last executing test programs: 1m40.850090649s ago: executing program 2 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e20"], 0x90}}, 0x4048084) 1m40.330185293s ago: executing program 2 (id=1074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) 1m39.736311442s ago: executing program 2 (id=1078): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10], 0x0, [0x4]}}}}]}, 0x88}}, 0x0) 1m39.536136165s ago: executing program 2 (id=1080): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000340)={[{@creator={'creator', 0x3d, "0448dc1a"}}, {@barrier}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@gid}, {@type={'type', 0x3d, "0da5b329"}}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000c00)="$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") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m39.100381004s ago: executing program 2 (id=1082): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xa}, 0x1c, 0x0}, 0xe0) 1m38.39861148s ago: executing program 2 (id=1086): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6}, &(0x7f0000000180)=0x10) 1m37.823201828s ago: executing program 32 (id=1086): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6}, &(0x7f0000000180)=0x10) 3.943992362s ago: executing program 1 (id=1785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 3.488595841s ago: executing program 1 (id=1787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x755, 0x0, 0x0) 3.178090312s ago: executing program 0 (id=1791): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, r2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 2.971741945s ago: executing program 0 (id=1794): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 2.738047781s ago: executing program 5 (id=1798): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000180)) 2.578632671s ago: executing program 3 (id=1800): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 2.577906201s ago: executing program 0 (id=1810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x200000000000005d) 2.509996626s ago: executing program 5 (id=1801): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0xd, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8000) 2.466012638s ago: executing program 4 (id=1802): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40003a000a000200ff"], 0x30}}, 0x0) 2.363759365s ago: executing program 0 (id=1803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000180)=0x5) 2.363664436s ago: executing program 1 (id=1804): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 2.233820604s ago: executing program 0 (id=1805): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeafb) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0xa, 0x3, 0x6, 0xfffa}, 0x1d, [0x8001, 0x80, 0x6, 0x9, 0x7f, 0x3ff, 0x1, 0xb, 0x6, 0xfffffffa, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd0, 0x5, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x0, 0x224, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x5, 0x9, 0x3, 0x4007fff, 0x4c77, 0x80000023, 0x3, 0x7, 0xa, 0x2, 0x71, 0x10000, 0x207, 0x103, 0x0, 0x5, 0x4003c, 0x91, 0x8006, 0xfffffff9, 0xd, 0x5, 0x4, 0x8, 0x0, 0x80f91, 0x2, 0x9, 0x6, 0x4000008, 0xfffffff9, 0x80000001, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e5, 0x10, 0xf9, 0x1, 0x2bf, 0x6c9, 0x9, 0x5, 0x3, 0x7695, 0xe4, 0x5, 0x80, 0xe, 0x30e, 0x8001, 0xea7, 0xa, 0x2000004, 0x4000, 0x8000, 0xd3, 0x401, 0x1, 0x100409, 0xfdfffffd, 0xfffffff8, 0x3, 0xdf4b, 0x5f35, 0x4000004, 0x0, 0xfffff801, 0x8, 0x9, 0xa, 0x6, 0x8, 0x10, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x2, 0x3, 0xb, 0x3, 0x2, 0x7, 0xa, 0x9, 0x48c92690, 0x3, 0xff], [0x7, 0x4, 0xfffffffa, 0x64e, 0xfffffdfe, 0x80000002, 0x8d2, 0x9, 0x1, 0xffff0000, 0x0, 0x5, 0xb, 0x0, 0x7, 0x32, 0x0, 0x7, 0x5, 0x8, 0xed, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x9, 0xf, 0x8, 0x4, 0x6d01, 0x2, 0x3b, 0x8, 0x201, 0x6de, 0xd, 0x0, 0x13, 0x0, 0x60000000, 0x9, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x203, 0x400002, 0xfffffff9, 0x0, 0x6, 0x1, 0x0, 0x6, 0x9, 0x120000, 0x2, 0x6, 0x7, 0x4, 0x800], [0x2, 0xbb2f, 0x0, 0x7, 0x5, 0x938, 0x9, 0x6, 0x0, 0xb, 0xce7, 0x1ff, 0x8, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x88000, 0xa620, 0x2fd, 0x5, 0x1, 0x2, 0x10014c, 0x60a7, 0x7, 0xfffffffd, 0xffffffff, 0x1001, 0x5, 0x8, 0xc8, 0x7, 0x3, 0xffff, 0x0, 0x2, 0x100, 0x9602, 0xa, 0x7f, 0x4, 0xa, 0x906a, 0x10000, 0x5, 0x200008, 0x2b91, 0xa1f, 0x800007f, 0xdab, 0x1, 0x6c1b, 0x0, 0x6, 0x2, 0xb1c, 0x4c400000, 0x200, 0xffff3441, 0x721d6bb4]}, 0x45c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 2.233241174s ago: executing program 3 (id=1806): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, r2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 2.216534495s ago: executing program 5 (id=1807): sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000280)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.180887348s ago: executing program 4 (id=1808): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.059853475s ago: executing program 3 (id=1809): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x4, 0x4) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x100) 2.058421395s ago: executing program 5 (id=1811): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1.926237874s ago: executing program 4 (id=1812): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 1.897420926s ago: executing program 5 (id=1813): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xff00) 1.83577148s ago: executing program 3 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 1.590307996s ago: executing program 5 (id=1815): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="1201004f031f66088f0510660548010203010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x1, &(0x7f0000000000)={0xa, "e6d4707dd3a13e4ba17a68f3c90a1a7ea0440902f4889e57a8ced14d0e530f2c90"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1.590130007s ago: executing program 3 (id=1816): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70769c266299881e362049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f7c896c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4b", @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES8], 0x1, 0x620f, &(0x7f000000cb40)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFKqZc8Y1nW73+DJdPT6/nzSu+vpUTZ/yv6svU1V9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIH/7gx2eqiLj0q3TDsYjPRT+iF7HS1GsRsbJ2LC8/iIgXYrs5no+I4VJElRufjXg9Ij4+GnH33q315qaz++zH9//yzz/85MiP/vGn4an//fVG/41py928+dv//u32o28vAAAAlKiu67pKH/OPp8/3va47BQDMRX79r5N8u3rh6s0F649arVarD2HdVk92u11ExGZ7neY9g8PxAHDIbMYnXXeBDsm/aIOIONJ1J4CFVnXdAQ7E3Xu31quUb9V+PVjbac/nguzJf7Pavb5j2nSW8XNM5vX42op+PDelPytz6sMiyfn3xvO/tNM+SssddP7zMi3/0c6lT8XJ+ffH8x/z9OTfm5h/qXL+g4fKvy9/AAAAAABYYPnv/8c6Pv679Pibsi8POv67Nqc+AAAAAAAAAMCT9rjj/+2qjP8HAAAAi6r5rN743dH7t037Lrbm9otVxDNjywOFSRfLrHbdDwAAAAAAAAAAAAAoyWDnHN6LVcQwIp5ZXa3ruvlpG68f1uOuf9iVvv1Qsq6f5AEAYMfHR8eu5a8iliPiYvquv+Hq6mpdL6+s1qv1ylJ+PztaWq5XWp9r87S5bWm0jzfEg1Hd/LLl1nptsz4vz2of/33NfY3q/j46Nh8dBg4AEbHzanTXK9JTpq6fja7f5XA4TNr/+908bHlC7P/sR9ePUwAAAODg1XVdV+nrvI+nY/69rjsFAMxFfv0fPy6gVqvVarX66avb6slut4uI2Gyv07xnMBw/ABwym/FJ112gQ/Iv2iAiXui6E8BCq7ruAAfi7r1b61XKt2q/HqTx3fO5IHvy36y218vrT5rOMn6OybweX1vRj+em9Of5OfVhkeT8e+P5X9ppH6XlDjr/eZmWf7OdxzroT9dy/v3x/Mc8Pfn3JuZfqpz/4KHy78sfAAAAAAAWWP77/7GFOv47etTNmelBx3/XDuxeAQAAAAAAAOBg3b13az1f95qP/39hwnKu/3w65fwr+Rcp598by/+rY8u1xwO+8/b9/P9z79b6H2/8+/N5ut/8l/JMlR5ZVXpEVOmeqkGaPs7WfdbWsD9q7mlY9fqDdM5PPXw3rsTV2IjTe5btpf+P++1n9rQ3PR1ut9f9nfaze9oHu+15/XN72ofpTKd6JbefjPX4eVyNd7bbm7alGdu/PKO9ntGe8+/b/4uU8x+0fpr8V1N7NTZt3Pmo95n9vj2ddD9vXfnib04f/ObMtBX93W1ra7bvpQ76s/1/cmQUv7y+ce3kzcs3blw7E2my59azkSZPWM5/mH52n/9f3mnPz/vt/fXOR6OHzn9RbMVgav4vt+ab7X1lzn3rQs5/lH5y/u+k9sn7/2HOf/r+/2oH/QEAAAAAAAAAAAAAAIAHqet6+xLRtyLifLr+p6trMwGA+cqv/3WSb59X3X/U9f+8dzu66r9aPee6WrD+zLX+tF6s/qjVh7Fuqyd7s11ExN/b6zTvGX496ZcBAIvs04j4V9edoDPyL1j+vr9meqLrzgBzdf2DD396+erVjWvXu+4JAAAAAAAAAPCo8vifa63xn0/UdX17bLk947++HWuPO/7nIM/sDjA6ZaDq/sNv04Ns9Ub9Xmu48Rdj2vjfw925B43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzExFxfGz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/WHOv7cn/1M33v/FqesffPjalfcvv7fx3sbPzp05c/rc+fMXLlw49e6Vqxund/7tsMcHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/MtXyL0vO/1Sq95n/ykH3i/nI+ecjXPb/suT885kN8i9Lzv9squVflpz/uVTLvyw5/9dTLf+y5Py/kWr5lyXnfz7V8i9Lzv+bqZZ/WXL+F1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl/vf/mzFjxkye6fqZCQAAAAAAAAAAAAAYN4/TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIddb3Az+zb147kBgI+Tv5m7B2jDHOJrt+iV9oXUx4bXgrCaHQF2zXuzYLfsNrl0Cj2lGgRMKoqKJtuGgLCLW5qbAqLmgFKBeoVaVKpL2gN4gKlYuoCiggVaIVZKuZ8zzPzszOzqy9482Zcz4fify8M2fmnDnzzOx+bb47AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GzLm2Y/U8uyrFar5RdszLKX1Of6iY2NS17/4h4fAAAAsHq/bPz3+VvSBYdXcKOmbf7pzu9+fWFhYSH7wPCfjn5hYSFdMZFlo+uyrHFddPWHH6w1bxM8no3Xhpq+Huqx++Ee14/0uH60x/VjPa5f1+P68R7XLzkBS6zPaunOtjX+uDE/pdmt2Wjjum0dbvV4bd1Q/dyl22a1xm0WRk9kc9mpbDabbtk+37bW2P6bW+r7ensW9zXUtK/N9RXy00ePx2OohXO8rWVfi/cZ/fiN2cTPfvro8b++8NztnWbP09Byf/lx7thaP85PhUvyY61l69I5icc51HScmzs8J8Mtx1lr3K7+5/bjfH6Fxzm8eJhrqv05H8+GGn9+pnGeRmpZh/O0OVz287uyLLu8eNjt2yzZVzaUbWi5ZGjx+RnPV2T9PupL6eXZyDWt0y0rWKf1ObOtdZ22vybi878l3G5kmWNofpp+/NhY0/P+i4XrWadR/VEv91ppX4P9fq0UZQ3GdfFM40E/0XENbguP/9Hty6/BjmunwxpMj7tpDW7ttQaHxoYbx5yehFrjNotrcFfL9sONPdUa89nt3dfg1IXT56bmP/HJe+ZOHzs5e3L2zJ5du6b37Nt34MCBqRNzp2an8/9e59kuvg3ZUHoNbA3nLr4GXtu2bfNSXfjy2JL33+t9HY53eR1ubNu236/DkfYHV1ubF+TSNZ2/Nt5XP+njV4ayZV5jjedn5+pfh+lxN70OR5pehx2/p3R4HY6s4HVY3+bczpX9zDLS9L9Ox7D894LVrcGNTWuw/eeR9jXY759HirIGx8O6+P7O5b8XbA7H+8Tktf48MrxkDaaHG9576pekn/fHDzRGp3V5R/2Km8ayi/Oz5+995NiFC+d3ZWGsiVc0rZX29bqh6TFlS9br0DWv18Nzdz5xR4fLN4ZzNX5P/T/jyz5X9W323tv9uWp8d+t8Plsu3Z2F0WdrfT47fTevn8+xLPvidx578FuPfvFNy57Pet781NTqfxZPubTp/Xd0mfffmPtfyPeX7urx4dGR/PU7nM7OaMv7cetTNdJ476o19v381Mrej0fD/9b6/fjWLu/Hm9q27ff78Wj7g4vvx7Vef9uxOu3P53hYJ6emu78f17fZtPta1+RI1/fju8KshfP/upAUUi5qWjvLrdu0r5GR0fC4RuIeWtfpnpbt43qr7+up3de3Tnfcld/XcHp0i9ZqnU60bdvvdZr+7mu5dVrr9bdv16f9+RwP6+LWPd3XaX2bp/eu/r1zffxj03vnWK81ODo8Vj/m0bQIG+/32cL6uAbvzY5nZ7NT2Uzj2rHGeqo19jV538rW4Fj431q/V27qsgZ3tG3b7zWYvo8tt/ZqI0sffB+0P5/jYV08eV/3NVjf5s37+/uz645wSdqm6WfX9r9fW+7vvO5oO003aq2MhOP8zv7ufzdb3+bUgWvNmd3P093hkps6nKf21+9yr6mZbG3O06ZwnM8dWP481Y+nvs0XDq5wPR3OsuzSx+5v/H1v+PeVv7v4va+3/LtLp3/TufSx+3/y0hP/eC3HD8DgeyEfG/LvdU3/MrWSf/8HAAAABkLM/UNhJvI/AAAAlEbM/fH/FZ7I/wAAAFAaMfePhJlUJP9vevNzcy9cylIzfyGI16fT8EC+Xey4ToevJxYW1S+//6uz//0Pl1a276Esy37xwB903H7TA/G4chPhOK++pfXyJb5+z4r2ffThS2m/zf31L4X7j49npcugUwV3Osuyb97yucZ+Jj54pTGffuBoYz54+YnH69s8fzD/Ot7+2Vfk2/9FKP8ePnGs5fbPhvPwozCn39H5fMTbfe3K6zbvf//i/uLtaltvbjzsJz+U32/8PTmffzzfPp7n5Y7/W5996mv17R95TefjvzTU+fifCvf71TD/51X59s3PQf3reLtPh+OP+4u3u/cr3+54/Fc/k29/7q35dkfDjPvfEb7e9tbn5prP1yO1Yy2PK3tbvl3c//T3/rhxfby/eP/txz9+5ErL+WhfH0//W34/U23bx8vjfqK/b9t//X6a12fc/1N/dLTlPPfa/9UHn31V/X7b939323bnPrazsf/F+2v9jU1/+enPddxfPJ7Df3uu5fEcfm94HYf9P/mhsB7D9f97Nb+/9t+ucPS9re8/cfsvbbzU8niit/8s3//VN5xszHXj6zfc9JKX3nz51fVzl2XPrMvvr9f+T/7V2Zbj//Jt+fmI18eOfvv+lxP3f/7jk2fOzl+cm0ln9dFbGr8755358cTjvSW8t7Z/feTshQ/Pnp+YnpjOsony/gq96/aVMH+Sj8vdt15Y8g668+HwfN7x59/csP1fPxsv//f35ZdfeUf+feu1YbvPh8s3hufv2va/1JNbbmu8vmtPhyNcWPr7gldj87b/OrCiDcPjb/+5IK73c6/8cOM81K9rfN+Ir+tVHv8PZvL7+UY4rwvhNzNvvW1xf83bx9+NcOWh/PW+6vMX3ubi8/o34fl+14/y+4/HFR/vD8LPMd/e1Pp+F9fHNy4Ntd9/47d4XA7vJ9nl/Pq4VTzfV56/rePhxd9Dkl2+vfH1n6T7uf2aHuZy5j8xP3Vq7szFR6YuzM5fmJr/xCePnD578cyFI43f5XnkI71uv/j+tKHx/jQzu29v1ni3OpuPG+zFPv5zDx+f2T+9fWb2xLGLJy48fG72/Mnj8/PHZ2fmtx87cWL2471uPzdzaNfug3v27548OTdz6MDBg3sOTs6dOVs/jPygetg3/dHJM+ePNG4yf2jvwV333bd3evL02ZnZQ/unpycv9rp943vTZP3Wvz95fvbUsQtzp2cn5+c+OXto18F9+3b3/G2Ap8+dmJ+YOn/xzNTF+dnzU/ljmbjQuLj+va/X7Smn+f/If55tV8t/EV/2nrv3pd/PWvfVx5a9q3yTtl8g+lz4XTT//LJzB1bydcz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/i9d/3/TpRXtX/9f/7/5fOn/V6z//1DR+v/5+4X+f3+stn+v/x/o/+v/6//r/+v/0wdF6//H3L8+yyqZ/wEAAKAKYu7fEGYi/wMAAEBpxNx/U5iJ/A8AAAClEXP/S8JMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+/1RWrf7/5X4ev/6//j9LFa3/H3P/S8NMKpL/AQAAoApi7r85zET+BwAAgNKIuf+WMBP5HwAAAEoj5v6NYSYVyf/6//r/+v/6//r/nfev/z+Y9P+70//vQf/f5//r/+v/01dF6//H3P+yMJOK5H8AAACogpj7Xx5mIv8DAABA8Yxc381i7n9FmMmS/H+dOwAAAABedDH335q1FcEr8u//+v/6/8Xv/69L1+n/6/9nhez/D2f6/8Wh/9+d/n8P+v/6//r/+v/0VdH6/43cn41nrwwzqUj+BwAAgCqIuf+2MBP5HwAAAEoj5v7/F2Yi/wMAAEBpxNy/KcykIvlf/1//v/j9f5//r/9f9P6/z/8vEv3/7vT/e9D/1//X/9f/p6+K1v+Puf/2MJOK5H8AAACogpj77wgzkf8BAACgNGLu//9hJvI/AAAAlEbM/ZvDTCqS//X/C97/j81R/X/9f/1//X/9/xXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/+dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu6fCDOpSP7X/y94/z/vwY/5/H/9f/1//X/9/5XR/+9O/78H/X/9/770/xcu6f/r/5MrWv8/5v4tYSYVyf8AAABQBTH3bw0zkf8BAACgNGLuvyvMRP4HAACA0oi5f1uYSUXyv/7/QPT/M/1//X/9f/1//f+V0f/vTv+/B/1//X+f/6//T18Vrf8fc/9rwkwqkv8BAACgCmLu3x5mIv8DAABAacTc/9owE/kfAAAASiPm/h1hJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+14WZVCT/AwAAQBXE3L8zzET+BwAAgNKIuf/uMBP5HwAAAEoj5v7JMJOK5H/9f/1//X/9f/3/zvvX/x9M+v/d6f/3oP/fr/78sP6//r/+P1kB+/8x998TZlKR/A8AAABVEHP/vWEm8j8AAACURsz9U2Em8j8AAACURsz902EmFcn/+v/6/6vu/zc9eP3/CvT/X714v/r/Of3/YtH/707/v4f+9f9Hsmr3/33+/3X3/0f1/ymVovX/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/j1hJvI/AAAAlEbM/XvDTCqS//X/9f99/r/+v8//77x//f/BpP/fXf/7//Eh6v/7/H/9f5//r//PUkXr/8fcf1+YSUXyPwAAAFRBzP37wkzkfwAAACiNmPv3h5nI/wAAAFAaMfcfCDOpSP7X/9f/1//X/9f/77x//f/BpP/fXdU//39jrwPQ/9f/1//X/2eVHvrD5q+K1v+Puf9gmElF8j8AAABUQcz9rw8zkf8BAACgNGLu/5UwE/kfAAAASiPm/l8NMylL/u/RPNT/1//X/9f/1//vvH/9/8Gk/99d1fv/Pen/6//r/+v/01dF6//H3H8ozKQs+R8AAABIuf/XwkzkfwAAACiNmPvfEGYi/wMAAEBpxNx/OMykIvlf/1//X/9f/1//v/P+17r/PxbvV/9/VfT/u9P/70H/X/9f/1//n74qWv8/5v43hplUJP8DAABAFcTcf3+YifwPAAAApRFz/5vCTOR/AAAAKI2Y+98cZlKR/K//r/+v/6//r//fef8+/38w6f93txb9/2H9f/1//X/9f/1/gqL1/2Puf0uYSUXyPwAAAFRBzP1vDTOR/wEAAKA0Yu5/W5iJ/A8AAAClEXP/28NMKpL/9f/1//X/9f/1/zvvX/9/MOn/d+fz/3vQ/9f/1//X/6evitb/j7n/18NMKpL/AQAAoApi7n8gzET+BwAAgNKIuf8dYSbyPwAAAJRGzP3vDDOpSP7X/9f/1//X/9f/77x//f/BpP/f3YD1/395c7hc/z+n/1/s47/W/v9I29c3pP//w+X6/wvr2m+v/8+NULT+f8z97wozqUj+BwAAgCqIuf/dYSbyPwAAAJRGzP3vCTOR/wEAAKA0Yu7/jTCTiuR//f/6cSy2l/X/y9r/H9L/1//X/68I/f/uBqz/7/P/2+j/F/v4ff6//j9LFa3/H3P/e8NMKpL/AQAAoApi7n8wzET+BwAAgNKIuf+hMBP5HwAAAEoj5v73hZlUJP/r//v8/2r0/33+f6b/r/9fEfr/3en/96D/r/9ftP7/f+r/M9iK1v+Puf/hMJOK5H8AAACogpj73x9mIv8DAABAacTc/5thJvI/AAAAlEbM/R8IM6lI/tf/H5T+/8SA9v8f0/+/gf3/O2/Ot9P/1/9nkf5/d/r/Pej/6/8Xrf/v8/8ZcEXr/8fc/8Ewk5Xn//EVbwkAAAC8KGLu/60wk4r8+z8AAABUQcz9vx1mIv8DAABAacTc/zthJhXJ//r/N6T/3/jS5//7/P/29eHz//X/9f9vvLXr/8d3Hv1//X/9/0j/v0D9/4v6/xRD0fr/Mff/bphJRfI/AAAAVEHM/R8KM5H/AQAAYCB0+ky2djH3Hwkzkf8BAACgNGLuPxpmUpH8r/8/KJ//r/+fVa3//2db/+X733330V36//r/+v/XZE0//7/+4vf5//r/+v+J/n+B+v8+/5+CKFr/P+b+Y2EmFcn/AAAAUAUx9/9emIn8DwAAAKURc//xMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f+C9v8H+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vX+yJ6/9fa/9/rOOl+v/6/4N8/Pr/+v8sVbT+f8z9s2EmFcn/AAAAUAUh9w+dyOfiFfI/AAAAlEbM/SfDTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuLz/4sq9e9/3nih6P+3KU7/vzP9f/3/QT5+/X/9f5YqWv8/5v65MJOK5H8AAACogpj7PxJmIv8DAABAacTc/9EwE/kfAAAASiPm/lNhJhXJ//r/+v/6//r/+v+d91/Yz//X/+9qtf17/f9A/1//X/9f/1//nz4oWv8/5v7TYSYVyf8AAABQBTH3nwkzkf8B/o+9O2myqz7vOH47SKVWwSK7LLJJVZZ5CSySdfICssgmi6QqlUVIQhIyIzKPJNjGs43B84AHMBhjGzwP4Akbz2Abz/OAJ4xNyUX38zxS3z59bnfrdvc5///ns+CJOjT3Qqkk/dT6+gAAQDNy918Vt9j/AAAA0Izc/X8at3Sy//X/+v9m+//f1P/v9fr6f/1/y/T/4/T/K+j/9f/6f/0/azW1/j93/5/FLZ3sfwAAAOhB7v4/j1vsfwAAAGhG7v6r4xb7HwAAAJqRu/8v4pZO9v9S/7+xmFj/n33tEff/+TL6/5b6f8//3/P19f/6/5Ydb/9/3ZM/8un/9f/6/6D/31f/f2avz9f/06Kp9f+5+/8ybulk/wMAAEAPcvf/Vdxi/wMAAEAzcvdfE7fY/wAAANCM3P1/Hbd0sv/X9/z/s1sf9/z/C/T/+v/l7x/6f/2//v/oef7/uJ76/6sfvPxPHr3zV+86yOvr//X/nv+v/2e9ptb/5+7/m7ilk/0PAAAAPcjd/7dxi/0PAAAAzcjd/3dxi/0PAAAAzcjd//dxSyf7f339/9E8/z/p//X/C/2//n/p30f/r/8fov8fN/X+/7Tn/+v/Z/z+9f/6f3abWv+fu/8f4pZO9j8AAAD0IHf/P8Yt9j8AAAA0I3f/tXGL/Q8AAADNyN1/Lm7pZP/r/4++/39C/6//j6v/1//r/4+e/n/c1Pv/dT7//zCvr//X/+v/9f+s19T6/9z918Utnex/AAAA6EHu/n+KW+x/AAAAaEbu/n+OW+x/AAAAaEbu/n+JWzrZ//p/z//X/+v/9f/Dr6//nyf9/zj9/wr6/0vt50/r//X/+n8udsD+//GRH7bX0v/n7v/XuKWT/Q8AAAA9yN3/b3GL/Q8AAADNyN3/73GL/Q8AAADNyN3/H3FLJ/tf/6//1//r/w/d/+/+rrdF/z9M/3889P/jJtP/b5wa/HC3/f9j22+0gf7f8//1//p/dpja8/9z9/9n3NLJ/gcAAIAe5O7/r7hlZP8f+DfzAQAAgBOVu/+/4xZf/wcAAIDZy+osd///xC2d7H/9v/5f/6//9/z/4dcf6//vuuj96f+nRf8/bjL9/x667f8XF96v/n++71//r/9nt6n1/7n7/zdu6WT/AwAAQA9y918ft9j/AAAA0Izc/f8Xt9j/AAAA0Izc/f8ft3Sy/4f7/wv/f/3//uj/d75//f/w94919f/5T9T/j/b/v+X5/33S/487/v7/jP5/5z9f/3+ETvr9N97/n131+fp/hkyt/8/df0Pc0sn+BwAAgB7k7n9K3GL/AwAAQDNy9z81brH/AQAAoBm5+58Wt3Sy/z3/X/+v/59f/7/8/P+k/992HM//Xxx7/39K/79P+v9xnv+/gv5f/6//9/x/1mpq/X/u/hvjlk72PwAAAPTgxscWW7v/6YuF/Q8AAABzdPGfHVj+A6Uhd/8z4hb7HwAAAJqRu/+ZcUsn+1//r//X/8+///f8/x76f8//3y/9/zj9/wr6/6Po50811v/ftNfnT6H/v1b/z8Ts6P/vufDxk+r/c/c/K27pZP8DAABAD3L3Pztusf8BAACgGbn7nxO32P8AAADQjNz9z41bOtn/R97/n937tfX/+n/9v/5f/6//Xzf9/zj9/wr6f8//9/x//T9rtaP/v8hJ9f+5+58Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P03xS32PwAAADQjd/8L4pZO9r/n/+v/9f/6f/3/8Ovr/+dJ/z9O/7+C/l//r//X/7NWU+v/c/ffHLd0sv8BAACgB7n7b4lb7H8AAABoRu7+F8Yt9j8AAAA0I3f/i+KWTva//v9o+//8uP5f/7/Q/+v/9f/Hotv+f2PoZ6Ld9uj/7/+jc7+z8yP6f/2//l//