last executing test programs: 6m28.698304168s ago: executing program 32 (id=792): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg$unix(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) 6m15.695465168s ago: executing program 33 (id=882): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m56.353500178s ago: executing program 5 (id=2056): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 3m56.083624413s ago: executing program 5 (id=2058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x4, 0x208, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m55.852541934s ago: executing program 5 (id=2060): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="a9", 0x1}], 0x1) 3m55.497480716s ago: executing program 5 (id=2065): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@usrquota}, {@nodiscard}, {@noinit_itable}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m54.747194993s ago: executing program 5 (id=2072): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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") chdir(&(0x7f0000000080)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m53.799085889s ago: executing program 5 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) 3m53.33978838s ago: executing program 34 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) 3m51.147033437s ago: executing program 3 (id=2104): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x86b, 0x5f, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2f, {0x2f, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b1461dd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m48.918086908s ago: executing program 3 (id=2120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000200)) 3m45.813194717s ago: executing program 3 (id=2138): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 3m45.580692138s ago: executing program 3 (id=2140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 3m45.3326454s ago: executing program 3 (id=2142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x38}}, 0x40080) 3m44.835114675s ago: executing program 3 (id=2147): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x50, r1}) 3m44.313482362s ago: executing program 35 (id=2147): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x50, r1}) 3m38.397754554s ago: executing program 1 (id=2178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x24044994) 3m38.306672783s ago: executing program 1 (id=2179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf252300000008000200", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 3m38.22385111s ago: executing program 1 (id=2180): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xa, 0x2ff]) 3m36.603883296s ago: executing program 1 (id=2183): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a26f2c6a42c1df48b34291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m34.77723277s ago: executing program 1 (id=2188): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1, 0xff01}, 0x10) 3m33.376796266s ago: executing program 1 (id=2197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) 3m32.833206645s ago: executing program 36 (id=2197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) 2m30.637169183s ago: executing program 2 (id=2755): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2m30.268917745s ago: executing program 2 (id=2759): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f0000006040)={0x2020}, 0x2020) pread64(r0, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) 2m30.087469002s ago: executing program 2 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m29.815008877s ago: executing program 2 (id=2763): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r0, 0x8000) 2m29.43999001s ago: executing program 2 (id=2766): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m28.33381263s ago: executing program 2 (id=2773): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x800000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 2m13.038677157s ago: executing program 37 (id=2773): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x800000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 1m31.00060465s ago: executing program 9 (id=3303): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)}) 1m30.820301096s ago: executing program 9 (id=3307): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x40000000000001a3, &(0x7f0000000580), 0x0, 0x2}) 1m30.537795362s ago: executing program 9 (id=3310): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m29.526015553s ago: executing program 9 (id=3324): syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f0000000500)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383ac36fadcd60e27a35d7"], 0x1, 0xa0e, &(0x7f00000020c0)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m29.013351859s ago: executing program 9 (id=3329): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m28.435541191s ago: executing program 9 (id=3337): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 1m27.8823716s ago: executing program 38 (id=3337): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 12.543650701s ago: executing program 0 (id=4055): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) 11.482911117s ago: executing program 0 (id=4061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 11.099447911s ago: executing program 0 (id=4065): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r1, @ANYBLOB="95"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 10.759704511s ago: executing program 0 (id=4068): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 10.375926986s ago: executing program 0 (id=4071): timer_create(0x0, 0x0, &(0x7f0000000340)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 10.226573499s ago: executing program 0 (id=4073): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") sync() mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 8.32926199s ago: executing program 6 (id=4089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 7.99983421s ago: executing program 6 (id=4093): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000040)={0x14, &(0x7f00000001c0)={0x40, 0x10, 0x13, {0x13, 0xf, "4de4a8f0a472c269726516ab1ec0129eda"}}, 0x0}, 0x0) 4.811917887s ago: executing program 6 (id=4113): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e8c, &(0x7f0000000080)={@desc={0x200000, 0x0, @desc2}}) 4.450006289s ago: executing program 6 (id=4116): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f5b, &(0x7f0000003100)="$eJzs3U9vHGcdB/Df7K7Xf0rTqEJViDikKZSW0vxPoPxryoEDHEBCOZPIdatAClUSEK0i4ioHxAV4CXDphUPfSI+cES+ASAmnHCiDxn6eZLxeZ53G3tn18/lIzsxvnh3vM/l6PLuemX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/fBnp6uIuPzbtOBwxBeiH9GLWG7qY9HMXMyPH0TEkdhojhcior8Y0ay/8c9zEeci4tNDEffu31ptFp/ZZT/On7p5/bMf/+Cff/jznSO/ePvnH4+2//SLZz/54+2Iwz9545PPbu/NtgMAAEAp6rquq/Q2/2h6f9/rulMAwFTk43+d5OVqtVqt3tP6T73Z6o+60LqtHu92u4iI9fY6zWsGp+MBYM6sx4Ouu0CH5F+0QUQ803UngJlWdd0B9sW9+7dWq5Rv1T4eHNtsz3+n3JL/evXw/o6dppOMXmMyrZ+vO9GP53foz/KU+jBLcv690fwvb7YP0+P2O/9p2Sn/4eatT8XJ+fdH8x+xJf+/RMTc5t8bm3+pcv6DJ8l/vT/H+7/8AQAAAAA4+PLf/w93fP538ek3ZVced/732JT6AAAAAAAAAAB77WnH/3vI+H8AAAAws5r36o2/vv/o0892+iy2ZvmlKuLZ5vGHptM/YAalm2VWuu4HAAAAAAAAAAAAAJRksHkN76UqYiEinl1Zqeu6+WobrZ/U064/70rffihZ17/kAQBg06eHRu7lryKWIuJS+qy/BysrK3W9tLxSr9TLi/n17HBxqV5uva/N02bZ4nAXL4gHw7r5Zkut9domvV+e1D76/ZrnGtb9XXRsOjoMHAAiYvNodM8R6QCpNnJ9Lrp+lcN8sP8fPPZ/dqPrn1MAAABg/9V1XVfp47yPpnP+va47BQBMw1I+/o+eF1Cr1Wq1Wn3w6rZ6vNvtIiLW2+s0rxkMxw8Ac2Y9HnTdBTok/6INIuJI150AZlrVdQfYF/fu31qtUr5V+3iQxnfP14JsyX+92lgvrz9uOsnoNSbT+vm6E/14fof+vDClPsySnH9vNP/Lm+3D9Lj9zn9adsq/2c7DHfSnazn//mj+Iw5O/r2x+Zcq5z94ovz78gcAAAAAgBmW//5/2PnfvMkAAAAAAAAAMHfu3b+1mu97zef/vzzmcVV7zv2fB0bOv9p1/u7/PUhy/r3R/EcuyOm35u++9Sj//9y/tfrxzX9/KU9nPv+F/rB57oWq1x+ka37qhXfialyLtTi17fGDLe2nt7UvbGk/M6H97Lb2YdO+nNtPxGr8Oq7F2w/bFydcGLU0ob2e0J7z79v/i5TzH7S+mvxXUns1Mm3c/ai3bb9vT8c9z8W///fl7XvX9N2J/sNta2u273gH/dn4P3lmGL+5sXb9xO+u3Lx5/XSkyZalZyJN9ljOfyF95fxfeWmzPf/eb++vdz8aPnH+s+JODHbM/6XWfLO9r065b13I+Q/TV84/H4HG7//znP/O+/9rHfQHAAAAAAAAAAAAAAAAHqeu641bRC9GxIV0/09X92YCANOVj/91kper1XtZ5yWz0h+1Wq0utW6rx3tz499qfXO9pa3rNK8Zfj/umwEAs+x/EfGvrjtBZ+RfsPx5f830K113BpiqGx98+Msr166tXb/RdU8AAAAAAAAAgM8rj/95rDX+88Z1QCPjRm8Z//WtODa343/2hv2Nsc7TBr0Yjx//+3g8fvzvwYTnW5jQPpzQvrh90T/axdKE9cfe6NGS838xZZzzP5o2rKTxX1/poD9dy/kfT2M95/y/NvK4dv713+Y5/96W/E/efO/9kzc++PD1q+9deXft3bVfnT514dzZ8+fOnj9/8p2r19ZObf7bYY/3V84/j33tOtCy5Pxz5vIvS87/q6mWf1ly/i+nWv5lyfnn13vyL0vOP7/3kX9Zcv6vplr+Zcn5fz3V8i9Lzv+1VMu/LDn/b6Ra/mXJ+b+eavmXJed/ItXyL0vO/2Sq5V+WnH8+wyX/suT885UN8i9Lzv9MquVflpz/2VTLvyw5/3Opln9Zcv7nUy3/suT8L6Ra/mXJ+X8z1fIvS87/W6mWf1ly/m+kWv5lyfl/O9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP/3Uy3/suT830y1/Mvy6PP/zZgxYybPdP2bCQAAAAAAAAAAAAAYNY3LibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPfnptSHADIYQ4wTaGOGFhd/0FDnEwSUgpaVNKQtq0pMax18aJv+pdJ4BQWQptiYJUpPaCXjRNojSK1FagKFJTiUZIjdTelatE3EStxIWlQuWgpFKqwFZnzvu+OzM7O7O2d+0z5/x+CP+9M2dm3jlzZnaftZ4ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2aaPTf/5QJZl+f+NP9Zn2eX539dme/Mv53Zd6hUCAAAAF+rNxp//cEU6Ye8yLtS0zb+97z++Pz8/P5994Y0zb/3l/Hw6Y2OWDa3JssZ50b//8hfzzdsET2ZjA4NNXw/2uPmhHucP9zh/pMf5oz3OX9Pj/LEe5y/aAYusLX4f07iyLY2/ri92aXZVNtI4b0uHSz05sGZwMP4up2GgcZn5kUPZkexoNp1NLrrMQOO/LHtxU35bd2fxtgabbmtDlmVnf/bYgbiGgbCPt2QtN9bQ/Ni9fme28Y2fPXbgO7OvvbvT7LkbFq00y7Zuztf5VJYt/LoqG8jWpH0S1znYtM4NHdY51LLOgcbl8r+3r/PsMtcZ7/dYWOfLXda5IZz28PVZls1lS27T7slsMFvXdqtpf48VR0R+HflD+Y5s+JyOk03LOE7yy7x6fetx0n5Mxv2/KeyT4SXW0PxwvP7E6KL9fr7HSX6vy3Cs5td9b36jY2PNv1ptOVbzbR67YeljoONj1+EYSMdy0zGwudcxMDg61DgGBhfWvLnlGJhadJnBbKBxW2du6H4MTMweOzkx88ijNx85tv/w9OHp41OTu3Zs37lj+86dE4eOHJ2eLP48t13aR9Zlg+kY3Bxea+Ix+P62bZsPyflvrtzzYKwkz4P8vn/mxnxBlw9mSxzj+TZPbb3w50H6vt/0PBhueh50fE3t8DwYXsbzIN/m7Nblfc8cbvq/0xpW67VwfdMxcCm/H+a3+cAHln4t3BDW9fQHz/X74dCiYyDerYHw3MtPST/vjd0W9svi4+La/IzLRrPTM9Onbnl4/+zsqaksjIviyqbHqv14Wdd0n7JFx8vgOR8ve//+Vzde2+H09WFfjd3U/bHKt9kx3v2xary6t+7P0azYny2nbsvCWGEXe392+m6W78+UJbrsz3ybp26+8J8FUy5pev0b6fX6NzQyXLz+DaW9MdLy+rf4oRlqrCzLzt68vNe/kfD/xX79u6okr3/5vnrglu7HQL7N0xPnegwMd339uz7MgbCeD4TEMNaU+99qnD9XHKZNj2XP42Z4eCQcN8PxFluPm+2LLpNfW37bWyfP77jZen3rY9Xyc0sFj5t8X/3VZPfjJt/mpakLf+1YG//a9Nox2usYGBkazdc7kg6C4vVufm08Bm7JDmQnsqPZwXSZ/FHOb2t82/KOgdHw/8V+7bimJMdAvq+e29b9GMi3+dH2lf3ZaWs4JW3T9LNT++8Xlsr81w4vXF/7blvpzJ+v8+M//lQ6rVOGyLd5bce55ozu++mmcMplHfZT+/NnqWP6YHZx9tM1YZ1Hd3b/3VS+zVW7lnk87c2y7JWpVxq/7wq/3/3e6R9/v+X3vp1+p/zK1Cv3TNz3k3NZPwAA5++txp9zo8XPmk3/Yr2cf/8HAAAA+kLM/YNhJvI/AAAAVEbM/UNhJvI/AAAAVEbM/cNhJjXJ/w/dtvv5Nx/P0rsBzgfx/Lgb7v1IsV3seM+FrzfOL8hP/+i3R57/6uPLu+3BLMt+dc97Om7/0Efiugon4zo/1Hr6Itdct6zbf/D+he2a3z/h7O7i+uP9We5hELvKL05sa1zvxkemGvOle7LGvG/u6SeL6y++jtuf2V5s/zfhTUv2HhpoufzWsJ4tYW4M7ylz796F/ZDPeLnnN7zvX6/87MLtxcsNbH57424+98fF9cb3iHr2ymL7eL+XWv+/fO27z+fbP3xD5/U/Pth5/WfC9b4a5i/3FNs37/OvNq3/T8P64+3Fy93yrR92XP8L7yq2fyEcF98Is339d/7Fe9/s9HjF29l7e3G5ePuT/7ujcbl4ffH629c/9vhUy/5ov/6X3iiuZ8+Xfz7UvH08Pd5O9ODtrcf3QHh8W3rkWZZ998+ylv2cfbi43D+3rT9e38nbO6//prZ1nhy4rnH5hfuzvuV+ff3vtnW8v3E9e/9xfcv9efausP/emPhRfr1n7gvHYzj//14urq/9vUxfuKv19SZu/431xfM2Xt9E2/qfbVv/3HX5vuu9/rvfKNb/wh1rWta/9xPheLq7mL3Wf/hvr2i5/De/Uzwep74yfvzEzOkjB5v2avPzeM3Y2nWXXf62t18RXkvbv953Yvah6VMbJzdOZtnGPnzLwNVe/7fC/J9izK38LRR+8vPiuHvmk8X3rff/ovj62XD6g+HxjN8fv/7XIy3Ha/vjPndHMS90/R8M61iud33tv65b1oZnPv/i6X/6k9fafy6I9+fkO8ca9++5TVc3zht4qTi//fWql/98Z+vz+qfDk435g7Bf58M7M2++uri99uuP703yzKeL52/8SS5ePmt7P5H1Q63340LX/9Pwc8wPr2l9/YvHxw8eb3s35/XZQL6EufD6kM0V58et4v5+5uzVHW8vvg9PNvfuc1nmkmYemZk4euT46YcnZqdnZidmHnl037ETp4/P7mu8d+m+L/a6/MLze13j+X1weteOrPFsP1GMVXap13/y/gMHb5288eD0of2nD83ef3L61OEDMzMHpg/O3Lj/0KHpr/S6/JGDe6a27d5+67bxw0cO7rlt9+7tu8ePHD+RL6NYVA+7Jr80fvzUvsZFZvbs2D21c+eOyfFjJw5O77l1cnL8dK/LN743jeeX/vL4qemj+2ePHJsenzny6PSeqd27dm3r+e6Px04emtk4cer08YnTM9OnJor7snG2cXL+va/X5amHmRPh9a7NQPjp/HM37Urvj5v79hNLXlWxSeuPp9nr4b2g4ve3Xl/H3D8SZlKT/A8AAAB1EHN/eOP/hTPkfwAAAKiMmPvXhJnI/wAAAFAZMfcXyX8sffx7XfL/SvX/n9D/b9D/1//P9P8T/X/9/0z/X/+/B/1//f9+Xr/+v/4/vZWt/x9yf7Y2y/z7PwAAAFRUzP3rwkzkfwAAAKiMmPsvCzOR/wEAAKAyYu6/PMykJvnf5//r/+v/d+v/x231/zP9/zL0/7f8t/7/Ivr/+v+Z/v95u9T9+X5ffwn7/2v1/ymbsvX/Y+5/W5hJTfI/AAAA1EHM/W8PM5H/AQAAoDJi7r8izET+BwAAgMqIuX99mElN8r/+v/6//r/P/9f/75v+v8//70D/X/8/0/8/b5e6P9/v6y9h/9/n/1M6Zev/x9z/a2EmNcn/AAAAUAcx978jzET+BwAAgMqIuf/KMBP5HwAAACoj5v6rwkxqkv/r2f9/Ncsy/f9M/1//v22d+v/6/6tB/1//vxv9f/3/fl6//r/+P72Vrf8fc/87w0xqkv8BAACgDmLuvzrMRP4HAACAyoi5/11hJvI/AAAAVEbM/deEmdQk/9ez/+/z//X/C/r/revU/9f/Xw36//r/3ej/l7H/n69Q/1//X/+flVG2/n/M/e8OM6lJ/gcAAIA6iLn/2jAT+R8AAAAqI+b+94SZyP8AAABQGTH3bwgzqUn+1//X/9f/1//X/9f/X0391f8fXPIc/f+C/n+rlev/zy0s4JL3/33+v/6//j8rp2z9/5j73xtmUpP8DwAAAHUQc//7wkzkfwAAAKiMmPuvCzOR/wEAAKAyYu7fGGZSk/yv/6//r/+v/6//r/+/mvqr/780/f+C/n+ran7+v/6//r/+PyunbP3/mPs3hZnUJP8DAABAHcTcvznMRP4HAACAyoi5//owE/kfAAAAKiPm/i1hJjXJ//r/+v/6//r/+v/6/6upGv3/gUr2/0e6baj/vyz6//r/+v/6/3RXtv5/zP03hJnUJP8DAABAHcTcf2OYifwPAAAAlRFz//vDTOR/AAAAqIyY+7eGmdQk/+v/6//r//dx/39I/z/T/y+9avT/ff5/PFn/v9UF9/9H9f/7ef36//r/9Fa2/n/M/R8IM6lJ/gcAAIA6iLn/g2Em8j8AAABURsz9N4WZyP8AAABQGTH3j4eZ1CT/6//r/+v/93H/3+f/t6xf/7+c9P/1/7upff/f5//39fr1//X/6a1s/f+Y+28OM6lJ/gcAAIA6iLn/ljAT+R8AAAAqI+b+iTAT+R8AAAAqI+b+yTCTmuR//X/9f/1//X/9f/3/1aT/r//fjf6//n8/r1//X/+f3srW/4+5fyrMpCb5HwAAAOog5v5tYSbyPwAAAFRGzP3bw0zkfwAAAKiMmPt3hJnUJP/r/1ek/z+o/6//r/+v/19O+v/6/93o/+v/9/P69f/1/2k12OG0svX/Y+7fGWZSk/wPAAAAdRBz/64wE/kfAAAAKiPm/lvDTOR/AAAAqIyY+28LM6lJ/tf/r0j/3+f/6//r/+v/l5T+v/5/N/r/+v/9vH79f/1/eitb/z/m/t1hJjXJ/wAAAFAHMfd/KMxE/gcAAIDKiLn/9jAT+R8AAAD6SqfPIYxi7v9wmElN8r/+f9X7//Nr9P/1//X/u69f/3916f/r/3ej/6//38/r1//X/6e3svX/Y+7fE2ZSk/wPAAAAdRBz/0fCTOR/AAAAqIyY++8IM5H/AQAAoDJi7t8bZlKT/K//X/X+v8//r3f/f6Cxq/T/u69f/3916f/r/3ej/9+f/f/wY4v+f4n6//kxpP9PGZWt/x9z/51hJjXJ/wAAAFAHMfd/NMxE/gcAAIDKiLn/Y2Em8j8AAABURsz9Hw8zqUn+1//X/9f/r3L/3+f/6/9fevr/q9b/b7wU6v8X9P/Pz6Xuz/f7+svU//f5/5RV2fr/Mfff1ZijC1dUk/wPAAAAdVDk/rHsE2Em8j8AAABURsz9vx5mIv8DAABAZcTcf3eYSU3yv/6//r/+v/6//r/+/2rS//f5/93o/+v/9/P69f/1/+mtbP3/mPt/I8ykJvkfAAAA6iDm/nvCTOR/AAAAqIyY+z8ZZiL/AwAAQJ8ZXfKcmPt/M8ykJvlf///i9P8H0/Xr/+v/6//r/+v/ryT9f/3/TP//vPXoz7/V9vAvov+v/6//Ty9l6//H3P9bYSY1yf8AAABQBzH3fyrMRP4HAACAyoi5/7fDTOR/AAAAqIyY++8NM6lJ/l/p/n/75bupU//f5//r/2f6//r/TXtV/3/l6P/r/2f6/+ftUvfn+339+v/6//RWtv5/zP2/E2ZSk/wPAAAAdRBz/31hJvI/AAAAVEbM/Z8OM5H/AQAAoDJi7v9MmElN8r/P/9f/1//X/9f/1/9fTfr/+v/d6P/r//fz+vX/9f/prWz9/5j77w8zqUn+BwAAgDqIuf+zYSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/e2EmNcn/+v/6/5Xp/8cr1f/X/w+n6/+Xg/7/4v5//hqm/1/Q/9f/7+f16//r/9Nb2fr/Mfd/LsykJvkfAAAA6iDm/t8PM5H/AQAAoDJi7v+DMBP5HwAAACoj5v4Hwkxqkv/1//X/K9P/9/n/+v/6/6Wk/+/z/7vR/9f/7+f16//r/9Nb2fr/Mfd/PsykJvkfAAAA6iDm/j8MM5H/AQAAoDJi7t8XZiL/AwAAQGXE3P9gmElN8r/+v/6//r/+v/6//v9q0v/X/+9G/1//v5/Xr/+v/09vZev/x9y/P8xkb+vNAAAAAP0r5v4vhJnU5N//AQAAoA5i7j8QZiL/AwAAQGXE3H8wzKQm+V//X/9f/1//X/9f/3816f/r/3ej/6//38/r1//X/6e3svX/Y+6fDjOpSf4HAACAOoi5/1CYifwPAAAAlRFz/+EwE/kfAAAAKiPm/ofCTGqS//X/9f/1/2vb/3/5e23r1P/X/18N+v/6/93o/+v/9/P69f/1/+mtbP3/mPuPhJnUJP8DAABAHcTc/8UwE/kfAAAAKiPm/i+Fmcj/AAAAUBkx9x8NM6lJ/tf/1//X/69t/9/n/wf6/6tL/1//vxv9f/3/fl6//r/+P72Vrf8fc/+xMJOa5H8AAACog5j7j4eZyP8AAABQGTH3nwgzkf8BAACgMmLuPxlmUpP8r/9/bv3/gSW6gfr/ndffB/3/Yt36//r/+v+rRv9f/78b/X/9/35ev/6//j+9la3/H3P/H4WZ1CT/AwAAQB3E3H8qzET+BwAAgMqIuX8mzET+BwAAgMqIuX82zKQm+V//3+f/17z/7/P/9f/1/1eZ/r/+fzf6//r//bx+/X/9f3orW/8/5v7TYSY1yf8A8P/s3WeuXWcVx+GTBAtLETAFGAIjyBAYABISggnwhV4SeugQem+ht9DB9N57770HQg9FCiJeawUc373tax+fd7/reb4sckOUNzLC+iv6aQMAdJC7//5xi/0PAAAA08jd/4C4xf4HAACAaeTuf2Dc0mT/6//1//p//f8l7f//J2/W/+v/Lwb9v/5/p/8/tkP381t/v/5f/8+60fr/3P0Pilua7H8AAADoIHf/g+MW+x8AAACmkbv/IXGL/Q8AAADTyN3/0Lilyf7X/+v/9f/6f9//1//vk/5f/79E/6//3/L79f/6f9aN1v/n7n9Y3NJk/wMAAEAHufsfHrfY/wAAADCN3P2PiFvsfwAAAJhG7v6r45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z918QtTfY/AAAAdJC7/5Fxi/0PAAAA08jd/6i4xf4HAACAaeTuf3Tc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/8xcUuT/Q8AAAAd5O5/bNxi/wMAAMA0cvc/Lm6x/wEAAGAaufsfH7c02f/6f/2//l//367/P+P/I/T/+6X/1/8v0f/r/7f8fv2//p91e+//73Htrfdc+//c/dfGLU32PwAAAHSQu/8JcYv9DwAAANPI3f/EuMX+BwAAgGnk7n9S3NJk/+v/9f+39f+3XKb/1/+36P/P+Pvp//dL/6//X6L/1/8f9P330f/r/9m3vff/K73/mX+cu//JcUuT/Q8AAAAd5O5/Stxi/wMAAMA0cvc/NW6x/wEAAGAaufufFrc02f/6f/2/7//r//X/+v990v/r/5fo//X/W37/Uv9/1Tm8X/9PB6P1/7n7nx63NNn/AAAA0EHu/mfELfY/AAAATCN3/3Vxi/0PAAAA08jd/8y4pcn+1//r//X/+v//7/8vb9n///dn+v/90P/r/5fo//X/Y7//sjss/fW+/6//Z92l7/9P/05wVP+fu/9ZcUuT/Q8AAAAd5O5/dtxi/wMAAMA0cvc/J26x/wEAAGAaufufG7c02f/6f/2//l//f0Hf/79ijv7f9//3R/+v/1+i/9f/b/n9+n/9P+tG+/5/7v7nxS1N9j8AAAB0kLv/+XGL/Q8AAADTyN3/grjF/gcAAIBp5O5/YdzSZP/r//X/+n/9/wX1/5N8/1//vz/6f/3/knPt/3f6//pn0f+P8379v/6fdaP1/7n7XxS3NNn/AAAA0EHu/hfHLfY/AAAATCN3/0viFvsfAAAAppG7/6VxS5P9r//X/+v/9f/6f/3/Pun/9f9LfP9f/7/l9+v/9f+sG63/z93/srilyf4HAACADnL3vzxusf8BAABgGrn7XxG32P8AAAAwjdz9r4xbmux//b/+X/+v/9f/6//3Sf+v/1+i/z97/3/yiL+f/n+s9+v/9f+sG63/z91/fdzSZP8DAABAB7n7XxW32P8AAAAwjdz9r45b7H8AAACYRu7+18QtTfb/Uf3/TVee/vP6/3Oj/z/7+/X/+n/9v/5f/6//X6L/9/3/Lb9f/6//Z91o/X/u/tfGLU32PwAAAHSQu/91cYv9DwAAANPI3f/6uMX+BwAAgGnk7n9D3NJk/1/87//fVf+v/9f/x9X/6//1//p//f8y/b/+f8vv1//r/1k3Wv+fu/+NcUuT/Q8AAAAd5O5/U9xi/wMAAMA0cve/OW6x/wEAAGAaufvfErc02f8Xv//3/X/9/3n2/5fr/5P+P35d9f/6//Og/9f/7/T/x3bofn7r79f/6/9ZN1r/n7v/hrilyf4HAACADnL3vzVusf8BAABgGrn73xa32P8AAAAwjdz9b49bmuz/2/f/V+1m7v/z/fr/04bo/33/v+j/49dV/6//Pw/6f/3/Tv9/bIfu57f+fv2//p91o/X/ufvfEbc02f8AAADQQe7+d8Yt9j8AAABMI3f/u+IW+x8AAACmkbv/3XFLk/3v+//6f/3/8P3/DWf+703/r//fEv2//n+J/l//v+X3j9P/xw+u1v8zntH6/9z974lbmux/AAAA6CB3/3vjFvsfAAAAppG7/1TcYv8DAADANE7dfLf73av+qN/+1/9vvf+/943xAv3/vP2/7//H1f/r/89G/6//3+n/j+3Q/fzW3z9O/+/7/4xrtP7/fbf+VSd3749bmux/AAAA6CB3/wfiFvsfAAAAppG7/4Nxi/0PAAAA08jd/6G4pcn+1/9vvf/3/X/9v/5f/z82/b/+f4n+X/+/5ffr//X/rBut/8/d/+G4pcn+BwAAgA5y938kbrH/AQAAYBq5+z8at9j/AAAAMI3c/R+LW5rsf/2//l//r/+/4P7/Gv3/Tv9/JP2//n+J/l//v+X36//1/6xb6f9PXur+P3f/x+OWJvsfAAAAOsjd/4m4xf4HAACAaeTu/2TcYv8DAADANHL3fypuuPudDveki+vEET+P3lz/r//X/+v/ff9f/79P+n/9/xL9v/5/y+/X/+v/WTfa9/9z9386bvHv/wEAAGAaufs/E7fY/wAAADCN3P2fjVvsfwAAAJhG7v7PxS1N9r/+X/+v/9f/6//1//uk/9f/Lxmu/z+x0//r//X/+n8uotH6/9z9n49bmux/AAAA6CB3/xfiFvsfAAAAppG7/4txi/0PAAAA08jd/6W4pcn+1//r//X/+v9D9f/33On/9f8XTv+v/9/5/v+xHbqf3/r79f/6f9aN1v/n7v9y3NJk/wMAAEAHufu/ErfY/wAAADCN3P1fjVvsfwAAAJhG7v6vxS1N9r/+X/+v/9f/+/6//n+f9P/6/yX6f/3/lt+v/9f/s260/j93/9fjlib7HwAAADrI3f+NuMX+BwAAgGnk7v9m3GL/AwAAwDRy938rbmmy/2fu/5f+a9vo/2+5i/5f/6//1//r/5fp//X/O/3/sR26n9/6+/X/+n/Wjdb/5+7/dtzSZP8DAABAB7n7vxO32P8AAAAwjdz9341b7H8AAACYRu7+78UtTfb/zP3/km30/77/r//X/+/0//r/Ffp//f9O/39sh+7nt/5+/b/+n3UH6v9P7I7o/3P3fz9uabL/AQAAoIPc/T+IW+x/AAAAmEbu/h/GLfY/AAAATCN3/4/ilnn2/31PLfxJ/b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n9+n/9P+tG+/5/7v4fxy3z7H8AAABoL3f/T+IW+x8AAACmkbv/p3GL/Q8AAADTyN3/s7ilyf7X/+v/9f+t+v8rdvp//f8lpv/X/y/R/+v/t/x+/b/+n3Wj9f+5+38etzTZ/wAAANBB7v5fxC32PwAAAEwjd/8v4xb7HwAAAKaRu/9XcUuT/a//1//r/1v1/77/r/+/5PT/+v8l+n/9/5bfr//X/7NutP4/d/+v45Ym+x8AAAA6yN3/m7jF/gcAAIBp5O7/bdxi/wMAAMA0cvf/Lm5psv/1//p//b/+X/+v/98n/b/+f4n+X/+/5ffr//X/rBut/8/df2Pc0mT/AwAAQAe5+38ft9j/AAAAMI3c/X+IW+x/AAAAmEbu/pvilib7X/+v/5+y/7+j/l//r/8fhf7/OP3/Of5Gqv8/UP9/5Z3zP+n/9f/6f/0/y0br/3P3/zFuabL/AQAAoIPc/X+KW+x/AAAAmEbu/j/HLfY/AAAATCN3/1/ilib7X/+v/z///v9E/XMP2//7/r/+X/8/DP2/7/8v2Wb/f5sL7f+vu/70j/X/23y//l//z7rR+v/c/X+NW5rsfwAAAOggd//f4hb7HwAAAKaRu//vcYv9DwAAANPI3X9z3NJk/+v/9f9Tfv9f/6//1/8PQ/+v/1/Svf/3/f9tv1//r/9n3Wj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/8/AQAA///AmDbi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x26) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 