last executing test programs: 5.480053874s ago: executing program 0 (id=12623): setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 5.271089078s ago: executing program 0 (id=12627): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 4.951716107s ago: executing program 0 (id=12630): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f00000004c0), 0x0, 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/147, 0x93}], 0x54) 4.781275433s ago: executing program 0 (id=12632): r0 = syz_io_uring_setup(0x2a37, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000200)) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380"], 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x20000000, 0x0) 4.748363074s ago: executing program 5 (id=12633): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000400, &(0x7f0000000ec0)=ANY=[], 0x0, 0x64b, &(0x7f0000000840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x480a) 4.497430844s ago: executing program 0 (id=12636): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d934a18c"}, @main=@item_012={0x1, 0x0, 0x0, "a5"}]}}, 0x0}, 0x0) 4.496338949s ago: executing program 5 (id=12637): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.147729753s ago: executing program 5 (id=12640): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x20108c0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfe, 0x6172, &(0x7f0000006540)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QLmiRK5bRaSAkoDSyiKufOHAib8AhMQRIY6IA39AD1w4cOPEiUg2EqgnBo39PPHsZjdrx/bO2vN6Sc7MZ54Z7zN+7+yP7Mw+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEd7/zvZVWRNz4aVqwFPF/0YloRyyU9XJELCwv5fW7EfFC7DTH8xHRm4sot9/559mI1yPik7MRW9vrq+Xiy/vsx7d//7fffP/MO3/5Xe/if/5wr/PGuPXu3//Fv//44HD7DAAAAE1TFEXRSm/zz6X39+26OwUATEV+/i+SvPzU17/8xzt/mqX+qNVqtVo9hbqqGO1BtYiIjeo25WsGH8cDwAmzEZ8+3YZ/PXPUXaEGT50/p0E3IhzIwJO06u4Ax2Jre321lfJtVZ8Plnfb87kgA/lvtB5d3zFuOsnwOSbTun9tRieeG9OfhSdteEoPgJx/ezj/G7vt/bTecec/LePy7+9e+tQ4Of/OcP5DTk/+7ZH5N1XOv3ug/DvyBwAAAACAGZb//3+p5s9/5w6/K/vypM9/l6fUBwAAAAAAAAA4aocd/+8R4/8BAADAzCrfq5d+dXZv2bivOiuXX29FPDO0PtAw6WKZxbr7AQAAAAAAAAAAAABN0t09h/d6K6IXEc8sLhZFUf5UDdcHddjtT7qm7z80Wd0P8gAAsOuTs0PX8rci5iPievquv97i4mJRzC8sFovFwlx+Pdufmy8WKu9r87RcNtffxwvibr8of9l8ZbuqSe+XJ7UP/77ytvpFZx8dOyK99Ncc01xT2ACQ7D4bbXlGOmWK4tlxLz5ggOP/FFqKpbrvV8y+uu+mAAAAwPEriqJopa/zPpc+82/X3SkAYCry8//w5wKHqttj2iOO5ver1Wq1Wq1+qrqqGO1BtYiIjeo25WsGw/EDwAmzEZ/W3QVqJP9G60bEC3V3Aphprbo7wLHY2l5fbaV8W9XngzS+ez4XZCD/jdbOdnn7UdNJhs8xmdb9azM68dyY/jw/pT7Mkpx/ezj/G7vt/bTecec/LePy7+9cMtc8Of/OcP5DTk/+7ZH5N1XOv3ug/DvyBwAAAACAGZb//3/J5795lwEAAAAAAADgxNnaXl/N173mz/8/M2I913+eTjn/1kHzX0jz8j/Rcv7tofy/OLRepzL/8O294/9f2+urv733z//P0/3mP5dnWume1Ur3iFa6pVY3TQ+zd4/b7HX65S31Wu1ON53zU/Tei1txO9bi0sC67fT32GtfGWgve9obaL880N59rP3KQHsvfe9AsZDbL8Rq/Chux7s77WXb3IT9n5/QXkxoz/l3PP43Us6/W/kp819M7a2haenhx+3HjvvqdNTtvHXrsz+/dPy7M9FmdB7tW1W5f+dr6M/O3+RMP35yd+3Ohfs37927sxJpMrD0cqTJEcv593Z+5vYe/1/abc+P+9Xj9eHH/QPnPys2ozs2/5cq8+X+vjLlvtUh599PPzn/d1P76OP/JOc//vh/tYb+AAAAAAAAAAAAAAAAwJMURbFziehbEXE1Xf9T17WZAMB05ef/IsnL1Wq1Wq1Wn766qhjtzWoREX+ublO+ZvjZqF8GAMyy/0bE3+vuBLWRf4Pl7/srpy/X3Rlgqu5++NEPbt6+vXbnbt09AQAAAAAAAACeVh7/c7ky/vPLEbE0tN7A+K9vx/Jhx//s5plHA4we8UDfY2y2+512ZbjxF2NnfO4L48b/Ph+Pj/+dx8TtVPdjjN6E9v6E9rkJ7fMjl+6lNfJCj4qc/4uV8c7L/M8NDb/ehPFfh8e8b4Kc//nK/bnM/wtD61XzL349c/lv7HfFzWgP5H/x3gc/vnj3w49eu/XBzffX3l/74ZWVlUtXrl69du3axfdu3V67tPvv8fR6BuT889jXzgNtlpx/zlz+zZLz/1yq5d8sOf/Pp1r+zZLzz6/35N8sOf/83kf+zZLzfyXV8m+WnP+XUi3/ZtnaXp8r83811fJvlnz8fznV8m+WnP9rqZZ/s+T8L6Ra/s2S87+Y6n3k7+vhT5Gcf/6Ey/HfLDn/lVTLv1ly/pdTLf9myflfSbX8myXn/3qq5d8sOf+vpFr+zZLzv5pq+TdLzv+rqZZ/s+T8r6Va/s2S8/9aquXfLDn/r6da/s2S838j1fJvlpz/N1It/2bJ+X8z1fJvlpz/t1It/2bJ+b+Zavk3y973/5sxY8ZMnqn7kQkAAAAAAAAAAAAAGDaN04nr3kcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zF3vtEGIgBCd/AxvHGOMs2fUlvvCviwnXBigFEgq9YLvetVnwDa9dAkWyaaBEwqioomr6oi0g1EaqKqyKF7SiNC+qXl6V9gV9U1FVQmpUBRRQkXqh2WrmPM/jmdnZmVnv2J49z+cjJT/vzpk5Z848M7vftb87AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDs3jfOfbZWFEX9v8b/NhXFC+p/3jC5qfG5193qIwQAAABW638b/3/ujvSJw31cqWmbv3nF3399cXFxsXj/6G+Pf3FxMV0wWRTj64uicVl09V8/UGveJni8mKiNNH080mP3oz0uH+tx+XiPy9f1uHx9j8snely+5AQssaH8eUzjxrY1/ripPKXFncV447JtHa71eG39yEj8WU5DrXGdxfETxXxxqpgrZlq2L7etNbb/5r31fb2tiPsaadrXlvoK+eEnj8djqIVzvK1lX9duM/r+G4rJH/3wk8f/8MKzd3eaPU9Dy+2Vx7lja/04Px0+Ux5rrVifzkk8zpGm49zS4TEZbTnOWuN69T+3H+dzfR7n6LXDvKnaH/OJYqTx5283ztNY84/10nnaEj73n/cVRXH52mG3b7NkX8VIsbHlMyPXHp+JckXWb6O+lF5cjK1ond7bxzqtz9ltreu0/TkRH/97w/XGljmG5ofp+59at+RxX+k6jer3ernnSvsaHPRzZVjWYFwX327c6Sc6rsFt4f5/cvvya7Dj2umwBtP9blqDW3utwZF1o41jTg9CrXGda2twV8v2o4091Rrzme3d1+D0hdPnphc+/onXzp8+dnLu5NyZPbt2zezZt+/AgQPTJ+ZPzc2U/7/Osz38NhYj6TmwNZy7+Bx4ddu2zUt18cuDex5OdHkebmrbdtDPw7H2O1e7OU/IpWu6fG48Uj/pE1dGimWeY43HZ+fqn4fpfjc9D8eanocdv6Z0eB6O9fE8rG9zbmd/37OMNf3X6Rhu1NeCTU1rsP37kfY1OOjvR4ZlDU6EdfHPO5f/WrAlHO8TUyv9fmR0yRpMdze89tQ/k77fnzjQGJ3W5T31C25bV1xcmDv/wGPHLlw4v6sI46Z4SdNaaV+vG5vuU7FkvY6seL0enn/FE/d0+PymcK4mXlv/38Syj1V9m70PdH+sGl/dOp/Pls/uLsIYsJt9Pjt9Na+fz5Qlu5zP+jafnl799+Iplza9/o4v8/obc//z5f7STT0+Oj5WPn9H09kZb3k9bn2oxhqvXbXGvp+b7u/1eDz8d7Nfj+/s8nq8uW3bQb8ej7ffufh6XOv1047VaX88J8I6OTXT/fW4vs3m3Stdk2NdX4/vC7MWzv9rQlJIuahp7Sy3btO+xsbGw/0ai3toXad7WrYfD9msvq+ndl/fOt1xX3lbo+neXftJ0c1ap5Nt2w56naZ7tNw6rfX66dv1aX88J8K6uHNP93Va3+bpvat/7dwQ/9j02rmu1xocH11XP+bxtAjL1/vFDXENPlAcL84Wp4rZxqXrGuup1tjX1IP9rcF14b+b/Vq5ucsa3NG27aDXYPo6ttzaq40tvfMD0P54ToR18eSD3ddgfZs37R/s9647wmfSNk3fu7b/fG25n3nd03aabuTPvOrH+Vf7u/9str7NqQMrzZndz9P94TO3dThP7c/f5Z5Ts8XNOU+bw3E+e2D581Q/nvo2XzzY53o6XBTFpY8+1Ph5b/j7lT+9+J2vt/y9S6e/07n00Yd+cPuJv17J8QOw9j1fjo3l17qmv5nq5+//AQAAgDUh5v6RMBP5HwAAACoj5v74r8IT+R8AAAAqI+b+sTCTTPL/5jc9O//8pSI18xeDeHk6DQ+X28WO60z4eHLxmvrnH/rq3I///FJ/+x4piuInD/9ax+03PxyPqzQZjvPqm1s/v/SKl/ra/9FHr23X/JsHvhRuP96ffpdBpwruTFEU37zj8439TH7gSmM+/fDRxnzP5Scer2/z3MHy43j9Z15Sbv97ofx7+MSxlus/E87D98KceXvn8xGv97Urr9my/33X9hevV9v6wsbdfvKD5e3G35PzhcfL7eN5Xu74/+JzT32tvv1jr+p8/JdGOh//U+F2vxrmf7283L75Mah/HK/3mXD8cX/xeg985Vsdj//qZ8vtz72l3O5omHH/O8LH297y7Hzz+XqsdqzlfhVvLbeL+5/5zm82Lo+3F2+//fgnjlxpOR/t6+PpfyxvZ7pt+/j5uJ/oz9r2X7+d5vUZ9//UbxxtOc+99n/1Pc+8vH677fu/v2270bbrt//Gpt//zOc77i8ez+E/Oddyfw6/OzyPw/6f/GBYj+Hy/776+Zb9Rkff3fr6E7f/0qZLLfcnetuPyv1fff3Jxvy3yR//7m0vuP2Fl19ZP3dF8e33lrfXa/8n/+Bsy/F/+a6djccjXh47+u37X07c//mPTZ05u3BxfrbprDZ+d847yuNZP7FhY/147wivre0fHzl74UNz5ydnJmeKYrK6v0Lvun0lzB+U4/JKr7/z0fB43vM739y4/R8+Fz//T4+Un7/y9vLr1qvDdl8In99UPn6LtVXu/8l772o8v2tPlx+39NgHYMu2fz/Q14bh/rd/XxDX+7mXfqhxHuqXNb5uxOf1Ko//u7Pl7XwjnNfF8JuZt951bX/N28ffjXDlveXzfdXnL7zMxcf1j8Lj/c7vlbcfjyve3++G72O+tbn19S6uj29cGmm//cZv8bgcXk+Ky+Xlcat4vq88d1fHw4u/h6S4fHfj499Kt3P3iu7mchY+vjB9av7MxcemL8wtXJhe+Pgnjpw+e/HMhSON3+V55MO9rn/t9Wlj4/Vpdm7f3mJmQ1EUZ4uZm/CCdWOOv/6n/o7/3KPHZ/fPbJ+dO3Hs4okLj56bO3/y+MLC8bnZhe3HTpyY+1iv68/PHtq1++Ce/bunTs7PHjpw8OCeg1PzZ87WD6M8qB72zXxk6sz5I42rLBzae3DXgw/unZk6fXZ27tD+mZmpi72u3/jaNFW/9q9OnZ87dezC/Om5qYX5T8wd2nVw377dPX8b4OlzJxYmp89fPDN9cWHu/HR5XyYvND5d/9rX6/pU08K/lN/PtquVv4iveNf9+9LvZ6376qeWvalyk7ZfIPps+F00f/eicwf6+Tjm/vEwk0zyPwAAAOQg5v51YSbyPwAAAFRGzP3rw0zkfwAAAKiMmPsnwkwyyf/6//r//fX/y8v1//Pq/5/7aNkrXev9/9if1//Pwy3u/696//r/+v/V6//3359f68ev/6//z1LD1v+PuX9DUWSZ/wEAACAHMfdvDDOR/wEAAKAyYu6/LcxE/gcAAIDKiLn/BWEmmeR//f+++v+7exWuqt//9/7/+v/F2uz/xwdH/z8bK+7fv++Rlg/1/wP9f/3/td7/X/yfxUX9f/1/brHxZS+5Vf3/mPtvDzPJJP8DAABADmLuf2GYifwPAAAAlRFz/x1hJvI/AAAAVEbM/ZvCTDLJ//r/3v9f/1//v9L9/9W+/3/Twej/rw3e/787/f8errv/P6H/P2z9/36Of3ywxz/c/f+eh6//zw0xbO//H3P/i8JMMsn/AAAAkIOY+18cZiL/AwAAQGXE3P+SMBP5HwAAACoj5v47w0wyyf/6//r/+v/6//r/nfff+/3/yz/p/w8X/f/u9P978P7/efX/B3z8w93/H/T7/4+/uf36+v90Mmz9/5j7Xxpmkkn+BwAAgBzE3H9XmIn8DwAAAJURc//LwkzkfwAAAKiMmPs3h5lkkv/1//X/9f/1//X/O++/d/+/pP8/XPT/u9P/70H/X/9f/7+//n+Hb371/+lk2Pr/MfffHWaSSf4HAACAHMTcf0+YifwPAAAAlRFz//8LM+k3/0/ciKMCAAAABinm/i1hJpn8/b/+v/6//n9e/f/71+n/6/9Xm/5/d/r/Pej/6//r//f5/v9LraT/v77XjVEZw9b/j7n/5WEmmeR/AAAAyEHM/a8IM5H/AQAAoDJi7n9lmIn8DwAAAJURc/9kmEkm+V//v1r9/z/+yydfWej/6//32H9F+/9xGej/Z07/vzv9/x70//X/9f9vSv+ffAxb/z/m/nvDTDLJ/wAAAJCDmPu3hpnI/wAAAFAZMfffF2Yi/wMAAEBlxNy/Lcwkk/yv/1+t/n+k/6//323/Fe3/J/r/edP/76DpSar/34P+v/5/9v3/+N2v/j+DMWz9/5j7XxVmkkn+BwAAgBzE3L89zET+BwAAgMqIuf/VYSbyPwAAAFRGzP07wkwyyf/6//r/+v/6//r/nfev/7826f93t9L+/zr9f/1//f/M+v/e/5/BGrb+f8z9rwkzyST/AwAAQA5i7t8ZZiL/AwAAQGXEf79Z/rtX+R8AAACqKOb+qTCTTPK//r/+f079/5r+v/6//n/l6f935/3/e9D/1//X/9f/Z6CGrf8fc/9rw0wyyf8AAACQg5j7Hwgzkf8BAACgMmLunw4zkf8BAACgMmLunwkzyST/6//r/+fU//f+//r/+v/Vp//fnf5/D/r/+v9V6/8Xhf4/t9Sw9f9j7t8VZpJJ/gcAAIAcxNy/O8xE/gcAAIDKiLl/T5iJ/A8AAACVEXP/3jCTTPK//r/+v/6//r/+f+f96/+vTfr/3en/96D/r/9ftf6/9//nFhu2/n/M/Q+GmWSS/wEAACAHMffvCzOR/wEAAKAyYu7fH2YS8n+nf9cNAAAArC0x9x8IM8nk7//1/yvS///1v23Zt/6//n+3/Q+m/79B/z9M/f/hUtH+f/vT4rrp//eg/6//r/+v/89ADVv/P+b+g2EmmeR/AAAAyEHM/a8LM5H/AQAAoDJi7v//YSbyPwAAAFRGzP0/FWaSSf7X/69I/7+N/r/+f7f9e/9//f8qq2j/f2Aq1f8f0f/X/x+u49f/1/9nqRvf/49/6q//H3P/oTCTTPI/AAAA5CDm/p8OM5H/AQAAoDJi7n99mIn8DwAAAJURc//hMJNM8r/+v/6//r/+/43p/7++aDeM/f/64tH/rxb9/+4q1f/3/v/6/0N2/Pr/+v8sNWzv/x9z/xvCTDLJ/wAAAJCDmPsfCjOR/wEAAKAyYu5/Y5iJ/A8AAACVEXP/m8JMMsn/+v/6//r/+v/e/7/z/vX/1yb9/+70/3vQ/9f/1//X/2eghq3/H3P/m8NMMsn/AAAAkIOY+98SZiL/AwAAQGXE3P/WMBP5HwAAACoj5v63hZlkkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/BmrY+v8x9/9MmEkm+R8AAAByEHP/w2Em8j8AAABURsz9bw8zkf8BAACgMmLuf0eYSSb5X/9f/1//X/9f/7/z/vX/1yb9/+70/3vQ/9f/1//X/2eghq3/H3P/O8NMMsn/AAAAkIOY+382zET+BwAAgMqIuf9dYSbyPwAAAFRGzP0/F2aSSf7X/9f/H67+/+Kl5uvp/+v/F4Pq/9evpP+fBf3/7vT/e+jQ/1+v/6//r/+v/891G7b+f8z97w4zyST/AwAAQA5i7n9PmIn8DwAAAJURc/97w0zkfwAAAKiMmPsfCTPJJP/r/2fZ/093efj6/97/X//f+//r/6+O/n93+v89eP9//X/9f/1/BmrY+v8x9z8aZpJJ/gcAAIAcxNz/vjAT+R8AAAAqI+b+nw8zkf8BAACgMmLuf3+YSSb5X/8/y/7/EL//f9X6/2Mt6yOn/v9E0+OZ1qX+v/7/TaD/353+fw/6//r/w9z/D6t5wzLX1/9nGA1b/z/m/g+EmWSS/wEAACAHMff/QpiJ/A8AAACVEXP/L4aZyP8AAABQGTH3/1KYSSb5X/9f/1//3/v/e///zvvX/1+b9P+70//vQf9f/3+Y+/896P8zjIat/x9z/y+HmSwb/H7wH33cTQAAAGCIxNz/wTCTTP7+HwAAAHIQc/+RMBP5HwAAACoj5v6jYSaZ5H/9//b+f3xHVf1//X/9f/1//f+1aHD9/5fdXhT6//r/+v/6//r/+v+sxrD1/2PuPxZmkkn+BwAAgBzE3P8rYSbyPwAAAFRGzP3Hw0zkfwAAAKiMmPtnw0wyyf+3sP8/Ppz9f+//f739/5/o/6/9/v9463b6//r/a1EF3v+/7EHq/+v/d6D/P9zHr/+v/89Sw9b/j7l/Lswkk/wPAAAAFZZ+HBxz/4kwE/kfAAAAKiPm/pNhJvI/AAAAVEbM/R8KM8kk/3v/f/1/7/9/K/r/Yy3bD03/v207/X/9/7WoAv1/7/+v/6//v0aPX/9f/5+lhq3/H3P/fJhJJvkfAAAAchBz/4fDTOR/AAAAqIyY+z8SZiL/AwAAQGXE3H8qzCST/K//r/+fe/+/VhSXvf+//n+n/ev/r036/93p//eg/6//r/+v/89ADVv/P+b+02EmmeR/AAAAyEHM/WfCTOR/AAAAqIz/Y+8+muQ6qzgON8ZWWMFHYM2KJazMR2DLjirWFMnkYJucweQcTM45J5NzztnkHE00VIny6JwjjaZ1r6y5mn7v+z7P5iCVh+6x2qb+TP3q5u6/d9xi/wMAAEA3cvffJ24ZZP/r//X/o/f/m508/3//X6//P03/r/9fwoH+/vLtf935ovDz9v93uvNV99D/6//1/5P0//p//T/naq3/z91/37hlkP0PAAAAI8jdf7+4xf4HAACAbuTuv3/cYv8DAABAN3L3XxW3DLL/9f/6f/2//n9f/3+D/l//v26e/z9N/z9D/6//1//r/1lUa/1/7v4HxC2D7H8AAAAYQe7+B8Yt9j8AAAB0I3f/g+IW+x8AAAC6kbv/wXHLIPtf/6//1/+vpf8/5vn/53w/+n/9/zb6/2n6/xn6f/2//l//z6Ja6/9z9z8kbhlk/wMAAMAIcvc/NG6x/wEAAKAbufsfFrfY/wAAANCN3P0Pj1sG2f/6f/2//n8t/f8RPf9f/6//X7nrN2f+naD/P0j/P2Om/99s9P9TLrif3/7tref9n4f+X//PQa31/7n7HxG33HWzOXax3yQAAADQlNz9j4xbBvn5PwAAAIwgd//VcYv9DwAAAN3I3X9N3DLI/tf/6//1//p//f/219f/r5Pn/087fP9/x9vf657j9v+e/z/N8/+X7v9v+WTo/1m31vr/3P3Xxi2D7H8AAAAYQe7+R8Ut9j8AAAB0I3f/o+MW+x8AAAC6kbv/MXHLIPtf/99b/3/bfV93Vv+/V7vo//X/+n/9f+/0/9M8/3/G3r/mTtYv9f/6f8//1/9zOK31/7n7Hxu3DLL/AQAAYAS5+x8Xt9j/AAAA0I3c/Y+PW+x/AAAA6Ebu/ifELYPsf/1/b/3//q/z/H/9/7bX1//r/3um/5+m/5/Ry/P/L/JTs+t+/rB2/f71//p/Dmqt/8/d/8S4ZZD9DwAAACPI3f+kuMX+BwAAgG7k7n9y3GL/AwAAQDdy9z8lbhlk/+v/9f/r6P/zFfT/+v9L3/8n/f866f+n6f9n9NL/X6Rd9/Nrf//6f/0/B7XW/+fuf2rcMsj+BwAAgBHk7n9a3GL/AwAAQDdy9z89brH/AQAAoBu5+58Rtwyy//X/+v919P+e/6//9/x//f+F0f9P0//P0P/r//X/+n8W1Vr/n7v/urhlkP0PAAAAI8jd/8y4xf4HAACAbuTuf1bcYv8DAABAN3L3PztuGWT/6//1//p//b/+f/vr6//XSf8/Tf8/Q/+v/9f/6/9ZVEP9/1lfdWLznLhlkP0PAAAAI8jd/9y4xf4HAACAbuTuf17cYv8DAABAN3L3Pz9uGWT/6/+b6f/3cr6++v+Tm81G/78ZtP8/edafZ30u9f/6/yOg/5+m/5+h/9f/6//1/yyqof5/79e5+18Qtwyy/wEAAGAEuftfGLfY/wAAANCN3P0vilvsfwAAAOhG7v4Xxy2D7H/9fzP9/56++n/P/z/38zFS/+/5/wfp/4+G/n+a/n+G/l//r//X/7Oo1vr/3P0viZuOXXHR3yIAAADQmNz9L41bBvn5PwAAAIwgd//L4hb7HwAAAFbqugO/k7v/5XHLIPtf/79s/3/srN/T/+v/z/186P/1//r/S0//P03/P0P/r//X/+v/WVRr/X/u/lfELYPsfwAAABhB7v7r4xb7HwAAALqRu/+VcYv9DwAAAN3I3f+quGWQ/a//9/x//b/+X/+//fX1/+uk/5+m/5+h/9f/77b/P37mP+r/6cOt6P9PnTp19SXv/3P3vzpuGWT/AwAAwAhy978mbrH/AQAAoBu5+18bt9j/AAAA0I3c/a+LWwbZ//r/Qfv//Kivq/+/ZrPR/+v/9f/6/2n6/2n6/xn6f/2/5//r/1lUa8//z93/+rhlkP0PAAAAI8jd/4a4xf4HAACAbuTuf2PcYv8DAABAN3L3vyluGWT/6/8H7f89/1//r/8/6v7/5o3+/0isov8/ef7Xb73/v1b/r/+fMFz/f7e77Pul/l//z0Gt9f+5+98ctwyy/wEAAGAEufvfErfY/wAAANCN3P1vjVvsfwAAAOhG7v63xU2XD7L/9f/6f/2//l//v/31j/j5/8c2m43+fwGr6P8ntN7/L/P8/3P/KT9D/6//X/P71//r/zmotf4/d//b45ZB9j8AAACMIHf/O+IW+x8AAAC6kbv/nXGL/Q8AAADdyN3/rrhlkP2v/9f/6//1/933/9euov/3/P+F6P+ntdH/n5/+X/+/5vev/9f/c+F21f/n7n933DLI/gcAAIAR5O5/T9xi/wMAAEA3cve/N26x/wEAAKAbufvfF7cMsv8b7P/3+g/9/+lft9b/5/vU//fV/x9vrv8/se+/b5Dn/+v/F6L/n6b/n6H/1//r/6/T/7Ok1p7/n7v//XHLIPsfAAAARpC7/wNx6/+6tf8BAACgG7n7Pxi32P8AAADQjdz9H4pbBtn/Dfb/p9+X/n9Pa/2/5//32f93//x//f9Q9P/T9P8z9P/6f/2/5/+zqNb6/9z9H45bBtn/AAAAMILc/R+JW+x/AAAA6Ebu/o/GLfY/AAAAdCN3/w1xyyD7X/+v/9f/6//1/6f/DPX/fdD/Tzua/v+k/l//X/38beKfAv2//n/u6+lTa/1/7v6PxS2D7H8AAAAYQe7+j8ct9j8AAAB0I3f/J+IW+x8AAABW6fItv5e7/5NxyyD7f6n+PztY/f8Z+n/9/7mfD/1/u/3/ttfX/6/TTvr//FDo/z3/P4zT/99h36/W9vz/c//3S/+v/2d5rfX/ufs/FbcMsv8BAABgBLn7Px232P8AAADQjdz9n4lb7H8AAADoRu7+z8Ytg+x/z//X/+v/9f/6/+2vr/9fJ8//n6b/n6H/3+nz89f+/vX/+n8Oaq3/z93/ubhlkP0PAAAAI8jd//m4xf4HAACAbuTu/0LcYv8DAABAN/Z2f8ZlA+5//b/+X/+v/9f/b399/f866f+n6f9n6P/1//p//T+Laq3//+LeV53YfCluGWT/AwAAwAhy9385brH/AQAAoBu5+78St9j/AAAA0I3c/V+NWwbZ//p//f86+v9Tp05drf/X/+//fs70/zfq/yn6/2n6/xn6f/2//l//z6Ja6/9z938tbhlk/wMAAMAIcvd/PW6x/wEAAKAbufu/EbfY/wAAANCN3P3fjFsG2f/6/wb6/xP6f8//1/9vPP9f/78Q/f80/f+MHvv/Exf+7e+6nz+sXb9//b/+n4Na6/9z938rbhlk/wMAAMAIcvd/O26x/wEAAKAbufu/E7fY/wAAANCN3P3fjVsG2f/6/6Pr/2/5ezfK8/9Pbra/f/2//l//r/+/1PT/0/T/M3rs/2+FXffza3//+n/9Pwe11v/n7v9e3LJ/+F1x675LAAAAoCW5+78ftwzy838AAAAYQe7+H8Qt9j8AAAB0I3f/D+OWQfa//r+B5/932P97/v/2z4f+v+n+/zL9fx/0/9P0/zP0//p//f9C/X9+mvX/o2ut/8/d/6O4ZZD9DwAAACPI3f/juMX+BwAAgG7k7v9J3GL/AwAAQDdy998Yt5y1/7e13b3Q/+v/9f/6f/3/9tfX/6+T/n/ahfb/xzeH6/9To/3/+etS/b/+X//v+f8sqrX+P3f/T+MWP/8HAACA1bniPL+fu/9ncYv9DwAAAN3I3f/zuMX+BwAAgG7k7v9F3HLTZbt6S0dK/6//1//r//X/219f/79O+v9pnv8/Q/+/RD9/pf6/j/5/s9H/c3it9f+5+38Zt/j5PwAAAHQjd/+v4hb7HwAAALqRu//XcYv9DwAAAN3I3f+buGWQ/a//1/8fsv/fSzP1/6fp/0/T/2+n/z8a+v9p+v8Z+n/P/9f/e/4/i2qt/8/d/9u4ZZD9DwAAACPI3f+7uMX+BwAAgG7k7v993GL/AwAAQDdy9/8hbhlk/++s/4+/1fr/1ff/nv+v/9f/6/+bov+fpv+fof/X/+v/9f8sqrX+P3f/H+OWQfY/AAAAjCB3/5/iFvsfAAAAupG7/89xi/0PAAAA3cjd/5e4ZZD97/n/+n/9v/5f/7/99fX/66T/n6b/367+oPT/+n/9v/6fRbXW/+fu/2vcMsj+BwAAgBHk7v9b3GL/AwAAQDdy998Ut9j/AAAA0I3c/X+PWwbZ//p//b/+X/+v/9/++vr/ddL/T9tl/3/3282/rOf/77z/z7eg/9f/6/9ZRGv9f+7+f8Qtg+x/AAAAGEHu/n/GLfY/AAAAdCN3/7/iFvsfAAAAupG7/99xyyD7f6b/P15/of5/kv5///vX/2//fOj/9f/6/0tP/z/N8/9n6P89/1//r/9nUa31/7n7/xO3DLL/AQAAYAS5+2+OW+x/AAAA6Ebu/v/GLfY/AAAAdCN3///ilkH2v+f/r6n/v1L/r//X/+v/9f8z9P/T9P8z9P/6f/2//p9Ftdb/5+7/fwAAAP//iq1Ung==") setxattr$security_ima(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140), &(0x7f0000000400)=ANY=[], 0x700, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x20400, 0x64) 3.947735247s ago: executing program 2 (id=12641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 3.495181898s ago: executing program 4 (id=12644): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@ieee802154={0x24, @long={0x3, 0x0, {0x106218f2c58257fb}}}, 0x80, 0x0}, 0x0) 3.218129606s ago: executing program 4 (id=12646): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) 3.080942696s ago: executing program 1 (id=12648): unshare(0x400) r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x1) 2.980067579s ago: executing program 2 (id=12649): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4004743c, 0x20000006) 2.878009568s ago: executing program 1 (id=12651): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0) 2.807457845s ago: executing program 4 (id=12652): kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x13, 0x25, 0x99, 0x20, 0x1781, 0x938, 0x759e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xca, 0x46, 0x81, 0x0, [], [{{0x9, 0x5, 0x1, 0x3}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) 2.805904969s ago: executing program 5 (id=12653): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 2.688100086s ago: executing program 2 (id=12654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 2.687896457s ago: executing program 1 (id=12655): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x1, 0x0, 0xffffffff, 0x0}) 2.596927925s ago: executing program 1 (id=12657): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008}) 2.399582054s ago: executing program 1 (id=12658): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000006000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB="5b38be09ff6e1a5ceb081d6ef8ea19307095de8528cc4107526b3a99bdd31b9d7e1c2f538fd849fe67a0cb48a6188758e8856b5deb697ef88e1b9cf3633f0445d1599c989cb6f8360eb049b4d32f"], 0xfe, 0x5e05, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 2.017934834s ago: executing program 3 (id=12660): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000300)={[{@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@barrier}, {@force}, {@gid}, {}, {@uid}, {@nodecompose}]}, 