r/9nDSbR/5+/8KvL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/y+KWA+7/X17ruzo++n/P/9f/6//1/8Ovr/+fp9n1/6d3ftPz//X/+v/5vn/9v/6f3SbR/1/07dz9L49bfP0fAAAAmpG7/xVxi/0PAAAAzcjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrH7b/31wM0/8fj9n1/0v0//p//f9837/+X//PblPr/3P33xq3dLL/AQAAoAe5+18dt9j/AAAA0Izc/a+JW+x/AAAAaEbu/tfGLZ3sf/2//l//r//X/w+/vuf/z5P+f5z+f7FY3DbyBob6//Nn9P/6f/2//p9Dmlr/n7v/dXFLJ/sfAAAAepC7/7a4xf4HAACAZuTuvz1usf8BAACgGbn7Xx+3dLL/9f/6f/2//l//P/z6+v950v+P0/+v4Pn/+n/9v/6ftZpa/5+7/464pZP9DwAAAD3I3X9n3GL/AwAAQDNy978hbrH/AQAAoBm5+++KWzrZ//p//b/+X/9/JP3/Of3/Mv3/8Ti6/n+h/9f/6/9X0P/r//X/LDuu/v/x+PF+Vf+fu/+NcUsn+x8AAAB6kLv/7rjF/gcAAIBm5O5/U9xi/wMAAEAzcve/OW7pZP/r//X/+n/9v+f/D7++/n+ePP9/nP5/Bf2//l//r/9nrY6r/9+r91/+du7+t8Qtnex/AAAA6EHu/nviFvsfAAAAmpG7/964xf4HAACAZuTuf2vc0sn+1//r/3f2/4uF/l//r//fdgz9/+ZC/792+v9x+v8V9P9t9v+/tGio/z+75+fr/5miqfX/ufvfFrd0sv8BAACgB7n73x632P8AAADQjNz974hb7H8AAABoRu7+d8YtLe3/J/ZO3+bf/59Z+kT9/2KxeOgaz//X/4+8vv5/Mv1//VfV/6+P/n+c/n8F/X+b/b/n/+v/OTFT6/9z978rbmlp/wMAAEDncve/O26x/wEAAKAZufvfE7fY/wAAANCM3P3vjVs62f/z7/+XP1H/v7ik5//r/7c+oP/X/+v/Z+tS+/ubN+PnNP2//l//P9jPb+zx656F/l//r/9nwNT6/9z974tbOtn/AAAA0IPc/ffFLfY/AAAANCN3//1xi/0PAAAAzcjd//64pZP9r//X/+v/59n/b+r/9f/6/0F79vdX7O/z1/X8/yuv/O0H9P/6/xb7/zH6f/2//p9lU+v/c/d/IG7pZP8DAABAD3L3fzBusf8BAACgGbn7PxS32P8AAADQjNz9H45bOtn/u/v/04vtQnXbUP8fjZr+/yL6/53vX/8//P3D8//1//r/o3epz99fV//v+f+He//6f/3/nN//gfr/X9v9+fp/WjS1/j93/wNxy8jw2/stAQAAAFOUu/8jcUsnX/8HAACAHuTu/2jcYv8DAABAM3L3Pxi3dLL/Pf9f/6//1//r/4dfX/8/T/r/cfr/FfT/+n/P/7/qDy7T/7M+U+v/c/d/LG7ZGn6/fsUh/zUBAACACcnd//G4pZOv/wMAAEAPcvd/Im6x/wEAAKAZufs/Gbd0sv/1//p//b/+X/8//Pr6/3nS/4/T/6/QT/+/OfTBk+7nL9VJv/9m+n/P/2eNptb/5+7/VNzSyf4HAACAHuTu/3TcYv8DAABAM3L3fyZusf8BAACgGbn7H4pbOtn/+n/9f/v9/+/r/5deX/+v/2+Z/j9/Rh+m/1+hn/5/0En383N///r/sf7/4D8e0oap9f+5+x+OWzrZ/wAAANCD3P2fjVvsfwAAAGhG7v7PxS32PwAAADQjd//n45ZO9r/+v6/+f2PRY//v+f/6f/1/T+bT/99yauijnv+v/9f/z/f96/89/5/dptb/5+5/ZONUl/sfAAAA5up3f+OPH97v3/vI1l83F1+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/71//p/dpta/5+7/8txy0XDb/B/oAcAAACYjdz9X4lbOvn6PwAAAPQgd/9X45Zd+//8Pv9UOwAAADA1ufu/Frd08vV//f/E+//FEfX/8ffp/7fp//X/Q6+v/58n/f+4S+z/z2/o//X/I/T/+n/9P8um1v/n7r/7jkWX+x8AAAAateN3FL6+9dfNxTfiFvsfAAAAmpG7/5txi/0PAAAAzcjd/624pZP9r/+feP9/qOf/n63/y/P/O+//r98cfH39v/6/Zfr/cZ7/v4L+X/+v/9f/s1YH6P+3BulR9/+5+78dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9/wn0/zecWSyOtP/fx/P/9f999P97vH47/f+vXH7uvt/7w9tv1f9zwXH2//l9Qf+v/9f/b9P/6//1/yyb2vP/c/d/P27pZP8DAABAD3L3Pxq32P8AAADQjNz9P4hbntz/957UuwIAAADWKXf/D+OWTr7+r/9v8fn/8+z/87/1CfT/5+bX/2dT3Hv/7/n/+v/dPP9/nP5/Bf2//l//r/9nrabW/+fu/1Hc0sn+BwAAgB7k7v9x3JL7f+PAv3UPAAAATEzu/p/ELb7+DwAAAM3I3f9Y3NLJ/tf/6/8P2/+f9fx/z//X/2/R/0+L/n+c/n8F/b/+X/+v/2etptb/5+7/adzSyf4HAACAHuTufzxusf8BAACgGbn7fxa32P8AAADQjNz9P49bOtn/+n/9/1Se/5/0/xc+T/+/Tf+v/z8I/f+4g/T/lw38ukD/r/8fo//X/+v/WTa1/j93/y8CAAD//zJLcR4=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.310628345s ago: executing program 1 (id=1817): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000002340), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 1.239908709s ago: executing program 4 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x200}) 1.062582351s ago: executing program 1 (id=1819): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0xd, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8000) 1.002162605s ago: executing program 4 (id=1820): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x100, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x4, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010102, 0x4d6, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 808.724448ms ago: executing program 1 (id=1821): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) poll(&(0x7f0000000380)=[{r0, 0x1200}], 0x1, 0x60000000) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 332.702279ms ago: executing program 3 (id=1822): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/132, 0x84}], 0x1, 0x7, 0x0) 314.16312ms ago: executing program 0 (id=1832): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x40000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ] hub 3-1:0.0: USB hub found [ 196.544112][ T7008] XFS (loop0): Quotacheck: Done. [ 196.557818][ T7019] loop4: detected capacity change from 0 to 32768 [ 196.574466][ T7019] XFS: ikeep mount option is deprecated. [ 196.632852][ T7019] XFS (loop4): Mounting V5 Filesystem [ 196.681568][ T5389] hub 3-1:0.0: 1 port detected [ 196.785621][ T7019] XFS (loop4): Ending clean mount [ 196.804646][ T4276] XFS (loop0): Unmounting Filesystem [ 196.805285][ T7019] XFS (loop4): Quotacheck needed: Please wait. [ 196.893573][ T5389] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 196.934338][ T5389] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 196.997108][ T5389] usbhid 3-1:0.0: can't add hid device: -71 [ 197.003180][ T5389] usbhid: probe of 3-1:0.0 failed with error -71 [ 197.095372][ T7019] XFS (loop4): Quotacheck: Done. [ 197.131163][ T5389] usb 3-1: USB disconnect, device number 10 [ 197.269699][ T7036] loop3: detected capacity change from 0 to 32768 [ 197.480501][ T4269] XFS (loop4): Unmounting Filesystem [ 197.856632][ T7067] loop1: detected capacity change from 0 to 256 [ 197.912170][ T7067] FAT-fs (loop1): Directory bread(block 64) failed [ 197.949067][ T7067] FAT-fs (loop1): Directory bread(block 65) failed [ 197.969400][ T7067] FAT-fs (loop1): Directory bread(block 66) failed [ 198.000396][ T7067] FAT-fs (loop1): Directory bread(block 67) failed [ 198.054122][ T7067] FAT-fs (loop1): Directory bread(block 68) failed [ 198.081671][ T7067] FAT-fs (loop1): Directory bread(block 69) failed [ 198.112362][ T7067] FAT-fs (loop1): Directory bread(block 70) failed [ 198.175548][ T7067] FAT-fs (loop1): Directory bread(block 71) failed [ 198.195347][ T7067] FAT-fs (loop1): Directory bread(block 72) failed [ 198.201961][ T7067] FAT-fs (loop1): Directory bread(block 73) failed [ 198.628492][ T7085] loop3: detected capacity change from 0 to 1024 [ 199.005177][ T5018] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.226441][ T5018] usb 3-1: Using ep0 maxpacket: 8 [ 199.248533][ T5018] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.322620][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 199.331987][ T5018] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.332024][ T5018] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.332049][ T5018] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.332091][ T5018] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.332116][ T5018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.427867][ T7079] loop0: detected capacity change from 0 to 32768 [ 199.470823][ T7107] loop3: detected capacity change from 0 to 1024 [ 199.535484][ T7107] EXT4-fs: Ignoring removed nobh option [ 199.554313][ T5018] usb 3-1: GET_CAPABILITIES returned 0 [ 199.557254][ T7079] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 199.557254][ T7079] [ 199.562780][ T5018] usbtmc 3-1:16.0: can't read capabilities [ 199.577600][ T7107] EXT4-fs: Ignoring removed bh option [ 199.596433][ T7107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.645070][ T7079] ERROR: (device loop0): remounting filesystem as read-only [ 199.665361][ T7107] EXT4-fs warning (device loop3): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 199.665361][ T7107] [ 199.805946][ T5018] usb 3-1: USB disconnect, device number 11 [ 199.831836][ T107] blkno = 8ed2c, nblocks = 1 [ 199.855188][ T107] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 199.855188][ T107] [ 200.123537][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 200.261989][ T7123] loop4: detected capacity change from 0 to 2048 [ 200.397020][ T7128] device wlan0 entered promiscuous mode [ 200.427756][ T7128] device macsec1 entered promiscuous mode [ 200.852939][ T7139] loop2: detected capacity change from 0 to 1024 [ 201.010310][ T7139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.048177][ T7139] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #11: comm syz.2.1003: directory missing '..' [ 201.159139][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 201.173480][ T27] audit: type=1326 audit(1759882533.153:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.335542][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.341647][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 201.346524][ T27] audit: type=1326 audit(1759882533.153:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.348406][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 201.370190][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.464735][ T27] audit: type=1326 audit(1759882533.153:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.499841][ T27] audit: type=1326 audit(1759882533.153:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.555321][ T27] audit: type=1326 audit(1759882533.153:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.605369][ T27] audit: type=1326 audit(1759882533.153:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.634594][ T27] audit: type=1326 audit(1759882533.153:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.657143][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.672772][ T7164] loop2: detected capacity change from 0 to 47 [ 201.703525][ T27] audit: type=1326 audit(1759882533.153:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.735319][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.739292][ T27] audit: type=1326 audit(1759882533.153:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.827300][ T27] audit: type=1326 audit(1759882533.153:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d8eec9 code=0x7ffc0000 [ 201.885375][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 201.907629][ T22] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.933506][ T22] usb 5-1: config 0 has no interface number 0 [ 201.941031][ T26] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.963059][ T26] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.984262][ T22] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 202.010448][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.021570][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.040994][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.054212][ T22] usb 5-1: Product: syz [ 202.063103][ T22] usb 5-1: Manufacturer: syz [ 202.076193][ T7172] tap0: tun_chr_ioctl cmd 1074025677 [ 202.080586][ T22] usb 5-1: SerialNumber: syz [ 202.092901][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.095510][ T7172] tap0: linktype set to 823 [ 202.120632][ T22] usb 5-1: config 0 descriptor?? [ 202.141593][ T22] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 202.145546][ T7174] loop0: detected capacity change from 0 to 64 [ 202.157257][ T26] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.182567][ T26] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.189856][ T7174] hfs: unable to locate alternate MDB [ 202.193683][ T22] usb 5-1: selecting invalid altsetting 1 [ 202.211935][ T26] usb 4-1: Product: syz [ 202.215308][ T7174] hfs: continuing without an alternate MDB [ 202.219113][ T22] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 202.237536][ T26] usb 4-1: Manufacturer: syz [ 202.238123][ T7174] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 202.264639][ T26] cdc_wdm 4-1:1.0: skipping garbage [ 202.271355][ T22] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.285692][ T26] cdc_wdm 4-1:1.0: skipping garbage [ 202.299395][ T22] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 202.310824][ T26] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 202.323034][ T26] cdc_wdm 4-1:1.0: Unknown control protocol [ 202.330192][ T22] usb 5-1: media controller created [ 202.410889][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.461920][ T7177] loop2: detected capacity change from 0 to 128 [ 202.515284][ T7177] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 202.544600][ T26] usb 4-1: USB disconnect, device number 8 [ 202.605483][ T22] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 202.622175][ T7177] hpfs: filesystem error: improperly stopped [ 202.643332][ T22] zl10353_read_register: readreg error (reg=127, ret==-71) [ 202.645392][ T7177] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 202.671558][ T22] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 202.713509][ T7177] hpfs: You really don't want any checks? You are crazy... [ 202.742041][ T7177] hpfs: hpfs_map_sector(): read error [ 202.758790][ T7177] hpfs: code page support is disabled [ 202.764754][ T7177] hpfs: hpfs_map_4sectors(): unaligned read [ 202.774129][ T7177] hpfs: hpfs_map_4sectors(): unaligned read [ 202.774127][ T22] usb 5-1: USB disconnect, device number 8 [ 202.801391][ T7177] hpfs: filesystem error: unable to find root dir [ 203.184762][ T7190] loop3: detected capacity change from 0 to 128 [ 203.244925][ T7190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 203.333755][ T7190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.887241][ T7204] loop3: detected capacity change from 0 to 2048 [ 204.505378][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.714686][ T26] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.724007][ T26] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 204.744351][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.753606][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 204.775582][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 204.844809][ T26] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.866277][ T26] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.874350][ T26] usb 1-1: Product: syz [ 204.879053][ T26] usb 1-1: Manufacturer: syz [ 204.910719][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 204.925482][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 204.965209][ T5389] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 204.970257][ T26] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 204.979432][ T26] cdc_wdm 1-1:1.0: Unknown control protocol [ 205.134574][ T7230] loop1: detected capacity change from 0 to 1024 [ 205.165251][ T5389] usb 4-1: Using ep0 maxpacket: 32 [ 205.170055][ T26] usb 1-1: USB disconnect, device number 13 [ 205.173314][ T5389] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.195650][ T5389] usb 4-1: config 0 has no interface number 0 [ 205.217158][ T5389] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 205.240823][ T5389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.262793][ T5389] usb 4-1: Product: syz [ 205.272928][ T5389] usb 4-1: Manufacturer: syz [ 205.290501][ T5389] usb 4-1: SerialNumber: syz [ 205.307899][ T7230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.331751][ T5389] usb 4-1: config 0 descriptor?? [ 205.394622][ T5389] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 205.435844][ T7230] EXT4-fs (loop1): shut down requested (2) [ 205.475750][ T5389] usb 4-1: selecting invalid altsetting 1 [ 205.481604][ T5389] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 205.553193][ T5389] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.567205][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 205.590778][ T5389] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 205.626753][ T5389] usb 4-1: media controller created [ 205.659959][ T5389] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.861825][ T5389] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 205.894615][ T5389] zl10353_read_register: readreg error (reg=127, ret==-71) [ 205.923553][ T5389] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 205.954093][ T7221] loop4: detected capacity change from 0 to 40427 [ 206.022231][ T7221] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 206.052821][ T5389] usb 4-1: USB disconnect, device number 9 [ 206.085987][ T7221] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 206.136416][ T7221] F2FS-fs (loop4): invalid crc value [ 206.216035][ T7221] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.416384][ T7221] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 206.433780][ T7221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.544239][ T7232] loop2: detected capacity change from 0 to 40427 [ 206.564201][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 206.564218][ T27] audit: type=1800 audit(1759882538.543:40): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1036" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 206.609604][ T7232] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 206.619848][ T7221] syz.4.1036: attempt to access beyond end of device [ 206.619848][ T7221] loop4: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 206.654967][ T7232] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.732993][ T7232] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.810622][ T4269] syz-executor: attempt to access beyond end of device [ 206.810622][ T4269] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.953514][ T7232] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 206.991459][ T7232] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.254011][ T4268] syz-executor: attempt to access beyond end of device [ 207.254011][ T4268] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 207.673504][ T7255] loop1: detected capacity change from 0 to 32768 [ 207.795278][ T7255] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 207.795278][ T7255] [ 207.865844][ T7255] ERROR: (device loop1): remounting filesystem as read-only [ 207.994301][ T7259] loop0: detected capacity change from 0 to 32768 [ 208.064294][ T106] blkno = 8ed2c, nblocks = 1 [ 208.098294][ T106] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 208.098294][ T106] [ 208.196399][ T7259] XFS (loop0): Mounting V5 Filesystem [ 208.205534][ T5389] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 208.264343][ T7259] XFS (loop0): Ending clean mount [ 208.278600][ T7259] XFS (loop0): Quotacheck needed: Please wait. [ 208.384749][ T7285] loop3: detected capacity change from 0 to 4096 [ 208.397020][ T5389] usb 3-1: Using ep0 maxpacket: 32 [ 208.399012][ T7285] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 208.408439][ T5389] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 208.445728][ T5389] usb 3-1: config 0 has no interface number 0 [ 208.457240][ T5389] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.471842][ T5389] usb 3-1: config 0 interface 85 has no altsetting 0 [ 208.482828][ T7259] XFS (loop0): Quotacheck: Done. [ 208.497294][ T5389] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 208.499006][ T7285] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 208.535305][ T5389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.545274][ T7285] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 208.561339][ T7287] loop4: detected capacity change from 0 to 1024 [ 208.576598][ T5389] usb 3-1: Product: syz [ 208.580904][ T5389] usb 3-1: Manufacturer: syz [ 208.597778][ T7259] XFS (loop0): User initiated shutdown received. [ 208.601088][ T7285] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 208.616499][ T5389] usb 3-1: SerialNumber: syz [ 208.623911][ T5389] usb 3-1: config 0 descriptor?? [ 208.626500][ T7259] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 208.645680][ T7259] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 208.668967][ T7287] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 208.678512][ T7285] ntfs: volume version 3.1. [ 208.717184][ T7287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 208.724832][ T7287] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.1060: Freeing blocks not in datazone - block = 0, count = 4096 [ 208.832421][ T7287] EXT4-fs (loop4): 1 orphan inode deleted [ 208.862440][ T4276] XFS (loop0): Unmounting Filesystem [ 208.873402][ T7287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.000857][ T4266] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 209.043556][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 209.257929][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 209.266539][ T5389] appletouch 3-1:0.85: Geyser mode initialized. [ 209.282118][ T5389] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 209.542999][ T5016] usb 3-1: USB disconnect, device number 12 [ 209.567723][ T5016] appletouch 3-1:0.85: input: appletouch disconnected [ 209.884418][ T7293] loop3: detected capacity change from 0 to 40427 [ 209.930419][ T7293] F2FS-fs (loop3): invalid crc value [ 209.975510][ T7293] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.995049][ T7306] loop0: detected capacity change from 0 to 512 [ 210.022104][ T7306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.151264][ T7306] EXT4-fs (loop0): 1 truncate cleaned up [ 210.157807][ T7293] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.165313][ T7306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.187701][ T7306] fscrypt (loop0, inode 18): Mutually exclusive encryption flags (0x0c) [ 210.245140][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 210.341884][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1067'. [ 210.512966][ T4266] syz-executor: attempt to access beyond end of device [ 210.512966][ T4266] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.006895][ T7326] block device autoloading is deprecated and will be removed. [ 211.018773][ T7330] loop1: detected capacity change from 0 to 512 [ 211.078137][ T7330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.183037][ T7330] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 211.191347][ T7330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 211.201319][ T7330] EXT4-fs (loop1): orphan cleanup on readonly fs [ 211.208856][ T7330] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 211.219525][ T7330] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 211.234653][ T7330] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 211.265304][ T7330] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1076: bg 0: block 40: padding at end of block bitmap is not set [ 211.307273][ T7330] EXT4-fs (loop1): Remounting filesystem read-only [ 211.324808][ T7330] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 211.385422][ T7330] EXT4-fs (loop1): Remounting filesystem read-only [ 211.402443][ T7330] EXT4-fs (loop1): 1 truncate cleaned up [ 211.418348][ T7330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.523499][ T7330] EXT4-fs (loop1): shut down requested (2) [ 211.603264][ T7339] loop2: detected capacity change from 0 to 1024 [ 211.676507][ T7322] loop4: detected capacity change from 0 to 32768 [ 211.677759][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 211.811850][ T7322] XFS (loop4): Mounting V5 Filesystem [ 211.901257][ T4268] hfsplus: bad catalog entry type [ 212.001204][ T7322] XFS (loop4): Ending clean mount [ 212.033216][ T7322] XFS (loop4): Quotacheck needed: Please wait. [ 212.122112][ T27] audit: type=1326 audit(1759882544.103:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.190417][ T27] audit: type=1326 audit(1759882544.103:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.242633][ T27] audit: type=1326 audit(1759882544.103:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.267229][ T27] audit: type=1326 audit(1759882544.103:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.281795][ T7358] loop0: detected capacity change from 0 to 128 [ 212.291072][ T27] audit: type=1326 audit(1759882544.133:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.331584][ T7322] XFS (loop4): Quotacheck: Done. [ 212.343376][ T27] audit: type=1326 audit(1759882544.133:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.383219][ T7358] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 212.384191][ T27] audit: type=1326 audit(1759882544.223:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.416526][ T7322] XFS (loop4): User initiated shutdown received. [ 212.422976][ T7322] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 212.466399][ T7322] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 212.493704][ T46] hfsplus: b-tree write err: -5, ino 4 [ 212.568983][ T27] audit: type=1326 audit(1759882544.223:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.669522][ T7361] loop3: detected capacity change from 0 to 1024 [ 212.683441][ T27] audit: type=1326 audit(1759882544.223:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.3.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f098eec9 code=0x7ffc0000 [ 212.737260][ T4269] XFS (loop4): Unmounting Filesystem [ 212.833035][ T4356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.130272][ T4356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.394601][ T4356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.574161][ T4356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.585042][ T5018] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.798884][ T5018] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.825222][ T5018] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.888875][ T5018] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 213.932092][ T5018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.963418][ T5018] usb 1-1: config 0 descriptor?? [ 214.085313][ T5356] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 214.109702][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.121983][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.135702][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.144955][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.153328][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.165467][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.214085][ T5018] usb 1-1: USB disconnect, device number 14 [ 214.298321][ T5356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.359424][ T5356] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.394377][ T5356] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 214.421011][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.436993][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.492796][ T5356] usb 4-1: config 0 descriptor?? [ 214.515719][ T5356] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 214.546099][ T5356] dvb-usb: bulk message failed: -22 (3/0) [ 214.574353][ T5356] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.590174][ T5356] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.610668][ T5356] usb 4-1: media controller created [ 214.636698][ T5356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.679452][ T5356] dvb-usb: bulk message failed: -22 (6/0) [ 214.709655][ T5356] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 214.774978][ T5356] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 214.793953][ T7378] loop1: detected capacity change from 0 to 32768 [ 214.841332][ T5356] dvb-usb: schedule remote query interval to 150 msecs. [ 214.888804][ T5356] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 215.003964][ T7378] XFS (loop1): Mounting V5 Filesystem [ 215.053106][ T5356] dvb-usb: bulk message failed: -22 (1/0) [ 215.072706][ T5356] dvb-usb: error while querying for an remote control event. [ 215.147972][ T7378] XFS (loop1): Ending clean mount [ 215.217975][ T7378] XFS (loop1): Quotacheck needed: Please wait. [ 215.279890][ T7378] XFS (loop1): Quotacheck: Done. [ 215.287435][ T5349] dvb-usb: bulk message failed: -22 (1/0) [ 215.293246][ T5349] dvb-usb: error while querying for an remote control event. [ 215.359618][ T5349] usb 4-1: USB disconnect, device number 10 [ 215.385200][ T5018] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 215.460717][ T5349] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 215.567655][ T4278] XFS (loop1): Unmounting Filesystem [ 215.576300][ T5018] usb 5-1: Using ep0 maxpacket: 8 [ 215.597439][ T5018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.619429][ T5018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.633341][ T5018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.652877][ T5018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.673879][ T5018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.684092][ T5018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.955815][ T5018] usb 5-1: GET_CAPABILITIES returned 0 [ 215.961418][ T5018] usbtmc 5-1:16.0: can't read capabilities [ 216.066541][ T7384] chnl_net:caif_netlink_parms(): no params data found [ 216.164635][ T5349] usb 5-1: USB disconnect, device number 9 [ 216.225480][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 216.332259][ T7422] loop3: detected capacity change from 0 to 4096 [ 216.340635][ T7422] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 216.399657][ T7422] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 216.431222][ T7422] ntfs3: loop3: Failed to load $Extend. [ 217.172610][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.215227][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.223725][ T7384] device bridge_slave_0 entered promiscuous mode [ 217.553099][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.564956][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.581528][ T7384] device bridge_slave_1 entered promiscuous mode [ 217.761352][ T4356] device hsr_slave_0 left promiscuous mode [ 217.811764][ T4356] device hsr_slave_1 left promiscuous mode [ 217.838198][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.856343][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.876871][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.927974][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.943824][ T4356] device bridge_slave_1 left promiscuous mode [ 217.961694][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.988246][ T7466] loop0: detected capacity change from 0 to 128 [ 218.022508][ T7444] loop1: detected capacity change from 0 to 32768 [ 218.023688][ T7466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.046091][ T4356] device bridge_slave_0 left promiscuous mode [ 218.074542][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.129714][ T7444] non-latin1 character 0x163 found in JFS file name [ 218.165056][ T7444] mount with iocharset=utf8 to access [ 218.259564][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 218.277959][ T4356] device veth1_macvtap left promiscuous mode [ 218.297555][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 218.398487][ T4356] device veth0_macvtap left promiscuous mode [ 218.404904][ T4356] device veth1_vlan left promiscuous mode [ 218.413777][ T4356] device veth0_vlan left promiscuous mode [ 218.735217][ T5349] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 218.951151][ T5349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 218.969071][ T4356] team0 (unregistering): Port device batadv1 removed [ 218.980964][ T5349] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 219.012974][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.051624][ T5349] usb 1-1: config 0 descriptor?? [ 219.078561][ T7474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.233480][ T7486] loop4: detected capacity change from 0 to 256 [ 219.283905][ T7486] FAT-fs (loop4): Directory bread(block 1285) failed [ 219.327253][ T7486] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 219.525868][ T5349] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 219.760728][ T5020] usb 1-1: USB disconnect, device number 15 [ 219.900469][ T7490] fido_id[7490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 219.946636][ T7482] loop3: detected capacity change from 0 to 32768 [ 220.092185][ T7482] XFS (loop3): Mounting V5 Filesystem [ 220.319664][ T7482] XFS (loop3): Ending clean mount [ 220.375406][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 220.564586][ T4266] XFS (loop3): Unmounting Filesystem [ 221.334879][ T4356] team0 (unregistering): Port device team_slave_1 removed [ 221.386465][ T7517] loop4: detected capacity change from 0 to 16 [ 221.405884][ T7517] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 221.475206][ T4385] udevd[4385]: incorrect cramfs checksum on /dev/loop4 [ 221.488912][ T4356] team0 (unregistering): Port device team_slave_0 removed [ 221.548263][ T4385] udevd[4385]: incorrect cramfs checksum on /dev/loop4 [ 221.666026][ T7524] loop4: detected capacity change from 0 to 8 [ 221.813673][ T4356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.024774][ T4356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.085507][ T5018] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 222.328178][ T5018] usb 4-1: Using ep0 maxpacket: 16 [ 222.357797][ T5018] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.370414][ T5018] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.382185][ T5018] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.389282][ T5018] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 222.398788][ T5018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.422666][ T5018] usb 4-1: config 0 descriptor?? [ 222.436588][ T7538] Falling back ldisc for ttyS3. [ 222.468745][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 222.879611][ T5018] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 222.888833][ T5018] nzxt-smart2 0003:1E71:2009.0008: item fetching failed at offset 2/5 [ 222.898088][ T5018] nzxt-smart2: probe of 0003:1E71:2009.0008 failed with error -22 [ 223.099849][ T26] usb 4-1: USB disconnect, device number 11 [ 223.135654][ T4356] bond0 (unregistering): Released all slaves [ 223.289667][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.345492][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.421481][ T7542] loop0: detected capacity change from 0 to 128 [ 223.434070][ T7542] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 223.470224][ T7544] loop4: detected capacity change from 0 to 256 [ 223.624167][ T7384] team0: Port device team_slave_0 added [ 223.714253][ T7384] team0: Port device team_slave_1 added [ 