last executing test programs: 5m34.557517592s ago: executing program 3 (id=13): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1f, 0x10, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000014c0)={r2, r1}, 0x56) 5m34.264693282s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sec\x00', &(0x7f0000000300)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sec/apparmor/.access\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 5m34.08987393s ago: executing program 3 (id=7): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x1, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 5m33.760715694s ago: executing program 3 (id=10): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 5m32.960936915s ago: executing program 3 (id=22): syz_mount_image$hfs(&(0x7f0000004d40), &(0x7f0000004d80)='./file0\x00', 0x0, &(0x7f0000004dc0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d472968786c73f2e3b348a7fba46e286378a15ee516bac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d55141063d8de2d50a4fa0e73ff2913a9fe8e954a4e4ca99ce24dba4e0812c2ccf8ab5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca1051ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc107102000000dc04bd9c3248b598267822670a02be81f017e946a7e3359ce433ae42aae07518c3850cff4cf415bdb29ab165216a12899868d6857b732eafbab59fba36fca0b5cab2e717cd6ffef31a24add5f56b30c27b9e616892b60f4cde07eb9cb090ca25e5b8c6858a27e7e4d5cac6ed29218fcd35804fe2a5cb1ca503991051eb9c04a88bf02e8e240ee4c8b0ae80396aff9f8a913e8dc6b15e15b0a7c82953a87ef02b1e7abea95a7ae79eca2a536a59abfa3cccc1a6664d20344fedc524f3867f1dd8ba04bcd90aa43e024891f779210ec076e0b13ebf2bef2ac1a30f7a396a508b00000000000000f3069fe8", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32b, &(0x7f0000005040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000005400)='.\x00', 0x0, 0x1a8) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x451, 0x8001008, r0, 0x0) 5m32.410661751s ago: executing program 3 (id=14): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0xf459}], 0x1, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 5m31.952349828s ago: executing program 32 (id=14): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0xf459}], 0x1, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 2.691835865s ago: executing program 1 (id=2528): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7, 0x1, "e1"}, 0x9) 2.443770851s ago: executing program 1 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 2.25032438s ago: executing program 1 (id=2534): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.773158209s ago: executing program 5 (id=2540): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@host}, {@local, 0x4000}, 0x400, "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"}, 0x418, 0x3}) 1.744275582s ago: executing program 0 (id=2541): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) 1.423943984s ago: executing program 0 (id=2542): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) close(r0) 1.423818784s ago: executing program 4 (id=2543): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181e01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 1.423703195s ago: executing program 5 (id=2544): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, r0, 0x9, 0x70bd29, 0x25dfdc02, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 1.399868777s ago: executing program 2 (id=2545): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x6, &(0x7f0000000d80)=0x0) r1 = eventfd2(0x83, 0x80001) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r1}]) 1.236264903s ago: executing program 4 (id=2546): r0 = mq_open(&(0x7f0000000280)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/200, 0xc8, 0x0, 0x0) 1.229271744s ago: executing program 0 (id=2547): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000140)={0x0, 0x0, 0x0, r1, 0xc0c0c0c0}) 1.184016029s ago: executing program 5 (id=2548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.0681208s ago: executing program 2 (id=2549): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xc000200f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x40002010}) 992.769398ms ago: executing program 5 (id=2550): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6c733d63703132353500747970653d98ac303030303030303030303030642c63726561746f723de22ad8a42c51023edf55d0ea80339a6e6f6400"/71], 0x1, 0x60e, &(0x7f0000000300)="$eJzs3U1vXFcdB+DfndiTOIjUbZO2IBBWsgA1IvF42tQLJAJCyIsKVWLTTRdW4iRWxm5lu8itEDi8bvkGLULOmhULxCISrPkIWGLRBRJ774zunTvxJHadmcTJjMXzSGfOOXPuPefcf+4943sdawL831p4P5MPUmTh8rubZX1nu93Z2W6v9MpJTidpJBPdLMVqUkwm19NN+Vr5Zt1d8WXjfPDZO/NftO7f69Ym6lRt3zhqv8Fs1SkzSU7V+XH1d+MZ+zvdVy4DdqkXOBi1vQO2htn9Ga9bYBwU3c/NA6aTs0nO9D7H6tWh8WJnd/yGWuUAAADghHppN7vZzLlRzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOkvr7/4s6NXrlmRS97/9v1u+lLp9oD0Y9AQAAAAAAAAA4Bt/azW42c65X3yuq3/lfrCrnq9ev5OOsZylruZLNLGYjG1lLK8l0X0fNzcWNjbXWAHvOHbrn3HDzPvH/8QAAAAAAAAAAjtevsrD/+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHRXKqm1XpfK88ncZEkjNJmuV2W8nfeuWT7MGoJwAAAAAvwEu72c1mzvXqe0V1z/9add9/Jh9nNRtZzkY6WcrN6llA966/sVOW9/b29rbbKwf7/cF/h5pG1WO6zx4OH3m22uJC1f6nZrKQH+enuZyZvJe1LOdnWcxGljKTH1WlxRSZrp9eTO9st1f606ODX3+k9t6T5vpGNZOp3MpyNbcruZEP08nNNKpjqLY5esR7ZXSK79cGfIhys87LI/pDnb94W4e8N11FZPJhRGbr2JfRePnoSAx5njw+UiuNh8+gzg8T8wHHO1vnZax/N7KYH+bxSMz1nX2vHR2J5OK/v/mXO53Vu3durV8en0N6So9Hot0XidefcyR2j2H+x6dZR6O7ivZWy9KTV8uL1b7nspyf5MPczFLeznzezlzeyluZzXyu9cX1wpOvtdtJhrnWLn2nLkwl+X2dj4cyri/3xbV/pZuu2vrf6UXpl3lliBXp64NNZaK3XTnGr+t8PDweiVbf+fLq0ZH44175ut5Zvbt2Z/GjAcf7dp2Xl+1vx2ptLs+XV8p/rKr26NlRtr16aFurajv/sK1xoO3Cv75atz3pSm3WP8Md7Gmuanv90LZ21fZGX9thP+UAMPbOvnm2OfWfqX9OfT71m6k7U++e+eHp+dPfaGbyHxN/PfXnxv3G94o383l+sX//DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL31Tz69u9jpLK0pKJzYwkSSySTjMp/nU2gmeXGDjnplAp63qxsrH11d/+TT7y6vLN5eur202m63rs3NX5ufu3b11nJnabb7OuppAs/B/of+qGcCAAAAAAAAAAAADGr4PwzI0H9OMOpjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE62hfcz+SBFWrNXZsv6zna7U6ZeeX/LiSSNJMXPk+LvyfV0U6b7uiu+bJwPPntn/ovW/Xv7fU30tm8ctd9gtuqUmSSn6vy4+rvxzP0VD4+wDNilXuBg1P4XAAD///6hC0A=") syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000a00)) r0 = open(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000a80)=""/214, 0xd6) 940.151604ms ago: executing program 4 (id=2551): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="ea", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x100000, @empty, 0x2}}, 0xad7, 0x0, 0x5, 0x5, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) 939.999544ms ago: executing program 0 (id=2552): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x1000, @stats_create={'@stats_create ', '-', 0x20, '/1', ' 1 histogram:10,100,1000'}}}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 831.216315ms ago: executing program 2 (id=2553): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) 765.510861ms ago: executing program 1 (id=2554): unshare(0x2040400) r0 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 687.351019ms ago: executing program 4 (id=2555): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) 520.071916ms ago: executing program 5 (id=2556): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/product\x00', 0x0, 0x0) read(r0, &(0x7f0000002400)=""/7, 0x7) 502.409788ms ago: executing program 2 (id=2557): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2000007ff) 495.732109ms ago: executing program 0 (id=2558): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x101800, 0x0) getdents(r0, &(0x7f00000007c0)=""/46, 0x2e) getdents64(r0, &(0x7f0000001f80)=""/4111, 0x100f) 384.02592ms ago: executing program 4 (id=2559): mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000000080)) 383.36228ms ago: executing program 1 (id=2569): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800ff00b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000000c0)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 284.8641ms ago: executing program 2 (id=2560): r0 = syz_io_uring_setup(0x2f8d, &(0x7f0000000540)={0x0, 0xc383, 0x0, 0x2, 0x200004}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r4 = eventfd2(0xfff, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xd0c, 0x0, 0x0, 0x1000, 0x3f3fee82, 0xffffffffffffffff, 0x0, 0x20}}}, &(0x7f0000000180)) 239.803735ms ago: executing program 0 (id=2561): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000480)={0x20, 0xb, 0x49, "41a6aff9f714099262b325e72bee6bf8a7e4d8c4c7824c29570d993395365ec03a0a9127e4aaf223dcee923c5860394d7a45342e5d0d832ff472d6da7695740564db57fc6e84f00a1d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 166.090923ms ago: executing program 5 (id=2562): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xff, 0x5f15, &(0x7f0000001700)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D4QQ4oS1ORlY2F2fwCEGk4T8KemBkpA2Lalx7LVx4lO9awIIlU2hLVGQitRe0IumSZRGkdoKVEVqKtEIqZHau+aqETdRK3HhC6gMSqqmCmz1zjzP45nZ2Zn1YeyZ9/l8IvvnnXln5pl33pnd75LvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBowydm/2SoKIryT+2vdUVxafnvNcWu8suF7Rd7hQAAAMC5eqf2999elk7YtYILNWzzLx/5t+8vLi4uFl98++S7f7a4mM6YKIqR1UVROy/611/8fLFxm+CZYnxouOHr4S43P9Ll/NEu5491OX9Vl/NXdzl/vMv5S3bAEmvqv4+pXdl1tX+uq+/S4opirHbedW0u9czQ6uHh+LucmqHaZRbH9hcHi0PFbDG95DJDtf8VxSsbytu6r4i3NdxwW+uLojj11lN74xqGwj6+rmi6sZrGx+7Ne4qJt996au9359/4YLvZdTcsWWlRbNpYrvPZojj966piqFid9klc53DDOte3WedI0zqHapcr/926zlMrXGe83+NhnT/usM714bTHry2KYqFYdptWzxTDxdqWW037e7x+RJTXUT6U7ytGz+g42bCC46S8zOvXNh8nrcdk3P8bwj4ZXWYNjQ/Hm19dtWS/n+1xUt7rfjhWy+t+oLzR8fHGX602HavlNk9dv/wx0Paxa3MMpGO54RjY2O0YGF41UjsGhk+veWPTMTCz5DLDxVDttk5e3/kYmJo/fGxq7oknbz14eM+B2QOzR2amt2/dsm3rlm3bpvYfPDQ7Xf/7zHbpAFlbDKdjcGN4rYnH4I0t2zYekovfOn/Pg/E+eR6U9/2zN5QLunS4WOYYL7d5dtO5Pw/S9/2G58Fow/Og7Wtqm+fB6AqeB+U2pzat7HvmaMOfdmvo1WvhuoZj4GJ+Pyxv8+Gbln8tXB/W9dzNZ/r9cGTJMRDv1lB47pWnpJ/3xu8I+2XpcXF1ecYlq4oTc7PHb3t8z/z88ZkijAvi8obHqvV4Wdtwn4olx8vwGR8vu/7mlzdc3eb0dWFfjd/S+bEqt9k62fmxqr26t9+fTaduLsI4zy70/mz33azcnylLdNif5TbP3nruPwumXNLw+jfW7fVvZGy0/vo3kvbGWNPr39KHZqS2sqI4devKXv/Gwp8L/fp3RZ+8/pX76uHbOh8D5TbPTZ3pMTDa8fXv2jCHwnpuColhvCH3v1s7f6F+mDY8ll2Pm9HRsXDcjMZbbD5utiy5THlt5W1vmj6742bTtc2PVdPPLRU8bsp99efTnY+bcptXZ879tWNN/GfDa8eqbsfA2Miqcr1j6SCov94tronHwG3F3uJocajYly5TPsrlbU1uXtkxsCr8udCvHVf1yTFQ7qsXN3c+BsptfrTl/P7stCmckrZp+Nmp9fcLy2X+q0dPX1/rbjvfmb9c5ye3dv7dULnNG1vPNGd03k+3hFMuabOfWp8/yx3T+4oLs5+uCus8tK3z76bKba7YvsLjaVdRFK/NvFb7fVf4/e7fn/j37zf93rfd75Rfm3nt/qkHf3Im6wcA4Oy9W/t7YVX9Z82G/2K9kv/+DwAAAAyEmPuHw0zkfwAAAKiMmPtHwkzkfwAAAKiMmPtHw0wyyf+P3rHjpXeeLtK7AS4G8fy4Gx64q75d7HgvhK8nFk8rT//4d8Ze+trTK7vt4aIofnn/h9pu/+hdcV11x+I6P9p8+hJXXbOi23/kodPbNb5/wqkd9euP92elh0HsKr8ytbl2vRNPzNTmq/cXtfngwnPP1K+//nXc/uSW+vZ/Gd60ZNf+oabLbwrruS7MifCeMg/sOr0fyhkv99L6j/zz5Z87fXvxckMb31u7my/+Qf1643tEvXB5fft4v5db/z99/Xsvlds/fn379T893H79J8P1vh7mL3bWt2/c519rWP8fhfXH24uXu+3bP2y7/pc/UN/+5XBcfDPM1vXf86cffqfd4xVvZ9ed9cvF25/+7621y8Xri9ffuv7xp2ea9kfr9b/6dv16dj72s5HG7ePp8XaiR+5sPr6HwuPb1CMviuJ7f1w07efiY/XL/WPL+uP1Hbuz/fpvaVnnsaFrapc/fX/WNd2vb/z15rb3N65n19+ta7o/L9wb9t/bUz8qr/fkg+F4DOf/74/r19f6XqYv39v8ehO3/+a6+vM2Xt9Uy/pfaFn/wjXlvuu+/vverq//5btXN61/16fC8XRffXZb/4G/uqzp8t/6bv3xOP6VySNH504c3NewVxufx6vH16y95NL3vPey8Fra+vXuo/OPzh6fmJ6YLoqJAXzLwF6v/9th/ld9LJz/W6j7yc/qx93zn65/37rx5/WvXwinPxIez/j98Rt/MdZ0vLY+7gt31+e5rv/msI6V+sDX//OaFW148guvnPiHP3yj9eeCeH+OvX+8dv9e3HBl7byhV+vnt75edfMf729+Xv90dLo2fxD262J4Z+aNV9Zvr/X643uTPP+Z+vM3/iQXL1+0vJ/IupHm+3Gu6/9p+Dnmh1c1v/7F4+MHT7e8m/O6YqhcwkJ4fSgW6ufHreL+fv7UlW1vL74PT7HwwTNZ5rLmnpibOnTwyInHp+Zn5+an5p54cvfhoyeOzO+uvXfp7i91u/zp5/fa2vN73+z2rUXt2X60PnrsYq//2EN7990+fcO+2f17Tuyff+jY7PEDe+fm9s7um7thz/79s1/pdvmD+3bObN6x5fbNkwcO7tt5x44dW3ZMHjxytFxGfVFdbJ/+8uSR47trF5nbuXXHzLZtW6cnDx/dN7vz9unpyRPdLl/73jRZXvqxyeOzh/bMHzw8Ozl38MnZnTM7tm/f3PXdHw8f2z83MXX8xJGpE3Ozx6fq92VivnZy+b2v2+XJw9zR8HrXYij8dP75W7an98ctfeery15VfZPmH0+LN8N7QcXvb92+jrl/LMwkk/wPAAAAOYi5P7zx/+kz5H8AAACojJj7V4eZyP8AAABQGTH3j4eZZJL/M+r/r2n8Qv+/Tv9f/7/Q/9f/7zH9f/3/TjLs/78V/qX/X4H16//r/9Ndv/X/Y+5fUxRZ5n8AAADIQcz9a8NM5H8AAACojJj7Lwkzkf8BAACgMmLuvzTMJI/8P9b6zwr3/5vo/9fp/3fr/8dt9f8L/X/9/7Ok/6//30mG/X+f/38eXez192H/f43+P/2m3/r/Mfe/J8wkj/wPAAAAWYi5/71hJvI/AAAAVEbM/ZeFmcj/AAAAUBkx968LM8kk/2f0+f9N9P/r9P99/n+h/6//f/417WL9f/3/TvT/9f8Hef192P/3+f/0nX7r/8fc///CTDLJ/wAAAJCDmPvfF2Yi/wMAAEBlxNx/eZiJ/A8AAACVEXP/FWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5//1hJpnkfwAAAMhBzP1XhpnI/wAAAFAZMfd/IMxE/gcAAIDKiLn/qjCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/8Ewk0zyPwAAAOQg5v6rw0zkfwAAAKiMmPs/FGYi/wMAAEBlxNy/Pswkk/yv/6//r/+v/6//r//fS4PV/x9e9hz9/zr9/2b6//r/+v/6/3TWb/3/mPs/HGaSSf4HAACAHMTc/5EwE/kfAAAAKiPm/mvCTOR/AAAAqIyY+yfCTDLJ//r/+v/6//r/+v/6/700WP3/5en/1+n/N9P/1//X/9f/p7N+6/9PrClquX9DUWSZ/wEAACAHMfdvDDOR/wEAAKAyYu6/NsxE/gcAAIDKiLn/ujCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X1n/f1W3K6LS+q3/H3P/9WEmmeR/AAAAyEHM/TeEmcj/AAAAUBkx998YZiL/AwAAQGXE3L8pzCST/K//r/+v/6//r/+v/99L+v9L+v+v/0+h/x/p/+v/92z9K/h5UP/f5//Te/3W/4+5/6Ywk0zyPwAAAOQg5v6bw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu6fDDPJJP/r/+v/6//r/+v/6//3UlX7/+l11Of/6//r//dn/9/n/+v/0xf6rf8fc/+tYSaZ5H8AAADIQcz9t4WZyP8AAABQGTH3T4WZyP8AAABQGTH3T4eZZJL/9f/1//X/+7v/P97meNP/1/8fJFXt/5/D5//r/zdo6v+vKYpC/1//f4DWr/+v/093/db/j7l/Jswkk/wPAAAAOYi5f3OYifwPAAAAlRFz/5YwE/kfAAAAKiPm/q1hJpnkf/1//X/9//7u//v8f/1//f/O9P8r1P/3+f/6/wO2fv1//X+aDbc5rd/6/zH3bwszyST/AwAAQA5i7t8eZiL/AwAAwGBp/T+XNoi5//YwE/kfAAAAKiPm/jvCTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+OMJNM8j8AAADkIOb+j4aZyP8AAABQGTH33xlmIv8DAADAQGn3OYRRzP0fCzPJJP/r/1e9/7+4Wv9f/1//v/P69f97S/9f/78T/X/9/0Fev/6//j/d9Vv/P+b+nWEmK87/q1e6IQAAAHCRxNx/V5hJJv/9HwAAAHIQc//dYSbyPwAAAFRGzP27wkwyyf/6/1Xv//v8f/1//f9u69f/7y39f/3/TvT/B7P/H9uv+v8XpP8/vtzlG/v/5TGk/08/6rf+f8z994SZZJL/AQAAIAcx9388zET+BwAAgMqIuf8TYSbyPwAAAFRGzP2fDDPJJP/r/+v/6//r/+v/6//3kv6//n8n+v+D2f+P9P99/r/+P930W/8/5v57w0wyyf8AAACQg5j7PxVmIv8DAABAZcTc///DTOR/AAAAqIyY++8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP2/EmaSSf4HAACAHMTcf3+YifwPAAAAlRFz/6fDTOR/AAAAqIyY+381zCST/K//f2H6/8Pp+vX/9f/1//X/9f/PJ/1//f9C//+sXez+/KCvX/9f/5/u+q3/H3P/r4WZZJL/AQAAIAcx9/96mIn8DwAAAJVR5v41RVH8Ru0r+R8AAACqKOb+B8JMMsn/+v8+/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+B8NM5H8AAACojJj7PxNmIv8DAABAZcTc/9kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOs/v/3/8nHV/6d6+q3/H3P/Q2EmmeR/AAAAyEHM/Z8LM5H/AQAAoDJi7v+tMBP5HwAAACoj5v7fDjPJJP/r/+v/6//r/+v/6//3kv7/0v5/+Rp2Mfv/q1ayof7/iuj/6//7/H/9fzrrt/5/zP2fDzPJJP8DAABADmLu/50wE/kfAAAAKiPm/t8NM5H/AQAAoDJi7n84zCST/K//r/+v/6//r/+v/99L+v8+/78T/X/9/0Fev/6//j/d9Vv/P+b+L4SZZJL/AQAAIAcx9/9emIn8DwAAAJURc//uMBP5HwAAACoj5v5Hwkwyyf/6//r/K+j/x831//X/9f/1/8+Y/r/+fyf6//r/g7x+/X/9f7rrt/5/zP17wkwyyf8AAACQg5j7vxhmIv8DAABAZcTcvzfMRP4HAACAyoi5f1+YSSb5X/9/gPv/YY0+/1//X/9f/7+f6f/r/3ei/6//P8jr1//X/6e7fuv/x9w/G2aSSf4HAACAHMTcvz/MRP4HAACAyoi5/0CYifwPAAAAlRFz/6NhJpnkf/3/Ae7/X7jP/9f/1/+v0f/X/z8b+v/6/53o/+v/D/L69f/1/+mu3/r/MfcfDDPJJP8DAABADmLu/1KYifwPAAAAlRFz/5fDTOR/AAAAqIyY+w+FmWSS//X/9f/1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v7DYSaZ5H8AAADIQcz9R8JM5H8AAACojJj7j4aZyP8AAABQGTH3HwszyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/b8fZpJJ/gcAAIAcxNx/PMxE/gcAAIDKiLl/LsxE/gcAAIDKiLl/Pswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3nwgzyST/AwAAQA5i7n8szET+BwAA+D/27nNX07KK4/CLOEBijMfiEZj43XgMfvIQ7Ipd7L0X7F2xYe9i712x94ZirwlG9lpr4x54ntl75uW9n3td15cVh8lw66jhn8kvD0wjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r/4/7/2vvf/TjB+r/jzo//b/+X/9/Kvp//f9O/39mh+7nt/5+/b/+n3Wj9f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAEwjd/9D4hb7HwAAAKaRu/+hcUuT/a//1//r/zfy/f/rj39c/6//3xL9v/5/if5f/7/l9+v/9f+sG63/z93/sLilyf4HAACADnL3Pzxusf8BAABgGrn7HxG32P8AAAAwjdz9V8ctTfa//l//r//fSP9/G/p//f+W6P/1/0v0//r/Lb9f/6//Z91o/X/u/kfGLU32PwAAAHSQu/9RcYv9DwAAANPI3f/ouMX+BwAAgGnk7n9M3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9ZN1r/n7v/sXFLk/0PAAAAHeTuf1zcYv8DAADANHL3Pz5usf8BAABgGrn7nxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9btvf+/7zW33gvt/3P3XxO3NNn/AAAA0EHu/ifGLfY/AAAATCN3/5PiFvsfAAAAppG7/8lxS5P9r//X/x/3/7dcpv/X/+v/j39c/39p6P/1/0v0/6P2/xf2n4T+X/+v/2fN3vv/ld7/5L/O3f+UuKXJ/gcAAIAOcvc/NW6x/wEAAGAaufufFrfY/wAAADCN3P1Pj1ua7H/9v/7f9/9vqPxc/6//1/9fevp//f8S/f+o/b/v/19s/3+vC3j/cf//v38O1/8zp9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7/1lxi/0PAAAA08jd/+y4pcn+1//r//X/vv+v/9f/75P+X/+/RP+v/9/y+33/X//PutH6/9z9z4lbmux/AAAA6CB3/3PjFvsfAAAAppG7/3lxi/0PAAAA08jd//y4pcn+1//r//X/+v+L6v8v1//r/5fp//X/S/T/+v8tv1//r/9n3Wj9f+7+F8QtTfY/AAAAdJC7/4Vxi/0PAAAA08jd/6K4xf4HAACAaeTuf3Hc0mT/6//1//p//b/v/+v/90n/P13/f5n+/5j+X/+v/9f/s2y0/j93/0vilib7HwAAADrI3f/SuMX+BwAAgGnk7n9Z3GL/AwAAwDRy918btzTZ//p//b/+X/+v/9f/75P+f7r+3/f/b0P/r//X/+v/WTZa/5+7/+Vxy9rwO7fy1wEAAIBh5O5/RdzS5M//AQAAoIPc/a+MW+x/AAAAmEbu/lfFLU32v/5f/6//1//r//X/+6T/1/8v0f/ffv9/1R38/fT/Y71f/6//Z91o/X/u/lfHLU32PwAAAHSQu/81cYv9DwAAANPI3f/auMX+BwAAgGnk7n9d3NJk/99R/3/z3Y7++in7/7vq//X/G+7/44ev1v/X30n/r/+/eJP2/+d2+n/9v+//6//1//p/Vo3W/+fuf33c0mT/AwAAQAe5+98Qt9j/AAAAMI3c/W+MW+x/AAAAmEbu/jfFLU32v+//6//1/77/r//X/+/TpP2/7//r/2+l/9f/6//1/ywbrf/P3f/muKXJ/gcAAIAOcve/JW6x/wEAAGAaufvfGrfY/wAAADCN3P3XxS1N9r/+X/9/8P7/Lvr/pP+P31f9v/7/FPT/+v+d/v/MDt3Pb/39+n/9P+tG6/9z978tbmmy/wEAAKCD3P1vj1vsfwAAAJhG7v53xC32PwAAAEwjd/8745Ym+1//r/8/eP/v+/9F/x+/r/p//f8p6P/1/zv9/5kdup/f+vv1//p/1o3W/+fuf1fc0mT/AwAAQAe5+6+PW+x/AAAAmEbu/nfHLfY/AAAATCN3/3vilib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P3vjVua7H8AAADoIHf/++IW+x8AAACmkbv//XGL/Q8AAADTyN3/gbilyf7X/2+9/7/fTfEC/b/+X/+v/x+S/l//v+QC+v/73Fv/X/T/Y71f/6//Z91o/X/u/g/GLU32PwAAAHSQu/9DcYv9DwAAANPI3f/huMX+BwAAgGnk7v9I3NJk//fo/8+d99Pm6f99/1//r//X/49N/6//X+L7//r/Lb9/H/3/Ffp/JjNa/5+7/6NxS5P9DwAAAB3k7v9Y3GL/AwAAwEZcufozcvd/PG6x/wEAAGAaufs/Ebc02f89+v/zNej/89/Wndv/33IP/b/+v+j/9f87/b/+f4X+X/8/5Puv2Pn+v/6fS2S0/j93/w1xS5P9DwAAAB3k7v9k3GL/AwAAwDRy938qbrH/AQAAYBq5+z8dN9zz7od70p1K/z9t/+/7//p//b/+fwj6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLP/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5f/z9d/x//e9L/j0H/r/9fov/X/2/5/fp//T/rRuv/c/d/IW5psv8BAACgg9z9X4xb7H8AAACYRu7+L8Ut9j8AAABMI3f/l+OWJvtf/6//1/9fsv7/3MlfX//v+//6f/2//n+Z/l//v+X36//1/6wbrf/P3f+VuKXJ/gcAAIAOcvd/NW6x/wEAAGAaufu/FrfY/wAAADCN3P1fj1ua7H/9/2b7/3P6/+H6//N+ff2//l//r//X/y/T/+v/t/x+/b/+n3Wj9f+5+78RtzTZ/wAAANBB7v5vxi32PwAAAEwjd/+34hb7HwAAAKaRu//bcUuT/T9z/7/00ybo/33/X/+v/z/xfv3/mPT/+v8l+n/9/5bfr//X/7NutP4/d/934pYm+x8AAAA6yN3/3bjF/gcAAIBp5O6/MW6x/wEAAGAaufu/F7c02f8z9/9L9P9H9P/6/53+X/+/Z/p//f8S/b/+f8vv1//r/1k3Wv+fu//7cUuT/Q8AAAAd5O7/Qdxi/wMAAMA0cvf/MG6x/wEAAGAauft/FLc02f/6f/2//l//r//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/3Hc0mT/AwAAQAe5+38St9j/AAAAMI3c/T+NW+x/AAAAmEbu/p/FLU32v/5f/6//H6r/v+Lkr6P/1//r/5fp//X/O/3/mR26n9/6+/X/+n/Wjdb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjdz9v4xb7H8AAACYRu7+X8UtTfa//l//r/8/c/9/+c73///vPfp//f/t0f9vs/+/Mf6Lrv9fpv/X/+v/9f8sG63/z93/67ilyf4HAACADnL3/yZusf8BAABgGrn7fxu32P8AAAAwjdz9v4tbmux//b/+X/8/1Pf/9f/6f/3/Ken/ff9/p/8/s0P381t/v/5f/8+60fr/3P03xS1N9j8AAAB0kLv/93GL/Q8AAADTyN3/h7jF/gcAAIBp5O6/OW5psv/1//r/Kfv/K/X/+n/9/yj0//r/Jfp//f+W36//1/+zbrT+P3f/H+OWJvsfAAAAOsjd/6e4xf4HAACAaeTu/3PcYv8DAADANHL3/yVuabL/9f/6/yn7f9//1/9vrf+//Pj/gPX/p6P/1//v9P9nduh+fuvv1//r/1k3Wv+fu/+vcUuT/Q8AAAAd5O7/W9xi/wMAAMA0cvf/PW6x/wEAAGAaufv/Ebc02f9d+v+TGYn+/4j+X/+/0/+P0f83+v7/yd/vi7X1/v+qi3y//v+I/v9sDt3Pb/39+n/9P+tG6/9z9/8zbmmy/wEAAKCD3P3/ilvsfwAAAJhG7v5/xy32PwAAAEwjd/9/4pYm+79L/3+S/v+I/l//v9P/H7L/v27XsP+/1Lbe//v+v/5/p//f7Pv1//p/1o3W/+fu/28AAAD//9wgGwg=") syz_mount_image$exfat(0x0, &(0x7f0000000a80)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)) syz_mount_image$ext4(0x0, &(0x7f0000000b00)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000b40)) rename(&(0x7f0000000b80)='./bus/file0\x00', &(0x7f0000000bc0)='./file0\x00') 165.666153ms ago: executing program 4 (id=2563): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 112.731158ms ago: executing program 1 (id=2564): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000240)={r1}) 0s ago: executing program 2 (id=2565): r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): terface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.434476][ T8016] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.482540][ T8016] usb 3-1: config 0 interface 0 has no altsetting 0 [ 284.509571][ T8016] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 284.547995][ T8016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.576678][ T8016] usb 3-1: config 0 descriptor?? [ 284.887999][ T8533] loop5: detected capacity change from 0 to 32768 [ 284.915055][ T8533] [ 284.915055][ T8533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.915055][ T8533] [ 285.012730][ T8016] input: HID 046d:c623 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C623.0009/input/input16 [ 285.102500][ T4385] ERROR: (device loop5): diWrite: ixpxd invalid [ 285.102500][ T4385] [ 285.155316][ T8016] logitech 0003:046D:C623.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.2-1/input0 [ 285.178125][ T4385] ERROR: (device loop5): txCommit: [ 285.178125][ T4385] [ 285.221595][ T8543] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1357'. [ 285.245031][ T4385] jfs_write_inode: jfs_commit_inode failed! [ 285.275249][ T8016] usb 3-1: USB disconnect, device number 5 [ 285.296567][ T4475] [ 285.296567][ T4475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.296567][ T4475] [ 285.461091][ T4475] [ 285.461091][ T4475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.461091][ T4475] [ 285.581185][ T8545] fido_id[8545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 286.955383][ T8580] loop4: detected capacity change from 0 to 128 [ 287.159659][ T8582] sctp: [Deprecated]: syz.2.1374 (pid 8582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.159659][ T8582] Use struct sctp_sack_info instead [ 287.830588][ T8572] loop1: detected capacity change from 0 to 32768 [ 287.893249][ T8572] [ 287.893249][ T8572] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.893249][ T8572] [ 288.078163][ T8600] loop2: detected capacity change from 0 to 256 [ 288.115097][ T4372] ERROR: (device loop1): diWrite: ixpxd invalid [ 288.115097][ T4372] [ 288.162089][ T8592] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input18 [ 288.232753][ T4372] ERROR: (device loop1): txCommit: [ 288.232753][ T4372] [ 288.318297][ T4372] jfs_write_inode: jfs_commit_inode failed! [ 288.378953][ T4280] [ 288.378953][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.378953][ T4280] [ 288.439940][ T4280] [ 288.439940][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.439940][ T4280] [ 289.537271][ T8632] loop1: detected capacity change from 0 to 256 [ 289.609524][ T8632] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 290.341935][ T5211] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 290.442445][ T8662] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1408'. [ 290.502414][ T8662] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 290.555444][ T5211] usb 5-1: Using ep0 maxpacket: 32 [ 290.585261][ T5211] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 290.617853][ T5211] usb 5-1: config 0 has no interface number 0 [ 290.648241][ T5211] usb 5-1: config 0 interface 184 has no altsetting 0 [ 290.681921][ T8007] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 290.691266][ T5211] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 290.733585][ T5211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.780959][ T5211] usb 5-1: Product: syz [ 290.801260][ T5211] usb 5-1: Manufacturer: syz [ 290.816533][ T5211] usb 5-1: SerialNumber: syz [ 290.850247][ T5211] usb 5-1: config 0 descriptor?? [ 290.889866][ T5211] smsc75xx v1.0.0 [ 290.894797][ T8007] usb 2-1: not running at top speed; connect to a high speed hub [ 290.935125][ T8007] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 290.995770][ T8007] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 291.051405][ T8007] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 291.068310][ T8677] loop0: detected capacity change from 0 to 512 [ 291.090688][ T5211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 291.126348][ T8007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.152602][ T5211] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 291.169881][ T8677] EXT4-fs (loop0): 1 truncate cleaned up [ 291.189900][ T8007] usb 2-1: Product: syz [ 291.200644][ T8677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 291.231062][ T5211] usb 5-1: USB disconnect, device number 15 [ 291.241785][ T8007] usb 2-1: Manufacturer: syz [ 291.246420][ T8007] usb 2-1: SerialNumber: syz [ 291.297445][ T8661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 291.349637][ T8007] oti6858 2-1:1.0: oti6858 converter detected [ 291.379609][ T8677] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1418: bg 0: block 465: padding at end of block bitmap is not set [ 291.404965][ T8007] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 291.578182][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 291.815327][ T5211] usb 2-1: USB disconnect, device number 9 [ 291.866733][ T5211] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 291.917042][ T5211] oti6858 2-1:1.0: device disconnected [ 292.247085][ T8693] loop5: detected capacity change from 0 to 8192 [ 292.319836][ T8703] loop4: detected capacity change from 0 to 256 [ 292.366254][ T8693] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.157547][ T8699] loop2: detected capacity change from 0 to 32768 [ 293.236767][ T8699] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.1427 (8699) [ 293.362281][ T8699] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 293.428379][ T8699] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 293.502192][ T8699] BTRFS info (device loop2): using free space tree [ 293.634519][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1437'. [ 293.701817][ T8699] BTRFS info (device loop2): enabling ssd optimizations [ 293.790691][ T26] audit: type=1800 audit(1793505431.598:54): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1427" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 294.263034][ T4606] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 294.375995][ T8715] loop4: detected capacity change from 0 to 32768 [ 294.446558][ T8715] XFS: attr2 mount option is deprecated. [ 294.646778][ T8759] loop5: detected capacity change from 0 to 16 [ 294.722911][ T8759] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 294.785889][ T8761] loop0: detected capacity change from 0 to 256 [ 294.871158][ T8761] FAT-fs (loop0): bogus logical sector size 3072 [ 294.917894][ T8761] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 294.996226][ T8761] FAT-fs (loop0): Can't find a valid FAT filesystem [ 295.127128][ T8764] netlink: 'syz.1.1447': attribute type 2 has an invalid length. [ 295.142473][ T8715] XFS (loop4): Mounting V5 Filesystem [ 295.210278][ T8764] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 295.240587][ T8715] XFS (loop4): Ending clean mount [ 295.294358][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 295.354096][ T8764] netlink: 'syz.1.1447': attribute type 2 has an invalid length. [ 295.438924][ T8764] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 295.482020][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 295.541884][ T8764] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 295.590782][ T4279] XFS (loop4): Unmounting Filesystem [ 295.693899][ T8773] loop0: detected capacity change from 0 to 512 [ 295.786213][ T8773] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 295.890107][ T26] audit: type=1400 audit(1793505433.698:55): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=8777 comm="syz.1.1452" name="foo" offset=35 [ 295.971901][ T8007] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 295.989582][ T8773] EXT4-fs (loop0): 1 truncate cleaned up [ 296.033276][ T8773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 296.195968][ T8007] usb 6-1: Using ep0 maxpacket: 32 [ 296.223081][ T8007] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.284645][ T8007] usb 6-1: config 0 has no interface number 0 [ 296.329578][ T8007] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 296.374195][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 296.387239][ T8007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.433459][ T8007] usb 6-1: Product: syz [ 296.461623][ T8007] usb 6-1: Manufacturer: syz [ 296.486246][ T8007] usb 6-1: SerialNumber: syz [ 296.530571][ T8007] usb 6-1: config 0 descriptor?? [ 296.570689][ T8007] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 296.616519][ T8007] usb 6-1: selecting invalid altsetting 1 [ 296.630030][ T8787] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1456'. [ 296.648736][ T8007] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 296.688203][ T8007] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.729604][ T8007] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 296.769439][ T8007] usb 6-1: media controller created [ 296.836152][ T8007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.783983][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.854624][ T8771] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 297.887268][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.939771][ T8818] device veth1_macvtap left promiscuous mode [ 297.965548][ T8007] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 298.009132][ T8007] zl10353_read_register: readreg error (reg=127, ret==-71) [ 298.018690][ T8822] device veth1_macvtap entered promiscuous mode [ 298.051941][ T8007] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 298.209041][ T8007] usb 6-1: USB disconnect, device number 11 [ 298.339075][ T26] audit: type=1400 audit(1793505436.148:56): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8828 comm="syz.2.1473" [ 298.548187][ T5072] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 298.626824][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'. [ 298.753598][ T5072] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.786146][ T5072] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.831875][ T5072] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.838550][ T5072] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 298.905815][ T5072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.957565][ T5072] usb 2-1: config 0 descriptor?? [ 299.381314][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 299.398925][ T5072] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x7 [ 299.440481][ T5072] hid-multitouch 0003:0EEF:72C4.000A: unbalanced collection at end of report description [ 299.501547][ T5072] hid-multitouch: probe of 0003:0EEF:72C4.000A failed with error -22 [ 299.632993][ T5211] usb 2-1: USB disconnect, device number 10 [ 300.007861][ T8846] loop4: detected capacity change from 0 to 32768 [ 300.057966][ T8846] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.1478 (8846) [ 300.183336][ T8846] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 300.272008][ T8846] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 300.281411][ T8846] BTRFS info (device loop4): using free space tree [ 300.529225][ T8846] BTRFS info (device loop4): enabling ssd optimizations [ 300.665074][ T26] audit: type=1800 audit(1793505438.478:57): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1478" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 301.058742][ T8899] loop1: detected capacity change from 0 to 512 [ 301.116555][ T4279] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 301.160865][ T8899] EXT4-fs (loop1): 1 truncate cleaned up [ 301.188940][ T8903] loop9: detected capacity change from 0 to 524287936 [ 301.220217][ T8899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 301.341923][ T5072] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 301.563723][ T5072] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 301.582560][ T5072] usb 1-1: config 127 has no interface number 0 [ 301.598107][ T5072] usb 1-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 301.628019][ T5072] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 301.664319][ T5072] usb 1-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 301.716614][ T5072] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 301.739933][ T5072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.763833][ T5072] usb 1-1: Product: syz [ 301.778810][ T5072] usb 1-1: Manufacturer: syz [ 301.789036][ T5072] usb 1-1: SerialNumber: syz [ 301.821959][ T8900] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.004734][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 302.028552][ T8913] loop2: detected capacity change from 0 to 4096 [ 302.067669][ T8903] loop9: unable to read partition table [ 302.166324][ T8903] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 302.235030][ T8914] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.251797][ T8900] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.346423][ T26] audit: type=1800 audit(1793505440.158:58): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1503" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 302.510524][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.591880][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.695644][ T5072] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 302.767979][ T5072] asix: probe of 1-1:127.57 failed with error -71 [ 302.852544][ T5072] usb 1-1: USB disconnect, device number 10 [ 303.400493][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'. [ 303.719445][ T8943] loop0: detected capacity change from 0 to 512 [ 303.823864][ T8943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.909078][ T8943] EXT4-fs (loop0): 1 truncate cleaned up [ 303.946699][ T8943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 304.175805][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 304.919794][ T8976] raw_sendmsg: syz.0.1529 forgot to set AF_INET. Fix it! [ 305.547755][ T8999] rnbd_client L600: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 305.581253][ T8999] rnbd_client L1255: Session s+ not found, and path parameter not given [ 306.100829][ T9017] loop2: detected capacity change from 0 to 512 [ 306.489346][ T9025] loop2: detected capacity change from 0 to 2048 [ 306.557894][ T9025] loop2: p1 p2 p3 [ 306.557894][ T9025] p1: [ 306.621484][ T9025] loop2: p2 size 458752 extends beyond EOD, truncated [ 306.661873][ T9025] loop2: p3 start 65280 is beyond EOD, truncated [ 307.428137][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 307.441543][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 307.895541][ T5072] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 308.070261][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.092428][ T5211] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 308.115891][ T5072] usb 5-1: not running at top speed; connect to a high speed hub [ 308.152234][ T5072] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 308.206530][ T5072] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 308.273275][ T5072] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 308.312006][ T5072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.327013][ T5211] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 308.364678][ T5072] usb 5-1: Product: syz [ 308.369026][ T5211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.399446][ T5072] usb 5-1: Manufacturer: syz [ 308.421752][ T5072] usb 5-1: SerialNumber: syz [ 308.426538][ T5211] usb 1-1: Product: syz [ 308.430727][ T5211] usb 1-1: Manufacturer: syz [ 308.459917][ T9046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.487675][ T5211] usb 1-1: SerialNumber: syz [ 308.506950][ T5072] oti6858 5-1:1.0: oti6858 converter detected [ 308.548878][ T5072] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 308.767029][ T5211] rtl8150 1-1:1.0: couldn't reset the device [ 308.808850][ T5211] rtl8150: probe of 1-1:1.0 failed with error -5 [ 308.854656][ T5211] usb 1-1: USB disconnect, device number 11 [ 308.985303][ T5072] usb 5-1: USB disconnect, device number 16 [ 309.025715][ T5072] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 309.064387][ T5072] oti6858 5-1:1.0: device disconnected [ 309.221517][ T9048] loop5: detected capacity change from 0 to 32768 [ 309.268882][ T9065] device macvlan3 entered promiscuous mode [ 309.344731][ T9048] [ 309.344731][ T9048] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.344731][ T9048] [ 309.365186][ T9067] loop1: detected capacity change from 0 to 2048 [ 309.419202][ T9067] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.539404][ T9071] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.615869][ T9048] ERROR: (device loop5): diWrite: ixpxd invalid [ 309.615869][ T9048] [ 309.652975][ T9072] loop2: detected capacity change from 0 to 8 [ 309.765551][ T9048] ERROR: (device loop5): txCommit: [ 309.765551][ T9048] [ 309.801520][ T9072] SQUASHFS error: lzo decompression failed, data probably corrupt [ 309.866083][ T9073] ERROR: (device loop5): dtSearch: stack overrun! [ 309.866083][ T9073] [ 309.891844][ T9072] SQUASHFS error: Failed to read block 0x82: -5 [ 309.898151][ T9072] SQUASHFS error: Unable to read metadata cache entry [80] [ 309.950836][ T9073] btstack dump: [ 309.967401][ T9072] SQUASHFS error: Unable to read inode 0x11f [ 310.050711][ T9073] bn = 0, index = 0 [ 310.082851][ T9073] bn = 0, index = 0 [ 310.086758][ T9073] bn = 0, index = 0 [ 310.090570][ T9073] bn = 0, index = 0 [ 310.138726][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 310.205951][ T9073] bn = 0, index = 0 [ 310.241341][ T9073] bn = 0, index = 0 [ 310.270575][ T9073] bn = 0, index = 0 [ 310.306508][ T9073] bn = 0, index = 0 [ 310.310405][ T9073] jfs_mkdir: dtSearch returned -5 [ 310.636242][ T4475] [ 310.636242][ T4475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.636242][ T4475] [ 310.687444][ T9069] loop0: detected capacity change from 0 to 32768 [ 310.694057][ T9087] loop1: detected capacity change from 0 to 1024 [ 310.786536][ T9087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 310.812446][ T26] audit: type=1800 audit(1793505448.628:59): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1567" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 310.875121][ T4475] [ 310.875121][ T4475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.875121][ T4475] [ 310.885903][ T9087] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.048496][ T9087] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.1575: lblock 0 mapped to illegal pblock 0 (length 1) [ 311.219949][ T9087] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 311.321948][ T9087] EXT4-fs (loop1): This should not happen!! Data will be lost [ 311.321948][ T9087] [ 311.582608][ T9103] loop9: detected capacity change from 0 to 524287936 [ 311.600839][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 311.680630][ T9105] loop0: detected capacity change from 0 to 512 [ 311.815247][ T9105] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 311.936555][ T9105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1581: bg 0: block 104: invalid block bitmap [ 312.100595][ T9105] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 312.181284][ T9105] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1581: invalid indirect mapped block 1 (level 1) [ 312.307873][ T9105] EXT4-fs (loop0): 1 truncate cleaned up [ 312.364898][ T9105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 312.555745][ T9105] EXT4-fs (loop0): shut down requested (2) [ 312.591628][ T9088] loop2: detected capacity change from 0 to 32768 [ 312.721955][ T9088] gfs2: Invalid block size shift [ 312.807405][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 314.311668][ C0] sched: RT throttling activated [ 314.469175][ T9141] i2c i2c-0: new_device: Missing parameters [ 314.741093][ T9145] Mass Storage Function, version: 2009/09/11 [ 314.785731][ T9145] LUN: removable file: (no medium) [ 315.207757][ T9158] ip_tables: iptables: counters copy to user failed while replacing table [ 315.233748][ T9131] loop4: detected capacity change from 0 to 32768 [ 315.318521][ T9131] XFS (loop4): Mounting V5 Filesystem [ 315.352413][ T8008] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 315.425492][ T9131] XFS (loop4): Ending clean mount [ 315.564944][ T8008] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 315.597541][ T8008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.621465][ T8008] usb 1-1: Product: syz [ 315.635789][ T8008] usb 1-1: Manufacturer: syz [ 315.649238][ T8008] usb 1-1: SerialNumber: syz [ 315.667549][ T8008] usb 1-1: config 0 descriptor?? [ 315.679676][ T4279] XFS (loop4): Unmounting Filesystem [ 315.929566][ T8016] usb 1-1: USB disconnect, device number 12 [ 316.597891][ T9185] loop4: detected capacity change from 0 to 512 [ 316.648504][ T9185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.696487][ T9185] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.816706][ T9185] EXT4-fs (loop4): shut down requested (0) [ 317.017230][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 317.088989][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 317.137029][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152160][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.160188][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1614'. [ 317.467831][ T9205] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 318.094990][ T8008] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 318.135792][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 318.180613][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'. [ 318.230514][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 318.286785][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'. [ 318.297523][ T8008] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 318.334669][ T8008] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 318.391166][ T8008] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 318.416591][ T9232] serio: Serial port pty29 [ 318.452883][ T8008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.460930][ T8008] usb 1-1: Product: syz [ 318.515321][ T8008] usb 1-1: Manufacturer: syz [ 318.541378][ T8008] usb 1-1: SerialNumber: syz [ 318.834215][ T8008] kaweth 1-1:1.0: Firmware present in device. [ 319.002274][ T8008] kaweth 1-1:1.0: Statistics collection: 0 [ 319.028457][ T8008] kaweth 1-1:1.0: Multicast filter limit: 0 [ 319.075247][ T8008] kaweth 1-1:1.0: MTU: 0 [ 319.104012][ T8008] kaweth 1-1:1.0: Read MAC address 00:00:00:00:00:00 [ 319.409566][ T8008] kaweth 1-1:1.0: Error setting SOFS wait [ 319.439182][ T8008] kaweth: probe of 1-1:1.0 failed with error -5 [ 319.502511][ T8008] usb 1-1: USB disconnect, device number 13 [ 319.525020][ T9261] loop4: detected capacity change from 0 to 256 [ 319.598053][ T9261] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 319.713987][ T9261] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 319.734040][ T9261] exFAT-fs (loop4): Filesystem has been set read-only [ 319.831817][ T5211] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 320.033613][ T5211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 320.065557][ T5211] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 320.120696][ T5211] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 320.155264][ T5211] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 320.199932][ T5211] usb 3-1: config 129 has no interface number 0 [ 320.227154][ T5211] usb 3-1: config 129 has no interface number 1 [ 320.257669][ T5211] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 320.279215][ T9258] loop1: detected capacity change from 0 to 32768 [ 320.327359][ T5211] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 320.386788][ T5211] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 320.454600][ T5211] usb 3-1: config 129 interface 135 has no altsetting 0 [ 320.480131][ T5211] usb 3-1: config 129 interface 5 has no altsetting 0 [ 320.514210][ T9258] XFS (loop1): Mounting V5 Filesystem [ 320.519724][ T5211] usb 3-1: string descriptor 0 read error: -22 [ 320.559107][ T5211] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 320.631038][ T5211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.679567][ T9258] XFS (loop1): Ending clean mount [ 320.716293][ T5211] usb 3-1: MIDIStreaming interface descriptor not found [ 320.806842][ T9288] loop4: detected capacity change from 0 to 512 [ 320.861296][ T9288] EXT4-fs: Ignoring removed nobh option [ 320.949931][ T5211] usb 3-1: USB disconnect, device number 6 [ 320.964468][ T9288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 321.089608][ T9288] EXT4-fs (loop4): 1 truncate cleaned up [ 321.119002][ T9288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.226154][ T9258] XFS (loop1): Quotacheck needed: Please wait. [ 321.334696][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 321.416340][ T9258] XFS (loop1): Quotacheck: Done. [ 321.655709][ T4280] XFS (loop1): Unmounting Filesystem [ 322.174617][ T5072] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 322.385625][ T5072] usb 3-1: Using ep0 maxpacket: 8 [ 322.413928][ T5072] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 322.458286][ T5072] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.488874][ T5072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.527961][ T5072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.558407][ T5072] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.602677][ T5072] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.635326][ T5072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.728721][ T9316] loop4: detected capacity change from 0 to 32768 [ 322.831707][ T9316] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 322.893381][ T5072] usb 3-1: GET_CAPABILITIES returned 0 [ 322.898916][ T5072] usbtmc 3-1:16.0: can't read capabilities [ 322.919057][ T9316] JBD2: Ignoring recovery information on journal [ 323.088899][ T9316] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 323.132941][ T9310] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 323.177071][ T5072] usb 3-1: USB disconnect, device number 7 [ 323.241466][ T9316] (syz.4.1663,9316,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 323.316944][ T9316] (syz.4.1663,9316,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 2333041375221960101 failed -12 [ 323.375174][ T9316] (syz.4.1663,9316,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 323.415853][ T9316] (syz.4.1663,9316,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 323.459578][ T9316] (syz.4.1663,9316,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 323.520892][ T9316] (syz.4.1663,9316,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 323.668814][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 324.547017][ T9362] loop4: detected capacity change from 0 to 512 [ 324.607973][ T9362] EXT4-fs: Ignoring removed oldalloc option [ 324.670062][ T9362] EXT4-fs: Ignoring removed i_version option [ 324.746914][ T9362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.872456][ T9362] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1678: invalid block [ 324.995450][ T26] audit: type=1400 audit(1793505462.808:60): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=9371 comm="syz.2.1682" name="p" offset=64 [ 325.014967][ T9362] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1678: invalid indirect mapped block 4294967295 (level 1) [ 325.125848][ T9362] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1678: invalid indirect mapped block 4294967295 (level 1) [ 325.220530][ T9362] EXT4-fs (loop4): 2 truncates cleaned up [ 325.266777][ T9362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 325.384936][ T9362] EXT4-fs (loop4): shut down requested (1) [ 325.542950][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 326.025608][ T9395] ip_tables: iptables: counters copy to user failed while replacing table [ 326.436676][ T9384] loop2: detected capacity change from 0 to 32768 [ 326.489123][ T9408] tun0: tun_chr_ioctl cmd 1074812118 [ 326.528428][ T9384] XFS (loop2): Mounting V5 Filesystem [ 326.631999][ T9384] XFS (loop2): Ending clean mount [ 326.933799][ T4606] XFS (loop2): Unmounting Filesystem [ 327.119954][ T9426] loop4: detected capacity change from 0 to 1024 [ 327.254250][ T9426] hfsplus: invalid length 32517 has been corrected to 255 [ 327.533865][ T4387] hfsplus: b-tree write err: -5, ino 2 [ 327.539450][ T4387] hfsplus: b-tree write err: -5, ino 25 [ 327.585460][ T4387] hfsplus: b-tree write err: -5, ino 4 [ 327.601229][ T9433] loop1: detected capacity change from 0 to 4096 [ 327.708293][ T9433] EXT4-fs: Ignoring removed nobh option [ 328.194611][ T9444] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 328.249787][ T9444] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 328.314860][ T9433] EXT4-fs: Ignoring removed bh option [ 328.320616][ T9444] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888140008c80 [ 328.359770][ T9433] EXT4-fs (loop1): Test dummy encryption mode enabled [ 328.382561][ T9444] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 328.415887][ T9433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 328.435613][ T9444] page dumped because: unmovable page [ 328.465822][ T9444] page_owner tracks the page as allocated [ 328.483137][ T9455] kvm [9454]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x80000006 [ 328.520336][ T9444] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4280, tgid 4280 (syz-executor), ts 83282507731, free_ts 25935815647 [ 328.603118][ T9444] post_alloc_hook+0x173/0x1a0 [ 328.619412][ T9444] get_page_from_freelist+0x206b/0x2180 [ 328.643337][ T9444] __alloc_pages+0x1ec/0x4f0 [ 328.648182][ T9444] alloc_slab_page+0x5d/0x180 [ 328.679334][ T9444] new_slab+0x87/0x2d0 [ 328.688004][ T9444] ___slab_alloc+0xbc5/0x1240 [ 328.713873][ T9444] kmem_cache_alloc+0x111/0x2f0 [ 328.729069][ T9444] __kernfs_new_node+0xe1/0x7f0 [ 328.743160][ T9444] kernfs_new_node+0x148/0x250 [ 328.764014][ T9444] kernfs_create_dir_ns+0x40/0x120 [ 328.783145][ T9444] internal_create_group+0x21a/0xce0 [ 328.799847][ T9444] dpm_sysfs_add+0x66/0x270 [ 328.814210][ T9444] device_add+0x745/0x1050 [ 328.828398][ T9444] netdev_register_kobject+0x184/0x320 [ 328.838527][ T9444] register_netdevice+0x133a/0x1b80 [ 328.848463][ T9468] loop5: detected capacity change from 0 to 64 [ 328.858260][ T9444] veth_newlink+0x66a/0xd60 [ 328.864670][ T9444] page last free stack trace: [ 328.869543][ T9444] free_unref_page_prepare+0x8e5/0x9e0 [ 328.930180][ T9444] free_unref_page+0x2e/0x3f0 [ 328.941426][ T9444] free_contig_range+0x9d/0x150 [ 328.956811][ T9444] destroy_args+0xef/0xa0e [ 328.968044][ T9444] debug_vm_pgtable+0x33c/0x38e [ 328.984615][ T9444] do_one_initcall+0x257/0x800 [ 328.999722][ T9444] do_initcall_level+0x13d/0x1ed [ 329.010749][ T9444] do_initcalls+0x4b/0x8a [ 329.020513][ T9444] kernel_init_freeable+0x401/0x5ab [ 329.033883][ T9444] kernel_init+0x19/0x1b0 [ 329.043264][ T9444] ret_from_fork+0x1f/0x30 [ 329.097621][ T9433] EXT4-fs (loop1): unmounting filesystem. [ 329.357870][ T9476] loop1: detected capacity change from 0 to 256 [ 330.090944][ T9495] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1732'. [ 330.155089][ T9495] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1732'. [ 330.719290][ T9489] loop4: detected capacity change from 0 to 32768 [ 330.789750][ T9489] XFS (loop4): Mounting V5 Filesystem [ 330.869541][ T9489] XFS (loop4): Ending clean mount [ 331.144560][ T4279] XFS (loop4): Unmounting Filesystem [ 331.267057][ T9530] loop1: detected capacity change from 0 to 64 [ 332.265026][ T9548] loop4: detected capacity change from 0 to 2048 [ 332.327785][ T9548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.418923][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 334.355095][ T9596] loop0: detected capacity change from 0 to 2048 [ 334.406103][ T9596] loop0: p1 p2 p3 [ 334.406103][ T9596] p1: [ 334.466696][ T9596] loop0: p2 size 458752 extends beyond EOD, truncated [ 334.494959][ T9596] loop0: p3 start 65280 is beyond EOD, truncated [ 334.539103][ T9603] loop5: detected capacity change from 0 to 1024 [ 334.545635][ T5211] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 334.773061][ T9603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 334.781925][ T5211] usb 3-1: Using ep0 maxpacket: 32 [ 334.818153][ T5211] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 334.878975][ T5211] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 334.939107][ T9603] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.955590][ T5211] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 335.014471][ T5211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.081933][ T5211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.142797][ T5211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 335.168813][ T9613] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 335.192143][ T9603] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.1774: lblock 0 mapped to illegal pblock 0 (length 1) [ 335.241788][ T5211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 335.261766][ T5211] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 335.305711][ T9603] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 335.336113][ T5211] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 335.363828][ T5211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.384190][ T9603] EXT4-fs (loop5): This should not happen!! Data will be lost [ 335.384190][ T9603] [ 335.409648][ T5211] usb 3-1: config 0 descriptor?? [ 335.644117][ T5211] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 335.783817][ T4475] EXT4-fs (loop5): unmounting filesystem. [ 335.864030][ T5072] usb 3-1: USB disconnect, device number 8 [ 335.935773][ T5072] usblp0: removed [ 336.114839][ T9615] loop0: detected capacity change from 0 to 32768 [ 336.193641][ T9615] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 336.240096][ T9615] JBD2: Ignoring recovery information on journal [ 336.352501][ T9615] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 336.466122][ T9615] (syz.0.1778,9615,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 336.474613][ T8011] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 336.537656][ T9615] (syz.0.1778,9615,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 2333041375221960101 failed -12 [ 336.587846][ T9615] (syz.0.1778,9615,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 336.628285][ T9615] (syz.0.1778,9615,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 336.671787][ T9615] (syz.0.1778,9615,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 336.693096][ T8011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 336.710329][ T9618] loop1: detected capacity change from 0 to 40427 [ 336.732475][ T9615] (syz.0.1778,9615,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 336.750055][ T8011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.793136][ T9618] F2FS-fs (loop1): Found nat_bits in checkpoint [ 336.831971][ T8011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 336.901076][ T8011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 336.996555][ T8011] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 337.024200][ T4275] ocfs2: Unmounting device (7,0) on (node local) [ 337.090384][ T8011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.116573][ T9618] F2FS-fs (loop1): Start checkpoint disabled! [ 337.173642][ T8011] usb 5-1: Product: syz [ 337.177877][ T8011] usb 5-1: Manufacturer: syz [ 337.268855][ T8011] usb 5-1: SerialNumber: syz [ 337.294874][ T9618] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 337.325861][ T8011] usb 5-1: config 0 descriptor?? [ 337.549194][ T8011] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 337.761192][ T8011] usb 5-1: USB disconnect, device number 17 [ 337.784212][ T4387] kworker/u4:8: attempt to access beyond end of device [ 337.784212][ T4387] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 337.848270][ T4387] kworker/u4:8: attempt to access beyond end of device [ 337.848270][ T4387] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 338.667941][ T9657] program syz.2.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.975108][ T5072] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 339.053711][ T8011] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 339.188026][ T5072] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 339.199662][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 339.237756][ T5072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.262608][ T8011] usb 1-1: Using ep0 maxpacket: 8 [ 339.267835][ T5072] usb 5-1: Product: syz [ 339.283466][ T5072] usb 5-1: Manufacturer: syz [ 339.289463][ T8011] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 339.325317][ T5072] usb 5-1: SerialNumber: syz [ 339.340823][ T8011] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.368312][ T5072] usb 5-1: config 0 descriptor?? [ 339.407313][ T5072] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 339.418114][ T8011] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.458614][ T8011] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.511572][ T9678] block2mtd: device name too long [ 339.520854][ T8011] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.584772][ T8011] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.641749][ T8011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.888429][ T8011] usb 1-1: GET_CAPABILITIES returned 0 [ 339.909597][ T8011] usbtmc 1-1:16.0: can't read capabilities [ 340.101805][ T8011] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 340.148750][ T9663] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 340.183129][ T5072] usb 1-1: USB disconnect, device number 14 [ 340.236717][ T8016] usb 5-1: USB disconnect, device number 18 [ 340.322504][ T8011] usb 2-1: Using ep0 maxpacket: 8 [ 340.339730][ T8011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.381272][ T8011] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 340.405344][ T9691] loop2: detected capacity change from 0 to 512 [ 340.419567][ T8011] usb 2-1: New USB device found, idVendor=0def, idProduct=6047, bcdDevice= 0.00 [ 340.441330][ T9691] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 340.470977][ T8011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.537749][ T8011] usb 2-1: config 0 descriptor?? [ 340.980219][ T8011] hid-generic 0003:0DEF:6047.000B: unknown main item tag 0x0 [ 341.024035][ T8011] hid-generic 0003:0DEF:6047.000B: unknown main item tag 0x0 [ 341.073972][ T8011] hid-generic 0003:0DEF:6047.000B: unknown main item tag 0x1 [ 341.104365][ T8011] hid-generic 0003:0DEF:6047.000B: unknown main item tag 0x0 [ 341.135061][ T8011] hid-generic 0003:0DEF:6047.000B: unknown main item tag 0x0 [ 341.183170][ T8011] hid-generic 0003:0DEF:6047.000B: unbalanced collection at end of report description [ 341.249093][ T8011] hid-generic: probe of 0003:0DEF:6047.000B failed with error -22 [ 341.305500][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.312720][ T8011] usb 2-1: USB disconnect, device number 11 [ 341.367608][ T9709] team0: Port device bond0 added [ 341.814511][ T9722] device gretap0 entered promiscuous mode [ 341.870681][ T9726] loop2: detected capacity change from 0 to 256 [ 341.914290][ T9726] exfat: Deprecated parameter 'utf8' [ 341.971423][ T9726] exfat: Deprecated parameter 'utf8' [ 342.001354][ T9730] netlink: 'syz.1.1826': attribute type 12 has an invalid length. [ 342.039610][ T9726] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 342.061909][ T9730] netlink: 'syz.1.1826': attribute type 29 has an invalid length. [ 342.103936][ T9730] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1826'. [ 342.151492][ T9730] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 342.187160][ T9730] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1826'. [ 342.712987][ T4291] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 342.774411][ T9750] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.315630][ T26] audit: type=1400 audit(1793505481.128:61): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=9763 comm="syz.0.1843" name=":/o" offset=35 [ 343.702185][ T9774] device bridge0 entered promiscuous mode [ 343.745454][ T9773] device bridge0 left promiscuous mode [ 344.138578][ T26] audit: type=1326 audit(1793505481.948:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 344.162537][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.225350][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.262276][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.320689][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.329133][ T26] audit: type=1326 audit(1793505481.988:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 344.552463][ T26] audit: type=1326 audit(1793505481.988:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 344.576390][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.780822][ T9796] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.791899][ T26] audit: type=1326 audit(1793505481.988:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 344.815879][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.014342][ T26] audit: type=1326 audit(1793505481.988:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 345.250992][ T26] audit: type=1326 audit(1793505481.988:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 345.439406][ T9781] loop2: detected capacity change from 0 to 32768 [ 345.467817][ T26] audit: type=1326 audit(1793505481.988:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 345.600983][ T9781] XFS (loop2): Mounting V5 Filesystem [ 345.667153][ T26] audit: type=1326 audit(1793505481.988:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 345.795247][ T9781] XFS (loop2): Ending clean mount [ 345.860046][ T9781] XFS (loop2): Quotacheck needed: Please wait. [ 345.896327][ T26] audit: type=1326 audit(1793505481.988:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.4.1851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9b19f559 code=0x7ffc0000 [ 346.142647][ T9781] XFS (loop2): Quotacheck: Done. [ 346.646342][ T9841] loop1: detected capacity change from 0 to 256 [ 346.730795][ T9841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 346.746335][ T4291] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 346.755156][ T4291] Bluetooth: hci4: Injecting HCI hardware error event [ 346.765939][ T4293] Bluetooth: hci4: hardware error 0x00 [ 346.955276][ T9841] exFAT-fs (loop1): start_clu is invalid cluster(0x0) [ 347.181627][ T4606] XFS (loop2): Unmounting Filesystem [ 347.711763][ T8011] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 347.827671][ T9863] loop1: detected capacity change from 0 to 64 [ 347.935322][ T8011] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.019165][ T8011] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 348.099560][ T8011] usb 5-1: New USB device strings: Mfr=7, Product=0, SerialNumber=2 [ 348.174783][ T8011] usb 5-1: Manufacturer: syz [ 348.179462][ T8011] usb 5-1: SerialNumber: syz [ 348.268887][ T8011] usb 5-1: config 0 descriptor?? [ 348.308592][ T8011] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 348.410057][ T8011] usb 5-1: Detected SIO [ 348.439822][ T8011] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 348.535738][ T8011] usb 5-1: USB disconnect, device number 19 [ 348.552016][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 348.585658][ T9875] loop0: detected capacity change from 0 to 256 [ 348.610165][ T8011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 348.631161][ T9875] exfat: Deprecated parameter 'utf8' [ 348.665524][ T9875] exfat: Deprecated parameter 'utf8' [ 348.695894][ T8011] ftdi_sio 5-1:0.0: device disconnected [ 348.721883][ T9875] exfat: Deprecated parameter 'namecase' [ 348.804435][ T9875] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xfffcecf0, utbl_chksum : 0xe619d30d) [ 348.895131][ T4293] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 349.031809][ T8016] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 349.233431][ T8016] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.291752][ T8016] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 349.345594][ T8016] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 349.408363][ T8016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.457535][ T8016] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 349.500499][ T8016] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 349.571202][ T9896] loop4: detected capacity change from 0 to 512 [ 349.603326][ T8011] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 349.733784][ T8007] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 349.821913][ T8011] usb 2-1: Using ep0 maxpacket: 32 [ 349.853136][ T8016] usb 3-1: USB disconnect, device number 9 [ 349.863847][ T8011] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 349.894622][ T8016] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 349.912320][ T8011] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 349.942625][ T8007] usb 1-1: Using ep0 maxpacket: 32 [ 349.954089][ T8016] spcp8x5 3-1:1.0: device disconnected [ 349.973488][ T8011] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 349.983348][ T8007] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 350.011394][ T9905] loop4: detected capacity change from 0 to 512 [ 350.036519][ T8007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.047832][ T8011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.114061][ T8007] usb 1-1: config 0 descriptor?? [ 350.129559][ T8011] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.150907][ T9905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 350.197774][ T8011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.213733][ T9905] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.251872][ T8011] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.301468][ T9905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1889: bg 0: block 217: padding at end of block bitmap is not set [ 350.326300][ T8007] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 350.335341][ T8011] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.379337][ T8007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.428314][ T8011] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 350.453333][ T8007] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 350.480900][ T8011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.493435][ T8007] usb 1-1: media controller created [ 350.548311][ T8007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.567608][ T8011] usb 2-1: config 0 descriptor?? [ 350.669935][ T8007] az6027: usb out operation failed. (-71) [ 350.694442][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 350.720970][ T8007] az6027: usb out operation failed. (-71) [ 350.777937][ T8007] stb0899_attach: Driver disabled by Kconfig [ 350.804881][ T8011] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 350.841768][ T8007] az6027: no front-end attached [ 350.841768][ T8007] [ 350.885821][ T8007] az6027: usb out operation failed. (-71) [ 350.936821][ T8007] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 350.977392][ T8007] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 351.083113][ T8007] dvb-usb: schedule remote query interval to 400 msecs. [ 351.139319][ T8007] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 351.208601][ T8007] usb 1-1: USB disconnect, device number 15 [ 351.240826][ T9927] loop4: detected capacity change from 0 to 512 [ 351.318041][ T8016] usb 2-1: USB disconnect, device number 12 [ 351.325470][ T9927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.378644][ T8016] usblp0: removed [ 351.466594][ T9927] EXT4-fs (loop4): 1 truncate cleaned up [ 351.512513][ T9927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 351.541435][ T8007] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 351.622950][ T9927] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1894: bg 0: block 465: padding at end of block bitmap is not set [ 351.763776][ T9927] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 351.841112][ T9937] loop1: detected capacity change from 0 to 256 [ 351.875550][ T9927] EXT4-fs (loop4): This should not happen!! Data will be lost [ 351.875550][ T9927] [ 351.928758][ T9937] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 351.969861][ T9927] EXT4-fs (loop4): Total free blocks count 0 [ 352.011955][ T9927] EXT4-fs (loop4): Free/Dirty block details [ 352.060868][ T9927] EXT4-fs (loop4): free_blocks=0 [ 352.120781][ T9927] EXT4-fs (loop4): dirty_blocks=2 [ 352.143449][ T9927] EXT4-fs (loop4): Block reservation details [ 352.149479][ T9927] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 352.445874][ T4387] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 353.239492][ T9973] loop1: detected capacity change from 0 to 128 [ 353.334812][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 353.334824][ T26] audit: type=1800 audit(1793505491.148:77): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1912" name="file1" dev="loop1" ino=1048749 res=0 errno=0 [ 354.121810][ T9980] loop0: detected capacity change from 0 to 131072 [ 354.160779][ T9980] F2FS-fs (loop0): invalid crc value [ 354.189185][ T9980] F2FS-fs (loop0): Found nat_bits in checkpoint [ 354.222418][ T9980] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 354.244578][ T9980] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 354.345568][ T9980] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 354.871086][ T9998] loop5: detected capacity change from 0 to 256 [ 354.898859][T10000] loop0: detected capacity change from 0 to 512 [ 354.966535][T10000] EXT4-fs: inline encryption not supported [ 355.015859][ T9998] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 355.060812][T10000] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1921: inode #1: comm syz.0.1921: iget: illegal inode # [ 355.150565][T10000] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1921: error while reading EA inode 1 err=-117 [ 355.245703][ T9998] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 355.253349][T10000] EXT4-fs (loop0): 1 orphan inode deleted [ 355.259765][T10000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 355.326026][ T26] audit: type=1800 audit(1793505493.138:78): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1923" name="file1" dev="loop5" ino=1048750 res=0 errno=0 [ 355.548004][T10000] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1921: invalid indirect mapped block 234881024 (level 0) [ 355.861160][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 356.049115][T10017] loop5: detected capacity change from 0 to 512 [ 356.056756][ T9996] loop1: detected capacity change from 0 to 40427 [ 356.106076][ T9996] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 356.170471][T10019] loop0: detected capacity change from 0 to 128 [ 356.195934][ T9996] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 356.239095][T10017] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 356.306078][ T9996] F2FS-fs (loop1): invalid crc value [ 356.335949][T10019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 356.365573][ T9996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 356.404526][T10019] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.445334][T10017] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.527368][ T9996] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 356.555691][T10019] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 356.668528][T10017] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1928: bg 0: block 217: padding at end of block bitmap is not set [ 356.759693][ T9996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 356.838123][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 356.950966][ T9996] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 357.058810][T10015] loop4: detected capacity change from 0 to 32768 [ 357.072524][ T9996] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10a/0xfc0 [ 357.139297][T10015] (syz.4.1929,10015,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 357.208382][ T4475] EXT4-fs (loop5): unmounting filesystem. [ 357.267861][T10015] (syz.4.1929,10015,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 357.363577][ T4280] syz-executor: attempt to access beyond end of device [ 357.363577][ T4280] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.396736][T10015] JBD2: Ignoring recovery information on journal [ 357.602670][T10015] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 357.963956][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 358.391181][T10053] loop0: detected capacity change from 0 to 256 [ 358.458405][T10053] exfat: Deprecated parameter 'utf8' [ 358.498167][T10053] exfat: Deprecated parameter 'namecase' [ 358.549657][T10053] exfat: Deprecated parameter 'namecase' [ 358.632197][T10053] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 358.833250][T10061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.851768][ T5072] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 359.061793][ T5072] usb 3-1: Using ep0 maxpacket: 16 [ 359.103944][ T5072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.164268][ T5072] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.239291][ T5072] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.321817][ T5072] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 359.412954][ T5072] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.450265][ T5072] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 359.479014][T10078] loop1: detected capacity change from 0 to 256 [ 359.502030][ T5072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.542242][T10078] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 359.570858][ T5072] usb 3-1: config 0 descriptor?? [ 359.741495][T10083] loop0: detected capacity change from 0 to 256 [ 359.761175][T10043] loop5: detected capacity change from 0 to 32768 [ 359.792604][T10082] loop4: detected capacity change from 0 to 1024 [ 360.087113][ T5072] logitech-djreceiver 0003:046D:C53A.000C: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 360.147691][T10043] blkno = 8ed2c, nblocks = 1 [ 360.208692][T10043] ERROR: (device loop5): dbFree: block to be freed is outside the map [ 360.208692][T10043] [ 360.301056][ T5072] usb 3-1: USB disconnect, device number 10 [ 360.440726][T10091] loop0: detected capacity change from 0 to 64 [ 360.478660][T10043] ERROR: (device loop5): remounting filesystem as read-only [ 360.612232][T10043] ialloc: diAlloc returned -17! [ 360.726571][T10043] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 360.726571][T10043] [ 360.767461][T10087] fido_id[10087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 360.911840][T10043] syz.5.1934: attempt to access beyond end of device [ 360.911840][T10043] loop5: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 361.321175][ T109] blkno = 8ed2c, nblocks = 1 [ 361.340389][ T109] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 361.340389][ T109] [ 361.683028][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1968'. [ 361.924964][T10128] loop4: detected capacity change from 0 to 2048 [ 361.975290][T10130] loop0: detected capacity change from 0 to 128 [ 362.038262][T10130] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 362.071276][T10128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 362.146272][T10130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.177264][T10128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.256676][T10136] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.580687][ T4279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 362.758426][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 363.292572][ T26] audit: type=1326 audit(1793505501.108:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21c3d9f559 code=0x0 [ 363.323045][T10152] loop0: detected capacity change from 0 to 4096 [ 363.340720][T10159] syz.4.1981 uses obsolete (PF_INET,SOCK_PACKET) [ 363.359350][T10152] EXT4-fs: inline encryption not supported [ 363.409942][T10152] EXT4-fs (loop0): Test dummy encryption mode enabled [ 363.446051][T10152] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 363.489384][T10152] System zones: 0-5 [ 363.527784][T10152] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 363.756381][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 363.927388][ T26] audit: type=1400 audit(1793505501.738:80): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10168 comm="syz.4.1985" name="p" offset=48 [ 364.584442][T10189] loop4: detected capacity change from 0 to 2048 [ 364.738673][T10189] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 364.851078][T10189] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 364.918842][T10197] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 364.981780][T10197] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 365.474187][T10210] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10210] [ 365.651804][ T5072] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 365.859404][ T5072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.914541][ T5072] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 365.986198][ T5072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.082178][ T5072] usb 1-1: config 0 descriptor?? [ 366.236621][T10230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2006'. [ 366.564523][ T5072] wacom 0003:056A:0331.000D: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 366.769032][ T8016] usb 1-1: USB disconnect, device number 16 [ 366.945816][T10241] fido_id[10241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 367.858089][T10277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 367.865401][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.987096][T10277] vhci_hcd vhci_hcd.0: Device attached [ 368.045368][T10281] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 368.051991][T10281] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 368.227432][T10283] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 368.234015][T10283] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 368.251737][ T5072] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 368.354163][T10281] vhci_hcd vhci_hcd.0: Device attached [ 368.407882][T10277] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 368.414539][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.508085][T10298] loop2: detected capacity change from 0 to 256 [ 368.567551][T10283] vhci_hcd vhci_hcd.0: Device attached [ 368.603835][T10277] vhci_hcd vhci_hcd.0: Device attached [ 368.681069][T10285] vhci_hcd: connection closed [ 368.703356][T10282] vhci_hcd: connection closed [ 368.708838][T10278] vhci_hcd: connection reset by peer [ 368.737070][ T9] vhci_hcd: stop threads [ 368.753905][T10291] vhci_hcd: connection closed [ 368.777442][ T9] vhci_hcd: release socket [ 368.877600][ T9] vhci_hcd: disconnect device [ 368.913755][ T9] vhci_hcd: stop threads [ 368.918052][ T9] vhci_hcd: release socket [ 368.962227][T10304] loop1: detected capacity change from 0 to 256 [ 368.991833][ T9] vhci_hcd: disconnect device [ 369.035152][T10304] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 369.054798][ T9] vhci_hcd: stop threads [ 369.100773][ T9] vhci_hcd: release socket [ 369.130677][ T9] vhci_hcd: disconnect device [ 369.165453][ T9] vhci_hcd: stop threads [ 369.169768][ T9] vhci_hcd: release socket [ 369.252091][ T9] vhci_hcd: disconnect device [ 369.741613][T10251] loop5: detected capacity change from 0 to 40427 [ 369.818679][T10251] F2FS-fs (loop5): invalid crc value [ 369.868393][T10251] F2FS-fs (loop5): Found nat_bits in checkpoint [ 370.160147][T10315] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 370.183878][T10251] F2FS-fs (loop5): Start checkpoint disabled! [ 370.226881][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.457343][T10328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.526204][T10331] loop2: detected capacity change from 0 to 2048 [ 370.613082][T10331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.114748][T10344] loop4: detected capacity change from 0 to 40427 [ 372.145543][T10361] netlink: 'syz.5.2043': attribute type 1 has an invalid length. [ 372.167312][T10344] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 372.245278][T10344] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 372.295414][T10344] F2FS-fs (loop4): invalid crc value [ 372.340220][T10344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.450151][T10344] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 372.605252][T10344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.736330][T10344] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 372.759060][T10373] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.004818][ T4279] syz-executor: attempt to access beyond end of device [ 373.004818][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 373.458788][ T5072] vhci_hcd: vhci_device speed not set [ 373.635976][T10394] ip_tables: iptables: counters copy to user failed while replacing table [ 374.812824][ T8007] usb usb34-port1: attempt power cycle [ 374.908178][T10430] bcache: register_bcache() error : failed to open device [ 375.217951][T10413] loop4: detected capacity change from 0 to 32768 [ 375.278005][T10413] (syz.4.2074,10413,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 375.406510][T10413] (syz.4.2074,10413,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 375.482369][ T8007] usb usb34-port1: unable to enumerate USB device [ 375.576374][T10413] JBD2: Ignoring recovery information on journal [ 375.727360][T10413] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 376.009421][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 376.056353][ T8011] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 376.263253][ T8011] usb 6-1: Using ep0 maxpacket: 16 [ 376.280530][ T8011] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.340663][ T8011] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.407915][ T8011] usb 6-1: config 0 interface 0 has no altsetting 0 [ 376.445368][ T8011] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 376.487301][T10443] loop1: detected capacity change from 0 to 32768 [ 376.502711][ T8011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.563934][ T8011] usb 6-1: config 0 descriptor?? [ 376.589299][T10443] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 376.589299][T10443] [ 377.004468][T10462] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 377.024877][ T8011] uclogic 0003:28BD:0042.000E: interface is invalid, ignoring [ 377.243960][ T8011] usb 6-1: USB disconnect, device number 12 [ 377.691137][ T26] audit: type=1800 audit(1793505515.498:81): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2100" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 378.350333][T10471] loop2: detected capacity change from 0 to 32768 [ 378.466371][T10471] JBD2: Ignoring recovery information on journal [ 378.581778][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.588106][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.626298][T10471] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 378.918223][ T4606] ocfs2: Unmounting device (7,2) on (node local) [ 379.074157][T10510] loop1: detected capacity change from 0 to 256 [ 379.147226][T10510] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 379.481817][ T8010] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 379.701764][ T8010] usb 6-1: Using ep0 maxpacket: 8 [ 379.720337][ T8010] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 379.769317][ T8010] usb 6-1: config 179 has no interface number 0 [ 