last executing test programs: 1m13.544160602s ago: executing program 2 (id=172): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x880, &(0x7f00000000c0)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) open_by_handle_at(r0, &(0x7f0000000180)=@reiserfs_2={0x8, 0x2, {0x5}}, 0x88000) 1m13.224391981s ago: executing program 2 (id=175): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file0\x00') 1m12.313431887s ago: executing program 2 (id=180): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040), 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1m12.035273846s ago: executing program 2 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) 1m11.632214505s ago: executing program 2 (id=183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) 1m11.070263622s ago: executing program 2 (id=188): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 1m10.702124331s ago: executing program 32 (id=188): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 3.588781043s ago: executing program 1 (id=687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 3.338145752s ago: executing program 1 (id=691): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 3.327733162s ago: executing program 4 (id=692): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0008b0cf8098a954f0c13d46c5f2da99dd78517bdc8c78047b090ec8e43f7def3d6e7ff57769de041cb1ee36eb9ef08355f53fb91f02fc63278f3613aa6fba7e9b000800008a4f6d9dbe20a5c5b893c3751e0d41a772d4e6963860d07e3f3f06b10f3eeb3aa2324f6e3d348cf3fa4536d200214110447005e899317ac49bdb087c7ee9c6a7f01bf8f94692bfa45daf2423901aa20a1e0b8736e57abc12ff197cc72bc4b25cfc4ae212b63861ba8545d2"], 0x1, 0x14d1, &(0x7f00000015c0)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x802046, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.186042122s ago: executing program 1 (id=695): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x37, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) pwrite64(r0, &(0x7f0000000600)="f2305635c9d3", 0x6, 0x9) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 3.074400271s ago: executing program 4 (id=697): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xee01, r1, 0xffffffffffffffff) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x7, 0x80400000000000}) 2.75834477s ago: executing program 4 (id=702): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000005b00), r1}}, 0x18) 2.672525799s ago: executing program 0 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = gettid() pause() rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)={0x0, 0x0, 0xfffffffb}) 2.455244628s ago: executing program 0 (id=706): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x6, 0x36f, &(0x7f0000000440)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x5e02) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) 2.330431588s ago: executing program 3 (id=707): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000186900000000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 1.982384267s ago: executing program 3 (id=708): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60940, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setown(r1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.982175957s ago: executing program 0 (id=709): r0 = socket$inet6(0xa, 0x3, 0x7) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010062) 1.929104707s ago: executing program 3 (id=710): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r2}, 0x14) 1.768095416s ago: executing program 3 (id=711): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e25, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x20009}}, 0x6, 0x1}, &(0x7f00000000c0)=0x90) 1.578306495s ago: executing program 4 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a01020000000000000000010000000900010073797a3000000000090002"], 0x2c}, 0x1, 0x60000000}, 0x0) 1.578014165s ago: executing program 3 (id=713): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVhRcVQ1VaNUQk5T8qYREtTkoVTUQa5m7z2zd87deTjedbzp7yd558z8z/POw3PuvXMuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/8ORW95xXrP4uy976Mc/vef9nz/4mbnbn/zOl24JYXL+8Y4s3HH+ia91V45/5GcHHv/mNzasefhkb14uj4dV1T+d+Z0vxFqfWR3CDzpC6E4DawezQE9+fzDW96bBENaEhUCtxNRAViJtOPy8P4RDYSFQq+pH/SEMFgJbHr7/vq9UE3f0h3BhCKGStvHLStZGfxq4qDcLDKSBG7uzwP+cytQCP+zMAnDG4puh9qKfm6zPMLJ4uQavv54l69irKx1eV0yMNM73283L3KmC3vSByTN62krVsSxKb4+j3m0r4N1W2s63edqKX6TybyinFkKV0Llj6ppt+2b2xkc6w9hYV6Oalul5fuS5z24/nfSKeR3GDowsyevwzq8/9blvPX3l3Xd98QNX3/vi86Nn2s3jhU1aTC+3SshfcyvmeYw2+TxZAW+/0rekUV+6QghffuJv/6RZvDT/H2k+/48v53jbWZc71npyKJubx0cGY+LEUDY3BwAAgBVjJew1nf3O5RPN6ivN/0fbO/4fD/nnk/lstEdD2DSfuHk4hAvmH88CR2JznxwO4a3zqcn6wOYkcDSEN8wnLqlVlZToiyVGk8CzQ3lgUxI4FgOTSeDbMXBbEvhCDMwlge0xcDQJvDcGwnT9OP54KB9H24H+GNiabcS5eBbCC0OxtWRbPVqrCgAAYInks8Oe+ruFcx3ONEOcXs71t8oQz8BumKGS1JDOYGvTqoY1dLeqobNVDbVxzzYffqnmjlY1l07D6KjPsPuzv/uz0ERp/j/efP5fWaQjHaXj/yFcNf835u7MIzO1+NbJugwAAADAGVi1+YYtzeKl+f+m9s7/j/tEugqZw4NxN8TO4RDG6wNZtZeXA9lR71V5AAAAAFaC2vH42rHw6fw2O0U7nU+X80+eZv544H/Tovl//cF3Xdesv6X5/2R75/8P1N9mnTgWe/HV4RD6CoEHYi+rgXmjMfDEe+oD+fiPxQ1wa6wqPzGhVtWtscTWGBhPAocalXioVuKC+kD+ZNUav7k2jum8RCEAAAAAZ13cHRCPy8fz/x/Zd/x9zcqV5v9bT+/8//l5cOn0/plVIazrDqEr/WHAgwPZwoAxMNiRJ346kNXVlVZ1YCCEK6oDS6t6Ml//vztdY/Dh/qyqGLjgbd997qJq4u/6Q1hXDPzi44c3VBN7k0Ct8Y/1h/CW6mjTxr/flzXekzZ+Z18Iby4EalV9si+EamO9aVX3V/LrGKRV3VsJ4bxCoFbVxkoI+wMAK1T8r3RH8cE9+2/auW1mZmr3MibiPvz+cM30zNTY9htndlQa9GlH0ue6ZYwOlMfUcDmkxKP5EkVHXr5sqJ107XeC48W+5PvxSycO5vfjd6Ge+XFO9NTdvTQd8jveXm4iFL5JvVpDHihWsvAkluqP+XvDqtC3b8/U7rFPb9u7d/f67G+72Seyv3FQ2bZan26rgcX6dg68PC4uVrJu7/W71u3Zf9Pa6eu3XTt17dQNE+Pv3LBxw8T4xo3rqqMaz/62GOrFi1WdDPXU4bM/1Dd2Fyo5G58aEhISKy0xe/PhVc0+fkrz/13N5//xUyd+8ufrMzQ6/j8SD/Nnjy8c5t8aA4faPf4/0uhofu3EgNEkMBsDsw7zAwAA8NoQd0fG3Y5xr3Xv4Ut/06xcaf4/297v/5do/f/a0vUfarTM/yWxxHij9f/TZf5r6//PNlr/P13mv7b+/6FXYf3/fbVAsklesP4/AADwWnD21v9vubx/eoGAUoaWy/unFwgoZWi5jH+7Fwg47fX/J657/JnQRGn+f1t7838L9wMAAMC54/Z/eu4tzeKl+f+h9ub/Z3/9v9Do/P/RRoHJRgsDWv8PAACAFarR+n+nhv/iY83Kleb/c+3N/+NpF511uWOtJ4eyNe1CuqbdiaHaTwYAAABgZegMY2M9beatWxl18ytv85F8KdBm6aIHLv+va5vVV5r/H21v/l/3u4w7v/7U57719JV3n7zrix+4+t4Xnx9dOP4PAAAALJ9290sAAAAAAAAAAAAAAACvvn2f+NcTzeKl3/+Hq+Yfb/T7/3jdv/j7gtfX5Y61tl7/L7+/5cP37J9fsvDBoRDeXgzsPLhzTcivzX9xMXDf1ZecX00cTEv85LH3/qqa+EQa+ODa171UTVyRBLbGRRLfkAbiVRVfWp0E4vKK/54G4vaYSwO9eeDLq7NxdKTb6teD2bbqSLfVfwyGMFwI1LbVDwazNjrSAd6RBGoD/FQaiAP8SB7oTHt1z6qsVzEwGIv+zaqsVwAAnLPit8CecM30zNR4/Aofb9/YXX8b1S1ZdqBcbVebzT+aL0125OXLhtpJd6XfRReuNd4TKtUhrC99XS1m6Zgf5dLU0mLTvb7BkFut9rZcm6638Yj6sxGNbb9xZkdPy4Ff2jrLRHfLLOtLk51ils75TdpGLW30pY0Rtblt2uhyvN8Zxsa6klzvisGRUKfVK6Ld3+sX1/lr9Coo5jkw0/OHZvWV5v8j7c3/K8VxvZRfDGA2XlnvL4ct8w8AAADL68ubf39X/PeT4Y/+Z7O8pfn/aHvz/7hjLD8UnO3tOBqv/3/zcAjzl9YfyQJHYnOfHA7hrfOpyVgiu6D+h2KJ8SxwJO4wuSSW2DpZX1VfDMwlgWeH8sDRJHAsBvK9FN8N+a6c24dC2DCfuqq+xK5YYiQJfDQGRpPAWAyMJ4HVMbApCfxmdR6YTAL/EgNhun5b/cPqfFsBAACcjnye1VN/N6TzvLnuVhk6WmUYaJWhs1WGSqsMjUYR738vZugpHo/PM8SHetJa+5NaShnixfBPu1+lDOGh+pxpwVLTtTNJRupzxgxb5g6uDk2U5v/j7c3/B+pvs9aPxfn/wvX/ssADsXtfjaeOj8bAE++pD+Q7Bo7Fye6ttaom8xL5pP3WWGJTDIwmgV0xsCkJbL0qDxw6vz6Qz7Rrjd9ca3w6L1EIAAAAwFkXdxDE3TRx/v/ffX/462blSvP/Te3N/2N7q4qNfSHW+szqEH7QsdCbWmDtYBaI+zEG48/j3zQYwprCDo5aiamBrERv0nD4eX/2C/XetKof9Wc/Poj3tzx8/31fqSbu6A/hwsLel1obv6xkbfSngYt6s8BAGrixOwvEPT+1wA87swCcsdpewfiCyk91qRlZvFyD199r5Zqg6fBK+0AXybfYb66WSyV9IN+nWnN6T1upOpZF6e1x1LttJb7bRrzbil+k8m8opxZCldC5Y+qabftm9sZHir9kLVmm57n4K9V20kvwOpx95b1trZJ2YDz5+BhfvNzir8OOWN2dX3/qc996+sq77/riB66+98XnR9vuRgPxh8I3XPe/Q8cLm3e5VUL+mltxnyeTPk9W4n8Do562EMItcxe80Cxemv9Ptjf/705u5/0+bsw9wyG8o7BxH4yb/33D2edgIZB9Sp5XDmSH3J8eavjJCQAAAEuttrujtr9gOr/NTghP58nl/JOnmT/ur9i0aP52+/2ZCy/8x2bx0vx/a/P5f1/STcf/Hf9nmTj+v6hzfVd0X/rA7Bntii5Vx7Jw/H9R5/q7zfH/RTn+7/j/Yhz/b8Hx/0Wd609b6VvSLl+6Qgj937/8oWbx0vx/V3vzf+v/Lb5oX239v62N1v/b1Wj9v1nr/wEAAMuqwUJz6TyvtHpfKUO6el8pQ8sFAlsuMWj9v9Ne/2/grz7+u9BEaf4/2978P74cVhVbXynr/41e1aCq22Jgl4UBAQAAOBc12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAq+vZ4wPvbxZ/92UP/fin97z/8wc/M3f7k9/50i0hTM8/3pGFO84/8bXuyvGP/OzA49/8xoY1D5+s5OV68ts/qssdaz05FMKhwiODMXFiqHpnIbDlw/fs764mHhwK4e3FwM6DO9dUE98eCuHiYuC+qy85v5o4mJb4yWPv/VU18Yk08MG1r3upmrgiD3Sk3b17ddbdjrS7X1kdwnAhUOvudavrq6q1cWUe6Ezb+PvBrI0YGIxF7xrM2oiBmVhiui+Edd0hdKVV/XMlq6orrerHlayqrrSqz1dCuCKE0J1W9VhvVlV3OvJ/682qioEL3vbd5y6qJg71hrCuGPjFxw9vqCY+lQRqjf9pbwhvqb5k0sa/15M13pM2fkdPCG8OIfSmJV7szkr0piWe7A7hvEKg1vifd4ewP/CaED98dhQf3LP/pp3bZmamdi9jojdvqz9cMz0zNbb9xpkdlaRPjXQU0qcOlOOdbY790ec+u716e+Tly4baSXfn5XrmuzzRU3f30qXqfccy9T72a6BYycLzUao/5u8Nq0Lfvj1Tu8c+vW3v3t3rs7/tZp/I/nbl0WxbrV+qbdWuV7qtLi5Wsm7v9bvW7dl/09rp67ddO3Xt1A0T4+/csHHDxPjGjeuqoxrP/i7FUA+X413LPNQ3dhcqORsfABISEist0Vn36TZ+rv+XXfqiv9DRnlCZ/4AuTSuKWTrmR7kUg97cPL6Ugy5NSUojWl+aOJSyTLTOcmlpMrGQpT/LMv+9rjQ5LNbUOb9J4/3OMDbW8H+6kfq7xc3320U2b7seyTddu2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//19BHGg==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1df) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0xa, 0x3, 0x0, 0x40008}) 1.512568305s ago: executing program 1 (id=714): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 1.448134735s ago: executing program 4 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x2}, @void, @mpls={[], @ipv4=@tcp={{0x36, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@ra={0x94, 0x4}, @end, @generic={0x8f, 0xf, "58e6fbd04bc4b79102e95effec"}, @timestamp_prespec={0x44, 0x34, 0x2f, 0x3, 0xc, [{@multicast2, 0x10}, {@empty, 0x377}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0xffffffff}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x4}]}, @cipso={0x86, 0x4a, 0x3, [{0x2, 0x8, "698d7dd2c131"}, {0x7, 0xd, "22568aedd3bdedfcc76102"}, {0x7, 0xf, "252600d27689c83cb2820bb126"}, {0x2, 0x10, "b354e7563925945ba6aa7ac2ed70"}, {0x6, 0x2}, {0x0, 0xe, "6b5f4cdc51d4a72e05c9fbe2"}]}, @timestamp={0x44, 0x10, 0x16, 0x0, 0x3, [0x2, 0x0, 0xffff]}, @ssrr={0x89, 0x1f, 0x86, [@empty, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @local, @local]}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x104) 1.235908454s ago: executing program 0 (id=716): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3804402, &(0x7f0000000440)={[{@user_xattr}, {@noload}, {@resuid}, {@errors_remount}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x8}}, {@noinit_itable}, {@nomblk_io_submit}, {@nodioread_nolock}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000008c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']}) 1.077620033s ago: executing program 5 (id=717): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x8000, 0x2}, 0xe) 1.009247423s ago: executing program 4 (id=718): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) syncfs(r0) 902.378263ms ago: executing program 5 (id=719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000040)) 873.650193ms ago: executing program 5 (id=720): socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)) 813.090462ms ago: executing program 5 (id=721): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x5, 0x165381) r1 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) 42.409039ms ago: executing program 5 (id=726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) 0s ago: executing program 0 (id=727): r0 = socket(0x840000000002, 0x3, 0xb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r3], 0x81, 0x14fb, &(0x7f0000003040)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000000600)=""/4099, 0x1003, 0x0) kernel console output (not intermixed with test programs): es ready [ 77.453894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.545087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.572249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.608161][ T4249] device veth0_vlan entered promiscuous mode [ 77.631832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.640444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.680133][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.693653][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.707403][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.712685][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.727455][ T4249] device veth1_vlan entered promiscuous mode [ 77.744573][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.757727][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.768065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.824112][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.858663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.869119][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.885848][ T4249] device veth0_macvtap entered promiscuous mode [ 77.899050][ T4249] device veth1_macvtap entered promiscuous mode [ 77.911157][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.919298][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.955237][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.008472][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.029012][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.061462][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.073867][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.085623][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.098582][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.110993][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.125906][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.136760][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.147285][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.158213][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.177961][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.188563][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.274720][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.300453][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.310563][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.328672][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.338856][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.340383][ T4351] loop2: detected capacity change from 0 to 2048 [ 78.358142][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.368575][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.379716][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.405132][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.420717][ T4351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.454173][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.466991][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.495063][ T4249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.514000][ T4249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.547858][ T4249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.558764][ T4249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.569423][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 78.575512][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 78.579636][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 78.640537][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 78.640911][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 