.772020][ T6926] loop4: detected capacity change from 0 to 512 [ 134.812681][ T6926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.845273][ T27] audit: type=1800 audit(1775089741.474:10): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.352" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 134.868255][ T6926] EXT4-fs warning (device loop4): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 134.870343][ T6908] loop2: detected capacity change from 0 to 40427 [ 134.892967][ T6908] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 134.901008][ T6908] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 134.922944][ T6908] F2FS-fs (loop2): invalid crc value [ 134.954335][ T6908] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.964428][ T6374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.969958][ T6924] loop1: detected capacity change from 0 to 8192 [ 135.033282][ T6924] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.130393][ T6934] loop4: detected capacity change from 0 to 128 [ 135.141611][ T6924] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 135.167410][ T2180] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 135.194739][ T6924] REISERFS (device loop1): using ordered data mode [ 135.197073][ T2180] cdc_ncm 1-1:1.0: bind() failure [ 135.223816][ T2180] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 135.237689][ T6924] reiserfs: using flush barriers [ 135.255303][ T6934] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.271542][ T6924] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.300018][ T6908] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.313044][ T2180] cdc_ncm 1-1:1.1: bind() failure [ 135.333978][ T6908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.363034][ T2180] usb 1-1: USB disconnect, device number 11 [ 135.370037][ T6924] REISERFS (device loop1): checking transaction log (loop1) [ 135.400292][ T6934] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.455819][ T6924] REISERFS (device loop1): Using r5 hash to sort names [ 135.504939][ T6924] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 135.584975][ T27] audit: type=1800 audit(1775089742.214:11): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.344" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 135.628288][ T6924] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3257, free_space(entry_count) 2 [ 135.681259][ T6924] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 135.735044][ T6924] REISERFS (device loop1): Remounting filesystem read-only [ 135.756828][ T6924] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 136.487190][ T6954] sctp: [Deprecated]: syz.1.357 (pid 6954) Use of int in maxseg socket option. [ 136.487190][ T6954] Use struct sctp_assoc_value instead [ 136.876810][ T6963] netlink: 884 bytes leftover after parsing attributes in process `syz.2.355'. [ 137.170221][ T6945] loop0: detected capacity change from 0 to 32768 [ 137.564326][ T6374] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.260397][ T6994] program syz.4.368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.336837][ T6967] loop1: detected capacity change from 0 to 32768 [ 138.364371][ T6967] (syz.1.360,6967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.418821][ T6967] (syz.1.360,6967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.522258][ T6993] loop2: detected capacity change from 0 to 4096 [ 138.539511][ T6967] JBD2: Ignoring recovery information on journal [ 138.665887][ T6750] blk_print_req_error: 32 callbacks suppressed [ 138.665906][ T6750] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.710989][ T6967] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.236312][ T6967] syz.1.360 (6967) used greatest stack depth: 18768 bytes left [ 139.369480][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 139.381147][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 139.624964][ T6998] loop0: detected capacity change from 0 to 40427 [ 139.677902][ T6998] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 139.700198][ T6998] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.751025][ T6998] F2FS-fs (loop0): invalid crc value [ 139.829878][ T6998] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.080057][ T6998] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.109764][ T6998] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.330401][ T5774] syz-executor: attempt to access beyond end of device [ 140.330401][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.349008][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 140.594482][ T7016] loop2: detected capacity change from 0 to 40427 [ 140.641488][ T7016] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 140.655304][ T7016] F2FS-fs (loop2): invalid crc value [ 140.699192][ T7016] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.830372][ T5085] Bluetooth: hci3: command tx timeout [ 140.897429][ T7016] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.032598][ T7016] syz.2.374: attempt to access beyond end of device [ 141.032598][ T7016] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.224175][ T5771] syz-executor: attempt to access beyond end of device [ 141.224175][ T5771] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 141.278768][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 142.751494][ T7096] sctp: [Deprecated]: syz.2.388 (pid 7096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.751494][ T7096] Use struct sctp_sack_info instead [ 142.828666][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 142.838563][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 142.850577][ T5769] Bluetooth: hci1: hardware error 0x00 [ 142.966649][ T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.146680][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 143.160318][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.179659][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.203438][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.220683][ T788] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 143.252628][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.287157][ T788] usb 2-1: config 0 descriptor?? [ 143.488711][ T7089] loop4: detected capacity change from 0 to 32768 [ 143.530946][ T7115] loop2: detected capacity change from 0 to 256 [ 143.579623][ T7089] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 143.625377][ T7089] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.669053][ T7115] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 143.744739][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.816892][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.931970][ T7089] XFS (loop4): Ending clean mount [ 144.019240][ T7089] XFS (loop4): Quotacheck needed: Please wait. [ 144.088216][ T9] usb 2-1: USB disconnect, device number 9 [ 144.128383][ T5808] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 144.179261][ T5808] XFS (loop4): Unmount and run xfs_repair [ 144.185077][ T5808] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 144.221197][ T5808] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 144.244391][ T5808] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 144.285990][ T5808] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 144.317784][ T5808] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 144.332527][ T5808] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 144.355633][ T5808] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 144.391063][ T5808] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 144.418326][ T5808] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 144.438153][ T1138] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 144.506488][ T7089] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 144.687279][ T7089] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 144.747765][ T7089] XFS (loop4): Unmount and run xfs_repair [ 144.769736][ T7089] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 144.798767][ T7089] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 144.830459][ T7089] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 144.844840][ T7140] netlink: 100 bytes leftover after parsing attributes in