3.900426589s ago: executing program 4 (id=4119): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) 3.729904494s ago: executing program 4 (id=4121): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.268680376s ago: executing program 6 (id=4126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="4018690000008d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.21523317s ago: executing program 4 (id=4127): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0xfff, 0x0, 0x2) 1.698767137s ago: executing program 8 (id=4133): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40010142, 0x0) 1.435231971s ago: executing program 8 (id=4135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcd72502202001000000000020000008001100ac1414bb080002"], 0x2c}}, 0x4040000) 1.354022528s ago: executing program 4 (id=4136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x24000000) 1.204931231s ago: executing program 8 (id=4137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000940)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 833.144115ms ago: executing program 7 (id=4138): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 832.665535ms ago: executing program 8 (id=4139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 664.1382ms ago: executing program 8 (id=4140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004) 648.912841ms ago: executing program 7 (id=4141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200001a7dcd0b29c5a1a204000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 553.74261ms ago: executing program 4 (id=4142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040054) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 437.81629ms ago: executing program 7 (id=4143): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 436.297931ms ago: executing program 8 (id=4144): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x0, 0x0}, {0x1000, 0x1800, 0x0, 0x0}], 0x2}) 405.548393ms ago: executing program 4 (id=4145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={r1, @in={{0x2, 0x0, @private=0xa010102}}, 0xfff, 0x2, 0x0, 0x0, 0x414d6714bf78e135, 0x10000000}, 0x9c) 227.742689ms ago: executing program 7 (id=4146): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0xfff) shutdown(r0, 0x2) 149.456686ms ago: executing program 7 (id=4147): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x4, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='\t', 0x1}], 0x1) 35.926817ms ago: executing program 6 (id=4148): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 0s ago: executing program 7 (id=4149): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0xffffffffffffffff) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x1, 0x2, 0x2, &(0x7f0000000280)={0x16, "64b9e555f199b86080d345969f412537eda80a1fa3dcd135104c46175a37418b45"}}) kernel console output (not intermixed with test programs): block not in datazone [ 443.961853][T12708] Trying to free block not in datazone [ 443.980953][T12609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.010388][T12708] Trying to free block not in datazone [ 444.015926][T12708] Trying to free block not in datazone [ 444.039529][T12609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.097799][T12708] Trying to free block not in datazone [ 444.103372][T12708] Trying to free block not in datazone [ 444.118759][T12609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.151836][T12708] Trying to free block not in datazone [ 444.189491][T12708] Trying to free block not in datazone [ 444.195025][T12708] Trying to free block not in datazone [ 444.208142][T12747] loop8: detected capacity change from 0 to 1024 [ 444.220428][T12708] Trying to free block not in datazone [ 444.225959][T12708] Trying to free block not in datazone [ 444.258281][T12708] Trying to free block not in datazone [ 444.274811][T12747] EXT4-fs: Ignoring removed orlov option [ 444.301727][T12708] Trying to free block not in datazone [ 444.326327][T12747] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 444.332364][T12708] Trying to free block not in datazone [ 444.372330][T12708] Trying to free block not in datazone [ 444.377982][T12708] Trying to free block not in datazone [ 444.383725][T12708] Trying to free block not in datazone [ 444.386107][T12755] loop7: detected capacity change from 0 to 128 [ 444.430308][T12708] Trying to free block not in datazone [ 444.435938][T12708] Trying to free block not in datazone [ 444.465472][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.499578][T12755] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.517281][T12708] Trying to free block not in datazone [ 444.520828][ T5132] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 444.522981][T12708] Trying to free block not in datazone [ 444.556971][T12708] Trying to free block not in datazone [ 444.565030][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.573635][T12755] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.591676][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.599356][T12708] Trying to free block not in datazone [ 444.610019][T12708] Trying to free block not in datazone [ 444.622202][T10357] EXT4-fs (loop8): unmounting filesystem. [ 444.633287][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.647659][T12708] Trying to free block not in datazone [ 444.663627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.673967][T12708] Trying to free block not in datazone [ 444.702627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.712480][T12708] Trying to free block not in datazone [ 444.739273][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.746442][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.747527][ T5132] usb 10-1: Using ep0 maxpacket: 16 [ 444.762856][T12708] Trying to free block not in datazone [ 444.770241][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.781872][T12708] Trying to free block not in datazone [ 444.797422][T12708] Trying to free block not in datazone [ 444.802960][T12708] Trying to free block not in datazone [ 444.831211][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.855449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 444.864547][T12708] Trying to free block not in datazone [ 444.889318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 444.892898][ T5132] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.911288][T12708] Trying to free block not in datazone [ 444.916805][T12708] Trying to free block not in datazone [ 444.933545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.957319][ T5132] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.965139][T12708] Trying to free block not in datazone [ 444.988379][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.995596][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.010178][ T5132] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.014445][T12708] Trying to free block not in datazone [ 445.024350][T12708] Trying to free block not in datazone [ 445.043727][T12708] Trying to free block not in datazone [ 445.067060][ T5132] usb 10-1: config 0 descriptor?? [ 445.069148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.082116][T12708] Trying to free block not in datazone [ 445.083222][ T9] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.108077][T12708] Trying to free block not in datazone [ 445.128488][T12708] Trying to free block not in datazone [ 445.134038][T12708] Trying to free block not in datazone [ 445.158041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.191950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.208396][T12708] Trying to free block not in datazone [ 445.226913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.227544][T12708] Trying to free block not in datazone [ 445.250138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.261697][T12708] Trying to free block not in datazone [ 445.272727][T12764] loop7: detected capacity change from 0 to 512 [ 445.281954][T12708] Trying to free block not in datazone [ 445.289521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.300698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.327510][T12708] Trying to free block not in datazone [ 445.327658][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 445.345541][T12708] Trying to free block not in datazone [ 445.352455][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.367922][T12764] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 445.380491][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.394726][T12764] EXT4-fs (loop7): orphan cleanup on readonly fs [ 445.400768][T12708] Trying to free block not in datazone [ 445.411013][T12708] Trying to free block not in datazone [ 445.422326][T12609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.435108][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.445315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.457887][T12764] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 445.478858][T12708] Trying to free block not in datazone [ 445.500696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.531226][T12708] Trying to free block not in datazone [ 445.536988][T12764] EXT4-fs warning (device loop7): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 445.557700][ T5132] microsoft 0003:045E:07DA.0037: unknown main item tag 0x1 [ 445.565057][ T5132] microsoft 0003:045E:07DA.0037: unknown main item tag 0x2 [ 445.584406][T12708] Trying to free block not in datazone [ 445.606420][ T5132] microsoft 0003:045E:07DA.0037: unbalanced collection at end of report description [ 445.628640][T12708] Trying to free block not in datazone [ 445.634253][T12708] Trying to free block not in datazone [ 445.640145][T12764] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 445.653959][ T5132] microsoft 0003:045E:07DA.0037: parse failed [ 445.660615][T12708] Trying to free block not in datazone [ 445.667582][T12764] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #16: comm syz.7.2967: inode has both inline data and extents flags [ 445.688645][ T5132] microsoft: probe of 0003:045E:07DA.0037 failed with error -22 [ 445.697583][T12708] Trying to free block not in datazone [ 445.704136][T12708] Trying to free block not in datazone [ 445.721568][T12764] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2967: couldn't read orphan inode 16 (err -117) [ 445.744207][T12708] Trying to free block not in datazone [ 445.773148][ T5132] usb 10-1: USB disconnect, device number 7 [ 445.779787][T12708] Trying to free block not in datazone [ 445.788854][T12764] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 445.814674][T12708] Trying to free block not in datazone [ 445.821502][T12708] Trying to free block not in datazone [ 445.845028][T12708] Trying to free block not in datazone [ 445.858786][T12708] Trying to free block not in datazone [ 445.864392][T12708] Trying to free block not in datazone [ 445.870796][T12708] Trying to free block not in datazone [ 445.876503][T12708] Trying to free block not in datazone [ 445.882822][T12708] Trying to free block not in datazone [ 445.888821][T12708] Trying to free block not in datazone [ 445.898240][T12708] Trying to free block not in datazone [ 445.927856][T12708] Trying to free block not in datazone [ 445.933389][T12708] Trying to free block not in datazone [ 445.942819][T12764] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 445.977511][T12708] Trying to free block not in datazone [ 446.003567][T12708] Trying to free block not in datazone [ 446.045271][T12708] Trying to free block not in datazone [ 446.064850][T10181] EXT4-fs (loop7): unmounting filesystem. [ 446.071049][T12708] Trying to free block not in datazone [ 446.076565][T12708] Trying to free block not in datazone [ 446.130606][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.137036][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.158480][T12708] Trying to free block not in datazone [ 446.164025][T12708] Trying to free block not in datazone [ 446.200177][T12708] Trying to free block not in datazone [ 446.220519][T12708] Trying to free block not in datazone [ 446.226079][T12708] Trying to free block not in datazone [ 446.262622][T12708] Trying to free block not in datazone [ 446.293049][T12708] Trying to free block not in datazone [ 446.317045][T12708] Trying to free block not in datazone [ 446.371964][T12708] Trying to free block not in datazone [ 446.389578][T12708] Trying to free block not in datazone [ 446.395273][T12708] Trying to free block not in datazone [ 446.443839][T12708] Trying to free block not in datazone [ 446.467368][T12708] Trying to free block not in datazone [ 446.472908][T12708] Trying to free block not in datazone [ 446.489701][T12788] tc_dump_action: action bad kind [ 446.501670][T12708] Trying to free block not in datazone [ 446.522380][T12708] Trying to free block not in datazone [ 446.551444][T12708] Trying to free block not in datazone [ 446.556985][T12708] Trying to free block not in datazone [ 446.609236][T12708] Trying to free block not in datazone [ 446.614777][T12708] Trying to free block not in datazone [ 446.658001][T12708] Trying to free block not in datazone [ 446.663557][T12708] Trying to free block not in datazone [ 446.698895][T12708] Trying to free block not in datazone [ 446.704443][T12708] Trying to free block not in datazone [ 446.768277][T12708] Trying to free block not in datazone [ 446.773864][T12708] Trying to free block not in datazone [ 446.826234][T12708] Trying to free block not in datazone [ 446.848147][T12708] Trying to free block not in datazone [ 446.871848][T12708] Trying to free block not in datazone [ 446.902074][T12708] Trying to free block not in datazone [ 446.928921][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.937062][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.944756][T12708] Trying to free block not in datazone [ 446.964378][T12708] Trying to free block not in datazone [ 446.977575][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.004802][T12708] Trying to free block not in datazone [ 447.050219][T12708] Trying to free block not in datazone [ 447.065989][T12708] Trying to free block not in datazone [ 447.073546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.083124][T12708] Trying to free block not in datazone [ 447.099425][T12708] Trying to free block not in datazone [ 447.105718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.120902][T12708] Trying to free block not in datazone [ 447.163875][T12708] Trying to free block not in datazone [ 447.200932][T12708] Trying to free block not in datazone [ 447.206473][T12708] Trying to free block not in datazone [ 447.214220][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.233476][T12708] Trying to free block not in datazone [ 447.240557][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.248664][T12708] Trying to free block not in datazone [ 447.289945][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.297826][T12708] Trying to free block not in datazone [ 447.304611][T12708] Trying to free block not in datazone [ 447.318635][T12708] Trying to free block not in datazone [ 447.326007][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.333446][T12708] Trying to free block not in datazone [ 447.333459][T12708] Trying to free block not in datazone [ 447.333465][T12708] Trying to free block not in datazone [ 447.333472][T12708] Trying to free block not in datazone [ 447.333479][T12708] Trying to free block not in datazone [ 447.333493][T12708] Trying to free block not in datazone [ 447.333500][T12708] Trying to free block not in datazone [ 447.333506][T12708] Trying to free block not in datazone [ 447.333512][T12708] Trying to free block not in datazone [ 447.333518][T12708] Trying to free block not in datazone [ 447.333525][T12708] Trying to free block not in datazone [ 447.333532][T12708] Trying to free block not in datazone [ 447.333538][T12708] Trying to free block not in datazone [ 447.333544][T12708] Trying to free block not in datazone [ 447.333551][T12708] Trying to free block not in datazone [ 447.333557][T12708] Trying to free block not in datazone [ 447.333564][T12708] Trying to free block not in datazone [ 447.333571][T12708] Trying to free block not in datazone [ 447.333578][T12708] Trying to free block not in datazone [ 447.333585][T12708] Trying to free block not in datazone [ 447.333591][T12708] Trying to free block not in datazone [ 447.333616][T12708] Trying to free block not in datazone [ 447.333623][T12708] Trying