78.894642][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.930478][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.012015][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.036287][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.067640][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.088406][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.129186][ T129] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.345339][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 79.372477][ T129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.403367][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.435037][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.443577][ T4375] loop0: detected capacity change from 0 to 2048 [ 79.467752][ T4377] device team0 entered promiscuous mode [ 79.473133][ T129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.478792][ T4377] device team_slave_0 entered promiscuous mode [ 79.490169][ T4377] device team_slave_1 entered promiscuous mode [ 79.523125][ T4376] device team0 left promiscuous mode [ 79.528706][ T4376] device team_slave_0 left promiscuous mode [ 79.530118][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.564111][ T4376] device team_slave_1 left promiscuous mode [ 79.580907][ T4380] Bluetooth: MGMT ver 1.22 [ 79.594850][ T129] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.611636][ T4375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.618663][ T129] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.628973][ T129] usb 2-1: Manufacturer: syz [ 79.647831][ T129] usb 2-1: config 0 descriptor?? [ 79.649704][ T4375] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.768379][ T4375] fs-verity: sha256 using implementation "sha256-avx2" [ 79.975985][ T4375] syz.0.17 (4375) used greatest stack depth: 20000 bytes left [ 79.996825][ T129] rc_core: IR keymap rc-hauppauge not found [ 80.008720][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 80.010255][ T129] Registered IR keymap rc-empty [ 80.035227][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.109646][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.141818][ T129] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 80.187554][ T129] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 80.222114][ T4392] process 'syz.0.22' launched './file1' with NULL argv: empty string added [ 80.234649][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.280458][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.320298][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.360099][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.389816][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.419695][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.431888][ T4374] loop2: detected capacity change from 0 to 32768 [ 80.469629][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.505018][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.553204][ T4374] XFS (loop2): Mounting V5 Filesystem [ 80.563279][ T4405] loop3: detected capacity change from 0 to 128 [ 80.569960][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.599608][ T129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.615289][ T4408] loop4: detected capacity change from 0 to 1024 [ 80.623048][ T4408] ======================================================= [ 80.623048][ T4408] WARNING: The mand mount option has been deprecated and [ 80.623048][ T4408] and is ignored by this kernel. Remove the mand [ 80.623048][ T4408] option from the mount to silence this warning. [ 80.623048][ T4408] ======================================================= [ 80.627504][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.659068][ T4408] EXT4-fs: Ignoring removed nobh option [ 80.676068][ T4408] EXT4-fs: Ignoring removed bh option [ 80.698354][ T4408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.718058][ T4405] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.721466][ T129] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 80.739881][ T129] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 80.763897][ T129] usb 2-1: USB disconnect, device number 2 [ 80.780758][ T4306] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.813414][ T4405] syz.3.26 (pid 4405) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 80.862700][ T4408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.910118][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 80.923354][ T4374] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 81.018648][ T4374] XFS (loop2): Starting recovery (logdev: internal) [ 81.032029][ T4306] usb 1-1: config 0 has no interfaces? [ 81.037868][ T4306] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.058266][ T4306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.095636][ T4374] XFS (loop2): Ending recovery (logdev: internal) [ 81.106317][ T4306] usb 1-1: config 0 descriptor?? [ 81.258466][ T27] audit: type=1800 audit(1738025551.900:2): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 81.260116][ T4419] loop3: detected capacity change from 0 to 512 [ 81.300685][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 81.306787][ T4419] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.356394][ T4299] usb 1-1: USB disconnect, device number 2 [ 81.380264][ T4419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.454992][ T4419] EXT4-fs (loop3): 1 truncate cleaned up [ 81.469788][ T4419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.499421][ T4260] XFS (loop2): Unmounting Filesystem [ 81.586795][ T27] audit: type=1800 audit(1738025552.230:3): pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.30" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 82.093484][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 82.401188][ T4438] loop4: detected capacity change from 0 to 256 [ 82.531636][ T4438] FAT-fs (loop4): Directory bread(block 64) failed [ 82.549702][ T4438] FAT-fs (loop4): Directory bread(block 65) failed [ 82.589386][ T4438] FAT-fs (loop4): Directory bread(block 66) failed [ 82.616298][ T4438] FAT-fs (loop4): Directory bread(block 67) failed [ 82.633837][ T4438] FAT-fs (loop4): Directory bread(block 68) failed [ 82.668882][ T4438] FAT-fs (loop4): Directory bread(block 69) failed [ 82.686214][ T4444] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.714170][ T4438] FAT-fs (loop4): Directory bread(block 70) failed [ 82.733646][ T4438] FAT-fs (loop4): Directory bread(block 71) failed [ 82.788296][ T4438] FAT-fs (loop4): Directory bread(block 72) failed [ 82.819672][ T4438] FAT-fs (loop4): Directory bread(block 73) failed [ 82.857549][ T4445] loop2: detected capacity change from 0 to 1024 [ 82.917315][ T4447] loop3: detected capacity change from 0 to 1024 [ 83.147290][ T4447] hfsplus: xattr searching failed [ 83.252221][ T4447] hfsplus: b-tree write err: -5, ino 3 [ 83.984765][ T4466] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 84.389225][ T4454] loop1: detected capacity change from 0 to 32768 [ 84.423778][ T4476] loop3: detected capacity change from 0 to 1024 [ 84.450219][ T4454] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.44 (4454) [ 84.544674][ T4454] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 84.586619][ T4454] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 84.625329][ T4454] BTRFS info (device loop1): using free space tree [ 84.638703][ T4298] hfsplus: b-tree write err: -5, ino 3 [ 84.975848][ T4454] BTRFS info (device loop1): enabling ssd optimizations [ 85.168784][ T4508] loop2: detected capacity change from 0 to 256 [ 85.309044][ T4474] loop0: detected capacity change from 0 to 32768 [ 85.514489][ T4250] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 85.706165][ T4513] netlink: 'syz.3.62': attribute type 10 has an invalid length. [ 85.990303][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.998878][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.087495][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.094815][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.104032][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.111251][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.193455][ T4513] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.219964][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 86.239963][ T4515] device bridge_slave_1 left promiscuous mode [ 86.299847][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.320902][ T4515] device bridge_slave_0 left promiscuous mode [ 86.327193][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.391114][ T4531] loop2: detected capacity change from 0 to 8192 [ 86.438277][ T4531] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.477651][ T4531] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 86.495075][ T4515] bond0: (slave bridge0): Releasing backup interface [ 86.495146][ T4531] REISERFS (device loop2): using ordered data mode [ 86.522956][ T4531] reiserfs: using flush barriers [ 86.541329][ T4531] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.562699][ T4531] REISERFS (device loop2): checking transaction log (loop2) [ 86.607797][ T4531] REISERFS (device loop2): Using r5 hash to sort names [ 86.636546][ T4531] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 86.657943][ T14] cfg80211: failed to load regulatory.db [ 87.094499][ T4553] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.71'. [ 87.119978][ T4550] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.71'. [ 87.391830][ T4559] loop4: detected capacity change from 0 to 256 [ 87.471561][ T4559] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 87.502106][ T4546] loop1: detected capacity change from 0 to 32768 [ 87.732075][ T4570] loop0: detected capacity change from 0 to 1024 [ 87.758570][ T4570] EXT4-fs: Ignoring removed orlov option [ 87.780585][ T4570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.861583][ T4570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.167412][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 88.498622][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 88.982574][ T4605] loop4: detected capacity change from 0 to 256 [ 89.020533][ T4605] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 89.116620][ T4605] syz.4.91: attempt to access beyond end of device [ 89.116620][ T4605] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 89.228108][ T4605] syz.4.91: attempt to access beyond end of device [ 89.228108][ T4605] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 89.336370][ T4605] syz.4.91: attempt to access beyond end of device [ 89.336370][ T4605] loop4: rw=0, sector=280, nr_sectors = 8 limit=256 [ 89.379233][ T27] audit: type=1800 audit(1738025560.020:4): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.91" name="file1" dev="loop4" ino=1048601 res=0 errno=0 [ 89.489558][ T4528] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.646518][ T4580] loop1: detected capacity change from 0 to 65536 [ 89.691571][ T4528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.743689][ T4528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.790510][ T4528] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.862188][ T4528] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.869073][ T4629] device syzkaller1 entered promiscuous mode [ 89.906989][ T4528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.946646][ T4528] usb 3-1: config 0 descriptor?? [ 89.972751][ T4580] XFS (loop1): Mounting V5 Filesystem [ 90.101066][ T4580] XFS (loop1): Ending clean mount [ 90.116476][ T4613] loop0: detected capacity change from 0 to 32768 [ 90.262993][ T4613] XFS (loop0): Mounting V5 Filesystem [ 90.405257][ T4528] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x2 [ 90.422047][ T4646] netlink: 'syz.3.102': attribute type 3 has an invalid length. [ 90.430043][ T4528] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 90.441279][ T4528] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 90.446420][ T4613] XFS (loop0): Ending clean mount [ 90.462853][ T4528] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.505766][ T4250] XFS (loop1): Unmounting Filesystem [ 90.512195][ T4613] XFS (loop0): Quotacheck needed: Please wait. [ 90.614046][ T4613] XFS (loop0): Quotacheck: Done. [ 90.745034][ T4527] usb 3-1: USB disconnect, device number 2 [ 90.826688][ T4653] loop4: detected capacity change from 0 to 1024 [ 90.834213][ T4653] EXT4-fs: Ignoring removed oldalloc option [ 90.855083][ T4653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.907107][ T4251] XFS (loop0): Unmounting Filesystem [ 90.922513][ T4653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.106598][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 91.660556][ T4670] loop4: detected capacity change from 0 to 8192 [ 91.673254][ T4670] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.758183][ T4670] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 91.777027][ T4670] REISERFS (device loop4): using ordered data mode [ 91.792418][ T4670] reiserfs: using flush barriers [ 91.807234][ T4670] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.813293][ T4666] loop2: detected capacity change from 0 to 32768 [ 91.848854][ T4670] REISERFS (device loop4): checking transaction log (loop4) [ 91.874149][ T4670] REISERFS (device loop4): Using r5 hash to sort names [ 91.917360][ T4670] reiserfs: enabling write barrier flush mode [ 91.972552][ T4666] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 92.005642][ T4670] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 92.316489][ T4260] ocfs2: Unmounting device (7,2) on (node local) [ 93.235798][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 94.239467][ C1] sched: RT throttling activated [ 94.312649][ T4707] loop1: detected capacity change from 0 to 131072 [ 94.340531][ T4696] loop2: detected capacity change from 0 to 32768 [ 94.471012][ T4699] loop4: detected capacity change from 0 to 40427 [ 94.483043][ T4699] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.494310][ T4699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.528924][ T4699] F2FS-fs (loop4): invalid crc value [ 94.560579][ T4699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.575389][ T4696] XFS (loop2): Mounting V5 Filesystem [ 94.654702][ T4707] F2FS-fs (loop1): Test dummy encryption mode enabled [ 94.668062][ T4707] F2FS-fs (loop1): invalid crc value [ 94.704171][ T4699] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.711925][ T4699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.751342][ T4707] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.768281][ T4696] XFS (loop2): Ending clean mount [ 94.782319][ T4696] XFS (loop2): Quotacheck needed: Please wait. [ 94.829908][ T4707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.896053][ T4696] XFS (loop2): Quotacheck: Done. [ 95.187084][ T4260] XFS (loop2): Unmounting Filesystem [ 95.345796][ T4730] loop3: detected capacity change from 0 to 32768 [ 95.393094][ T4730] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.130 (4730) [ 95.462556][ T4730] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.473428][ T4705] syz.0.125 (4705) used greatest stack depth: 19896 bytes left [ 95.520323][ T4730] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 95.529243][ T4730] BTRFS info (device loop3): setting nodatacow, compression disabled [ 95.573893][ T4730] BTRFS info (device loop3): setting datacow [ 95.609988][ T4730] BTRFS info (device loop3): doing ref verification [ 95.616663][ T4730] BTRFS info (device loop3): force clearing of disk cache [ 95.650700][ T4730] BTRFS info (device loop3): turning off barriers [ 95.657689][ T4730] BTRFS info (device loop3): enabling ssd optimizations [ 95.699942][ T4744] input: syz1 as /devices/virtual/input/input6 [ 95.707554][ T4730] BTRFS info (device loop3): using spread ssd allocation scheme [ 95.736842][ T4730] BTRFS info (device loop3): using free space tree [ 96.087877][ T4730] BTRFS info (device loop3): rebuilding free space tree [ 96.249030][ T4769] loop0: detected capacity change from 0 to 1024 [ 96.314181][ T4772] netlink: 'syz.1.137': attribute type 10 has an invalid length. [ 96.316040][ T4769] hfsplus: catalog searching failed [ 96.379625][ T4527] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 96.409859][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.417420][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.538743][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.546172][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.554038][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.561267][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.581605][ T4527] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.606038][ T4527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.651641][ T4527] usb 5-1: config 0 descriptor?? [ 96.770476][ T4772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.779350][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 96.813275][ T4263] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.844878][ T4774] device bridge_slave_1 left promiscuous mode [ 96.865440][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.920680][ T4774] device bridge_slave_0 left promiscuous mode [ 96.937553][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.086896][ T4527] [drm:udl_init] *ERROR* Selecting channel failed [ 97.137129][ T4527] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 97.145178][ T4527] [drm] Initialized udl on minor 2 [ 97.177139][ T4527] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 97.221659][ T4527] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 97.259756][ T4527] usb 5-1: USB disconnect, device number 2 [ 97.356193][ T4774] bond0: (slave bridge0): Releasing backup interface [ 97.575834][ T4803] loop3: detected capacity change from 0 to 1024 [ 98.295691][ T4826] netlink: 104 bytes leftover after parsing attributes in process `syz.4.154'. [ 98.359757][ T4299] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.561510][ T4299] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.582958][ T4299] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.612881][ T4299] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.652952][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.685401][ T4819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.717149][ T4834] loop0: detected capacity change from 0 to 4096 [ 98.862716][ T4836] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.957173][ T27] audit: type=1800 audit(1738025569.600:5): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.157" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 99.374857][ T4843] loop0: detected capacity change from 0 to 256 [ 99.432295][ T4843] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 99.557242][ T4299] usb 4-1: USB disconnect, device number 2 [ 99.558131][ T4843] syz.0.158: attempt to access beyond end of device [ 99.558131][ T4843] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 99.602316][ T4831] loop4: detected capacity change from 0 to 32768 [ 99.612702][ T4843] syz.0.158: attempt to access beyond end of device [ 99.612702][ T4843] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 99.638716][ T4843] syz.0.158: attempt to access beyond end of device [ 99.638716][ T4843] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 99.669803][ T4831] JBD2: Ignoring recovery information on journal [ 99.677166][ T27] audit: type=1800 audit(1738025570.320:6): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.158" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 99.771189][ T4831] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 100.085739][ T4860] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 100.105786][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 100.167338][ T4860] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.174935][ T4860] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.277515][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.284733][ T4860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.292248][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.299886][ T4860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.388777][ T4860] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.432944][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 100.456797][ T4862] device bridge_slave_1 left promiscuous mode [ 100.485595][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.507261][ T4862] device bridge_slave_0 left promiscuous mode [ 100.528156][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.623599][ T4862] bond0: (slave bridge0): Releasing backup interface [ 101.027748][ T4868] loop3: detected capacity change from 0 to 32768 [ 101.079196][ T4868] XFS: ikeep mount option is deprecated. [ 101.096594][ T4868] XFS: noikeep mount option is deprecated. [ 101.108636][ T4868] XFS (loop3): Mounting V5 Filesystem [ 101.171766][ T4868] XFS (loop3): Ending clean mount [ 101.216011][ T4868] XFS (loop3): Quotacheck needed: Please wait. [ 101.334010][ T4868] XFS (loop3): Quotacheck: Done. [ 101.492680][ T4887] loop2: detected capacity change from 0 to 8 [ 101.757823][ T4890] loop4: detected capacity change from 0 to 128 [ 101.791453][ T4892] loop1: detected capacity change from 0 to 256 [ 101.932202][ T4263] XFS (loop3): Unmounting Filesystem [ 101.942853][ T4892] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 101.953235][ T4894] loop2: detected capacity change from 0 to 2048 [ 102.030445][ T4894] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 102.088379][ T4892] syz.1.173: attempt to access beyond end of device [ 102.088379][ T4892] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 102.124607][ T4892] syz.1.173: attempt to access beyond end of device [ 102.124607][ T4892] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 102.163589][ T4892] syz.1.173: attempt to access beyond end of device [ 102.163589][ T4892] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 102.178443][ T4894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.206121][ T27] audit: type=1800 audit(1738025572.850:7): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 102.487088][ T4897] loop4: detected capacity change from 0 to 8192 [ 102.772081][ T4901] loop2: detected capacity change from 0 to 128 [ 102.805763][ T4901] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 102.817482][ T4901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.943070][ T4299] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.951948][ T4903] loop4: detected capacity change from 0 to 64 [ 103.169721][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 103.176912][ T4299] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.238065][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.253594][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.266276][ T4299] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.299557][ T4299] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.328540][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.581678][ T4299] usb 2-1: GET_CAPABILITIES returned 0 [ 103.587776][ T4299] usbtmc 2-1:16.0: can't read capabilities [ 103.805796][ T4299] usb 2-1: USB disconnect, device number 3 [ 103.963233][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.193239][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.348342][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.505559][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.576798][ T4926] loop1: detected capacity change from 0 to 1024 [ 104.587927][ T4921] loop4: detected capacity change from 0 to 32768 [ 104.637735][ T4921] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.186 (4921) [ 104.759785][ T4921] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.831908][ T4921] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 104.877717][ T4921] BTRFS info (device loop4): setting nodatacow, compression disabled [ 104.911864][ T4921] BTRFS info (device loop4): setting datacow [ 104.966963][ T4921] BTRFS info (device loop4): doing ref verification [ 105.009495][ T4921] BTRFS info (device loop4): force clearing of disk cache [ 105.027330][ T4724] hfsplus: b-tree write err: -5, ino 4 [ 105.045361][ T4921] BTRFS info (device loop4): turning off barriers [ 105.103648][ T4921] BTRFS info (device loop4): enabling ssd optimizations [ 105.120571][ T4923] loop3: detected capacity change from 0 to 32768 [ 105.158928][ T4921] BTRFS info (device loop4): using spread ssd allocation scheme [ 105.243802][ T4921] BTRFS info (device loop4): using free space tree [ 105.283458][ T4923] JBD2: Ignoring recovery information on journal [ 105.354253][ T4923] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.587949][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.604674][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.634535][ T4254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.644613][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.664892][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.676606][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.755224][ T4263] ocfs2: Unmounting device (7,3) on (node local) [ 105.792581][ T4921] BTRFS info (device loop4): rebuilding free space tree [ 106.026522][ T4968] loop0: detected capacity change from 0 to 128 [ 106.179569][ T4968] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 106.278896][ T4249] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.290418][ T4968] syz.0.197: attempt to access beyond end of device [ 106.290418][ T4968] loop0: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 106.300799][ T4973] loop3: detected capacity change from 0 to 1024 [ 106.468027][ T4973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.943084][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 107.206655][ T4995] loop1: detected capacity change from 0 to 4096 [ 107.284486][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 107.502864][ T4948] chnl_net:caif_netlink_parms(): no params data found [ 107.770654][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 107.901834][ T4987] loop0: detected capacity change from 0 to 32768 [ 107.971648][ T4987] XFS: ikeep mount option is deprecated. [ 108.052250][ T4987] XFS (loop0): Mounting V5 Filesystem [ 108.211497][ T4987] XFS (loop0): Ending clean mount [ 108.258861][ T4987] XFS (loop0): Quotacheck needed: Please wait. [ 108.309703][ T5008] loop1: detected capacity change from 0 to 32768 [ 108.322545][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.332546][ T4987] XFS (loop0): Quotacheck: Done. [ 108.335589][ T4948] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.375005][ T4948] device bridge_slave_0 entered promiscuous mode [ 108.383698][ T5011] device pim6reg1 entered promiscuous mode [ 108.386977][ T5008] JBD2: Ignoring recovery information on journal [ 108.475667][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.517211][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.539398][ T5008] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.552735][ T4251] XFS (loop0): Unmounting Filesystem [ 108.593027][ T4948] device bridge_slave_1 entered promiscuous mode [ 108.760209][ T9] device hsr_slave_0 left promiscuous mode [ 108.783935][ T9] device hsr_slave_1 left promiscuous mode [ 108.813207][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.821561][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.832750][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.852891][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.901914][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 109.018562][ T9] device veth1_macvtap left promiscuous mode [ 109.045901][ T9] device veth0_macvtap left promiscuous mode [ 109.052348][ T5047] loop4: detected capacity change from 0 to 2048 [ 109.057903][ T9] device veth1_vlan left promiscuous mode [ 109.068771][ T9] device veth0_vlan left promiscuous mode [ 109.105009][ T5047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.386478][ T5050] loop0: detected capacity change from 0 to 256 [ 109.842594][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 109.862574][ T5062] loop0: detected capacity change from 0 to 16 [ 109.892945][ T5062] erofs: (device loop0): mounted with root inode @ nid 36. [ 110.456666][ T9] team0 (unregistering): Port device team_slave_1 removed [ 110.504629][ T9] team0 (unregistering): Port device team_slave_0 removed [ 110.511988][ T4522] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 110.556412][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.600402][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.711167][ T4522] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 110.728146][ T4522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.742594][ T4522] usb 1-1: config 0 descriptor?? [ 111.110068][ T9] bond0 (unregistering): Released all slaves [ 111.381327][ T4948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.407542][ T4948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.444531][ T5084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 111.630482][ T4948] team0: Port device team_slave_0 added [ 111.671757][ T4948] team0: Port device team_slave_1 added [ 111.772791][ T4522] pegasus: probe of 1-1:0.0 failed with error -71 [ 111.799980][ T4522] usb 1-1: USB disconnect, device number 3 [ 111.834162][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.869161][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.919603][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 111.965579][ T4948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.047615][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.073194][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.172812][ T4948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.337858][ T4948] device hsr_slave_0 entered promiscuous mode [ 112.379894][ T4948] device hsr_slave_1 entered promiscuous mode [ 112.516496][ T5113] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 