last executing test programs: 3.188329956s ago: executing program 1 (id=1203): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4099, 0x1003}], 0x1) 2.988226011s ago: executing program 1 (id=1205): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f050e00e6e8120006001e0089e9aaa921d7c2290f0088ca1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.894210267s ago: executing program 3 (id=1206): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 2.790825279s ago: executing program 3 (id=1207): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.618787545s ago: executing program 1 (id=1208): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 2.576173358s ago: executing program 3 (id=1209): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000005c0)="0100000000000000a3ddb5f8efa33c6c867834be", 0x14}], 0x1}}], 0x1, 0x0) 2.510581959s ago: executing program 1 (id=1210): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1}, 0x48) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102529dfe20ab1900105e400102030109021200015b80204a09043a03000e0100"], &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) 2.369077106s ago: executing program 3 (id=1213): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b06, 0x0) 2.232403595s ago: executing program 4 (id=1215): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 2.044480007s ago: executing program 4 (id=1219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x39) 1.760427276s ago: executing program 4 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8}]}}]}, 0x38}}, 0x0) 1.540143165s ago: executing program 4 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)}]) 1.413810615s ago: executing program 2 (id=1228): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x60, &(0x7f0000001100)}, 0x10) 1.320379201s ago: executing program 2 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b703000000000000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096}, 0x90) 1.318652229s ago: executing program 4 (id=1231): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=maciceland,errors=continue,gid=', @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRES64=0x0], 0x1, 0x6238, &(0x7f000000d740)="$eJzs3UuPHFfZB/Cn+jYXv3GsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo89ma4en99PGlc9faqmT/nf1Zepqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc1VEXPlVuuFExP9FP6IXsdLUaxGxsnYiLz+IiBdiuzmej4jhUkSz/vY/z0a8HhEfH4+4/+DOenPz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5692DbDAAAAKWp67qu0sf8k+nzfa/rTgEAc5Ff/+sk365euHpzwfqjVqvV6iNYt9WT3W0XEbHZXqd5z+BwPAAcMZvxSdddoEPyL9ogIo513QlgoVVdd4BDcf/BnfUq5Vu1Xw/WdtrzuSB78t+sdq/vmDadZfwck3k9vraiH89N6c/KnPqwSHL+vfH8r+y0j9Jyh53/vEzLf7Rz6VNxcv798fzHPD359ybmX6qc/+Cx8u/LHwAAAAAAFlj++/+Jjo//Lh18U/blUcd/1+bUBwAAAAAAAAD4vB10/L9dxv8DAACAhdV8Vm/87vjD26Z9F1tz++Uq4pmx5YHCpItlVrvuBwAAAAAAAAAAAACUZLBzDu/lKmIYEc+srtZ13fy0jdeP66DrH3Wlbz+UrOsneQAA2PHx8bFr+auI5Yi4nL7rb7i6ulrXyyur9Wq9spTfz46WluuV1ufaPG1uWxrt4w3xYFQ3v2y5tV7brM/Ls9rHf19zX6O6v4+OzUeHgQNAROy8Gt33ivSUqetno+t3ORwN9v+nj/2f/ej6cQoAAAAcvrqu6yp9nffJdMy/13WnAIC5yK//48cF1Gq1Wq1WP311Wz3Z3XYREZvtdZr3DIbjB4AjZjM+6boLdEj+RRtExAtddwJYaFXXHeBQ3H9wZ71K+Vbt14M0vns+F2RP/pvV9np5/UnTWcbPMZnX42sr+vHclP48P6c+LJKcf288/ys77aO03JPmPy3Xrs4xmpZ/s50nOuhP13L+/fH8xxz2/j8vW9GbmH+pcv6Dx8q/L38AAAAAAFhg+e//Jxbq+O/oSTdnpkcd/107tHsFAAAAAAAAgMN1/8Gd9Xzdaz7+/4UJy7n+8+mU86/kX6Scf28s/6+OLddvzd97+2H+/35wZ/2Pt/71/3m63/yX8kyVHllVekRU6Z6qQZoeZOs+a2vYHzX3NKx6/eYe1nZ///XYiLN7lu2l/496+G5c224/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+N6vLPd3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp495Hvc/s9+3ppPt569oXf3P28Ddnpq3o725bW7N9L3XQn+3/k2Oj+OXNjRunb1+9devGuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfTR67PwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/9Oap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4lLquty8RfSsiLqbrf7q6NhMAmK/8+l8n+fZ51f05359afcTrasH6M9f603qx+qNWH8W6rZ7szXYREX9rr9O8Z/j1pF8GACyyTyPin113gs7Iv2D5+/6a6amuOwPM1c0PPvzp1evXN27c7LonAAAAAAAAAMCTyuN/rrXGfz5V1/XdseX2jP/6dqwddPzPQZ7ZHWB0ykDV/cffpkfZ6o36vdZw4y9Ge3zu9gjFw925R43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzUxFxcmz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/VHOv7cn/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/7tsMeHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/OtXyL0vO/0yq95n/ymH3i/nI+ecjXPb/suT885kN8i9Lzv98quVflpz/hVTLvyw5/9dTLf+y5Py/kWr5lyXnfzHV8i9Lzv+bqZZ/WXL+l1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl4ff/L+pMvsR+UfpjxkwJM10/MwEAAAAAAAAAAAAA4+ZxOnHX2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu9cYuc7yDuBnr147kBgIqZMasnaMMc4mu77EF1oXE64NtxIIhV6wXe/aLPgWr10CjWRHgRIJoyJE2/ChLSDURqoqrIoPtAooH1CrSpVI+4F+QVSoSI2qgAJSpbaCbDXnvO+7M7OzM7ve8XrmnN9Psh/vzJl53znzztl5dv2fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPW2vGnmMwNZltX+5H9tzLKX1P69fnxjftnrb/QMAQAAgNX6Rf73C7ekCw4v40Z12/zjq7/7jfn5+fnsg0N/PPLF+fl0xXiWjazLsvy66OoPPzRQv03weDY2MFj39WCH4Yc6XD/c4fqRDtePdrh+XYfrxzpcv2gHLLK++HlMfmfb8n9uLHZpdms2kl+3rcWtHh9YNzgYf5aTG8hvMz9yIpvNTmUz2VTD9sW2A/n2T2+pjfX2LI41WDfW5toK+emjx+McBsI+3tYw1sJ9Rj9+Yzb+s58+evwvLzx/e6vacTc03F8xzx1ba/P8VLikmOtAti7tkzjPwbp5bm7xnAw1zHMgv13t383zfGGZ8xxamOaaan7Ox7LB/N/P5vtpuP7Hemk/bQ6X/c9dWZZdXph28zaLxsoGsw0NlwwuPD9jxYqs3UdtKb08G17ROt2yjHVaq9PbGtdp82siPv9bwu2Gl5hD/dP048dG6573n89fyzqNao96qddK8xrs9mulV9ZgXBfP5g/6iZZrcFt4/I9uX3oNtlw7LdZgetx1a3BrpzU4ODqUzzk9CQP5bRbW4K6G7YfykQby+tz29mtw8sLpc5Nzn/jkPbOnj52cOTlzZs+uXVN79u07cODA5InZUzNTxd/XuLd734ZsML0GtoZ9F18Dr23atn6pzn9ldNHx91pfh2NtXocbm7bt9utwuPnBDazNC3Lxmi5eG++v7fSxK4PZEq+x/PnZufrXYXrcda/D4brXYcvvKS1eh8PLeB3Wtjm3c3nvWYbr/rSaw9LfC1a3BjfWrcHm9yPNa7Db70d6ZQ2OhXXx/Z1Lfy/YHOb7xMRK348MLVqD6eGGY0/tkvR+f+xAXlqtyztqV9w0ml2cmzl/7yPHLlw4vysLZU28om6tNK/XDXWPKVu0XgdXvF4Pz776iTtaXL4x7Kuxe2p/jS35XNW22Xtv++cq/+7Wen82XLo7C6XL1np/tvpuXtufo1n2pe889uC3Hv3Sm5bcn7V+81OTq38vnvrSuuPvyBLH39j3v1iMl+7q8aGR4eL1O5T2zkjD8bjxqRrOj10D+dgvTC7veDwS/qz18fjWNsfjTU3bdvt4PNL84OLxeKDTTztWp/n5HAvr5NRU++NxbZtNu1e6JofbHo/vCnUg7P/XhU4h9UV1a2epdZvGGh4eCY9rOI7QuE73NGw/Enqz2lhP7b62dbrjruK+htKjW7BW63S8adtur9P0s6+l1ulAp5++XZvm53MsrItb97Rfp7Vtntm7+mPn+vjPumPnaKc1ODI0WpvzSFqE+fE+m18f1+C92fHsbHYqm86vHc3X00A+1sR9y1uDo+HPWh8rN7VZgzuatu32Gkzfx5ZaewPDix98FzQ/n2NhXTx5X/s1WNvmzfu7+951R7gkbVP33rX552tL/czrjqbddL3WynCY53f2t//ZbG2bUwdW2me23093h0tuarGfml+/S72mprO12U+bwjyfP7D0fqrNp7bNFw8ucz0dzrLs0sP35z/vDb9f+duL3/tGw+9dWv1O59LD9//kpSf+YSXzB6D/vViUDcX3urrfTC3n9/8AAABAX4h9/2Coif4fAAAASiP2/fF/hSf6fwAAACiN2PcPh5pUpP/f9ObnZ1+8lKVk/nwQr0+74YFiu5hxnQpfj88vqF1+/9dm/vvvLy1v7MEsy37+wB+03H7TA3FehfEwz6tvabx8kW/cs6yxjz50KY1bn1//crj/+HiWuwxaRXCnsix7+pbP5eOMf+hKXp954GheH7z8xOO1bV44WHwdb//cK4rt/yyEfw+fONZw++fCfvhRqFPvaL0/4u2+fuV1m/d/YGG8eLuBrTfnD/vJDxf3Gz8n5/OPF9vH/bzU/L/12ae+Xtv+kde0nv+lwdbzfyrc79dC/d9XFdvXPwe1r+PtPh3mXxuvtkLj7e796rdbzv/qZ4rtz7212O5oqHH8HeHrbW99frZ+fz0ycKzhcWVvK7aL409974/y6+P9xftvnv/YkSsN+6N5fTzzr8X9TDZtHy+P40R/1zR+7X7q12cc/6k/PNqwnzuNf/XB515Vu9/m8e9u2u7cwzvz8Rfur/ETm/78059rOV6cz+G/OdfweA6/N7yOw/hPfjisx3D9/10t7q/50xWOvrfx+BO3//LGSw2PJ3r7z4rxr77hZF7Xja3fcNNLXnrz5Ttr+y7Lnl1X3F+n8U/+xdmG+X/ltmJ/xOtjRr95/KXE8c9/fOLM2bmLs9Nprz56S/7ZOe8s5hPne0s4tjZ/feTshY/MnB+fGp/KsvHyfoTeNftqqD8pyuX2W88vOoLufCg8n3f86dMbtv/LZ+Pl//b+4vIr7yi+b702bPf5cPnG8PytbPzFntxyW/76HngmzHB+8ecFr8bmbf91YFkbhsff/L4grvdzr/xIvh9q1+XfN+LrepXz/8F0cT/fDPt1Pnwy89bbFsar3z5+NsKV9xWv91Xvv3CYi8/rX4Xn+10/Ku4/zis+3h+E9zHf3tR4vIvr45uXBpvvP/8Uj8vheJJdLq6PW8X9feWF21pOL34OSXb59vzrL6T7uX1FD3Mpc5+Ymzw1e+biI5MXZuYuTM594pNHTp+9eObCkfyzPI98tNPtF45PG/Lj0/TMvr1ZfrQ6W5Tr7EbP/9xDx6f3T22fnjlx7OKJCw+dmzl/8vjc3PGZ6bntx06cmPl4p9vPTh/atfvgnv27J07OTh86cPDgnoMTs2fO1qZRTKqDfVMfmzhz/kh+k7lDew/uuu++vVMTp89OzxzaPzU1cbHT7fPvTRO1W//+xPmZU8cuzJ6emZib/eTMoV0H9+3b3fHTAE+fOzE3Pnn+4pnJi3Mz5yeLxzJ+Ib+49r2v0+0pp7l/L97PNhsoPogve8/d+9Lns9Z87bEl76rYpOkDRJ8Pn0XzTy87d2A5X8e+fyTUpCL9PwAAAFRB7PtHQ030/wAAAFAase9fF2qi/wcAAIDSiH3/WKhJRfr/0uX/N11a1vjy//2X/8/k/+X/mx7PNef/39dr+f/ieCH/3x2rzd/L/wfy//L/8v/y//L/dEGv5f9j378+yyrZ/wMAAEAVxL5/Q6iJ/h8AAABKI/b9N4Wa6P8BAACgNGLf/5JQk4r0//L/8v/y//L/8v+tx19B/n9dtgzy/2tD/r+9iuf/BztOQP5/MqtW/v9yN+df3fx/0UPJ/9NKr+X/Y9//0lCTivT/AAAAUCr/2fri2PffHGqi/wcAAIDSiH3/LaEm+n8AAAAojdj3bww1qUj/L/8v/y//L/8v/996fOf/70/y/+1VPP/fmfy/8//L/zv/P13Va/n/2Pe/LNSkIv0/AAAAVEHs+18eaqL/BwAAgN4zfG03i33/K0JNFvX/1zgAAAAAcMPFvv/WrCkIXpHf/8v/y//L/8v/y/+3Hn/5+f+hTP6/d8j/tyf/34H8v/y//L/8P13Va/n/vO/PxrJXhppUpP8HAACAKoh9/22hJvp/AAAAKI3Y9/9SqIn+HwAAAEoj9v2bQk0q0v/L/5cy/197muT/5f+XHF/+v6/O/z8TApvy/8sk/9+e/H8H8v/y//L/8v90Va/l/2Pff3uoSUX6fwAAAKiC2PffEWqi/wcAAIDSiH3/L4ea6P8BAACgNGLfvznUpCL9v/x/j+f/Y3LU+f/l/xfy/w/L/xcqkv93/v8Vkv9vT/6/A/l/+X/5f/l/uqrX8v+x739VqElF+n8AAACogtj3vzrURP8PAAAApRH7/jtDTfT/AAAAUBqx7x8PNalI/y//3+P5/2s7/7/8f7nz/ys6//+d8v/y/xUj/9+e/H8H8v/y//L/8v90Va/l/2PfvyXUpCL9PwAAAFRB7Pu3hpro/wEAAKA0Yt9/V6iJ/h8AAABKI/b920JNKtL/y//L/8v/lzv/32p8+X/5/zKT/29P/r8D+X/5f/l/+X+6qtfy/7Hvf02oSUX6fwAAAKiC2PdvDzXR/wMAAEBpxL7/taEm+n8AAAAojdj37wg1qUj/L/8v/y//L/9f8fz/Jfn/cpH/b0/+vwP5/27k598l/y//L/9P1Gv5/9j3vy7UpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/d6iJ/h8AAABKI/b9E6EmFen/5f/l/+X/5f8rnv93/v+S6YH8/9hqxpf/l/8vQf7f+f/l/+X/SW5U/j/LWuf/Y99/T6hJRfp/AAAAqILY998baqL/BwAAgD60vuWlse+fDDXR/wMAAEBpxL5/KtSkIv2//L/8v/x/pfP/l1ec/79z4X7l/wvy/73luuX/BzPn/5f/l//voN/y/82/HeyN/P+I/D+l0mvn/499/65Qk4r0/wAAAFAFse/fHWqi/wcAAIDSiH3/nlAT/T8AAACURuz794aaVKT/l/9fu/z/cCb/L//fc/l/5/+X/y+dHjj//6rG77/8f3yI8v/y//2X/+/2/J3/X/6fxXot/x/7/vtCTSrS/wMAAEAVxL5/X6iJ/h8AAABKI/b9+0NN9P8AAABQGrHvPxBqUpH+X/7f+f/l/+X/5f9bjy//35/k/9tz/v8O5P/l/+X/5f/pql7L/8e+/2CoSUX6fwAAAKiC2Pe/PtRE/w8AAAClEfv+Xwk10f8DAABAacS+/1dDTSrS/8v/y//L/8v/y/+3Hl/+vz/J/7cn/9+B/L/8v/y//D9d1Wv5/9j3Hwo1qUj/DwAAAFUQ+/5fCzXR/wMAAEBpxL7/DaEm+n8AAAAojdj3Hw41qUj/L/+/zPz/+vb3J//fOH/5/9brQ/5f/l/+//qT/29P/r8D+X/5/xLm/x+T/+cG6rX8f+z73xhqUpH+HwAAAKog9v33h5ro/wEAAKA0Yt//plAT/T8AAACURuz73xxqUpH+X/7f+f/l/+X/5f9bjy//35/k/9uT/+9A/l/+v4T5f+f/50Zabv4/vq+63vn/2Pe/JdSkIv0/AAAAVEHs+98aaqL/BwAAgNKIff/bQk30/wAAAFAase9/e6hJRfp/+X/5f/l/+X/5/9bjy//3J/n/9uT/O5D/l/+X/5f/p6t67fz/se//9VCTivT/AAAAUAWx738g1ET/DwAAAKUR+/53hJro/wEAAKA0Yt//zlCTivT/3cv/j8r/N5H/l/9vXh/y//L/8v/Xn/x/e32W///FzeFy+f+C/P91mv/4F4odX8b8/w+Xyv/Pr2u+vfw/10Ov5f9j3/+uUJOK9P8AAABQBbHvf3eoif4fAAAASiP2/e8JNdH/AwAAQP+bL+IDse//jVCTivT/zv9fm8dCevk65///Wv5f/l/+X/5f/v/6kv9vr8/y/87/30T+v7fn35P5f+f/5wbrtfx/7PvfG2pSkf4fAAAAqiD2/Q+Gmuj/AQAAoDRi3/++UBP9PwAAAJRG7PvfH2pSkf5f/t/5/+X/+zz/P55lmfy//D+J/H978v8dyP/L//da/v8/5P/pb72W/499/0OhJhXp/wEAAKAKYt//gVAT/T8AAACURuz7fzPURP8PAAAApRH7/g+GmlSk/5f/75f8/7j8v/y/8/83PR75f/n/VuT/21v7/P/K3lDJ/8v/9/P8nf9f/p/Fei3/H/v+D4WaLP/b1diytwQAAABuiNj3/1aoSUV+/w8AAABVEPv+3w410f8DAABAacS+/3dCTSrS/8v/90v+3/n/M/l/+f+mxyP/L//fytrl/+ORR/7f+f/l/yP5f/l/+X+a9Vr+P/b9vxtqUpH+HwAAAKog9v0fDjXR/wMAAEBfaPV/spvFvv9IqEnn/n/F/6cPAAAAuDFi33801KQiv/+X/5f/l//v0fz/n2z95+9/991Hd8n/y//L/6/Imp7/v/bid/5/+X/5/0T+X/6/Zf5/nfx/lfVa/j/2/cdCTSrS/wMAAEAVxL7/90JN9P8AAABQGrHvPx5qov8HAACA0oh9/3SoSUX6f/l/+X/5/x7N/6/w/P8DYZxeyP/H/SH/36hr+f940JX/b2lN8/8fWMiJy/+vNP8/2vJS+f9l5//zN27y/701f/l/5/9nsW7l/4e6lP+Pff9MqElF+n8AAACogtD3D54o6sIV+n8AAAAojdj3nww10f8DAABAacS+/yOhJhXp/+X/5f/l/8uR/3f+/4XtS5//d/7/tuT/2+ud/H9r8v/O/9/P85f/l/9nsV47/3/s+2dDTSrS/wMAAEAVxL7/o6Em+n8AAAAojdj3fyzURP8PAAAApRH7/lOhJhXp/+X/5f/l/+X/5f9bjy//35/k/9uT/+9A/l/+X/5f/p+u6rX8f+z7T4eaVKT/h/9n7z6aLK2vO47fxj3lmWLhcpWrvPDC3vslsIC1/QK88MYbV7m8wAGcA4NzxDnhAM4RSwIJoYQiCqCEhLJQRDkjJCEk1aiYPudMh9vP7Zm+3f3c//l8Fj52W+PbGk/N8BN86w8AANBB7v6b4xb7HwAAAIaRu/+n4hb7HwAAAIaRu/+n45Ym+1//r/8ftv+/Uf9/2Ofr//X/I9P/T9P/r7BB/f/3nNf/z+371//r/zlobv1/7v6fiVua7H8AAADoIHf/z8Yt9j8AAAAMI3f/LXGL/Q8AAADDyN1/a9zSZP/v6/+3Fj37/8x49f8j9f/e/z/08/X/+v+RnW7/f/uzv/Pp//X/3v8P+n/9v/6f/ebW/+fu/7m4pcn+BwAAgA5y9/983GL/AwAAwDBy9/9C3GL/AwAAwDBy9/9i3NJk/x/v/f/tUfr/sob+fytbdP2//n//rw/9v/5f/3/yvP8/rVP/f8tj19/85P3f98DVfL7+X/+v/9f/s15z6/9z9/9S3NJk/wMAAEAHuft/OW6x/wEAAGAYuft/JW6x/wEAAGAYuft/NW5psv+P1/8P8/5/8f6//v/yF/T/+n/9/8bS/0/r1P9fy+fr//X/1/D91x+D+n/9PwfNrf/P3f9rcUuT/Q8AAAAd5O7/9bjF/gcAAIBh5O6/LW6x/wEAAGAYufsvxi1N9r/+/+T7/2/p/ze+/z+30P/v0P/r/+dP/z9N/7+C/l//7/1//T9rNbf+P3f/7XFLk/0PAAAAHeTu/424xf4HAACAYeTu/824xf4HAACAYeTu/624pcn+1/97/1//7/1//f/yz9f/byb9/zT9/wr6/+P28+f0//p//T+7XWX//8zEb9tr6f9z9/923NJk/wMAAEAHuft/J26x/wEAAGAYuft/N26x/wEAAGAYuft/L25psv/1//p//b/+X/+//PP1/5tJ/z9tNv3/1vbSL+v/N77/9/6//l//zx5ze/8/d//vxy1N9j8AAAB0kLv/D+IW+x8AAACGkbv/D+MW+x8AAACGkbv/j+KWJvtf/6//1//r//X/yz9/qv9/YNf3p/+fl7X2/1v6f+//6//1//p//T/HMbf+P3f/H8ctTfY/AAAAdJC7/464xf4HAACAYeTu/5O4Zdf+3//PogIAAACbJXf/n8YtTf7+//L+/8r/Xv9/NKfU/2/r//X/O///3vm/qP+f7P9v8v5/T97/n7a6/8/fUfX/+n/9/1r6/8XWKP3/hVU/Xv/PMnPr/3P3/1nc0mT/AwAAQAe5+/88brH/AQAAYBi5+/8ibrH/AQAAYBi5+/8ybmmy/73/v1H9v/f/e/X/d5/z/v9lc3z/f3Hq/f+2/v+I9P/TvP+/gv5f/+/9f+//s1Zz6/9z9/9V3NJk/wMAAEAHufv/Om6x/wEAAGAz7P5nBw55xD93/9/ELfY/AAAADCN3/9/GLU32/+D9/42H/cv0//r/3T9fM+3/D33/X/+/o1f/7/3/o9L/T9P/r6D/P4l+fnuw/v+uw378HPr/2/T/zMye/v/BK18/q/4/d//fxS1N9j8AAAB0kLv/zrjF/gcAAIBh5O7/+7jF/gcAAIBh5O7/h7ilyf4/8f7/wuGf7f1//b/+X/+v/9f/r5v+f5r+f4X9/f+zf2mo//f+v/f/9f9csz39/y5n1f/n7v/HuKXJ/gcAAIAOcvf/U9xi/wMAAMAwcvffFbfY/wAAADCM3P13xy1N9v/g7/8fSv+v/9/986X/1/8v+3z9/2bS/0/T/6/g/X/9/1n0//ELQP/PiObW/+fu/+e4pcn+BwAAgA5y9/9L3GL/AwAAwDBy9/9r3GL/AwAAwDBy9/9b3NJk/+v/T7b/z6/r//X/C/2//l//fyra9v9by/4kOuiQ/v+Rn7j4w3u/ov/X/w/Z/z9xot+/9//1/xw0i/7/0pW/uszd/+9xS5P9DwAAAB3k7v+PuMX+BwAAgGHk7v/PuMX+BwAAgGHk7v+vuKXJ/t/V/2dyof/3/r/+X/+v/9f/b6y2/f8Ref9/2tPx71f/P2r/f7Lfv/5f/89Bs+j/d/3Pufv/O25psv8BAACgg9z9/xO32P8AAAAwjNz9/xu32P8AAAAwjNz9/xe3NNn/3v/X/+v/9f/6/+Wfr//fTPr/afr/Fbz/r//X/+v/Wau59f+5+++JW5rsfwAAAOggd///xy32PwAAAAwjd/9z4hb7HwAAAIaRu/+5cUuT/a//P6T/X+j/9f/6f/2//n8T6f+nnXX/v+zPy91Opf+/d+IbWNb/X/pO/f+G9//nj/jj9f/6f9Zvbv1/7v7nxS1N9j8AAAB0kLv/3rjF/gcAAIBh5O6/L26x/wEAAGAYufufH7c02f/6f+//6//1//r/5Z+v/99M+v9py/v/6w5+yfv/3v8fqP/3/r/+n7Mzt/4/d/8L4pYm+x8AAAA6yN1/f9xi/wMAAMAwcve/MG6x/wEAAGAYufsfiFua7H/9v/5f/6//1/8v/3z9/2Y6uf5/MXD/v4T+X/+v/9f/6/9Zg7n1/7n7XxS3NNn/AAAA0EHu/hfHLfY/AAAADCN3/0viFvsfAAAAhpG7/6VxS5P9f1b9/036f/2//l//r/+vn1X9//p4/3+a/n8F/b/+X/+v/2et5tb/5+5/WdzSZP8DAABAB7n7H4xb7H8AAAAYRu7+l8ct9j8AAAAMI3f/K+KWJvvf+//6/739/2Kh/9f/6/93nEL/f36h/187/f80/f8K+v8x+//rFgP1/xcO/fH6f+Zobv1/7v5Xxi1N9j8AAAB0kLv/VXGL/Q8AAADDyN3/6rjF/gcAAIBh5O5/TdzSZP/r//X/3v8fp/9/6Knlvx71/7Pt/+tnVf+/Pvr/afr/FfT/Y/b/3v/X/3Nm5tb/5+5/KG5psv8BAACgg9z9r41b7H8AAAAYRu7+18Ut9j8AAAAMI3f/6+OWJvtf/6//1/+P0/97/3+H/r83/f80/f8K+n/9v/5f/89aza3/z93/hrilyf4HAACADnL3Pxy32P8AAAAwjNz9j8Qt9j8AAAAMI3f/G+OWJvtf/6//1/9vZv9/Xv8/fP+f35n+/+rMpf+/4YYfelT/r//X/+v/9f/6/+7m1v/n7n9T3NJk/wMAAEAHufvfHLfY/wAAADCM3P1viVvsfwAAABhG7v63xi1N9v/B/v/cYqdQ3bGs/49GTf+/i/5/7/ev/1/+68P7//p/7/+fvLn0/97/v7bvf279/636f/3/SfX/P3Dwx+v/GdHc+v/c/Y/GLU32PwAAAHSQu/9tcYv9DwAAAMPI3f/2uMX+BwAAgGHk7n8sbmmy/73/r//X/+v/9f/LP1//v5n0/9P0/yt4/1//3+j9//jzr36fqv7/O/T/rM/c+v/c/e+IW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/r7X/3979Nf2//n/frw/9v/5f/38K9P/T9P8r6P/1/436//28/89JmFv/n7v/PXFLk/0PAAAAHeTuf2/ccqT9f+GEvisAAABgnXL3vy9u8ff/AQAAYBi5+98ftzTZ/3Pt/2/bzP5/D/3/XPr/H9P/7/t8/b/+f2T6//wTfTn9/wr6f/2//l//z1rNrf/P3f943NJk/wMAAEAHufs/ELfY/wAAADCM3P0fjFvsfwAAABhG7v4PxS1N9v9c+/8Nff9/jzn2/1uLjv2/9//1//r/TvT/0/T/K6y3/79d/6//1//r/7ubW/+fu//DcUuT/Q8AAACb6kd+8CcfP+q/Nnf/R+IW+x8AAACGkbv/o3GL/Q8AAADDyN3/RNzSZP/r/3v1/z3f/9f/6//1/53o/6fp/1fw/r/+X/+v/2et5tb/5+7/WNyya/htX/W/SwAAAGBOcvd/PG5p8vf/AQAAoIPc/Z+IWw7s/0tH/KfaAQAAgLnJ3f/JuKXJ3/8/dv+/2NL/n2T/v9D/6//1//p//f/V0P9PO2b/f2lL/6//n6D/1//r/9ntwgz7/9z9n4pbmux/AAAAGNSe/0Qhd/+n4xb7HwAAAIaRu/8zcYv9DwAAAMPI3f/ZuKXJ/vf+/8z7/2t6//9C/Xf6/+b9/x3nl36+/l//PzL9/6G+O26n9/8vfZf+/6qcdT+/6d+//l//z0Fz6/9z938ubmmy/wEAAKCD3P2fj1vsfwAAABhG7v4vxC32PwAAAAwjd/8X45Ym+1//P2L/7/1//f/054/T/3/v9Rcf/tEfv+8e/T9XnGb/n78WNqT/v+yY7/9vWv9/NZ9/5+X/qv/X/+v/9f+s1dz6/9z9X4pbmux/AAAA6CB3/5Nxi/0PAAAAw8jd/+W4xf4HAACAYeTufypuabL/N6r//379/8j9f/5cn0H/f3Hz+v9sirv3/97/1/8f5P3/afr/FfT/+n/9v/6ftZpb/5+7/ytxS5P9DwAAAB3k7v9q3GL/AwAAwDBy938tbrH/AQAAYBi5+5+OW5rs/43q/73/P3T/n66l/8/P9/6//n+h/29P/7/L9sEv6f9X0P/r//X/+n/Wam79f+7+r8ctTfY/AAAAdJC7/5m4xf4HAACAYeTu/0bcYv8DAADAMHL3fzNuabL/9f/6/xH6/2O+/382/f+zv93o//X/+v+10/9P0/+voP/X/+v/9f+s1dz6/9z93w4AAP//kgtiuA==") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x37, 0x0, 0x0, "16995886f876d256c54d8b2174d14dff", "9705d5759f2a6c662a9548815b73fca90116faf4496f9f26445fa385d831a6a0b320"}, 0x37, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)='./file0\x00') lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 1.232295434s ago: executing program 2 (id=1232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 1.076358667s ago: executing program 0 (id=1234): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x4040400) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.074274973s ago: executing program 2 (id=1235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.028570712s ago: executing program 0 (id=1236): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0}) 952.81603ms ago: executing program 1 (id=1237): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f000000ee40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 908.376107ms ago: executing program 0 (id=1238): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0x4c}}, 0x0) 808.185676ms ago: executing program 0 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x5}}]}, 0x38}}, 0x0) 630.599721ms ago: executing program 0 (id=1240): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 460.436042ms ago: executing program 2 (id=1241): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000401000/0x3000)=nil) munlockall() 432.2745ms ago: executing program 3 (id=1242): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r2, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1b, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x4c}}, 0x0) 228.572231ms ago: executing program 2 (id=1243): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="da42823e509616ae9a55d0343597086522f44a052ef8f88a8a64abac39413f811db3ba29e45a895c7a118795f77237ece84c9c45d8d2eb2a3cdc1cc16e59d6712fdfa5a7b7cf3f458acfda11f66f00269b82985a31ad3ddea2e3d332f35e4650e6f6bf0e75151841a5149d665af3a68cd8b512ebe57788f8e6cf15", @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYBLOB="fad50f61722d8f2e0ccd6186e627354da57807aa9a4f9752c80919dfb058acc725c18edc3e8760cabb4294aa9e3fc7f54e7122bc70666228004fb7f23cfbaaa3844f52c446820ec0b99b05d05f570d8c151971cedc87359c3dd4a292636a5bbf63f65e24e48bdff93a7edd3feb44df8153a1f5b36dd7424aa3e0a69c2da0542601a506fb13f1bc27fd19eca65aff32c9999a38a10c949a1c2377ae7de9691249adf0dd07da9250db2395f54e7802427cb8c0ce373cb5df46cc07c06db0a8125ab3fed2eaa59816083c4574eb8a41e5187afff1"], 0x1, 0x1e5, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) 144.360839ms ago: executing program 0 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x4000000) 143.730903ms ago: executing program 3 (id=1245): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {}, {@uid}, {}, {@noquota}, {@quota}, {@uid}]}, 0x1, 0x5ed3, &(0x7f0000011c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 95.774112ms ago: executing program 1 (id=1246): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 4 (id=1247): getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) kernel console output (not intermixed with test programs): oduct=9621, bcdDevice=4f.32 [ 103.814510][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.824996][ T25] usb 5-1: Product: syz [ 103.832250][ T25] usb 5-1: Manufacturer: syz [ 103.837353][ T25] usb 5-1: SerialNumber: syz [ 103.846672][ T25] usb 5-1: config 0 descriptor?? [ 103.852846][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 103.860142][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.062527][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.112109][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.148436][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.178593][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.200143][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.211701][ T6424] bridge_slave_0: entered allmulticast mode [ 104.227476][ T6424] bridge_slave_0: entered promiscuous mode [ 104.254294][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.267443][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.279631][ T6424] bridge_slave_1: entered allmulticast mode [ 104.289362][ T9] usb 1-1: config 0 has no interfaces? [ 104.292834][ T6424] bridge_slave_1: entered promiscuous mode [ 104.295294][ T9] usb 1-1: New USB device found, idVendor=042d, idProduct=1017, bcdDevice= 0.00 [ 104.343588][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.381990][ T9] usb 1-1: config 0 descriptor?? [ 104.391064][ T6506] Bluetooth: MGMT ver 1.23 [ 104.442581][ T1102] hsr_slave_0: left promiscuous mode [ 104.461020][ T6496] loop1: detected capacity change from 0 to 32768 [ 104.476569][ T1102] hsr_slave_1: left promiscuous mode [ 104.492893][ T4620] Bluetooth: hci2: command tx timeout [ 104.512921][ T6496] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.416 (6496) [ 104.541635][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.559309][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.579190][ T25] dm9601: No valid MAC address in EEPROM, using 6e:0c:02:e0:76:74 [ 104.624567][ T6496] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.636698][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.648606][ T9] usb 1-1: USB disconnect, device number 6 [ 104.661615][ T6496] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 104.688670][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.692730][ T6496] BTRFS info (device loop1): using free-space-tree [ 104.778070][ T25] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 104.804405][ T1102] veth1_macvtap: left promiscuous mode [ 104.807926][ T25] usb 5-1: USB disconnect, device number 5 [ 104.834566][ T1102] veth0_macvtap: left promiscuous mode [ 104.884313][ T1102] veth1_vlan: left promiscuous mode [ 104.904334][ T1102] veth0_vlan: left promiscuous mode [ 105.038704][ T29] audit: type=1800 audit(1724310168.142:26): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 105.243428][ T5224] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.437738][ T29] audit: type=1326 audit(1724310168.542:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.4.423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0484579e79 code=0x0 [ 106.031002][ T6559] loop2: detected capacity change from 0 to 128 [ 106.060996][ T6559] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 106.130624][ T6559] sysv_free_block: trying to free block not in datazone [ 106.211571][ T5233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 106.512608][ T940] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.573225][ T4620] Bluetooth: hci2: command tx timeout [ 106.648223][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 106.701544][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 106.736225][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 106.755416][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.775372][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.794157][ T940] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 106.815636][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.833553][ T940] usb 1-1: config 0 descriptor?? [ 107.256001][ T940] hid (null): unknown global tag 0xc [ 107.272929][ T940] bigben 0003:146B:0902.0009: unexpected rdesc, please submit for review [ 107.281838][ T940] bigben 0003:146B:0902.0009: unknown global tag 0xc [ 107.290841][ T940] bigben 0003:146B:0902.0009: item 0 4 1 12 parsing failed [ 107.302020][ T940] bigben 0003:146B:0902.0009: parse failed [ 107.308121][ T940] bigben 0003:146B:0902.0009: probe with driver bigben failed with error -22 [ 107.317547][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.320626][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.361323][ T6562] netlink: 'syz.1.430': attribute type 2 has an invalid length. [ 107.380189][ T6562] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 107.465602][ T5276] usb 1-1: USB disconnect, device number 7 [ 107.578480][ T6424] team0: Port device team_slave_0 added [ 107.600138][ T6424] team0: Port device team_slave_1 added [ 107.707682][ T6591] netlink: 'syz.2.439': attribute type 3 has an invalid length. [ 107.770589][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.808368][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.902432][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.934318][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.941312][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.983162][ T5277] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.998627][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.183979][ T5277] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.205766][ T5277] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.228224][ T6424] hsr_slave_0: entered promiscuous mode [ 108.250769][ T5277] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.284012][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.303434][ T6424] hsr_slave_1: entered promiscuous mode [ 108.316553][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.339707][ T6590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.358713][ T5277] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.375344][ T6424] Cannot create hsr debugfs directory [ 108.643035][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.654137][ T4620] Bluetooth: hci2: command tx timeout [ 108.714286][ T5276] usb 2-1: USB disconnect, device number 8 [ 108.902778][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 108.918586][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 108.928006][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.938839][ T25] usb 3-1: config 0 descriptor?? [ 108.946672][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 109.097032][ T6596] loop4: detected capacity change from 0 to 40427 [ 109.110639][ T6596] F2FS-fs (loop4): invalid crc value [ 109.121968][ T6596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.234476][ T6596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.283421][ T29] audit: type=1800 audit(1724310172.382:28): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 109.311018][ T29] audit: type=1804 audit(1724310172.382:29): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.442" name="/newroot/99/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 109.334830][ T5223] syz-executor: attempt to access beyond end of device [ 109.334830][ T5223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.399880][ T5223] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.593106][ T25] gspca_sonixj: reg_w1 err -71 [ 109.622650][ T25] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 109.665466][ T25] usb 3-1: USB disconnect, device number 6 [ 109.714384][ T6424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.734697][ T6424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.849871][ T6424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.882208][ T6424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.050115][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.092082][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.125349][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.132548][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.188472][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.195780][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.386457][ T6657] process 'syz.4.456' launched './file0' with NULL argv: empty string added [ 110.560751][ T6643] loop1: detected capacity change from 0 to 32768 [ 110.589957][ T6643] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.452 (6643) [ 110.695662][ T6643] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 110.746387][ T6643] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 110.766946][ T6643] BTRFS info (device loop1): disk space caching is enabled [ 110.792649][ T6643] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 110.804863][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.893072][ T4620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.898065][ T6424] veth0_vlan: entered promiscuous mode [ 111.016904][ T6424] veth1_vlan: entered promiscuous mode [ 111.076197][ T6424] veth0_macvtap: entered promiscuous mode [ 111.086580][ T6424] veth1_macvtap: entered promiscuous mode [ 111.103288][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.115184][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.176534][ T6689] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 111.187606][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.190268][ T6643] BTRFS info (device loop1): rebuilding free space tree [ 111.230234][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.260358][ T6643] BTRFS info (device loop1): disabling free space tree [ 111.278184][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.292992][ T6643] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.304624][ T6643] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.312468][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.342517][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.384433][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.415623][ T6692] loop0: detected capacity change from 0 to 8192 [ 111.429691][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.515122][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.572878][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.603104][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.610863][ T6653] loop2: detected capacity change from 0 to 40427 [ 111.641605][ T6653] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.642447][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.676890][ T6653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.690559][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.699643][ T6653] F2FS-fs (loop2): invalid crc value [ 111.732047][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.748186][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.761261][ T6653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.786751][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.816254][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.830795][ T5224] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 111.939416][ T6653] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.951222][ T6424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.984511][ T6653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.993084][ T6424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.004662][ T6424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.029494][ T6424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.087971][ T29] audit: type=1800 audit(1724310175.182:30): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.455" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 112.101106][ T6653] syz.2.455: attempt to access beyond end of device [ 112.101106][ T6653] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.295896][ T943] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.316817][ T2486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.329931][ T6653] syz.2.455: attempt to access beyond end of device [ 112.329931][ T6653] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 112.352812][ T2486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.436420][ T2486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.465606][ T2486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.502570][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 112.542819][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.555783][ T6725] loop1: detected capacity change from 0 to 64 [ 112.573186][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.592592][ T943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.617951][ T943] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.627220][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.648520][ T943] usb 1-1: config 0 descriptor?? [ 112.678087][ T6726] smc: net device wg0 applied user defined pnetid SYZ0 [ 112.712516][ T6726] smc: net device wg0 erased user defined pnetid SYZ0 [ 113.088724][ T943] microsoft 0003:045E:07DA.000A: report is too long [ 113.118130][ T943] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 113.128568][ T943] microsoft 0003:045E:07DA.000A: parse failed [ 113.175848][ T943] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 113.361936][ T6745] loop4: detected capacity change from 0 to 1024 [ 113.383141][ T6745] ext4: Unknown parameter 'pcr' [ 113.869917][ T5276] usb 1-1: USB disconnect, device number 8 [ 113.895923][ T6761] loop3: detected capacity change from 0 to 128 [ 114.071827][ T6738] loop1: detected capacity change from 0 to 32768 [ 114.087473][ T6738] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.467 (6738) [ 114.132742][ T6738] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.164485][ T6738] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 114.197149][ T6738] BTRFS info (device loop1): using free-space-tree [ 114.483885][ T6788] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.477'. [ 114.597896][ T6786] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.477'. [ 114.834303][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'. [ 115.629461][ T5224] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.444259][ T6820] loop0: detected capacity change from 0 to 32768 [ 116.462227][ T6812] loop2: detected capacity change from 0 to 32768 [ 116.493562][ T6820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.486 (6820) [ 116.611282][ T6812] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.650675][ T6820] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.661544][ T6820] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 116.670861][ T6820] BTRFS info (device loop0): using free-space-tree [ 116.745920][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 116.767041][ T6812] XFS (loop2): Ending clean mount [ 116.778461][ T6812] XFS (loop2): Quotacheck needed: Please wait. [ 116.850505][ T6812] XFS (loop2): Quotacheck: Done. [ 117.097170][ T5233] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.097377][ T5230] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.667665][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.505'. [ 117.703361][ T6908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.859172][ T6914] tipc: Started in network mode [ 117.864676][ T6914] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 117.877316][ T6914] tipc: Enabling of bearer rejected, failed to enable media [ 118.214294][ T6925] loop1: detected capacity change from 0 to 16 [ 118.291030][ T6925] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.349046][ T6925] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 118.394850][ T6925] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4 in[53, 4043] out[1851] [ 118.411246][ T6929] loop2: detected capacity change from 0 to 512 [ 118.417952][ T6925] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 118.473153][ T6929] EXT4-fs: Ignoring removed bh option [ 118.523070][ T6929] EXT4-fs error (device loop2): __ext4_iget:4982: inode #15: block 1803188595: comm syz.2.512: invalid block [ 118.560775][ T6929] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.512: couldn't read orphan inode 15 (err -117) [ 118.603901][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.707867][ T6929] EXT4-fs (loop2): shut down requested (0) [ 118.722481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 118.730974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 118.754595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.964151][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.115601][ T6946] loop3: detected capacity change from 0 to 524288000 [ 119.147126][ T6912] loop0: detected capacity change from 0 to 40427 [ 119.162481][ T6912] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 119.169620][ T6912] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.359275][ T6912] F2FS-fs (loop0): invalid crc value [ 119.398626][ T6912] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.415544][ T6939] loop4: detected capacity change from 0 to 32768 [ 119.481662][ T6939] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 119.518721][ T6912] F2FS-fs (loop0): Start checkpoint disabled! [ 119.538202][ T6912] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.593529][ T6912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 119.605828][ T6939] XFS (loop4): Ending clean mount [ 119.610643][ T6969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.617319][ T6939] XFS (loop4): Quotacheck needed: Please wait. [ 119.652014][ T6939] XFS (loop4): Quotacheck: Done. [ 119.756252][ T6973] loop1: detected capacity change from 0 to 1024 [ 119.790186][ T6912] syz.0.500: attempt to access beyond end of device [ 119.790186][ T6912] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 119.849243][ T5223] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 119.901592][ T6973] hfsplus: extend alloc file! (8192,512,16777719) [ 120.164769][ T35] kworker/u8:2: attempt to access beyond end of device [ 120.164769][ T35] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 120.206807][ T35] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 120.236253][ T6980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.531'. [ 120.276420][ T35] kworker/u8:2: attempt to access beyond end of device [ 120.276420][ T35] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 120.298617][ T6980] netlink: 84 bytes leftover after parsing attributes in process `syz.1.531'. [ 120.392353][ T35] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 121.050269][ T6977] loop3: detected capacity change from 0 to 40427 [ 121.072589][ T6977] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 121.089724][ T6977] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.122743][ T6977] F2FS-fs (loop3): invalid crc value [ 121.139456][ T6977] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.430167][ T6977] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.460888][ T6977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 121.668513][ T6424] syz-executor: attempt to access beyond end of device [ 121.668513][ T6424] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.727965][ T6424] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.268570][ T6997] loop1: detected capacity change from 0 to 32768 [ 122.282757][ T7016] syz.2.544: attempt to access beyond end of device [ 122.282757][ T7016] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 122.293094][ T6997] XFS: attr2 mount option is deprecated. [ 122.296116][ T7016] XFS (loop2): SB validate failed with error -5. [ 122.355630][ T41] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 122.377859][ T6997] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 122.642852][ T6997] XFS (loop1): Ending clean mount [ 122.652096][ T6997] XFS (loop1): Quotacheck needed: Please wait. [ 123.024122][ T6997] XFS (loop1): Quotacheck: Done. [ 123.390169][ T7011] loop0: detected capacity change from 0 to 40427 [ 123.480528][ T7011] F2FS-fs (loop0): invalid crc value [ 123.593243][ T7014] coredump: 286(syz.4.543): written to core: VMAs: 34, size 99389440; core: 62120902 bytes, pos 99397632 [ 123.595727][ T5224] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 123.658749][ T5277] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.690766][ T7011] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.865804][ T5277] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 123.885055][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.930201][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.977812][ T7011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.977972][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.080414][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.105054][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.116027][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.143221][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.160085][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.171116][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.189452][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.193090][ T5230] syz-executor: attempt to access beyond end of device [ 124.193090][ T5230] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.198857][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.232518][ T5230] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.271677][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.293478][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.302870][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.342224][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.395488][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.432694][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.462698][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.476294][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.492786][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.532519][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.532582][ T940] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.540164][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.582942][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.643666][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.651722][ T7061] tun0: tun_chr_ioctl cmd 2147767521 [ 124.663949][ T5277] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 124.682573][ T5277] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.691058][ T5277] usb 3-1: Product: syz [ 124.703283][ T5277] usb 3-1: Manufacturer: syz [ 124.707930][ T5277] usb 3-1: SerialNumber: syz [ 124.736097][ T5277] usb 3-1: config 0 descriptor?? [ 124.745777][ T5277] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 124.759177][ T940] usb 4-1: config 1 has an invalid interface number: 3 but max is 1 [ 124.788138][ T940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.832498][ T940] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 124.857524][ T940] usb 4-1: config 1 has no interface number 2 [ 124.872859][ T940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.912584][ T940] usb 4-1: config 1 interface 3 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.942596][ T940] usb 4-1: config 1 interface 3 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.977799][ T940] usb 4-1: config 1 interface 3 has no altsetting 0 [ 124.997469][ T940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.012275][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.055521][ T940] usb 4-1: Product: syz [ 125.063072][ T940] usb 4-1: Manufacturer: syz [ 125.067764][ T940] usb 4-1: SerialNumber: syz [ 125.144188][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 125.154488][ T5321] usb 3-1: USB disconnect, device number 7 [ 125.168784][ T5321] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 125.382831][ T5277] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 125.520813][ T940] usb 4-1: selecting invalid altsetting 1 [ 125.572604][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 125.583621][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 125.600534][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 125.610476][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.627190][ T5277] usb 1-1: Product: syz [ 125.633841][ T5277] usb 1-1: Manufacturer: syz [ 125.640736][ T5277] usb 1-1: SerialNumber: syz [ 125.660724][ T5277] usb 1-1: config 0 descriptor?? [ 125.673785][ T5277] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 125.956340][ T940] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 125.963269][ T940] cdc_ncm 4-1:1.0: bind() failure [ 125.978432][ T940] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 125.986037][ T940] cdc_ncm 4-1:1.1: bind() failure [ 126.287555][ T5277] gspca_zc3xx: reg_w_i err -71 [ 126.301566][ T47] usb 4-1: USB disconnect, device number 4 [ 126.429012][ T7088] loop2: detected capacity change from 0 to 2048 [ 126.480523][ T7088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.512736][ T940] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.527182][ T7088] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.548144][ T7088] EXT4-fs (loop2): Remounting filesystem read-only [ 126.578641][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.712512][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 126.725174][ T940] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 126.752467][ T940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 126.788620][ T940] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 126.803385][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.811421][ T940] usb 2-1: Product: syz [ 126.842593][ T940] usb 2-1: Manufacturer: syz [ 126.847241][ T940] usb 2-1: SerialNumber: syz [ 126.865625][ T940] usb 2-1: config 0 descriptor?? [ 126.872167][ T7085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.917224][ T940] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 126.932834][ T5277] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 126.943208][ T5277] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 126.982213][ T5277] usb 1-1: USB disconnect, device number 9 [ 127.096516][ T7103] loop3: detected capacity change from 0 to 128 [ 127.150465][ T7103] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.190611][ T940] usb 2-1: USB disconnect, device number 9 [ 127.240925][ T7103] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.389088][ T6424] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.467818][ T7110] input: syz1 as /devices/virtual/input/input14 [ 129.078574][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 129.154005][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.587'. [ 129.597973][ T7119] loop1: detected capacity change from 0 to 40427 [ 129.653448][ T7119] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 129.712721][ T7119] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.800117][ T7119] F2FS-fs (loop1): invalid crc value [ 129.873025][ T7119] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.194749][ T7119] F2FS-fs (loop1): Start checkpoint disabled! [ 130.267172][ T7119] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.332355][ T7119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.866593][ T35] kworker/u8:2: attempt to access beyond end of device [ 130.866593][ T35] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 130.932052][ T7172] loop0: detected capacity change from 0 to 64 [ 130.992685][ T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.043559][ T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.050494][ T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.157432][ T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.351906][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 131.417445][ T7176] Bluetooth: hci5: Frame reassembly failed (-84) [ 131.490154][ T7178] netlink: 188 bytes leftover after parsing attributes in process `syz.0.608'. [ 132.718951][ T7180] loop3: detected capacity change from 0 to 40427 [ 132.727652][ T7180] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 132.735587][ T7180] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 132.795040][ T7180] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.924283][ T7180] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 132.949771][ T7180] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.072572][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.079044][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151397][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.171427][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.183078][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.372861][ T4620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.402990][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.411805][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.423122][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.430451][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.509338][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.965398][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.025532][ T7202] mmap: syz.2.617 (7202) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.089819][ T7194] loop0: detected capacity change from 0 to 32768 [ 134.147582][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.201042][ T7194] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 134.285784][ T7198] chnl_net:caif_netlink_parms(): no params data found [ 134.450442][ T7194] XFS (loop0): Ending clean mount [ 134.477649][ T7194] capability: warning: `syz.0.615' uses 32-bit capabilities (legacy support in use) [ 134.533368][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.542079][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.563498][ T5230] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 134.578036][ T7198] bridge_slave_0: entered allmulticast mode [ 134.659132][ T7198] bridge_slave_0: entered promiscuous mode [ 134.715192][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.755712][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.778167][ T7198] bridge_slave_1: entered allmulticast mode [ 134.804051][ T7198] bridge_slave_1: entered promiscuous mode [ 134.991603][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.034344][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 135.082818][ T7237] wireguard0: entered promiscuous mode [ 135.111250][ T7237] wireguard0: entered allmulticast mode [ 135.265286][ T7209] loop1: detected capacity change from 0 to 40427 [ 135.313210][ T7209] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.379857][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.397667][ T7209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.450928][ T7198] team0: Port device team_slave_0 added [ 135.460312][ T7198] team0: Port device team_slave_1 added [ 135.518170][ T56] bridge_slave_1: left allmulticast mode [ 135.540615][ T56] bridge_slave_1: left promiscuous mode [ 135.581050][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.662134][ T56] bridge_slave_0: left allmulticast mode [ 135.669489][ T5224] syz-executor: attempt to access beyond end of device [ 135.669489][ T5224] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.681298][ T7252] loop2: detected capacity change from 0 to 128 [ 135.692916][ T5243] Bluetooth: hci0: command tx timeout [ 135.700697][ T7252] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 135.717854][ T56] bridge_slave_0: left promiscuous mode [ 135.753474][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.757685][ T5224] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.814102][ T7235] loop3: detected capacity change from 0 to 32768 [ 135.831686][ T5233] sysv_free_block: trying to free block not in datazone [ 135.928568][ T5233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 135.937879][ T7235] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.049020][ T7235] XFS (loop3): Ending clean mount [ 136.405842][ T6424] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.839776][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.886951][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.902038][ T56] bond0 (unregistering): Released all slaves [ 136.964119][ T7283] tun0: tun_chr_ioctl cmd 35111 [ 137.082554][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.105889][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.131937][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.175689][ T7198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.333744][ T7301] loop2: detected capacity change from 0 to 64 [ 137.373924][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.385793][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.411801][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.484989][ T7198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.703781][ T7310] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 