to free block not in datazone [ 447.333630][T12708] Trying to free block not in datazone [ 447.333637][T12708] Trying to free block not in datazone [ 447.333644][T12708] Trying to free block not in datazone [ 447.333650][T12708] Trying to free block not in datazone [ 447.333657][T12708] Trying to free block not in datazone [ 447.333664][T12708] Trying to free block not in datazone [ 447.333670][T12708] Trying to free block not in datazone [ 447.333677][T12708] Trying to free block not in datazone [ 447.333685][T12708] Trying to free block not in datazone [ 447.333691][T12708] Trying to free block not in datazone [ 447.333698][T12708] Trying to free block not in datazone [ 447.333705][T12708] Trying to free block not in datazone [ 447.333712][T12708] Trying to free block not in datazone [ 447.333719][T12708] Trying to free block not in datazone [ 447.333727][T12708] Trying to free block not in datazone [ 447.333734][T12708] Trying to free block not in datazone [ 447.333741][T12708] Trying to free block not in datazone [ 447.333748][T12708] Trying to free block not in datazone [ 447.333755][T12708] Trying to free block not in datazone [ 447.333763][T12708] Trying to free block not in datazone [ 447.333777][T12708] Trying to free block not in datazone [ 447.333784][T12708] Trying to free block not in datazone [ 447.333791][T12708] Trying to free block not in datazone [ 447.333799][T12708] Trying to free block not in datazone [ 447.408854][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 447.445989][T12609] device veth0_vlan entered promiscuous mode [ 447.467683][T12708] Trying to free block not in datazone [ 447.636162][T12609] device veth1_vlan entered promiscuous mode [ 447.680011][T12810] fuse: Unexpected value for 'default_permissions' [ 447.696243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.715388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 447.779558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.825994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.848136][T12609] device veth0_macvtap entered promiscuous mode [ 447.876349][T12609] device veth1_macvtap entered promiscuous mode [ 447.938002][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.955881][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 447.967592][T12708] Trying to free block not in datazone [ 447.973127][T12708] Trying to free block not in datazone [ 448.002778][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.017365][T12708] Trying to free block not in datazone [ 448.022939][T12708] Trying to free block not in datazone [ 448.037313][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.048553][T12708] Trying to free block not in datazone [ 448.054499][T12708] Trying to free block not in datazone [ 448.067305][T12708] Trying to free block not in datazone [ 448.072822][T12708] Trying to free block not in datazone [ 448.082201][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.118681][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.129148][T12708] Trying to free block not in datazone [ 448.147271][T12708] Trying to free block not in datazone [ 448.152888][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.167408][T12708] Trying to free block not in datazone [ 448.173035][T12708] Trying to free block not in datazone [ 448.183007][T12825] QAT: Invalid ioctl 21531 [ 448.190074][T12708] Trying to free block not in datazone [ 448.195645][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.206830][T12708] Trying to free block not in datazone [ 448.229761][T12708] Trying to free block not in datazone [ 448.238751][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.253903][T12708] Trying to free block not in datazone [ 448.266283][T12708] Trying to free block not in datazone [ 448.280129][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.300660][T12708] Trying to free block not in datazone [ 448.320764][T12708] Trying to free block not in datazone [ 448.326544][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.337583][T12708] Trying to free block not in datazone [ 448.349064][T12708] Trying to free block not in datazone [ 448.354668][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.384737][T12708] Trying to free block not in datazone [ 448.413022][T12708] Trying to free block not in datazone [ 448.420739][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.433866][T12708] Trying to free block not in datazone [ 448.445910][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.465548][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.474487][T12708] Trying to free block not in datazone [ 448.491889][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.509891][T12708] Trying to free block not in datazone [ 448.525576][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.542520][T12708] Trying to free block not in datazone [ 448.558393][T12708] Trying to free block not in datazone [ 448.570990][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.601060][T12708] Trying to free block not in datazone [ 448.611451][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.675191][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.713060][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.726939][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.744306][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.756438][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.776396][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.818519][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.829763][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.855628][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.910454][T12609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.950326][T12609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.990884][T12609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.015385][T12812] loop8: detected capacity change from 0 to 32768 [ 449.027414][T12609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.173122][ T4822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.209545][ T4822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.222886][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.233075][T12812] XFS (loop8): Mounting V5 Filesystem [ 449.354661][T12812] XFS (loop8): Ending clean mount [ 449.397724][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.416580][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.452368][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.667929][T10357] XFS (loop8): Unmounting Filesystem [ 450.643646][T12894] loop7: detected capacity change from 0 to 128 [ 450.662022][T12894] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.724006][T12894] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 450.843818][T12900] loop8: detected capacity change from 0 to 64 [ 451.010584][T12900] Trying to free block not in datazone [ 451.118880][T12910] ubi7: attaching mtd0 [ 451.136524][T12910] ubi7: scanning is finished [ 451.194443][T12910] ubi7: empty MTD device detected [ 451.563185][T12910] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB) [ 451.591304][T12910] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 3519 bytes [ 451.624797][T12910] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 451.660271][T12910] ubi7: VID header offset: 513 (aligned 513), data offset: 577 [ 451.697516][T12910] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 451.734937][T12910] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 451.785571][T12910] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2727136327 [ 451.836798][T12910] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 451.891011][T12923] ubi7: background thread "ubi_bgt7d" started, PID 12923 [ 451.923417][T12905] loop7: detected capacity change from 0 to 32768 [ 452.014144][T12905] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.3012 (12905) [ 452.072987][T12905] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 452.129924][T12905] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 452.167366][T12905] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 452.218478][T12905] BTRFS info (device loop7): use zstd compression, level 3 [ 452.225788][T12905] BTRFS info (device loop7): using free space tree [ 452.254268][T12936] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3022'. [ 452.338523][T12936] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3022'. [ 452.592220][T12905] BTRFS info (device loop7): enabling ssd optimizations [ 452.815866][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready [ 452.823817][T12967] loop9: detected capacity change from 0 to 1024 [ 452.884649][T12967] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 452.935980][T10181] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 452.947793][T12967] EXT4-fs error (device loop9): ext4_get_journal_inode:5756: inode #32: comm syz.9.3027: iget: special inode unallocated [ 453.033387][T12967] EXT4-fs (loop9): no journal found [ 453.091992][T12967] EXT4-fs (loop9): can't get journal size [ 453.152107][T12967] EXT4-fs (loop9): filesystem is read-only [ 453.165321][ T4700] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop7 scanned by udevd (4700) [ 453.247595][T12967] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 453.649317][T10529] EXT4-fs (loop9): unmounting filesystem. [ 453.743651][T12990] loop7: detected capacity change from 0 to 64 [ 454.353668][ T26] audit: type=1326 audit(1771523163.990:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 454.457740][ T26] audit: type=1326 audit(1771523164.020:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 454.532532][ T26] audit: type=1326 audit(1771523164.050:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 454.570978][T13015] loop9: detected capacity change from 0 to 256 [ 454.626665][ T26] audit: type=1326 audit(1771523164.050:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 454.640986][T13015] exfat: Deprecated parameter 'utf8' [ 454.695069][T13015] exfat: Deprecated parameter 'utf8' [ 454.715861][T13015] exfat: Deprecated parameter 'utf8' [ 454.775326][T13015] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 454.793427][ T26] audit: type=1326 audit(1771523164.050:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 454.904358][T13023] loop7: detected capacity change from 0 to 512 [ 454.952981][T13015] exFAT-fs (loop9): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 454.960619][ T26] audit: type=1326 audit(1771523164.050:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 455.032133][T13015] exFAT-fs (loop9): Filesystem has been set read-only [ 455.058067][T13027] exfat: Deprecated parameter 'utf8' [ 455.063491][T13027] exfat: Deprecated parameter 'utf8' [ 455.073775][T13032] loop8: detected capacity change from 0 to 512 [ 455.089267][ T26] audit: type=1326 audit(1771523164.050:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 455.113074][ T26] audit: type=1326 audit(1771523164.120:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d119c629 code=0x7ffc0000 [ 455.184788][T13027] exfat: Deprecated parameter 'utf8' [ 455.189067][T13032] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 455.217420][T13032] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 455.273534][T13023] EXT4-fs (loop7): 1 truncate cleaned up [ 455.337486][T13023] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 455.346500][T13023] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.357570][ T4306] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 455.400813][T13032] EXT4-fs (loop8): 1 truncate cleaned up [ 455.406714][T13032] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 455.436578][ T4306] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 1 [ 455.630395][T10181] EXT4-fs (loop7): unmounting filesystem. [ 455.735015][T13046] loop9: detected capacity change from 0 to 1024 [ 455.817895][T13052] loop7: detected capacity change from 0 to 256 [ 455.836272][T10357] EXT4-fs (loop8): unmounting filesystem. [ 455.942647][ T26] audit: type=1804 audit(1771523165.580:144): pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3057" name="/newroot/196/file0/file1" dev="loop7" ino=1048862 res=1 errno=0 [ 456.045283][ T4306] hfsplus: b-tree write err: -5, ino 4 [ 456.610609][T13078] loop7: detected capacity change from 0 to 1024 [ 456.907845][ T46] hfsplus: b-tree write err: -5, ino 4 [ 456.956514][T13086] loop9: detected capacity change from 0 to 512 [ 457.095609][T13086] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.3069: Failed to acquire dquot type 1 [ 457.265817][T13086] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.3069: corrupted inode contents [ 457.324925][T13086] EXT4-fs error (device loop9): ext4_dirty_inode:6137: inode #16: comm syz.9.3069: mark_inode_dirty error [ 457.356893][T13086] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.3069: corrupted inode contents [ 457.407926][T13086] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.3069: mark_inode_dirty error [ 457.436952][T13086] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.3069: corrupted inode contents [ 457.492259][T13086] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 457.517706][T13086] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.3069: corrupted inode contents [ 457.567478][T13086] EXT4-fs error (device loop9): ext4_truncate:4318: inode #16: comm syz.9.3069: mark_inode_dirty error [ 457.618662][T13086] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 457.653638][T13086] EXT4-fs (loop9): 1 truncate cleaned up [ 457.687447][T13086] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 457.697145][T13086] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.885521][T13111] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3077'. [ 457.978956][T10529] EXT4-fs (loop9): unmounting filesystem. [ 458.239675][T13120] loop6: detected capacity change from 0 to 1024 [ 458.366655][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3083'. [ 458.386596][T13127] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 458.453859][ T5132] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 458.515960][ T46] hfsplus: b-tree write err: -5, ino 4 [ 458.556223][T13132] loop7: detected capacity change from 0 to 256 [ 458.600890][T13132] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 458.658888][ T5132] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.677881][ T5132] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 458.749714][ T5132] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 458.768468][T13138] loop6: detected capacity change from 0 to 1024 [ 458.807293][ T5132] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.835651][ T5132] usb 9-1: config 0 descriptor?? [ 458.855367][T13138] hfsplus: small file entry [ 459.279336][ T5132] kovaplus 0003:1E7D:2D50.0038: item fetching failed at offset 2/5 [ 459.307860][ T5132] kovaplus 0003:1E7D:2D50.0038: parse failed [ 459.317586][ T5132] kovaplus: probe of 0003:1E7D:2D50.0038 failed with error -22 [ 459.494265][ T5132] usb 9-1: USB disconnect, device number 5 [ 459.576026][T13155] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 459.594521][T13165] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 459.609252][T13155] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.686109][T13155] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 459.814205][ T6718] EXT4-fs (loop6): unmounting filesystem. [ 460.657920][T13193] set_capacity_and_notify: 1 callbacks suppressed [ 460.657937][T13193] loop6: detected capacity change from 0 to 4096 [ 460.734542][T13193] ntfs3: loop6: ino=3, Correct links count -> 2. [ 460.746333][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3112'. [ 461.755213][T13226] loop6: detected capacity change from 0 to 4096 [ 461.890323][T13226] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 462.065379][ T6718] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 462.335659][T13251] loop9: detected capacity change from 0 to 1024 [ 462.560998][ T30] hfsplus: b-tree write err: -5, ino 4 [ 463.227324][ T127] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 463.427635][ T127] usb 9-1: Using ep0 maxpacket: 32 [ 463.435010][ T127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.466356][ T127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.496939][ T127] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 463.526544][ T127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.554443][ T127] usb 9-1: config 0 descriptor?? [ 463.737779][T13279] loop7: detected capacity change from 0 to 32768 [ 463.990595][ T127] zydacron 0003:13EC:0006.0039: unknown main item tag 0x0 [ 464.012014][ T127] zydacron 0003:13EC:0006.0039: unknown main item tag 0x0 [ 464.032830][ T127] zydacron 0003:13EC:0006.0039: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.8-1/input0 [ 464.226662][T13302] loop9: detected capacity change from 0 to 256 [ 464.241716][ T127] usb 9-1: USB disconnect, device number 6 [ 464.391679][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 464.391697][ T26] audit: type=1804 audit(1771523174.030:145): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3147" name="/newroot/188/file0/file1" dev="loop9" ino=1048863 res=1 errno=0 [ 464.500347][T13300] fido_id[13300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 465.030798][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3153'. [ 465.600292][T13347] loop7: detected capacity change from 0 to 1024 [ 465.700143][T13347] hfsplus: request for non-existent node 3 in B*Tree [ 465.757871][T13347] hfsplus: request for non-existent node 3 in B*Tree [ 466.618936][T13344] loop8: detected capacity change from 0 to 32768 [ 466.731888][T13344] XFS (loop8): Mounting V5 Filesystem [ 466.757531][ T5129] kernel write not supported for file /media6 (pid: 5129 comm: kworker/0:12) [ 466.845244][T13344] XFS (loop8): Ending clean mount [ 466.856002][T13344] XFS (loop8): Quotacheck needed: Please wait. [ 466.921676][T13344] XFS (loop8): Quotacheck: Done. [ 466.975356][T13400] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3176'. [ 467.057343][T10357] XFS (loop8): Unmounting Filesystem [ 467.073315][T13404] loop7: detected capacity change from 0 to 1024 [ 467.399535][ T9] hfsplus: b-tree write err: -5, ino 4 [ 467.966987][T13422] loop7: detected capacity change from 0 to 512 [ 468.002723][T13426] loop8: detected capacity change from 0 to 256 [ 468.011704][T13422] EXT4-fs: Ignoring removed oldalloc option [ 468.067960][T13422] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 468.128223][ T26] audit: type=1804 audit(1771523177.770:146): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3183" name="/newroot/200/file0/file1" dev="loop8" ino=1048864 res=1 errno=0 [ 468.221268][T13422] EXT4-fs (loop7): 1 truncate cleaned up [ 468.226987][T13422] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 468.426673][T13438] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3186'. [ 468.486399][T13438] nbd: illegal input index -28 [ 468.513214][T10181] EXT4-fs (loop7): unmounting filesystem. [ 468.949145][ T4276] Bluetooth: hci2: Malformed LE Event: 0x1b [ 469.125186][T13462] loop7: detected capacity change from 0 to 128 [ 469.744029][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3204'. [ 469.958837][T13488] loop9: detected capacity change from 0 to 4096 [ 470.016660][T13488] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 470.069765][T13488] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 470.113010][T13497] binder: 13496:13497 ioctl c0306201 2000000003c0 returned -22 [ 470.152379][T13488] ntfs: (device loop9): ntfs_read_locked_inode(): Inode is not in use! [ 470.178292][T13488] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 470.228294][T13488] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 470.301343][T13488] ntfs: (device loop9): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 470.341186][T13488] ntfs: (device loop9): ntfs_fill_super(): Failed to load system files. [ 470.677835][T13516] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3217'. [ 470.860284][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3218'. [ 471.533789][ T5530] kernel write not supported for file /uhid (pid: 5530 comm: kworker/1:11) [ 471.564592][T13551] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.3232'. [ 471.604126][T13551] netlink: zone id is out of range [ 471.630126][T13551] netlink: zone id is out of range [ 471.635512][T13551] netlink: zone id is out of range [ 471.665549][T13551] netlink: zone id is out of range [ 471.685536][T13551] netlink: zone id is out of range [ 471.724268][T13551] netlink: zone id is out of range [ 471.748798][T13551] netlink: zone id is out of range [ 472.771712][T13553] loop7: detected capacity change from 0 to 40427 [ 472.815782][T13553] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 472.847972][T13553] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 472.919418][T13553] F2FS-fs (loop7): invalid crc value [ 472.966271][T13553] F2FS-fs (loop7): Found nat_bits in checkpoint [ 473.161015][T13553] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 473.177890][T13553] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 473.224045][T13601] loop6: detected capacity change from 0 to 512 [ 473.280466][T13601] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 473.385811][T13606] netlink: 240 bytes leftover after parsing attributes in process `syz.8.3248'. [ 473.395845][T13606] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3248'. [ 473.409700][T13601] EXT4-fs (loop6): 1 truncate cleaned up [ 473.415407][T13601] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 473.535383][ T6718] EXT4-fs (loop6): unmounting filesystem. [ 473.719406][T13574] loop9: detected capacity change from 0 to 32768 [ 473.807566][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 473.813686][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 473.885582][T13615] loop8: detected capacity change from 0 to 4096 [ 473.996247][T13615] EXT4-fs: inline encryption not supported [ 474.045751][T13615] EXT4-fs (loop8): Test dummy encryption mode enabled [ 474.099263][T13615] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 474.117893][T13615] System zones: 0-5 [ 474.136835][T13615] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 474.439902][T13613] loop6: detected capacity change from 0 to 32768 [ 474.468756][T10357] EXT4-fs (loop8): unmounting filesystem. [ 474.735442][T13613] read_mapping_page failed! [ 474.800928][T13613] ERROR: (device loop6): txCommit: [ 474.800928][T13613] [ 474.850838][T13632] loop7: detected capacity change from 0 to 2048 [ 474.911486][T13632] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 475.057411][T13637] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.123378][ T14] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 476.137090][T13630] loop8: detected capacity change from 0 to 40427 [ 476.204474][T13630] F2FS-fs (loop8): invalid crc value [ 476.229166][T13630] F2FS-fs (loop8): Found nat_bits in checkpoint [ 476.267448][ T127] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 476.317476][ T14] usb 10-1: Using ep0 maxpacket: 8 [ 476.332268][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.366901][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.390071][T13630] F2FS-fs (loop8): Start checkpoint disabled! [ 476.409684][ T14] usb 10-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 476.428743][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.438457][T13630] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 476.459641][ T127] usb 8-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 476.464378][ T14] usb 10-1: config 0 descriptor?? [ 476.507537][ T127] usb 8-1: config 0 interface 0 has no altsetting 0 [ 476.539857][ T127] usb 8-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 476.600481][ T127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.646304][ T127] usb 8-1: config 0 descriptor?? [ 476.817529][T13654] loop6: detected capacity change from 0 to 32768 [ 476.869603][T13654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.3258 (13654) [ 476.898642][ T5733] kworker/u4:9: attempt to access beyond end of device [ 476.898642][ T5733] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 476.943750][T13654] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 476.961885][ T14] wacom 0003:056A:0003.003A: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 476.999229][ T14] wacom 0003:056A:0003.003A: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.9-1/input0 [ 477.007417][T13654] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 477.067895][T13654] BTRFS info (device loop6): using free space tree [ 477.084944][ T14] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0003.003A/input/input31 [ 477.098218][ T127] wacom 0003:056A:0064.003B: unknown main item tag 0x0 [ 477.098250][ T127] wacom 0003:056A:0064.003B: unknown main item tag 0x0 [ 477.099781][ T127] wacom 0003:056A:0064.003B: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 477.223180][ T127] wacom 0003:056A:0064.003B: hidraw1: USB HID v4.0a Device [HID 056a:0064] on usb-dummy_hcd.7-1/input0 [ 477.251028][ T14] usb 10-1: USB disconnect, device number 8 [ 477.283030][ T127] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0064.003B/input/input34 [ 477.305851][ T127] usb 8-1: USB disconnect, device number 5 [ 477.492744][T13654] BTRFS info (device loop6): enabling ssd optimizations [ 477.700886][T13702] fido_id[13702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 477.727920][ T6718] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 477.911488][T13710] fido_id[13710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 477.991711][T13718] loop9: detected capacity change from 0 to 256 [ 478.474366][T13729] loop7: detected capacity change from 0 to 1024 [ 478.783079][ T4306] hfsplus: b-tree write err: -5, ino 4 [ 479.506035][T13767] loop7: detected capacity change from 0 to 512 [ 479.593209][T13767] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 479.668020][T13767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.755829][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3297'. [ 479.771180][T13767] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3294: invalid indirect mapped block 4294967295 (level 1) [ 479.829028][T13777] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3297'. [ 479.847732][T13777] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3297'. [ 479.869848][T13767] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3294: invalid indirect mapped block 4294967295 (level 1) [ 479.888434][T13767] EXT4-fs (loop7): 2 truncates cleaned up [ 479.894191][T13767] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 480.065797][T13788] binder: 13787:13788 unknown command 1953002597 [ 480.113701][T13788] binder: 13787:13788 ioctl c0306201 200000000080 returned -22 [ 480.265891][T10181] EXT4-fs (loop7): unmounting filesystem. [ 480.420680][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3305'. [ 480.636844][ T26] audit: type=1326 audit(1771523190.270:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.3310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6ced9c629 code=0x0 [ 480.748355][T13819] netlink: 790 bytes leftover after parsing attributes in process `syz.7.3311'. [ 480.946077][T13825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.671863][T13853] loop9: detected capacity change from 0 to 2048 [ 481.711751][T13858] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.810221][T13853] overlayfs: upper fs does not support tmpfile. [ 481.847034][T13853] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 481.860329][T13853] overlayfs: failed to set xattr on upper [ 481.866293][T13853] overlayfs: ...falling back to index=off,metacopy=off. [ 482.146360][T10529] VFS: Lookup of '.' in nilfs2 loop9 would have caused loop [ 482.158718][T10529] VFS: Lookup of '.' in nilfs2 loop9 would have caused loop [ 482.739852][ T5733] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.811980][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 482.832230][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 482.867058][T13881] netlink: 'syz.0.3334': attribute type 15 has an invalid length. [ 483.109707][ T5733] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.323344][ T127] Process accounting resumed [ 483.377711][ T5733] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.441438][T13906] Process accounting resumed [ 483.642570][ T5733] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.004642][T13926] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 484.214260][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.228530][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.239240][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.247139][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.269593][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 484.277046][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.285598][T13964] netlink: 19 bytes leftover after parsing attributes in process `syz.6.3362'. [ 485.315669][T13929] loop8: detected capacity change from 0 to 40427 [ 485.372533][T13929] F2FS-fs (loop8): invalid crc value [ 485.431480][T13933] chnl_net:caif_netlink_parms(): no params data found [ 485.477756][T13929] F2FS-fs (loop8): Found nat_bits in checkpoint [ 485.712726][T13929] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 486.058139][T10357] syz-executor: attempt to access beyond end of device [ 486.058139][T10357] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 486.161698][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.169284][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.197711][T13933] device bridge_slave_0 entered promiscuous mode [ 486.305956][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.343019][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.367747][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 486.381773][T13933] device bridge_slave_1 entered promiscuous mode [ 486.893135][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.941650][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.121543][T14011] loop6: detected capacity change from 0 to 32768 [ 487.154600][T14015] loop7: detected capacity change from 0 to 512 [ 487.192815][T14015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.214969][T14011] XFS (loop6): Mounting V5 Filesystem [ 487.279177][T14015] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 487.324830][T14015] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 487.347330][T14015] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 487.402256][T14011] XFS (loop6): Starting recovery (logdev: internal) [ 487.423906][T14015] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 487.433545][T14015] EXT4-fs (loop7): orphan cleanup on readonly fs [ 487.466363][T14011] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 [ 487.477922][T14011] XFS (loop6): Unmount and run xfs_repair [ 487.484276][T14011] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 487.492045][T14011] 00000000: 41 42 54 43 00 00 00 03 ff ff ff ff ff ff ff ff ABTC............ [ 487.501235][T14011] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 487.502331][T14015] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3379: bg 0: block 34: padding at end of block bitmap is not set [ 487.510164][T14011] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 487.510183][T14011] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 487.510199][T14011] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 487.510214][T14011] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 487.510234][T14011] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 487.510249][T14011] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 487.546783][T14011] XFS (loop6): log mount/recovery failed: error -74 [ 487.623562][T14015] Quota error (device loop7): write_blk: dquota write failed [ 487.633990][T14011] XFS (loop6): log mount failed [ 487.720127][T14015] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 487.737766][T14015] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.3379: Failed to acquire dquot type 1 [ 487.868328][T13933] team0: Port device team_slave_0 added [ 487.931973][T14015] EXT4-fs (loop7): 1 truncate cleaned up [ 487.953415][T14015] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 487.976508][ T5733] device hsr_slave_0 left promiscuous mode [ 488.018011][ T5733] device hsr_slave_1 left promiscuous mode [ 488.051098][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.061520][T14015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 488.077611][ T5733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.091449][T14015] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring [ 488.112370][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.132580][T14015] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 488.141229][ T5530] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 488.157549][ T5733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.217791][ T5733] device bridge_slave_1 left promiscuous mode [ 488.224084][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.275957][ T5733] device bridge_slave_0 left promiscuous mode [ 488.288889][T10181] EXT4-fs (loop7): unmounting filesystem. [ 488.298015][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.316988][T14035] loop6: detected capacity change from 0 to 1024 [ 488.359283][ T5530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.387940][ T5530] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 488.423918][T14035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 488.426445][ T5530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.448251][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 488.473504][ T5530] usb 9-1: config 0 descriptor?? [ 488.490270][T14035] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.3381: lblock 2 mapped to illegal pblock 2 (length 1) [ 488.538356][ T5733] device veth1_macvtap left promiscuous mode [ 488.551924][ T5733] device veth0_macvtap left promiscuous mode [ 488.567103][ T5733] device veth1_vlan left promiscuous mode [ 488.573611][ T5733] device veth0_vlan left promiscuous mode [ 488.624729][T14035] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 488.677621][T14035] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.3381: lblock 0 mapped to illegal pblock 48 (length 1) [ 488.733237][T14035] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 488.756447][T14035] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.3381: Failed to acquire dquot type 0 [ 488.817363][T14035] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 488.922738][T14035] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.3381: mark_inode_dirty error [ 488.944346][ T5530] asus 0003:0B05:17E0.003C: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.8-1/input0 [ 488.973321][T14035] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 488.997553][ T5530] asus 0003:0B05:17E0.003C: Asus input not registered [ 489.017742][T14035] EXT4-fs (loop6): 1 orphan inode deleted [ 489.023566][T14035] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 489.034131][ T5530] asus: probe of 0003:0B05:17E0.003C failed with error -12 [ 489.053475][ T9] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 489.156722][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 489.180858][ T5530] usb 9-1: USB disconnect, device number 7 [ 489.247321][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 489.335550][ T6718] EXT4-fs (loop6): unmounting