223.869330][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.885245][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.935287][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.012220][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.025180][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.055454][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.194216][ T7384] device hsr_slave_0 entered promiscuous mode [ 224.212500][ T7384] device hsr_slave_1 entered promiscuous mode [ 224.246200][ T7384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.264343][ T7384] Cannot create hsr debugfs directory [ 224.786231][ T7550] loop3: detected capacity change from 0 to 32768 [ 224.807028][ T7550] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1146 (7550) [ 224.870592][ T7550] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.887656][ T7384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.941273][ T7384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.005279][ T7550] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 225.009025][ T7384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.014071][ T7550] BTRFS info (device loop3): enabling auto defrag [ 225.014102][ T7550] BTRFS info (device loop3): doing ref verification [ 225.103954][ T7384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.142191][ T7550] BTRFS info (device loop3): use no compression [ 225.165171][ T7550] BTRFS info (device loop3): force clearing of disk cache [ 225.172476][ T7550] BTRFS info (device loop3): max_inline at 57 [ 225.225422][ T7550] BTRFS info (device loop3): disabling free space tree [ 225.312206][ T5389] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 225.515305][ T5389] usb 1-1: Using ep0 maxpacket: 16 [ 225.555570][ T7550] BTRFS info (device loop3): enabling ssd optimizations [ 225.608716][ T7550] BTRFS info (device loop3): rebuilding free space tree [ 225.621348][ T5389] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.642510][ T5389] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 225.672015][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.683242][ T5389] usb 1-1: can't read configurations, error -71 [ 225.700807][ T7550] BTRFS info (device loop3): disabling free space tree [ 225.720826][ T7550] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.743572][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.753495][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.766721][ T7550] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.778378][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.804371][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.818826][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.830123][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.837339][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.901420][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.922703][ T7572] loop4: detected capacity change from 0 to 32768 [ 225.956957][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.975796][ T7572] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 225.993019][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.016165][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.023852][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.081117][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.135836][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.161348][ T4266] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 226.209279][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.263533][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.360974][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1155'. [ 226.394083][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.401893][ T4385] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4385) [ 226.414659][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.446005][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.506300][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.527914][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.574105][ T4688] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 226.602900][ T7384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.639669][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.665025][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.694459][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.345381][ T5016] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 227.537522][ T5016] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.579199][ T5016] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.615260][ T5016] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.659865][ T5016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.727638][ T7626] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.985675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.007842][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.052427][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.145307][ T22] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 228.220354][ T4328] usb 1-1: USB disconnect, device number 18 [ 228.338108][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.358923][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 228.399386][ T22] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 228.419104][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.461836][ T22] usb 5-1: config 0 descriptor?? [ 228.499267][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 228.528644][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 228.575263][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 228.604590][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 228.632813][ T22] usb 5-1: media controller created [ 228.652800][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.694346][ T7648] dibusb: i2c wr: len=61 is too big! [ 228.694346][ T7648] [ 228.737313][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 228.743191][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 228.815387][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 228.880605][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 228.899870][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 228.952662][ T22] usb 5-1: USB disconnect, device number 10 [ 229.038364][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 229.119376][ T7650] loop1: detected capacity change from 0 to 32768 [ 229.225924][ T7650] XFS (loop1): Mounting V5 Filesystem [ 229.266729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.284102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.384991][ T7679] loop0: detected capacity change from 0 to 64 [ 229.420785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.488576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.524282][ T7650] XFS (loop1): Starting recovery (logdev: internal) [ 229.556966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.606321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.617952][ T7384] device veth0_vlan entered promiscuous mode [ 229.636756][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 229.687729][ T7650] XFS (loop1): Ending recovery (logdev: internal) [ 229.696754][ T7384] device veth1_vlan entered promiscuous mode [ 229.839440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.858052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.880002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.909859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.942822][ T7384] device veth0_macvtap entered promiscuous mode [ 229.994550][ T4278] XFS (loop1): Unmounting Filesystem [ 230.022656][ T7384] device veth1_macvtap entered promiscuous mode [ 230.126333][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.188028][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.216960][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.290408][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.330512][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.390521][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.424801][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.444277][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.458394][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.469466][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.499781][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.526726][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.537765][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.548126][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.566517][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.581611][ T7384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.599744][ T7384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.637240][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.675399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.687968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.716834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.791294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.837804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.865957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.889076][ T7384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.910012][ T7384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.936716][ T7384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.965784][ T7384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.286354][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.320273][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.341606][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.379633][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.418724][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.437626][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.292028][ T7713] loop4: detected capacity change from 0 to 32768 [ 232.308973][ T7740] loop1: detected capacity change from 0 to 256 [ 232.896303][ T7723] loop3: detected capacity change from 0 to 32768 [ 233.052435][ T7754] loop0: detected capacity change from 0 to 512 [ 233.088890][ T7723] XFS (loop3): Mounting V5 Filesystem [ 233.186274][ T7754] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1190: invalid indirect mapped block 10 (level 1) [ 233.306115][ T7723] XFS (loop3): Ending clean mount [ 233.326272][ T7770] loop4: detected capacity change from 0 to 1024 [ 233.357040][ T7754] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1190: invalid indirect mapped block 8 (level 1) [ 233.368626][ T7723] XFS (loop3): Quotacheck needed: Please wait. [ 233.439633][ T7754] EXT4-fs (loop0): 1 truncate cleaned up [ 233.475306][ T7754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.518041][ T7723] XFS (loop3): Quotacheck: Done. [ 233.585615][ T7754] EXT4-fs (loop0): shut down requested (1) [ 233.659865][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 233.793357][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 233.812004][ T4266] XFS (loop3): Unmounting Filesystem [ 234.004821][ T7738] loop5: detected capacity change from 0 to 40427 [ 234.031447][ T7738] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 234.040677][ T7738] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 234.088518][ T7738] F2FS-fs (loop5): invalid crc value [ 234.152372][ T7738] F2FS-fs (loop5): Found nat_bits in checkpoint [ 234.246040][ T7783] loop4: detected capacity change from 0 to 4096 [ 234.256300][ T7738] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 234.263578][ T7738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 234.345855][ T7787] block nbd1: server does not support multiple connections per device. [ 234.361266][ T7787] block nbd1: shutting down sockets [ 234.501555][ T7738] syz.5.1186: attempt to access beyond end of device [ 234.501555][ T7738] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.633068][ T4269] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 234.676402][ T7384] syz-executor: attempt to access beyond end of device [ 234.676402][ T7384] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 234.690604][ T4269] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 235.063491][ T7797] netlink: 'syz.1.1204': attribute type 7 has an invalid length. [ 235.106324][ T7781] loop0: detected capacity change from 0 to 32768 [ 235.164444][ T7781] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1196 (7781) [ 235.247693][ T7781] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 235.286375][ T7781] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 235.343034][ T7781] BTRFS info (device loop0): using free space tree [ 235.565307][ T7781] BTRFS info (device loop0): enabling ssd optimizations [ 235.962766][ T4276] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 236.104418][ T7795] loop4: detected capacity change from 0 to 32768 [ 236.205918][ T4385] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop0 scanned by udevd (4385) [ 236.422773][ T7795] XFS (loop4): Mounting V5 Filesystem [ 236.660523][ T7795] XFS (loop4): Ending clean mount [ 236.686975][ T7795] XFS (loop4): Quotacheck needed: Please wait. [ 236.815725][ T5017] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.960718][ T7795] XFS (loop4): Quotacheck: Done. [ 237.020477][ T5017] usb 4-1: config 0 interface 0 has no altsetting 0 [ 237.037630][ T5017] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 237.062783][ T5017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.114979][ T5017] usb 4-1: config 0 descriptor?? [ 237.257959][ T4269] XFS (loop4): Unmounting Filesystem [ 237.674414][ T7827] loop1: detected capacity change from 0 to 40427 [ 237.714285][ T7827] F2FS-fs (loop1): invalid crc value [ 237.745183][ T7827] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.934883][ T7827] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 237.973124][ T7827] F2FS-fs (loop1): Start checkpoint disabled! [ 237.976049][ T5017] video4linux radio48: keene_cmd_main failed (-71) [ 238.015180][ T5017] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 238.025676][ T5017] usb 4-1: USB disconnect, device number 12 [ 238.132180][ T7827] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 238.513512][ T2966] kworker/u4:5: attempt to access beyond end of device [ 238.513512][ T2966] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 239.609452][ T7907] loop0: detected capacity change from 0 to 128 [ 239.636293][ T7907] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.765435][ T7907] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 240.056556][ T4356] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 240.273466][ T7930] input: syz1 as /devices/virtual/input/input19 [ 240.997079][ T7952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'. [ 241.077209][ T7956] loop5: detected capacity change from 0 to 16 [ 241.084422][ T7956] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 242.019037][ T7975] loop5: detected capacity change from 0 to 8192 [ 242.384350][ T7965] loop4: detected capacity change from 0 to 32768 [ 242.623908][ T7990] loop9: detected capacity change from 0 to 7 [ 242.678232][ T7965] read_mapping_page failed! [ 242.693388][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.703054][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 242.721835][ T7965] ERROR: (device loop4): txCommit: [ 242.721835][ T7965] [ 242.746529][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.755818][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 242.775253][ T7965] ERROR: (device loop4): remounting filesystem as read-only [ 242.823101][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.832401][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 242.879619][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.888892][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 242.932614][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 242.949889][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.956484][ T7998] ax25_connect(): syz.1.1261 uses autobind, please contact jreuter@yaina.de [ 242.959181][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 243.004257][ T8000] loop0: detected capacity change from 0 to 512 [ 243.025753][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.034989][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 243.044722][ T107] ERROR: (device loop4): diUpdatePMap: the inode is not allocated in the working map [ 243.044722][ T107] [ 243.082415][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.091708][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 243.100335][ T7990] ldm_validate_partition_table(): Disk read failed. [ 243.108205][ T8000] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.1260: iget: bogus i_mode (0) [ 243.121036][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.130315][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 243.140529][ T8000] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1260: couldn't read orphan inode 17 (err -117) [ 243.175059][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.184524][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 243.203601][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.212952][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 243.255150][ T7990] Dev loop9: unable to read RDB block 0 [ 243.261120][ T8000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 243.285696][ T7990] loop9: unable to read partition table [ 243.291773][ T7990] loop9: partition table beyond EOD, truncated [ 243.303761][ T8007] loop3: detected capacity change from 0 to 128 [ 243.325271][ T8000] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1260: bg 0: block 7: invalid block bitmap [ 243.365342][ T8007] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 243.372705][ T7990] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 243.372705][ T7990] ) failed (rc=-5) [ 243.435340][ T8007] hpfs: filesystem error: improperly stopped [ 243.455201][ T8007] hpfs: You really don't want any checks? You are crazy... [ 243.472860][ T8007] hpfs: hpfs_map_sector(): read error [ 243.519342][ T8007] hpfs: code page support is disabled [ 243.553783][ T8007] hpfs: hpfs_map_4sectors(): unaligned read [ 243.569183][ T8007] hpfs: hpfs_map_4sectors(): unaligned read [ 243.586330][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 243.606129][ T8007] hpfs: filesystem error: unable to find root dir [ 243.643527][ T8007] hpfs: hpfs_map_4sectors(): unaligned read [ 243.705945][ T8007] hpfs: hpfs_map_sector(): read error [ 243.914025][ T8016] loop0: detected capacity change from 0 to 1024 [ 244.229638][ T8029] loop1: detected capacity change from 0 to 256 [ 244.282564][ T8033] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 244.366517][ T8033] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 244.926362][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 245.056400][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1284'. [ 245.195727][ T22] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 245.407884][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.445314][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.445434][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1291'. [ 245.484862][ T22] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 245.504062][ T8074] loop1: detected capacity change from 0 to 64 [ 245.511902][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.542182][ T22] usb 5-1: config 0 descriptor?? [ 245.569102][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 245.595800][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 245.619536][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 245.653953][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 245.672779][ T22] usb 5-1: media controller created [ 245.682647][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.714639][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 245.738935][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 245.799598][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 245.829725][ T8080] loop3: detected capacity change from 0 to 512 [ 245.855955][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 245.863330][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 246.007665][ T8080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.015604][ T5345] dvb-usb: bulk message failed: -22 (1/0) [ 246.044703][ T5345] dvb-usb: error while querying for an remote control event. [ 246.052741][ T8080] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.147706][ T8080] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.1295: corrupted inode contents [ 246.205294][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 246.211705][ T22] dvb-usb: error while querying for an remote control event. [ 246.220162][ T8080] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.1295: mark_inode_dirty error [ 246.268200][ T8080] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.1295: corrupted inode contents [ 246.320629][ T8080] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1295: mark_inode_dirty error [ 246.364247][ T22] usb 5-1: USB disconnect, device number 11 [ 246.441238][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 246.637282][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 247.428942][ T8103] loop0: detected capacity change from 0 to 32768 [ 247.569064][ T8103] XFS (loop0): Mounting V5 Filesystem [ 247.629452][ T8103] XFS (loop0): Ending clean mount [ 247.637359][ T8103] XFS (loop0): Quotacheck needed: Please wait. [ 247.703695][ T8139] loop5: detected capacity change from 0 to 64 [ 247.781943][ T8103] XFS (loop0): Quotacheck: Done. [ 248.067603][ T8151] loop4: detected capacity change from 0 to 512 [ 248.131246][ T8151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c098, mo2=0002] [ 248.147632][ T8151] System zones: 1-12 [ 248.200139][ T4276] XFS (loop0): Unmounting Filesystem [ 248.263182][ T8151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1318: inode #1: comm syz.4.1318: iget: illegal inode # [ 248.324124][ T8151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1318: error while reading EA inode 1 err=-117 [ 248.364349][ T8151] EXT4-fs (loop4): 1 orphan inode deleted [ 248.385147][ T8151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.554963][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 248.960858][ T8179] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 249.273159][ T8188] netlink: 'syz.0.1330': attribute type 13 has an invalid length. [ 249.291742][ T8188] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1330'. [ 249.757556][ T8176] loop3: detected capacity change from 0 to 40427 [ 249.787540][ T8176] F2FS-fs (loop3): invalid crc value [ 249.848586][ T8176] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.894843][ T8202] loop5: detected capacity change from 0 to 64 [ 249.990910][ T27] audit: type=1800 audit(1759882581.973:50): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1337" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 250.058789][ T8176] F2FS-fs (loop3): Start checkpoint disabled! [ 250.074870][ T8202] hfs: request for non-existent node 131072 in B*Tree [ 250.103955][ T8176] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 250.122467][ T8202] hfs: request for non-existent node 131072 in B*Tree [ 250.206342][ T8185] loop4: detected capacity change from 0 to 32768 [ 250.332573][ T8185] XFS (loop4): Mounting V5 Filesystem [ 250.516997][ T8185] XFS (loop4): Ending clean mount [ 250.549323][ T8185] XFS (loop4): Quotacheck needed: Please wait. [ 250.713402][ T8185] XFS (loop4): Quotacheck: Done. [ 250.749662][ T8221] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 250.808450][ T4269] XFS (loop4): Unmounting Filesystem [ 251.030087][ T8232] loop3: detected capacity change from 0 to 256 [ 251.067504][ T8232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d) [ 251.398100][ T8222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.423770][ T8222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.460125][ T8222] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.494894][ T8222] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 251.527539][ T8222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.543940][ T8222] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.585742][ T8222] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 251.603375][ T8222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.611529][ T8222] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 251.631582][ T8222] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 251.651035][ T8222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.674260][ T8222] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.692094][ T8222] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 252.028127][ T8259] sctp: [Deprecated]: syz.0.1353 (pid 8259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.028127][ T8259] Use struct sctp_sack_info instead [ 252.525286][ T5016] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 252.719215][ T5016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.754734][ T5016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.794930][ T5016] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 252.830572][ T5016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.860241][ T5016] usb 1-1: config 0 descriptor?? [ 253.284546][ T5016] uclogic 0003:28BD:0075.0009: interface is invalid, ignoring [ 253.495345][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.506583][ T5016] usb 1-1: USB disconnect, device number 19 [ 253.585343][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.656101][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.662400][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.676701][ T8272] loop5: detected capacity change from 0 to 40427 [ 253.694937][ T8300] loop3: detected capacity change from 0 to 4096 [ 253.702539][ T8300] ntfs3: Unknown parameter 'windows_names' [ 253.786961][ T4688] blk_print_req_error: 10 callbacks suppressed [ 253.786979][ T4688] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.798878][ T8272] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 253.855888][ T8283] loop1: detected capacity change from 0 to 32768 [ 253.866757][ T8272] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 253.949859][ T8283] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.950259][ T8272] F2FS-fs (loop5): invalid crc value [ 254.006101][ T8283] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 254.065593][ T8283] BTRFS info (device loop1): using free space tree [ 254.097396][ T8272] F2FS-fs (loop5): Found nat_bits in checkpoint [ 254.473204][ T8272] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 254.508025][ T8272] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 254.545587][ T8283] BTRFS info (device loop1): enabling ssd optimizations [ 254.811498][ T8343] program syz.4.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.844687][ T8311] f2fs_ckpt-7:5: attempt to access beyond end of device [ 254.844687][ T8311] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.861479][ T4278] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.182134][ T8348] loop4: detected capacity change from 0 to 64 [ 255.499224][ T8317] loop3: detected capacity change from 0 to 32768 [ 255.588115][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.594603][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.595372][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 255.671795][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 255.735414][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 255.741992][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 255.762391][ T8317] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 255.927029][ T8317] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 256.076573][ T8359] loop4: detected capacity change from 0 to 1024 [ 256.190095][ T8359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 256.288762][ T8359] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.422388][ T27] audit: type=1800 audit(1759882588.403:51): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1378" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 256.560744][ T8361] overlayfs: upper fs does not support tmpfile. [ 256.584308][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 256.632500][ T8361] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.706195][ T8361] overlayfs: failed to set xattr on upper [ 256.712006][ T8361] overlayfs: ...falling back to index=off,metacopy=off. [ 256.764291][ T8361] overlayfs: upper fs missing required features. [ 256.823433][ T8384] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 257.220996][ T4266] ocfs2: Unmounting device (7,3) on (node local) [ 257.995235][ T5351] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 258.032732][ T8419] autofs4:pid:8419:autofs_fill_super: pipe file descriptor does not contain proper ops [ 258.187209][ T5351] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 258.215198][ T5351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.255198][ T5351] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 258.284904][ T5351] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 258.302083][ T8400] loop5: detected capacity change from 0 to 32768 [ 258.312173][ T8430] loop0: detected capacity change from 0 to 136 [ 258.319211][ T5351] usb 4-1: Manufacturer: syz [ 258.327795][ T5017] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 258.346222][ T5351] usb 4-1: config 0 descriptor?? [ 258.423139][ T8430] rock: directory entry would overflow storage [ 258.430803][ T8430] rock: sig=0x4f50, size=4, remaining=3 [ 258.436879][ T8430] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 258.514735][ T8400] XFS (loop5): Mounting V5 Filesystem [ 258.525367][ T5017] usb 5-1: Using ep0 maxpacket: 8 [ 258.533107][ T5017] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 258.564363][ T5017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.590321][ T5017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.605201][ T5017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.615877][ T5017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.630300][ T5017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.639565][ T5017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.726204][ T8400] XFS (loop5): Ending clean mount [ 258.741878][ T8400] XFS (loop5): Quotacheck needed: Please wait. [ 258.752814][ T8445] loop0: detected capacity change from 0 to 1024 [ 258.862435][ T5017] usb 5-1: GET_CAPABILITIES returned 0 [ 258.875494][ T5017] usbtmc 5-1:16.0: can't read capabilities [ 258.882798][ T8400] XFS (loop5): Quotacheck: Done. [ 258.884677][ T8445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.995217][ T5351] rc_core: IR keymap rc-hauppauge not found [ 259.001359][ T5351] Registered IR keymap rc-empty [ 259.052215][ T5351] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 259.068165][ T7384] XFS (loop5): Unmounting Filesystem [ 259.094959][ T5351] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 259.176067][ T5016] usb 5-1: USB disconnect, device number 12 [ 259.281945][ C1] igorplugusb 4-1:0.0: receive overflow, at least 1 lost [ 259.488694][ T5351] usb 4-1: USB disconnect, device number 13 [ 259.832051][ T8466] loop0: detected capacity change from 0 to 512 [ 259.866002][ T8466] EXT4-fs: Ignoring removed orlov option [ 259.971333][ T8466] EXT4-fs (loop0): orphan cleanup on readonly fs [ 259.994202][ T8466] EXT4-fs error (device loop0): ext4_find_extent:900: inode #4: comm syz.0.1407: inode has invalid extent depth: 7 [ 260.014845][ T8466] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 260.080536][ T8466] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 260.173494][ T8466] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 260.196426][ T8466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 260.231763][ T8466] EXT4-fs (loop0): unmounting filesystem. [ 260.437723][ T8482] loop3: detected capacity change from 0 to 4096 [ 260.549318][ T8482] ntfs: volume version 3.1. [ 261.235817][ T8509] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1421'. [ 261.748236][ T8525] loop0: detected capacity change from 0 to 512 [ 261.772029][ T8525] FAT-fs (loop0): Unrecognized mount option "nodo|s" or missing value [ 261.793650][ T8497] loop1: detected capacity change from 0 to 32768 [ 261.972084][ T8497] JBD2: Ignoring recovery information on journal [ 262.172379][ T8536] loop0: detected capacity change from 0 to 64 [ 262.186481][ T8497] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 262.273153][ T8536] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 262.339326][ T8539] loop3: detected capacity change from 0 to 512 [ 262.440232][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 262.952712][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1437'. [ 263.227443][ T8562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.235756][ T8562] IPv6: NLM_F_CREATE should be set when creating new route [ 263.353756][ T8572] loop3: detected capacity change from 0 to 256 [ 263.464495][ T8572] FAT-fs (loop3): Directory bread(block 64) failed [ 263.555238][ T8572] FAT-fs (loop3): Directory bread(block 65) failed [ 263.568999][ T8572] FAT-fs (loop3): Directory bread(block 66) failed [ 263.625283][ T8572] FAT-fs (loop3): Directory bread(block 67) failed [ 263.631991][ T8572] FAT-fs (loop3): Directory bread(block 68) failed [ 263.697298][ T8572] FAT-fs (loop3): Directory bread(block 69) failed [ 263.724415][ T8572] FAT-fs (loop3): Directory bread(block 70) failed [ 263.745257][ T8572] FAT-fs (loop3): Directory bread(block 71) failed [ 263.762257][ T8572] FAT-fs (loop3): Directory bread(block 72) failed [ 263.785459][ T8572] FAT-fs (loop3): Directory