0x43, 0x6ae, &(0x7f0000000e40)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x21) rmdir(&(0x7f0000000100)='./control\x00') 1.680458206s ago: executing program 3 (id=12661): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r0, &(0x7f00000005c0), 0x0}, 0x20) 1.424194676s ago: executing program 3 (id=12662): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0xfeffffff, @auto="060000001a04b9435da0352cc7411e9e"}}) 1.198336927s ago: executing program 2 (id=12663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000079c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.04693056s ago: executing program 4 (id=12664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 971.99777ms ago: executing program 3 (id=12665): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000a747", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0xf000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0xb00, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) 873.995609ms ago: executing program 2 (id=12666): r0 = epoll_create1(0x0) r1 = dup(r0) ioctl$TIOCGPTPEER(r1, 0x5421, 0x20a073fe) 735.535161ms ago: executing program 3 (id=12667): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x0, 0x0, 0x3) 638.017034ms ago: executing program 4 (id=12668): r0 = socket(0x8000000010, 0x2, 0x0) r1 = getpid() fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, r1}) 623.275395ms ago: executing program 2 (id=12669): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfd, 0x985a, &(0x7f0000009740)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d02c67be258777cd42c39224d3900000000000000000000000000000000000000000000000000000000000000000000000000ffffff"]) 522.498351ms ago: executing program 0 (id=12670): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000020100)={{}, 0x0, 0x4, @unused=[0x101], @subvolid}) 522.113847ms ago: executing program 1 (id=12671): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 521.739699ms ago: executing program 5 (id=12672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 201.38665ms ago: executing program 5 (id=12673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0x64}}, 0x0) 200.654415ms ago: executing program 4 (id=12674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xffff}, @NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 0s ago: executing program 3 (id=12675): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x28, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 1205.461023][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1205.519729][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.543300][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.570686][ T5242] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1205.579769][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.606809][T32335] tipc: Started in network mode [ 1205.611841][T32335] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1205.624598][ T5242] usb 2-1: config 0 descriptor?? [ 1205.648583][T32335] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1205.661600][T32335] tipc: Enabled bearer , priority 10 [ 1205.683310][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1205.701176][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.731395][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.766354][T32338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11447'. [ 1205.767409][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1205.796229][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.811655][ T9] usb 3-1: config 0 descriptor?? [ 1205.860295][ T5242] usbhid 2-1:0.0: can't add hid device: -71 [ 1205.861760][T25297] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1205.873286][ T5242] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1205.918710][ T5242] usb 2-1: USB disconnect, device number 17 [ 1206.093180][T25297] usb 5-1: Using ep0 maxpacket: 8 [ 1206.105163][T25297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.132575][T25297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.142911][T25297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1206.172537][T25297] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1206.182064][T32344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11450'. [ 1206.191464][T32344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11450'. [ 1206.204033][T25297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.221051][T25297] usb 5-1: config 0 descriptor?? [ 1206.299433][ T9] hid_mf 0003:0079:1801.008F: unknown main item tag 0x0 [ 1206.329414][ T9] hid_mf 0003:0079:1801.008F: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.2-1/input0 [ 1206.353989][ T9] hid_mf 0003:0079:1801.008F: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1206.490131][ T5431] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1206.588234][ T9] usb 3-1: USB disconnect, device number 20 [ 1206.723459][ T5431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.738534][T25297] sunplus 0003:04FC:05D8.0090: item fetching failed at offset 5/7 [ 1206.753190][ T5431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.754776][ T5242] tipc: Node number set to 1 [ 1206.772940][T25297] sunplus 0003:04FC:05D8.0090: probe with driver sunplus failed with error -22 [ 1206.792974][ T5431] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1206.804293][ T5431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.814150][T32354] vivid-007: ================= START STATUS ================= [ 1206.832923][T32354] vivid-007: Enable Output Cropping: true [ 1206.842693][ T5431] usb 4-1: config 0 descriptor?? [ 1206.846531][T32354] vivid-007: Enable Output Composing: true [ 1206.853540][T32354] vivid-007: Enable Output Scaler: true [ 1206.881985][T32354] vivid-007: Tx RGB Quantization Range: Automatic [ 1206.903913][T32354] vivid-007: Transmit Mode: HDMI [ 1206.914888][T32354] vivid-007: Hotplug Present: 0x00000000 [ 1206.933629][T32354] vivid-007: RxSense Present: 0x00000000 [ 1206.939741][T32354] vivid-007: EDID Present: 0x00000000 [ 1206.950748][T32354] vivid-007: ================== END STATUS ================== [ 1206.978697][ T9] usb 5-1: USB disconnect, device number 118 [ 1207.161593][T32360] loop1: detected capacity change from 0 to 2048 [ 1207.204466][T32360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1207.355882][T32365] loop2: detected capacity change from 0 to 2048 [ 1207.357899][ T5431] hid-multitouch 0003:0EEF:72D0.0091: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 1207.406993][T32365] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1207.497461][T32367] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.548893][ T5340] usb 4-1: USB disconnect, device number 4 [ 1208.183133][T32383] loop2: detected capacity change from 0 to 4096 [ 1208.234533][T32383] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1208.269014][T32383] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1208.279473][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1208.325354][T32389] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1208.493136][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.526384][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.559668][ T9] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1208.587925][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.609782][ T9] usb 6-1: config 0 descriptor?? [ 1208.678759][T25297] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1208.895310][T25297] usb 2-1: Using ep0 maxpacket: 8 [ 1208.911948][T25297] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1208.931592][T25297] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1208.944535][T32407] netlink: 'syz.4.11478': attribute type 3 has an invalid length. [ 1208.954713][T25297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1208.983784][T25297] usb 2-1: SerialNumber: syz [ 1208.997192][T25297] usb 2-1: config 0 descriptor?? [ 1209.083507][ T9] hid (null): report_id 1230628742 is invalid [ 1209.113137][ T5340] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1209.116159][ T9] itetech 0003:258A:6A88.0092: report_id 1230628742 is invalid [ 1209.161335][ T9] itetech 0003:258A:6A88.0092: item 0 4 1 8 parsing failed [ 1209.173457][ T9] itetech 0003:258A:6A88.0092: probe with driver itetech failed with error -22 [ 1209.231116][T25297] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1209.243475][T25297] usb 2-1: No valid video chain found. [ 1209.253832][T25297] usb 2-1: USB disconnect, device number 18 [ 1209.350135][ T5340] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1209.367236][ T5340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.375994][ T9] usb 6-1: USB disconnect, device number 5 [ 1209.394209][ T5340] usb 3-1: Product: syz [ 1209.398427][ T5340] usb 3-1: Manufacturer: syz [ 1209.424363][ T5340] usb 3-1: SerialNumber: syz [ 1209.443803][ T5340] usb 3-1: config 0 descriptor?? [ 1209.611388][T32418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11486'. [ 1209.662353][T32400] loop0: detected capacity change from 0 to 32768 [ 1209.708172][T32400] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1209.783502][T32429] loop3: detected capacity change from 0 to 64 [ 1209.826608][T32400] XFS (loop0): Ending clean mount [ 1210.001748][T29412] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1210.131621][ T5340] usb 3-1: Firmware version (0.0) predates our first public release. [ 1210.159863][ T5340] usb 3-1: Please update to version 0.2 or newer [ 1210.350924][ T5340] usb 3-1: USB disconnect, device number 21 [ 1211.033711][T32452] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1211.382003][T32440] loop5: detected capacity change from 0 to 32768 [ 1211.884701][T32472] loop0: detected capacity change from 0 to 2048 [ 1211.955429][T32472] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1211.999302][T32472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1212.093558][T32482] loop3: detected capacity change from 0 to 512 [ 1212.122706][T32482] EXT4-fs: Ignoring removed i_version option [ 1212.145672][T32482] EXT4-fs: Ignoring removed nobh option [ 1212.167389][T32482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1212.232029][T32482] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.11512: corrupted in-inode xattr: bad e_name length [ 1212.270448][T32490] loop2: detected capacity change from 0 to 64 [ 1212.308635][T32482] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.11512: couldn't read orphan inode 15 (err -117) [ 1212.386834][T32482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.515406][T32482] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11512: bg 0: block 449: padding at end of block bitmap is not set [ 1212.590044][T32482] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1212.638435][T32502] loop1: detected capacity change from 0 to 1024 [ 1212.715671][T32502] hfsplus: bad catalog entry type [ 1212.745362][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.877708][ T9937] hfsplus: b-tree write err: -5, ino 4 [ 1212.933570][T32511] loop0: detected capacity change from 0 to 2048 [ 1213.023307][ T5384] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1213.030962][T32519] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1213.101317][T15013] Bluetooth: hci3: unexpected event for opcode 0x204e [ 1213.219316][T32525] netlink: 'syz.4.11529': attribute type 2 has an invalid length. [ 1213.255025][T32525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11529'. [ 1213.294177][ T5384] usb 6-1: Using ep0 maxpacket: 8 [ 1213.326316][ T5384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.356917][ T5384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.388881][ T5384] usb 6-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 1213.410756][ T5384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.445140][ T5384] usb 6-1: config 0 descriptor?? [ 1213.504052][T32529] loop3: detected capacity change from 0 to 4096 [ 1213.538439][T32529] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1213.597713][T32529] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1213.706593][ T29] audit: type=1800 audit(1724967461.319:158): pid=32529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11533" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 1213.784768][T32537] loop1: detected capacity change from 0 to 128 [ 1213.825152][T32537] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1213.912915][T32537] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1213.928110][ T5384] wacom 0003:056A:4135.0093: unknown main item tag 0x0 [ 1213.958901][ T5384] wacom 0003:056A:4135.0093: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 1214.108518][T32539] loop3: detected capacity change from 0 to 2048 [ 1214.135135][ T5384] usb 6-1: USB disconnect, device number 6 [ 1214.167558][T32539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1214.541308][T32531] loop0: detected capacity change from 0 to 32768 [ 1214.548665][T32531] XFS: ikeep mount option is deprecated. [ 1214.572417][T32531] XFS: noikeep mount option is deprecated. [ 1214.643118][T32523] loop2: detected capacity change from 0 to 40427 [ 1214.671865][T32531] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1214.714802][T32523] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1214.722602][T32523] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1214.848638][T32531] XFS (loop0): Ending clean mount [ 1214.857192][T32531] XFS (loop0): Quotacheck needed: Please wait. [ 1214.922675][T32523] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1214.958956][T32531] XFS (loop0): Quotacheck: Done. [ 1215.181171][T32523] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1215.204568][T29412] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1215.213119][T32523] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1215.434545][T32581] loop5: detected capacity change from 0 to 1024 [ 1215.493464][T32581] EXT4-fs: Ignoring removed oldalloc option [ 1215.566117][T32581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.745274][ T8] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1215.854439][ T5274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.961936][T32594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1216.029431][ T29] audit: type=1326 audit(1724967463.470:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.035030][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1216.133185][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.154459][ T29] audit: type=1326 audit(1724967463.470:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.202231][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.241016][ T8] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1216.253478][T32600] loop2: detected capacity change from 0 to 16 [ 1216.261962][ T29] audit: type=1326 audit(1724967463.498:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.294033][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.298647][T32600] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1216.325270][ T8] usb 5-1: config 0 descriptor?? [ 1216.354000][ T29] audit: type=1326 audit(1724967463.498:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.462215][ T29] audit: type=1326 audit(1724967463.507:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.548520][ T29] audit: type=1326 audit(1724967463.525:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.669133][ T29] audit: type=1326 audit(1724967463.525:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32595 comm="syz.5.11558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1216.773371][T32577] loop3: detected capacity change from 0 to 32768 [ 1216.885522][ T8] hid_mf 0003:0079:1801.0094: item fetching failed at offset 0/2 [ 1216.917431][ T8] hid_mf 0003:0079:1801.0094: HID parse failed. [ 1216.948119][ T8] hid_mf 0003:0079:1801.0094: probe with driver hid_mf failed with error -22 [ 1217.289684][ T5242] usb 5-1: USB disconnect, device number 119 [ 1217.324828][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 1217.407200][T32631] usb usb1: usbfs: process 32631 (syz.1.11574) did not claim interface 0 before use [ 1217.606840][T32637] netlink: 'syz.5.11575': attribute type 29 has an invalid length. [ 1217.648987][T32639] netlink: 'syz.1.11577': attribute type 10 has an invalid length. [ 1217.664631][T32637] netlink: 'syz.5.11575': attribute type 29 has an invalid length. [ 1218.180252][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1218.193306][T32659] tipc: Enabling of bearer rejected, failed to enable media [ 1218.337373][T32663] tipc: Started in network mode [ 1218.364737][T32663] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1218.385046][T32663] tipc: Enabling of bearer rejected, failed to enable media [ 1218.401015][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.430136][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.458438][ T8] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1218.467983][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.496736][ T8] usb 6-1: config 0 descriptor?? [ 1218.999416][ T8] elecom 0003:056E:00FB.0095: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.5-1/input0 [ 1219.005329][T32658] loop2: detected capacity change from 0 to 32768 [ 1219.058162][T32658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11587 (32658) [ 1219.117640][T32658] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1219.145557][T32658] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1219.165302][T32658] BTRFS info (device loop2): using free-space-tree [ 1219.198331][ T8] usb 6-1: USB disconnect, device number 7 [ 1219.469068][T10899] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1219.675851][ T5242] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1219.713637][T32673] loop3: detected capacity change from 0 to 40427 [ 1219.790793][T32673] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1219.913733][ T5242] usb 2-1: Using ep0 maxpacket: 16 [ 1219.957045][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.978756][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.010525][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1220.072343][ T5242] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 1220.083592][T32673] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1220.098056][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.168858][ T5242] usb 2-1: config 0 descriptor?? [ 1220.340775][T23927] syz-executor: attempt to access beyond end of device [ 1220.340775][T23927] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1220.358013][T23927] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1220.596441][T32715] program syz.2.11606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.678244][ T5242] asus 0003:0B05:1866.0096: unknown main item tag 0x0 [ 1220.715956][ T5242] asus 0003:0B05:1866.0096: hidraw0: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.1-1/input0 [ 1220.737307][ T5242] asus 0003:0B05:1866.0096: Asus input not registered [ 1220.782099][ T5242] asus 0003:0B05:1866.0096: probe with driver asus failed with error -12 [ 1220.829438][T32717] loop2: detected capacity change from 0 to 1024 [ 1220.897460][ T9] usb 2-1: USB disconnect, device number 19 [ 1221.214379][T10899] bond0: (slave syz_tun): Releasing backup interface [ 1221.544065][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.786987][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.058460][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.389654][T32721] loop3: detected capacity change from 0 to 32768 [ 1222.424043][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.595923][T32740] loop1: detected capacity change from 0 to 512 [ 1222.621751][T32740] EXT4-fs: Ignoring removed orlov option [ 1222.638919][T32740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1222.698212][T32740] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.11620: corrupted in-inode xattr: overlapping e_value [ 1222.776104][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1222.787939][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1222.797898][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1222.808101][ T5340] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1222.816367][T32740] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.11620: couldn't read orphan inode 15 (err -117) [ 1222.851143][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1222.864724][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1222.873693][T32740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.894404][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.980723][ T64] bridge_slave_1: left allmulticast mode [ 1222.986422][ T64] bridge_slave_1: left promiscuous mode [ 1223.023421][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.065541][ T64] bridge_slave_0: left promiscuous mode [ 1223.088899][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.090959][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.096702][ T5340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.127207][ T5340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.153613][ T5340] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1223.176829][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.223994][ T5340] usb 6-1: config 0 descriptor?? [ 1223.335344][ T29] audit: type=1800 audit(1724967470.208:166): pid=32756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11624" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1223.644035][T32766] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1223.665958][ T5384] IPVS: starting estimator thread 0... [ 1223.730135][ T5340] prodikeys 0003:041E:2801.0097: unknown main item tag 0x0 [ 1223.791601][ T301] loop1: detected capacity change from 0 to 164 [ 1223.797878][ T5340] prodikeys 0003:041E:2801.0097: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 1223.810169][T32767] IPVS: using max 18 ests per chain, 43200 per kthread [ 1223.937289][ T305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11635'. [ 1224.015834][ T937] usb 6-1: USB disconnect, device number 8 [ 1225.127238][T15013] Bluetooth: hci2: command tx timeout [ 1225.156015][ T318] loop1: detected capacity change from 0 to 32768 [ 1225.239675][ T332] netlink: 184 bytes leftover after parsing attributes in process `syz.5.11647'. [ 1225.271343][ T332] netlink: 'syz.5.11647': attribute type 1 has an invalid length. [ 1225.315288][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.350871][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.383574][ T64] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1225.426414][ T64] bond0 (unregistering): Released all slaves [ 1225.471406][ T64] bond1 (unregistering): Released all slaves [ 1225.523467][ T64] bond2 (unregistering): Released all slaves [ 1225.681755][ T64] ΙΆΖ£0GC¦!: left promiscuous mode [ 1225.812510][ T338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11650'. [ 1225.951735][ T347] netlink: 'syz.3.11654': attribute type 29 has an invalid length. [ 1225.991803][ T347] netlink: 'syz.3.11654': attribute type 29 has an invalid length. [ 1225.999949][ T64] tipc: Disabling bearer [ 1226.053893][ T64] tipc: Left network mode [ 1226.248715][ T64] IPVS: stopping backup sync thread 31686 ... [ 1226.737575][ T372] loop5: detected capacity change from 0 to 1024 [ 1226.796497][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1227.144703][ T383] netlink: 'syz.0.11671': attribute type 2 has an invalid length. [ 1227.152763][ T383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11671'. [ 1227.245232][ T9] usb 5-1: New USB device found, idVendor=1039, idProduct=2121, bcdDevice=9e.ff [ 1227.270207][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.299860][ T9] usb 5-1: Product: syz [ 1227.332357][ T9] usb 5-1: Manufacturer: syz [ 1227.354154][ T9] usb 5-1: SerialNumber: syz [ 1227.379284][T15013] Bluetooth: hci2: command tx timeout [ 1227.397188][ T9] usb 5-1: config 0 descriptor?? [ 1227.470196][ T9] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2121) Rev (0X9EFF): Eagle II [ 1227.624515][ T400] loop1: detected capacity change from 0 to 1024 [ 1227.676516][ T400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.681911][ T9] usb 5-1: reset high-speed USB device number 120 using dummy_hcd [ 1227.865331][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.870763][T32743] chnl_net:caif_netlink_parms(): no params data found [ 1228.315218][ T408] loop3: detected capacity change from 0 to 64 [ 1228.404124][ T408] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1228.472969][ T64] hsr_slave_0: left promiscuous mode [ 1228.484478][ T9] usb 5-1: device descriptor read/64, error -71 [ 1228.548710][ T64] hsr_slave_1: left promiscuous mode [ 1228.568073][ T396] loop0: detected capacity change from 0 to 32768 [ 1228.585888][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.602269][ T396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11678 (396) [ 1228.625421][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.682261][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.682488][ T396] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1228.700280][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.735047][ T396] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1228.751550][ T396] BTRFS info (device loop0): using free-space-tree [ 1228.794108][ T64] veth1_macvtap: left promiscuous mode [ 1228.821459][ T64] veth0_macvtap: left promiscuous mode [ 1228.831136][ T9] usb 5-1: reset high-speed USB device number 120 using dummy_hcd [ 1228.850630][ T64] veth1_vlan: left promiscuous mode [ 1228.883636][ T64] veth0_vlan: left promiscuous mode [ 1229.083564][ T9] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1229.101516][ T9] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1229.110621][ T8] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1229.130062][ T8] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1229.459653][T29412] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1229.531404][ T5242] usb 5-1: USB disconnect, device number 120 [ 1229.597007][ T64] pim6reg (unregistering): left allmulticast mode [ 1229.632809][T15013] Bluetooth: hci2: command tx timeout [ 1229.694631][ T64] pimreg (unregistering): left allmulticast mode [ 1230.882567][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1231.885572][T15013] Bluetooth: hci2: command tx timeout [ 1232.065231][ T466] loop1: detected capacity change from 0 to 1024 [ 1232.322796][ T2955] hfsplus: b-tree write err: -5, ino 4 [ 1232.359315][ T477] loop5: detected capacity change from 0 to 512 [ 1232.410446][ T477] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1232.490490][ T483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11706'. [ 1232.544602][T32743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.578623][T32743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.609776][T32743] bridge_slave_0: entered allmulticast mode [ 1232.656344][T32743] bridge_slave_0: entered promiscuous mode [ 1232.667647][T32743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.674874][T32743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.697215][ T484] loop3: detected capacity change from 0 to 4096 [ 1232.724683][T32743] bridge_slave_1: entered allmulticast mode [ 1232.740811][T32743] bridge_slave_1: entered promiscuous mode [ 1232.761153][ T489] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11712'. [ 1232.794172][ T489] netlink: 'syz.0.11712': attribute type 6 has an invalid length. [ 1232.931416][ T484] ntfs3: loop3: failed to convert "0080" to cp1255 [ 1232.941435][ T484] ntfs3: loop3: failed to convert name for inode 1e. [ 1233.013488][T32743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.062347][T32743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.426215][T32743] team0: Port device team_slave_0 added [ 1233.451099][T32743] team0: Port device team_slave_1 added [ 1233.622872][T32743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.645113][T32743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.694423][T32743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.748342][T32743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.777891][T32743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.846846][T32743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.883860][ T517] loop3: detected capacity change from 0 to 1024 [ 1234.033527][ T517] hfsplus: xattr searching failed [ 1234.052681][ T520] netlink: 'syz.1.11725': attribute type 29 has an invalid length. [ 1234.107644][ T521] netlink: 'syz.1.11725': attribute type 29 has an invalid length. [ 1234.169763][ T497] loop0: detected capacity change from 0 to 32768 [ 1234.180484][T32743] hsr_slave_0: entered promiscuous mode [ 1234.217250][T32743] hsr_slave_1: entered promiscuous mode [ 1234.274805][T32743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1234.295308][T32743] Cannot create hsr debugfs directory [ 1234.359975][ T527] loop3: detected capacity change from 0 to 256 [ 1234.423211][ T527] FAT-fs (loop3): Directory bread(block 64) failed [ 1234.464480][ T527] FAT-fs (loop3): Directory bread(block 65) failed [ 1234.481526][ T527] FAT-fs (loop3): Directory bread(block 66) failed [ 1234.539273][ T527] FAT-fs (loop3): Directory bread(block 67) failed [ 1234.546144][ T527] FAT-fs (loop3): Directory bread(block 68) failed [ 1234.557012][ T527] FAT-fs (loop3): Directory bread(block 69) failed [ 1234.575430][ T527] FAT-fs (loop3): Directory bread(block 70) failed [ 1234.602800][ T527] FAT-fs (loop3): Directory bread(block 71) failed [ 1234.621938][ T527] FAT-fs (loop3): Directory bread(block 72) failed [ 1234.637505][ T527] FAT-fs (loop3): Directory bread(block 73) failed [ 1235.116788][ T541] loop1: detected capacity change from 0 to 8192 [ 1235.359234][ T556] loop3: detected capacity change from 0 to 128 [ 1235.417453][ T556] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1235.537134][ T560] usb usb8: usbfs: process 560 (syz.1.11742) did not claim interface 0 before use [ 1235.759406][ T568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11748'. [ 1235.977483][T32743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1236.056259][T32743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1236.133658][T32743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1236.153789][ T574] loop5: detected capacity change from 0 to 4096 [ 1236.180791][T32743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1236.197705][ T574] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1236.512739][ T588] loop1: detected capacity change from 0 to 1024 [ 1236.644025][ T588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.687446][T32743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.792153][T32743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.825359][ T594] loop5: detected capacity change from 0 to 64 [ 1236.853371][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.860613][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.912388][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.919632][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.457640][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11764'. [ 1237.494936][ T605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11764'. [ 1237.529678][ T582] loop3: detected capacity change from 0 to 32768 [ 1237.563459][ T582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11755 (582) [ 1237.630130][ T582] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1237.677315][ T582] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1237.717542][ T582] BTRFS info (device loop3): using free-space-tree [ 1237.831029][T32743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.861395][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.031198][T32743] veth0_vlan: entered promiscuous mode [ 1238.058817][T23927] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1238.083004][ T5242] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1238.092545][T32743] veth1_vlan: entered promiscuous mode [ 1238.221244][T32743] veth0_macvtap: entered promiscuous mode [ 1238.300293][ T5242] usb 6-1: Using ep0 maxpacket: 16 [ 1238.304297][T32743] veth1_macvtap: entered promiscuous mode [ 1238.312128][ T5242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.347542][ T5242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.384029][ T5242] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1238.444727][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.466351][ T5242] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1238.484934][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.501716][ T5242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.529930][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.534626][ T5242] usb 6-1: config 0 descriptor?? [ 1238.570344][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.622980][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.656613][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.689273][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.699857][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.765200][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.775669][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.817651][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.841205][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.851056][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.883466][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.904535][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.915676][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.967592][T32743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.986840][ T651] loop3: detected capacity change from 0 to 1024 [ 1238.992229][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.021928][ T5242] nti 0003:0757:0A00.0098: item fetching failed at offset 2/5 [ 1239.034154][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.044321][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.044382][ T5242] nti 0003:0757:0A00.0098: probe with driver nti failed with error -22 [ 1239.082590][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.115240][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.148925][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.190228][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.214738][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.224800][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.242977][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.264262][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.287915][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.304559][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.317312][ T5242] usb 6-1: USB disconnect, device number 9 [ 1239.325874][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.362364][T32743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.382640][T32743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.430592][T32743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.462165][T32743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.472736][T32743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.493220][T32743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.512966][T32743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.615905][ T660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11781'. [ 1239.942907][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.957507][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.002587][ T9937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.012591][ T9937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.460391][ T681] loop5: detected capacity change from 0 to 2048 [ 1240.493990][ T681] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1240.504372][ T681] NILFS (loop5): trying rollback from an earlier position [ 1240.546884][ T681] NILFS (loop5): recovery complete [ 1240.581397][ T687] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1240.738025][ T1164] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1240.956211][ T1164] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1240.979952][ T1164] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1241.001178][ T1164] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1241.032509][ T1164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.051312][ T5242] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1241.068903][ T1164] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1241.176643][ T700] loop3: detected capacity change from 0 to 4096 [ 1241.272239][ T703] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1241.284205][ T5242] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.297012][ T1164] gspca_sn9c2028: read1 error -32 [ 1241.306221][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1241.339692][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1241.374484][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1241.386572][ T705] loop5: detected capacity change from 0 to 1024 [ 1241.408032][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1241.444258][ T5242] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1241.464152][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1241.474220][ T5242] usb 2-1: Product: syz [ 1241.478406][ T5242] usb 2-1: Manufacturer: syz [ 1241.483032][ T5242] usb 2-1: SerialNumber: syz [ 1241.486784][ T705] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 1241.502761][ T5242] usb 2-1: config 0 descriptor?? [ 1241.517424][ T705] System zones: 0-1, 3-12 [ 1241.531502][ T705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.541706][ T1164] gspca_sn9c2028: read1 error -71 [ 1241.548999][ T1164] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1241.560087][ T1164] usb 3-1: USB disconnect, device number 22 [ 1241.615427][ T712] loop3: detected capacity change from 0 to 64 [ 1241.678315][ T29] audit: type=1800 audit(1724967487.136:167): pid=712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11805" name="file0" dev="loop3" ino=21 res=0 errno=0 [ 1241.736023][ T5274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.777855][ T5242] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1241.784750][ T5242] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1242.017093][ T5242] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1242.040560][ T5242] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1242.063897][ T5242] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1242.244233][ T5242] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1242.252667][ T5242] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1242.272943][ T727] nbd: socks must be embedded in a SOCK_ITEM attr [ 1242.297223][ T5242] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1242.316931][ T5242] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1242.341321][ T9] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1242.344407][ T5242] usb 2-1: USB disconnect, device number 20 [ 1242.470727][ T5384] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1242.520462][ T731] bridge1: entered promiscuous mode [ 1242.539365][ T731] bridge1: entered allmulticast mode [ 1242.555608][ T732] loop2: detected capacity change from 0 to 2048 [ 1242.562108][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1242.587739][ T731] team0: Port device bridge1 added [ 1242.601237][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.622439][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.643193][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 1242.654619][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.672605][ T732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.699982][ T9] usb 5-1: config 0 descriptor?? [ 1242.714328][ T5384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.750843][ T5384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.783606][ T5384] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1242.834722][ T5384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.886687][ T5384] usb 6-1: config 0 descriptor?? [ 1242.938685][T32743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.187072][ T743] netlink: 'syz.0.11818': attribute type 3 has an invalid length. [ 1243.291082][ T9] wacom 0003:056A:00DE.0099: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 1243.359392][ T9] wacom 0003:056A:00DE.0099: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.4-1/input0 [ 1243.363628][ T751] loop1: detected capacity change from 0 to 2048 [ 1243.395359][ T5384] holtek 0003:1241:5015.009A: unknown main item tag 0x0 [ 1243.414284][ T5384] holtek 0003:1241:5015.009A: unknown main item tag 0x0 [ 1243.419839][ T9] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DE.0099/input/input110 [ 1243.421231][ T5384] holtek 0003:1241:5015.009A: unknown main item tag 0x0 [ 1243.421260][ T5384] holtek 0003:1241:5015.009A: unknown main item tag 0x0 [ 1243.421286][ T5384] holtek 0003:1241:5015.009A: unknown main item tag 0x0 [ 1243.504427][ T5384] holtek 0003:1241:5015.009A: hidraw1: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 1243.519759][ T757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1243.563341][ T5384] holtek 0003:1241:5015.009A: no inputs found [ 1243.593869][ T9] usb 5-1: USB disconnect, device number 121 [ 1243.670495][ T759] loop2: detected capacity change from 0 to 512 [ 1243.730159][ T5242] usb 6-1: USB disconnect, device number 10 [ 1243.752311][ T759] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 1244.791942][ T796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11843'. [ 1244.861880][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11844'. [ 1244.982713][ T802] loop3: detected capacity change from 0 to 1024 [ 1244.990782][ T802] EXT4-fs: Ignoring removed oldalloc option [ 1245.043162][ T802] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1245.056049][ T806] loop2: detected capacity change from 0 to 256 [ 1245.091086][ T811] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11846'. [ 1245.102190][ T802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.112413][ T806] exfat: Deprecated parameter 'utf8' [ 1245.114377][ T811] netlink: 'syz.4.11846': attribute type 1 has an invalid length. [ 1245.125663][ T806] exfat: Deprecated parameter 'namecase' [ 1245.196632][ T806] exfat: Deprecated parameter 'namecase' [ 1245.212926][ T806] exfat: Deprecated parameter 'utf8' [ 1245.273670][ T806] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1245.328859][ T818] sp0: Synchronizing with TNC [ 1245.384541][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.579226][ T822] loop1: detected capacity change from 0 to 1024 [ 1245.643602][ T822] EXT4-fs: Ignoring removed oldalloc option [ 1245.649863][ T828] loop0: detected capacity change from 0 to 256 [ 1245.662559][ T824] loop3: detected capacity change from 0 to 2048 [ 1245.676462][ T822] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1245.700846][ T828] exfat: Deprecated parameter 'namecase' [ 1245.730032][ T828] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1245.756721][ T822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.800957][ T834] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1245.849474][ T837] loop2: detected capacity change from 0 to 256 [ 1245.856664][ T837] exfat: Deprecated parameter 'namecase' [ 1245.869046][ T837] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x973db221, utbl_chksum : 0xe619d30d) [ 1245.904434][ T835] vivid-004: disconnect [ 1245.962259][ T833] vivid-004: reconnect [ 1246.091530][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.476821][ T855] loop0: detected capacity change from 0 to 4096 [ 1246.524736][ T853] loop1: detected capacity change from 0 to 4096 [ 1246.562182][ T853] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1246.598944][ T853] NILFS (loop1): trying rollback from an earlier position [ 1246.622511][ T864] loop3: detected capacity change from 0 to 512 [ 1246.637081][ T853] NILFS (loop1): recovery complete [ 1246.652071][ T864] EXT4-fs: Ignoring removed mblk_io_submit option [ 1246.654086][ T868] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1246.686521][ T864] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1246.711285][ T864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 1246.752265][ T864] System zones: 1-12 [ 1246.774316][ T864] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.11871: corrupted in-inode xattr: e_value size too large [ 1246.818387][ T855] ntfs3: loop0: failed to convert "0080" to cp860 [ 1246.863862][ T855] ntfs3: loop0: failed to convert name for inode 1e. [ 1246.892590][ T864] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.11871: couldn't read orphan inode 15 (err -117) [ 1246.950230][ T864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.241222][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.454500][ T908] tipc: Started in network mode [ 1247.498628][ T908] tipc: Node identity , cluster identity 4711 [ 1247.527933][ T908] tipc: Failed to set node id, please configure manually [ 1247.552128][ T908] tipc: Enabling of bearer rejected, failed to enable media [ 1247.573714][ T913] loop5: detected capacity change from 0 to 256 [ 1247.609426][ T913] exfat: Deprecated parameter 'utf8' [ 1247.614815][ T913] exfat: Deprecated parameter 'namecase' [ 1247.657390][ T913] exfat: Deprecated parameter 'utf8' [ 1247.708762][ T913] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 1247.823502][ T923] netlink: 'syz.2.11891': attribute type 1 has an invalid length. [ 1247.831376][ T923] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.11891'. [ 1247.859577][ T923] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11891'. [ 1247.916569][ T923] netlink: zone id is out of range [ 1247.934472][ T923] netlink: set zone limit has 8 unknown bytes [ 1247.955781][ T927] mkiss: ax0: crc mode is auto. [ 1248.363993][ T945] loop2: detected capacity change from 0 to 1024 [ 1248.420926][ T945] hfsplus: invalid extent btree flag [ 1248.426572][ T945] hfsplus: failed to load extents file [ 1248.501831][ T945] RDS: rds_bind could not find a transport for b43:5899:af77:7060:ba8b:29fe:de55:21b8, load rds_tcp or rds_rdma? [ 1248.650328][ T959] netlink: 'syz.5.11909': attribute type 29 has an invalid length. [ 1248.697349][ T959] netlink: 'syz.5.11909': attribute type 29 has an invalid length. [ 1248.888482][ T968] netlink: 'syz.1.11912': attribute type 4 has an invalid length. [ 1248.929749][ T968] netlink: 'syz.1.11912': attribute type 2 has an invalid length. [ 1249.322852][ T991] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 1249.340203][ T987] IPVS: stopping master sync thread 991 ... [ 1249.935433][T25297] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1250.086254][ T1021] loop3: detected capacity change from 0 to 1024 [ 1250.175022][T25297] usb 2-1: Using ep0 maxpacket: 16 [ 1250.190037][ T988] loop5: detected capacity change from 0 to 32768 [ 1250.208097][T25297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.220685][T25297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.239291][T25297] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1250.248350][T25297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.280721][T25297] usb 2-1: config 0 descriptor?? [ 1250.304398][ T64] hfsplus: b-tree write err: -5, ino 4 [ 1250.772077][T25297] megaworld 0003:07B5:0312.009B: item fetching failed at offset 2/5 [ 1250.781501][T25297] megaworld 0003:07B5:0312.009B: parse failed [ 1250.787780][T25297] megaworld 0003:07B5:0312.009B: probe with driver megaworld failed with error -22 [ 1250.815824][ T1035] loop3: detected capacity change from 0 to 4096 [ 1250.842577][ T1035] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1251.018636][ T1035] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1251.039202][T25297] usb 2-1: USB disconnect, device number 21 [ 1251.184915][ T29] audit: type=1800 audit(1724967495.923:168): pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11939" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 1251.491465][ T1067] netlink: 'syz.0.11952': attribute type 4 has an invalid length. [ 1251.662408][ T1073] loop3: detected capacity change from 0 to 128 [ 1251.730559][T25297] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 1251.776828][T25297] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1252.091769][ T5242] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1252.204397][ T1095] loop1: detected capacity change from 0 to 512 [ 1252.232769][ T1095] EXT4-fs: Ignoring removed nobh option [ 1252.272486][ T1095] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 1252.322142][ T5242] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1252.333184][ T5242] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1252.344920][ T5242] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1252.344957][ T5242] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1252.345012][ T5242] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1252.345042][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.367110][ T1095] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 1252.506584][ T1095] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.11966: casefold flag without casefold feature [ 1252.507135][ T1095] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.11966: couldn't read orphan inode 13 (err -117) [ 1252.509055][ T1095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.599526][ T1110] loop2: detected capacity change from 0 to 128 [ 1252.620509][ T5242] ath6kl: Failed to submit usb control message: -71 [ 1252.620619][ T5242] ath6kl: unable to send the bmi data to the device: -71 [ 1252.620643][ T5242] ath6kl: Unable to send get target info: -71 [ 1252.622064][ T5242] ath6kl: Failed to init ath6kl core: -71 [ 1252.623641][ T5242] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1252.640225][ T5242] usb 4-1: USB disconnect, device number 5 [ 1252.765827][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.454822][ T1131] loop1: detected capacity change from 0 to 4096 [ 1253.489345][ T1131] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1253.644144][ T1131] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1253.727967][T25297] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1253.915885][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.955171][T25297] usb 4-1: Using ep0 maxpacket: 16 [ 1253.973546][T25297] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1253.992747][T25297] usb 4-1: config 0 has no interface number 0 [ 