filesystem. [ 489.357530][ T9] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 489.416147][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 489.445763][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 489.463722][T14055] fido_id[14055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 489.489524][ T6718] EXT4-fs error (device loop6): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 489.554552][ T6718] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 489.600018][ T6718] EXT4-fs error (device loop6): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 490.527775][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 490.886912][T14085] loop8: detected capacity change from 0 to 32768 [ 491.701650][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3406'. [ 491.912687][T14112] loop6: detected capacity change from 0 to 256 [ 491.931707][ T5733] team0 (unregistering): Port device team_slave_1 removed [ 491.996877][T14112] FAT-fs (loop6): Directory bread(block 64) failed [ 492.030673][T14112] FAT-fs (loop6): Directory bread(block 65) failed [ 492.042182][T14112] FAT-fs (loop6): Directory bread(block 66) failed [ 492.054673][T14112] FAT-fs (loop6): Directory bread(block 67) failed [ 492.089940][T14112] FAT-fs (loop6): Directory bread(block 68) failed [ 492.108535][ T5733] team0 (unregistering): Port device team_slave_0 removed [ 492.117868][T14112] FAT-fs (loop6): Directory bread(block 69) failed [ 492.124523][T14112] FAT-fs (loop6): Directory bread(block 70) failed [ 492.167307][T14112] FAT-fs (loop6): Directory bread(block 71) failed [ 492.173986][T14112] FAT-fs (loop6): Directory bread(block 72) failed [ 492.198055][T14112] FAT-fs (loop6): Directory bread(block 73) failed [ 492.301894][ T5733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.460771][ T5733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.607374][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 492.670090][T14124] loop6: detected capacity change from 0 to 1024 [ 492.699591][T14124] hfsplus: bad catalog entry type [ 493.285848][ T5733] bond0 (unregistering): Released all slaves [ 493.467880][T13933] team0: Port device team_slave_1 added [ 493.574252][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.619123][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.645063][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.741329][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.802832][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.827858][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.869867][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.015926][T13933] device hsr_slave_0 entered promiscuous mode [ 494.042882][T13933] device hsr_slave_1 entered promiscuous mode [ 494.058044][T13933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.076027][T13933] Cannot create hsr debugfs directory [ 494.366732][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3428'. [ 494.443191][T14158] device gretap0 entered promiscuous mode [ 495.042067][T14177] vivid-002: disconnect [ 495.054012][T14175] vivid-002: reconnect [ 495.220852][T14180] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3436'. [ 495.985027][T14204] loop8: detected capacity change from 0 to 64 [ 496.039656][T14204] syz.8.3443: attempt to access beyond end of device [ 496.039656][T14204] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 496.094723][T14204] Buffer I/O error on dev loop8, logical block 512, async page read [ 496.144463][T14204] syz.8.3443: attempt to access beyond end of device [ 496.144463][T14204] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 496.220762][T14204] Buffer I/O error on dev loop8, logical block 56576, async page read [ 496.243817][T13933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.277757][T13933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.324866][T13933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.363108][T13933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.536743][T14211] Bluetooth: MGMT ver 1.22 [ 496.612153][T14213] sp0: Synchronizing with TNC [ 496.694809][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.770590][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.806190][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.849366][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.891716][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.909171][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.935804][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.943077][ T4822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.993096][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.013496][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.085951][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.137924][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.145118][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.178307][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.219087][T14227] loop8: detected capacity change from 0 to 1024 [ 497.234788][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.259873][T14227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 497.280077][T14230] loop7: detected capacity change from 0 to 64 [ 497.292306][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.336869][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.372418][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.392233][T14230] hfs: small file entry [ 497.403351][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.412415][T14227] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 497.490037][T13933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.506676][T14227] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.3452: missing EA_INODE flag [ 497.582135][T13933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.616883][T14227] EXT4-fs (loop8): Remounting filesystem read-only [ 497.639006][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.672057][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.685082][T14227] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3452: error while reading EA inode 11 err=-117 [ 497.701526][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.734277][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.779309][T14227] EXT4-fs (loop8): Remounting filesystem read-only [ 497.789864][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.814824][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.936325][T10357] EXT4-fs (loop8): unmounting filesystem. [ 498.348738][T14266] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3464'. [ 498.405755][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3464'. [ 498.791807][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.812867][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.846263][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.021143][T14290] loop6: detected capacity change from 0 to 512 [ 499.083653][T14290] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 499.117649][T14290] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.207793][ T6718] EXT4-fs (loop6): unmounting filesystem. [ 499.821333][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3481'. [ 500.137692][T14320] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3484'. [ 500.146814][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 500.189048][ T26] audit: type=1326 audit(1771523209.830:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.225937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.247523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.281731][ T26] audit: type=1326 audit(1771523209.860:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.339093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.349064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.368675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.387647][ T26] audit: type=1326 audit(1771523209.880:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.427649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.456744][T13933] device veth0_vlan entered promiscuous mode [ 500.500383][ T26] audit: type=1326 audit(1771523209.880:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.524687][T13933] device veth1_vlan entered promiscuous mode [ 500.619774][ T26] audit: type=1326 audit(1771523209.880:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.669237][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 500.678601][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 500.704856][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 500.724933][ T26] audit: type=1326 audit(1771523209.880:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.784160][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 500.814019][T13933] device veth0_macvtap entered promiscuous mode [ 500.856685][T13933] device veth1_macvtap entered promiscuous mode [ 500.863285][ T26] audit: type=1326 audit(1771523209.880:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.940378][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.964318][ T26] audit: type=1326 audit(1771523209.880:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.7.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4234b9c629 code=0x7ffc0000 [ 500.994241][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.021627][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.033489][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.050213][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.063162][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.084892][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.108545][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.123082][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.134125][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.152543][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.192482][T14342] device batadv0 entered promiscuous mode [ 501.217726][T14342] device macsec2 entered promiscuous mode [ 501.241474][T14342] device batadv0 left promiscuous mode [ 501.344737][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.370767][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.380732][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.406522][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.431223][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.477357][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.507258][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.537417][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.568013][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.605108][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.622343][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.637662][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.648765][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.659692][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.700851][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.730730][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.758702][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.831528][T13933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.867449][T13933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.876225][T13933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.935438][T13933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.065854][T14367] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 502.249493][T14028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.277393][T14028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.304124][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 502.374789][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.406136][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.428928][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 502.705362][T14388] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3514'. [ 503.184570][T14399] loop8: detected capacity change from 0 to 4096 [ 503.340794][T14410] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.752586][T14425] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3528'. [ 503.814019][T14426] loop4: detected capacity change from 0 to 1024 [ 503.981838][T14426] hfsplus: can't free extent [ 504.792432][T14458] loop6: detected capacity change from 0 to 512 [ 504.841755][T14458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.892875][T14458] EXT4-fs (loop6): orphan cleanup on readonly fs [ 504.897979][ T5131] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 504.948152][T14458] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 505.044673][T14458] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 505.094332][T14458] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.3542: Failed to acquire dquot type 1 [ 505.107389][ T5131] usb 9-1: Using ep0 maxpacket: 32 [ 505.114374][ T5131] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 505.139680][ T5131] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.154657][T14428] loop7: detected capacity change from 0 to 40427 [ 505.181211][T14458] EXT4-fs (loop6): 1 truncate cleaned up [ 505.191174][ T5131] usb 9-1: config 0 has no interface number 0 [ 505.213147][ T5131] usb 9-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.229188][T14428] F2FS-fs (loop7): invalid crc value [ 505.257562][T14428] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 505.271988][T14458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 505.286733][ T5131] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 505.333084][ T5131] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.368781][ T5131] usb 9-1: Product: syz [ 505.373253][ T5131] usb 9-1: Manufacturer: syz [ 505.378126][T14458] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3542: bg 0: block 248: padding at end of block bitmap is not set [ 505.413207][ T5131] usb 9-1: SerialNumber: syz [ 505.451689][ T5131] usb 9-1: config 0 descriptor?? [ 505.638554][ T6718] EXT4-fs (loop6): unmounting filesystem. [ 505.660390][T14428] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 505.767038][T14428] F2FS-fs (loop7): Start checkpoint disabled! [ 505.789026][T14474] loop4: detected capacity change from 0 to 32768 [ 505.816182][T14474] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 505.825220][T14474] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 505.855099][T14474] syz.4.3547: attempt to access beyond end of device [ 505.855099][T14474] loop4: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 505.870380][T14474] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 505.900675][T14428] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 506.044859][T13703] udevd[13703]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.170601][ T27] usb 9-1: USB disconnect, device number 8 [ 506.235447][ T4350] kworker/u4:7: attempt to access beyond end of device [ 506.235447][ T4350] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 507.570250][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.576639][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.782309][T14488] loop4: detected capacity change from 0 to 32768 [ 507.834191][T14488] JBD2: Ignoring recovery information on journal [ 507.947922][T14523] netlink: 71 bytes leftover after parsing attributes in process `syz.6.3564'. [ 507.959318][T14516] block device autoloading is deprecated and will be removed. [ 507.992794][T14488] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 508.319187][T13933] ocfs2: Unmounting device (7,4) on (node local) [ 508.390222][T14497] loop7: detected capacity change from 0 to 40427 [ 508.433028][T14497] F2FS-fs (loop7): invalid crc value [ 508.506581][T14497] F2FS-fs (loop7): Found nat_bits in checkpoint [ 508.790928][T14497] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 510.124898][T10181] syz-executor: attempt to access beyond end of device [ 510.124898][T10181] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 510.669612][T14562] tipc: Started in network mode [ 510.700089][T14562] tipc: Node identity e0000001, cluster identity 4711 [ 510.707013][T14562] tipc: Enabling of bearer rejected, failed to enable media [ 511.246184][T14540] loop4: detected capacity change from 0 to 32768 [ 511.401431][T14585] loop7: detected capacity change from 0 to 1024 [ 511.439410][T14540] XFS (loop4): Mounting V5 Filesystem [ 511.476201][T14585] EXT4-fs: Ignoring removed bh option [ 511.503854][T14540] XFS (loop4): log mount failed [ 511.556324][T14585] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 511.762350][T10181] EXT4-fs (loop7): unmounting filesystem. [ 512.280131][T14612] loop4: detected capacity change from 0 to 1024 [ 512.317482][T14612] syz.4.3586: attempt to access beyond end of device [ 512.317482][T14612] loop4: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 512.359956][T14612] syz.4.3586: attempt to access beyond end of device [ 512.359956][T14612] loop4: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 512.455646][T14612] syz.4.3586: attempt to access beyond end of device [ 512.455646][T14612] loop4: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 512.478125][ T22] kernel write not supported for file /input/mice (pid: 22 comm: kworker/1:0) [ 512.517511][T14612] syz.4.3586: attempt to access beyond end of device [ 512.517511][T14612] loop4: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 512.594848][T14612] syz.4.3586: attempt to access beyond end of device [ 512.594848][T14612] loop4: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 512.638494][T14612] syz.4.3586: attempt to access beyond end of device [ 512.638494][T14612] loop4: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 512.689502][T14612] syz.4.3586: attempt to access beyond end of device [ 512.689502][T14612] loop4: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 