bread(block 73) failed [ 264.068797][ T8587] IPv6: NLM_F_REPLACE set, but no existing node found! [ 264.641557][ T8571] loop0: detected capacity change from 0 to 32768 [ 264.699067][ T8571] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 264.805694][ T4385] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.056363][ T5020] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 265.165283][ T5017] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.297483][ T5020] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.327964][ T5020] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.348677][ T5020] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.365173][ T5017] usb 6-1: Using ep0 maxpacket: 8 [ 265.370710][ T5020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.381851][ T5017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.403573][ T5020] usb 4-1: SerialNumber: syz [ 265.413813][ T5017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.435697][ T5017] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 265.485288][ T5017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.533802][ T5017] usb 6-1: config 0 descriptor?? [ 265.671524][ T5020] usb 4-1: 0:2 : does not exist [ 265.685365][ T5020] usb 4-1: unit 255 not found! [ 265.729316][ T5020] usb 4-1: USB disconnect, device number 14 [ 265.894867][ T8609] loop4: detected capacity change from 0 to 32768 [ 265.962309][ T5017] logitech-hidpp-device 0003:046D:C343.000A: ignoring exceeding usage max [ 266.010286][ T8609] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 266.027359][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.032591][ T5017] logitech-hidpp-device 0003:046D:C343.000A: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.5-1/input0 [ 266.076187][ T8609] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 266.182580][ T5017] usb 6-1: USB disconnect, device number 2 [ 266.416114][ T8609] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 266.461183][ T8635] loop3: detected capacity change from 0 to 256 [ 266.519478][ T8635] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.597830][ T8630] fido_id[8630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 266.616334][ T8635] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 266.665827][ T8609] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 266.674445][ T8635] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 267.464175][ T8658] device macsec0 entered promiscuous mode [ 267.522289][ T8658] device macsec0 left promiscuous mode [ 268.043028][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 268.075366][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 268.480886][ T8657] loop3: detected capacity change from 0 to 32768 [ 268.536326][ T8657] XFS: noikeep mount option is deprecated. [ 268.624050][ T8657] XFS (loop3): Mounting V5 Filesystem [ 268.879367][ T8657] XFS (loop3): Ending clean mount [ 268.911448][ T8657] XFS (loop3): Quotacheck needed: Please wait. [ 269.022056][ T8669] loop1: detected capacity change from 0 to 32768 [ 269.036239][ T8657] XFS (loop3): Quotacheck: Done. [ 269.093410][ T8705] loop0: detected capacity change from 0 to 256 [ 269.110270][ T8705] exfat: Deprecated parameter 'utf8' [ 269.115853][ T8705] exfat: Deprecated parameter 'utf8' [ 269.126305][ T8669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1475 (8669) [ 269.170529][ T8705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 269.237325][ T8669] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.299834][ T8669] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 269.324420][ T4266] XFS (loop3): Unmounting Filesystem [ 269.344790][ T8669] BTRFS info (device loop1): setting nodatacow, compression disabled [ 269.434985][ T8708] fuse: Bad value for 'fd' [ 269.436509][ T8669] BTRFS info (device loop1): max_inline at 0 [ 269.505260][ T8669] BTRFS info (device loop1): using free space tree [ 269.564769][ T8687] loop5: detected capacity change from 0 to 32768 [ 269.628766][ T8687] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1481 (8687) [ 269.741235][ T8687] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 269.758954][ T8687] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 269.780340][ T8687] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 269.809407][ T8687] BTRFS info (device loop5): use zstd compression, level 3 [ 269.826359][ T8687] BTRFS info (device loop5): using free space tree [ 270.099539][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 270.163286][ T8687] BTRFS info (device loop5): enabling ssd optimizations [ 270.839865][ T8711] loop4: detected capacity change from 0 to 32768 [ 271.059990][ T7384] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 271.213809][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1491'. [ 271.487076][ T8768] sctp: [Deprecated]: syz.3.1496 (pid 8768) Use of int in maxseg socket option. [ 271.487076][ T8768] Use struct sctp_assoc_value instead [ 272.503042][ T8806] loop0: detected capacity change from 0 to 128 [ 272.521553][ T8806] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 272.542224][ T8806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.293913][ T8825] loop5: detected capacity change from 0 to 2048 [ 273.322061][ T8825] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 273.351755][ T8825] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 273.435284][ T8825] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 273.453288][ T8825] UDF-fs: Scanning with blocksize 512 failed [ 273.503963][ T8825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.555012][ T8832] loop0: detected capacity change from 0 to 1024 [ 273.606730][ T8834] loop3: detected capacity change from 0 to 512 [ 273.642507][ T8832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 273.671677][ T8834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.801218][ T8831] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 273.855716][ T8834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.871145][ T8843] smc: net device bond0 applied user defined pnetid SYZ0 [ 273.880604][ T8834] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.885570][ T8831] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 273.919115][ T8831] EXT4-fs (loop0): This should not happen!! Data will be lost [ 273.919115][ T8831] [ 273.919497][ T8843] smc: net device bond0 erased user defined pnetid SYZ0 [ 273.929952][ T8831] EXT4-fs (loop0): Total free blocks count 0 [ 273.943412][ T8831] EXT4-fs (loop0): Free/Dirty block details [ 273.949967][ T8831] EXT4-fs (loop0): free_blocks=68451041280 [ 273.956439][ T8831] EXT4-fs (loop0): dirty_blocks=32 [ 273.974298][ T8831] EXT4-fs (loop0): Block reservation details [ 273.975425][ T5351] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 273.988699][ T8831] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 274.043475][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 274.078586][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 274.187447][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.222424][ T5351] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 274.247514][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.272852][ T5351] usb 5-1: config 0 descriptor?? [ 274.703260][ T5351] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 274.730113][ T5351] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 274.761109][ T5351] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 274.783521][ T5351] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 274.802390][ T5351] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 274.843929][ T5351] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 274.865214][ T5351] steelseries_srws1 0003:1038:1410.000B: unexpected long global item [ 274.904930][ T5351] steelseries_srws1 0003:1038:1410.000B: parse failed [ 274.934889][ T5351] steelseries_srws1: probe of 0003:1038:1410.000B failed with error -22 [ 274.985330][ T5351] usb 5-1: USB disconnect, device number 13 [ 275.358085][ T8874] kernel profiling enabled (shift: 6) [ 276.062727][ T8895] loop3: detected capacity change from 0 to 512 [ 276.093012][ T8895] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.172599][ T8897] loop4: detected capacity change from 0 to 1024 [ 276.181940][ T8895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.228935][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 276.252092][ T5351] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 276.292178][ T8897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 276.315477][ T8897] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.396007][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 276.433971][ T8897] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.1549: lblock 0 mapped to illegal pblock 0 (length 1) [ 276.450742][ T5351] usb 6-1: Using ep0 maxpacket: 32 [ 276.457913][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.465024][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 276.492247][ T5351] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 276.512361][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.525175][ T5351] usb 6-1: Product: syz [ 276.529455][ T5351] usb 6-1: Manufacturer: syz [ 276.547414][ T5351] usb 6-1: SerialNumber: syz [ 276.548088][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 276.553110][ T8897] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 276.593837][ T5351] usb 6-1: config 0 descriptor?? [ 276.595672][ T8897] EXT4-fs (loop4): This should not happen!! Data will be lost [ 276.595672][ T8897] [ 276.646484][ T8908] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.1549: lblock 0 mapped to illegal pblock 0 (length 1) [ 276.660912][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 276.710899][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 276.743803][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 276.815237][ T8895] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1548: lblock 23 mapped to illegal pblock 18 (length 1) [ 276.834371][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 276.859127][ T8913] loop1: detected capacity change from 0 to 47 [ 276.885456][ T8895] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.1548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 277.019759][ T5351] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 277.094454][ T4266] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 277.110806][ T8917] program syz.0.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.163360][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 277.367094][ T8926] loop3: detected capacity change from 0 to 1024 [ 277.421505][ T5351] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 277.441120][ T5351] gs_usb: probe of 6-1:0.0 failed with error -71 [ 277.476301][ T5351] usb 6-1: USB disconnect, device number 3 [ 277.501925][ T8926] hfsplus: walked past end of dir [ 277.563365][ T8930] mkiss: ax0: crc mode is auto. [ 277.946182][ T8944] loop4: detected capacity change from 0 to 2048 [ 278.001206][ T8944] NILFS (loop4): invalid segment: Sequence number mismatch [ 278.035016][ T8944] NILFS (loop4): trying rollback from an earlier position [ 278.084989][ T8944] NILFS (loop4): recovery complete [ 278.109056][ T8948] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.495214][ T5351] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 279.687844][ T5351] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.721008][ T8978] loop5: detected capacity change from 0 to 1024 [ 279.739793][ T5351] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.756281][ T5351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.769979][ T5351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 279.784220][ T5351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 279.854238][ T5351] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.875616][ T8978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 279.884229][ T8978] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.932293][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.955036][ T5351] usb 5-1: Product: syz [ 279.959515][ T5351] usb 5-1: Manufacturer: syz [ 280.032363][ T8978] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 3: comm syz.5.1582: lblock 3 mapped to illegal pblock 3 (length 3) [ 280.052650][ T5351] cdc_wdm 5-1:1.0: skipping garbage [ 280.052672][ T5351] cdc_wdm 5-1:1.0: skipping garbage [ 280.065389][ T5351] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 280.065413][ T5351] cdc_wdm 5-1:1.0: Unknown control protocol [ 280.167682][ T8978] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 280.167784][ T8978] EXT4-fs (loop5): This should not happen!! Data will be lost [ 280.167784][ T8978] [ 280.172149][ T8996] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #15: block 4: comm syz.5.1582: lblock 4 mapped to illegal pblock 4 (length 1) [ 280.225964][ T8996] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.1582: Freeing blocks not in datazone - block = 3, count = 1 [ 280.354928][ T4356] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 280.361368][ T4356] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 280.361406][ T4356] EXT4-fs (loop5): This should not happen!! Data will be lost [ 280.361406][ T4356] [ 280.370839][ T7384] EXT4-fs (loop5): unmounting filesystem. [ 281.232659][ T9006] loop1: detected capacity change from 0 to 16 [ 281.284951][ T9006] erofs: (device loop1): mounted with root inode @ nid 36. [ 281.304674][ T9007] loop5: detected capacity change from 0 to 512 [ 281.450426][ T9006] syz.1.1591: attempt to access beyond end of device [ 281.450426][ T9006] loop1: rw=0, sector=13478624032, nr_sectors = 8 limit=16 [ 281.474080][ T9007] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 281.540270][ T9007] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.595952][ T9006] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 282.054246][ T7384] EXT4-fs (loop5): unmounting filesystem. [ 282.135606][ T8995] loop0: detected capacity change from 0 to 262144 [ 282.157040][ T8995] F2FS-fs (loop0): invalid crc value [ 282.163439][ T9021] loop1: detected capacity change from 0 to 64 [ 282.226131][ T8995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 282.268061][ T22] usb 5-1: USB disconnect, device number 14 [ 282.286317][ T8995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 282.311692][ T8995] F2FS-fs (loop0): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 282.461418][ T9029] loop5: detected capacity change from 0 to 1024 [ 283.082382][ T9051] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1601'. [ 283.160733][ T9054] loop3: detected capacity change from 0 to 1024 [ 283.437682][ T46] hfsplus: b-tree write err: -5, ino 4 [ 283.474012][ T9061] can0: slcan on ttyS3. [ 283.576233][ T9061] can0 (unregistered): slcan off ttyS3. [ 283.942641][ T9073] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1609'. [ 284.369453][ T9078] loop1: detected capacity change from 0 to 4096 [ 284.423989][ T9076] loop3: detected capacity change from 0 to 8192 [ 284.503660][ T9078] ntfs: volume version 3.1. [ 284.534003][ T9076] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.646811][ T9076] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 284.676253][ T9086] loop5: detected capacity change from 0 to 256 [ 284.730770][ T9076] REISERFS (device loop3): using ordered data mode [ 284.791819][ T9076] reiserfs: using flush barriers [ 284.846030][ T9076] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.938598][ T9076] REISERFS (device loop3): checking transaction log (loop3) [ 284.956128][ T9090] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1616'. [ 285.233110][ T9098] loop4: detected capacity change from 0 to 256 [ 285.361261][ T9098] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 285.374615][ T9076] REISERFS (device loop3): Using tea hash to sort names [ 285.405614][ T9076] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 285.476105][ T27] audit: type=1800 audit(1759882617.463:52): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1618" name="file2" dev="loop4" ino=1048620 res=0 errno=0 [ 286.455623][ T4398] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 286.647740][ T4398] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 286.687462][ T4398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.747296][ T4398] usb 5-1: config 0 descriptor?? [ 286.787273][ T4398] usb 5-1: selecting invalid altsetting 1 [ 286.902170][ T4398] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 286.963890][ T4398] usb 5-1: USB disconnect, device number 15 [ 286.991976][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.327320][ T5345] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 287.444103][ T9136] loop5: detected capacity change from 0 to 512 [ 287.498698][ T9136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.530236][ T9139] device macsec0 entered promiscuous mode [ 287.535399][ T5345] usb 4-1: Using ep0 maxpacket: 8 [ 287.547082][ T5345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.571364][ T9136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 287.582634][ T5345] usb 4-1: config 4 interface 0 has no altsetting 0 [ 287.589527][ T9139] device macsec0 left promiscuous mode [ 287.602695][ T9136] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.637736][ T5345] usb 4-1: string descriptor 0 read error: -22 [ 287.660375][ T5345] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 287.703140][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.782775][ T5345] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 287.833919][ T5345] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.877695][ T5345] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 287.884933][ T5345] usb 4-1: media controller created [ 287.965322][ T5345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.058066][ T7384] EXT4-fs (loop5): unmounting filesystem. [ 288.220170][ T5345] zl10353_read_register: readreg error (reg=127, ret==0) [ 288.273237][ T9156] loop4: detected capacity change from 0 to 1024 [ 288.331137][ T5345] usb 4-1: USB disconnect, device number 15 [ 288.394898][ T9156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.450140][ T9156] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.502875][ T9156] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.1638: lblock 3 mapped to illegal pblock 3 (length 3) [ 288.544868][ T9156] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 288.585740][ T9156] EXT4-fs (loop4): This should not happen!! Data will be lost [ 288.585740][ T9156] [ 288.616255][ T9165] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 4: comm syz.4.1638: lblock 4 mapped to illegal pblock 4 (length 1) [ 288.642947][ T9165] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.1638: Freeing blocks not in datazone - block = 3, count = 1 [ 288.911903][ T9] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 288.960553][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 288.993396][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 288.993396][ T9] [ 289.022341][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 289.983401][ T9209] loop4: detected capacity change from 0 to 16 [ 290.022188][ T9209] erofs: (device loop4): mounted with root inode @ nid 36. [ 290.041790][ T9209] syz.4.1657: attempt to access beyond end of device [ 290.041790][ T9209] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 290.075320][ T9209] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1440] out[1677] [ 290.089694][ T9211] loop3: detected capacity change from 0 to 1024 [ 290.096770][ T9209] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 87 of nid 36 [ 290.172128][ T9211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 290.182154][ T9211] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.206274][ T9211] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.1656: lblock 3 mapped to illegal pblock 3 (length 3) [ 290.235512][ T9211] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 290.259690][ T9211] EXT4-fs (loop3): This should not happen!! Data will be lost [ 290.259690][ T9211] [ 290.275947][ T9217] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 4: comm syz.3.1656: lblock 4 mapped to illegal pblock 4 (length 1) [ 290.302547][ T9217] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.1656: Freeing blocks not in datazone - block = 3, count = 1 [ 290.411408][ T9221] loop0: detected capacity change from 0 to 512 [ 290.491731][ T9221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.503778][ T9221] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.513217][ T29] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 290.595184][ T29] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 290.615293][ T29] EXT4-fs (loop3): This should not happen!! Data will be lost [ 290.615293][ T29] [ 290.634528][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 290.650946][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 290.839635][ T9232] loop3: detected capacity change from 0 to 64 [ 291.167448][ T9244] loop4: detected capacity change from 0 to 1024 [ 291.383135][ T46] hfsplus: b-tree write err: -5, ino 4 [ 291.615511][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 291.805277][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 291.812470][ T14] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 291.843541][ T14] usb 6-1: config 0 has no interface number 0 [ 291.849901][ T14] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.861064][ T14] usb 6-1: config 0 interface 85 has no altsetting 0 [ 291.870943][ T14] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 291.880891][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.889019][ T14] usb 6-1: Product: syz [ 291.893621][ T14] usb 6-1: Manufacturer: syz [ 291.899047][ T14] usb 6-1: SerialNumber: syz [ 291.912608][ T14] usb 6-1: config 0 descriptor?? [ 292.530495][ T14] appletouch 6-1:0.85: Geyser mode initialized. [ 292.538087][ T14] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input22 [ 292.707849][ T9260] loop3: detected capacity change from 0 to 512 [ 292.741824][ T5345] usb 6-1: USB disconnect, device number 4 [ 292.759828][ T5345] appletouch 6-1:0.85: input: appletouch disconnected [ 292.819543][ T9260] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #17: comm syz.3.1676: iget: bogus i_mode (0) [ 292.848153][ T9266] sctp: [Deprecated]: syz.0.1687 (pid 9266) Use of int in maxseg socket option. [ 292.848153][ T9266] Use struct sctp_assoc_value instead [ 292.913080][ T9260] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1676: couldn't read orphan inode 17 (err -117) [ 292.936696][ T9260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.990133][ T9260] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1676: bg 0: block 7: invalid block bitmap [ 293.106507][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 293.153101][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 293.495250][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 293.517344][ T9284] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 293.531949][ T9284] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 293.745409][ T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.939479][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.965541][ T22] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 293.996421][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.018032][ T22] usb 6-1: config 0 descriptor?? [ 294.030440][ T9296] sctp: [Deprecated]: syz.4.1693 (pid 9296) Use of int in maxseg socket option. [ 294.030440][ T9296] Use struct sctp_assoc_value instead [ 294.093452][ T9298] loop1: detected capacity change from 0 to 2048 [ 294.111899][ T9285] loop3: detected capacity change from 0 to 32768 [ 294.131136][ T9285] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1686 (9285) [ 294.148644][ T9298] NILFS (loop1): invalid segment: Sequence number mismatch [ 294.169901][ T9298] NILFS (loop1): trying rollback from an earlier position [ 294.196826][ T9285] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 294.221492][ T9298] NILFS (loop1): recovery complete [ 294.244521][ T9285] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 294.256938][ T9285] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 294.258120][ T9299] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.267705][ T9285] BTRFS info (device loop3): use zstd compression, level 3 [ 294.297946][ T5345] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 294.309537][ T9285] BTRFS info (device loop3): using free space tree [ 294.437480][ T22] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 294.475237][ T22] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 294.491214][ T22] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 294.500043][ T5345] usb 1-1: Using ep0 maxpacket: 32 [ 294.502899][ T9314] loop4: detected capacity change from 0 to 64 [ 294.507939][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.525373][ T22] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 294.533887][ T22] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 294.542705][ T22] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 294.556597][ T22] steelseries_srws1 0003:1038:1410.000C: unexpected long global item [ 294.567304][ T5345] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 294.608429][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.646998][ T9285] BTRFS info (device loop3): enabling ssd optimizations [ 294.665925][ T22] steelseries_srws1 0003:1038:1410.000C: parse failed [ 294.672803][ T22] steelseries_srws1: probe of 0003:1038:1410.000C failed with error -22 [ 294.691615][ T5345] usb 1-1: Product: syz [ 294.712554][ T5345] usb 1-1: Manufacturer: syz [ 294.725187][ T5345] usb 1-1: SerialNumber: syz [ 294.738244][ T22] usb 6-1: USB disconnect, device number 5 [ 294.746584][ T5345] usb 1-1: config 0 descriptor?? [ 295.179465][ T4266] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 295.199112][ T5345] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 295.211046][ T9328] loop4: detected capacity change from 0 to 2048 [ 295.264156][ T9328] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 295.348415][ T9328] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 295.359618][ T9328] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 295.385772][ T9328] UDF-fs: Scanning with blocksize 512 failed [ 295.431478][ T9328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.543548][ T4385] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4385) [ 295.635181][ T5345] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 295.644694][ T5345] gs_usb: probe of 1-1:0.0 failed with error -71 [ 295.669456][ T5345] usb 1-1: USB disconnect, device number 20 [ 295.849222][ T9334] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 295.879348][ T9334] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 296.034398][ T9323] loop1: detected capacity change from 0 to 40427 [ 296.081926][ T9323] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 296.113518][ T9323] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 296.157859][ T9323] F2FS-fs (loop1): invalid crc value [ 296.203733][ T9323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.383318][ T9347] loop0: detected capacity change from 0 to 1024 [ 296.395691][ T9323] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 296.403027][ T9323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 296.534831][ T9347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 296.545221][ T9337] f2fs_ckpt-7:1: attempt to access beyond end of device [ 296.545221][ T9337] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.585268][ T9347] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.732135][ T9347] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.1703: lblock 3 mapped to illegal pblock 3 (length 3) [ 296.754140][ T9357] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1717'. [ 296.804407][ T9347] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 296.857395][ T9360] sctp: [Deprecated]: syz.5.1706 (pid 9360) Use of int in maxseg socket option. [ 296.857395][ T9360] Use struct sctp_assoc_value instead [ 296.865969][ T9347] EXT4-fs (loop0): This should not happen!! Data will be lost [ 296.865969][ T9347] [ 296.930917][ T9359] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 4: comm syz.0.1703: lblock 4 mapped to illegal pblock 4 (length 1) [ 297.018261][ T9359] EXT4-fs error (device loop0): ext4_free_blocks:6205: comm syz.0.1703: Freeing blocks not in datazone - block = 3, count = 1 [ 297.106738][ T9364] can0: slcan on ttyS3. [ 297.187264][ T9364] can0 (unregistered): slcan off ttyS3. [ 297.274958][ T11] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 297.366375][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 297.422848][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 297.422848][ T11] [ 297.449536][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 297.456667][ T9375] loop4: detected capacity change from 0 to 256 [ 297.674222][ T9376] loop3: detected capacity change from 0 to 4096 [ 297.802886][ T9376] ntfs: volume version 3.1. [ 297.823326][ T9382] loop0: detected capacity change from 0 to 512 [ 297.832764][ T9383] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1708'. [ 297.988654][ T9382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 298.072754][ T9382] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.074390][ T9390] loop5: detected capacity change from 0 to 512 [ 298.153588][ T9390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c098, mo2=0002] [ 298.236422][ T9390] System zones: 1-12 [ 298.285743][ T9390] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1721: inode #1: comm syz.5.1721: iget: illegal inode # [ 298.305964][ T9382] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1714: corrupted inode contents [ 298.361486][ T9390] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1721: error while reading EA inode 1 err=-117 [ 298.427965][ T9390] EXT4-fs (loop5): 1 orphan inode deleted [ 298.470036][ T9390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 298.475229][ T9382] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.1714: mark_inode_dirty error [ 298.596251][ T9382] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1714: corrupted inode contents [ 298.639637][ T9382] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1714: mark_inode_dirty error [ 298.710374][ T7384] EXT4-fs (loop5): unmounting filesystem. [ 298.894219][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 299.139466][ T9413] loop4: detected capacity change from 0 to 64 [ 299.652063][ T9398] loop1: detected capacity change from 0 to 32768 [ 299.897125][ T9398] XFS (loop1): Mounting V5 Filesystem [ 300.008428][ T9398] XFS (loop1): Ending clean mount [ 300.075814][ T9398] XFS (loop1): Quotacheck needed: Please wait. [ 300.082482][ T9447] loop3: detected capacity change from 0 to 512 [ 300.132101][ T9447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c098, mo2=0002] [ 300.195818][ T9398] XFS (loop1): Quotacheck: Done. [ 300.201915][ T9447] System zones: 1-12 [ 300.223263][ T9447] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1734: inode #1: comm syz.3.1734: iget: illegal inode # [ 300.292467][ T9447] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1734: error while reading EA inode 1 err=-117 [ 300.307915][ T9447] EXT4-fs (loop3): 1 orphan inode deleted [ 300.313944][ T9447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.462840][ T4278] XFS (loop1): Unmounting Filesystem [ 300.471794][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 300.576317][ T9457] sctp: [Deprecated]: syz.5.1748 (pid 9457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.576317][ T9457] Use struct sctp_sack_info instead [ 300.623150][ T9436] slcan: can't register candev [ 300.653127][ T9436] Falling back ldisc for ttyS3. [ 300.719911][ T9461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1737'. [ 301.056278][ T9468] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 301.352345][ T5016] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.587121][ T5016] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.603567][ T5016] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.615899][ T5016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.635957][ T5016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.653398][ T5016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.678704][ T5016] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.695398][ T5016] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.710446][ T5016] usb 6-1: Product: syz [ 301.719349][ T5016] usb 6-1: Manufacturer: syz [ 301.738658][ T5016] cdc_wdm 6-1:1.0: skipping garbage [ 301.744004][ T5016] cdc_wdm 6-1:1.0: skipping garbage [ 301.770637][ T5016] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 301.776859][ T5016] cdc_wdm 6-1:1.0: Unknown control protocol [ 302.031460][ T9468] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 302.308620][ T9491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1749'. [ 302.561427][ T9497] loop4: detected capacity change from 0 to 16 [ 302.588095][ T9497] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 302.974411][ T9503] loop4: detected capacity change from 0 to 8192 [ 303.009303][ T9503] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 303.040087][ T9503] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 303.050246][ T9503] REISERFS (device loop4): using ordered data mode [ 303.057532][ T9503] reiserfs: using flush barriers [ 303.090946][ T9503] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 303.150424][ T9503] REISERFS (device loop4): checking transaction log (loop4) [ 303.437565][ T9503] REISERFS (device loop4): Using tea hash to sort names [ 303.453937][ T9503] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 304.020796][ T14] usb 6-1: USB disconnect, device number 6 [ 304.575269][ T5354] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 304.770334][ T5354] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 304.788821][ T5354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.831498][ T5354] usb 6-1: config 0 descriptor?? [ 304.863072][ T5354] usb 6-1: selecting invalid altsetting 1 [ 304.964074][ T5354] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 305.009909][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.012033][ T9516] loop3: detected capacity change from 0 to 32768 [ 305.073413][ T9539] o2cb: This node has not been configured. [ 305.080160][ T14] usb 6-1: USB disconnect, device number 7 [ 305.082399][ T9539] o2cb: Cluster check failed. Fix errors before retrying. [ 305.094199][ T9539] (syz.4.1769,9539,1):user_dlm_register:674 ERROR: status = -22 [ 305.109567][ T9539] (syz.4.1769,9539,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 305.200609][ T3638] udevd[3638]: worker [4688] terminated by signal 33 (Unknown signal 33) [ 305.212356][ T9516] XFS (loop3): Mounting V5 Filesystem [ 305.213603][ T3638] udevd[3638]: worker [4688] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1' [ 305.407765][ T9516] XFS (loop3): Ending clean mount [ 305.432449][ T9516] XFS (loop3): Quotacheck needed: Please wait. [ 305.524799][ T9516] XFS (loop3): Quotacheck: Done. [ 305.818870][ T4266] XFS (loop3): Unmounting Filesystem [ 306.577521][ T9571] loop5: detected capacity change from 0 to 512 [ 306.634427][ T9571] EXT4-fs (loop5): orphan cleanup on readonly fs [ 306.672133][ T9571] EXT4-fs error (device loop5): ext4_quota_enable:7024: comm syz.5.1780: inode #218103808: comm syz.5.1780: iget: illegal inode # [ 306.714918][ T9576] loop1: detected capacity change from 0 to 512 [ 306.729315][ T9574] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 306.737888][ T9576] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 306.753072][ T9571] EXT4-fs error (device loop5): ext4_quota_enable:7027: comm syz.5.1780: Bad quota inode: 218103808, type: 2 [ 306.766348][ T4287] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 306.773604][ T9571] EXT4-fs warning (device loop5): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 306.819545][ T9571] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 306.831450][ T9559] loop4: detected capacity change from 0 to 32768 [ 306.838379][ T9571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 306.858599][ T9571] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 306.946042][ T9571] EXT4-fs error (device loop5): ext4_quota_enable:7024: comm syz.5.1780: inode #218103808: comm syz.5.1780: iget: illegal inode # [ 306.967265][ T9571] EXT4-fs error (device loop5): ext4_quota_enable:7027: comm syz.5.1780: Bad quota inode: 218103808, type: 2 [ 307.022212][ T9571] EXT4-fs warning (device loop5): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 307.073042][ T9579] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 307.194496][ T9579] EXT4-fs error (device loop5): ext4_quota_enable:7024: comm syz.5.1780: inode #218103808: comm syz.5.1780: iget: illegal inode # [ 307.275981][ T9579] EXT4-fs error (device loop5): ext4_quota_enable:7027: comm syz.5.1780: Bad quota inode: 218103808, type: 2 [ 307.313382][ T9579] EXT4-fs warning (device loop5): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 307.420628][ T9577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.435976][ T9577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.462598][ T9577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.523815][ T9577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.553992][ T9577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.571248][ T9577] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 307.612870][ T9577] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 307.798328][ T9605] loop4: detected capacity change from 0 to 136 [ 307.936230][ T9605] rock: directory entry would overflow storage [ 307.947023][ T7384] EXT4-fs (loop5): unmounting filesystem. [ 307.955181][ T9605] rock: sig=0x4f50, size=4, remaining=3 [ 307.960937][ T9605] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 308.153634][ T9613] o2cb: This node has not been configured. [ 308.170387][ T9613] o2cb: Cluster check failed. Fix errors before retrying. [ 308.213464][ T9613] (syz.0.1794,9613,0):user_dlm_register:674 ERROR: status = -22 [ 308.242950][ T9613] (syz.0.1794,9613,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 308.493447][ T9625] autofs4:pid:9625:autofs_fill_super: pipe file descriptor does not contain proper ops [ 308.669507][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'. [ 308.838811][ T4287] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 308.847716][ T9632] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 309.495577][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.501858][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.520458][ T9643] loop0: detected capacity change from 0 to 32768 [ 309.533520][ T9635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.558019][ T9643] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1805 (9643) [ 309.575281][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.588841][ T9635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.613187][ T9635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.619774][ T9635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 309.633588][ T9643] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 309.646661][ T9635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.658117][ T9643] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 309.695354][ T9643] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 309.704957][ T9643] BTRFS info (device loop0): use zstd compression, level 3 [ 309.731509][ T9643] BTRFS info (device loop0): using free space tree [ 309.935325][ T14] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 310.095340][ T9643] BTRFS info (device loop0): enabling ssd optimizations [ 310.135408][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 310.143478][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 310.163479][ T14] usb 6-1: config 4 interface 0 has no altsetting 0 [ 310.177276][ T14] usb 6-1: string descriptor 0 read error: -22 [ 310.213974][ T14] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 310.230879][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.278091][ T14] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 310.323218][ T14] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.354880][ T14] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 310.362994][ T14] usb 6-1: media controller created [ 310.401567][ T9658] loop3: detected capacity change from 0 to 32768 [ 310.404819][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.433755][ T4276] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 310.460711][ T9658] [ 310.460711][ T9658] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.460711][ T9658] [ 310.756659][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 310.840017][ T14] usb 6-1: USB disconnect, device number 8 [ 310.944758][ T46] [ 310.944758][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.944758][ T46] [ 310.975166][ T46] [ 310.975166][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.975166][ T46] [ 310.996406][ T4266] [ 310.996406][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.996406][ T4266] [ 311.014867][ T4266] [ 311.014867][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.014867][ T4266] [ 311.041451][ T107] [ 311.041451][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.041451][ T107] [ 311.073858][ T107] ================================================================== [ 311.082087][ T107] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 311.088729][ T107] Write of size 8 at addr ffff888057049040 by task jfsCommit/107 [ 311.096656][ T107] [ 311.099029][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 311.106262][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.116378][ T107] Call Trace: [ 311.119691][ T107] [ 311.122671][ T107] dump_stack_lvl+0x168/0x22e [ 311.127406][ T107] ? __lock_acquire+0x7c50/0x7c50 [ 311.132480][ T107] ? show_regs_print_info+0x12/0x12 [ 311.137811][ T107] ? load_image+0x3b0/0x3b0 [ 311.142368][ T107] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 311.147792][ T107] ? __virt_addr_valid+0x188/0x540 [ 311.152963][ T107] ? __virt_addr_valid+0x465/0x540 [ 311.158394][ T107] ? txEnd+0x329/0x520 [ 311.162497][ T107] print_report+0xa8/0x210 [ 311.166977][ T107] kasan_report+0x10b/0x140 [ 311.171514][ T107] ? txEnd+0x329/0x520 [ 311.175615][ T107] kasan_check_range+0x27b/0x290 [ 311.180687][ T107] txEnd+0x329/0x520 [ 311.184699][ T107] jfs_lazycommit+0x5a2/0xa50 [ 311.189494][ T107] ? txFreelock+0x5a0/0x5a0 [ 311.194113][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 311.200034][ T107] ? do_task_dead+0xd0/0xd0 [ 311.204554][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 311.210472][ T107] ? __kthread_parkme+0x162/0x1c0 [ 311.215536][ T107] kthread+0x29d/0x330 [ 311.219649][ T107] ? txFreelock+0x5a0/0x5a0 [ 311.224168][ T107] ? kthread_blkcg+0xd0/0xd0 [ 311.228781][ T107] ret_from_fork+0x1f/0x30 [ 311.233219][ T107] [ 311.236341][ T107] [ 311.239106][ T107] Allocated by task 9658: [ 311.243438][ T107] kasan_set_track+0x4b/0x70 [ 311.248227][ T107] __kasan_kmalloc+0x8e/0xa0 [ 311.252852][ T107] lmLogOpen+0x2c0/0xf90 [ 311.257199][ T107] jfs_mount_rw+0xf2/0x5c0 [ 311.261748][ T107] jfs_fill_super+0x58e/0xac0 [ 311.266545][ T107] mount_bdev+0x287/0x3c0 [ 311.271077][ T107] legacy_get_tree+0xe6/0x180 [ 311.275786][ T107] vfs_get_tree+0x88/0x270 [ 311.280783][ T107] do_new_mount+0x24a/0xa40 [ 311.285352][ T107] __se_sys_mount+0x2d6/0x3c0 [ 311.290161][ T107] do_syscall_64+0x4c/0xa0 [ 311.294680][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.300857][ T107] [ 311.303319][ T107] Freed by task 4266: [ 311.307335][ T107] kasan_set_track+0x4b/0x70 [ 311.311955][ T107] kasan_save_free_info+0x2d/0x50 [ 311.317020][ T107] ____kasan_slab_free+0x126/0x1e0 [ 311.322168][ T107] slab_free_freelist_hook+0x131/0x1a0 [ 311.327646][ T107] __kmem_cache_free+0xb6/0x1f0 [ 311.332519][ T107] lmLogClose+0x293/0x520 [ 311.336873][ T107] jfs_umount+0x28f/0x360 [ 311.341230][ T107] jfs_put_super+0x88/0x190 [ 311.345921][ T107] generic_shutdown_super+0x130/0x340 [ 311.351389][ T107] kill_block_super+0x7c/0xe0 [ 311.356075][ T107] deactivate_locked_super+0x93/0xf0 [ 311.361369][ T107] cleanup_mnt+0x463/0x4f0 [ 311.365808][ T107] task_work_run+0x1ca/0x250 [ 311.370592][ T107] exit_to_user_mode_loop+0xe6/0x110 [ 311.375899][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 311.381461][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 311.386942][ T107] do_syscall_64+0x58/0xa0 [ 311.391369][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.397307][ T107] [ 311.399646][ T107] Last potentially related work creation: [ 311.405543][ T107] kasan_save_stack+0x3a/0x60 [ 311.410234][ T107] __kasan_record_aux_stack+0xb2/0xc0 [ 311.415635][ T107] call_rcu+0x154/0x980 [ 311.419906][ T107] process_one_work+0x898/0x1160 [ 311.424992][ T107] worker_thread+0xaa2/0x1250 [ 311.430044][ T107] kthread+0x29d/0x330 [ 311.434314][ T107] ret_from_fork+0x1f/0x30 [ 311.438926][ T107] [ 311.441279][ T107] Second to last potentially related work creation: [ 311.448737][ T107] kasan_save_stack+0x3a/0x60 [ 311.453522][ T107] __kasan_record_aux_stack+0xb2/0xc0 [ 311.458924][ T107] call_rcu+0x154/0x980 [ 311.463188][ T107] process_one_work+0x898/0x1160 [ 311.468154][ T107] worker_thread+0xaa2/0x1250 [ 311.472935][ T107] kthread+0x29d/0x330 [ 311.477205][ T107] ret_from_fork+0x1f/0x30 [ 311.481663][ T107] [ 311.483997][ T107] The buggy address belongs to the object at ffff888057049000 [ 311.483997][ T107] which belongs to the cache kmalloc-1k of size 1024 [ 311.498681][ T107] The buggy address is located 64 bytes inside of [ 311.498681][ T107] 1024-byte region [ffff888057049000, ffff888057049400) [ 311.512548][ T107] [ 311.514909][ T107] The buggy address belongs to the physical page: [ 311.521683][ T107] page:ffffea00015c1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57048 [ 311.531941][ T107] head:ffffea00015c1200 order:3 compound_mapcount:0 compound_pincount:0 [ 311.541075][ T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 311.550108][ T107] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0 [ 311.558712][ T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 311.567439][ T107] page dumped because: kasan: bad access detected [ 311.574667][ T107] page_owner tracks the page as allocated [ 311.580412][ T107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4269, tgid 4269 (syz-executor), ts 78223862909, free_ts 22300149630 [ 311.602683][ T107] post_alloc_hook+0x173/0x1a0 [ 311.607490][ T107] get_page_from_freelist+0x1a26/0x1ac0 [ 311.613068][ T107] __alloc_pages+0x1df/0x4e0 [ 311.617682][ T107] alloc_slab_page+0x5d/0x160 [ 311.623104][ T107] new_slab+0x87/0x2c0 [ 311.627295][ T107] ___slab_alloc+0xbc6/0x1230 [ 311.632253][ T107] __kmem_cache_alloc_node+0x1a0/0x260 [ 311.638305][ T107] __kmalloc_node_track_caller+0x9e/0x230 [ 311.644154][ T107] __alloc_skb+0x22a/0x7e0 [ 311.648884][ T107] alloc_uevent_skb+0x7d/0x230 [ 311.653685][ T107] kobject_uevent_net_broadcast+0x17e/0x530 [ 311.659616][ T107] kobject_uevent_env+0x54c/0x8a0 [ 311.664671][ T107] kobject_rename+0x404/0x500 [ 311.669451][ T107] device_rename+0x155/0x1a0 [ 311.674062][ T107] dev_change_name+0x348/0x8c0 [ 311.678855][ T107] do_setlink+0x9c5/0x3c40 [ 311.683317][ T107] page last free stack trace: [ 311.688010][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 311.693503][ T107] free_unref_page+0x2e/0x3f0 [ 311.698201][ T107] free_contig_range+0x9d/0x150 [ 311.703575][ T107] destroy_args+0x100/0xa31 [ 311.713709][ T107] debug_vm_pgtable+0x32a/0x37e [ 311.720297][ T107] do_one_initcall+0x214/0x7a0 [ 311.725543][ T107] do_initcall_level+0x137/0x1e4 [ 311.730596][ T107] do_initcalls+0x4b/0x8a [ 311.734987][ T107] kernel_init_freeable+0x3fa/0x5ac [ 311.740398][ T107] kernel_init+0x19/0x1b0 [ 311.744945][ T107] ret_from_fork+0x1f/0x30 [ 311.749626][ T107] [ 311.752075][ T107] Memory state around the buggy address: [ 311.759389][ T107] ffff888057048f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.767834][ T107] ffff888057048f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.776181][ T107] >ffff888057049000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.784737][ T107] ^ [ 311.791077][ T107] ffff888057049080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.800515][ T107] ffff888057049100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.808584][ T107] ================================================================== [ 311.826226][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.832397][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 311.843925][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 311.845382][ T4272] Bluetooth: hci2: command 0x0c1a tx timeout [ 311.974734][ T107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 311.982096][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 311.989327][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.999524][ T107] Call Trace: [ 312.003025][ T107] [ 312.006345][ T107] dump_stack_lvl+0x168/0x22e [ 312.011682][ T107] ? memcpy+0x3c/0x60 [ 312.016170][ T107] ? show_regs_print_info+0x12/0x12 [ 312.021686][ T107] ? load_image+0x3b0/0x3b0 [ 312.026352][ T107] panic+0x2c9/0x710 [ 312.030328][ T107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.036712][ T107] ? bpf_jit_dump+0xd0/0xd0 [ 312.041545][ T107] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 312.047496][ T107] ? _raw_spin_unlock+0x40/0x40 [ 312.052414][ T107] check_panic_on_warn+0x80/0xa0 [ 312.057415][ T107] ? txEnd+0x329/0x520 [ 312.061800][ T107] end_report+0x66/0x110 [ 312.066119][ T107] kasan_report+0x118/0x140 [ 312.070684][ T107] ? txEnd+0x329/0x520 [ 312.074892][ T107] kasan_check_range+0x27b/0x290 [ 312.079884][ T107] txEnd+0x329/0x520 [ 312.083821][ T107] jfs_lazycommit+0x5a2/0xa50 [ 312.088563][ T107] ? txFreelock+0x5a0/0x5a0 [ 312.093097][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 312.099036][ T107] ? do_task_dead+0xd0/0xd0 [ 312.103564][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 312.109594][ T107] ? __kthread_parkme+0x162/0x1c0 [ 312.114813][ T107] kthread+0x29d/0x330 [ 312.118921][ T107] ? txFreelock+0x5a0/0x5a0 [ 312.123452][ T107] ? kthread_blkcg+0xd0/0xd0 [ 312.128064][ T107] ret_from_fork+0x1f/0x30 [ 312.132508][ T107] [ 312.135898][ T107] Kernel Offset: disabled [ 312.140250][ T107] Rebooting in 86400 seconds..