1254.025624][T25297] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.059245][T25297] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.091916][T25297] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.137982][T25297] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1254.177067][T25297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.210829][T25297] usb 4-1: config 0 descriptor?? [ 1254.583719][ T1132] loop2: detected capacity change from 0 to 40427 [ 1254.619321][ T1132] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1254.639049][ T1132] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1254.684507][T25297] holtek_mouse 0003:04D9:A072.009D: unknown main item tag 0x0 [ 1254.707405][ T1132] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1254.760788][T25297] holtek_mouse 0003:04D9:A072.009D: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input1 [ 1254.904043][ T5242] usb 4-1: USB disconnect, device number 6 [ 1254.917005][ T1132] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1254.926454][ T1132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1254.972051][ T1174] loop0: detected capacity change from 0 to 256 [ 1255.026168][ T1174] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1255.062344][ T1176] overlayfs: workdir and upperdir must be separate subtrees [ 1255.323558][ T1185] netlink: 'syz.5.12006': attribute type 6 has an invalid length. [ 1255.973737][ T1206] loop0: detected capacity change from 0 to 512 [ 1256.013473][ T1206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1256.070546][ T1206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1256.080627][ T1206] System zones: 1-12 [ 1256.095790][ T1206] EXT4-fs (loop0): 1 truncate cleaned up [ 1256.108508][ T1206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.161424][ T29] audit: type=1800 audit(1724967500.510:169): pid=1206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12015" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1256.449440][ T1218] loop1: detected capacity change from 0 to 1024 [ 1256.456956][ T1218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1256.512838][T29412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.742794][ T1229] loop0: detected capacity change from 0 to 512 [ 1256.817657][ T1229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.900302][ T1229] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1256.925349][ T1239] vhci_hcd: vhci_device speed not set [ 1257.009501][ T1240] loop5: detected capacity change from 0 to 1024 [ 1257.065785][ T1240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1257.151292][ T1240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.224959][T29412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.279041][ T1255] loop1: detected capacity change from 0 to 64 [ 1257.453722][ T5274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.594507][ T1264] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1257.654434][ T1264] overlayfs: missing 'lowerdir' [ 1258.008911][ T1284] loop1: detected capacity change from 0 to 64 [ 1258.088176][ T29] audit: type=1800 audit(1724967502.291:170): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12045" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1258.336580][ T1292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1258.380709][ T1292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1258.630923][ T1303] loop1: detected capacity change from 0 to 256 [ 1258.647148][ T1305] loop0: detected capacity change from 0 to 64 [ 1258.670034][ T1305] hfs: unable to locate alternate MDB [ 1258.675544][ T1305] hfs: continuing without an alternate MDB [ 1258.822380][ T29] audit: type=1800 audit(1724967502.965:171): pid=1305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12054" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1258.989030][ T1276] loop2: detected capacity change from 0 to 32768 [ 1259.092813][ T1276] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1259.381470][ T1276] XFS (loop2): Ending clean mount [ 1259.478834][ T1276] XFS (loop2): Quotacheck needed: Please wait. [ 1259.508544][ T1347] loop1: detected capacity change from 0 to 2048 [ 1259.606745][ T1347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1259.626788][ T1276] XFS (loop2): Quotacheck: Done. [ 1259.786364][T32743] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1259.973352][ T1356] loop3: detected capacity change from 0 to 1024 [ 1260.106820][ T29] audit: type=1326 audit(1724967504.156:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1358 comm="syz.4.12078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d10d79ef9 code=0x0 [ 1260.788555][ T1384] loop5: detected capacity change from 0 to 64 [ 1261.042885][ T1389] loop2: detected capacity change from 0 to 4096 [ 1261.283137][ T1389] ntfs3: loop2: ino=3, ntfs_iget5 [ 1261.288287][ T1389] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1261.896351][ T5242] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1261.935418][ T1422] loop2: detected capacity change from 0 to 4096 [ 1261.989800][ T1425] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1262.319080][T25297] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1262.404157][ T1406] loop1: detected capacity change from 0 to 32768 [ 1262.474406][ T1439] Option ' ' to dns_resolver key: bad/missing value [ 1262.504196][ T1406] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1262.557491][T25297] usb 6-1: Using ep0 maxpacket: 32 [ 1262.565398][T25297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.593243][T25297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.644685][T25297] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1262.685499][T25297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.713801][T25297] usb 6-1: config 0 descriptor?? [ 1262.714981][ T1406] XFS (loop1): Ending clean mount [ 1262.755128][ T1406] XFS (loop1): Quotacheck needed: Please wait. [ 1262.869927][ T1406] XFS (loop1): Quotacheck: Done. [ 1263.089325][T16648] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1263.222846][T25297] macally 0003:060B:0001.009E: item fetching failed at offset 2/5 [ 1263.270801][T25297] macally 0003:060B:0001.009E: probe with driver macally failed with error -22 [ 1263.486822][ T5242] usb 6-1: USB disconnect, device number 11 [ 1263.616030][ T1476] loop0: detected capacity change from 0 to 128 [ 1263.656783][ T1476] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1263.734870][ T1476] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.993984][T29412] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1264.055841][ T1486] loop2: detected capacity change from 0 to 4096 [ 1264.156256][ T1496] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1264.509869][ T1507] loop5: detected capacity change from 0 to 1024 [ 1264.688571][ T1517] loop3: detected capacity change from 0 to 47 [ 1264.732243][ T1518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12148'. [ 1264.768480][ T1518] netlink: 272 bytes leftover after parsing attributes in process `syz.1.12148'. [ 1264.789977][ T1518] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12148'. [ 1265.088599][ T1530] netlink: 248 bytes leftover after parsing attributes in process `syz.0.12154'. [ 1265.668642][ T1555] loop1: detected capacity change from 0 to 256 [ 1265.703678][ T1556] loop2: detected capacity change from 0 to 1024 [ 1265.782036][ T1555] FAT-fs (loop1): Directory bread(block 64) failed [ 1265.809955][ T1555] FAT-fs (loop1): Directory bread(block 65) failed [ 1265.816693][ T1555] FAT-fs (loop1): Directory bread(block 66) failed [ 1265.874238][ T1555] FAT-fs (loop1): Directory bread(block 67) failed [ 1265.880900][ T1555] FAT-fs (loop1): Directory bread(block 68) failed [ 1265.939511][ T1555] FAT-fs (loop1): Directory bread(block 69) failed [ 1265.946257][ T1555] FAT-fs (loop1): Directory bread(block 70) failed [ 1265.995395][ T1555] FAT-fs (loop1): Directory bread(block 71) failed [ 1266.035815][ T1555] FAT-fs (loop1): Directory bread(block 72) failed [ 1266.054048][ T1555] FAT-fs (loop1): Directory bread(block 73) failed [ 1266.264815][ T1573] loop0: detected capacity change from 0 to 256 [ 1267.013068][ T29] audit: type=1326 audit(1724967510.791:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1589 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd18179ef9 code=0x7ffc0000 [ 1267.072093][ T29] audit: type=1326 audit(1724967510.791:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1589 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd18179ef9 code=0x7ffc0000 [ 1267.162694][ T29] audit: type=1326 audit(1724967510.791:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1589 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fdd18179ef9 code=0x7ffc0000 [ 1267.233528][ T29] audit: type=1326 audit(1724967510.791:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1589 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd18179ef9 code=0x7ffc0000 [ 1267.720850][ T1608] loop3: detected capacity change from 0 to 2048 [ 1267.817778][ T1580] loop5: detected capacity change from 0 to 32768 [ 1267.823134][ T1608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.826315][ T1580] XFS: ikeep mount option is deprecated. [ 1267.891561][ T1582] loop1: detected capacity change from 0 to 32768 [ 1267.899114][ T1608] ext4 filesystem being mounted at /695/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1267.927083][ T1582] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12178 (1582) [ 1267.941495][ T1580] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1268.040951][ T1582] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1268.067362][ T1580] XFS (loop5): Ending clean mount [ 1268.113990][ T1582] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1268.130577][ T1580] XFS (loop5): Quotacheck needed: Please wait. [ 1268.161995][ T1582] BTRFS info (device loop1): using free-space-tree [ 1268.181283][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.266440][ T1580] XFS (loop5): Quotacheck: Done. [ 1268.477441][ T5274] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1268.547546][ T1582] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1268.823385][T16648] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1269.013500][ T1657] loop3: detected capacity change from 0 to 512 [ 1269.140454][ T1657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.183727][ T1657] ext4 filesystem being mounted at /698/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.347808][ T1657] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.12205: path /698/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 1269.575541][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.172399][T25297] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1270.366542][T25297] usb 4-1: Using ep0 maxpacket: 16 [ 1270.377393][T25297] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.406948][T25297] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.436509][T25297] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1270.455895][ T1663] loop5: detected capacity change from 0 to 32768 [ 1270.478522][T25297] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1270.496625][T25297] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1270.527740][T25297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.580356][T25297] usb 4-1: config 0 descriptor?? [ 1271.016281][T25297] hid-generic 0003:045E:05DA.009F: unknown main item tag 0x0 [ 1271.071788][T25297] hid-generic 0003:045E:05DA.009F: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0 [ 1271.088168][ T1675] loop2: detected capacity change from 0 to 40427 [ 1271.124629][ T1675] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1271.139977][ T1675] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1271.190946][ T1675] F2FS-fs (loop2): invalid crc value [ 1271.260230][T25297] usb 4-1: USB disconnect, device number 7 [ 1271.267224][ T1675] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1271.485665][ T1675] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1271.523668][ T1675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1271.625273][ T1675] syz.2.12211: attempt to access beyond end of device [ 1271.625273][ T1675] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1271.706485][T32743] syz-executor: attempt to access beyond end of device [ 1271.706485][T32743] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1271.768337][T32743] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1271.938903][ T1715] loop3: detected capacity change from 0 to 512 [ 1272.103049][ T1715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.135145][ T1698] loop1: detected capacity change from 0 to 32768 [ 1272.162567][ T1698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12223 (1698) [ 1272.177521][ T1715] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.201300][ T1698] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1272.249397][ T1698] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1272.286331][ T1698] BTRFS info (device loop1): using free-space-tree [ 1272.353854][ T1700] loop0: detected capacity change from 0 to 32768 [ 1272.373410][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.912347][T16648] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1273.761955][ T1767] No control pipe specified [ 1273.922928][ T1770] loop2: detected capacity change from 0 to 2048 [ 1273.988227][ T1770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.034924][ T1770] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.239746][T32743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.703976][ T1760] loop3: detected capacity change from 0 to 32768 [ 1274.728716][ T1760] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.12242 (1760) [ 1274.756571][ T29] audit: type=1326 audit(1724967519.095:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1775 comm="syz.5.12248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7fc00000 [ 1274.795488][ T1760] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1274.828138][ T1760] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1274.855266][ T1760] BTRFS info (device loop3): using free-space-tree [ 1275.173074][ T29] audit: type=1800 audit(1724967519.535:178): pid=1760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12242" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1275.326057][ T1781] loop1: detected capacity change from 0 to 32768 [ 1275.346010][ T1824] loop0: detected capacity change from 0 to 4096 [ 1275.367246][ T1781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12249 (1781) [ 1275.399107][T23927] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1275.405023][ T1824] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1275.441443][ T1824] NILFS (loop0): trying rollback from an earlier position [ 1275.485471][ T1824] NILFS (loop0): recovery complete [ 1275.492364][ T1781] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1275.504254][ T1828] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1275.516953][ T1781] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1275.581428][ T1781] BTRFS info (device loop1): using free-space-tree [ 1275.946516][ T1850] loop3: detected capacity change from 0 to 512 [ 1275.960990][ T1850] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1276.029885][ T1850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.105708][ T1850] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.12264: Directory hole found for htree leaf block 0 [ 1276.146137][ T1850] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1276.201575][T16648] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1276.244664][ T1812] loop5: detected capacity change from 0 to 32768 [ 1276.312291][ T1812] BTRFS: device /dev/loop5 (7:5) using temp-fsid 6d32ffd9-2c05-449e-954d-ee8965daf2d2 [ 1276.333856][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.345780][ T1812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12259 (1812) [ 1276.386427][ T1812] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1276.415959][ T1856] netlink: 'syz.0.12271': attribute type 21 has an invalid length. [ 1276.443843][ T1812] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1276.515392][ T1812] BTRFS info (device loop5): using free-space-tree [ 1276.755112][ T1874] loop1: detected capacity change from 0 to 64 [ 1276.778413][ T1877] loop0: detected capacity change from 0 to 128 [ 1276.859414][ T1874] minix_free_block (loop1:21): bit already cleared [ 1277.001630][ T5274] BTRFS info (device loop5): last unmount of filesystem 6d32ffd9-2c05-449e-954d-ee8965daf2d2 [ 1277.155210][ T1886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12275'. [ 1277.417972][ T1890] loop0: detected capacity change from 0 to 1024 [ 1277.457931][ T1858] loop3: detected capacity change from 0 to 32768 [ 1277.458854][ T1891] loop1: detected capacity change from 0 to 1024 [ 1277.547428][ T29] audit: type=1800 audit(1724967522.078:179): pid=1858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12270" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 1278.100173][ T1900] loop5: detected capacity change from 0 to 4096 [ 1278.145912][ T1905] loop1: detected capacity change from 0 to 512 [ 1278.150117][ T1900] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1278.225525][ T1900] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1278.269113][ T1900] ntfs3: loop5: Failed to load $Extend (-22). [ 1278.300528][ T1905] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1278.320895][ T1900] ntfs3: loop5: Failed to initialize $Extend. [ 1278.400726][ T1905] EXT4-fs (loop1): Remounting filesystem read-only [ 1278.417199][ T1917] netlink: 'syz.2.12289': attribute type 10 has an invalid length. [ 1278.425595][ T1917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12289'. [ 1278.435774][ T1917] ipvlan1: entered promiscuous mode [ 1278.441915][ T1917] ipvlan1: entered allmulticast mode [ 1278.447698][ T1917] veth0_vlan: entered allmulticast mode [ 1278.456534][ T1905] EXT4-fs (loop1): 1 truncate cleaned up [ 1278.475664][ T1917] bridge0: port 3(ipvlan1) entered blocking state [ 1278.482646][ T1917] bridge0: port 3(ipvlan1) entered disabled state [ 1278.490756][ T1905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.537787][ T1917] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1278.664010][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.923303][ T1927] loop5: detected capacity change from 0 to 512 [ 1279.013733][ T1927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.102303][ T1927] ext4 filesystem being mounted at /2159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.148694][ T1937] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12300'. [ 1279.184039][ T1939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12298'. [ 1279.202208][ T1937] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.12300'. [ 1279.261007][ T29] audit: type=1326 audit(1724967523.924:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1926 comm="syz.5.