process `syz.1.398'. [ 144.867766][ T7089] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 144.916618][ T7089] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 144.928367][ T5769] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 144.956340][ T7089] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 144.975540][ T7089] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 144.996016][ T7089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.054702][ T7089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.094968][ T7089] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 145.160871][ T7089] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 145.193724][ T7089] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 145.337557][ T6374] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.396628][ T5808] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.591111][ T5808] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 145.649145][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.679579][ T5808] usb 2-1: Product: syz [ 145.683825][ T5808] usb 2-1: Manufacturer: syz [ 145.715164][ T5808] usb 2-1: SerialNumber: syz [ 146.446049][ T5808] rtl8150 2-1:1.0: eth5: rtl8150 is detected [ 146.625177][ T788] usb 2-1: USB disconnect, device number 10 [ 147.281845][ T7180] loop4: detected capacity change from 0 to 32768 [ 147.413554][ T7180] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 147.827256][ T6374] ocfs2: Unmounting device (7,4) on (node local) [ 147.990620][ T7229] loop1: detected capacity change from 0 to 2048 [ 148.033577][ T7229] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.069150][ T5768] udevd[5768]: incorrect nilfs2 checksum on /dev/loop1 [ 148.100214][ T7231] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.179851][ T7233] loop0: detected capacity change from 0 to 2048 [ 148.264411][ T7236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.454807][ T27] audit: type=1800 audit(1775090011.080:12): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.424" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 148.655548][ T7242] sctp: [Deprecated]: syz.4.427 (pid 7242) Use of int in max_burst socket option deprecated. [ 148.655548][ T7242] Use struct sctp_assoc_value instead [ 148.826948][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 148.904116][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.431'. [ 149.038158][ T8] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 149.068874][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.115839][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 149.139377][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.186504][ T8] usb 2-1: Product: syz [ 149.190748][ T8] usb 2-1: Manufacturer: syz [ 149.195477][ T8] usb 2-1: SerialNumber: syz [ 149.237447][ T8] usb 2-1: config 0 descriptor?? [ 149.245661][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.270850][ T8] usb 2-1: selecting invalid altsetting 0 [ 149.274761][ T7265] loop2: detected capacity change from 0 to 512 [ 149.346923][ T7265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.376361][ T788] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.416508][ T7265] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.571023][ T8] usb 2-1: USB disconnect, device number 11 [ 149.626504][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 149.643279][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.659651][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.672787][ T788] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 149.682565][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.694896][ T788] usb 1-1: config 0 descriptor?? [ 149.713613][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.874054][ T7270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.438'. [ 150.148176][ T788] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 150.168906][ T788] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 150.221637][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 150.333281][ T788] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 150.534743][ T788] ft260 0003:0403:6030.0005: failed to retrieve system status [ 150.557414][ T788] ft260: probe of 0003:0403:6030.0005 failed with error -71 [ 150.579455][ T788] usb 1-1: USB disconnect, device number 12 [ 150.592591][ T7289] kvm: user requested TSC rate below hardware speed [ 151.328020][ T7305] loop0: detected capacity change from 0 to 256 [ 152.476177][ C1] sched: RT throttling activated [ 152.787890][ T7308] loop4: detected capacity change from 0 to 131072 [ 152.808447][ T7308] F2FS-fs (loop4): invalid crc value [ 152.887978][ T7308] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.945610][ T7308] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 153.233124][ T7341] loop1: detected capacity change from 0 to 1024 [ 153.370141][ T7341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.400134][ T7341] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.670074][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.080660][ T7339] loop0: detected capacity change from 0 to 32768 [ 154.109740][ T7339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.466 (7339) [ 154.177338][ T7339] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.231130][ T7339] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.272761][ T7339] BTRFS info (device loop0): setting nodatasum [ 154.304950][ T7339] BTRFS info (device loop0): force zlib compression, level 3 [ 154.323559][ T7339] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.341464][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 154.350959][ T7339] BTRFS info (device loop0): use lzo compression, level 0 [ 154.366648][ T7339] BTRFS info (device loop0): turning on flush-on-commit [ 154.394348][ T7339] BTRFS info (device loop0): enabling auto defrag [ 154.410328][ T7339] BTRFS info (device loop0): max_inline at 4096 [ 154.447042][ T7339] BTRFS info (device loop0): using free space tree [ 154.706737][ T7339] BTRFS info (device loop0): enabling ssd optimizations [ 155.097766][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.190997][ T7354] loop4: detected capacity change from 0 to 32768 [ 155.215679][ T7354] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.470 (7354) [ 155.410006][ T5768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (5768) [ 156.025432][ T7408] loop1: detected capacity change from 0 to 128 [ 156.027410][ T7409] netlink: 1 bytes leftover after parsing attributes in process `syz.0.489'. [ 156.075339][ T7408] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.111862][ T7408] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.410898][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.746713][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.000016][ T7434] loop2: detected capacity change from 0 to 512 [ 157.052077][ T7434] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.189923][ T7434] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.499: invalid block [ 157.279317][ T7434] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.499: invalid indirect mapped block 10 (level 1) [ 157.385598][ T7434] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.499: invalid indirect mapped block 8 (level 1) [ 157.495706][ T7434] EXT4-fs (loop2): 1 truncate cleaned up [ 157.541729][ T7434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.575796][ T7443] loop0: detected capacity change from 0 to 64 [ 157.618797][ T7443] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 157.863976][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.327724][ T7450] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 158.345541][ T7437] loop1: detected capacity change from 0 to 131072 [ 158.360956][ T7437] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 158.369620][ T7437] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 158.386295][ T7437] F2FS-fs (loop1): invalid crc value [ 158.406369][ T7437] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.459837][ T7437] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 158.467273][ T7437] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 159.992038][ T7476] loop4: detected capacity change