137.745992][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 137.773951][ T5243] Bluetooth: hci0: command tx timeout [ 137.958426][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 138.030068][ T7315] loop1: detected capacity change from 0 to 32768 [ 138.030068][ T7198] hsr_slave_0: entered promiscuous mode [ 138.042947][ T7198] hsr_slave_1: entered promiscuous mode [ 138.047293][ T7315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.645 (7315) [ 138.069770][ T7315] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.069890][ T7198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.080467][ T7315] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.089145][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.097146][ T7315] BTRFS info (device loop1): using free-space-tree [ 138.199416][ T7198] Cannot create hsr debugfs directory [ 138.333500][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 138.340660][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.352902][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.392803][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.433802][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.463477][ T56] hsr_slave_0: left promiscuous mode [ 138.469125][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.478010][ T56] hsr_slave_1: left promiscuous mode [ 138.510429][ T9] usb 4-1: config 0 descriptor?? [ 138.528728][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.536626][ T5224] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.572496][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.624441][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.672085][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.850580][ T56] veth1_macvtap: left promiscuous mode [ 138.878259][ T56] veth0_macvtap: left promiscuous mode [ 138.897861][ T56] veth1_vlan: left promiscuous mode [ 138.932600][ T56] veth0_vlan: left promiscuous mode [ 138.961864][ T9] microsoft 0003:045E:07DA.000B: report is too long [ 139.008648][ T9] microsoft 0003:045E:07DA.000B: item 0 4 0 8 parsing failed [ 139.024758][ T9] microsoft 0003:045E:07DA.000B: parse failed [ 139.047193][ T9] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 139.224173][ T7325] loop2: detected capacity change from 0 to 32768 [ 139.248167][ T7325] XFS: noikeep mount option is deprecated. [ 139.293365][ T7325] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 139.369283][ T7325] XFS (loop2): Ending clean mount [ 139.376656][ T7325] XFS (loop2): Quotacheck needed: Please wait. [ 139.450623][ T7325] XFS (loop2): Quotacheck: Done. [ 139.480508][ T7337] loop0: detected capacity change from 0 to 32768 [ 139.491149][ T7337] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.647 (7337) [ 139.568690][ T7337] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.602223][ T7337] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.649040][ T7337] BTRFS info (device loop0): using free-space-tree [ 139.668342][ T5233] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 139.809748][ T7337] BTRFS info (device loop0): rebuilding free space tree [ 139.852634][ T5243] Bluetooth: hci0: command tx timeout [ 140.041045][ T5230] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.312332][ T56] team0 (unregistering): Port device team_slave_1 removed [ 140.410435][ T56] team0 (unregistering): Port device team_slave_0 removed [ 140.954791][ T7384] loop0: detected capacity change from 0 to 32768 [ 140.999841][ T7384] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.065692][ T7384] XFS (loop0): Ending clean mount [ 141.072911][ T7384] XFS (loop0): Quotacheck needed: Please wait. [ 141.184987][ T7384] XFS (loop0): Quotacheck: Done. [ 141.350189][ T5230] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.421016][ T7397] dvmrp0: entered allmulticast mode [ 141.482531][ T7399] Zero length message leads to an empty skb [ 141.530987][ T7395] dvmrp0: left allmulticast mode [ 141.625938][ T9] usb 4-1: USB disconnect, device number 5 [ 141.836469][ T7404] loop0: detected capacity change from 0 to 4096 [ 141.933970][ T5243] Bluetooth: hci0: command tx timeout [ 142.006966][ T7404] ntfs3: loop0: ino=0, "file0" failed to parse mft record [ 142.075895][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 142.094210][ T7417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 142.340329][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 142.455731][ T56] IPVS: stop unused estimator thread 0... [ 142.612738][ T940] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.815311][ T940] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 142.843241][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.875100][ T940] usb 2-1: config 0 descriptor?? [ 143.186835][ T940] usb 2-1: can't set first interface for hiFace device. [ 143.214730][ T940] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 143.238307][ T7198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.259045][ T940] usb 2-1: USB disconnect, device number 10 [ 143.323636][ T7198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.403980][ T7453] loop2: detected capacity change from 0 to 4096 [ 143.443675][ T7198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.505745][ T7453] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 143.512162][ T7438] loop3: detected capacity change from 0 to 32768 [ 143.518131][ T7198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.530156][ T7438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.668 (7438) [ 143.577341][ T7438] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.590507][ T7438] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 143.603445][ T7438] BTRFS info (device loop3): using free-space-tree [ 143.666303][ T7453] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 143.889195][ T7198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.910690][ T7481] netlink: 'syz.1.676': attribute type 29 has an invalid length. [ 143.921689][ T6424] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.953733][ T7481] netlink: 'syz.1.676': attribute type 29 has an invalid length. [ 144.014342][ T7481] netlink: 'syz.1.676': attribute type 29 has an invalid length. [ 144.165645][ T7198] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.621448][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 144.632627][ T7496] netlink: 72 bytes leftover after parsing attributes in process `syz.0.681'. [ 144.690350][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.697579][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.797762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.804947][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.861086][ T7198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.872057][ T7198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.040584][ T7518] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.685'. [ 145.164109][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 145.296621][ T7500] loop3: detected capacity change from 0 to 32768 [ 145.340071][ T7500] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.677 (7500) [ 145.431438][ T7500] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 145.439667][ T7533] loop0: detected capacity change from 0 to 4096 [ 145.477532][ T7198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.483024][ T7500] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 145.504753][ T7541] loop1: detected capacity change from 0 to 1024 [ 145.522504][ T7500] BTRFS info (device loop3): using free-space-tree [ 145.561575][ T7549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.593646][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.702591][ T5321] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.788100][ T5224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.102591][ T5321] usb 3-1: Using ep0 maxpacket: 16 [ 146.152535][ T6424] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 146.227378][ T5321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.237789][ T5321] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 146.247205][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.273781][ T5321] usb 3-1: config 0 descriptor?? [ 146.300769][ T5321] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 146.332798][ T7198] veth0_vlan: entered promiscuous mode [ 146.343921][ T7198] veth1_vlan: entered promiscuous mode [ 146.366810][ T7198] veth0_macvtap: entered promiscuous mode [ 146.376062][ T7198] veth1_macvtap: entered promiscuous mode [ 146.435374][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.478913][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.697'. [ 146.502644][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.521988][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.537355][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.549211][ T4666] bcm5974 3-1:0.0: could not read from device [ 146.561595][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.574436][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.590501][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.604988][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.653182][ T7198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.669673][ T7536] bcm5974 3-1:0.0: could not read from device [ 146.687577][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.753912][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.782661][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.812025][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.839407][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.852550][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.867612][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.893498][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.935067][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.964315][ T7198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.966763][ T5321] usb 3-1: USB disconnect, device number 8 [ 147.002624][ T4666] bcm5974 3-1:0.0: could not read from device [ 147.037068][ T7198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.077576][ T7198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.113017][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.117551][ T7198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.125933][ T47] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.145099][ T7198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.194066][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.221212][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.270953][ T7593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.295142][ T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.306257][ T7607] loop1: detected capacity change from 0 to 4096 [ 147.373317][ T7607] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 147.484143][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.491979][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.503767][ T7607] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 147.562897][ T7607] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 147.641980][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.652126][ T5278] usb 1-1: USB disconnect, device number 10 [ 147.685343][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.733342][ T5224] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 147.909428][ T7627] netlink: 'syz.4.614': attribute type 5 has an invalid length. [ 148.236053][ T7641] sch_fq: defrate 0 ignored. [ 148.254670][ T7638] loop4: detected capacity change from 0 to 2048 [ 148.293172][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.398061][ T7638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.709: bg 0: block 2: invalid block bitmap [ 148.450431][ T7638] EXT4-fs (loop4): Remounting filesystem read-only [ 148.460618][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 148.490048][ T7652] loop1: detected capacity change from 0 to 2048 [ 148.539993][ T7656] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 148.596456][ T7198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.618050][ T7652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.828486][ T5224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.853002][ T5278] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.074290][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.094658][ T7680] netlink: 180 bytes leftover after parsing attributes in process `syz.1.729'. [ 149.098189][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.112569][ T7680] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 149.116351][ T940] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.149462][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.171874][ T5278] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 149.204044][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.216741][ T5278] usb 1-1: config 0 descriptor?? [ 149.295254][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.316012][ T940] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.329109][ T940] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.350693][ T940] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.361636][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.406361][ T7672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 149.429985][ T940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.637094][ T7694] loop1: detected capacity change from 0 to 64 [ 149.684562][ T940] usb 5-1: USB disconnect, device number 6 [ 149.708253][ T5278] hid-udraw 0003:20D6:CB17.000C: unknown main item tag 0x0 [ 149.720604][ T5278] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000C/input/input16 [ 149.761042][ T5278] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000C/input/input17 [ 149.875288][ T5278] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000C/input/input18 [ 150.008741][ T5278] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000C/input/input19 [ 150.027432][ T7682] loop3: detected capacity change from 0 to 32768 [ 150.085261][ T7682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.728 (7682) [ 150.114258][ T5278] hid-udraw 0003:20D6:CB17.000C: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 150.162456][ T7682] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.178788][ T5278] usb 1-1: USB disconnect, device number 11 [ 150.203628][ T7682] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 150.246582][ T7682] BTRFS info (device loop3): using free-space-tree [ 150.410384][ T7682] BTRFS info (device loop3): rebuilding free space tree [ 150.857202][ T6424] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.138183][ T7742] loop0: detected capacity change from 0 to 1024 [ 151.482944][ T7746] loop3: detected capacity change from 0 to 32768 [ 151.573985][ T7752] loop1: detected capacity change from 0 to 8 [ 151.580912][ T7752] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 151.590726][ T7754] loop4: detected capacity change from 0 to 256 [ 151.643775][ T7754] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 151.644144][ T7742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.678162][ T7746] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.702053][ T7742] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.804863][ T7746] XFS (loop3): Ending clean mount [ 151.836605][ T7746] XFS (loop3): Quotacheck needed: Please wait. [ 151.860272][ T7765] loop1: detected capacity change from 0 to 2048 [ 151.869742][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.987333][ T7768] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.014561][ T7746] XFS (loop3): Quotacheck: Done. [ 152.130061][ T7768] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 152.146952][ T7768] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 152.257410][ T7768] Remounting filesystem read-only [ 152.294003][ T6424] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 152.321675][ T5224] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 152.845522][ T7773] loop4: detected capacity change from 0 to 32768 [ 152.889725][ T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.072775][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 153.084231][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.108320][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.134886][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.152687][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.161218][ T47] usb 3-1: Product: syz [ 153.171425][ T47] usb 3-1: Manufacturer: syz [ 153.182560][ T47] usb 3-1: SerialNumber: syz [ 153.195502][ T47] usb 3-1: config 0 descriptor?? [ 153.233661][ T47] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.253129][ T47] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 153.351853][ T7809] [U] ^R [ 153.856934][ T47] em28xx 3-1:0.0: chip ID is em2874 [ 154.016753][ T7825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.047108][ T7825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.063120][ T7825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.074185][ T7825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.084797][ T7825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.085687][ T5278] usb 3-1: USB disconnect, device number 9 [ 154.112798][ T7825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.116939][ T5278] em28xx 3-1:0.0: Disconnecting em28xx [ 154.134470][ T7825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.148912][ T7825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.161787][ T7825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.174545][ T5278] em28xx 3-1:0.0: Freeing device [ 154.182275][ T7825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.500509][ T7827] loop0: detected capacity change from 0 to 32768 [ 154.526733][ T7827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.784 (7827) [ 154.555892][ T7827] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.603034][ T7827] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.632269][ T7827] BTRFS info (device loop0): using free-space-tree [ 154.964910][ T5230] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.409259][ T7838] loop4: detected capacity change from 0 to 32768 [ 155.466161][ T7838] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.789 (7838) [ 155.516578][ T7838] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.593032][ T7838] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 155.631826][ T7838] BTRFS info (device loop4): using free-space-tree [ 155.875124][ T7838] BTRFS info (device loop4): rebuilding free space tree [ 155.980328][ T7884] loop0: detected capacity change from 0 to 4096 [ 156.114936][ T7861] loop2: detected capacity change from 0 to 40427 [ 156.146104][ T7861] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 156.154398][ T7861] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.226035][ T7884] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 156.251846][ T7884] UDF-fs: Scanning with blocksize 512 failed [ 156.296682][ T7884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.412670][ T7861] F2FS-fs (loop2): invalid crc value [ 156.602723][ T7198] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.712655][ T7861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.989374][ T7861] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 157.119790][ T7895] coredump: 170(syz.3.799): written to core: VMAs: 34, size 99389440; core: 62108614 bytes, pos 99397632 [ 157.185593][ T7861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 157.239874][ T5233] syz-executor: attempt to access beyond end of device [ 157.239874][ T5233] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.272848][ T5233] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 157.632181][ T7867] loop1: detected capacity change from 0 to 32768 [ 157.722895][ T7867] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.795 (7867) [ 157.823935][ T7905] loop4: detected capacity change from 0 to 512 [ 157.874067][ T7867] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.893095][ T7905] EXT4-fs: Ignoring removed oldalloc option [ 157.933650][ T7867] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 158.037634][ T7867] BTRFS info (device loop1): using free-space-tree [ 158.128130][ T7905] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.804: Parent and EA inode have the same ino 15 [ 158.277751][ T7905] EXT4-fs (loop4): Remounting filesystem read-only [ 158.286895][ T7917] tun0: tun_chr_ioctl cmd 2147767521 [ 158.288107][ T7905] EXT4-fs (loop4): 1 orphan inode deleted [ 158.310464][ T7905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.394093][ T7867] BTRFS info (device loop1): rebuilding free space tree [ 158.448984][ T7198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.694194][ T7903] loop0: detected capacity change from 0 to 32768 [ 158.778142][ T5224] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.804146][ T7903] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 158.852599][ T940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.888307][ T7903] XFS (loop0): Ending clean mount [ 158.947442][ T7903] XFS (loop0): Quotacheck needed: Please wait. [ 159.034976][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 159.050477][ T7903] XFS (loop0): Quotacheck: Done. [ 159.050910][ T940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.118034][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.171776][ T940] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.192510][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.200547][ T940] usb 3-1: Product: syz [ 159.205022][ T940] usb 3-1: Manufacturer: syz [ 159.209641][ T940] usb 3-1: SerialNumber: syz [ 159.227257][ T940] usb 3-1: config 0 descriptor?? [ 159.238019][ T940] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.247900][ T940] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 159.381466][ T5230] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 159.464762][ T7943] loop1: detected capacity change from 0 to 4096 [ 159.489309][ T7943] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 159.657699][ T7943] ntfs3: loop1: failed to convert "c46c" to cp861 [ 160.292540][ T940] em28xx 3-1:0.0: chip ID is em28178 [ 160.573673][ T5276] usb 3-1: USB disconnect, device number 10 [ 160.597769][ T5276] em28xx 3-1:0.0: Disconnecting em28xx [ 160.644245][ T5276] em28xx 3-1:0.0: Freeing device [ 160.688379][ T5278] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.903473][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 160.912023][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.933772][ T5278] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 160.952048][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.987704][ T5278] usb 2-1: config 0 descriptor?? [ 161.042876][ T5278] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 161.264022][ T4666] bcm5974 2-1:0.0: could not read from device [ 161.331356][ T7950] bcm5974 2-1:0.0: could not read from device [ 161.380813][ T4666] bcm5974 2-1:0.0: could not read from device [ 161.390302][ T5278] usb 2-1: USB disconnect, device number 11 [ 161.483954][ T5228] bcm5974 2-1:0.0: could not read from device [ 161.701695][ T7972] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 161.997207][ T7977] loop2: detected capacity change from 0 to 1024 [ 162.094640][ T7977] hfsplus: bad catalog entry type [ 162.304057][ T7981] loop2: detected capacity change from 0 to 128 [ 162.412197][ T7981] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 162.455683][ T7981] sysv_free_block: trying to free block not in datazone [ 162.478342][ T7981] sysv_free_block: trying to free block not in datazone [ 162.505698][ T7981] sysv_free_block: trying to free block not in datazone [ 162.539807][ T7981] sysv_free_block: trying to free block not in datazone [ 162.560041][ T7981] sysv_free_block: trying to free block not in datazone [ 162.602683][ T7981] sysv_free_block: trying to free block not in datazone [ 162.638129][ T7981] sysv_free_block: trying to free block not in datazone [ 162.808555][ T5233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 163.463774][ T7989] loop2: detected capacity change from 0 to 2048 [ 163.617766][ T7990] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.949876][ T7975] loop0: detected capacity change from 0 to 40427 [ 164.071954][ T7975] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 164.115656][ T7975] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.183421][ T7994] Bluetooth: MGMT ver 1.23 [ 164.230284][ T7975] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.451720][ T29] audit: type=1400 audit(1724310227.542:31): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 164.527810][ T7975] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 164.823053][ T8008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.835'. [ 165.069272][ T8010] loop2: detected capacity change from 0 to 1024 [ 165.111460][ T8010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.141822][ T7975] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.169762][ T8010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.276068][ T8010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.520000][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.252651][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.262583][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.345356][ T8025] loop2: detected capacity change from 0 to 2048 [ 166.395413][ T8032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.614782][ T8032] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 166.636513][ T8039] tun0: tun_chr_ioctl cmd 2148553947 [ 166.661792][ T8032] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 166.711585][ T8032] Remounting filesystem read-only [ 166.726067][ T5233] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 167.037672][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.072945][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.180982][ T8046] loop2: detected capacity change from 0 to 40427 [ 167.203840][ T8046] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 167.210828][ T8046] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 167.229513][ T8046] F2FS-fs (loop2): invalid crc value [ 167.242921][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.253506][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.261367][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.262990][ T8046] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.271608][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.329262][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.432623][ T8055] tun0: tun_chr_ioctl cmd 35111 [ 167.460889][ T8046] F2FS-fs (loop2): Start checkpoint disabled! [ 167.714197][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.729949][ T8046] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 167.737294][ T8046] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 167.838240][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.871057][ T8062] loop1: detected capacity change from 0 to 2048 [ 167.891643][ T56] kworker/u8:3: attempt to access beyond end of device [ 167.891643][ T56] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 167.905935][ T56] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.913109][ T56] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.920000][ T56] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.927166][ T56] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.949725][ T8062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.022062][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.406307][ T62] bridge_slave_1: left allmulticast mode [ 168.430281][ T62] bridge_slave_1: left promiscuous mode [ 168.453020][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.518454][ T62] bridge_slave_0: left allmulticast mode [ 168.532438][ T62] bridge_slave_0: left promiscuous mode [ 168.549752][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.689325][ T8082] QAT: Device 0 not found [ 169.298493][ T8095] loop2: detected capacity change from 0 to 2048 [ 169.316856][ T8095] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.372755][ T5236] Bluetooth: hci2: command tx timeout [ 169.427349][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.482914][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.505454][ T62] bond0 (unregistering): Released all slaves [ 169.534757][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 169.560359][ T8081] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 169.589313][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 170.008769][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.036604][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.056960][ T8049] bridge_slave_0: entered allmulticast mode [ 170.073609][ T8049] bridge_slave_0: entered promiscuous mode [ 170.098652][ T8097] loop2: detected capacity change from 0 to 32768 [ 170.106850][ T8097] XFS: attr2 mount option is deprecated. [ 170.112813][ T8097] XFS: ikeep mount option is deprecated. [ 170.120885][ T8097] XFS: noikeep mount option is deprecated. [ 170.147041][ T8097] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 170.219382][ T8097] XFS (loop2): Ending clean mount [ 170.246322][ T8097] XFS (loop2): Quotacheck needed: Please wait. [ 170.262684][ T8126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.881'. [ 170.341117][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.374495][ T8097] XFS (loop2): Quotacheck: Done. [ 170.390240][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.400758][ T8049] bridge_slave_1: entered allmulticast mode [ 170.408376][ T8049] bridge_slave_1: entered promiscuous mode [ 170.552619][ T8138] QAT: Device 0 not found [ 170.566031][ T62] hsr_slave_0: left promiscuous mode [ 170.579547][ T5233] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 170.598532][ T62] hsr_slave_1: left promiscuous mode [ 170.656663][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.668926][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.773103][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.800270][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.948992][ T62] veth1_macvtap: left promiscuous mode [ 170.958768][ T62] veth0_macvtap: left promiscuous mode [ 170.972074][ T62] veth1_vlan: left promiscuous mode [ 170.981062][ T62] veth0_vlan: left promiscuous mode [ 170.981161][ T8151] loop4: detected capacity change from 0 to 2048 [ 171.032038][ T8151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.245436][ T8157] loop0: detected capacity change from 0 to 4096 [ 171.259170][ T8157] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 171.374624][ T943] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.452698][ T5236] Bluetooth: hci2: command tx timeout [ 171.609847][ T943] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 171.622086][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.637572][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.652139][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.664186][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.679300][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.690449][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.709478][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.728194][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.745581][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.755019][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.764314][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.775803][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.783879][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.798944][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.811240][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.825640][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.842310][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.860049][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.869493][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.885237][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.896427][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.911292][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.921084][ T943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.939146][ T943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.953413][ T943] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 171.968238][ T943] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 171.979321][ T943] usb 2-1: Product: syz [ 171.983675][ T943] usb 2-1: Manufacturer: syz [ 171.988611][ T943] usb 2-1: SerialNumber: syz [ 172.007856][ T943] usb 2-1: config 0 descriptor?? [ 172.030362][ T943] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 172.182985][ T8165] loop2: detected capacity change from 0 to 40427 [ 172.193885][ T8165] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 172.204443][ T8165] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 172.215489][ T8165] F2FS-fs (loop2): invalid crc value [ 172.236762][ T8165] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.327823][ T8165] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 172.337518][ T8165] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.360797][ T62] team0 (unregistering): Port device team_slave_1 removed [ 172.373307][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 172.380805][ T943] usb 2-1: USB disconnect, device number 12 [ 172.387075][ T8165] syz.2.887: attempt to access beyond end of device [ 172.387075][ T8165] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.390493][ T8165] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 172.425014][ T943] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 172.506213][ T62] team0 (unregistering): Port device team_slave_0 removed [ 173.068736][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.141653][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.341747][ T8049] team0: Port device team_slave_0 added [ 173.396743][ T8049] team0: Port device team_slave_1 added [ 173.543693][ T5236] Bluetooth: hci2: command tx timeout [ 173.649829][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.683691][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.710414][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.726183][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.733215][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.759263][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.911870][ T8049] hsr_slave_0: entered promiscuous mode [ 173.939671][ T8049] hsr_slave_1: entered promiscuous mode [ 174.115450][ T8174] loop0: detected capacity change from 0 to 32768 [ 174.136701][ T8174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.891 (8174) [ 174.174147][ T8174] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.205939][ T8174] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 174.237888][ T8174] BTRFS info (device loop0): using free-space-tree [ 174.755150][ T5230] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.823020][ T8236] QAT: Device 0 not found [ 175.114794][ T8049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.204052][ T8254] loop0: detected capacity change from 0 to 2048 [ 175.205681][ T8049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.250772][ T8254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.299025][ T8049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.365293][ T8049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.613966][ T5237] Bluetooth: hci2: command tx timeout [ 175.766653][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.819812][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.848687][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.855853][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.905325][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.912520][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.992596][ T5279] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.093218][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 176.093577][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 176.100832][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 176.236160][ T5279] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.278985][ T5279] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.315752][ T5279] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.330153][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.349735][ T5279] usb 5-1: SerialNumber: syz [ 176.516063][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.517551][ T8261] loop1: detected capacity change from 0 to 32768 [ 176.564311][ T8261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.900 (8261) [ 176.590012][ T5279] usb 5-1: 0:2 : does not exist [ 176.666265][ T8261] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.689915][ T5279] usb 5-1: USB disconnect, device number 7 [ 176.701460][ T8049] veth0_vlan: entered promiscuous mode [ 176.729801][ T8261] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 176.732260][ T5241] udevd[5241]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.770665][ T8049] veth1_vlan: entered promiscuous mode [ 176.779308][ T8261] BTRFS info (device loop1): using free-space-tree [ 176.858642][ T8049] veth0_macvtap: entered promiscuous mode [ 176.867740][ T8049] veth1_macvtap: entered promiscuous mode [ 176.883617][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.894805][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.905667][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.916241][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.930038][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.962961][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.976082][ T8271] loop0: detected capacity change from 0 to 32768 [ 176.985607][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.993675][ T8261] BTRFS info (device loop1): rebuilding free space tree [ 177.018312][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.039787][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.057971][ T8271] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.123710][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.244358][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.310000][ T8271] XFS (loop0): Ending clean mount [ 177.315208][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.318749][ T8329] ax25_connect(): syz.2.909 uses autobind, please contact jreuter@yaina.de [ 177.348708][ T8271] XFS (loop0): Quotacheck needed: Please wait. [ 177.355936][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.392507][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.444880][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.467689][ T8271] XFS (loop0): Quotacheck: Done. [ 177.523763][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.564217][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.595900][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.664814][ T5224] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.689707][ T5230] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.703735][ T8049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.713143][ T8049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.721870][ T8049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.730649][ T8049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.151197][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.169347][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.198947][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.222711][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.283131][ T5278] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 178.342688][ T5279] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.452875][ T8356] loop3: detected capacity change from 0 to 256 [ 178.482677][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 178.493934][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 178.532866][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.554205][ T5279] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 178.569027][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.574740][ T5278] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.599321][ T5279] usb 3-1: config 0 descriptor?? [ 178.608045][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.617084][ T5279] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 178.652805][ T5278] usb 1-1: Product: syz [ 178.657104][ T5278] usb 1-1: Manufacturer: syz [ 178.661737][ T5278] usb 1-1: SerialNumber: syz [ 178.699426][ T5278] usb 1-1: config 0 descriptor?? [ 178.717410][ T8358] pimreg26: entered allmulticast mode [ 178.736352][ T5278] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.765332][ T8357] pimreg26: left allmulticast mode [ 178.776639][ T5278] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 179.055793][ T5279] gspca_stv06xx: I2C: Read error writing address: -71 [ 179.080215][ T5279] usb 3-1: USB disconnect, device number 11 [ 179.344862][ T5278] em28xx 1-1:0.0: chip ID is em2874 [ 179.526486][ T8360] loop4: detected capacity change from 0 to 32768 [ 179.542854][ T8360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.916 (8360) [ 179.584731][ T8360] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.595097][ T8360] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 179.605952][ T9] usb 1-1: USB disconnect, device number 12 [ 179.613281][ T8360] BTRFS info (device loop4): using free-space-tree [ 179.621226][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 179.667619][ T9] em28xx 1-1:0.0: Freeing device [ 180.012168][ T7198] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.024661][ T5321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.229954][ T5321] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 180.270987][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.296995][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.330611][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.356160][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.385931][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.415715][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.444043][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.460752][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.472517][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.510729][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.541064][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.572963][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.592089][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.629003][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.647411][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.660881][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.677890][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.691601][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.715219][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.729217][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.766289][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.788825][ T5321] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.799920][ T5321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.845065][ T5321] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.870357][ T5321] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.889930][ T5321] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.922342][ T5321] usb 4-1: Product: syz [ 180.931666][ T5321] usb 4-1: Manufacturer: syz [ 180.940977][ T5321] usb 4-1: SerialNumber: syz [ 180.955489][ T5321] usb 4-1: config 0 descriptor?? [ 180.968743][ T5321] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 181.323508][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 181.324622][ T9] usb 4-1: USB disconnect, device number 6 [ 181.363978][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 181.843574][ T8420] loop0: detected capacity change from 0 to 128 [ 181.878119][ T8420] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 181.976292][ T5230] sysv_free_block: trying to free block not in datazone [ 182.002828][ T5230] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 182.203471][ T8422] loop2: detected capacity change from 0 to 32768 [ 182.239566][ T8422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.934 (8422) [ 182.269434][ T8431] loop1: detected capacity change from 0 to 64 [ 182.310187][ T8422] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.320912][ T8422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 182.329990][ T8422] BTRFS info (device loop2): using free-space-tree [ 182.922042][ T8469] loop1: detected capacity change from 0 to 128 [ 182.955128][ T8469] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 183.293441][ T5224] sysv_free_block: trying to free block not in datazone [ 183.313356][ T5233] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.398733][ T5224] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 183.685409][ T8486] loop4: detected capacity change from 0 to 128 [ 183.728500][ T8486] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 183.768528][ T8486] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 184.051941][ T7198] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.114508][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 184.363566][ T8506] loop0: detected capacity change from 0 to 2048 [ 184.405890][ T8509] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.529279][ T29] audit: type=1800 audit(1724310247.632:32): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.965" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 184.881964][ T8525] loop4: detected capacity change from 0 to 128 [ 185.107199][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.985'. [ 185.373454][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.987'. [ 185.488414][ T8515] loop2: detected capacity change from 0 to 32768 [ 185.537424][ T8515] XFS: attr2 mount option is deprecated. [ 185.579278][ T8555] netlink: 'syz.1.981': attribute type 21 has an invalid length. [ 185.797644][ T8515] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 185.904176][ T8515] XFS (loop2): Ending clean mount [ 185.962848][ T8515] XFS (loop2): Quotacheck needed: Please wait. [ 186.143306][ T8515] XFS (loop2): Quotacheck: Done. [ 186.378887][ T8583] loop4: detected capacity change from 0 to 512 [ 186.414185][ T8583] EXT4-fs: Ignoring removed oldalloc option [ 186.420224][ T8583] ext4: Unknown parameter 'euid<00000000000000000000' [ 186.439746][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 186.530612][ T5233] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 186.802178][ T8591] loop3: detected capacity change from 0 to 4096 [ 186.835817][ T8591] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 186.936557][ T8591] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 187.026882][ T8607] netlink: 'syz.1.1003': attribute type 32 has an invalid length. [ 187.035692][ T8607] netlink: 664 bytes leftover after parsing attributes in process `syz.1.1003'. [ 187.153352][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 187.446958][ T8596] loop4: detected capacity change from 0 to 32768 [ 187.466277][ T8596] [ 187.466277][ T8596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.466277][ T8596] [ 187.542071][ T8627] vivid-001: ================= START STATUS ================= [ 187.551133][ T8627] vivid-001: Radio HW Seek Mode: Bounded [ 187.558817][ T8627] vivid-001: Radio Programmable HW Seek: false [ 187.569765][ T8627] vivid-001: RDS Rx I/O Mode: Block I/O [ 187.571875][ T8596] [ 187.571875][ T8596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.571875][ T8596] [ 187.579083][ T8627] vivid-001: Generate RBDS Instead of RDS: false [ 187.607554][ T8627] vivid-001: RDS Reception: true [ 187.620859][ T8627] vivid-001: RDS Program Type: 0 inactive [ 187.629968][ T8596] [ 187.629968][ T8596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.629968][ T8596] [ 187.636349][ T8627] vivid-001: RDS PS Name: inactive [ 187.649158][ T8627] vivid-001: RDS Radio Text: inactive [ 187.657862][ T8627] vivid-001: RDS Traffic Announcement: false inactive [ 187.666250][ T8596] [ 187.666250][ T8596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.666250][ T8596] [ 187.668784][ T8627] vivid-001: RDS Traffic Program: false inactive [ 187.682509][ T8596] [ 187.682509][ T8596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.682509][ T8596] [ 187.691872][ T8627] vivid-001: RDS Music: false inactive [ 187.730105][ T8627] vivid-001: ================== END STATUS ================== [ 187.777768][ T8596] [ 187.777768][ T8596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.777768][ T8596] [ 187.819215][ T5277] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.953194][ T7198] [ 187.953194][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.953194][ T7198] [ 187.982625][ T7198] [ 187.982625][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.982625][ T7198] [ 188.042539][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 188.071703][ T5277] usb 1-1: config 0 has no interfaces? [ 188.092784][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 188.115455][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.126390][ T5277] usb 1-1: config 0 descriptor?? [ 188.299205][ T8644] loop1: detected capacity change from 0 to 256 [ 188.339497][ T8644] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 188.363492][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.379008][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.407845][ T5277] usb 1-1: USB disconnect, device number 13 [ 188.440105][ T8644] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 188.451113][ T8644] exFAT-fs (loop1): Filesystem has been set read-only [ 188.523829][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 188.843766][ T8659] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1027'. [ 189.084457][ T5277] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.274097][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.298103][ T5277] usb 1-1: config 0 interface 0 has no altsetting 1 [ 189.305841][ T8678] loop1: detected capacity change from 0 to 2048 [ 189.309931][ T5277] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=25.e8 [ 189.337134][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.353742][ T5277] usb 1-1: Product: syz [ 189.368236][ T5277] usb 1-1: Manufacturer: syz [ 189.370467][ T8678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.390531][ T5277] usb 1-1: SerialNumber: syz [ 189.402525][ T5277] usb 1-1: config 0 descriptor?? [ 189.421058][ T5277] ttusbir 1-1:0.0: cannot find expected altsetting [ 189.426569][ T8684] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 189.480182][ T8684] macsec1: entered promiscuous mode [ 189.534594][ T8684] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 189.609499][ T8690] loop1: detected capacity change from 0 to 128 [ 189.616070][ T5277] usb 1-1: USB disconnect, device number 14 [ 189.648670][ T8690] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.720582][ T8690] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.752590][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.851432][ T8690] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x14) [ 189.911739][ T8676] loop2: detected capacity change from 0 to 32768 [ 189.927509][ T8698] cannot load conntrack support for proto=3 [ 189.929871][ T5224] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.062061][ T8676] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 