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1279.332003][ T1902] loop0: detected capacity change from 0 to 32768 [ 1279.346576][ T29] audit: type=1326 audit(1724967523.924:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1926 comm="syz.5.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1279.389472][ T1902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12284 (1902) [ 1279.434786][ T5274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.441798][ T29] audit: type=1326 audit(1724967523.924:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1926 comm="syz.5.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1279.478033][ T1902] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1279.489236][ T29] audit: type=1326 audit(1724967523.924:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1926 comm="syz.5.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1279.498015][ T1948] loop1: detected capacity change from 0 to 512 [ 1279.534376][ T29] audit: type=1326 audit(1724967523.924:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1926 comm="syz.5.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe06779ef9 code=0x7ffc0000 [ 1279.550024][ T1902] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1279.615256][ T1948] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.12306: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 1279.621450][ T1902] BTRFS info (device loop0): using free-space-tree [ 1279.685158][ T1948] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.12306: couldn't read orphan inode 15 (err -117) [ 1279.725587][ T1948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.844402][ T1972] random: crng reseeded on system resumption [ 1280.011027][ T1977] loop5: detected capacity change from 0 to 256 [ 1280.021653][ T1902] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1280.053275][T16648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.080749][ T1977] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1280.177867][ T29] audit: type=1800 audit(1724967524.911:185): pid=1977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12310" name="bus" dev="loop5" ino=1048975 res=0 errno=0 [ 1280.260416][T29412] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1280.897394][ T1992] loop1: detected capacity change from 0 to 4096 [ 1280.936658][ T1992] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1280.983015][ T5242] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1281.109104][ T2955] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.148248][ T1992] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1281.208053][ T5242] usb 3-1: Using ep0 maxpacket: 16 [ 1281.208414][ T1999] tipc: Enabling of bearer rejected, media not registered [ 1281.222301][ T5242] usb 3-1: config 0 has no interfaces? [ 1281.228488][ T5242] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1281.249124][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.294664][ T5242] usb 3-1: config 0 descriptor?? [ 1281.362190][ T2955] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.614052][T25297] usb 3-1: USB disconnect, device number 23 [ 1281.626175][ T2955] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.754926][ T2955] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.800230][ T2006] loop3: detected capacity change from 0 to 4096 [ 1281.887543][ T2006] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1281.895585][ T2006] NILFS (loop3): trying rollback from an earlier position [ 1282.021724][ T2006] NILFS (loop3): recovery complete [ 1282.044751][ T2016] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1282.076530][ T2013] loop0: detected capacity change from 0 to 1024 [ 1282.181498][ T2013] hfsplus: bad catalog entry type [ 1282.213235][ T2955] bridge_slave_0: left allmulticast mode [ 1282.218908][ T2955] bridge_slave_0: left promiscuous mode [ 1282.246273][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.335937][ T1120] hfsplus: b-tree write err: -5, ino 4 [ 1282.585862][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1282.612405][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1282.621641][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1282.630571][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1282.639105][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1282.646908][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1283.063348][ T1684] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1283.256216][ T1684] usb 4-1: Using ep0 maxpacket: 16 [ 1283.288028][ T1684] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1283.309942][ T1684] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1283.365538][ T1684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1283.395898][ T1684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1283.423579][ T1684] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.483192][ T1684] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1283.493732][ T1684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.504441][ T1684] usb 4-1: Product: syz [ 1283.510995][ T1684] usb 4-1: Manufacturer: syz [ 1283.516710][ T1684] usb 4-1: SerialNumber: syz [ 1283.539015][ T1684] usb 4-1: config 0 descriptor?? [ 1283.720154][ T2955] dvmrp2 (unregistering): left allmulticast mode [ 1283.769302][ T1684] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 1283.799937][ T1684] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 1283.825955][ T1684] usb 4-1: USB disconnect, device number 8 [ 1283.949255][ T2955] team0: Port device geneve1 removed [ 1284.165110][ T2063] netlink: 240 bytes leftover after parsing attributes in process `syz.2.12352'. [ 1284.181973][ T2063] NCSI netlink: No device for ifindex 33554690 [ 1284.573426][T15013] Bluetooth: hci4: command tx timeout [ 1284.783954][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.799143][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.819955][ T2955] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1284.845867][ T2955] bond0 (unregistering): Released all slaves [ 1284.893538][ T2955] bond1 (unregistering): Released all slaves [ 1285.145328][ T2955] ΙΆΖ£0GCTw: left promiscuous mode [ 1285.158669][ T2079] autofs: Bad value for 'uid' [ 1285.195640][ T2079] autofs: Bad value for 'uid' [ 1285.373017][ T2955] Κό: left promiscuous mode [ 1285.480181][ T2955] : left promiscuous mode [ 1285.623432][ T2955] tipc: Disabling bearer [ 1285.643191][ T5242] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1285.651497][ T2955] tipc: Left network mode [ 1285.857421][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 1285.871114][ T5242] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1285.884819][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.902977][ T5242] usb 2-1: Product: syz [ 1285.908513][ T5242] usb 2-1: Manufacturer: syz [ 1285.913571][ T5242] usb 2-1: SerialNumber: syz [ 1286.185911][ T5242] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1286.211565][ T5242] usb 2-1: 2:1 : sample bitwidth 57 in over sample bytes 3 [ 1286.260937][ T5242] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1286.359179][ T5242] usb 2-1: USB disconnect, device number 22 [ 1286.466366][ T2028] chnl_net:caif_netlink_parms(): no params data found [ 1286.488969][ T2113] loop3: detected capacity change from 0 to 2048 [ 1286.509983][T15013] Bluetooth: hci4: command tx timeout [ 1286.563887][ T2116] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1286.999920][ T2129] loop2: detected capacity change from 0 to 1024 [ 1287.156632][ T2134] loop1: detected capacity change from 0 to 256 [ 1287.172397][ T2134] exfat: Deprecated parameter 'utf8' [ 1287.198916][ T2134] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1287.312632][ T64] hfsplus: b-tree write err: -5, ino 4 [ 1287.463531][ T2028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.487982][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.505776][ T2028] bridge_slave_0: entered allmulticast mode [ 1287.534332][ T2028] bridge_slave_0: entered promiscuous mode [ 1287.615204][ T2955] hsr_slave_0: left promiscuous mode [ 1287.631368][ T2955] hsr_slave_1: left promiscuous mode [ 1287.697617][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.706740][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.733538][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.751337][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.866643][ T2955] veth1_macvtap: left promiscuous mode [ 1287.881064][ T2955] veth0_macvtap: left promiscuous mode [ 1287.892418][ T2955] veth1_vlan: left promiscuous mode [ 1287.903587][ T2955] veth0_vlan: left promiscuous mode [ 1288.028430][ T5384] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1288.119159][ T2125] loop3: detected capacity change from 0 to 32768 [ 1288.191301][ T2125] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1288.233397][ T5384] usb 2-1: Using ep0 maxpacket: 16 [ 1288.244279][ T5384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.267265][ T2125] XFS (loop3): Ending clean mount [ 1288.272035][ T5384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.297329][ T2125] XFS (loop3): Quotacheck needed: Please wait. [ 1288.330229][ T5384] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1288.407114][ T2955] infiniband syz0: set down [ 1288.414283][ T5384] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1288.434790][ T5384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.436398][ T2125] XFS (loop3): Quotacheck: Done. [ 1288.446401][ T5384] usb 2-1: config 0 descriptor?? [ 1288.449199][T15013] Bluetooth: hci4: command tx timeout [ 1288.674037][T23927] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1288.854435][ T5384] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00A0/input/input113 [ 1288.870476][ T5384] microsoft 0003:045E:07DA.00A0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1289.034900][ T2157] usb 2-1: USB disconnect, device number 23 [ 1290.172441][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1290.360794][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 1290.365155][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1290.387574][T15013] Bluetooth: hci4: command tx timeout [ 1290.407531][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.440182][ T9] usb 2-1: config 0 descriptor?? [ 1290.463580][ T9] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 1290.592390][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 1290.594170][ T2205] nbd: couldn't find device at index 50432 [ 1290.615001][ T2207] loop3: detected capacity change from 0 to 256 [ 1290.698654][ T2059] usb 2-1: USB disconnect, device number 24 [ 1290.795278][ T2207] FAT-fs (loop3): Directory bread(block 64) failed [ 1290.822059][ T2207] FAT-fs (loop3): Directory bread(block 65) failed [ 1290.843329][ T2207] FAT-fs (loop3): Directory bread(block 66) failed [ 1290.849960][ T2207] FAT-fs (loop3): Directory bread(block 67) failed [ 1290.871897][ T2207] FAT-fs (loop3): Directory bread(block 68) failed [ 1290.878468][ T2207] FAT-fs (loop3): Directory bread(block 69) failed [ 1290.928976][ T2207] FAT-fs (loop3): Directory bread(block 70) failed [ 1290.935557][ T2207] FAT-fs (loop3): Directory bread(block 71) failed [ 1290.956676][ T2207] FAT-fs (loop3): Directory bread(block 72) failed [ 1290.974417][ T2207] FAT-fs (loop3): Directory bread(block 73) failed [ 1291.395582][ T2218] loop3: detected capacity change from 0 to 2048 [ 1291.445523][ T2222] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1291.980295][ T5340] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1292.176602][ T5340] usb 4-1: Using ep0 maxpacket: 8 [ 1292.189439][ T5340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1292.228476][ T5340] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1292.263238][ T5340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.285952][ T5340] usb 4-1: config 0 descriptor?? [ 1292.300913][ T5340] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1292.310849][ T64] smc: removing ib device syz0 [ 1292.408378][ T2028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.423562][ T2028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.432650][ T2028] bridge_slave_1: entered allmulticast mode [ 1292.444615][ T2028] bridge_slave_1: entered promiscuous mode [ 1292.569182][ T5321] infiniband syz0: ib_query_port failed (-19) [ 1292.569432][ T2224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12407'. [ 1292.646037][ T2028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.672627][ T2235] loop2: detected capacity change from 0 to 16 [ 1292.684537][ T9] usb 4-1: USB disconnect, device number 9 [ 1292.715090][ T2235] erofs: (device loop2): mounted with root inode @ nid 36. [ 1292.720378][ T2028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.881539][ T2235] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 1292.938778][ T2235] syz.2.12411: attempt to access beyond end of device [ 1292.938778][ T2235] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1293.333931][ T2028] team0: Port device team_slave_0 added [ 1293.438496][ T2028] team0: Port device team_slave_1 added [ 1293.503256][ T2255] sctp: [Deprecated]: syz.3.12420 (pid 2255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1293.503256][ T2255] Use struct sctp_sack_info instead [ 1293.701839][ T8] usb 5-1: [UEAGLE-ATM] firmware is not available [ 1293.802280][ T2262] netlink: 'syz.2.12422': attribute type 1 has an invalid length. [ 1293.827555][ T2262] netlink: 9384 bytes leftover after parsing attributes in process `syz.2.12422'. [ 1294.152993][ T2273] loop2: detected capacity change from 0 to 256 [ 1294.197409][ T2028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.223257][ T2028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.405950][ T2028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.603643][ T2028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.647600][ T2028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.779462][ T2028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.982481][ T2244] loop1: detected capacity change from 0 to 32768 [ 1295.042801][ T2244] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1295.472373][ T2308] loop3: detected capacity change from 0 to 256 [ 1295.479366][ T2244] XFS (loop1): Ending clean mount [ 1295.505344][ T2308] exfat: Deprecated parameter 'namecase' [ 1295.534965][ T2308] exfat: Deprecated parameter 'namecase' [ 1295.540990][ T8] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1295.632163][ T2308] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1295.714373][ T2028] hsr_slave_0: entered promiscuous mode [ 1295.737105][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1295.751705][T16648] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1295.796896][ T2028] hsr_slave_1: entered promiscuous mode [ 1295.811559][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1295.816676][ T2314] loop0: detected capacity change from 0 to 8192 [ 1295.844267][ T8] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1295.862403][ T8] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1295.867849][ T2028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1295.884898][ T2314] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1295.908517][ T2028] Cannot create hsr debugfs directory [ 1295.908514][ T8] usb 5-1: Product: syz [ 1295.908540][ T8] usb 5-1: Manufacturer: syz [ 1295.946274][ T8] usb 5-1: SerialNumber: syz [ 1295.993296][ T29] audit: type=1800 audit(1724967541.873:186): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12438" name="bus" dev="loop0" ino=1049009 res=0 errno=0 [ 1296.057175][ T8] usb 5-1: config 0 descriptor?? [ 1296.091353][ T2304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1296.421980][ T937] usb 5-1: USB disconnect, device number 123 [ 1297.060813][ T937] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1297.171404][ T2344] loop3: detected capacity change from 0 to 1024 [ 1297.256783][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 1297.339304][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1297.424480][ T937] usb 5-1: string descriptor 0 read error: -22 [ 1297.430885][ T937] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1297.470263][ T937] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1297.502795][ T937] usb 5-1: config 0 descriptor?? [ 1297.533343][ T2304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1297.812351][ T2367] (syz.1.12458,2367,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1297.823697][ T2367] (syz.1.12458,2367,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1297.824902][ T5340] usb 5-1: USB disconnect, device number 124 [ 1298.009573][ T2028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1298.046155][ T2028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1298.116810][ T2028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1298.156437][ T2028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1298.528654][ T2028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.542420][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1298.609639][ T2028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.667028][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.674290][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.684890][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.692122][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.749503][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.773904][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.814383][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1298.854673][ T8] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1298.863996][ T2028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1298.864027][ T2028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.939789][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.968930][ T8] usb 4-1: config 0 descriptor?? [ 1299.203836][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1299.369503][ T8] saitek 0003:06A3:0621.00A1: item fetching failed at offset 5/7 [ 1299.390222][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1299.393638][ T2028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.400785][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1299.414625][ T8] saitek 0003:06A3:0621.00A1: parse failed [ 1299.428805][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.438822][ T8] saitek 0003:06A3:0621.00A1: probe with driver saitek failed with error -22 [ 1299.455867][ T9] usb 2-1: Product: syz [ 1299.467500][ T9] usb 2-1: Manufacturer: syz [ 1299.482431][ T9] usb 2-1: SerialNumber: syz [ 1299.513616][ T9] usb 2-1: config 0 descriptor?? [ 1299.542145][ T9] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1299.621586][ T5242] usb 4-1: USB disconnect, device number 10 [ 1299.728561][ T2428] loop0: detected capacity change from 0 to 256 [ 1299.937949][ T9] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1300.138663][T25297] usb 2-1: USB disconnect, device number 25 [ 1300.161331][T25297] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1300.184251][T25297] visor 2-1:0.0: device disconnected [ 1300.293187][ T2028] veth0_vlan: entered promiscuous mode [ 1300.356874][ T2028] veth1_vlan: entered promiscuous mode [ 1300.503334][ T2028] veth0_macvtap: entered promiscuous mode [ 1300.566063][ T2028] veth1_macvtap: entered promiscuous mode [ 1300.661301][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.695290][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.723171][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.751967][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.771666][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.797873][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.798221][ T29] audit: type=1326 audit(1724967547.034:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2436 comm="syz.2.12479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6978b79ef9 code=0x7fc00000 [ 1300.826486][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.872151][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.900640][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.934188][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.959963][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.990775][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.017624][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.059077][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.074824][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.095796][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.117137][ T2028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.197007][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.231896][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.274606][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.294128][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.309991][ T2463] loop0: detected capacity change from 0 to 256 [ 1301.339083][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.370208][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.390179][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.410719][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.449407][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.465904][ T2468] loop1: detected capacity change from 0 to 1024 [ 1301.481255][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.502337][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.506702][ T2468] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1301.515730][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.534443][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.545065][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.555048][ T2028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.568595][ T2028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.606591][ T2028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.632347][ T2028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.675134][ T2028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.711132][ T2028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.755520][ T2028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.848451][ T2474] loop2: detected capacity change from 0 to 256 [ 1302.004287][ T2474] FAT-fs (loop2): Directory bread(block 64) failed [ 1302.032653][ T2474] FAT-fs (loop2): Directory bread(block 65) failed [ 1302.050506][ T2474] FAT-fs (loop2): Directory bread(block 66) failed [ 1302.085619][ T2474] FAT-fs (loop2): Directory bread(block 67) failed [ 1302.092268][ T2474] FAT-fs (loop2): Directory bread(block 68) failed [ 1302.120126][ T2474] FAT-fs (loop2): Directory bread(block 69) failed [ 1302.123802][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.127103][ T2474] FAT-fs (loop2): Directory bread(block 70) failed [ 1302.158575][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.211044][ T2474] FAT-fs (loop2): Directory bread(block 71) failed [ 1302.218527][ T2474] FAT-fs (loop2): Directory bread(block 72) failed [ 1302.261917][ T2474] FAT-fs (loop2): Directory bread(block 73) failed [ 1302.354939][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.372895][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.605958][ T2500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12507'. [ 1302.868186][ T2506] loop2: detected capacity change from 0 to 1024 [ 1302.953170][ T2506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.166979][ T2525] program syz.0.12517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1303.343307][ T2529] loop1: detected capacity change from 0 to 1764 [ 1303.356731][ T2535] loop5: detected capacity change from 0 to 256 [ 1303.378350][ T2535] exfat: Deprecated parameter 'utf8' [ 1303.397982][ T2535] exfat: Deprecated parameter 'utf8' [ 1303.419717][T32743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.472112][ T2535] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1303.484453][ T2529] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1303.759139][ T2547] [U]  [ 1304.144671][ T2552] loop2: detected capacity change from 0 to 4096 [ 1304.187185][ T2552] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1304.530159][ T2572] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12539'. [ 1305.013452][ T2585] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12545'. [ 1305.048018][ T2585] netlink: 'syz.1.12545': attribute type 1 has an invalid length. [ 1305.084739][ T2585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12545'. [ 1305.123829][ T2543] loop0: detected capacity change from 0 to 32768 [ 1305.304481][ T2590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12548'. [ 1305.562302][ T2600] loop1: detected capacity change from 0 to 8 [ 1305.592010][ T2600] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1305.613515][ T2602] loop2: detected capacity change from 0 to 256 [ 1305.651504][ T2602] exfat: Deprecated parameter 'utf8' [ 1305.735183][ T2602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1305.865330][ T2574] loop3: detected capacity change from 0 to 32768 [ 1306.000102][ T2574] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1306.018907][ T2615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12560'. [ 1306.170261][ T2621] loop5: detected capacity change from 0 to 2048 [ 1306.275966][ T2628] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1306.333149][ T2574] XFS (loop3): Ending clean mount [ 1306.394068][ T2634] UBIFS error (pid: 2634): cannot open "ub ", error -22 [ 1306.581271][T23927] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1306.777497][ T2646] random: crng reseeded on system resumption [ 1306.893358][ T5242] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1307.014927][ T2652] loop2: detected capacity change from 0 to 1024 [ 1307.036515][ T2652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1307.094098][ T2655] loop0: detected capacity change from 0 to 16 [ 1307.108264][ T5242] usb 6-1: Using ep0 maxpacket: 16 [ 1307.114428][ T2655] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1307.124961][ T2652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c018, mo2=0082] [ 1307.141502][ T5242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.173495][ T2652] System zones: 0-1, 3-12 [ 1307.197618][ T2652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.209879][ T5242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.219684][ T5242] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1307.219755][ T5242] usb 6-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 1307.367914][ T5242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.418338][ T5242] usb 6-1: config 0 descriptor?? [ 1307.466543][ T2663] loop0: detected capacity change from 0 to 2048 [ 1307.511096][T32743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.537136][ T2663] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.12578: bad orphan inode 8192 [ 1307.576654][ T2663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.860321][T29412] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /368/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=1, rec_len=0, size=2048 fake=0 [ 1307.863034][ T5242] wacom 0003:056A:0093.00A2: hidraw0: USB HID v0.00 Device [HID 056a:0093] on usb-dummy_hcd.5-1/input0 [ 1307.976451][T29412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.031332][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1308.059548][ T5321] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1308.140929][ T5340] usb 6-1: USB disconnect, device number 12 [ 1308.211076][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1308.226569][ T5242] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1308.236552][ T8] usb 2-1: config 0 has no interfaces? [ 1308.242395][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1308.261919][ T5321] usb 3-1: Using ep0 maxpacket: 16 [ 1308.265716][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.278992][ T5321] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1308.290395][ T5321] usb 3-1: config 0 has no interface number 0 [ 1308.292683][ T8] usb 2-1: config 0 descriptor?? [ 1308.315196][ T5321] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1308.337492][ T5321] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1308.358388][ T5321] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1308.379545][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1308.394081][ T5321] usb 3-1: Product: syz [ 1308.398266][ T5321] usb 3-1: SerialNumber: syz [ 1308.413012][ T5242] usb 5-1: Using ep0 maxpacket: 8 [ 1308.420594][ T5321] usb 3-1: config 0 descriptor?? [ 1308.432099][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.462118][ T5321] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1308.469039][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.489684][ T5321] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input117 [ 1308.499968][ T5242] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1308.515246][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.526497][ T5242] usb 5-1: config 0 descriptor?? [ 1308.671948][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1308.672429][T25297] usb 3-1: USB disconnect, device number 24 [ 1308.679323][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1308.726120][T25297] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1308.799013][ T2688] loop3: detected capacity change from 0 to 164 [ 1308.934552][ T5242] hid-picolcd 0003:04D8:F002.00A3: item fetching failed at offset 3/7 [ 1308.963602][ T5242] hid-picolcd 0003:04D8:F002.00A3: device report parse failed [ 1308.991037][ T5242] hid-picolcd 0003:04D8:F002.00A3: probe with driver hid-picolcd failed with error -22 [ 1309.019293][ T5340] usb 2-1: USB disconnect, device number 26 [ 1309.036113][ T2694] CUSE: DEVNAME unspecified [ 1309.117026][ T9] usb 5-1: USB disconnect, device number 125 [ 1309.307643][ T5242] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1309.388804][ T2700] loop3: detected capacity change from 0 to 512 [ 1309.439492][ T2700] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.12595: invalid indirect mapped block 256 (level 2) [ 1309.483892][ T2700] EXT4-fs (loop3): 2 truncates cleaned up [ 1309.513276][ T2700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.548155][ T5242] usb 6-1: Using ep0 maxpacket: 8 [ 1309.578122][ T5242] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 1309.613062][ T5242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.641005][ T5242] usb 6-1: Product: syz [ 1309.656121][ T5242] usb 6-1: Manufacturer: syz [ 1309.660771][ T5242] usb 6-1: SerialNumber: syz [ 1309.687853][ T5242] usb 6-1: config 0 descriptor?? [ 1309.707813][ T5242] gspca_main: spca500-2.14.0 probing 046d:0900 [ 1309.770002][T23927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.995802][ T2715] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1310.052696][ T2715] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 1310.104334][ T5242] gspca_spca500: reg write: error -71 [ 1310.137188][ T5242] gspca_spca500: reg write: error -71 [ 1310.152646][ T5242] gspca_spca500: reg write: error -71 [ 1310.164746][ T5242] gspca_spca500: reg write: error -71 [ 1310.181852][ T5242] gspca_spca500: reg write: error -71 [ 1310.212184][ T5242] gspca_spca500: reg write: error -71 [ 1310.221203][ T5242] gspca_spca500: reg write: error -71 [ 1310.227283][ T5242] gspca_spca500: reg write: error -71 [ 1310.257016][ T5242] gspca_spca500: reg write: error -71 [ 1310.267535][ T5242] gspca_spca500: reg write: error -71 [ 1310.289044][ T5242] gspca_spca500: reg write: error -71 [ 1310.305291][ T5242] gspca_spca500: reg write: error -71 [ 1310.314236][ T5242] gspca_spca500: reg write: error -71 [ 1310.334336][ T29] audit: type=1326 audit(1724967557.269:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2726 comm="syz.4.12606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d10d79ef9 code=0x0 [ 1310.374199][ T5242] usb 6-1: USB disconnect, device number 13 [ 1310.542091][ T2735] loop2: detected capacity change from 0 to 256 [ 1311.205130][ T2751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12617'. [ 1311.439761][ T2760] loop2: detected capacity change from 0 to 256 [ 1311.466385][ T2760] exfat: Deprecated parameter 'utf8' [ 1311.484957][ T2760] exfat: Deprecated parameter 'utf8' [ 1311.486061][ T2762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12623'. [ 1311.535165][ T2760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1311.608267][ T2727] loop3: detected capacity change from 0 to 40427 [ 1311.615575][ T2727] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1311.615610][ T2727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1311.636883][ T2727] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1311.850821][ T2727] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1311.888661][ T2727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1312.057980][ T5242] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1312.242922][ T2787] loop5: detected capacity change from 0 to 164 [ 1312.254070][T23927] syz-executor: attempt to access beyond end of device [ 1312.254070][T23927] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1312.271317][ T2787] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1312.294024][ T5242] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.306357][ T2788] use of bytesused == 0 is deprecated and will be removed in the future, [ 1312.327240][ T2787] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1312.335401][T23927] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1312.346552][ T5242] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1312.352198][ T2788] use the actual size instead. [ 1312.443972][ T5242] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1312.476253][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1312.523329][ T5242] usb 5-1: SerialNumber: syz [ 1312.645187][T25297] kernel write not supported for file /snd/seq (pid: 25297 comm: kworker/0:4) [ 1312.714513][ T2798] loop1: detected capacity change from 0 to 8 [ 1312.760454][ T5242] usb 5-1: 0:2 : does not exist [ 1312.760787][ T2796] nbd: must specify a device to reconfigure [ 1312.780346][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1312.809971][ T2798] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1312.848138][ T2798] SQUASHFS error: Failed to read block 0x71: -5 [ 1312.881013][ T2798] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1312.887032][ T5242] usb 5-1: USB disconnect, device number 126 [ 1312.918251][ T2798] SQUASHFS error: Failed to read block 0x71: -5 [ 1312.942652][ T29] audit: type=1800 audit(1724967560.059:189): pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12638" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 1313.178183][ T2804] loop1: detected capacity change from 0 to 64 [ 1313.513656][ T2807] devpts: called with bogus options [ 1313.891145][ T2800] loop5: detected capacity change from 0 to 32768 [ 1314.039768][ T2821] syz.2.12649 (2821) used obsolete PPPIOCDETACH ioctl [ 1314.132735][ T2825] loop3: detected capacity change from 0 to 64 [ 1314.141070][ T2824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12651'. [ 1314.397847][ T2833] loop3: detected capacity change from 0 to 64 [ 1314.436403][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1314.634082][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1314.658842][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1314.709017][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1314.752902][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1314.808269][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 1314.834831][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.856000][ T9] usb 5-1: Product: syz [ 1314.860203][ T9] usb 5-1: Manufacturer: syz [ 1314.889012][ T9] usb 5-1: SerialNumber: syz [ 1314.911669][ T9] usb 5-1: config 0 descriptor?? [ 1314.949902][ T9] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 1315.108827][ T2850] loop3: detected capacity change from 0 to 1024 [ 1315.239419][ T8] usb 5-1: USB disconnect, device number 127 [ 1315.265339][ T2162] hfsplus: b-tree write err: -5, ino 4 [ 1315.706507][ T2856] loop3: detected capacity change from 0 to 2048 [ 1315.771757][ T2859] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1315.860357][ T2837] loop1: detected capacity change from 0 to 32768 [ 1315.900347][ T2837] ERROR: (device loop1): dtSearch: stack overrun! [ 1315.900347][ T2837] [ 1315.943421][ T2837] ERROR: (device loop1): remounting filesystem as read-only [ 1315.962761][ T2837] btstack dump: [ 1315.966245][ T2837] bn = 0, index = 0 [ 1315.970062][ T2837] bn = 0, index = 0 [ 1316.029560][ T2837] bn = 0, index = 0 [ 1316.036869][ T2837] bn = 0, index = 0 [ 1316.050245][ T2837] bn = 0, index = 0 [ 1316.066706][ T2837] bn = 0, index = 0 [ 1316.073994][ T2837] bn = 0, index = 0 [ 1316.077694][ T2866] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12665'. [ 1316.087208][ T2837] bn = 0, index = 0 [ 1316.101223][ T2837] jfs_lookup: dtSearch returned -5 [ 1316.131823][ T2863] ERROR: (device loop1): dtSearch: stack overrun! [ 1316.131823][ T2863] [ 1316.165578][ T2863] btstack dump: [ 1316.176709][ T2863] bn = 0, index = 0 [ 1316.195665][ T2863] bn = 0, index = 0 [ 1316.199685][ T2863] bn = 0, index = 0 [ 1316.216295][ T2863] bn = 0, index = 0 [ 1316.234132][ T2863] bn = 0, index = 0 [ 1316.238011][ T2863] bn = 0, index = 0 [ 1316.241854][ T2863] bn = 0, index = 0 [ 1316.270173][ T2863] bn = 0, index = 0 [ 1316.274040][ T2863] jfs_lookup: dtSearch returned -5 [ 1316.942159][ T30] INFO: task syz.4.10926:31105 blocked for more than 143 seconds. [ 1316.960221][ T30] Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 1316.986276][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1317.034775][ T30] task:syz.4.10926 state:D stack:25776 pid:31105 tgid:31103 ppid:23938 flags:0x00000004 [ 1317.073001][ T30] Call Trace: [ 1317.080961][ T30] [ 1317.083950][ T30] __schedule+0x1800/0x4a60 [ 1317.109310][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.115077][ T30] ? __pfx___schedule+0x10/0x10 [ 1317.136801][ T30] ? __pfx_lock_release+0x10/0x10 [ 1317.152053][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.172072][ T30] ? schedule+0x90/0x320 [ 1317.188065][ T30] schedule+0x14b/0x320 [ 1317.197875][ T30] ? down_read+0x6a5/0xa40 [ 1317.211355][ T30] schedule_preempt_disabled+0x13/0x30 [ 1317.226858][ T30] down_read+0x705/0xa40 [ 1317.236683][ T30] ? __pfx_down_read+0x10/0x10 [ 1317.266253][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.275941][ T30] super_lock+0x27c/0x400 [ 1317.294981][ T30] ? user_get_super+0xc6/0x180 [ 1317.302154][ T30] ? __pfx_super_lock+0x10/0x10 [ 1317.324019][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.350964][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1317.356412][ T30] user_get_super+0xd2/0x180 [ 1317.371717][ T30] __se_sys_quotactl+0x527/0xa30 [ 1317.391691][ T30] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1317.404300][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1317.418876][ T30] ? do_syscall_64+0x100/0x230 [ 1317.428267][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.446573][ T30] do_syscall_64+0xf3/0x230 [ 1317.451213][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.464683][ T30] RIP: 0033:0x7f8cde979ef9 [ 1317.474015][ T30] RSP: 002b:00007f8cdf763038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1317.496274][ T30] RAX: ffffffffffffffda RBX: 00007f8cdeb15f80 RCX: 00007f8cde979ef9 [ 1317.516168][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffff80000901 [ 1317.551053][ T30] RBP: 00007f8cde9e793e R08: 0000000000000000 R09: 0000000000000000 [ 1317.575595][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.600704][ T30] R13: 0000000000000000 R14: 00007f8cdeb15f80 R15: 00007fffed33f138 [ 1317.629332][ T2876] loop0: detected capacity change from 0 to 32768 [ 1317.638885][ T30] [ 1317.642181][ T30] [ 1317.642181][ T30] Showing all locks held in the system: [ 1317.680972][ T30] 1 lock held by khungtaskd/30: [ 1317.686062][ T2876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12670 (2876) [ 1317.705142][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1317.735711][ T2873] loop2: detected capacity change from 0 to 32768 [ 1317.757255][ T30] 2 locks held by getty/4978: [ 1317.762190][ T30] #0: ffff88802b00c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1317.768689][ T2876] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1317.773404][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1317.795608][ T30] 4 locks held by kworker/u8:2/9937: [ 1317.800772][ T2876] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1317.820821][ T2873] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1317.830704][ T30] #0: ffff88801b68d148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1317.830813][ T30] #1: ffffc9001b35fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1317.830900][ T30] #2: ffff88802acf00e0 (&type->s_umount_key#33){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 1317.830990][ T30] #3: ffff88802acf2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 1317.831082][ T30] 1 lock held by syz.4.4023/14637: [ 1317.831109][ T30] 1 lock held by syz.4.10926/31105: [ 1317.831127][ T30] #0: ffff8880259dc0e0 (&type->s_umount_key#59){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 1317.831222][ T30] 4 locks held by syz.2.12669/2873: [ 1317.831241][ T30] 1 lock held by syz.0.12670/2876: [ 1317.831327][ T30] [ 1317.863978][ T2876] BTRFS info (device loop0): using free-space-tree [ 1317.915208][ T30] ============================================= [ 1317.915208][ T30] [ 1317.942364][ T30] NMI backtrace for cpu 0 [ 1317.946768][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 1317.957309][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1317.967403][ T30] Call Trace: [ 1317.970705][ T30] [ 1317.973655][ T30] dump_stack_lvl+0x241/0x360 [ 1317.978371][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1317.983597][ T30] ? __pfx__printk+0x10/0x10 [ 1317.988230][ T30] ? vprintk_emit+0x667/0x7c0 [ 1317.992946][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1317.998013][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1318.002994][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1318.008496][ T30] ? _printk+0xd5/0x120 [ 1318.012720][ T30] ? __pfx__printk+0x10/0x10 [ 1318.017373][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1318.022267][ T30] ? __pfx__printk+0x10/0x10 [ 1318.026914][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.029377][ T2873] XFS (loop2): Ending clean mount [ 1318.032569][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1318.032614][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1318.032652][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1318.032702][ T30] watchdog+0xff4/0x1040 [ 1318.032745][ T30] ? watchdog+0x1ea/0x1040 [ 1318.032792][ T30] ? __pfx_watchdog+0x10/0x10 [ 1318.032831][ T30] kthread+0x2f2/0x390 [ 1318.032874][ T30] ? __pfx_watchdog+0x10/0x10 [ 1318.032912][ T30] ? __pfx_kthread+0x10/0x10 [ 1318.032956][ T30] ret_from_fork+0x4d/0x80 [ 1318.086073][ T30] ? __pfx_kthread+0x10/0x10 [ 1318.090726][ T30] ret_from_fork_asm+0x1a/0x30 [ 1318.095559][ T30] [ 1318.100953][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1318.107620][ C1] NMI backtrace for cpu 1 [ 1318.107638][ C1] CPU: 1 UID: 0 PID: 9937 Comm: kworker/u8:2 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 1318.107664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1318.107679][ C1] Workqueue: bat_events batadv_nc_worker [ 1318.107718][ C1] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 1318.107753][ C1] Code: 16 c4 d6 ff e9 71 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 21 05 00 00 48 89 c4 48 89 e7 e8 26 c3 d6 ff e9 51 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 01 05 00 00 48 89 c4 48 89 e7 e8 [ 1318.107773][ C1] RSP: 0018:ffffc9001b35f978 EFLAGS: 00000086 [ 1318.107791][ C1] RAX: ffffffff8b81b0d3 RBX: ffff888063670cc0 RCX: ffff888026c2bc00 [ 1318.107810][ C1] RDX: 0000000000000000 RSI: ffffffff8b81af15 RDI: ffffffff8e938320 [ 1318.107827][ C1] RBP: ffffc9001b35fad8 R08: ffffffff8b81b0c1 R09: 1ffffffff26e6908 [ 1318.107844][ C1] R10: dffffc0000000000 R11: fffffbfff26e6909 R12: ffff888063670cc0 [ 1318.107862][ C1] R13: ffffffff8b81af15 R14: ffff88806f857b98 R15: ffffffff8b81b210 [ 1318.107883][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1318.107903][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1318.107925][ C1] CR2: 0000001b31417ff8 CR3: 000000006071e000 CR4: 0000000000350ef0 [ 1318.107944][ C1] Call Trace: [ 1318.107953][ C1] [ 1318.107961][ C1] RIP: 0010:lock_release+0x24/0xa30 [ 1318.107996][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 00 00 49 89 f5 48 89 7c 24 18 <65> 48 8b 04 25 28 00 00 00 48 89 84 24 e0 00 00 00 49 bf 00 00 00 [ 1318.108014][ C1] RSP: 0018:ffffc9001b35f9a0 EFLAGS: 00000286 [ 1318.108032][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1318.108067][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 1318.108102][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1318.108133][ C1] ? __pfx_lock_release+0x10/0x10 [ 1318.108164][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 1318.108199][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.108233][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 1318.108269][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 1318.108310][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1318.108345][ C1] ? batadv_nc_process_nc_paths+0x2f0/0x3a0 [ 1318.108383][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 1318.108422][ C1] ? batadv_nc_worker+0x42a/0x610 [ 1318.108460][ C1] ? process_scheduled_works+0x945/0x1830 [ 1318.108491][ C1] ? process_scheduled_works+0xa2e/0x1830 [ 1318.108546][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1318.108586][ C1] ? assign_work+0x364/0x3d0 [ 1318.108621][ C1] ? worker_thread+0x86d/0xd10 [ 1318.108660][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1318.108699][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1318.108736][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1318.108768][ C1] ? kthread+0x2f2/0x390 [ 1318.108803][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1318.108835][ C1] ? __pfx_kthread+0x10/0x10 [ 1318.108872][ C1] ? ret_from_fork+0x4d/0x80 [ 1318.108905][ C1] ? __pfx_kthread+0x10/0x10 [ 1318.108945][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1318.108993][ C1] [ 1318.150072][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1318.150094][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 1318.150125][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1318.150143][ T30] Call Trace: [ 1318.150155][ T30] [ 1318.150167][ T30] dump_stack_lvl+0x241/0x360 [ 1318.150206][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1318.150235][ T30] ? __pfx__printk+0x10/0x10 [ 1318.150273][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1318.150322][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.150359][ T30] ? vscnprintf+0x5d/0x90 [ 1318.150395][ T30] panic+0x349/0x860 [ 1318.150434][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.150471][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1318.150507][ T30] ? __pfx_panic+0x10/0x10 [ 1318.150544][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1318.150575][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.150611][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1318.150650][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.150685][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1318.150716][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1318.150749][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1318.150786][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.150821][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1318.150859][ T30] watchdog+0x1033/0x1040 [ 1318.150908][ T30] ? watchdog+0x1ea/0x1040 [ 1318.150954][ T30] ? __pfx_watchdog+0x10/0x10 [ 1318.150993][ T30] kthread+0x2f2/0x390 [ 1318.151035][ T30] ? __pfx_watchdog+0x10/0x10 [ 1318.151072][ T30] ? __pfx_kthread+0x10/0x10 [ 1318.151115][ T30] ret_from_fork+0x4d/0x80 [ 1318.151153][ T30] ? __pfx_kthread+0x10/0x10 [ 1318.151194][ T30] ret_from_fork_asm+0x1a/0x30 [ 1318.151251][ T30] [ 1318.167151][ T30] Kernel Offset: disabled [ 1318.598045][ T30] Rebooting in 86400 seconds..