512.723690][T14612] syz.4.3586: attempt to access beyond end of device [ 512.723690][T14612] loop4: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 512.774685][T14612] syz.4.3586: attempt to access beyond end of device [ 512.774685][T14612] loop4: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 512.824626][T14612] syz.4.3586: attempt to access beyond end of device [ 512.824626][T14612] loop4: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 513.013890][T14632] loop0: detected capacity change from 0 to 1024 [ 513.020912][ T22] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 513.158077][T14028] hfsplus: b-tree write err: -5, ino 4 [ 513.207893][ T22] usb 8-1: Using ep0 maxpacket: 16 [ 513.215942][ T22] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.241213][ T22] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.288976][ T22] usb 8-1: config 0 interface 0 has no altsetting 0 [ 513.304247][T14639] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 513.325246][ T22] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 513.348217][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.377858][ T22] usb 8-1: config 0 descriptor?? [ 513.777645][ T26] audit: type=1400 audit(1771523223.410:156): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14652 comm="syz.4.3605" [ 513.820056][ T22] hid (null): report_id 415590728 is invalid [ 513.840569][ T22] nzxt-smart2 0003:1E71:2009.003D: report_id 415590728 is invalid [ 513.879658][ T22] nzxt-smart2 0003:1E71:2009.003D: item 0 4 1 8 parsing failed [ 513.908605][ T22] nzxt-smart2: probe of 0003:1E71:2009.003D failed with error -22 [ 514.056924][ T22] usb 8-1: USB disconnect, device number 6 [ 515.261777][T14704] loop6: detected capacity change from 0 to 128 [ 515.269467][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 515.298579][T14704] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 515.320252][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 515.361072][T14704] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 515.414082][T14707] loop8: detected capacity change from 0 to 1024 [ 515.523991][T14707] hfsplus: bad catalog entry type [ 516.054454][T14687] loop7: detected capacity change from 0 to 32768 [ 516.233480][T14687] XFS (loop7): Mounting V5 Filesystem [ 516.347572][T14687] XFS (loop7): Ending clean mount [ 516.509154][T10181] XFS (loop7): Unmounting Filesystem [ 516.911037][T14750] netlink: 'syz.8.3638': attribute type 30 has an invalid length. [ 517.128710][T14755] loop7: detected capacity change from 0 to 256 [ 517.140312][T14756] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3640'. [ 517.321391][ T26] audit: type=1326 audit(1771523226.960:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 517.397561][ T26] audit: type=1326 audit(1771523226.960:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 517.471272][ T26] audit: type=1326 audit(1771523226.960:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 517.584357][ T26] audit: type=1326 audit(1771523226.960:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 517.678464][T14771] veth1_to_hsr: default FDB implementation only supports local addresses [ 517.738671][ T26] audit: type=1326 audit(1771523226.960:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 517.864255][ T26] audit: type=1326 audit(1771523227.000:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 517.972690][ T26] audit: type=1326 audit(1771523227.000:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 518.054744][ T26] audit: type=1326 audit(1771523227.000:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30bb9c629 code=0x7ffc0000 [ 518.084128][ T5131] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 518.279661][ T5131] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.311867][ T5131] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.359248][ T5131] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.397481][ T5131] usb 5-1: config 0 interface 0 has no altsetting 0 [ 518.424770][ T5131] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 518.464349][ T5131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.507334][ T5131] usb 5-1: config 0 descriptor?? [ 518.948710][ T5131] a4tech 0003:09DA:001A.003E: item fetching failed at offset 0/2 [ 518.968496][ T5131] a4tech 0003:09DA:001A.003E: parse failed [ 518.974453][ T5131] a4tech: probe of 0003:09DA:001A.003E failed with error -22 [ 519.181276][ T5131] usb 5-1: USB disconnect, device number 12 [ 519.842929][T14830] loop0: detected capacity change from 0 to 4096 [ 519.932804][T14840] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 520.064297][T14843] loop8: detected capacity change from 0 to 512 [ 520.204859][T14843] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 520.424093][T10357] EXT4-fs (loop8): unmounting filesystem. [ 520.718078][T14863] "syz.4.3677" (14863) uses obsolete ecb(arc4) skcipher [ 520.990100][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3681'. [ 521.102447][T14872] tipc: Started in network mode [ 521.137692][T14872] tipc: Node identity , cluster identity 4711 [ 521.144143][T14872] tipc: Failed to obtain node identity [ 521.177310][T14872] tipc: Enabling of bearer rejected, failed to enable media [ 521.773253][T14897] hugetlbfs: Bad value for 'size' [ 522.132728][T14908] loop6: detected capacity change from 0 to 2048 [ 522.201878][T14908] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 522.242451][T14910] loop7: detected capacity change from 0 to 1024 [ 522.254830][T14908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.514687][T14028] hfsplus: b-tree write err: -5, ino 4 [ 522.939123][ T22] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 523.129329][ T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.151670][ T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.194366][ T22] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.255925][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.300290][ T22] usb 8-1: config 0 descriptor?? [ 523.343395][ T22] hub 8-1:0.0: USB hub found [ 523.528184][ T22] hub 8-1:0.0: config failed, can't read hub descriptor (err -90) [ 523.733992][ T22] usbhid 8-1:0.0: can't add hid device: -71 [ 523.744879][ T22] usbhid: probe of 8-1:0.0 failed with error -71 [ 523.823643][ T22] usb 8-1: USB disconnect, device number 7 [ 523.927481][T14962] loop4: detected capacity change from 0 to 1024 [ 523.972434][T14962] EXT4-fs: Ignoring removed oldalloc option [ 524.102038][T14962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 524.162947][T14970] ieee802154 phy0 wpan0: encryption failed: -126 [ 524.415029][T13933] EXT4-fs (loop4): unmounting filesystem. [ 525.320872][ T4270] Bluetooth: hci0: command 0x0405 tx timeout [ 525.950175][T14994] loop0: detected capacity change from 0 to 32768 [ 526.060741][T14994] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 526.060741][T14994] [ 526.139660][T14994] ERROR: (device loop0): remounting filesystem as read-only [ 526.167113][T14994] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 526.167113][T14994] [ 526.231987][T14994] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 526.231987][T14994] [ 526.244526][T15026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.406639][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 526.884555][T15043] loop7: detected capacity change from 0 to 1024 [ 526.945700][T15043] hfsplus: bad catalog entry type [ 526.960129][T15047] loop6: detected capacity change from 0 to 64 [ 527.234093][ T5733] hfsplus: b-tree write err: -5, ino 4 [ 527.506321][T15062] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 527.534570][T15062] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 527.555189][T15062] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 527.610959][T15062] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 527.618382][T15062] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 527.631598][T15062] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 527.673520][T15062] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 527.691482][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3750'. [ 527.707919][T15062] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 527.717925][T15062] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 527.732100][T15062] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 527.761182][T15062] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 527.767800][T15062] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 528.545925][T15095] ax25_connect(): syz.6.3761 uses autobind, please contact jreuter@yaina.de [ 528.805143][T15102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3762'. [ 528.864518][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 529.402758][T15120] loop8: detected capacity change from 0 to 2048 [ 529.420432][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 529.444720][T15120] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 529.480150][T15120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 530.006348][T15144] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3779'. [ 530.150886][ T4312] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 530.337851][ T4312] usb 9-1: Using ep0 maxpacket: 16 [ 530.344819][ T4312] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.363847][T15155] netlink: 'syz.6.3784': attribute type 5 has an invalid length. [ 530.393905][ T4312] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.418377][ T4312] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.445523][ T4312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.463728][ T4312] usb 9-1: Product: syz [ 530.472821][ T4312] usb 9-1: Manufacturer: syz [ 530.483464][ T4312] usb 9-1: SerialNumber: syz [ 530.641874][ T22] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 530.682048][T15159] sp0: Synchronizing with TNC [ 530.708413][ T4312] usb 9-1: 0:2 : does not exist [ 530.724128][ T4312] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 530.726997][T15158] [U] è` [ 530.777049][T15163] sp1: Synchronizing with TNC [ 530.833202][ T4312] usb 9-1: USB disconnect, device number 9 [ 530.872340][ T22] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 530.901439][ T22] usb 5-1: config 0 has no interface number 0 [ 530.944456][ T22] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 530.962555][T15168] loop6: detected capacity change from 0 to 256 [ 530.984693][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.007862][T15168] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.030545][ T22] usb 5-1: config 0 descriptor?? [ 531.099173][T15168] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 531.135260][ T4700] udevd[4700]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.176195][T15168] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 531.283095][T15156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.331694][T15170] loop7: detected capacity change from 0 to 4096 [ 531.395764][T15156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.469902][ T4270] Bluetooth: hci0: Malformed LE Event: 0x0d [ 531.478942][ T22] usb 5-1: string descriptor 0 read error: -71 [ 531.505731][ T22] usb-storage 5-1:0.168: USB Mass Storage device detected [ 531.539580][T15170] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 531.552794][T15181] loop0: detected capacity change from 0 to 64 [ 531.631434][ T22] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 531.789477][ T22] usb 5-1: USB disconnect, device number 13 [ 531.791675][ T4312] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 531.815591][T10181] EXT4-fs (loop7): unmounting filesystem. [ 532.034856][ T4312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 532.081600][ T4312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.148546][ T4312] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 532.204700][ T4312] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 532.243424][ T4312] usb 9-1: Manufacturer: syz [ 532.258829][ T4312] usb 9-1: config 0 descriptor?? [ 532.558556][T15205] loop4: detected capacity change from 0 to 512 [ 532.658728][T15205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 532.680762][ T4312] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 532.703468][ T4312] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 532.724709][T15205] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3798: bad orphan inode 131083 [ 532.795689][T15205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 532.811417][ T4312] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 532.861016][ T4312] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 532.896053][ T4312] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 532.940549][ T4312] cougar 0003:060B:700A.003F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 533.014914][ T4312] usb 9-1: USB disconnect, device number 10 [ 533.251877][T13933] EXT4-fs (loop4): unmounting filesystem. [ 533.290579][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 533.320473][T15217] fido_id[15217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 533.737404][T15232] loop8: detected capacity change from 0 to 512 [ 533.799553][T15232] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 533.867000][T15232] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 533.928585][T15238] loop7: detected capacity change from 0 to 1024 [ 533.949485][T15244] loop4: detected capacity change from 0 to 256 [ 533.961829][T15232] EXT4-fs error (device loop8): ext4_orphan_get:1399: comm syz.8.3810: inode #15: comm syz.8.3810: iget: illegal inode # [ 533.977646][T15232] EXT4-fs (loop8): Remounting filesystem read-only [ 534.026377][T15244] exfat: Deprecated parameter 'utf8' [ 534.031779][T15244] exfat: Deprecated parameter 'namecase' [ 534.050365][T15238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 534.074372][T15232] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3810: couldn't read orphan inode 15 (err -117) [ 534.104186][T15244] exfat: Deprecated parameter 'utf8' [ 534.124347][T15232] EXT4-fs (loop8): Remounting filesystem read-only [ 534.163968][T15232] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 534.200249][T15238] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 534.219487][T15244] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 534.279362][T15238] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.3812: missing EA_INODE flag [ 534.337551][T15238] EXT4-fs (loop7): Remounting filesystem read-only [ 534.393049][T15238] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3812: error while reading EA inode 11 err=-117 [ 534.444732][T10357] EXT4-fs (loop8): unmounting filesystem. [ 534.490889][T15238] EXT4-fs (loop7): Remounting filesystem read-only [ 534.640452][T10181] EXT4-fs (loop7): unmounting filesystem. [ 534.808500][T15263] loop7: detected capacity change from 0 to 256 [ 534.832302][T15263] exfat: Deprecated parameter 'utf8' [ 534.878696][T15263] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 535.069835][T15240] loop0: detected capacity change from 0 to 40427 [ 535.128089][T15240] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 535.150394][T15240] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 535.182747][T15240] F2FS-fs (loop0): Found nat_bits in checkpoint [ 535.283505][T15240] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 535.301203][T15240] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 535.474274][T15240] bio_check_eod: 23 callbacks suppressed [ 535.486085][T15240] syz.0.3813: attempt to access beyond end of device [ 535.486085][T15240] loop0: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 535.508842][T15258] loop8: detected capacity change from 0 to 32768 [ 535.552784][T15240] syz.0.3813: attempt to access beyond end of device [ 535.552784][T15240] loop0: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 535.594627][T15274] loop4: detected capacity change from 0 to 128 [ 535.627873][T15274] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 535.660092][ T26] audit: type=1800 audit(1771523245.589:165): pid=15240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3813" name="/" dev="loop0" ino=8 res=0 errno=0 [ 535.712821][T15274] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 536.283726][T15287] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 536.302901][T15288] netlink: 'syz.4.3826': attribute type 3 has an invalid length. [ 537.172278][T15318] loop4: detected capacity change from 0 to 512 [ 537.261953][T15318] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 537.651019][T15336] loop7: detected capacity change from 0 to 256 [ 537.871344][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3848'. [ 537.949651][T15343] device bond_slave_0 entered promiscuous mode [ 537.956817][T15343] device bond_slave_1 entered promiscuous mode [ 538.085170][T15343] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 538.118121][T15343] device bond_slave_0 left promiscuous mode [ 538.124215][T15343] device bond_slave_1 left promiscuous mode [ 538.246281][T15352] loop7: detected capacity change from 0 to 256 [ 538.309879][ T26] audit: type=1800 audit(1771523248.272:166): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3851" name="file1" dev="loop7" ino=1048884 res=0 errno=0 [ 538.595961][T15358] loop6: detected capacity change from 0 to 128 [ 538.608836][T15363] tmpfs: Too few inodes for current use [ 538.676677][T15358] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 538.716966][T15358] hpfs: filesystem error: improperly stopped [ 538.723042][T15358] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 538.806294][T15358] hpfs: You really don't want any checks? You are crazy... [ 538.853284][T15358] hpfs: hpfs_map_sector(): read error [ 538.885011][T15358] hpfs: code page support is disabled [ 538.901863][T15338] loop0: detected capacity change from 0 to 40427 [ 538.929098][T15358] hpfs: hpfs_map_4sectors(): unaligned read [ 538.940740][T15358] hpfs: hpfs_map_4sectors(): unaligned read [ 538.970687][T15338] F2FS-fs (loop0): invalid crc value [ 539.009000][T15358] hpfs: filesystem error: unable to find root dir [ 539.043142][T15338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 539.148049][T15374] loop7: detected capacity change from 0 to 1024 [ 539.210452][T15374] EXT4-fs: Ignoring removed bh option [ 539.284240][T15338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 539.309384][T15374] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 539.352112][T15374] EXT4-fs warning (device loop7): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 539.565268][T10181] EXT4-fs (loop7): unmounting filesystem. [ 539.623394][T12609] syz-executor: attempt to access beyond end of device [ 539.623394][T12609] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 539.714360][T15393] netlink: 'syz.8.3864': attribute type 11 has an invalid length. [ 539.743458][T15393] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3864'. [ 540.626941][T15422] loop0: detected capacity change from 0 to 1024 [ 540.802836][T15431] hpfs: bad mount options. [ 540.922673][ T71] hfsplus: b-tree write err: -5, ino 4 [ 540.972813][T15428] loop7: detected capacity change from 0 to 4096 [ 541.517622][T15456] netlink: 71 bytes leftover after parsing attributes in process `syz.7.3886'. [ 542.066888][T15476] loop7: detected capacity change from 0 to 64 [ 542.081890][ T27] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 542.276200][T10181] hfs: node 4:3 still has 1 user(s)! [ 542.290009][ T27] usb 9-1: Using ep0 maxpacket: 8 [ 542.300685][ T27] usb 9-1: config 0 has an invalid interface number: 30 but max is 0 [ 542.350253][ T27] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.400431][ T27] usb 9-1: config 0 has no interface number 0 [ 542.407416][T15484] tipc: Cannot configure node identity twice [ 542.442522][ T27] usb 9-1: too many endpoints for config 0 interface 30 altsetting 33: 225, using maximum allowed: 30 [ 542.456231][T15484] tipc: Cannot configure node identity twice [ 542.472674][ T27] usb 9-1: config 0 interface 30 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.524925][ T27] usb 9-1: config 0 interface 30 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 225 [ 542.568923][ T27] usb 9-1: config 0 interface 30 has no altsetting 0 [ 542.600717][ T27] usb 9-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.00 [ 542.627196][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.659903][ T27] usb 9-1: config 0 descriptor?? [ 542.818153][T15498] Invalid ELF header magic: != ELF [ 543.075233][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.093207][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.111884][T15509] loop6: detected capacity change from 0 to 256 [ 543.121649][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.184753][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.214178][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.252301][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.301099][ T27] apple 0003:05AC:0263.0040: unknown main item tag 0x0 [ 543.349477][ T27] apple 0003:05AC:0263.0040: hidraw0: USB HID v91.d9 Device [HID 05ac:0263] on usb-dummy_hcd.8-1/input30 [ 543.450980][ T27] usb 9-1: USB disconnect, device number 11 [ 543.703183][T15517] fido_id[15517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 543.966136][T15534] loop0: detected capacity change from 0 to 1024 [ 544.034623][T15539] loop6: detected capacity change from 0 to 256 [ 544.050075][ T26] audit: type=1800 audit(1771523254.066:167): pid=15534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3917" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 544.125594][T15539] FAT-fs (loop6): Directory bread(block 64) failed [ 544.141175][T15542] loop7: detected capacity change from 0 to 2048 [ 544.162811][T15539] FAT-fs (loop6): Directory bread(block 65) failed [ 544.226562][T15539] FAT-fs (loop6): Directory bread(block 66) failed [ 544.267000][T15542] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 544.280067][T15539] FAT-fs (loop6): Directory bread(block 67) failed [ 544.311758][T15539] FAT-fs (loop6): Directory bread(block 68) failed [ 544.342971][T15542] UDF-fs: Scanning with blocksize 512 failed [ 544.349882][T15539] FAT-fs (loop6): Directory bread(block 69) failed [ 544.378136][T15539] FAT-fs (loop6): Directory bread(block 70) failed [ 544.406312][T15539] FAT-fs (loop6): Directory bread(block 71) failed [ 544.415465][T15542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.442762][T15539] FAT-fs (loop6): Directory bread(block 72) failed [ 544.472438][T15539] FAT-fs (loop6): Directory bread(block 73) failed [ 544.571795][T14028] hfsplus: b-tree write err: -5, ino 4 [ 544.927329][T15553] loop0: detected capacity change from 0 to 512 [ 545.048495][T15553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 545.050221][T15559] team0: Cannot enslave team device to itself [ 545.149521][T15553] EXT4-fs (loop0): 1 truncate cleaned up [ 545.155350][T15553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 545.267801][T15566] netlink: 'syz.8.3930': attribute type 1 has an invalid length. [ 545.427975][T15571] loop6: detected capacity change from 0 to 64 [ 545.643253][T12609] EXT4-fs (loop0): unmounting filesystem. [ 546.174839][T15595] loop7: detected capacity change from 0 to 256 [ 546.303077][T15595] FAT-fs (loop7): Directory bread(block 64) failed [ 546.348538][T15595] FAT-fs (loop7): Directory bread(block 65) failed [ 546.355420][T15595] FAT-fs (loop7): Directory bread(block 66) failed [ 546.393317][T15595] FAT-fs (loop7): Directory bread(block 67) failed [ 546.418823][T15595] FAT-fs (loop7): Directory bread(block 68) failed [ 546.448203][T15595] FAT-fs (loop7): Directory bread(block 69) failed [ 546.454970][T15595] FAT-fs (loop7): Directory bread(block 70) failed [ 546.499904][T15595] FAT-fs (loop7): Directory bread(block 71) failed [ 546.506654][T15595] FAT-fs (loop7): Directory bread(block 72) failed [ 546.542856][T15602] netlink: 'syz.4.3943': attribute type 1 has an invalid length. [ 546.556597][T15595] FAT-fs (loop7): Directory bread(block 73) failed [ 546.933459][T15583] loop0: detected capacity change from 0 to 40427 [ 546.968105][T15611] loop7: detected capacity change from 0 to 512 [ 546.984612][T15583] F2FS-fs (loop0): invalid crc value [ 547.022280][T15583] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 547.058230][T15611] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.128632][T15611] EXT4-fs (loop7): 1 truncate cleaned up [ 547.174518][T15611] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 547.236566][T15583] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 547.251026][T15583] F2FS-fs (loop0): Start checkpoint disabled! [ 547.267942][T15583] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 547.372075][ T5530] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 547.428621][ T71] kworker/u4:4: attempt to access beyond end of device [ 547.428621][ T71] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 547.468032][T10181] EXT4-fs (loop7): unmounting filesystem. [ 547.572796][ T5530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.603898][ T5530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.634460][ T5530] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 547.681791][ T5530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.717953][ T5530] usb 9-1: config 0 descriptor?? [ 548.168753][ T5530] steelseries_srws1 0003:1038:1410.0041: not enough fields in HID_OUTPUT_REPORT 0 [ 548.221833][T15647] loop0: detected capacity change from 0 to 128 [ 548.246042][T15647] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 548.335272][T15647] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 548.376168][ T5530] usb 9-1: USB disconnect, device number 12 [ 548.597016][T15655] program syz.4.3959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.075720][T15652] loop7: detected capacity change from 0 to 32768 [ 549.116364][T15652] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 scanned by syz.7.3957 (15652) [ 549.158010][ T5530] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 549.191867][T15652] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 549.253233][T15652] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 549.296458][T15652] BTRFS info (device loop7): setting nodatacow, compression disabled [ 549.321060][T15652] BTRFS info (device loop7): turning on flush-on-commit [ 549.337557][T15652] BTRFS info (device loop7): using free space tree [ 549.370535][ T5530] usb 5-1: Using ep0 maxpacket: 8 [ 549.389170][ T5530] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 549.506313][ T5530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.588180][ T5530] usb 5-1: config 0 descriptor?? [ 549.678909][T15691] loop0: detected capacity change from 0 to 1024 [ 549.685787][T15652] BTRFS info (device loop7): enabling ssd optimizations [ 549.840186][T15691] hfsplus: bad catalog entry type [ 549.947683][T10181] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 550.034108][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.089539][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.115309][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.135354][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.173903][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.180971][T15705] veth1_to_hsr: default FDB implementation only supports local addresses [ 550.191203][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.219816][ T5530] pantherlord 0003:0E8F:0003.0042: unknown main item tag 0x0 [ 550.295624][ T5530] pantherlord 0003:0E8F:0003.0042: hidraw0: USB HID v0.20 Device [HID 0e8f:0003] on usb-dummy_hcd.4-1/input0 [ 550.314276][ T5530] pantherlord 0003:0E8F:0003.0042: no output reports found [ 550.364021][ T5530] usb 5-1: USB disconnect, device number 14 [ 550.393514][ T4700] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop7 scanned by udevd (4700) [ 550.657757][T15710] fido_id[15710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 551.788713][T15749] loop4: detected capacity change from 0 to 1024 [ 551.847230][T15749] hfsplus: bad catalog entry type [ 552.380804][T15758] loop8: detected capacity change from 0 to 4096 [ 552.542907][T15763] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.892974][ T4312] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 553.101951][ T4312] usb 8-1: Using ep0 maxpacket: 8 [ 553.112461][ T4312] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 553.140890][ T4312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.187185][ T4312] usb 8-1: config 0 descriptor?? [ 553.629029][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.657143][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.678118][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.716030][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.731566][T15798] loop4: detected capacity change from 0 to 512 [ 553.735887][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.766326][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.792009][ T4312] pantherlord 0003:0E8F:0003.0043: unknown main item tag 0x0 [ 553.800955][T15798] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 553.826566][ T4312] pantherlord 0003:0E8F:0003.0043: hidraw0: USB HID v0.20 Device [HID 0e8f:0003] on usb-dummy_hcd.7-1/input0 [ 553.857025][T15798] EXT4-fs (loop4): orphan cleanup on readonly fs [ 553.863475][ T4312] pantherlord 0003:0E8F:0003.0043: no output reports found [ 553.873188][ T4312] usb 8-1: USB disconnect, device number 8 [ 554.001288][T15798] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3999: bad orphan inode 15 [ 554.062824][T15798] ext4_test_bit(bit=14, block=18) = 1 [ 554.078637][T15798] is_bad_inode(inode)=0 [ 554.082869][T15798] NEXT_ORPHAN(inode)=1023 [ 554.097517][T15798] max_ino=32 [ 554.118104][T15798] i_nlink=0 [ 554.193370][T15798] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3999: bg 0: block 161: padding at end of block bitmap is not set [ 554.249885][T15803] fido_id[15803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 554.277358][T15798] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 554.325421][T15798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 554.424121][T15813] loop6: detected capacity change from 0 to 256 [ 554.544958][T15813] FAT-fs (loop6): Directory bread(block 64) failed [ 554.596261][T15813] FAT-fs (loop6): Directory bread(block 65) failed [ 554.624706][T15813] FAT-fs (loop6): Directory bread(block 66) failed [ 554.635380][T13933] EXT4-fs (loop4): unmounting filesystem. [ 554.650509][T15813] FAT-fs (loop6): Directory bread(block 67) failed [ 554.675608][T15813] FAT-fs (loop6): Directory bread(block 68) failed [ 554.682307][T15813] FAT-fs (loop6): Directory bread(block 69) failed [ 554.751439][T15813] FAT-fs (loop6): Directory bread(block 70) failed [ 554.788152][T15813] FAT-fs (loop6): Directory bread(block 71) failed [ 554.794851][T15813] FAT-fs (loop6): Directory bread(block 72) failed [ 554.868016][T15813] FAT-fs (loop6): Directory bread(block 73) failed [ 555.075273][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'. [ 555.222881][T15838] loop8: detected capacity change from 0 to 1024 [ 555.361597][T15842] loop7: detected capacity change from 0 to 64 [ 555.449710][T14028] hfsplus: b-tree write err: -5, ino 4 [ 555.557685][T15849] loop6: detected capacity change from 0 to 512 [ 555.640966][T15849] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 555.735892][T15849] EXT4-fs (loop6): orphan cleanup on readonly fs [ 555.822999][T15849] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.4018: bad orphan inode 15 [ 555.926438][T15849] ext4_test_bit(bit=14, block=18) = 1 [ 555.944322][T15849] is_bad_inode(inode)=0 [ 555.948676][T15849] NEXT_ORPHAN(inode)=1023 [ 555.977535][T15849] max_ino=32 [ 555.989623][T15861] loop4: detected capacity change from 0 to 65 [ 555.996296][T15849] i_nlink=0 [ 556.031819][T15849] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4018: bg 0: block 161: padding at end of block bitmap is not set [ 556.059154][T15861] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 556.079133][T15849] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 556.132519][T15864] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4023'. [ 556.160116][T15849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 556.366528][ T6718] EXT4-fs (loop6): unmounting filesystem. [ 556.508929][ T5131] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 556.671398][T15879] loop8: detected capacity change from 0 to 64 [ 556.709795][ T5131] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 556.755086][ T5131] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.827000][ T5131] usb 8-1: config 0 interface 0 has no altsetting 0 [ 556.835374][ T5131] usb 8-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 556.852257][ T5131] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.902484][ T5131] usb 8-1: config 0 descriptor?? [ 557.159419][T15892] loop4: detected capacity change from 0 to 4096 [ 557.283564][T15892] ntfs3: loop4: failed to convert "046c" to maccroatian [ 557.358594][ T5131] wacom 0003:056A:00CE.0044: hidraw0: USB HID v0.07 Device [HID 056a:00ce] on usb-dummy_hcd.7-1/input0 [ 557.570902][ T5131] usb 8-1: USB disconnect, device number 9 [ 557.606796][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4040'. [ 557.732554][T15903] fido_id[15903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 558.666513][T15941] loop8: detected capacity change from 0 to 512 [ 558.741828][T15941] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.4054: invalid block [ 558.771976][T15941] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4054: invalid indirect mapped block 10 (level 1) [ 558.792508][T15941] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4054: invalid indirect mapped block 8 (level 1) [ 558.854357][T15941] EXT4-fs (loop8): 1 truncate cleaned up [ 558.895146][T15941] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 559.097808][T10357] EXT4-fs (loop8): unmounting filesystem. [ 559.129958][T15918] loop4: detected capacity change from 0 to 32768 [ 559.270027][T15965] loop8: detected capacity change from 0 to 64 [ 559.284918][T15918] XFS (loop4): Mounting V5 Filesystem [ 559.449010][T15918] XFS (loop4): Ending clean mount [ 559.468718][T15918] XFS (loop4): Quotacheck needed: Please wait. [ 559.652880][T15918] XFS (loop4): Quotacheck: Done. [ 559.907867][T13933] XFS (loop4): Unmounting Filesystem [ 560.013274][T15945] loop6: detected capacity change from 0 to 32768 [ 560.110130][T15945] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 560.110130][T15945] [ 560.296367][T15945] ERROR: (device loop6): remounting filesystem as read-only [ 560.357954][T15945] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 560.357954][T15945] [ 560.408747][T15945] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 560.408747][T15945] [ 561.123474][T16005] loop0: detected capacity change from 0 to 2048 [ 561.172826][T16005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.909377][T16027] ax25_connect(): syz.8.4080 uses autobind, please contact jreuter@yaina.de [ 562.022912][T16033] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 562.048275][T16032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.131030][T16012] loop4: detected capacity change from 0 to 32768 [ 562.516349][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4085'. [ 562.871605][T16059] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 562.919008][T16059] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 