from 0 to 256 [ 160.588073][ T7469] loop0: detected capacity change from 0 to 131072 [ 160.606649][ T7469] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 160.614840][ T7469] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.624220][ T7469] F2FS-fs (loop0): invalid crc value [ 160.660742][ T7469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.735966][ T7469] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.744083][ T7469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 161.469495][ T7503] loop1: detected capacity change from 0 to 512 [ 161.488647][ T7503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.513668][ T7503] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.531361][ T7503] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.570748][ T7503] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.524: bad orphan inode 131083 [ 161.596985][ T7503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.738091][ T7503] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.524: Logical block already allocated [ 161.928053][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.003901][ T7512] loop4: detected capacity change from 0 to 4096 [ 162.046666][ T7512] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 162.089917][ T7518] loop1: detected capacity change from 0 to 128 [ 163.250813][ T7546] autofs4:pid:7546:autofs_fill_super: called with bogus options [ 163.488631][ T7551] loop1: detected capacity change from 0 to 4096 [ 163.546820][ T7551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.746529][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.077814][ T7569] trusted_key: encrypted_key: keyword 'uew' not recognized [ 164.098819][ T7570] usb usb8: usbfs: process 7570 (syz.4.551) did not claim interface 0 before use [ 164.186881][ T28] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.265788][ T7576] program syz.1.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.427342][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.438800][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.455048][ T7582] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 164.455054][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.472470][ T7582] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 164.494714][ T28] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 164.506210][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.521840][ T7584] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 164.544262][ T28] usb 1-1: config 0 descriptor?? [ 164.806995][ T7590] loop4: detected capacity change from 0 to 4096 [ 164.848547][ T7590] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 164.980030][ T7590] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.009212][ T7590] ntfs3: loop4: Failed to load $Extend (-22). [ 165.018497][ T28] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 165.040030][ T7590] ntfs3: loop4: Failed to initialize $Extend. [ 165.068648][ T28] acrux 0003:1A34:0802.0006: no inputs found [ 165.090564][ T7595] "syz.2.564" (7595) uses obsolete ecb(arc4) skcipher [ 165.106278][ T28] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19 [ 165.220764][ T28] usb 1-1: USB disconnect, device number 13 [ 165.408152][ T7601] loop6: detected capacity change from 0 to 8 [ 165.440927][ T7601] Dev loop6: unable to read RDB block 8 [ 165.449884][ T7601] loop6: unable to read partition table [ 165.456062][ T7601] loop6: partition table beyond EOD, truncated [ 165.465570][ T7601] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 165.798825][ T7611] loop0: detected capacity change from 0 to 1024 [ 165.926254][ T7613] loop2: detected capacity change from 0 to 256 [ 165.946593][ T28] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.166376][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 166.186111][ T28] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 166.212765][ T28] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 166.227700][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.242837][ T28] usb 2-1: Product: syz [ 166.247263][ T28] usb 2-1: Manufacturer: syz [ 166.251987][ T28] usb 2-1: SerialNumber: syz [ 166.270802][ T28] usb 2-1: config 0 descriptor?? [ 166.295848][ T28] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 166.332494][ T7621] loop4: detected capacity change from 0 to 256 [ 166.333465][ T28] usb 2-1: Detected FT232R [ 166.388667][ T7621] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 166.509628][ T28] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 166.724143][ T7628] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 166.765548][ T7628] Zero length message leads to an empty skb [ 166.772519][ T28] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.790756][ T7629] loop4: detected capacity change from 0 to 4096 [ 166.979511][ T2180] usb 2-1: USB disconnect, device number 12 [ 167.061705][ T2180] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 167.096928][ T2180] ftdi_sio 2-1:0.0: device disconnected [ 167.421371][ T7644] loop4: detected capacity change from 0 to 1024 [ 167.453801][ T7644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.492484][ T7644] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.508733][ T7647] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 167.584101][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 167.615854][ T7644] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 3: comm syz.4.588: lblock 3 mapped to illegal pblock 3 (length 2) [ 167.709376][ T7656] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: comm syz.4.588: lblock 0 mapped to illegal pblock 0 (length 3) [ 167.788871][ T7656] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 167.799489][ T7658] syz.1.591 uses obsolete (PF_INET,SOCK_PACKET) [ 167.807850][ T7656] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.807850][ T7656] [ 167.943800][ T145] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 4: comm kworker/u4:5: lblock 4 mapped to illegal pblock 4 (length 1) [ 167.981291][ T145] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 168.014096][ T145] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.014096][ T145] [ 168.031575][ T6374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.482331][ T7681] loop4: detected capacity change from 0 to 128 [ 168.519265][ T7681] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.572152][ T7681] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.705752][ T7683] can0: slcan on ptm0. [ 168.746331][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.746809][ T145] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.859472][ T7682] can0 (unregistered): slcan off ptm0. [ 168.958106][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 168.968537][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.006325][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024 [ 169.018725][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.031904][ T28] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 169.041473][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.052445][ T28] usb 1-1: config 0 descriptor?? [ 169.181873][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 169.413477][ T7699] loop2: detected capacity change from 0 to 256 [ 169.543080][ T28] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0007/input/input14 [ 169.576934][ T7699] FAT-fs (loop2): Directory bread(block 64) failed [ 169.583594][ T7699] FAT-fs (loop2): Directory bread(block 65) failed [ 169.647173][ T7699] FAT-fs (loop2): Directory bread(block 66) failed [ 169.654359][ T7699] FAT-fs (loop2): Directory bread(block 67) failed [ 169.711126][ T7699] FAT-fs (loop2): Directory bread(block 68) failed [ 169.743233][ T7699] FAT-fs (loop2): Directory bread(block 69) failed [ 169.762299][ T28] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 169.776476][ T7699] FAT-fs (loop2): Directory bread(block 70) failed [ 169.783280][ T7699] FAT-fs (loop2): Directory bread(block 71) failed [ 169.813943][ T7699] FAT-fs (loop2): Directory bread(block 72) failed [ 169.837009][ T28] usb 1-1: USB disconnect, device number 14 [ 169.838778][ T7699] FAT-fs (loop2): Directory bread(block 73) failed [ 170.056657][ T7711] fido_id[7711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 170.618413][ T7726] program syz.4.