379.817383][ T8010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 379.858445][T10525] loop4: detected capacity change from 0 to 4096 [ 379.877092][ T8010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 379.949611][ T8010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.014040][ T8010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 380.050994][T10530] loop2: detected capacity change from 0 to 2048 [ 380.078346][ T8010] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 380.139773][T10530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 380.168729][ T8010] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 380.230785][ T8010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.291804][T10514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 380.330352][T10525] ntfs3: loop4: Failed to load $Extend. [ 380.368744][ T4606] EXT4-fs (loop2): unmounting filesystem. [ 380.583348][T10541] MTRR 1 not used [ 380.736852][T10540] loop1: detected capacity change from 0 to 4096 [ 380.804809][ T4279] ntfs3: loop4: ino=5, mi_enum_attr [ 380.811334][ T4279] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 380.991804][ T4279] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 381.040263][ T8011] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input23 [ 381.287552][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 381.295893][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 381.305332][ T8007] usb 6-1: USB disconnect, device number 13 [ 381.352040][ T8007] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 381.399200][T10540] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 381.435677][T10540] ntfs3: loop1: Failed to load $Extend. [ 381.651046][ T26] audit: type=1800 audit(1793505519.458:82): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2123" name="file1" dev="loop1" ino=31 res=0 errno=0 [ 381.705505][T10540] ntfs3: loop1: ino=1f, "file1" attr_set_size [ 381.882133][ T4280] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 381.888900][ T4280] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 382.626056][T10565] loop2: detected capacity change from 0 to 131072 [ 382.635655][ T8010] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 382.656705][T10565] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 382.664014][T10565] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 382.702517][T10565] F2FS-fs (loop2): invalid crc value [ 382.721875][T10565] F2FS-fs (loop2): Found nat_bits in checkpoint [ 382.774233][T10565] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 382.781385][T10565] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 382.837658][T10565] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60008, run fsck to fix. [ 382.918165][T10574] loop5: detected capacity change from 0 to 164 [ 382.955123][ T8010] usb 1-1: Using ep0 maxpacket: 16 [ 382.979277][ T8010] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.999437][T10576] loop4: detected capacity change from 0 to 128 [ 383.040043][ T8010] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 383.101141][T10576] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 383.122058][ T8011] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 383.186403][ T8010] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 383.230046][T10576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.283854][ T8010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.325718][ T8010] usb 1-1: Product: syz [ 383.329940][ T8010] usb 1-1: Manufacturer: syz [ 383.365102][ T8011] usb 2-1: Using ep0 maxpacket: 16 [ 383.380554][ T8010] usb 1-1: SerialNumber: syz [ 383.401275][ T8011] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.434051][ T8011] usb 2-1: config 0 has no interface number 0 [ 383.461168][ T8011] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.495698][ T8011] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.521876][ T8011] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.562271][ T8011] usb 2-1: config 0 interface 1 has no altsetting 0 [ 383.579152][ T8011] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 383.609361][ T8011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.627748][ T8010] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 383.649391][ T8011] usb 2-1: config 0 descriptor?? [ 383.656224][ T8010] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 383.671253][ T8011] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 384.026605][ T8010] usb 1-1: 2:1 : can't get Cluster Descriptor [ 384.095555][ T8011] elan 0003:04F3:074D.000F: failed to start in urb: -90 [ 384.265963][ T8007] usb 1-1: USB disconnect, device number 17 [ 384.294798][ T8011] elan 0003:04F3:074D.000F: Set report error for parm 6: -71 [ 384.346177][ T8011] elan 0003:04F3:074D.000F: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 384.381159][ T8011] elan 0003:04F3:074D.000F: Input device is not registered [ 384.419807][ T8011] elan: probe of 0003:04F3:074D.000F failed with error -119 [ 384.471027][ T8011] usb 2-1: USB disconnect, device number 13 [ 384.686098][ T8010] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 384.694566][T10585] fido_id[10585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 384.895387][ T8010] usb 5-1: Using ep0 maxpacket: 8 [ 384.926134][ T8010] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.986833][ T8010] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.053299][ T8010] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.085192][ T8010] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 385.113960][T10597] loop5: detected capacity change from 0 to 128 [ 385.152549][ T8010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.188888][T10597] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 385.218986][ T8010] usb 5-1: config 0 descriptor?? [ 385.317859][T10597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.374193][T10602] netlink: 'syz.1.2152': attribute type 8 has an invalid length. [ 385.670877][ T8010] wacom 0003:056A:00CC.0010: unknown main item tag 0x1 [ 385.718181][ T8010] wacom 0003:056A:00CC.0010: unbalanced collection at end of report description [ 385.765653][ T8010] wacom 0003:056A:00CC.0010: parse failed [ 385.813180][ T8010] wacom: probe of 0003:056A:00CC.0010 failed with error -22 [ 385.934373][ T8010] usb 5-1: USB disconnect, device number 20 [ 386.251450][T10624] input: syz1 as /devices/virtual/input/input25 [ 386.346422][T10609] loop0: detected capacity change from 0 to 32768 [ 386.379806][T10609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2154 (10609) [ 386.457433][T10609] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 386.500454][T10626] device-mapper: table: 248:0: verity: Data device is too small (-EINVAL) [ 386.531230][T10609] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 386.600289][T10609] BTRFS info (device loop0): setting nodatasum [ 386.619696][T10626] device-mapper: ioctl: error adding target to table [ 386.647666][T10609] BTRFS info (device loop0): force zlib compression, level 3 [ 386.694492][T10609] BTRFS info (device loop0): turning on flush-on-commit [ 386.748522][T10609] BTRFS info (device loop0): max_inline at 4096 [ 386.792320][T10609] BTRFS info (device loop0): using free space tree [ 387.020758][T10609] BTRFS info (device loop0): enabling ssd optimizations [ 387.129622][ T26] audit: type=1800 audit(1793505524.938:83): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2154" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 387.650693][T10669] loop1: detected capacity change from 0 to 2048 [ 387.712824][ T4275] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.792501][T10669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 387.842724][T10669] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.039589][T10680] loop4: detected capacity change from 0 to 1024 [ 388.125272][T10683] loop2: detected capacity change from 0 to 512 [ 388.173600][T10683] EXT4-fs: Ignoring removed nobh option [ 388.286361][T10683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 388.311473][T10683] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.356853][T10683] EXT4-fs (loop2): shut down requested (2) [ 388.533523][ T4606] EXT4-fs (loop2): unmounting filesystem. [ 388.549433][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 388.802619][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 389.036839][T10701] loop2: detected capacity change from 0 to 64 [ 389.229432][T10707] loop4: detected capacity change from 0 to 128 [ 389.300630][T10707] EXT4-fs: Ignoring removed i_version option [ 389.373389][T10707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 389.432138][T10707] ext4 filesystem being mounted at /449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 389.474907][T10716] loop1: detected capacity change from 0 to 512 [ 389.549280][T10716] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2188: inode #1: comm syz.1.2188: iget: illegal inode # [ 389.632025][T10716] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2188: error while reading EA inode 1 err=-117 [ 389.696091][T10716] EXT4-fs (loop1): 1 orphan inode deleted [ 389.735987][T10716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 389.815053][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 389.829877][T10716] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2188: invalid indirect mapped block 234881024 (level 0) [ 390.120637][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 390.332950][ T26] audit: type=1807 audit(1793505528.138:84): action=measure res=1 [ 390.349943][T10734] ima: policy update completed [ 390.377223][ T26] audit: type=1802 audit(1793505528.188:85): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.2199" res=1 errno=0 [ 390.800558][ T26] audit: type=1800 audit(1793505528.608:86): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52928 res=0 errno=0 [ 390.878990][ T26] audit: type=1800 audit(1793505528.638:87): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52951 res=0 errno=0 [ 391.061846][ T6778] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 391.075382][T10764] loop1: detected capacity change from 0 to 256 [ 391.089382][ T26] audit: type=1800 audit(1793505528.898:88): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37272 res=0 errno=0 [ 391.135499][T10764] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 391.266763][ T6778] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 391.315196][ T6778] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 391.366309][ T6778] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 391.418040][ T26] audit: type=1800 audit(1793505529.228:89): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2213" name="rebind" dev="sysfs" ino=62346 res=0 errno=0 [ 391.442913][ T6778] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 391.489803][ T6778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 391.544458][ T6778] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 391.588846][ T6778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.631259][ T6778] usb 5-1: Product: syz [ 391.650654][ T6778] usb 5-1: Manufacturer: syz [ 391.671413][ T6778] usb 5-1: SerialNumber: syz [ 391.703622][ T26] audit: type=1800 audit(1793505529.518:90): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185128 res=0 errno=0 [ 391.743118][T10756] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.802036][T10756] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.861877][T10756] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.869117][T10756] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.888013][ T26] audit: type=1800 audit(1793505529.548:91): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=185171 res=0 errno=0 [ 391.978881][T10780] loop0: detected capacity change from 0 to 128 [ 391.988381][ T6778] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 392.022163][ T6778] keyspan 5-1:1.0: unsupported endpoint type 0 [ 392.039589][ T26] audit: type=1800 audit(1793505529.568:92): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=185135 res=0 errno=0 [ 392.093595][ T6778] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 392.101997][T10780] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 392.176982][ T6778] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 392.197314][T10780] hpfs: filesystem error: improperly stopped [ 392.217418][ T26] audit: type=1800 audit(1793505529.568:93): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=185136 res=0 errno=0 [ 392.252978][T10780] hpfs: You really don't want any checks? You are crazy... [ 392.263289][ T6778] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 392.311465][T10780] hpfs: hpfs_map_sector(): read error [ 392.324126][ T6778] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 392.366437][ T26] audit: type=1800 audit(1793505529.888:94): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0 [ 392.386392][T10780] hpfs: code page support is disabled [ 392.400709][T10786] loop1: detected capacity change from 0 to 2048 [ 392.428607][ T6778] usb 5-1: USB disconnect, device number 21 [ 392.438082][T10780] hpfs: hpfs_map_4sectors(): unaligned read [ 392.468815][T10780] hpfs: hpfs_map_4sectors(): unaligned read [ 392.491782][T10786] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 392.514403][ T6778] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 392.534833][T10780] hpfs: filesystem error: unable to find root dir [ 392.548008][ T26] audit: type=1800 audit(1793505529.948:95): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37165 res=0 errno=0 [ 392.591175][ T6778] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 392.610615][T10786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.660272][ T6778] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 392.677403][ T26] audit: type=1800 audit(1793505529.948:96): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52828 res=0 errno=0 [ 392.733921][ T6778] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 392.758698][ T6778] keyspan 5-1:1.0: device disconnected [ 392.767629][ T26] audit: type=1800 audit(1793505529.958:97): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52851 res=0 errno=0 [ 392.905667][ T26] audit: type=1800 audit(1793505530.048:98): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2219" name="protocol" dev="sysfs" ino=175995 res=0 errno=0 [ 393.050686][ T26] audit: type=1800 audit(1793505530.228:99): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=185157 res=0 errno=0 [ 393.081728][ T8010] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 393.180652][ T26] audit: type=1800 audit(1793505530.238:100): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=185158 res=0 errno=0 [ 393.295513][ T8010] usb 3-1: not running at top speed; connect to a high speed hub [ 393.314044][ T26] audit: type=1800 audit(1793505530.238:101): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=185137 res=0 errno=0 [ 393.362534][ T8010] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.421237][ T8010] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 393.453843][ T26] audit: type=1800 audit(1793505530.238:102): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=185159 res=0 errno=0 [ 393.490049][ T8010] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 393.525620][ T8010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.589042][ T8010] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 393.638066][ T8010] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 393.691966][ T8010] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 393.752360][ T8010] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 393.807239][ T8010] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 393.876173][ T8010] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 394.058195][T10810] loop0: detected capacity change from 0 to 4096 [ 394.135285][T10810] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 394.421601][T10815] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 394.528085][T10815] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 394.622454][ T6778] usb 3-1: USB disconnect, device number 11 [ 394.662586][ T6778] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 394.748521][ T6778] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 394.818476][ T6778] keyspan 3-1:1.0: device disconnected [ 394.904292][ T4387] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 394.944127][ T4275] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 394.950454][ T4275] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 395.008249][ T4275] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 395.058404][ T4387] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 