112.530289][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.539048][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.582761][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.590023][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.597491][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.604697][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.697669][ T5113] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.737313][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 112.777933][ T5115] device bridge_slave_1 left promiscuous mode [ 112.795549][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.817560][ T5115] device bridge_slave_0 left promiscuous mode [ 112.831148][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.845860][ T5097] loop4: detected capacity change from 0 to 32768 [ 112.927010][ T5115] bond0: (slave bridge0): Releasing backup interface [ 112.934014][ T129] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.954742][ T5097] XFS (loop4): Mounting V5 Filesystem [ 113.013458][ T5097] XFS (loop4): Ending clean mount [ 113.046641][ T5097] XFS (loop4): Quotacheck needed: Please wait. [ 113.112415][ T5097] XFS (loop4): Quotacheck: Done. [ 113.150025][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 113.168025][ T129] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.208540][ T129] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.236088][ T129] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.254290][ T129] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.277726][ T129] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.294764][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.401834][ T4948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.436721][ T4249] XFS (loop4): Unmounting Filesystem [ 113.445545][ T4948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.468235][ T5122] loop1: detected capacity change from 0 to 32768 [ 113.495718][ T4948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.527562][ T4948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.550390][ T5122] XFS: ikeep mount option is deprecated. [ 113.560252][ T129] usb 4-1: GET_CAPABILITIES returned 0 [ 113.565796][ T129] usbtmc 4-1:16.0: can't read capabilities [ 113.643445][ T5122] XFS (loop1): Mounting V5 Filesystem [ 113.857254][ T129] usb 4-1: USB disconnect, device number 3 [ 113.890799][ T5122] XFS (loop1): Ending clean mount [ 113.905705][ T5122] XFS (loop1): Quotacheck needed: Please wait. [ 113.942475][ T4948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.973163][ T5122] XFS (loop1): Quotacheck: Done. [ 114.000009][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 114.055575][ T27] audit: type=1800 audit(1738025584.700:8): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.234" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 114.107736][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.137690][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.155511][ T4250] XFS (loop1): Unmounting Filesystem [ 114.173981][ T4948] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.230449][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.242414][ T5155] loop4: detected capacity change from 0 to 512 [ 114.250038][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.260386][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.267527][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.286925][ T5155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.355178][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.368291][ T5155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 114.370550][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.439932][ T5155] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.460771][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.483044][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.490255][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.524892][ T5155] EXT4-fs (loop4): 1 truncate cleaned up [ 114.533732][ T5162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.239'. [ 114.539689][ T5155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.572643][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.592449][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.614566][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.637544][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.650230][ T27] audit: type=1800 audit(1738025585.300:9): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.235" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 114.681620][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.707664][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.736900][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.765765][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.797025][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.841455][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 114.866451][ T4948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.878928][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.895226][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.940401][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.129687][ T4797] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.319834][ T4797] usb 4-1: Using ep0 maxpacket: 32 [ 115.327351][ T4797] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 115.357082][ T4797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.412971][ T4797] usb 4-1: config 0 descriptor?? [ 115.447375][ T4797] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 115.496077][ T5190] loop0: detected capacity change from 0 to 512 [ 115.558797][ T5190] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.247: casefold flag without casefold feature [ 115.562180][ T5183] loop4: detected capacity change from 0 to 8192 [ 115.592466][ T5190] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.247: couldn't read orphan inode 15 (err -117) [ 115.605243][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.614255][ T5190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.643940][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.665812][ T5183] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 115.672438][ T4948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.729156][ T5183] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 115.763881][ T5183] REISERFS (device loop4): using ordered data mode [ 115.774007][ T5183] reiserfs: using flush barriers [ 115.793870][ T5183] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.843543][ T5183] REISERFS (device loop4): checking transaction log (loop4) [ 115.870958][ T5183] REISERFS (device loop4): Using r5 hash to sort names [ 115.922970][ T5183] reiserfs: enabling write barrier flush mode [ 115.935690][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 115.972590][ T5183] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 116.443699][ T5216] loop4: detected capacity change from 0 to 1024 [ 116.457313][ T4797] gspca_nw80x: reg_w err -71 [ 116.462289][ T4797] nw80x: probe of 4-1:0.0 failed with error -71 [ 116.478032][ T5216] EXT4-fs: Ignoring removed orlov option [ 116.507665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.530021][ T4797] usb 4-1: USB disconnect, device number 4 [ 116.536047][ T5216] EXT4-fs: Ignoring removed oldalloc option [ 116.564774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.588623][ T5216] EXT4-fs (loop4): Test dummy encryption mode enabled [ 116.646638][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.665238][ T5216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.685909][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.771068][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.811102][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.829782][ T4948] device veth0_vlan entered promiscuous mode [ 116.868906][ T4948] device veth1_vlan entered promiscuous mode [ 116.974114][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.016532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.043897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.116666][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.166417][ T4948] device veth0_macvtap entered promiscuous mode [ 117.188588][ T5216] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 117.195617][ T4948] device veth1_macvtap entered promiscuous mode [ 117.301920][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.339541][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.366786][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.394762][ T5219] loop1: detected capacity change from 0 to 32768 [ 117.399133][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.439493][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.443761][ T5219] XFS: ikeep mount option is deprecated. [ 117.478522][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.497439][ T5219] XFS: noikeep mount option is deprecated. [ 117.512180][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.550320][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.575686][ T5219] XFS (loop1): Mounting V5 Filesystem [ 117.642270][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 117.676726][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.757486][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.770990][ T5219] XFS (loop1): Ending clean mount [ 117.778265][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.810760][ T5219] XFS (loop1): Quotacheck needed: Please wait. [ 117.820296][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.835916][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.891140][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.909271][ T5219] XFS (loop1): Quotacheck: Done. [ 117.955702][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.006283][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.026245][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.056651][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.077538][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.106753][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.127705][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.151355][ T4250] XFS (loop1): Unmounting Filesystem [ 118.189626][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.286195][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.307861][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.360178][ T4948] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.368954][ T4948] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.409630][ T4948] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.428543][ T4948] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.744687][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.787297][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.897667][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.948956][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.970914][ T5269] loop4: detected capacity change from 0 to 8192 [ 118.981561][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.014485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.045756][ T5269] loop4: p1 p2 < > p3 p4 < p5 > [ 119.073974][ T5269] loop4: p1 size 108986237 extends beyond EOD, truncated [ 119.145011][ T5269] loop4: p3 size 131072 extends beyond EOD, truncated [ 119.185010][ T5269] loop4: p5 size 108986237 extends beyond EOD, truncated [ 119.724788][ T5297] loop4: detected capacity change from 0 to 1024 [ 119.735547][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 119.787044][ T5301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.817387][ T5301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 119.903609][ T5297] Process accounting resumed [ 119.937158][ T5297] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 119.958445][ T5297] hfsplus: xattr searching failed [ 120.241115][ T5281] loop1: detected capacity change from 0 to 32768 [ 120.281781][ T5281] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.260 (5281) [ 120.328567][ T5281] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 120.349895][ T5281] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 120.369877][ T5281] BTRFS info (device loop1): force zlib compression, level 3 [ 120.384204][ T5281] BTRFS info (device loop1): using free space tree [ 120.591072][ T5281] BTRFS info (device loop1): enabling ssd optimizations [ 120.998410][ T5343] loop4: detected capacity change from 0 to 128 [ 121.076260][ T5300] loop5: detected capacity change from 0 to 32768 [ 121.126703][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.167215][ T5343] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.177850][ T4250] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 121.252854][ T5300] XFS (loop5): Mounting V5 Filesystem [ 121.482208][ T5358] Bluetooth: MGMT ver 1.22 [ 121.627401][ T5300] XFS (loop5): Ending clean mount [ 121.628385][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 121.654347][ T5300] XFS (loop5): Quotacheck needed: Please wait. [ 121.815129][ T5300] XFS (loop5): Quotacheck: Done. [ 122.125803][ T5378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 122.146904][ T4948] XFS (loop5): Unmounting Filesystem [ 122.202756][ T5382] loop0: detected capacity change from 0 to 128 [ 122.250552][ T5382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.282675][ T5382] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.431283][ T4527] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.517251][ T5388] loop1: detected capacity change from 0 to 4096 [ 122.526929][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 122.619732][ T4527] usb 4-1: Using ep0 maxpacket: 8 [ 122.629964][ T4527] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.655392][ T5391] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.669924][ T4527] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.688134][ T4527] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.715037][ T4527] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.765125][ T4527] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.804371][ T4527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.822986][ T5388] capability: warning: `syz.1.286' uses deprecated v2 capabilities in a way that may be insecure [ 122.941554][ T5395] overlayfs: upper fs does not support tmpfile. [ 123.001768][ T5395] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.031611][ T5395] overlayfs: failed to set xattr on upper [ 123.047695][ T5395] overlayfs: ...falling back to index=off,metacopy=off. [ 123.065231][ T5400] loop5: detected capacity change from 0 to 512 [ 123.066943][ T4527] usb 4-1: GET_CAPABILITIES returned 0 [ 123.088611][ T4527] usbtmc 4-1:16.0: can't read capabilities [ 123.106275][ T5402] loop4: detected capacity change from 0 to 1024 [ 123.117904][ T5400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.173991][ T5402] EXT4-fs: Ignoring removed orlov option [ 123.201320][ T5402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.213233][ T5402] EXT4-fs (loop4): Test dummy