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.931221][ T7739] netlink: 48 bytes leftover after parsing attributes in process `syz.0.619'. [ 171.128884][ T7743] loop4: detected capacity change from 0 to 256 [ 171.164058][ T7745] loop0: detected capacity change from 0 to 64 [ 171.199732][ T7745] hfs: unable to locate alternate MDB [ 171.205563][ T7745] hfs: continuing without an alternate MDB [ 172.073293][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 172.147724][ T7734] loop1: detected capacity change from 0 to 40427 [ 172.207580][ T7734] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.359216][ T7734] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.366549][ T5808] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 172.586523][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 172.604651][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.629891][ T5808] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 172.646470][ T5808] usb 1-1: config 0 has no interface number 0 [ 172.654847][ T5767] syz-executor: attempt to access beyond end of device [ 172.654847][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.656956][ T5808] usb 1-1: config 0 interface 42 has no altsetting 0 [ 172.691215][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.735605][ T5808] usb 1-1: New USB device found, idVendor=04da, idProduct=250c, bcdDevice= 1.8c [ 172.747202][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.755330][ T5808] usb 1-1: Product: syz [ 172.786492][ T5808] usb 1-1: Manufacturer: syz [ 172.791179][ T5808] usb 1-1: SerialNumber: syz [ 172.823264][ T5808] usb 1-1: config 0 descriptor?? [ 173.119095][ T5808] usb 1-1: bad CDC descriptors [ 173.143431][ T5808] usb 1-1: USB disconnect, device number 15 [ 173.292307][ T7788] loop4: detected capacity change from 0 to 8192 [ 173.327073][ T7788] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.340317][ T7788] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 173.350418][ T7788] REISERFS (device loop4): using ordered data mode [ 173.357168][ T7788] reiserfs: using flush barriers [ 173.385686][ T7788] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.402917][ T7788] REISERFS (device loop4): checking transaction log (loop4) [ 173.418865][ T7788] REISERFS (device loop4): Using r5 hash to sort names [ 173.441400][ T7788] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 173.953403][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 174.144329][ T7809] loop1: detected capacity change from 0 to 512 [ 174.357120][ T7818] loop4: detected capacity change from 0 to 256 [ 174.396320][ T7809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 174.413516][ T7818] exfat: Deprecated parameter 'utf8' [ 174.462896][ T7818] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 174.495766][ T7809] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.682206][ T7818] netlink: 116 bytes leftover after parsing attributes in process `syz.4.650'. [ 175.085726][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 175.410891][ T7811] loop2: detected capacity change from 0 to 131072 [ 175.424900][ T7811] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 175.433607][ T7811] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 175.449139][ T7811] F2FS-fs (loop2): invalid crc value [ 175.462298][ T7811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.526721][ T7811] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 175.534344][ T7811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 175.655241][ T7811] overlayfs: failed to resolve './file0/file1': -2 [ 176.571934][ T7855] loop4: detected capacity change from 0 to 128 [ 176.648740][ T7855] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.731435][ T7855] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.816368][ T2180] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 176.928696][ T6374] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.040186][ T2180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.087076][ T2180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.106584][ T2180] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 177.122845][ T2180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.159048][ T2180] usb 1-1: config 0 descriptor?? [ 177.528599][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 177.588589][ T2180] lg-g15 0003:046D:0A07.0008: unknown main item tag 0x1 [ 177.595837][ T2180] lg-g15 0003:046D:0A07.0008: item fetching failed at offset 2/5 [ 177.619528][ T2180] lg-g15: probe of 0003:046D:0A07.0008 failed with error -22 [ 177.715694][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 177.726883][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 177.735935][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 177.749038][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 177.758055][ T7875] netlink: 'syz.2.672': attribute type 6 has an invalid length. [ 177.799250][ T2180] usb 1-1: USB disconnect, device number 16 [ 177.997450][ T7883] netlink: 64 bytes leftover after parsing attributes in process `syz.1.677'. [ 178.337484][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 178.373938][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 178.497532][ T7899] nbd: must specify a size in bytes for the device [ 178.536801][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 178.560925][ T5811] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 178.586287][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.606447][ T5811] usb 5-1: Product: syz [ 178.610668][ T5811] usb 5-1: Manufacturer: syz [ 178.615403][ T5811] usb 5-1: SerialNumber: syz [ 178.622485][ T5811] usb 5-1: config 0 descriptor?? [ 178.638661][ T5811] gspca_main: se401-2.14.0 probing 047d:5003 [ 178.801614][ T7909] loop1: detected capacity change from 0 to 136 [ 178.909662][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.930237][ T7909] rock: directory entry would overflow storage [ 178.942430][ T7909] rock: sig=0x4f50, size=4, remaining=3 [ 178.949504][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.974574][ T7909] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 179.474554][ T7907] loop0: detected capacity change from 0 to 32768 [ 179.535514][ T7907] JFS: Invalid stbl[0] = -1 for inode 2, block = 0 [ 179.716602][ T5808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 179.816749][ T5811] gspca_se401: read req failed req 0x06 error -19 [ 179.853196][ T5811] usb 5-1: USB disconnect, device number 2 [ 179.908194][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 179.919306][ T5808] usb 3-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 179.938289][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.963687][ T5808] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.987220][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.007743][ T5808] usb 3-1: Product: syz [ 180.022456][ T5808] usb 3-1: Manufacturer: syz [ 180.033755][ T5808] usb 3-1: SerialNumber: syz [ 180.309755][ T5808] usb 3-1: 0:2 : does not exist [ 180.314779][ T5808] usb 3-1: unit 9 not found! [ 180.330098][ T5808] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 180.350259][ T5808] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 180.393680][ T5808] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 180.445076][ T5808] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 180.460600][ T5808] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 180.474869][ T5808] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 180.492684][ T5808] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 180.520299][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'. [ 180.530440][ T5808] usb 3-1: USB disconnect, device number 2 [ 180.554587][ T7949] bond0: entered promiscuous mode [ 180.583094][ T7949] bond_slave_0: entered promiscuous mode [ 180.603681][ T7949] bond_slave_1: entered promiscuous mode [ 180.632754][ T7949] bond0: left promiscuous mode [ 180.645469][ T7949] bond_slave_0: left promiscuous mode [ 180.660191][ T7949] bond_slave_1: left promiscuous mode [ 180.832448][ T1138] Bluetooth: hci4: Frame reassembly failed (-84) [ 180.845083][ T7956] Bluetooth: hci4: Frame reassembly failed (-84) [ 181.742950][ T7974] loop2: detected capacity change from 0 to 256 [ 181.757408][ T7974] exfat: Deprecated parameter 'utf8' [ 181.770205][ T7974] exfat: Deprecated parameter 'utf8' [ 181.842690][ T7974] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 181.955076][ T7967] loop1: detected capacity change from 0 to 40427 [ 181.984919][ T7967] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 182.001329][ T7967] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 182.051618][ T7967] F2FS-fs (loop1): invalid crc value [ 182.077983][ T7967] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.211574][ T7967] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.225200][ T7967] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.245828][ T27] audit: type=1800 audit(1775090044.870:13): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.713" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 182.312749][ T7967] syz.1.713: attempt to access beyond end of device [ 182.312749][ T7967] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 182.388701][ T7981] loop2: detected capacity change from 0 to 4096 [ 182.423154][ T7981] EXT4-fs (loop2): Test dummy encryption mode enabled [ 182.440432][ T7972] loop0: detected capacity change from 0 to 32768 [ 182.449509][ T5767] syz-executor: attempt to access beyond end of device [ 182.449509][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.466569][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 182.483282][ T7981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.502243][ T7972] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 182.611960][ T7972] XFS (loop0): Ending clean mount [ 182.759381][ T5774] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 182.907417][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 182.908803][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 182.925297][ T7981] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 183.130806][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.680806][ T8015] loop2: detected capacity change from 0 to 1024 [ 183.862893][ T1138] hfsplus: b-tree write err: -5, ino 25 [ 183.876810][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 183.882809][ T1138] hfsplus: b-tree write err: -5, ino 2 [ 184.716415][ T2180] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 184.916389][ T2180] usb 1-1: Using ep0 maxpacket: 16 [ 184.941256][ T2180] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 184.971963][ T2180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.995384][ T2180] usb 1-1: Product: syz [ 185.007615][ T2180] usb 1-1: Manufacturer: syz [ 185.016524][ T2180] usb 1-1: SerialNumber: syz [ 185.219480][ T8030] loop2: detected capacity change from 0 to 32768 [ 185.271116][ T2180] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 185.305475][ T8034] loop4: detected capacity change from 0 to 32768 [ 185.307338][ T2180] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.321611][ T8034] XFS: noikeep mount option is deprecated. [ 185.340774][ T2180] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 185.352413][ T2180] usb 1-1: media controller created [ 185.371488][ T8030] find_entry called with index = 0 [ 185.400547][ T2180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.420512][ T8030] read_mapping_page failed! [ 185.425118][ T8030] ERROR: (device loop2): txCommit: [ 185.425118][ T8030] [ 185.465550][ T8034] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.623230][ T8034] XFS (loop4): Ending clean mount [ 185.655561][ T8034] XFS (loop4): Quotacheck needed: Please wait. [ 185.703838][ T8048] loop1: detected capacity change from 0 to 512 [ 185.712778][ T2180] zl10353_read_register: readreg error (reg=127, ret==-110) [ 185.822814][ T8048] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.748: iget: bad i_size value: 38620345925642 [ 185.878186][ T8034] XFS (loop4): Quotacheck: Done. [ 185.880588][ T8048] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.748: couldn't read orphan inode 15 (err -117) [ 185.943825][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.959216][ T2180] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 186.004158][ T2180] usb 1-1: USB disconnect, device number 17 [ 186.200137][ T6374] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.214225][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 186.344656][ T28] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 186.577192][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.604002][ T28] usb 3-1: not running at top speed; connect to a high speed hub [ 186.651857][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.689982][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.736758][ T28] usb 3-1: string descriptor 0 read error: -22 [ 186.743274][ T28] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.762488][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.804291][ T28] usb 3-1: 0:2 : does not exist [ 186.863543][ T8061] kvm: kvm [8059]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 187.259854][ T8076] loop0: detected capacity change from 0 to 2048 [ 187.325381][ T8076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.626631][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.661120][ T28] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 187.691097][ T28] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 187.722902][ T28] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 187.809642][ T28] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 187.839995][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.850046][ T28] usb 3-1: USB disconnect, device number 3 [ 187.867068][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.889864][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.921280][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.951051][ T8] usb 2-1: SerialNumber: syz [ 188.207233][ T8] usb 2-1: 0:2 : does not exist [ 188.246817][ T8] usb 2-1: USB disconnect, device number 13 [ 188.305056][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.005524][ T8113] loop1: detected capacity change from 0 to 1024 [ 189.127790][ T8113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.314142][ T8111] loop0: detected capacity change from 0 to 32768 [ 189.364624][ T8111] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 189.383626][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.460091][ T8109] loop2: detected capacity change from 0 to 32768 [ 189.496387][ T8111] XFS (loop0): Ending clean mount [ 189.902819][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 189.984988][ T8137] loop4: detected capacity change from 0 to 128 [ 190.000444][ T8137] EXT4-fs: Ignoring removed nobh option [ 190.099503][ T8137] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.205003][ T8137] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.359186][ T8137] fscrypt (loop4, inode 12): Reserved bits set in encryption policy [ 190.492121][ T6374] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.643747][ T8148] loop4: detected capacity change from 0 to 128 [ 190.701720][ T8148] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.734518][ T8147] loop0: detected capacity change from 0 to 256 [ 190.742013][ T8148] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.883829][ T8147] FAT-fs (loop0): Directory bread(block 64) failed [ 190.919709][ T27] audit: type=1800 audit(1775090053.550:14): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.778" name="file2" dev="loop4" ino=12 res=0 errno=0 [ 190.955677][ T8147] FAT-fs (loop0): Directory bread(block 65) failed [ 190.958305][ T8155] capability: warning: `syz.1.789' uses deprecated v2 capabilities in a way that may be insecure [ 190.962868][ T8147] FAT-fs (loop0): Directory bread(block 66) failed [ 190.984972][ T8147] FAT-fs (loop0): Directory bread(block 67) failed [ 190.997578][ T8147] FAT-fs (loop0): Directory bread(block 68) failed [ 191.004968][ T8147] FAT-fs (loop0): Directory bread(block 69) failed [ 191.005996][ T6374] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.012737][ T8147] FAT-fs (loop0): Directory bread(block 70) failed [ 191.043619][ T8147] FAT-fs (loop0): Directory bread(block 71) failed [ 191.067231][ T8147] FAT-fs (loop0): Directory bread(block 72) failed [ 191.073930][ T8147] FAT-fs (loop0): Directory bread(block 73) failed [ 191.418917][ T8167] Bluetooth: MGMT ver 1.22 [ 191.586797][ T8171] loop2: detected capacity change from 0 to 1024 [ 191.661362][ T8171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.756935][ T27] audit: type=1800 audit(1775090054.390:15): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.786" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 191.945886][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.168357][ T8174] loop0: detected capacity change from 0 to 32768 [ 192.192660][ T8174] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.226303][ T8174] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 192.241088][ T8174] BTRFS info (device loop0): using free space tree [ 192.428565][ T8174] BTRFS info (device loop0): enabling ssd optimizations [ 192.485658][ T8174] BTRFS info (device loop0): auto enabling async discard [ 192.860381][ T8174] BTRFS info (device loop0): scrub: started on devid 1 [ 192.883716][ T8174] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 193.424417][ T8186] loop4: detected capacity change from 0 to 40427 [ 193.444476][ T8186] F2FS-fs (loop4): invalid crc value [ 193.466488][ T5085] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 193.466538][ T5769] Bluetooth: hci2: command 0x0401 tx timeout [ 193.488436][ T8186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.716745][ T8186] F2FS-fs (loop4): Start checkpoint disabled! [ 193.734696][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.767201][ T8186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 193.986425][ T8186] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 194.594457][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.601038][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.848435][ T8250] loop2: detected capacity change from 0 to 1024 [ 194.887594][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 194.956591][ T59] hfsplus: b-tree write err: -5, ino 25 [ 194.958314][ T8252] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 194.962402][ T59] hfsplus: b-tree write err: -5, ino 4 [ 195.021701][ T8252] netlink: 'syz.1.816': attribute type 2 has an invalid length. [ 195.026427][ T59] hfsplus: b-tree write err: -5, ino 2 [ 195.527577][ T8270] input: syz0 as /devices/virtual/input/input15 [ 195.716620][ T5810] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 195.919288][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 195.946008][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 195.970039][ T5810] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 195.987434][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.995786][ T5810] usb 1-1: Product: syz [ 196.003215][ T5810] usb 1-1: Manufacturer: syz [ 196.021675][ T5810] usb 1-1: SerialNumber: syz [ 196.047551][ T5810] usb 1-1: config 0 descriptor?? [ 196.098390][ T5810] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 196.293956][ T8295] loop2: detected capacity change from 0 to 512 [ 196.711269][ T5810] gspca_zc3xx: reg_w_i err -71 [ 196.735808][ T1188] kernel write not supported for file /cpuinfo (pid: 1188 comm: kworker/0:2) [ 196.757783][ T8303] loop2: detected capacity change from 0 to 8192 [ 197.127267][ T8310] loop1: detected capacity change from 0 to 4096 [ 197.336510][ T5810] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 197.369448][ T5810] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 197.408455][ T5810] usb 1-1: USB disconnect, device number 18 [ 197.516277][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 197.708642][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 197.718618][ T788] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.749159][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.775159][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.816234][ T788] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.846664][ T788] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.902640][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.216506][ T788] usb 3-1: GET_CAPABILITIES returned 0 [ 198.242693][ T788] usbtmc 3-1:16.0: can't read capabilities [ 198.338977][ T8323] loop4: detected capacity change from 0 to 4096 [ 198.575789][ T788] usb 3-1: USB disconnect, device number 4 [ 199.013164][ T8319] loop0: detected capacity change from 0 to 131072 [ 199.021572][ T8319] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 199.028723][ T8319] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 199.044696][ T8319] F2FS-fs (loop0): invalid crc value [ 199.072544][ T8319] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.124023][ T8319] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 199.131649][ T8319] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 199.646579][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.834955][ T8345] loop4: detected capacity change from 0 to 128 [ 199.864116][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.891641][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.906388][ T8] usb 2-1: Product: syz [ 199.910705][ T8] usb 2-1: Manufacturer: syz [ 199.915346][ T8] usb 2-1: SerialNumber: syz [ 199.982945][ T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.054470][ T5811] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.658759][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 200.693236][ T8353] loop0: detected capacity change from 0 to 1024 [ 200.742346][ T8353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.755771][ T8353] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.779728][ T1188] kernel read not supported for file /dsp1 (pid: 1188 comm: kworker/0:2) [ 200.876469][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 200.888459][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.911652][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.946767][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.981950][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.000021][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.013345][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.049615][ T788] usb 3-1: config 0 descriptor?? [ 201.149476][ T5811] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 201.168668][ T5811] ath9k_htc: Failed to initialize the device [ 201.252290][ T5811] usb 2-1: ath9k_htc: USB layer deinitialized [ 201.288086][ T1188] usb 2-1: USB disconnect, device number 14 [ 201.567760][ T788] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input16 [ 201.605349][ T788] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 201.789056][ T5085] Bluetooth: hci2: command 0x0401 tx timeout [ 201.906849][ T788] usb 3-1: USB disconnect, device number 5 [ 201.954556][ T8373] loop0: detected capacity change from 0 to 2048 [ 202.016073][ T8373] loop0: p1 < > p3 [ 202.033534][ T8373] loop0: p3 size 134217728 extends beyond EOD, truncated [ 202.227720][ T8365] loop4: detected capacity change from 0 to 40427 [ 202.249840][ T8365] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 202.270969][ T8365] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.305496][ T8365] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.478258][ T8365] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 202.491752][ T8365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 202.726558][ T5811] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 202.944870][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.963952][ T5811] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.000978][ T5811] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 203.009954][ T8397] pimreg: tun_chr_ioctl cmd 1074025676 [ 203.017714][ T8397] pimreg: owner set to 270 [ 203.023167][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.036773][ T5811] usb 1-1: Product: syz [ 203.041023][ T5811] usb 1-1: Manufacturer: syz [ 203.066318][ T5811] usb 1-1: SerialNumber: syz [ 203.078053][ T5811] usb 1-1: config 0 descriptor?? [ 203.403007][ T788] usb 1-1: USB disconnect, device number 19 [ 203.680706][ T8409] program syz.4.