395.108813][ T4275] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 395.376628][T10827] loop0: detected capacity change from 0 to 512 [ 395.502257][T10827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 395.610438][T10827] EXT4-fs error (device loop0): ext4_readdir:223: inode #2: comm syz.0.2237: path /495/file1: directory fails checksum at offset 0 [ 395.670576][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 395.792786][T10835] loop1: detected capacity change from 0 to 7 [ 395.800182][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.810415][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 395.863981][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.873262][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 395.902028][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.911269][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 395.925774][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 395.980784][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.990050][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.092160][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.101484][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.188079][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.197845][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.266036][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.275325][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.285515][ T6047] ldm_validate_partition_table(): Disk read failed. [ 396.353341][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.362684][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.397788][T10847] kernel read not supported for file bus/pci/00/00.0 (pid: 10847 comm: syz.0.2249) [ 396.427422][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.436711][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.500681][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.509956][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.588829][ T6047] Dev loop1: unable to read RDB block 0 [ 396.606726][ T6047] loop1: unable to read partition table [ 396.627638][ T6047] loop1: partition table beyond EOD, truncated [ 397.504278][T10854] loop4: detected capacity change from 0 to 32768 [ 397.540309][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 397.540321][ T26] audit: type=1800 audit(1793505535.348:133): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37593 res=0 errno=0 [ 397.580358][T10854] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2253 (10854) [ 397.691281][T10854] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 397.710341][T10873] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 397.765607][ T26] audit: type=1800 audit(1793505535.498:134): pid=10873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2259" name="register" dev="sysfs" ino=69490 res=0 errno=0 [ 397.798696][T10854] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 397.879227][T10854] BTRFS info (device loop4): use zlib compression, level 3 [ 397.941726][T10854] BTRFS info (device loop4): using free space tree [ 397.948356][ T26] audit: type=1800 audit(1793505535.498:135): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185704 res=0 errno=0 [ 397.985797][T10863] loop2: detected capacity change from 0 to 32768 [ 398.097670][ T26] audit: type=1800 audit(1793505535.848:136): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37379 res=0 errno=0 [ 398.130893][T10863] XFS (loop2): Mounting V5 Filesystem [ 398.177427][T10854] BTRFS info (device loop4): enabling ssd optimizations [ 398.298585][T10907] usbcore.quirks: string doesn't fit in 127 chars. [ 398.325187][ T26] audit: type=1800 audit(1793505536.078:137): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2263" name="quirks" dev="sysfs" ino=7320 res=0 errno=0 [ 398.362181][T10863] XFS (loop2): Ending clean mount [ 398.526912][ T4279] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 398.598261][ T26] audit: type=1800 audit(1793505536.408:138): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=40268 res=0 errno=0 [ 398.668955][ T4606] XFS (loop2): Unmounting Filesystem [ 398.771825][ T26] audit: type=1800 audit(1793505536.438:139): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=39198 res=0 errno=0 [ 398.933993][ T26] audit: type=1800 audit(1793505536.438:140): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=35753 res=0 errno=0 [ 399.099100][ T26] audit: type=1800 audit(1793505536.438:141): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=40937 res=0 errno=0 [ 399.265694][ T26] audit: type=1800 audit(1793505536.438:142): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevadm" name="uevent" dev="sysfs" ino=42329 res=0 errno=0 [ 399.694484][T10924] device macvlan0 entered promiscuous mode [ 399.743905][T10924] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 399.802217][T10926] input: syz1 as /devices/virtual/input/input27 [ 399.810679][T10924] netlink: 'syz.4.2266': attribute type 2 has an invalid length. [ 400.502868][T10947] loop1: detected capacity change from 0 to 1024 [ 400.590025][T10949] loop4: detected capacity change from 0 to 128 [ 400.911073][T10953] loop4: detected capacity change from 0 to 16 [ 400.948154][T10953] erofs: (device loop4): mounted with root inode @ nid 36. [ 401.013694][T10953] erofs: (device loop4): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 401.254074][ T30] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.035251][T10984] tap0: tun_chr_ioctl cmd 1074025677 [ 402.040822][T10984] tap0: linktype set to 825 [ 402.311215][T10963] loop4: detected capacity change from 0 to 32768 [ 402.393884][T10993] loop2: detected capacity change from 0 to 512 [ 402.439287][T10963] XFS (loop4): Mounting V5 Filesystem [ 402.490079][T11002] tipc: Enabling of bearer rejected, already enabled [ 402.541406][T10993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 402.564030][T10963] XFS (loop4): Ending clean mount [ 402.626197][T10993] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.648876][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 402.648888][ T26] audit: type=1800 audit(1793505540.458:224): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2289" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 402.859265][ T4279] XFS (loop4): Unmounting Filesystem [ 402.987092][T11016] device-mapper: ioctl: Invalid ioctl structure: name a, dev 635f796d00000000 [ 403.066183][ T4606] EXT4-fs (loop2): unmounting filesystem. [ 404.301437][ T26] audit: type=1800 audit(1793505542.108:225): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2322" name="uevent" dev="sysfs" ino=14730 res=0 errno=0 [ 404.426446][ T26] audit: type=1800 audit(1793505542.148:226): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14730 res=0 errno=0 [ 404.483206][T11056] syz.1.2323 (11056): drop_caches: 2 [ 404.691481][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2327'. [ 405.280421][T11056] syz.1.2323 (11056): drop_caches: 2 [ 405.291938][T11075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2332'. [ 405.469183][T11081] loop4: detected capacity change from 0 to 512 [ 405.569354][T11081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 405.603394][ T26] audit: type=1800 audit(1793505543.418:227): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2335" name="bConfigurationValue" dev="sysfs" ino=47849 res=0 errno=0 [ 405.660371][T11081] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.673866][T11087] loop0: detected capacity change from 0 to 1024 [ 405.730750][T11087] EXT4-fs: Ignoring removed nobh option [ 405.788154][T11087] EXT4-fs: Ignoring removed orlov option [ 405.836219][T11087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.936583][T11087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 405.960366][T11094] loop5: detected capacity change from 0 to 512 [ 405.999979][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 406.152755][T11097] program syz.2.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.191062][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 406.512573][ T26] audit: type=1800 audit(1793505544.328:228): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52778 res=0 errno=0 [ 406.598374][ T26] audit: type=1800 audit(1793505544.348:229): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52801 res=0 errno=0 [ 406.773242][ T4347] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 406.973826][ T4347] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 407.000690][ T4347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.041810][ T26] audit: type=1800 audit(1793505544.848:230): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186258 res=0 errno=0 [ 407.077586][ T4347] usb-storage 2-1:1.0: USB Mass Storage device detected [ 407.155789][ T26] audit: type=1800 audit(1793505544.848:231): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=186298 res=0 errno=0 [ 407.259083][ T26] audit: type=1800 audit(1793505544.878:232): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=186265 res=0 errno=0 [ 407.369635][ T26] audit: type=1800 audit(1793505544.878:233): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=186266 res=0 errno=0 [ 407.487421][ T4347] scsi host1: usb-storage 2-1:1.0 [ 407.686532][ T4347] usb 2-1: USB disconnect, device number 14 [ 407.746655][ T6778] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 407.961764][ T6778] usb 5-1: Using ep0 maxpacket: 16 [ 407.978475][ T6778] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 408.017620][ T6778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.068479][ T6778] usb 5-1: config 0 has no interface number 0 [ 408.097905][ T6778] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 408.153964][ T6778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.184298][ T6778] usb 5-1: Product: syz [ 408.217448][ T6778] usb 5-1: Manufacturer: syz [ 408.254173][ T6778] usb 5-1: SerialNumber: syz [ 408.276407][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 408.276420][ T26] audit: type=1800 audit(1793505547.078:258): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186519 res=0 errno=0 [ 408.313617][ T6778] usb 5-1: config 0 descriptor?? [ 408.379251][T11149] loop2: detected capacity change from 0 to 256 [ 408.455813][ T26] audit: type=1800 audit(1793505547.088:259): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=186562 res=0 errno=0 [ 408.510920][T11152] Bluetooth: hci0: load_link_keys: too big key_count value 49152 [ 408.552197][ T6778] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 408.573802][ T6778] usb 5-1: No valid video chain found. [ 408.620954][ T6778] usb 5-1: USB disconnect, device number 22 [ 408.650504][ T26] audit: type=1800 audit(1793505547.088:260): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=186526 res=0 errno=0 [ 408.801286][ T26] audit: type=1800 audit(1793505547.088:261): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=186527 res=0 errno=0 [ 408.912178][ T26] audit: type=1800 audit(1793505547.088:262): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=186548 res=0 errno=0 [ 408.981790][ T8012] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 409.036817][ T26] audit: type=1800 audit(1793505547.088:263): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=186549 res=0 errno=0 [ 409.174201][ T26] audit: type=1800 audit(1793505547.088:264): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=186528 res=0 errno=0 [ 409.196600][ T8012] usb 6-1: Using ep0 maxpacket: 32 [ 409.223013][ T8012] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 409.295247][ T8012] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.338729][ T26] audit: type=1800 audit(1793505547.088:265): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=186550 res=0 errno=0 [ 409.396823][ T8012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 409.440948][ T8012] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 409.462032][T11174] vivid-000: disconnect [ 409.479504][ T26] audit: type=1800 audit(1793505547.168:266): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186571 res=0 errno=0 [ 409.511932][T11172] vivid-000: reconnect [ 409.517624][ T8012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.571225][ T8012] usb 6-1: config 0 descriptor?? [ 409.625606][ T26] audit: type=1800 audit(1793505547.518:267): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52978 res=0 errno=0 [ 410.037259][ T8012] logitech 0003:046D:C24F.0011: unknown main item tag 0x2 [ 410.075080][ T8012] logitech 0003:046D:C24F.0011: unknown main item tag 0x0 [ 410.105549][ T8012] logitech 0003:046D:C24F.0011: unknown main item tag 0x0 [ 410.143158][ T8012] input: HID 046d:c24f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C24F.0011/input/input28 [ 410.360189][ T6778] logitech 0003:046D:C24F.0011: implement() called with too large value 1 (n: 0)! (kworker/0:20) [ 410.440172][ T8012] logitech 0003:046D:C24F.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c24f] on usb-dummy_hcd.5-1/input0 [ 410.508176][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 245 (n: 0)! (kworker/0:27) [ 410.581963][T11196] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 410.588979][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 248 (n: 0)! (kworker/0:27) [ 410.599682][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 129 (n: 0)! (kworker/0:27) [ 410.610365][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 132 (n: 0)! (kworker/0:27) [ 410.621045][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 3 (n: 0)! (kworker/0:27) [ 410.788861][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 248 (n: 0)! (kworker/0:27) [ 410.799595][ T8012] logitech 0003:046D:C24F.0011: implement() called with too large value 18 (n: 0)! (kworker/0:27) [ 410.878021][ T8012] logitech 0003:046D:C24F.0011: Force feedback support for Logitech Gaming Wheels [ 410.926317][ T8012] usb 6-1: USB disconnect, device number 14 [ 411.395142][T11207] fido_id[11207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 412.188043][T11236] loop5: detected capacity change from 0 to 2048 [ 412.319160][T11236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.840806][T11253] loop4: detected capacity change from 0 to 1024 [ 412.930821][T11255] loop2: detected capacity change from 0 to 64 [ 412.957231][T11253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 412.971263][T11251] loop1: detected capacity change from 0 to 4096 [ 413.059596][T11251] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 413.178502][T11261] WARNING! power/level is deprecated; use power/control instead [ 413.223262][T11251] ntfs3: loop1: ino=19, mi_enum_attr [ 413.235648][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 413.268535][T11251] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 413.322994][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 413.323005][ T26] audit: type=1800 audit(1793505552.138:303): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2407" name="level" dev="sysfs" ino=48053 res=0 errno=0 [ 413.433784][ T4606] hfs: node 4:3 still has 1 user(s)! [ 413.491544][T11265] loop0: detected capacity change from 0 to 64 [ 413.586004][T11267] loop4: detected capacity change from 0 to 512 [ 413.706375][T11267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 413.819367][T11267] EXT4-fs (loop4): 1 truncate cleaned up [ 413.872408][T11267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 413.959891][T11267] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 414.213376][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 414.346676][T11287] program syz.2.2420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.409444][T11290] loop4: detected capacity change from 0 to 1024 [ 414.496837][T11290] EXT4-fs: inline encryption not supported [ 414.579215][T11290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 414.663244][T11298] loop1: detected capacity change from 0 to 512 [ 414.779906][T11298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 414.823632][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 414.835436][T11298] System zones: 0-2, 18-18, 34-34 [ 414.941244][T11298] EXT4-fs (loop1): 1 orphan inode deleted [ 414.979063][T11298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 415.045119][T11298] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.263653][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 415.996584][T11341] ALSA: mixer_oss: invalid OSS volume '' [ 416.014431][T11341] ALSA: mixer_oss: invalid OSS volume '' [ 416.030450][T11341] ALSA: mixer_oss: invalid OSS volume '' [ 416.048108][T11341] ALSA: mixer_oss: invalid OSS volume '' [ 416.330361][T11348] loop2: detected capacity change