190.148099][ T8676] XFS (loop2): Ending clean mount [ 190.190291][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 190.422636][ T5233] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 191.154740][ T8751] loop4: detected capacity change from 0 to 2048 [ 191.194545][ T8752] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.252802][ T8752] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 191.282460][ T8752] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 191.311401][ T8726] loop1: detected capacity change from 0 to 32768 [ 191.336975][ T8726] gfs2: Unknown parameter 'spuantum' [ 191.362466][ T8752] Remounting filesystem read-only [ 191.834622][ T8762] loop4: detected capacity change from 0 to 32768 [ 191.868994][ T8771] loop2: detected capacity change from 0 to 1024 [ 191.886866][ T8776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.887985][ T8726] VFS: could not find a valid V7 on nullb0. [ 192.056741][ T8762] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 192.173325][ T8771] EXT4-fs: Ignoring removed orlov option [ 192.192575][ T8771] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.229795][ T8771] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 192.267780][ T8771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.289491][ T8762] XFS (loop4): Ending clean mount [ 192.300534][ T8802] loop3: detected capacity change from 0 to 1024 [ 192.428132][ T7198] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 192.478484][ T8771] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 192.515695][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.667864][ T8815] netlink: 'syz.0.1090': attribute type 2 has an invalid length. [ 192.801314][ T8819] loop0: detected capacity change from 0 to 4096 [ 192.819244][ T8819] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 192.857142][ T8819] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 193.376503][ T8818] loop2: detected capacity change from 0 to 32768 [ 193.946768][ T8856] loop2: detected capacity change from 0 to 256 [ 194.080199][ T8860] misc userio: Begin command sent, but we're already running [ 194.498981][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.505597][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.813626][ T8885] loop0: detected capacity change from 0 to 8 [ 195.134013][ T8891] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1124'. [ 195.266897][ T8870] loop1: detected capacity change from 0 to 40427 [ 195.317805][ T8870] F2FS-fs (loop1): invalid crc value [ 195.339966][ T8870] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.370692][ T8873] loop3: detected capacity change from 0 to 32768 [ 195.402914][ T8873] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1115 (8873) [ 195.456434][ T8873] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 195.487726][ T8870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.497943][ T8873] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.535220][ T8897] f2fs_ckpt-7:1: attempt to access beyond end of device [ 195.535220][ T8897] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.551872][ T8873] BTRFS info (device loop3): disk space caching is enabled [ 195.562545][ T8873] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 195.583810][ T8897] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 195.717808][ T8873] BTRFS info (device loop3): rebuilding free space tree [ 195.781688][ T8873] BTRFS info (device loop3): disabling free space tree [ 195.812502][ T8873] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.822206][ T8873] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.822535][ T5278] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 195.854348][ T8887] loop2: detected capacity change from 0 to 32768 [ 195.890822][ T8887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1122 (8887) [ 195.936653][ T8887] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.961294][ T8887] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 195.990115][ T8887] BTRFS info (device loop2): using free-space-tree [ 196.052535][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 196.078772][ T5278] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 196.097410][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.117881][ T5278] usb 1-1: Product: syz [ 196.122137][ T5278] usb 1-1: Manufacturer: syz [ 196.133114][ T5278] usb 1-1: SerialNumber: syz [ 196.138977][ T8049] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 196.146653][ T54] Bluetooth: hci0: unexpected cc 0x1009 length: 3 < 7 [ 196.158017][ T5278] usb 1-1: config 0 descriptor?? [ 196.164235][ T54] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 196.194389][ T5278] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 196.401578][ T5278] gspca_sn9c2028: read1 error -32 [ 196.414458][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 196.423290][ T5233] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.436332][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 196.450737][ T4620] Bluetooth: hci2: hardware error 0x00 [ 196.462813][ T5278] gspca_sn9c2028: read1 error -32 [ 196.717400][ T940] usb 1-1: USB disconnect, device number 15 [ 196.938571][ T8953] loop3: detected capacity change from 0 to 1024 [ 196.947871][ T8957] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1137'. [ 197.220762][ T8962] mkiss: ax0: crc mode is auto. [ 197.353840][ T8960] loop3: detected capacity change from 0 to 4096 [ 197.392662][ T8960] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 197.449365][ T8960] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 197.480654][ T8947] loop1: detected capacity change from 0 to 32768 [ 197.488623][ T8966] netlink: 'syz.2.1141': attribute type 1 has an invalid length. [ 197.504195][ T8947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1134 (8947) [ 197.525315][ T8947] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.535844][ T8947] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 197.544681][ T8947] BTRFS info (device loop1): using free-space-tree [ 197.584125][ T8966] bond0: entered promiscuous mode [ 197.590087][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.669711][ T8985] loop4: detected capacity change from 0 to 64 [ 197.787890][ T8947] BTRFS info (device loop1): Snapshot src from another FS [ 197.827853][ T8985] Trying to free block not in datazone [ 197.862891][ T8985] Trying to free block not in datazone [ 197.868476][ T8985] Trying to free block not in datazone [ 197.889068][ T8985] Trying to free block not in datazone [ 197.911430][ T5224] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.924705][ T8985] Trying to free block not in datazone [ 197.953082][ T8985] minix_free_block (loop4:6): bit already cleared [ 197.972956][ T8985] Trying to free block not in datazone [ 197.994494][ T8985] Trying to free block not in datazone [ 198.043144][ T8999] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 198.074990][ T940] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.137004][ T8999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.365848][ T940] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 198.397956][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.434913][ T940] usb 3-1: config 0 descriptor?? [ 198.445858][ T940] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 198.563220][ T9012] tap0: tun_chr_ioctl cmd 1074025680 [ 198.662559][ T940] gp8psk: usb in 128 operation failed. [ 198.732927][ T4620] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 198.783616][ T9016] loop1: detected capacity change from 0 to 64 [ 198.879525][ T940] gp8psk: FW Version = 170.150.229 (0xaa96e5) Build 2013/160/15 [ 198.963639][ T8997] loop0: detected capacity change from 0 to 32768 [ 199.181989][ T9018] loop4: detected capacity change from 0 to 32768 [ 199.193680][ T940] gp8psk: usb in 149 operation failed. [ 199.199282][ T940] gp8psk: failed to get FPGA version [ 199.205600][ T940] gp8psk: usb in 138 operation failed. [ 199.211226][ T940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.221405][ T940] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 199.230267][ T8997] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.230305][ T940] usb 3-1: media controller created [ 199.256053][ T940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.277067][ T940] gp8psk_fe: Frontend attached [ 199.281907][ T940] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 199.285436][ T9018] [ 199.285436][ T9018] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.285436][ T9018] [ 199.290058][ T940] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 199.365496][ T940] gp8psk: usb in 138 operation failed. [ 199.372122][ T940] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 199.382507][ T940] gp8psk: found Genpix USB device pID = 203 (hex) [ 199.391687][ T940] usb 3-1: USB disconnect, device number 12 [ 199.447833][ T940] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 199.476100][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 199.487817][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 199.490548][ T9018] find_entry called with index = 0 [ 199.541258][ T9036] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 199.543764][ T9018] read_mapping_page failed! [ 199.588454][ T8997] XFS (loop0): Ending clean mount [ 199.598395][ T9018] ERROR: (device loop4): txCommit: [ 199.598395][ T9018] [ 199.612241][ T8997] XFS (loop0): Quotacheck needed: Please wait. [ 199.702898][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 199.719724][ T7198] [ 199.719724][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.719724][ T7198] [ 199.749475][ T7198] [ 199.749475][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.749475][ T7198] [ 199.749535][ T8997] XFS (loop0): Quotacheck: Done. [ 199.826289][ T5230] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.195801][ T4620] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 200.206323][ T4620] Bluetooth: hci0: Injecting HCI hardware error event [ 200.216770][ T4620] Bluetooth: hci0: hardware error 0x00 [ 201.050054][ T9062] loop1: detected capacity change from 0 to 40427 [ 201.068334][ T9062] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 201.075375][ T9062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 201.110721][ T9062] F2FS-fs (loop1): Found nat_bits in checkpoint [ 201.222685][ T5279] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 201.244644][ T9062] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 201.261925][ T9062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.383332][ T5224] syz-executor: attempt to access beyond end of device [ 201.383332][ T5224] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.425950][ T5224] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 201.497519][ T9091] loop2: detected capacity change from 0 to 32768 [ 201.514347][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 201.528136][ T5279] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 201.536690][ T5279] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 201.548041][ T5279] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 201.559383][ T5279] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 201.572768][ T5279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.585606][ T5279] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 201.595187][ T5279] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 201.604918][ T5279] usb 4-1: Product: syz [ 201.622454][ T5279] usb 4-1: Manufacturer: syz [ 201.627092][ T5279] usb 4-1: SerialNumber: syz [ 201.649672][ T5279] usb 4-1: config 0 descriptor?? [ 201.668515][ T5279] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 201.714133][ T5279] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 201.840070][ T9097] loop4: detected capacity change from 0 to 32768 [ 201.883055][ T9097] XFS: ikeep mount option is deprecated. [ 201.888754][ T9097] XFS: ikeep mount option is deprecated. [ 201.924409][ T5277] usb 4-1: USB disconnect, device number 7 [ 201.933473][ T5277] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 202.016181][ T9097] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.066177][ T9109] loop0: detected capacity change from 0 to 64 [ 202.098222][ T9109] hfs: keylen 94 too large [ 202.285585][ T9097] XFS (loop4): Ending clean mount [ 202.325323][ T9097] XFS (loop4): Quotacheck needed: Please wait. [ 202.369456][ T9097] XFS (loop4): Quotacheck: Done. [ 202.460671][ T7198] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.494479][ T4620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 202.523620][ T9121] loop1: detected capacity change from 0 to 1024 [ 202.648110][ T9106] loop2: detected capacity change from 0 to 32768 [ 202.677138][ T9106] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1192 (9106) [ 202.711115][ T9106] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 202.721741][ T9106] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 202.730804][ T9106] BTRFS info (device loop2): disk space caching is enabled [ 202.738551][ T9106] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 202.915171][ T9106] BTRFS info (device loop2): rebuilding free space tree [ 202.995164][ T9106] BTRFS info (device loop2): disabling free space tree [ 203.014021][ T9106] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.039426][ T9106] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.228015][ T9119] loop0: detected capacity change from 0 to 32768 [ 203.247316][ T5233] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 203.265742][ T9119] XFS: ikeep mount option is deprecated. [ 203.355242][ T9119] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.685859][ T9119] XFS (loop0): Ending clean mount [ 203.724874][ T9119] XFS (loop0): Quotacheck needed: Please wait. [ 203.907870][ T9119] XFS (loop0): Quotacheck: Done. [ 203.971244][ T5230] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.182511][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 204.370531][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.388689][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 204.412541][ T5279] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.430279][ T9] usb 2-1: config 91 has an invalid interface number: 58 but max is 0 [ 204.455304][ T9] usb 2-1: config 91 has no interface number 0 [ 204.470785][ T9] usb 2-1: config 91 interface 58 has no altsetting 0 [ 204.498271][ T9] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice=40.5e [ 204.526436][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.548518][ T9] usb 2-1: Product: syz [ 204.555960][ T9] usb 2-1: Manufacturer: syz [ 204.560781][ T9] usb 2-1: SerialNumber: syz [ 204.612751][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 204.628857][ T5279] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 204.652444][ T5279] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.682007][ T5279] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.715740][ T5279] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.758699][ T5279] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.820274][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 204.822423][ T5279] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.834063][ T9] usb 2-1: Found UVC 0.00 device syz (19ab:1000) [ 204.860464][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.865113][ T9] usb 2-1: No valid video chain found. [ 204.904993][ T9] usb 2-1: USB disconnect, device number 13 [ 205.092874][ T5279] usb 4-1: GET_CAPABILITIES returned 0 [ 205.098410][ T5279] usbtmc 4-1:16.0: can't read capabilities [ 205.295013][ T9179] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 205.303480][ T5278] usb 4-1: USB disconnect, device number 8 [ 205.428872][ T9223] loop2: detected capacity change from 0 to 512 [ 205.453872][ T9223] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 205.489132][ T9223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.570728][ T9223] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 205.621374][ T9223] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 205.683513][ T9223] EXT4-fs (loop2): 1 truncate cleaned up [ 205.690210][ T9223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.795356][ T9233] loop0: detected capacity change from 0 to 512 [ 205.813454][ T9233] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 205.831493][ T9233] UDF-fs: Scanning with blocksize 512 failed [ 205.848541][ T9233] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 205.861773][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.869178][ T9233] UDF-fs: Scanning with blocksize 1024 failed [ 205.883935][ T9233] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 205.928319][ T9233] UDF-fs: Scanning with blocksize 2048 failed [ 205.964547][ T9233] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 206.029968][ T9233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.035755][ T9237] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1242'. [ 206.060066][ T9227] loop1: detected capacity change from 0 to 32768 [ 206.091903][ T9227] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 206.091903][ T9227] [ 206.161063][ T9213] loop4: detected capacity change from 0 to 32768 [ 206.162143][ T9227] ERROR: (device loop1): remounting filesystem as read-only [ 206.198044][ T9238] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 206.198044][ T9238] [ 206.274816][ T112] blkno = 5002c, nblocks = 1 [ 206.279625][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 206.279625][ T112] [ 206.294418][ T9240] loop2: detected capacity change from 0 to 8 [ 206.370745][ T9240] SQUASHFS error: Failed to read block 0x4de: -5 [ 206.399948][ T9240] ================================================================== [ 206.408061][ T9240] BUG: KASAN: slab-use-after-free in squashfs_readahead+0x210c/0x2680 [ 206.416246][ T9240] Read of size 4 at addr ffff88802ad92ac0 by task syz.2.1243/9240 [ 206.424076][ T9240] [ 206.426429][ T9240] CPU: 1 UID: 0 PID: 9240 Comm: syz.2.1243 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 206.436623][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.446799][ T9240] Call Trace: [ 206.450094][ T9240] [ 206.453037][ T9240] dump_stack_lvl+0x241/0x360 [ 206.457735][ T9240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.462953][ T9240] ? __pfx__printk+0x10/0x10 [ 206.467581][ T9240] ? _printk+0xd5/0x120 [ 206.471761][ T9240] ? __virt_addr_valid+0x183/0x530 [ 206.476892][ T9240] ? __virt_addr_valid+0x183/0x530 [ 206.482023][ T9240] print_report+0x169/0x550 [ 206.486551][ T9240] ? __virt_addr_valid+0x183/0x530 [ 206.491677][ T9240] ? __virt_addr_valid+0x183/0x530 [ 206.496807][ T9240] ? __virt_addr_valid+0x45f/0x530 [ 206.501937][ T9240] ? __phys_addr+0xba/0x170 [ 206.506458][ T9240] ? squashfs_readahead+0x210c/0x2680 [ 206.511852][ T9240] kasan_report+0x143/0x180 [ 206.516379][ T9240] ? squashfs_readahead+0x210c/0x2680 [ 206.521783][ T9240] squashfs_readahead+0x210c/0x2680 [ 206.527012][ T9240] ? squashfs_readahead+0x6f0/0x2680 [ 206.532316][ T9240] ? __pfx_squashfs_readahead+0x10/0x10 [ 206.537894][ T9240] ? blk_start_plug+0x70/0x1b0 [ 206.542680][ T9240] read_pages+0x17e/0x840 [ 206.547025][ T9240] ? percpu_ref_put+0x19/0x180 [ 206.551813][ T9240] ? __pfx_read_pages+0x10/0x10 [ 206.556681][ T9240] ? filemap_add_folio+0x26d/0x650 [ 206.561812][ T9240] ? __pfx_filemap_add_folio+0x10/0x10 [ 206.567291][ T9240] page_cache_ra_unbounded+0x6ce/0x7f0 [ 206.572754][ T9240] filemap_get_pages+0x543/0x2330 [ 206.577782][ T9240] ? __pfx_filemap_get_pages+0x10/0x10 [ 206.583248][ T9240] ? __pfx__copy_to_iter+0x10/0x10 [ 206.588376][ T9240] ? __pfx___might_resched+0x10/0x10 [ 206.593669][ T9240] ? touch_atime+0xf8/0x690 [ 206.598169][ T9240] filemap_read+0x457/0xfa0 [ 206.602672][ T9240] ? 