encryption mode enabled [ 123.225638][ T5400] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.284: invalid indirect mapped block 4294967295 (level 1) [ 123.267346][ T5402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.309784][ T5400] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.284: invalid indirect mapped block 4294967295 (level 1) [ 123.317079][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.327641][ T5400] EXT4-fs (loop5): 2 truncates cleaned up [ 123.372582][ T5400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 123.401661][ T5409] loop0: detected capacity change from 0 to 512 [ 123.431974][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.441146][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.450280][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.459405][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.468524][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.500773][ T5409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.516601][ T129] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 123.523723][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 123.553747][ T129] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 123.574886][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.584042][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.593161][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.602274][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.611392][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.635873][ T5409] EXT4-fs (loop0): 1 truncate cleaned up [ 123.645425][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.659942][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.669120][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.677306][ T129] Remounting filesystem read-only [ 123.678229][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.694125][ T129] NILFS (loop1): error -5 truncating bmap (ino=12) [ 123.710123][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.719281][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.719894][ T4948] EXT4-fs (loop5): unmounting filesystem. [ 123.731594][ T5409] fscrypt (loop0, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 123.752273][ T4792] usb 4-1: USB disconnect, device number 5 [ 123.760931][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 123.768065][ T4250] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 123.799828][ T4250] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 123.835151][ T4250] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 123.875060][ T4250] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 123.899517][ T4250] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 124.083862][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 124.329854][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 124.340162][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.127-syzkaller #0 [ 124.348268][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.358434][ T48] Workqueue: hci0 hci_rx_work [ 124.363175][ T48] Call Trace: [ 124.366477][ T48] [ 124.369428][ T48] dump_stack_lvl+0x1e3/0x2cb [ 124.374146][ T48] ? nf_tcp_handle_invalid+0x642/0x642 [ 124.379663][ T48] ? panic+0x764/0x764 [ 124.383786][ T48] sysfs_create_dir_ns+0x2c6/0x390 [ 124.388928][ T48] ? sysfs_warn_dup+0xa0/0xa0 [ 124.393701][ T48] kobject_add_internal+0x6df/0xd10 [ 124.398945][ T48] kobject_add+0x14e/0x210 [ 124.403398][ T48] ? device_add+0x3c2/0xfd0 [ 124.407950][ T48] ? kobject_init+0x1d0/0x1d0 [ 124.412677][ T48] ? __raw_spin_lock_init+0x41/0x100 [ 124.418010][ T48] ? get_device_parent+0x128/0x400 [ 124.423177][ T48] device_add+0x476/0xfd0 [ 124.427568][ T48] hci_conn_add_sysfs+0xe4/0x1f0 [ 124.432570][ T48] le_conn_complete_evt+0xcc6/0x1320 [ 124.437897][ T48] ? trace_contention_end+0x61/0x170 [ 124.443223][ T48] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 124.449498][ T48] ? __mutex_unlock_slowpath+0x218/0x750 [ 124.455208][ T48] ? mutex_unlock+0x10/0x10 [ 124.459740][ T48] ? skb_pull_data+0x10e/0x220 [ 124.464543][ T48] hci_le_conn_complete_evt+0x188/0x410 [ 124.470124][ T48] hci_event_packet+0xa40/0x1510 [ 124.475096][ T48] ? hci_remote_host_features_evt+0x210/0x210 [ 124.481205][ T48] ? bis_list+0x290/0x290 [ 124.485559][ T48] ? do_raw_spin_unlock+0x137/0x8a0 [ 124.490786][ T48] ? kcov_remote_start+0x4ae/0x7c0 [ 124.495933][ T48] ? lockdep_hardirqs_on+0x30/0x130 [ 124.501164][ T48] ? hci_send_to_monitor+0x99/0x4d0 [ 124.506656][ T48] hci_rx_work+0x3a6/0xd10 [ 124.511213][ T48] ? process_one_work+0x7a9/0x11d0 [ 124.516363][ T48] process_one_work+0x8a9/0x11d0 [ 124.521437][ T48] ? worker_detach_from_pool+0x260/0x260 [ 124.527104][ T48] ? _raw_spin_lock_irqsave+0x120/0x120 [ 124.532686][ T48] ? kthread_data+0x4e/0xc0 [ 124.537234][ T48] ? wq_worker_running+0x97/0x190 [ 124.542285][ T48] worker_thread+0xa47/0x1200 [ 124.547078][ T48] ? release_firmware_map_entry+0x186/0x186 [ 124.553629][ T48] kthread+0x28d/0x320 [ 124.557731][ T48] ? worker_clr_flags+0x190/0x190 [ 124.562792][ T48] ? kthread_blkcg+0xd0/0xd0 [ 124.567409][ T48] ret_from_fork+0x1f/0x30 [ 124.571877][ T48] [ 124.587411][ T48] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.602349][ T48] Bluetooth: hci0: failed to register connection device [ 125.699995][ T5442] loop1: detected capacity change from 0 to 512 [ 125.910805][ T5442] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.943341][ T5442] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.097996][ T5417] loop5: detected capacity change from 0 to 262144 [ 126.135510][ T5450] EXT4-fs (loop1): shut down requested (1) [ 126.201892][ T5417] F2FS-fs (loop5): Found nat_bits in checkpoint [ 126.269119][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 126.278071][ T5417] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 126.819715][ T4527] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.011478][ T4527] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 127.036330][ T4527] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 127.068275][ T4527] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 127.097989][ T4527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.121803][ T5469] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.536974][ T5468] loop1: detected capacity change from 0 to 40427 [ 127.541876][ T5483] loop0: detected capacity change from 0 to 512 [ 127.574936][ T5468] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 127.617612][ T5468] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.654226][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.675374][ T5483] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.698075][ T5468] F2FS-fs (loop1): invalid crc value [ 127.777474][ T5468] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.926158][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 128.020282][ T5468] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.027815][ T5468] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.076073][ T5492] loop0: detected capacity change from 0 to 512 [ 128.125189][ T5492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.202113][ T4527] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 128.203200][ T5477] loop4: detected capacity change from 0 to 65536 [ 128.244733][ T5492] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 128.269897][ T4527] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 128.303154][ T5492] EXT4-fs (loop0): 1 truncate cleaned up [ 128.311022][ T5492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.348166][ T4527] usb 4-1: USB disconnect, device number 6 [ 128.354219][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 128.368405][ T5477] XFS (loop4): Mounting V5 Filesystem [ 128.441361][ T27] audit: type=1800 audit(1738025599.090:10): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.316" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 128.515202][ T5477] XFS (loop4): Ending clean mount [ 128.531017][ T5477] XFS (loop4): Quotacheck needed: Please wait. [ 128.546450][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 128.624817][ T5477] XFS (loop4): Quotacheck: Done. [ 128.759307][ T4249] XFS (loop4): Unmounting Filesystem [ 129.315393][ T5518] loop1: detected capacity change from 0 to 1024 [ 129.330377][ T5518] EXT4-fs: Ignoring removed i_version option [ 129.361695][ T5518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.407916][ T5518] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 129.448037][ T5518] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 129.479953][ T5518] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.317: Failed to acquire dquot type 0 [ 129.554031][ T5518] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 129.598724][ T5518] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.317: corrupted inode contents [ 129.637430][ T5518] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #13: comm syz.1.317: mark_inode_dirty error [ 129.642145][ T5523] loop3: detected capacity change from 0 to 2048 [ 129.651827][ T5518] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.317: corrupted inode contents [ 129.670563][ T5518] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.317: mark_inode_dirty error [ 129.687072][ T5518] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.317: corrupted inode contents [ 129.692497][ T5523] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.704759][ T5518] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 129.716260][ T5523] NILFS (loop3): mounting unchecked fs [ 129.719176][ T5518] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.317: corrupted inode contents [ 129.738039][ T5518] EXT4-fs error (device loop1): ext4_truncate:4311: inode #13: comm syz.1.317: mark_inode_dirty error [ 129.751171][ T5523] NILFS (loop3): recovery complete [ 129.757841][ T5518] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 129.762744][ T5529] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.785351][ T5518] EXT4-fs (loop1): 1 truncate cleaned up [ 129.793664][ T5518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 129.862390][ T5523] syz.3.324 (5523) used greatest stack depth: 19072 bytes left [ 129.974626][ T5518] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 130.026019][ T5532] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 130.152755][ T5532] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 130.213903][ T5532] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 130.224434][ T5532] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.317: Failed to acquire dquot type 0 [ 130.292050][ T5532] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 130.431000][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 130.588543][ T5547] loop1: detected capacity change from 0 to 64 [ 130.719676][ T4254] Bluetooth: hci0: command 0x0406 tx timeout [ 131.226799][ T5538] loop5: detected capacity change from 0 to 32768 [ 131.252841][ T5564] loop0: detected capacity change from 0 to 512 [ 131.374490][ T5564] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 131.386432][ T5538] XFS (loop5): Mounting V5 Filesystem [ 131.409701][ T5564] System zones: 0-2, 18-18, 34-35 [ 131.470675][ T5564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.502598][ T5564] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.592766][ T5581] device syzkaller1 entered promiscuous mode [ 131.656896][ T5538] XFS (loop5): Ending clean mount [ 131.733955][ T5585] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 131.867857][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 131.976236][ T4948] XFS (loop5): Unmounting Filesystem [ 132.028165][ T5587] loop3: detected capacity change from 0 to 512 [ 132.082220][ T5587] EXT4-fs: Ignoring removed i_version option [ 132.088289][ T5587] EXT4-fs: Ignoring removed nobh option [ 132.136791][ T5587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.166686][ T5577] loop4: detected capacity change from 0 to 40427 [ 132.194588][ T5587] EXT4-fs (loop3): 1 truncate cleaned up [ 132.209496][ T5587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.268338][ T5577] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.403988][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 132.524491][ T5577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.717343][ T4249] syz-executor: attempt to access beyond end of device [ 132.717343][ T4249] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.742678][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749085][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.279600][ T5603] loop3: detected capacity change from 0 to 32768 [ 133.288856][ T5603] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.349 (5603) [ 133.328960][ T5603] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.371527][ T5603] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 133.432949][ T5603] BTRFS info (device loop3): force zlib compression, level 3 [ 133.478526][ T5603] BTRFS info (device loop3): using free space tree [ 133.812807][ T5603] BTRFS info (device loop3): enabling ssd optimizations [ 133.929576][ T5617] loop1: detected capacity change from 0 to 40427 [ 134.048473][ T5617] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.199681][ T5647] loop4: detected capacity change from 0 to 512 [ 134.227141][ T4263] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 134.258876][ T5647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.319633][ T5617] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.371149][ T5647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.400118][ T5647] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.519616][ T27] audit: type=1804 audit(1738025605.160:11): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.358" name="/newroot/85/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 134.620309][ T27] audit: type=1804 audit(1738025605.270:12): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.358" name="/newroot/85/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 134.729334][ T4250] syz-executor: attempt to access beyond end of device [ 134.729334][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.799377][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 134.863797][ T5664] loop0: detected capacity change from 0 to 2048 [ 135.006250][ T5664] loop0: p1 < > p4 [ 135.025157][ T5664] loop0: p4 size 8388608 extends beyond EOD, truncated [ 135.086934][ T3622] loop0: p1 < > p4 [ 135.093653][ T3622] loop0: p4 size 8388608 extends beyond EOD, truncated [ 135.155372][ T9] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 135.291629][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.314769][ T5679] loop4: detected capacity change from 0 to 64 [ 135.334379][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.349163][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 135.385874][ T4838] udevd[4838]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 135.455052][ T5668] loop5: detected capacity change from 0 to 8192 [ 135.468938][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 135.476374][ T4838] udevd[4838]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 135.544324][ T5668] loop5: p1 p2 < > p3 p4 < p5 > [ 135.577989][ T5668] loop5: p1 size 108986237 extends beyond EOD, truncated [ 135.647707][ T5668] loop5: p3 size 131072 extends beyond EOD, truncated [ 135.686548][ T5668] loop5: p5 size 108986237 extends beyond EOD, truncated [ 135.809498][ T4299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.012918][ T4299] usb 1-1: Using ep0 maxpacket: 16 [ 136.022682][ T4299] usb 1-1: config 0 has no interfaces? [ 136.058434][ T4299] usb 1-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 136.099751][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.133300][ T4299] usb 1-1: Product: syz [ 136.137625][ T4299] usb 1-1: Manufacturer: syz [ 136.178399][ T4299] usb 1-1: SerialNumber: syz [ 136.180157][ T5692] loop5: detected capacity change from 0 to 512 [ 136.213323][ T4299] usb 1-1: config 0 descriptor?? [ 136.260326][ T5692] EXT4-fs: Ignoring removed bh option [ 136.292953][ T5692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.352437][ T5692] EXT4-fs (loop5): 1 truncate cleaned up [ 136.396326][ T5692] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 136.439488][ T4299] usb 1-1: USB disconnect, device number 4 [ 136.696127][ T4948] EXT4-fs (loop5): unmounting filesystem. [ 136.738310][ T5689] loop4: detected capacity change from 0 to 32768 [ 136.884196][ T5689] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 136.901236][ T5689] XFS (loop4): Mounting V5 Filesystem [ 136.959819][ T5689] XFS (loop4): Ending clean mount [ 136.972418][ T5689] XFS (loop4): Quotacheck needed: Please wait. [ 137.090101][ T5689] XFS (loop4): Quotacheck: Done. [ 137.237597][ T5726] loop0: detected capacity change from 0 to 2048 [ 137.247333][ T4249] XFS (loop4): Unmounting Filesystem [ 137.299725][ T5726] NILFS (loop0): invalid segment: Sequence number mismatch [ 137.312740][ T5726] NILFS (loop0): trying rollback from an earlier position [ 137.390869][ T5726] NILFS (loop0): recovery complete [ 137.417671][ T5731] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.953097][ T5743] loop3: detected capacity change from 0 to 512 [ 138.077539][ T5745] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 138.099905][ T5745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.117238][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.205998][ T5743] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.349933][ T5743] EXT4-fs (loop3): shut down requested (1) [ 138.439284][ T5724] loop5: detected capacity change from 0 to 32768 [ 138.478506][ T5724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.377 (5724) [ 138.530044][ T5724] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.535090][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 138.548164][ T5724] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 138.580225][ T5724] BTRFS info (device loop5): using free space tree [ 138.862447][ T5784] netlink: 'syz.3.388': attribute type 4 has an invalid length. [ 138.910012][ T5724] BTRFS info (device loop5): enabling ssd optimizations [ 139.151615][ T4948] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.223098][ T5800] loop3: detected capacity change from 0 to 256 [ 139.617501][ T5809] mmap: syz.1.396 (5809) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.171001][ T5830] loop0: detected capacity change from 0 to 1024 [ 140.188658][ T5830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.289252][ T5830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.484621][ T5840] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 140.549235][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 140.702769][ T5843] netlink: 68 bytes leftover after parsing attributes in process `syz.5.406'. [ 140.780621][ T5847] netlink: 'syz.0.405': attribute type 177 has an invalid length. [ 141.073457][ T5857] device macvlan0 entered promiscuous mode [ 141.106821][ T5857] device team_slave_0 entered promiscuous mode [ 141.114987][ T5857] device team_slave_1 entered promiscuous mode [ 141.122306][ T4301] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.151934][ T5857] device team0 entered promiscuous mode [ 141.185010][ T5857] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 141.236314][ T5857] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 141.311496][ T4301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.329689][ T4788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.346735][ T4301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.385856][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.427722][ T4301] usb 4-1: Product: syz [ 141.435637][ T4301] usb 4-1: Manufacturer: syz [ 141.465869][ T4301] usb 4-1: SerialNumber: syz [ 141.532049][ T4788] usb 2-1: Using ep0 maxpacket: 32 [ 141.546519][ T4788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.568318][ T4788] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 141.590815][ T4788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.598867][ T4788] usb 2-1: Product: syz [ 141.616695][ T4788] usb 2-1: Manufacturer: syz [ 141.627091][ T4788] usb 2-1: SerialNumber: syz [ 141.658164][ T4788] usb 2-1: config 0 descriptor?? [ 142.087696][ T4788] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 142.523960][ T4301] cdc_ncm 4-1:1.0: failed to get mac address [ 142.541918][ T4301] cdc_ncm 4-1:1.0: bind() failure [ 142.579632][ T4301] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 142.622481][ T4301] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 142.661679][ T4301] usbtest: probe of 4-1:1.1 failed with error -71 [ 142.691527][ T4301] usb 4-1: USB disconnect, device number 7 [ 142.697435][ T4788] usb 2-1: USB disconnect, device number 4 [ 143.313435][ T5915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 143.374397][ T5915] Zero length message leads to an empty skb [ 144.342054][ T5910] loop4: detected capacity change from 0 to 32768 [ 144.379855][ T5910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.422 (5910) [ 144.504657][ T5910] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.569583][ T5910] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 144.589772][ T5910] BTRFS info (device loop4): setting nodatacow, compression disabled [ 144.602362][ T5953] loop5: detected capacity change from 0 to 64 [ 144.650191][ T5910] BTRFS info (device loop4): max_inline at 0 [ 144.682057][ T5910] BTRFS info (device loop4): enabling disk space caching [ 144.729822][ T5910] BTRFS info (device loop4): turning off barriers [ 144.790761][ T5910] BTRFS info (device loop4): turning on flush-on-commit [ 144.797784][ T5910] BTRFS info (device loop4): doing ref verification [ 144.857840][ T5910] BTRFS info (device loop4): force clearing of disk cache [ 144.889563][ T5910] BTRFS info (device loop4): enabling ssd optimizations [ 144.909589][ T5910] BTRFS info (device loop4): max_inline at 4096 [ 144.916275][ T5910] BTRFS info (device loop4): disk space caching is enabled [ 144.991060][ T4948] hfs: node 4:3 still has 1 user(s)! [ 145.165193][ T5971] netlink: 165 bytes leftover after parsing attributes in process `syz.1.438'. [ 145.391626][ T5910] BTRFS info (device loop4): rebuilding free space tree [ 145.438263][ T5910] BTRFS info (device loop4): disabling free space tree [ 145.447937][ T5910] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.475184][ T4301] kernel write not supported for file bpf-prog (pid: 4301 comm: kworker/1:4) [ 145.484990][ T5910] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.965394][ T6008] loop3: detected capacity change from 0 to 2048 [ 146.157796][ T6008] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.462696][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 146.492780][ T4249] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.589660][ T4299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.813917][ T4299] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.848065][ T4299] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.888869][ T4299] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.926818][ T4299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 146.987928][ T4299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.032427][ T4299] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.072281][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.105174][ T4299] usb 6-1: Product: syz [ 147.109402][ T4299] usb 6-1: Manufacturer: syz [ 147.162151][ T4299] cdc_wdm 6-1:1.0: skipping garbage [ 147.170854][ T6010] loop1: detected capacity change from 0 to 32768 [ 147.195595][ T4299] cdc_wdm 6-1:1.0: skipping garbage [ 147.214332][ T4299] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 147.230418][ T4299] cdc_wdm 6-1:1.0: Unknown control protocol [ 147.311708][ T6010] XFS (loop1): Mounting V5 Filesystem [ 147.422655][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 147.429540][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 147.435923][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 147.442564][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 147.449752][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 147.456391][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 147.463504][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 147.470202][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 147.476757][ T4794] usb 6-1: USB disconnect, device number 2 [ 147.571303][ T6010] XFS (loop1): Ending clean mount [ 147.782625][ T4250] XFS (loop1): Unmounting Filesystem [ 148.419832][ T6079] netlink: 88 bytes leftover after parsing attributes in process `syz.4.459'. [ 148.469647][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 149.571212][ T6118] loop0: detected capacity change from 0 to 512 [ 149.623582][ T6118] EXT4-fs: Ignoring removed bh option [ 149.689606][ T6118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.750627][ T6118] EXT4-fs (loop0): 1 truncate cleaned up [ 149.756346][ T6118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.867926][ T6100] loop5: detected capacity change from 0 to 32768 [ 149.886795][ T6120] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.928585][ T6100] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 149.953837][ T6102] loop1: detected capacity change from 0 to 32768 [ 150.048890][ T6100] (syz.5.464,6100,1):ocfs2_rename:1282 ERROR: status = -2 [ 150.058412][ T6102] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 150.089006][ T6100] (syz.5.464,6100,1):ocfs2_rename:1687 ERROR: status = -2 [ 150.095353][ T6102] JBD2: Ignoring recovery information on journal [ 150.157163][ T6102] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 150.265423][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 150.268298][ T4948] ocfs2: Unmounting device (7,5) on (node local) [ 150.309937][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 150.932238][ T6120] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.257062][ T6120] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.490458][ T6120] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.723192][ T6120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.777524][ T6120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.786294][ T4519] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 151.826228][ T6120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.887884][ T6120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.975680][ T4519] usb 5-1: Using ep0 maxpacket: 16 [ 151.983353][ T4519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.017476][ T4519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.036921][ T4519] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 152.051972][ T4519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.087558][ T4519] usb 5-1: config 0 descriptor?? [ 152.099859][ T4516] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.309564][ T4516] usb 2-1: Using ep0 maxpacket: 32 [ 152.317922][ T4516] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 152.348465][ T4516] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 152.367695][ T4516] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 152.397976][ T4516] usb 2-1: config 1 has no interface number 0 [ 152.419688][ T4516] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.449625][ T4516] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 152.478393][ T4516] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 152.509829][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.544838][ T4516] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 152.556080][ T4519] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 2/5 [ 152.574784][ T4519] savu 0003:1E7D:2D5A.0002: parse failed [ 152.583472][ T4519] savu: probe of 0003:1E7D:2D5A.0002 failed with error -22 [ 152.751108][ T4516] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 152.786126][ T4516] usb 5-1: USB disconnect, device number 3 [ 152.944755][ T6196] loop3: detected capacity change from 0 to 40427 [ 152.992508][ T6196] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 153.016529][ T6196] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.028475][ T6196] F2FS-fs (loop3): invalid crc value [ 153.067732][ T6196] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.174276][ T6196] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 153.188935][ T4516] usb 2-1: USB disconnect, device number 5 [ 153.201407][ T4516] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 153.220033][ T6196] F2FS-fs (loop3): Start checkpoint disabled! [ 153.308498][ T6196] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.319582][ T6196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 153.377641][ T27] audit: type=1800 audit(1738025624.020:13): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 153.432754][ T6196] syz.3.490: attempt to access beyond end of device [ 153.432754][ T6196] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 153.463105][ T6196] syz.3.490: attempt to access beyond end of device [ 153.463105][ T6196] loop3: rw=2049, sector=45128, nr_sectors = 96 limit=40427 [ 153.495813][ T6196] syz.3.490: attempt to access beyond end of device [ 153.495813][ T6196] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 153.518220][ T6231] loop4: detected capacity change from 0 to 2048 [ 153.552425][ T6231] NILFS (loop4): invalid segment: Sequence number mismatch [ 153.580171][ T6231] NILFS (loop4): trying rollback from an earlier position [ 153.652776][ T6231] NILFS (loop4): recovery complete [ 153.712121][ T6235] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.814376][ T9] kworker/u4:0: attempt to access beyond end of device [ 153.814376][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 153.951168][ T6241] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.060506][ T6218] loop5: detected capacity change from 0 to 32768 [ 