562.929923][T16059] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 562.990070][T16059] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 563.034240][T16059] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 563.064519][T16061] loop4: detected capacity change from 0 to 2048 [ 563.083861][T16059] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 563.109237][T16061] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 563.119858][T16059] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 563.147161][T16059] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 563.169302][T16061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.176627][T16059] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 563.199614][T16059] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 563.217008][T16059] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 563.227128][T16059] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 563.507088][T16074] loop4: detected capacity change from 0 to 1024 [ 563.593678][T16074] hfsplus: bad catalog entry type [ 563.736180][ T9] hfsplus: b-tree write err: -5, ino 4 [ 563.881381][T16065] loop7: detected capacity change from 0 to 32768 [ 564.255100][T16088] loop7: detected capacity change from 0 to 512 [ 564.314737][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4099'. [ 564.371382][T16076] loop8: detected capacity change from 0 to 32768 [ 564.394779][T16088] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 564.455880][T16088] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 564.557193][T16096] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 564.582313][T16095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.644590][T16088] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.4109: bg 0: block 145: padding at end of block bitmap is not set [ 564.849618][T10181] EXT4-fs (loop7): unmounting filesystem. [ 565.465529][T16119] delete_channel: no stack [ 565.476186][T16116] delete_channel: no stack [ 565.531323][T16118] loop8: detected capacity change from 0 to 4096 [ 565.574106][T16118] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 566.050594][T16113] loop7: detected capacity change from 0 to 32768 [ 566.062796][T16113] XFS (loop7): Mounting V5 Filesystem [ 566.124161][ T5131] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 566.187072][T16113] XFS (loop7): Ending clean mount [ 566.199860][T16113] XFS (loop7): Quotacheck needed: Please wait. [ 566.309815][ T5131] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 566.323587][ T5131] usb 9-1: config 0 has no interface number 0 [ 566.331792][T16143] loop6: detected capacity change from 0 to 4096 [ 566.341733][ T5131] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 566.397006][ T5131] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.408506][ T5131] usb 9-1: config 0 descriptor?? [ 566.419166][T16113] XFS (loop7): Quotacheck: Done. [ 566.453348][T16145] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.621014][T10181] XFS (loop7): Unmounting Filesystem [ 566.637998][T16127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.753988][T16127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.809168][ T4270] Bluetooth: hci2: Malformed LE Event: 0x0d [ 566.819093][ T5131] usb 9-1: string descriptor 0 read error: -71 [ 566.830479][ T5131] usb-storage 9-1:0.168: USB Mass Storage device detected [ 566.876106][ T5131] usb-storage 9-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 566.960388][ T5131] usb 9-1: USB disconnect, device number 13 [ 567.253677][T16162] netlink: 'syz.4.4119': attribute type 5 has an invalid length. [ 567.667006][T16153] loop6: detected capacity change from 0 to 32768 [ 568.141269][T16187] loop8: detected capacity change from 0 to 4096 [ 568.250914][T16189] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.542828][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.549210][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.832375][T16179] loop7: detected capacity change from 0 to 40427 [ 568.873445][T16179] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 568.890235][T16179] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 568.925720][T16179] F2FS-fs (loop7): invalid crc value [ 568.982132][T16179] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 569.134307][T16183] loop4: detected capacity change from 0 to 40427 [ 569.167445][T16183] F2FS-fs (loop4): invalid crc value [ 569.190526][T16183] F2FS-fs (loop4): Found nat_bits in checkpoint [ 569.216034][T16179] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 569.235337][T16179] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 569.380614][T16179] fscrypt (loop7, inode 3): Error -61 getting encryption context [ 569.393964][T16183] F2FS-fs (loop4): Start checkpoint disabled! [ 569.439931][T16183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 569.828367][ T9] kworker/u4:0: attempt to access beyond end of device [ 569.828367][ T9] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 570.996388][ T4312] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 571.096917][ T28] INFO: task syz-executor:4272 blocked for more than 143 seconds. [ 571.113110][ T28] Not tainted syzkaller #0 [ 571.119262][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.147351][ T28] task:syz-executor state:D stack:21776 pid:4272 ppid:1 flags:0x00004004 [ 571.163988][ T28] Call Trace: [ 571.175322][ T28] [ 571.184614][ T28] __schedule+0x11d1/0x40e0 [ 571.216124][ T4312] usb 9-1: Using ep0 maxpacket: 32 [ 571.220259][ T28] ? mark_lock+0x94/0x320 [ 571.227952][ T28] ? __sched_text_start+0x8/0x8 [ 571.230027][ T4312] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.239192][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 571.265897][ T4312] usb 9-1: config 0 has no interface number 0 [ 571.272235][ T28] ? lock_chain_count+0x20/0x20 [ 571.281407][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 571.290968][ T4312] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 571.295771][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 571.311747][ T4312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.317307][ T28] schedule+0xb9/0x180 [ 571.323878][ T4312] usb 9-1: Product: syz [ 571.323883][ T28] io_schedule+0x7c/0xd0 [ 571.336008][ T4312] usb 9-1: Manufacturer: syz [ 571.339287][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 571.348397][ T4312] usb 9-1: SerialNumber: syz [ 571.355704][ T28] ? folio_wait_bit+0x30/0x30 [ 571.361528][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 571.375925][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 571.381033][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 571.388803][ T4312] usb 9-1: config 0 descriptor?? [ 571.401299][ T4312] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 571.407584][ T28] __filemap_get_folio+0x423/0xdb0 [ 571.410890][ T4312] usb 9-1: selecting invalid altsetting 1 [ 571.421477][ T4312] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 571.429021][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 571.434374][ T28] ? page_cache_prev_miss+0x380/0x380 [ 571.452401][ T28] ? mlock_page_drain_local+0x75/0x490 [ 571.458169][ T4312] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 571.458352][ T4312] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 571.458421][ T4312] usb 9-1: media controller created [ 571.493667][ T28] ? mlock_page_drain_local+0x289/0x490 [ 571.501117][ T28] truncate_inode_pages_range+0x402/0x1090 [ 571.512548][ T28] ? mapping_evict_folio+0x520/0x520 [ 571.517742][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.524558][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 571.532670][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 571.546919][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 571.573119][ T28] evict+0x4dc/0x8d0 [ 571.578005][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 571.582954][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 571.619107][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 571.634866][ T28] evict_inodes+0x60c/0x6a0 [ 571.652204][ T28] ? clear_inode+0x150/0x150 [ 571.662950][ T28] generic_shutdown_super+0x93/0x340 [ 571.669582][ T28] kill_block_super+0x7c/0xe0 [ 571.674480][ T28] deactivate_locked_super+0x93/0xf0 [ 571.680693][ T28] cleanup_mnt+0x42c/0x4b0 [ 571.686519][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 571.697825][ T28] task_work_run+0x1d0/0x260 [ 571.702563][ T28] ? task_work_cancel+0x220/0x220 [ 571.713230][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 571.721600][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 571.731819][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 571.743515][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 571.753923][ T28] do_syscall_64+0x58/0xa0 [ 571.762362][ T28] ? clear_bhb_loop+0x60/0xb0 [ 571.773927][ T28] ? clear_bhb_loop+0x60/0xb0 [ 571.782385][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.793283][ T28] RIP: 0033:0x7fe533b9d897 [ 571.802603][ T28] RSP: 002b:00007ffc7da4e818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 571.820266][ T28] RAX: 0000000000000000 RBX: 00007fe533c31ef0 RCX: 00007fe533b9d897 [ 571.837619][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7da4e8d0 [ 571.850749][ T28] RBP: 00007ffc7da4e8d0 R08: 00007ffc7da4f8d0 R09: 00000000ffffffff [ 571.860674][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7da4f960 [ 571.870854][ T28] R13: 00007fe533c31ef0 R14: 0000000000067278 R15: 00007ffc7da4f9a0 [ 571.880413][ T28] [ 571.883957][ T28] [ 571.883957][ T28] Showing all locks held in the system: [ 571.903628][ T28] 1 lock held by rcu_tasks_kthre/12: [ 571.909919][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 571.921105][ T28] 1 lock held by rcu_tasks_trace/13: [ 571.927882][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 571.940101][ T28] 1 lock held by ksoftirqd/0/15: [ 571.945354][ T28] 1 lock held by khungtaskd/28: [ 571.961835][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 571.987184][ T28] 2 locks held by getty/4028: [ 571.991929][ T28] #0: ffff88814cb47098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 572.016323][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 572.032247][ T28] 1 lock held by syz-executor/4272: [ 572.041052][ T28] #0: ffff88805a1920e0 (&type->s_umount_key#120){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 572.059947][ T28] 7 locks held by kworker/0:5/4312: [ 572.071823][ T28] #0: ffff8881442fbd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 572.089514][ T28] #1: ffffc90004057d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 572.103973][ T28] #2: ffff8880280ba190 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x5560 [ 572.119732][ T28] #3: ffff8880781f0190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 572.129254][ T28] #4: ffff888025212118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 572.147745][ T28] #5: ffff8880659dc208 (i2c_register_adapter){+.+.}-{3:3}, at: i2c_transfer+0x117/0x3a0 [ 572.163256][ T28] #6: ffff8880659dc160 (&d->i2c_mutex#2){+.+.}-{3:3}, at: ce6230_i2c_master_xfer+0x9b/0x600 [ 572.177442][ T28] 2 locks held by kworker/1:15/5537: [ 572.182898][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 572.193475][ T28] #1: ffffc90004fc7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 572.213072][ T28] 2 locks held by dhcpcd/7372: [ 572.219177][ T28] #0: ffff88807421a610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 572.236170][ T28] #1: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 572.251632][ T28] 1 lock held by syz.0.4073/16005: [ 572.260856][ T28] #0: ffff88805a1920e0 (&type->s_umount_key#120){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 572.278793][ T28] 1 lock held by syz.8.4144/16247: [ 572.286014][ T28] #0: ffff8880659dc208 (i2c_register_adapter){+.+.}-{3:3}, at: i2c_transfer+0x117/0x3a0 [ 572.296502][ T28] 2 locks held by sed/16269: [ 572.307995][ T28] [ 572.310484][ T28] ============================================= [ 572.310484][ T28] [ 572.319418][ T28] NMI backtrace for cpu 1 [ 572.323795][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 572.331023][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.341106][ T28] Call Trace: [ 572.344413][ T28] [ 572.347376][ T28] dump_stack_lvl+0x188/0x24e [ 572.352101][ T28] ? irq_work_queue+0xb8/0x140 [ 572.356983][ T28] ? show_regs_print_info+0x12/0x12 [ 572.362235][ T28] ? load_image+0x400/0x400 [ 572.366779][ T28] ? vprintk_emit+0x59f/0x6a0 [ 572.371512][ T28] ? printk_sprint+0x460/0x460 [ 572.376330][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 572.381322][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 572.387526][ T28] ? _printk+0xda/0x130 [ 572.391726][ T28] ? load_image+0x400/0x400 [ 572.396273][ T28] ? load_image+0x400/0x400 [ 572.400817][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 572.406928][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 572.413044][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 572.419075][ T28] watchdog+0xeee/0xf30 [ 572.423261][ T28] ? watchdog+0x1ed/0xf30 [ 572.427621][ T28] kthread+0x29d/0x330 [ 572.431712][ T28] ? hungtask_pm_notify+0x40/0x40 [ 572.436761][ T28] ? kthread_blkcg+0xd0/0xd0 [ 572.441365][ T28] ret_from_fork+0x1f/0x30 [ 572.445813][ T28] [ 572.450509][ T28] Sending NMI from CPU 1 to CPUs 0: [ 572.456191][ C0] NMI backtrace for cpu 0 [ 572.456202][ C0] CPU: 0 PID: 4822 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 572.456219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.456229][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 572.456271][ C0] RIP: 0010:unwind_get_return_address+0x64/0x80 [ 572.456316][ C0] Code: 89 df e8 ef 48 9a 00 48 8b 3b e8 77 26 1d 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 d4 48 9a 00 48 8b 03 eb 02 31 c0 5b <41> 5e 41 5f c3 89 d9 80 e1 07 80 c1 03 38 c1 7c ad 48 89 df e8 a3 [ 572.456331][ C0] RSP: 0018:ffffc90005d1f6f0 EFLAGS: 00000246 [ 572.456345][ C0] RAX: ffffffff8155a442 RBX: ffffc90005d1f7c0 RCX: 0000000080000000 [ 572.456357][ C0] RDX: ffffc90005d1f701 RSI: dffffc0000000000 RDI: ffffffff8155a442 [ 572.456370][ C0] RBP: ffffc90005d1f790 R08: ffffc90005d1fc30 R09: ffffc90005d1f758 [ 572.456383][ C0] R10: dffffc0000000000 R11: fffff52000ba3eed R12: ffff88802f471dc0 [ 572.456395][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000ba3eea [ 572.456407][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 572.456421][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.456433][ C0] CR2: 00007f2206259000 CR3: 000000007e506000 CR4: 00000000003506f0 [ 572.456448][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.456457][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 572.456468][ C0] Call Trace: [ 572.456473][ C0] [ 572.456478][ C0] ? stack_trace_save+0xf0/0xf0 [ 572.456500][ C0] arch_stack_walk+0xf2/0x140 [ 572.456523][ C0] ? process_one_work+0x8a2/0x1160 [ 572.456545][ C0] stack_trace_save+0xa6/0xf0 [ 572.456565][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 572.456586][ C0] ? __kasan_slab_alloc+0x6b/0x80 [ 572.456609][ C0] ? slab_post_alloc_hook+0x4b/0x480 [ 572.456626][ C0] ? kmem_cache_alloc_node+0x14d/0x320 [ 572.456643][ C0] ? __alloc_skb+0xfc/0x7e0 [ 572.456665][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 572.456690][ C0] ? memset+0x1e/0x40 [ 572.456704][ C0] kasan_set_track+0x4b/0x70 [ 572.456726][ C0] ? kasan_set_track+0x4b/0x70 [ 572.456747][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 572.456768][ C0] ? __kmalloc_node_track_caller+0xae/0x230 [ 572.456794][ C0] ? __alloc_skb+0x22a/0x7e0 [ 572.456815][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 572.456858][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 572.456876][ C0] __kasan_kmalloc+0x8e/0xa0 [ 572.456899][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 572.456927][ C0] __kmalloc_node_track_caller+0xae/0x230 [ 572.456954][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 572.456976][ C0] __alloc_skb+0x22a/0x7e0 [ 572.457001][ C0] nsim_dev_trap_report_work+0x28f/0xaf0 [ 572.457033][ C0] ? process_one_work+0x7b0/0x1160 [ 572.457051][ C0] process_one_work+0x8a2/0x1160 [ 572.457076][ C0] ? worker_detach_from_pool+0x240/0x240 [ 572.457098][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 572.457115][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 572.457131][ C0] ? kthread_data+0x4b/0xc0 [ 572.457158][ C0] worker_thread+0xaa2/0x1270 [ 572.457189][ C0] kthread+0x29d/0x330 [ 572.457203][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 572.457221][ C0] ? kthread_blkcg+0xd0/0xd0 [ 572.457237][ C0] ret_from_fork+0x1f/0x30 [ 572.457266][ C0] [ 572.603005][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 572.603072][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 572.603127][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.603156][ T28] Call Trace: [ 572.603176][ T28] [ 572.603202][ T28] dump_stack_lvl+0x188/0x24e [ 572.603289][ T28] ? memcpy+0x3c/0x60 [ 572.603346][ T28] ? show_regs_print_info+0x12/0x12 [ 572.603412][ T28] ? load_image+0x400/0x400 [ 572.603514][ T28] panic+0x2e5/0x730 [ 572.603561][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 572.603637][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 572.603688][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 572.603780][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 572.603855][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 572.603941][ T28] watchdog+0xf2d/0xf30 [ 572.604014][ T28] ? watchdog+0x1ed/0xf30 [ 572.604080][ T28] kthread+0x29d/0x330 [ 572.604126][ T28] ? hungtask_pm_notify+0x40/0x40 [ 572.604183][ T28] ? kthread_blkcg+0xd0/0xd0 [ 572.604236][ T28] ret_from_fork+0x1f/0x30 [ 572.604330][ T28] [ 572.605071][ T28] Kernel Offset: disabled [ 572.903835][ T28] Rebooting in 86400 seconds..