0xffffffffa00038c0 [ 206.606836][ T9240] ? __pfx_filemap_read+0x10/0x10 [ 206.611860][ T9240] ? iov_iter_kvec+0x4e/0x180 [ 206.616530][ T9240] __kernel_read+0x532/0x9f0 [ 206.621113][ T9240] ? __pfx___kernel_read+0x10/0x10 [ 206.626232][ T9240] integrity_kernel_read+0xb0/0x100 [ 206.631424][ T9240] ? __pfx_integrity_kernel_read+0x10/0x10 [ 206.637229][ T9240] ? kernel_fpu_end+0x51/0x80 [ 206.641896][ T9240] ? sha256_avx2_update+0x133/0x1f0 [ 206.647092][ T9240] ima_calc_file_hash+0xaef/0x1b30 [ 206.652206][ T9240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.658541][ T9240] ? lockdep_hardirqs_on+0x99/0x150 [ 206.663754][ T9240] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 206.669312][ T9240] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 206.675224][ T9240] ? inode_query_iversion+0x17f/0x1f0 [ 206.680598][ T9240] ? __pfx_inode_query_iversion+0x10/0x10 [ 206.686315][ T9240] ? mark_lock+0x9a/0x360 [ 206.690637][ T9240] ? generic_fillattr+0x5c4/0x840 [ 206.695672][ T9240] ima_collect_measurement+0x526/0xb20 [ 206.701141][ T9240] ? __pfx_ima_collect_measurement+0x10/0x10 [ 206.707134][ T9240] ? squashfs_xattr_handler_get+0x585/0x900 [ 206.713048][ T9240] ? trace_contention_end+0x3c/0x120 [ 206.718336][ T9240] ? __mutex_lock+0x2ef/0xd70 [ 206.723024][ T9240] ? ima_get_hash_algo+0x156/0x4d0 [ 206.728130][ T9240] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 206.733586][ T9240] process_measurement+0x1357/0x1fb0 [ 206.738875][ T9240] ? __pfx_process_measurement+0x10/0x10 [ 206.744509][ T9240] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 206.750936][ T9240] ? __pfx_apparmor_file_open+0x10/0x10 [ 206.756489][ T9240] ? tomoyo_file_open+0x168/0x220 [ 206.761504][ T9240] ? inode_to_bdi+0x69/0xf0 [ 206.766021][ T9240] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 206.772166][ T9240] ima_file_check+0xf2/0x170 [ 206.776752][ T9240] ? __pfx_ima_file_check+0x10/0x10 [ 206.781946][ T9240] security_file_post_open+0xb9/0x280 [ 206.787317][ T9240] path_openat+0x2cd0/0x3590 [ 206.791908][ T9240] ? __pfx_path_openat+0x10/0x10 [ 206.796840][ T9240] do_filp_open+0x235/0x490 [ 206.801334][ T9240] ? __pfx_do_filp_open+0x10/0x10 [ 206.806357][ T9240] ? _raw_spin_unlock+0x28/0x50 [ 206.811193][ T9240] ? alloc_fd+0x5a1/0x640 [ 206.815521][ T9240] do_sys_openat2+0x13e/0x1d0 [ 206.820195][ T9240] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.825392][ T9240] __x64_sys_openat+0x247/0x2a0 [ 206.830236][ T9240] ? __pfx___x64_sys_openat+0x10/0x10 [ 206.835605][ T9240] ? do_syscall_64+0x100/0x230 [ 206.840361][ T9240] ? do_syscall_64+0xb6/0x230 [ 206.845033][ T9240] do_syscall_64+0xf3/0x230 [ 206.849529][ T9240] ? clear_bhb_loop+0x35/0x90 [ 206.854201][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.860088][ T9240] RIP: 0033:0x7f4da1b79e79 [ 206.864494][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.884092][ T9240] RSP: 002b:00007f4da15ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.892501][ T9240] RAX: ffffffffffffffda RBX: 00007f4da1d15f80 RCX: 00007f4da1b79e79 [ 206.900465][ T9240] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 206.908425][ T9240] RBP: 00007f4da1be7916 R08: 0000000000000000 R09: 0000000000000000 [ 206.916387][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.924353][ T9240] R13: 0000000000000000 R14: 00007f4da1d15f80 R15: 00007ffef2b18f78 [ 206.932319][ T9240] [ 206.935346][ T9240] [ 206.937655][ T9240] Allocated by task 9240: [ 206.941965][ T9240] kasan_save_track+0x3f/0x80 [ 206.946637][ T9240] __kasan_kmalloc+0x98/0xb0 [ 206.951224][ T9240] __kmalloc_cache_noprof+0x19c/0x2c0 [ 206.956599][ T9240] squashfs_page_actor_init_special+0x64/0x440 [ 206.962763][ T9240] squashfs_readahead+0x188f/0x2680 [ 206.967961][ T9240] read_pages+0x17e/0x840 [ 206.972282][ T9240] page_cache_ra_unbounded+0x6ce/0x7f0 [ 206.977726][ T9240] filemap_get_pages+0x543/0x2330 [ 206.982739][ T9240] filemap_read+0x457/0xfa0 [ 206.987230][ T9240] __kernel_read+0x532/0x9f0 [ 206.991809][ T9240] integrity_kernel_read+0xb0/0x100 [ 206.996997][ T9240] ima_calc_file_hash+0xaef/0x1b30 [ 207.002101][ T9240] ima_collect_measurement+0x526/0xb20 [ 207.007653][ T9240] process_measurement+0x1357/0x1fb0 [ 207.012946][ T9240] ima_file_check+0xf2/0x170 [ 207.017539][ T9240] security_file_post_open+0xb9/0x280 [ 207.022919][ T9240] path_openat+0x2cd0/0x3590 [ 207.027524][ T9240] do_filp_open+0x235/0x490 [ 207.032020][ T9240] do_sys_openat2+0x13e/0x1d0 [ 207.036694][ T9240] __x64_sys_openat+0x247/0x2a0 [ 207.041542][ T9240] do_syscall_64+0xf3/0x230 [ 207.046037][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.051927][ T9240] [ 207.054258][ T9240] Freed by task 9240: [ 207.058424][ T9240] kasan_save_track+0x3f/0x80 [ 207.063109][ T9240] kasan_save_free_info+0x40/0x50 [ 207.068142][ T9240] __kasan_slab_free+0x59/0x70 [ 207.072904][ T9240] kfree+0x196/0x3e0 [ 207.076796][ T9240] squashfs_readahead+0x195b/0x2680 [ 207.081989][ T9240] read_pages+0x17e/0x840 [ 207.086314][ T9240] page_cache_ra_unbounded+0x6ce/0x7f0 [ 207.091760][ T9240] filemap_get_pages+0x543/0x2330 [ 207.096772][ T9240] filemap_read+0x457/0xfa0 [ 207.101307][ T9240] __kernel_read+0x532/0x9f0 [ 207.105887][ T9240] integrity_kernel_read+0xb0/0x100 [ 207.111105][ T9240] ima_calc_file_hash+0xaef/0x1b30 [ 207.116208][ T9240] ima_collect_measurement+0x526/0xb20 [ 207.121660][ T9240] process_measurement+0x1357/0x1fb0 [ 207.126935][ T9240] ima_file_check+0xf2/0x170 [ 207.131514][ T9240] security_file_post_open+0xb9/0x280 [ 207.136876][ T9240] path_openat+0x2cd0/0x3590 [ 207.141454][ T9240] do_filp_open+0x235/0x490 [ 207.145947][ T9240] do_sys_openat2+0x13e/0x1d0 [ 207.150619][ T9240] __x64_sys_openat+0x247/0x2a0 [ 207.155467][ T9240] do_syscall_64+0xf3/0x230 [ 207.159964][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.165846][ T9240] [ 207.168156][ T9240] The buggy address belongs to the object at ffff88802ad92a80 [ 207.168156][ T9240] which belongs to the cache kmalloc-96 of size 96 [ 207.182041][ T9240] The buggy address is located 64 bytes inside of [ 207.182041][ T9240] freed 96-byte region [ffff88802ad92a80, ffff88802ad92ae0) [ 207.195663][ T9240] [ 207.197980][ T9240] The buggy address belongs to the physical page: [ 207.204387][ T9240] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ad92 [ 207.213149][ T9240] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 207.220252][ T9240] page_type: 0xfdffffff(slab) [ 207.224917][ T9240] raw: 00fff00000000000 ffff888015841280 ffffea0000bcf900 dead000000000004 [ 207.233494][ T9240] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 207.242100][ T9240] page dumped because: kasan: bad access detected [ 207.248504][ T9240] page_owner tracks the page as allocated [ 207.254468][ T9240] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5329, tgid 5328 (syz.0.1), ts 61048298791, free_ts 60996393865 [ 207.274871][ T9240] post_alloc_hook+0x1f3/0x230 [ 207.279629][ T9240] get_page_from_freelist+0x3131/0x3280 [ 207.285166][ T9240] __alloc_pages_noprof+0x29e/0x780 [ 207.290352][ T9240] alloc_slab_page+0x5f/0x120 [ 207.295019][ T9240] allocate_slab+0x5a/0x2f0 [ 207.299516][ T9240] ___slab_alloc+0xcd1/0x14b0 [ 207.304194][ T9240] __slab_alloc+0x58/0xa0 [ 207.308530][ T9240] __kmalloc_cache_node_noprof+0x20c/0x300 [ 207.314340][ T9240] __alloc_workqueue+0x709/0x1f20 [ 207.319362][ T9240] alloc_workqueue+0xd6/0x210 [ 207.324030][ T9240] btrfs_alloc_workqueue+0x1c8/0x2a0 [ 207.329338][ T9240] btrfs_init_workqueues+0x62/0x740 [ 207.334535][ T9240] open_ctree+0x122c/0x2a10 [ 207.339028][ T9240] btrfs_get_tree+0xe7a/0x1920 [ 207.343784][ T9240] vfs_get_tree+0x90/0x2a0 [ 207.348189][ T9240] fc_mount+0x1b/0xb0 [ 207.352161][ T9240] page last free pid 5350 tgid 5349 stack trace: [ 207.358473][ T9240] free_unref_folios+0xe8a/0x1850 [ 207.363492][ T9240] folios_put_refs+0x76e/0x860 [ 207.368253][ T9240] free_pages_and_swap_cache+0x2ea/0x690 [ 207.373877][ T9240] tlb_flush_mmu+0x3a3/0x680 [ 207.378457][ T9240] tlb_finish_mmu+0xd4/0x200 [ 207.383035][ T9240] exit_mmap+0x496/0xc40 [ 207.387267][ T9240] __mmput+0x115/0x390 [ 207.391324][ T9240] exit_mm+0x220/0x310 [ 207.395377][ T9240] do_exit+0x9b2/0x28e0 [ 207.399520][ T9240] do_group_exit+0x207/0x2c0 [ 207.404103][ T9240] get_signal+0x176f/0x1810 [ 207.408597][ T9240] arch_do_signal_or_restart+0x96/0x860 [ 207.414134][ T9240] syscall_exit_to_user_mode+0xc9/0x370 [ 207.419668][ T9240] do_syscall_64+0x100/0x230 [ 207.424248][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.430135][ T9240] [ 207.432448][ T9240] Memory state around the buggy address: [ 207.438064][ T9240] ffff88802ad92980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 207.446110][ T9240] ffff88802ad92a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 207.454156][ T9240] >ffff88802ad92a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 207.462205][ T9240] ^ [ 207.468345][ T9240] ffff88802ad92b00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 207.476395][ T9240] ffff88802ad92b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 207.484442][ T9240] ================================================================== [ 207.559218][ T9240] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 207.566457][ T9240] CPU: 0 UID: 0 PID: 9240 Comm: syz.2.1243 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 207.576617][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 207.586680][ T9240] Call Trace: [ 207.589962][ T9240] [ 207.592899][ T9240] dump_stack_lvl+0x241/0x360 [ 207.597587][ T9240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.602792][ T9240] ? __pfx__printk+0x10/0x10 [ 207.607394][ T9240] ? preempt_schedule+0xe1/0xf0 [ 207.612261][ T9240] ? vscnprintf+0x5d/0x90 [ 207.616609][ T9240] panic+0x349/0x880 [ 207.620515][ T9240] ? check_panic_on_warn+0x21/0xb0 [ 207.625641][ T9240] ? __pfx_panic+0x10/0x10 [ 207.630079][ T9240] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 207.636089][ T9240] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 207.642435][ T9240] ? print_report+0x502/0x550 [ 207.647126][ T9240] check_panic_on_warn+0x86/0xb0 [ 207.652078][ T9240] ? squashfs_readahead+0x210c/0x2680 [ 207.657468][ T9240] end_report+0x77/0x160 [ 207.661726][ T9240] kasan_report+0x154/0x180 [ 207.666251][ T9240] ? squashfs_readahead+0x210c/0x2680 [ 207.671643][ T9240] squashfs_readahead+0x210c/0x2680 [ 207.676867][ T9240] ? squashfs_readahead+0x6f0/0x2680 [ 207.682163][ T9240] ? __pfx_squashfs_readahead+0x10/0x10 [ 207.687727][ T9240] ? blk_start_plug+0x70/0x1b0 [ 207.692507][ T9240] read_pages+0x17e/0x840 [ 207.696848][ T9240] ? percpu_ref_put+0x19/0x180 [ 207.701628][ T9240] ? __pfx_read_pages+0x10/0x10 [ 207.706486][ T9240] ? filemap_add_folio+0x26d/0x650 [ 207.711603][ T9240] ? __pfx_filemap_add_folio+0x10/0x10 [ 207.717081][ T9240] page_cache_ra_unbounded+0x6ce/0x7f0 [ 207.722560][ T9240] filemap_get_pages+0x543/0x2330 [ 207.727611][ T9240] ? __pfx_filemap_get_pages+0x10/0x10 [ 207.733079][ T9240] ? __pfx__copy_to_iter+0x10/0x10 [ 207.738208][ T9240] ? __pfx___might_resched+0x10/0x10 [ 207.743509][ T9240] ? touch_atime+0xf8/0x690 [ 207.748014][ T9240] filemap_read+0x457/0xfa0 [ 207.752686][ T9240] ? 0xffffffffa00038c0 [ 207.756882][ T9240] ? __pfx_filemap_read+0x10/0x10 [ 207.761910][ T9240] ? iov_iter_kvec+0x4e/0x180 [ 207.766584][ T9240] __kernel_read+0x532/0x9f0 [ 207.771169][ T9240] ? __pfx___kernel_read+0x10/0x10 [ 207.776281][ T9240] integrity_kernel_read+0xb0/0x100 [ 207.781471][ T9240] ? __pfx_integrity_kernel_read+0x10/0x10 [ 207.787269][ T9240] ? kernel_fpu_end+0x51/0x80 [ 207.791932][ T9240] ? sha256_avx2_update+0x133/0x1f0 [ 207.797128][ T9240] ima_calc_file_hash+0xaef/0x1b30 [ 207.802234][ T9240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.808557][ T9240] ? lockdep_hardirqs_on+0x99/0x150 [ 207.813746][ T9240] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 207.819282][ T9240] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 207.825176][ T9240] ? inode_query_iversion+0x17f/0x1f0 [ 207.830540][ T9240] ? __pfx_inode_query_iversion+0x10/0x10 [ 207.836255][ T9240] ? mark_lock+0x9a/0x360 [ 207.840570][ T9240] ? generic_fillattr+0x5c4/0x840 [ 207.845595][ T9240] ima_collect_measurement+0x526/0xb20 [ 207.851052][ T9240] ? __pfx_ima_collect_measurement+0x10/0x10 [ 207.857025][ T9240] ? squashfs_xattr_handler_get+0x585/0x900 [ 207.862917][ T9240] ? trace_contention_end+0x3c/0x120 [ 207.868193][ T9240] ? __mutex_lock+0x2ef/0xd70 [ 207.872869][ T9240] ? ima_get_hash_algo+0x156/0x4d0 [ 207.877973][ T9240] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 207.883426][ T9240] process_measurement+0x1357/0x1fb0 [ 207.888708][ T9240] ? __pfx_process_measurement+0x10/0x10 [ 207.894334][ T9240] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 207.900749][ T9240] ? __pfx_apparmor_file_open+0x10/0x10 [ 207.906286][ T9240] ? tomoyo_file_open+0x168/0x220 [ 207.911299][ T9240] ? inode_to_bdi+0x69/0xf0 [ 207.915793][ T9240] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 207.921937][ T9240] ima_file_check+0xf2/0x170 [ 207.926521][ T9240] ? __pfx_ima_file_check+0x10/0x10 [ 207.931712][ T9240] security_file_post_open+0xb9/0x280 [ 207.937074][ T9240] path_openat+0x2cd0/0x3590 [ 207.941665][ T9240] ? __pfx_path_openat+0x10/0x10 [ 207.946685][ T9240] do_filp_open+0x235/0x490 [ 207.951192][ T9240] ? __pfx_do_filp_open+0x10/0x10 [ 207.956212][ T9240] ? _raw_spin_unlock+0x28/0x50 [ 207.961048][ T9240] ? alloc_fd+0x5a1/0x640 [ 207.965377][ T9240] do_sys_openat2+0x13e/0x1d0 [ 207.970053][ T9240] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.975252][ T9240] __x64_sys_openat+0x247/0x2a0 [ 207.980100][ T9240] ? __pfx___x64_sys_openat+0x10/0x10 [ 207.985477][ T9240] ? do_syscall_64+0x100/0x230 [ 207.990233][ T9240] ? do_syscall_64+0xb6/0x230 [ 207.994903][ T9240] do_syscall_64+0xf3/0x230 [ 207.999394][ T9240] ? clear_bhb_loop+0x35/0x90 [ 208.004325][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.010216][ T9240] RIP: 0033:0x7f4da1b79e79 [ 208.014626][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.034230][ T9240] RSP: 002b:00007f4da15ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.042635][ T9240] RAX: ffffffffffffffda RBX: 00007f4da1d15f80 RCX: 00007f4da1b79e79 [ 208.050595][ T9240] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 208.058556][ T9240] RBP: 00007f4da1be7916 R08: 0000000000000000 R09: 0000000000000000 [ 208.066603][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.074568][ T9240] R13: 0000000000000000 R14: 00007f4da1d15f80 R15: 00007ffef2b18f78 [ 208.082539][ T9240] [ 208.085667][ T9240] Kernel Offset: disabled [ 208.089971][ T9240] Rebooting in 86400 seconds..