from 0 to 4096 [ 416.390675][T11348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 416.470144][T11348] EXT4-fs (loop2): shut down requested (2) [ 416.659282][ T4606] EXT4-fs (loop2): unmounting filesystem. [ 416.777606][ T26] audit: type=1400 audit(1793505555.588:304): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=11357 comm="syz.0.2449" name="foo" offset=76 [ 417.106535][T11367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2453'. [ 417.187874][ T26] audit: type=1800 audit(1793505555.998:305): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2456" name="path_cost" dev="sysfs" ino=156731 res=0 errno=0 [ 417.618498][T11385] block nbd1: NBD_DISCONNECT [ 417.639190][T11385] block nbd1: Send disconnect failed -32 [ 417.665131][ T26] audit: type=1800 audit(1793505556.478:306): pid=11388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2464" name="control" dev="sysfs" ino=14748 res=0 errno=0 [ 417.723323][T11384] block nbd1: Disconnected due to user request. [ 417.759586][T11384] block nbd1: shutting down sockets [ 417.798423][ T26] audit: type=1800 audit(1793505556.598:307): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52728 res=0 errno=0 [ 417.930833][ T26] audit: type=1800 audit(1793505556.608:308): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52751 res=0 errno=0 [ 418.041788][ T5072] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 418.069156][ T26] audit: type=1800 audit(1793505556.878:309): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2468" name="quirks" dev="sysfs" ino=7320 res=0 errno=0 [ 418.275354][ T5072] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 418.317115][ T26] audit: type=1800 audit(1793505557.128:310): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2472" name="vlan_protocol" dev="sysfs" ino=91872 res=0 errno=0 [ 418.351767][ T5072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.399824][ T5072] usb 1-1: config 0 descriptor?? [ 418.446023][ T26] audit: type=1800 audit(1793505557.208:311): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187526 res=0 errno=0 [ 418.557389][ T26] audit: type=1800 audit(1793505557.208:312): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=187566 res=0 errno=0 [ 418.628959][T11414] loop1: detected capacity change from 0 to 512 [ 418.683213][T11414] EXT4-fs (loop1): orphan cleanup on readonly fs [ 418.708073][ T26] audit: type=1800 audit(1793505557.208:313): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=187533 res=0 errno=0 [ 418.741369][T11414] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 418.819737][ T26] audit: type=1800 audit(1793505557.208:314): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=187534 res=0 errno=0 [ 418.854914][T11414] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 418.868415][ T5072] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 418.886743][T11414] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.2475: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 418.914181][ T5072] [drm] Initialized udl on minor 2 [ 418.938665][ T26] audit: type=1800 audit(1793505557.208:315): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=187535 res=0 errno=0 [ 418.975422][T11414] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2475: couldn't read orphan inode 13 (err -117) [ 419.013761][T11414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 419.029643][ T26] audit: type=1800 audit(1793505557.238:316): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187575 res=0 errno=0 [ 419.086086][T11414] EXT4-fs (loop1): shut down requested (2) [ 419.117441][ T26] audit: type=1800 audit(1793505557.308:317): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2474" name="resource0" dev="sysfs" ino=81703 res=0 errno=0 [ 419.262719][ T5072] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 419.282579][ T26] audit: type=1800 audit(1793505557.658:318): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187599 res=0 errno=0 [ 419.322836][ T5072] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 419.359081][ T5072] usb 1-1: USB disconnect, device number 18 [ 419.400480][ T4347] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 419.423913][ T26] audit: type=1800 audit(1793505558.168:319): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187613 res=0 errno=0 [ 419.454592][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 419.470464][ T4347] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 419.510544][ T4347] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 420.050659][T11443] loop4: detected capacity change from 0 to 64 [ 420.378525][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2490'. [ 420.532541][ T26] audit: type=1800 audit(1793505559.348:320): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187698 res=0 errno=0 [ 420.879709][T11461] rnbd_client L125: Can't parse path ip:127v0.0.1žµÖ×@: -22 [ 421.281556][T11478] loop0: detected capacity change from 0 to 512 [ 421.335894][T11479] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 421.388309][T11479] team0: Device ipvlan2 is already an upper device of the team interface [ 421.676488][T11487] tc_dump_action: action bad kind [ 422.043639][ T6778] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 422.144316][T11500] x86: Booting SMP configuration: [ 422.167202][T11500] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 422.273192][ T6778] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.301825][ T6778] usb 3-1: config 0 has no interface number 0 [ 422.308025][ T6778] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 422.379962][ T6778] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 422.421188][ T6778] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 422.443945][T11511] mtrr: base(0x12000) is not aligned on a size(0x6000) boundary [ 422.461750][ T6778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.511341][ T6778] usb 3-1: config 0 descriptor?? [ 422.548665][T11489] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.572582][ T6778] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 422.779310][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 422.808943][ T5072] usb 3-1: USB disconnect, device number 12 [ 422.834734][T11522] program syz.4.2524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.388583][ T5072] hid-generic 0005:046D:C082.0012: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 423.619897][T11544] fido_id[11544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 423.691478][T11537] zswap: compressor not available [ 423.916263][T11555] loop2: detected capacity change from 0 to 256 [ 423.973504][T11555] exfat: Deprecated parameter 'namecase' [ 423.992187][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 423.992202][ T26] audit: type=1800 audit(1793505562.798:338): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37379 res=0 errno=0 [ 424.050655][T11555] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 424.545783][ T26] audit: type=1800 audit(1793505563.348:339): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35244 res=0 errno=0 [ 424.813950][T11583] loop5: detected capacity change from 0 to 1024 [ 424.869957][ T26] audit: type=1800 audit(1793505563.678:340): pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37700 res=0 errno=0 [ 425.088085][T11595] Invalid ELF header magic: != ELF [ 425.100343][ T26] audit: type=1800 audit(1793505563.908:341): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2555" name="rescan" dev="sysfs" ino=1585 res=0 errno=0 [ 425.313096][ T26] audit: type=1800 audit(1793505564.128:342): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2556" name="product" dev="sysfs" ino=47876 res=0 errno=0 [ 425.716150][T11614] ================================================================== [ 425.716167][T11614] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 425.716213][T11614] Write of size 4 at addr ffffc900047391e0 by task syz.4.2563/11614 [ 425.716235][T11614] [ 425.716242][T11614] CPU: 0 PID: 11614 Comm: syz.4.2563 Not tainted syzkaller #0 [ 425.716265][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 425.716280][T11614] Call Trace: [ 425.716289][T11614] [ 425.716299][T11614] dump_stack_lvl+0x188/0x24e [ 425.716337][T11614] ? sys_imageblit+0x1ba8/0x25d0 [ 425.716374][T11614] ? show_regs_print_info+0x12/0x12 [ 425.716409][T11614] ? load_image+0x410/0x410 [ 425.716439][T11614] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 425.716473][T11614] ? __virt_addr_valid+0xbf/0x540 [ 425.716508][T11614] ? sys_imageblit+0x1ba8/0x25d0 [ 425.716542][T11614] print_report+0xa8/0x210 [ 425.716574][T11614] kasan_report+0x10b/0x140 [ 425.716613][T11614] ? sys_imageblit+0x1ba8/0x25d0 [ 425.716654][T11614] sys_imageblit+0x1ba8/0x25d0 [ 425.716699][T11614] ? sys_copyarea+0x2530/0x2530 [ 425.716733][T11614] ? __lock_acquire+0x142d/0x7ea0 [ 425.716777][T11614] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 425.716809][T11614] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 425.716843][T11614] soft_cursor+0x9fd/0xc30 [ 425.716887][T11614] bit_cursor+0x16b5/0x1f40 [ 425.716934][T11614] ? bit_clear_margins+0x550/0x550 [ 425.716973][T11614] ? get_color+0x2d8/0x440 [ 425.717002][T11614] ? bit_clear_margins+0x550/0x550 [ 425.717036][T11614] ? fbcon_cursor+0x42c/0x640 [ 425.717068][T11614] hide_cursor+0x7f/0x320 [ 425.717114][T11614] do_con_write+0x1dd/0x6c60 [ 425.717173][T11614] ? vt_resize+0xc0/0xc0 [ 425.717199][T11614] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 425.717230][T11614] ? _raw_spin_unlock+0x40/0x40 [ 425.717260][T11614] ? __wake_up_common+0x5b/0x4d0 [ 425.717309][T11614] ? __mutex_trylock_common+0x15c/0x260 [ 425.717341][T11614] con_put_char+0x7f/0xc0 [ 425.717366][T11614] ? con_write+0x40/0x40 [ 425.717389][T11614] ? rcu_is_watching+0x11/0xa0 [ 425.717425][T11614] ? trace_contention_end+0x5f/0x170 [ 425.717455][T11614] ? con_write+0x40/0x40 [ 425.717479][T11614] tty_put_char+0xc5/0x150 [ 425.717503][T11614] ? do_SAK_work+0x20/0x20 [ 425.717528][T11614] ? n_tty_receive_buf_common+0xd51/0x1470 [ 425.717560][T11614] __process_echoes+0x1b1/0x8f0 [ 425.717596][T11614] n_tty_receive_buf_common+0xda0/0x1470 [ 425.717642][T11614] ? paste_selection+0x1d7/0x540 [ 425.717673][T11614] paste_selection+0x33a/0x540 [ 425.717708][T11614] ? set_selection_kernel+0x17a0/0x17a0 [ 425.717740][T11614] ? do_task_dead+0xd0/0xd0 [ 425.717772][T11614] ? __might_fault+0xa6/0x120 [ 425.717798][T11614] ? __might_fault+0xc2/0x120 [ 425.717822][T11614] ? __might_fault+0xa6/0x120 [ 425.717850][T11614] ? tioclinux+0x222/0x3e0 [ 425.717871][T11614] vt_ioctl+0x441/0x1ca0 [ 425.717900][T11614] ? __vt_event_wait+0x260/0x260 [ 425.717938][T11614] ? __fget_files+0x28/0x460 [ 425.717966][T11614] ? tty_jobctrl_ioctl+0x164/0xb00 [ 425.717994][T11614] tty_ioctl+0x7e6/0xba0 [ 425.718009][T11614] ? security_file_ioctl+0x7c/0xa0 [ 425.718036][T11614] ? tty_get_icount+0xa0/0xa0 [ 425.718052][T11614] __se_sys_ioctl+0xfa/0x170 [ 425.718078][T11614] do_syscall_64+0x4c/0xa0 [ 425.718109][T11614] ? clear_bhb_loop+0x60/0xb0 [ 425.718134][T11614] ? clear_bhb_loop+0x60/0xb0 [ 425.718160][T11614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.718184][T11614] RIP: 0033:0x7f1a9b19f559 [ 425.718199][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.718214][T11614] RSP: 002b:00007f1a9c0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.718232][T11614] RAX: ffffffffffffffda RBX: 00007f1a9b425fa0 RCX: 00007f1a9b19f559 [ 425.718246][T11614] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 425.718257][T11614] RBP: 00007f1a9b236b50 R08: 0000000000000000 R09: 0000000000000000 [ 425.718268][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.718278][T11614] R13: 00007f1a9b426038 R14: 00007f1a9b425fa0 R15: 00007ffd22943a28 [ 425.718298][T11614] [ 425.718304][T11614] [ 425.718307][T11614] The buggy address belongs to a vmalloc virtual mapping [ 425.718321][T11614] Memory state around the buggy address: [ 425.718330][T11614] ffffc90004739080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.718341][T11614] ffffc90004739100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.718352][T11614] >ffffc90004739180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.718361][T11614] ^ [ 425.718370][T11614] ffffc90004739200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.718381][T11614] ffffc90004739280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.718390][T11614] ================================================================== [ 425.724855][T11614] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 425.724872][T11614] CPU: 0 PID: 11614 Comm: syz.4.2563 Not tainted syzkaller #0 [ 425.724897][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 425.724915][T11614] Call Trace: [ 425.724922][T11614] [ 425.724931][T11614] dump_stack_lvl+0x188/0x24e [ 425.724973][T11614] ? memcpy+0x3c/0x60 [ 425.724998][T11614] ? show_regs_print_info+0x12/0x12 [ 425.725035][T11614] ? load_image+0x410/0x410 [ 425.725072][T11614] panic+0x2d3/0x710 [ 425.725108][T11614] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 425.725147][T11614] ? bpf_jit_dump+0xd0/0xd0 [ 425.725177][T11614] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 425.725208][T11614] ? _raw_spin_unlock+0x40/0x40 [ 425.725240][T11614] check_panic_on_warn+0x80/0xa0 [ 425.725271][T11614] ? sys_imageblit+0x1ba8/0x25d0 [ 425.725307][T11614] end_report+0x66/0x110 [ 425.725342][T11614] kasan_report+0x118/0x140 [ 425.725380][T11614] ? sys_imageblit+0x1ba8/0x25d0 [ 425.725420][T11614] sys_imageblit+0x1ba8/0x25d0 [ 425.725466][T11614] ? sys_copyarea+0x2530/0x2530 [ 425.725501][T11614] ? __lock_acquire+0x142d/0x7ea0 [ 425.725545][T11614] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 425.725578][T11614] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 425.725613][T11614] soft_cursor+0x9fd/0xc30 [ 425.725653][T11614] bit_cursor+0x16b5/0x1f40 [ 425.725699][T11614] ? bit_clear_margins+0x550/0x550 [ 425.725739][T11614] ? get_color+0x2d8/0x440 [ 425.725768][T11614] ? bit_clear_margins+0x550/0x550 [ 425.725803][T11614] ? fbcon_cursor+0x42c/0x640 [ 425.725835][T11614] hide_cursor+0x7f/0x320 [ 425.725872][T11614] do_con_write+0x1dd/0x6c60 [ 425.725930][T11614] ? vt_resize+0xc0/0xc0 [ 425.725955][T11614] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 425.725986][T11614] ? _raw_spin_unlock+0x40/0x40 [ 425.726015][T11614] ? __wake_up_common+0x5b/0x4d0 [ 425.726061][T11614] ? __mutex_trylock_common+0x15c/0x260 [ 425.726102][T11614] con_put_char+0x7f/0xc0 [ 425.726125][T11614] ? con_write+0x40/0x40 [ 425.726148][T11614] ? rcu_is_watching+0x11/0xa0 [ 425.726182][T11614] ? trace_contention_end+0x5f/0x170 [ 425.726213][T11614] ? con_write+0x40/0x40 [ 425.726237][T11614] tty_put_char+0xc5/0x150 [ 425.726261][T11614] ? do_SAK_work+0x20/0x20 [ 425.726285][T11614] ? n_tty_receive_buf_common+0xd51/0x1470 [ 425.726317][T11614] __process_echoes+0x1b1/0x8f0 [ 425.726353][T11614] n_tty_receive_buf_common+0xda0/0x1470 [ 425.726398][T11614] ? paste_selection+0x1d7/0x540 [ 425.726429][T11614] paste_selection+0x33a/0x540 [ 425.726465][T11614] ? set_selection_kernel+0x17a0/0x17a0 [ 425.726495][T11614] ? do_task_dead+0xd0/0xd0 [ 425.726527][T11614] ? __might_fault+0xa6/0x120 [ 425.726553][T11614] ? __might_fault+0xc2/0x120 [ 425.726578][T11614] ? __might_fault+0xa6/0x120 [ 425.726605][T11614] ? tioclinux+0x222/0x3e0 [ 425.726628][T11614] vt_ioctl+0x441/0x1ca0 [ 425.726658][T11614] ? __vt_event_wait+0x260/0x260 [ 425.726693][T11614] ? __fget_files+0x28/0x460 [ 425.726733][T11614] ? tty_jobctrl_ioctl+0x164/0xb00 [ 425.726771][T11614] tty_ioctl+0x7e6/0xba0 [ 425.726793][T11614] ? security_file_ioctl+0x7c/0xa0 [ 425.726830][T11614] ? tty_get_icount+0xa0/0xa0 [ 425.726853][T11614] __se_sys_ioctl+0xfa/0x170 [ 425.726890][T11614] do_syscall_64+0x4c/0xa0 [ 425.726924][T11614] ? clear_bhb_loop+0x60/0xb0 [ 425.726957][T11614] ? clear_bhb_loop+0x60/0xb0 [ 425.726993][T11614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.727026][T11614] RIP: 0033:0x7f1a9b19f559 [ 425.727045][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.727065][T11614] RSP: 002b:00007f1a9c0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.727099][T11614] RAX: ffffffffffffffda RBX: 00007f1a9b425fa0 RCX: 00007f1a9b19f559 [ 425.727118][T11614] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 425.727134][T11614] RBP: 00007f1a9b236b50 R08: 0000000000000000 R09: 0000000000000000 [ 425.727149][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.727163][T11614] R13: 00007f1a9b426038 R14: 00007f1a9b425fa0 R15: 00007ffd22943a28 [ 425.727191][T11614] [ 425.727784][T11614] Kernel Offset: disabled [ 426.614553][T11614] Rebooting in 86400 seconds..