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.208613][ T27] audit: type=1326 audit(1775090066.830:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f5739c819 code=0x0 [ 204.323123][ T8421] loop0: detected capacity change from 0 to 8192 [ 204.366476][ T8421] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 204.437461][ T8421] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 204.496738][ T8421] REISERFS (device loop0): using ordered data mode [ 204.503335][ T8421] reiserfs: using flush barriers [ 204.570882][ T8421] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.627443][ T8421] REISERFS (device loop0): checking transaction log (loop0) [ 204.816119][ T8421] REISERFS (device loop0): Using tea hash to sort names [ 204.824072][ T8421] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 204.968007][ T788] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.216591][ T788] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 205.235879][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.245191][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.275417][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.298105][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.338483][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.374284][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.393126][ T8437] input: syz1 as /devices/virtual/input/input17 [ 205.405649][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.436263][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.475081][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.495425][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.499876][ T8439] loop0: detected capacity change from 0 to 256 [ 205.504955][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.546860][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.557685][ T8439] exfat: Deprecated parameter 'namecase' [ 205.568193][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.581421][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.613250][ T8439] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 205.623441][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.677663][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.688267][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.733431][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.755186][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.809441][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.870068][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.899451][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.916221][ T788] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.956518][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.979098][ T788] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 205.988882][ T788] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 206.016256][ T788] usb 3-1: Product: syz [ 206.026585][ T788] usb 3-1: Manufacturer: syz [ 206.034835][ T788] usb 3-1: SerialNumber: syz [ 206.062588][ T788] usb 3-1: config 0 descriptor?? [ 206.063840][ T8448] loop0: detected capacity change from 0 to 512 [ 206.083277][ T788] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 206.124277][ T8448] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.899: inode has both inline data and extents flags [ 206.141053][ T8448] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.899: couldn't read orphan inode 15 (err -117) [ 206.204675][ T8448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.502799][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.590081][ T5811] usb 3-1: USB disconnect, device number 6 [ 206.614527][ T5811] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 206.913770][ T8452] loop4: detected capacity change from 0 to 32768 [ 206.949967][ T8452] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 207.155901][ T5768] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 207.444244][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 207.512211][ T8454] loop1: detected capacity change from 0 to 40427 [ 207.565054][ T8454] F2FS-fs (loop1): invalid crc value [ 207.748873][ T8454] F2FS-fs (loop1): Start checkpoint disabled! [ 207.784469][ T8454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 209.021283][ T8507] loop4: detected capacity change from 0 to 64 [ 209.064560][ T8509] loop2: detected capacity change from 0 to 128 [ 209.114835][ T27] audit: type=1800 audit(1775090071.740:17): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.924" name="file2" dev="loop4" ino=21 res=0 errno=0 [ 209.137521][ T8509] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 209.190631][ T8509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.712005][ T8516] loop4: detected capacity change from 0 to 8192 [ 209.761625][ T8516] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.786288][ T8516] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 209.795684][ T8516] REISERFS (device loop4): using ordered data mode [ 209.810393][ T8516] reiserfs: using flush barriers [ 209.821720][ T8516] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.864529][ T8522] mkiss: ax0: crc mode is auto. [ 209.916871][ T8516] REISERFS (device loop4): checking transaction log (loop4) [ 210.207293][ T8516] REISERFS (device loop4): Using r5 hash to sort names [ 210.224223][ T8516] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 210.667328][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 210.713003][ T8520] loop2: detected capacity change from 0 to 40427 [ 210.745987][ T8520] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 210.777526][ T8520] F2FS-fs (loop2): Image doesn't support compression [ 210.784342][ T8520] F2FS-fs (loop2): Image doesn't support compression [ 210.816715][ T8520] F2FS-fs (loop2): invalid crc value [ 210.866258][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 210.893432][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.917132][ T8520] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.935644][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.966275][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.985940][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 211.006292][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.028591][ T8] usb 1-1: config 0 descriptor?? [ 211.076387][ T8520] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 211.252765][ T8520] syz.2.931: attempt to access beyond end of device [ 211.252765][ T8520] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 211.340831][ T5771] syz-executor: attempt to access beyond end of device [ 211.340831][ T5771] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 211.361194][ T5771] F2FS-fs (loop2): Remounting filesystem read-only [ 211.478899][ T8] hid (null): invalid report_count -1537249567 [ 211.485148][ T8] hid (null): invalid report_count -831082605 [ 211.504477][ T8] hid (null): unknown global tag 0xc [ 211.510565][ T8] hid (null): bogus close delimiter [ 211.780634][ T8] usb 1-1: USB disconnect, device number 20 [ 211.869330][ T8544] loop1: detected capacity change from 0 to 256 [ 212.419418][ T8552] netlink: 27 bytes leftover after parsing attributes in process `syz.4.946'. [ 212.518519][ T8548] loop2: detected capacity change from 0 to 40427 [ 212.557231][ T8548] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 212.589193][ T8548] F2FS-fs (loop2): invalid crc value [ 212.625742][ T8548] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.747439][ T8548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.941133][ T5771] syz-executor: attempt to access beyond end of device [ 212.941133][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 212.989350][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.006112][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.167181][ T8570] loop1: detected capacity change from 0 to 16 [ 213.182549][ T8570] erofs: (device loop1): mounted with root inode @ nid 36. [ 213.233864][ T8570] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1416] out[3560] [ 213.286289][ T8570] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 80 of nid 36 [ 213.853707][ T8581] loop2: detected capacity change from 0 to 1024 [ 213.899632][ T8581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.982588][ T8581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.084209][ T8581] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 214.292013][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.305572][ T8599] loop4: detected capacity change from 0 to 1024 [ 214.437501][ T8599] hfsplus: bad catalog entry type [ 214.504280][ T3479] hfsplus: b-tree write err: -5, ino 25 [ 214.514878][ T3479] hfsplus: b-tree write err: -5, ino 4 [ 214.528092][ T3479] hfsplus: b-tree write err: -5, ino 2 [ 214.543960][ T3479] hfsplus: b-tree write err: -5, ino 26 [ 214.599924][ T8604] loop0: detected capacity change from 0 to 128 [ 214.687710][ T27] audit: type=1800 audit(1775090333.323:18): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.973" name="file2" dev="loop0" ino=1048641 res=0 errno=0 [ 215.005835][ T8614] loop1: detected capacity change from 0 to 1764 [ 215.372003][ T8605] loop2: detected capacity change from 0 to 40427 [ 215.391454][ T8605] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 215.401598][ T8605] F2FS-fs (loop2): invalid crc value [ 215.410847][ T8605] F2FS-fs (loop2): Found nat_bits in checkpoint [ 215.479602][ T8605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.572773][ T8620] f2fs_ckpt-7:2: attempt to access beyond end of device [ 215.572773][ T8620] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 215.589917][ T8620] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 215.601237][ T8620] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 215.679821][ T8624] loop1: detected capacity change from 0 to 2048 [ 215.751903][ T8625] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.343418][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.986'. [ 216.381778][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 216.592998][ T8648] loop1: detected capacity change from 0 to 512 [ 216.688394][ T8648] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.989: bad orphan inode 11862016 [ 216.788709][ T8648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 216.863425][ T8648] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.951142][ T27] audit: type=1800 audit(1775090335.583:19): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.989" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 216.971439][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.037028][ T8661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.985'. [ 217.127045][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.569350][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 218.734405][ T8710] 9p: Unknown access argument : -22 [ 218.911604][ T8712] syz_tun: entered allmulticast mode [ 218.938196][ T8711] syz_tun: left allmulticast mode [ 219.241702][ T5811] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.254537][ T8716] loop4: detected capacity change from 0 to 32768 [ 219.301419][ T27] audit: type=1800 audit(1775090337.933:20): pid=8716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1013" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 219.436532][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 219.446675][ T5811] usb 3-1: config 0 has no interfaces? [ 219.455414][ T5811] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.467604][ T5811] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.475675][ T5811] usb 3-1: Manufacturer: syz [ 219.483670][ T5811] usb 3-1: config 0 descriptor?? [ 219.666204][ T8716] ERROR: (device loop4): xtSearch: stack overrun! [ 219.666204][ T8716] [ 219.678309][ T8716] ERROR: (device loop4): remounting filesystem as read-only [ 219.686339][ T8716] ERROR: (device loop4): xtTruncate: stack overrun! [ 219.686339][ T8716] [ 219.762495][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 219.790310][ T5810] usb 3-1: USB disconnect, device number 7 [ 219.884055][ T6374] ------------[ cut here ]------------ [ 219.890542][ T6374] kernel BUG at fs/jfs/inode.c:175! [ 219.896046][ T6374] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 219.902148][ T6374] CPU: 0 PID: 6374 Comm: syz-executor Not tainted syzkaller #0 [ 219.909731][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.919828][ T6374] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 219.925426][ T6374] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 49 c2 df fe e9 16 fe ff ff e8 4f 86 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 219.945164][ T6374] RSP: 0018:ffffc900043efac0 EFLAGS: 00010293 [ 219.951274][ T6374] RAX: ffffffff82ff99d1 RBX: ffff88805e9cb270 RCX: ffff88802c0ada00 [ 219.959557][ T6374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805e9cb270 [ 219.967575][ T6374] RBP: 0000000000000001 R08: ffffffff911c363f R09: 1ffffffff22386c7 [ 219.975589][ T6374] R10: dffffc0000000000 R11: fffffbfff22386c8 R12: dffffc0000000000 [ 219.983598][ T6374] R13: dffffc0000000000 R14: ffff88805e9caef8 R15: ffff88805e9cb2a8 [ 219.991645][ T6374] FS: 00005555936e1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 220.000713][ T6374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.007337][ T6374] CR2: 00005555936fca28 CR3: 00000000677ff000 CR4: 00000000003506f0 [ 220.015375][ T6374] Call Trace: [ 220.018697][ T6374] [ 220.021657][ T6374] ? evict+0x4c4/0x8d0 [ 220.025873][ T6374] ? jfs_write_inode+0x220/0x220 [ 220.030857][ T6374] evict+0x4ca/0x8d0 [ 220.034834][ T6374] ? proc_nr_inodes+0x230/0x230 [ 220.039911][ T6374] ? do_raw_spin_unlock+0x121/0x230 [ 220.045243][ T6374] ? do_raw_spin_unlock+0x121/0x230 [ 220.050793][ T6374] evict_inodes+0x606/0x6a0 [ 220.055451][ T6374] ? clear_inode+0x150/0x150 [ 220.060100][ T6374] generic_shutdown_super+0x97/0x2b0 [ 220.065521][ T6374] kill_block_super+0x44/0x90 [ 220.070482][ T6374] deactivate_locked_super+0x97/0x100 [ 220.076002][ T6374] cleanup_mnt+0x43b/0x4d0 [ 220.080509][ T6374] task_work_run+0x1d4/0x260 [ 220.085302][ T6374] ? task_work_cancel+0x220/0x220 [ 220.090386][ T6374] ? exit_to_user_mode_loop+0x3b/0x110 [ 220.095901][ T6374] exit_to_user_mode_loop+0xe6/0x110 [ 220.101237][ T6374] exit_to_user_mode_prepare+0xee/0x180 [ 220.106846][ T6374] syscall_exit_to_user_mode+0x1a/0x50 [ 220.112358][ T6374] do_syscall_64+0x61/0xa0 [ 220.116821][ T6374] ? clear_bhb_loop+0x40/0x90 [ 220.121658][ T6374] ? clear_bhb_loop+0x40/0x90 [ 220.126370][ T6374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.132310][ T6374] RIP: 0033:0x7f87ce39da57 [ 220.136763][ T6374] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 220.156499][ T6374] RSP: 002b:00007ffc6f1e5bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 220.164946][ T6374] RAX: 0000000000000000 RBX: 00007f87ce432048 RCX: 00007f87ce39da57 [ 220.172947][ T6374] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6f1e5c70 [ 220.181054][ T6374] RBP: 00007ffc6f1e5c70 R08: 00007ffc6f1e6c70 R09: 00000000ffffffff [ 220.189247][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6f1e6d00 [ 220.197346][ T6374] R13: 00007f87ce432048 R14: 0000000000035a65 R15: 00007ffc6f1e6d40 [ 220.205558][ T6374] [ 220.208628][ T6374] Modules linked in: [ 220.220970][ T6374] ---[ end trace 0000000000000000 ]--- [ 220.227227][ T6374] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 220.232923][ T6374] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 49 c2 df fe e9 16 fe ff ff e8 4f 86 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 220.253519][ T6374] RSP: 0018:ffffc900043efac0 EFLAGS: 00010293 [ 220.260713][ T6374] RAX: ffffffff82ff99d1 RBX: ffff88805e9cb270 RCX: ffff88802c0ada00 [ 220.270124][ T6374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805e9cb270 [ 220.279176][ T6374] RBP: 0000000000000001 R08: ffffffff911c363f R09: 1ffffffff22386c7 [ 220.287545][ T6374] R10: dffffc0000000000 R11: fffffbfff22386c8 R12: dffffc0000000000 [ 220.295548][ T6374] R13: dffffc0000000000 R14: ffff88805e9caef8 R15: ffff88805e9cb2a8 [ 220.303566][ T6374] FS: 00005555936e1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 220.312917][ T6374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.320614][ T6374] CR2: 00005555936fca28 CR3: 00000000677ff000 CR4: 00000000003506f0 [ 220.329613][ T6374] Kernel panic - not syncing: Fatal exception [ 220.336057][ T6374] Kernel Offset: disabled [ 220.340381][ T6374] Rebooting in 86400 seconds..