154.115343][ T6218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.495 (6218) [ 154.190683][ T6246] loop0: detected capacity change from 0 to 1764 [ 154.219719][ T6218] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.260483][ T6218] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 154.299571][ T6218] BTRFS info (device loop5): setting nodatacow, compression disabled [ 154.315097][ T6218] BTRFS info (device loop5): max_inline at 0 [ 154.375194][ T6218] BTRFS info (device loop5): enabling disk space caching [ 154.392688][ T6218] BTRFS info (device loop5): turning off barriers [ 154.399176][ T6218] BTRFS info (device loop5): turning on flush-on-commit [ 154.437013][ T6218] BTRFS info (device loop5): doing ref verification [ 154.457271][ T6218] BTRFS info (device loop5): force clearing of disk cache [ 154.470893][ T6218] BTRFS info (device loop5): enabling ssd optimizations [ 154.477932][ T6218] BTRFS info (device loop5): max_inline at 4096 [ 154.574177][ T6218] BTRFS info (device loop5): disk space caching is enabled [ 154.966435][ T6218] BTRFS info (device loop5): rebuilding free space tree [ 155.054135][ T6218] BTRFS info (device loop5): disabling free space tree [ 155.086058][ T6218] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.121265][ T6218] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.554195][ T4948] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.552665][ T6308] loop0: detected capacity change from 0 to 1024 [ 156.829255][ T6296] loop3: detected capacity change from 0 to 32768 [ 156.897559][ T6298] loop1: detected capacity change from 0 to 32768 [ 156.949388][ T6296] XFS (loop3): Mounting V5 Filesystem [ 157.027091][ T6298] XFS (loop1): Mounting V5 Filesystem [ 157.053381][ T6326] user requested TSC rate below hardware speed [ 157.138269][ T6296] XFS (loop3): Ending clean mount [ 157.146134][ T6296] XFS (loop3): Quotacheck needed: Please wait. [ 157.292753][ T6296] XFS (loop3): Quotacheck: Done. [ 157.312307][ T6298] XFS (loop1): Ending clean mount [ 157.546822][ T4263] XFS (loop3): Unmounting Filesystem [ 157.552334][ T4783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.568416][ T6298] XFS (loop1): Unmounting Filesystem [ 157.704603][ T6353] loop4: detected capacity change from 0 to 512 [ 157.772865][ T4783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.791557][ T6353] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.810668][ T4783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.827462][ T4783] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 157.833141][ T6353] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 157.838110][ T4783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.876457][ T6353] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 157.890922][ T4783] usb 1-1: config 0 descriptor?? [ 157.891963][ T6353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 157.907543][ T6353] System zones: 0-2, 18-18, 34-34 [ 157.977874][ T6353] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.054634][ T6353] EXT4-fs (loop4): 1 truncate cleaned up [ 158.068531][ T6353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.122306][ T6353] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted [ 158.314358][ T4783] logitech-hidpp-device 0003:046D:C086.0003: item fetching failed at offset 4/5 [ 158.319135][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 158.360025][ T4783] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed [ 158.389792][ T4783] logitech-hidpp-device: probe of 0003:046D:C086.0003 failed with error -22 [ 158.449298][ T6366] loop3: detected capacity change from 0 to 512 [ 158.534709][ T4783] usb 1-1: USB disconnect, device number 5 [ 158.615073][ T6366] EXT4-fs (loop3): 1 orphan inode deleted [ 158.621331][ T6366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.639597][ T6366] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.639872][ T63] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 158.698133][ T63] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:4: Failed to release dquot type 1 [ 158.741050][ T63] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 158.767904][ T63] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:4: Failed to release dquot type 1 [ 158.825501][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 159.114310][ T6386] loop3: detected capacity change from 0 to 128 [ 159.487836][ T6400] loop5: detected capacity change from 0 to 512 [ 159.518359][ T6402] loop3: detected capacity change from 0 to 2048 [ 159.530641][ T6402] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.576820][ T6402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.598705][ T6400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.629003][ T6400] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.679751][ T4783] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.714539][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 159.746152][ T6411] loop4: detected capacity change from 0 to 1024 [ 159.851106][ T4948] EXT4-fs (loop5): unmounting filesystem. [ 159.909807][ T4783] usb 2-1: Using ep0 maxpacket: 16 [ 159.916818][ T4783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.958536][ T4783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.978888][ T4783] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 160.009227][ T4783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.042001][ T4783] usb 2-1: config 0 descriptor?? [ 160.479166][ T4783] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0004/input/input8 [ 160.523641][ T6431] loop4: detected capacity change from 0 to 164 [ 160.537524][ T6429] loop3: detected capacity change from 0 to 4096 [ 160.562066][ T6431] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 160.589086][ T6431] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 160.592906][ T4783] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 160.622215][ T6431] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 160.732795][ T6415] loop5: detected capacity change from 0 to 32768 [ 160.762616][ T4301] usb 2-1: USB disconnect, device number 6 [ 160.813669][ T6415] XFS (loop5): Mounting V5 Filesystem [ 160.889348][ T6442] sp0: Synchronizing with TNC [ 160.917206][ T6415] XFS (loop5): Ending clean mount [ 160.989298][ T4263] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 160.997881][ T4263] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.084733][ T6415] syz.5.552 (6415) used greatest stack depth: 17728 bytes left [ 161.087335][ T4948] XFS (loop5): Unmounting Filesystem [ 161.562790][ T6456] loop0: detected capacity change from 0 to 128 [ 161.642094][ T6456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.682547][ T6456] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.743077][ T27] audit: type=1800 audit(1738025632.390:14): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 161.766187][ T6462] loop5: detected capacity change from 0 to 128 [ 161.885129][ T6462] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 161.934509][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 162.456876][ T6490] loop1: detected capacity change from 0 to 2048 [ 162.484279][ T6490] NILFS (loop1): invalid segment: Sequence number mismatch [ 162.497901][ T6490] NILFS (loop1): trying rollback from an earlier position [ 162.514718][ T6490] NILFS (loop1): recovery complete [ 162.545132][ T6494] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.648736][ T4783] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.684360][ T6501] netlink: 'syz.5.584': attribute type 34 has an invalid length. [ 162.802656][ T6503] loop4: detected capacity change from 0 to 4096 [ 162.849847][ T4783] usb 1-1: Using ep0 maxpacket: 32 [ 162.858262][ T4783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.871409][ T4783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.881663][ T4783] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.893885][ T4783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.919005][ T4783] usb 1-1: config 0 descriptor?? [ 162.940533][ T4783] hub 1-1:0.0: USB hub found [ 163.032012][ T6507] loop4: detected capacity change from 0 to 1024 [ 163.040319][ T6507] EXT4-fs: Ignoring removed nobh option [ 163.045926][ T6507] EXT4-fs: Ignoring removed bh option [ 163.052571][ T6507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.075276][ T6507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.089661][ T4301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.138691][ T4783] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 163.196008][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 163.279579][ T4301] usb 6-1: Using ep0 maxpacket: 8 [ 163.288840][ T4301] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 163.294483][ T6515] loop4: detected capacity change from 0 to 1024 [ 163.314312][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 163.332059][ T4301] usb 6-1: Product: syz [ 163.336448][ T4301] usb 6-1: Manufacturer: syz [ 163.342036][ T4301] usb 6-1: SerialNumber: syz [ 163.358163][ T4301] usb 6-1: config 0 descriptor?? [ 163.388644][ T4301] gspca_main: sq905-2.14.0 probing 2770:9120 [ 163.564450][ T6523] netlink: 'syz.4.593': attribute type 4 has an invalid length. [ 163.566188][ T4783] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 163.572374][ T6523] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.593'. [ 163.817476][ T6533] loop3: detected capacity change from 0 to 256 [ 163.869855][ T4520] usb 1-1: USB disconnect, device number 6 [ 164.019395][ T6541] loop3: detected capacity change from 0 to 2048 [ 164.031259][ T6541] NILFS (loop3): invalid segment: Sequence number mismatch [ 164.038741][ T6541] NILFS (loop3): trying rollback from an earlier position [ 164.066514][ T6541] NILFS (loop3): recovery complete [ 164.077145][ T6545] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.416839][ T4301] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 164.434354][ T4301] sq905: probe of 6-1:0.0 failed with error -71 [ 164.455482][ T4301] usb 6-1: USB disconnect, device number 3 [ 164.545017][ T6554] loop0: detected capacity change from 0 to 1024 [ 164.552534][ T6554] EXT4-fs: Ignoring removed orlov option [ 164.558858][ T6554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.578393][ T6554] EXT4-fs (loop0): Test dummy encryption mode enabled [ 164.595854][ T6554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.618851][ T6554] EXT4-fs (loop0): shut down requested (2) [ 164.712124][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 165.475465][ T6560] loop4: detected capacity change from 0 to 40427 [ 165.490820][ T6560] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 165.499226][ T6587] loop5: detected capacity change from 0 to 2048 [ 165.508908][ T6560] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.527196][ T6587] NILFS (loop5): invalid segment: Sequence number mismatch [ 165.538445][ T6587] NILFS (loop5): trying rollback from an earlier position [ 165.572300][ T6560] F2FS-fs (loop4): invalid crc value [ 165.575786][ T6587] NILFS (loop5): recovery complete [ 165.601641][ T6590] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.621162][ T6560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.766193][ T6560] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.787722][ T6560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.902451][ T4301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.099654][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 166.113597][ T4301] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 166.145143][ T4301] usb 2-1: config 0 has no interface number 0 [ 166.164522][ T4301] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 166.185789][ T4301] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.207108][ T4301] usb 2-1: config 0 interface 41 has no altsetting 0 [ 166.224187][ T4301] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 166.242444][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.259751][ T4301] usb 2-1: Product: syz [ 166.268558][ T4301] usb 2-1: Manufacturer: syz [ 166.278076][ T4301] usb 2-1: SerialNumber: syz [ 166.295675][ T4301] usb 2-1: config 0 descriptor?? [ 166.301705][ T6594] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.318816][ T6594] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.557152][ T6594] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.579756][ T6594] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.145517][ T6628] loop3: detected capacity change from 0 to 512 [ 167.181202][ T6628] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.213898][ T6628] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 167.226689][ T6630] input: syz1 as /devices/virtual/input/input9 [ 167.259864][ T6628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 167.267953][ T6628] System zones: 1-12 [ 167.292263][ T6628] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.638: corrupted in-inode xattr [ 167.336213][ T6628] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.638: couldn't read orphan inode 15 (err -117) [ 167.368140][ T6628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.396408][ T6618] loop4: detected capacity change from 0 to 40427 [ 167.403176][ T4301] CoreChips: probe of 2-1:0.41 failed with error -71 [ 167.413759][ T4301] usb 2-1: USB disconnect, device number 7 [ 167.419541][ T6618] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 167.440526][ T6618] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 167.491850][ T6618] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.589707][ T6618] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 167.596900][ T6618] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.649156][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 168.169759][ T4301] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.361042][ T4301] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 168.380562][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.384316][ T6667] loop1: detected capacity change from 0 to 512 [ 168.407205][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.411632][ T6667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.428563][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.449026][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.478766][ T6667] EXT4-fs (loop1): 1 truncate cleaned up [ 168.488858][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.500238][ T6667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.553618][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.568684][ T6673] loop5: detected capacity change from 0 to 512 [ 168.585686][ T6673] EXT4-fs: Ignoring removed bh option [ 168.596133][ T6673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 168.596728][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.609615][ T6673] System zones: 1-12 [ 168.621761][ T6673] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.656: corrupted in-inode xattr [ 168.655050][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.666983][ T6673] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.656: couldn't read orphan inode 15 (err -117) [ 168.686673][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.707160][ T6673] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 168.708389][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.733121][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.748341][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.769254][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.772689][ T6673] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.656: Unrecognised inode hash code 4 [ 168.795320][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.810867][ T6673] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.656: Corrupt directory, running e2fsck is recommended [ 168.817430][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.846578][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.873139][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.893943][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.915766][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.933946][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.946358][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.961367][ T4301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.976115][ T4301] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.993030][ T4948] EXT4-fs (loop5): unmounting filesystem. [ 168.996346][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 169.027847][ T4301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.063373][ T4301] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.080392][ T4301] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.105974][ T4301] usb 4-1: Product: syz [ 169.118878][ T4301] usb 4-1: Manufacturer: syz [ 169.128650][ T4301] usb 4-1: SerialNumber: syz [ 169.147550][ T4301] usb 4-1: config 0 descriptor?? [ 169.183920][ T4301] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 169.252746][ T6688] loop4: detected capacity change from 0 to 1024 [ 169.291602][ T6688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.329620][ T6688] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.349631][ T6688] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.364456][ T6688] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.364456][ T6688] [ 169.374414][ T6688] EXT4-fs (loop4): Total free blocks count 0 [ 169.380570][ T6688] EXT4-fs (loop4): Free/Dirty block details [ 169.386789][ T6688] EXT4-fs (loop4): free_blocks=68451041280 [ 169.392857][ T6688] EXT4-fs (loop4): dirty_blocks=80 [ 169.398208][ T6688] EXT4-fs (loop4): Block reservation details [ 169.404387][ T6688] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 169.425066][ T4301] usb 4-1: USB disconnect, device number 8 [ 169.447878][ T4301] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 169.466209][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 169.531165][ T6697] input: syz0 as /devices/virtual/input/input11 [ 169.567609][ T6699] loop4: detected capacity change from 0 to 128 [ 170.038563][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 170.094498][ T4253] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 170.154985][ T6719] loop1: detected capacity change from 0 to 2048 [ 170.192558][ T6719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.220008][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.676'. [ 170.233678][ T6709] loop4: detected capacity change from 0 to 32768 [ 170.242292][ T6709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.670 (6709) [ 170.259133][ T6709] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.269738][ T6709] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 170.278478][ T6709] BTRFS info (device loop4): setting nodatacow, compression disabled [ 170.286777][ T6709] BTRFS info (device loop4): max_inline at 0 [ 170.299499][ T6709] BTRFS info (device loop4): enabling disk space caching [ 170.304992][ T4253] usb 6-1: Using ep0 maxpacket: 16 [ 170.306584][ T6709] BTRFS info (device loop4): turning off barriers [ 170.323952][ T4253] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 170.338893][ T6709] BTRFS info (device loop4): turning on flush-on-commit [ 170.346796][ T6709] BTRFS info (device loop4): doing ref verification [ 170.353557][ T4253] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.366248][ T6709] BTRFS info (device loop4): force clearing of disk cache [ 170.383805][ T6709] BTRFS info (device loop4): enabling ssd optimizations [ 170.387676][ T4253] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 170.409537][ T6709] BTRFS info (device loop4): max_inline at 4096 [ 170.415890][ T6709] BTRFS info (device loop4): disk space caching is enabled [ 170.418749][ T4253] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 170.449512][ T4253] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 170.464292][ T4253] usb 6-1: config 1 interface 0 has no altsetting 0 [ 170.497721][ T4253] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 170.527333][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.548661][ T4253] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 170.617932][ T6709] BTRFS info (device loop4): rebuilding free space tree [ 170.655373][ T6709] BTRFS info (device loop4): disabling free space tree [ 170.676466][ T6709] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 170.706528][ T6709] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 170.734138][ T6721] loop3: detected capacity change from 0 to 32768 [ 170.754616][ T4253] scsi host1: usb-storage 6-1:1.0 [ 170.796983][ T6721] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 170.864184][ T6756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.959751][ T4516] usb 6-1: USB disconnect, device number 4 [ 170.973466][ T4249] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.985035][ T4263] ocfs2: Unmounting device (7,3) on (node local) [ 171.000023][ T6759] loop1: detected capacity change from 0 to 164 [ 171.454092][ T6770] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.709722][ T6781] loop4: detected capacity change from 0 to 256 [ 171.921982][ T6789] loop0: detected capacity change from 0 to 64 [ 172.025794][ T6792] loop4: detected capacity change from 0 to 64 [ 172.416652][ T6785] loop1: detected capacity change from 0 to 32768 [ 172.439647][ T6785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.695 (6785) [ 172.468959][ T6785] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.490060][ T6785] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 172.499191][ T6785] BTRFS info (device loop1): setting nodatacow, compression disabled [ 172.509701][ T4253] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.525451][ T6785] BTRFS info (device loop1): max_inline at 0 [ 172.538358][ T6785] BTRFS info (device loop1): enabling disk space caching [ 172.557873][ T6785] BTRFS info (device loop1): turning off barriers [ 172.578289][ T6812] loop0: detected capacity change from 0 to 128 [ 172.579831][ T6785] BTRFS info (device loop1): turning on flush-on-commit [ 172.603988][ T6785] BTRFS info (device loop1): doing ref verification [ 172.619831][ T6785] BTRFS info (device loop1): force clearing of disk cache [ 172.639931][ T6785] BTRFS info (device loop1): enabling ssd optimizations [ 172.643524][ T6812] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 172.669607][ T6812] FAT-fs (loop0): Filesystem has been set read-only [ 172.675514][ T6785] BTRFS info (device loop1): max_inline at 4096 [ 172.689876][ T6785] BTRFS info (device loop1): disk space caching is enabled [ 172.709577][ T4253] usb 6-1: Using ep0 maxpacket: 8 [ 172.718936][ T4253] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 172.727481][ T4253] usb 6-1: config 179 has no interface number 0 [ 172.734062][ T4253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 172.745518][ T4253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 172.757043][ T4253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.768481][ T4253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 172.780669][ T4253] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 172.794584][ T4253] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 172.803840][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.819813][ T6799] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.924427][ T6785] BTRFS info (device loop1): rebuilding free space tree [ 172.983865][ T6785] BTRFS info (device loop1): disabling free space tree [ 173.017180][ T6785] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.080728][ T6785] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.080838][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input12 [ 173.279841][ T22] usb 6-1: USB disconnect, device number 5 [ 173.279911][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 173.295178][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 173.300400][ T22] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 173.461642][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.860577][ T6849] loop0: detected capacity change from 0 to 1024 [ 173.878385][ T6849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.006976][ T6849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.214111][ T6844] loop3: detected capacity change from 0 to 32768 [ 174.225169][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 174.231801][ T6844] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.713 (6844) [ 174.244583][ T6864] loop5: detected capacity change from 0 to 6 [ 174.299504][ T6844] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 174.349846][ T6844] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 174.358696][ T6844] BTRFS info (device loop3): using free space tree [ 174.459066][ T6868] loop0: detected capacity change from 0 to 4096 [ 174.474605][ T6868] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 174.504443][ T6868] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 174.519394][ T6868] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 174.556333][ T6875] loop5: detected capacity change from 0 to 4096 [ 174.563350][ T6868] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 174.587384][ T6875] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 174.599285][ T6868] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 174.643854][ T6868] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 174.656722][ T6856] loop4: detected capacity change from 0 to 40427 [ 174.664756][ T6868] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 174.666273][ T6856] F2FS-fs (loop4): invalid crc value [ 174.678913][ T6868] ntfs: volume version 3.1. [ 174.682194][ T6844] BTRFS info (device loop3): enabling ssd optimizations [ 174.691762][ T6868] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 174.710895][ T6868] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 174.720880][ T6875] ntfs3: loop5: ino=5, "/" attr_set_size [ 174.734842][ T6856] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.741576][ T6875] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 174.801129][ T6868] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp437. You might want to try to use the mount option nls=utf8. [ 174.844814][ T6856] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 174.865594][ T4263] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 174.899983][ T6856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 174.908344][ T4724] ------------[ cut here ]------------ [ 174.914662][ T4724] kernel BUG at fs/notify/dnotify/dnotify.c:136! [ 174.962382][ T4724] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 174.968529][ T4724] CPU: 1 PID: 4724 Comm: kworker/u4:8 Not tainted 6.1.127-syzkaller #0 [ 174.976969][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.987063][ T4724] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 174.994129][ T4724] RIP: 0010:dnotify_free_mark+0x53/0x60 [ 174.999894][ T4724] Code: 48 89 df e8 9f e6 dd ff 48 83 3b 00 75 17 e8 a4 53 86 ff 48 8b 3d 9d 0f 97 0c 4c 89 f6 5b 41 5e e9 a2 0f dd ff e8 8d 53 86 ff <0f> 0b cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 41 55 41 54 [ 175.019539][ T4724] RSP: 0018:ffffc9000c6d7b88 EFLAGS: 00010293 [ 175.025727][ T4724] RAX: ffffffff82044913 RBX: ffff888076891080 RCX: ffff8880264d0000 [ 175.033729][ T4724] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffff888076891000 [ 175.039076][ T6856] syz.4.718: attempt to access beyond end of device [ 175.039076][ T6856] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.041708][ T4724] RBP: ffffc9000c6d7c50 R08: dffffc0000000000 R09: fffffbfff224a064 [ 175.041728][ T4724] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881452a7000 [ 175.041743][ T4724] R13: ffffc9000c6d7be0 R14: ffff888076891000 R15: ffff888076891000 [ 175.079452][ T4724] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 175.088762][ T4724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.095387][ T4724] CR2: 000000110c3f27a9 CR3: 0000000079408000 CR4: 00000000003506e0 [ 175.103431][ T4724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.111660][ T4724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.119667][ T4724] Call Trace: [ 175.122969][ T4724] [ 175.125917][ T4724] ? __die_body+0x5e/0xa0 [ 175.130280][ T4724] ? die+0x83/0xb0 [ 175.134034][ T4724] ? do_trap+0x11e/0x350 [ 175.138392][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.143366][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.148342][ T4724] ? do_error_trap+0x13d/0x1e0 [ 175.153138][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.158111][ T4724] ? do_int3+0x30/0x30 [ 175.162217][ T4724] ? report_bug+0x3e0/0x500 [ 175.166751][ T4724] ? rcu_is_watching+0x11/0xb0 [ 175.171543][ T4724] ? handle_invalid_op+0x2c/0x40 [ 175.176523][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.181499][ T4724] ? exc_invalid_op+0x2f/0x40 [ 175.186198][ T4724] ? asm_exc_invalid_op+0x16/0x20 [ 175.191266][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.196239][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.201219][ T4724] ? dnotify_free_mark+0x53/0x60 [ 175.206197][ T4724] fsnotify_mark_destroy_workfn+0x2c7/0x340 [ 175.212157][ T4724] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 175.218533][ T4724] ? process_one_work+0x7a9/0x11d0 [ 175.223678][ T4724] process_one_work+0x8a9/0x11d0 [ 175.228652][ T4724] ? worker_detach_from_pool+0x260/0x260 [ 175.234316][ T4724] ? _raw_spin_lock_irqsave+0x120/0x120 [ 175.239897][ T4724] ? kthread_data+0x4e/0xc0 [ 175.244440][ T4724] ? wq_worker_running+0x97/0x190 [ 175.249488][ T4724] worker_thread+0xa47/0x1200 [ 175.254203][ T4724] ? _raw_spin_unlock+0x40/0x40 [ 175.259096][ T4724] kthread+0x28d/0x320 [ 175.263194][ T4724] ? worker_clr_flags+0x190/0x190 [ 175.268245][ T4724] ? kthread_blkcg+0xd0/0xd0 [ 175.272858][ T4724] ret_from_fork+0x1f/0x30 [ 175.274789][ T6896] loop0: detected capacity change from 0 to 256 [ 175.277309][ T4724] [ 175.277319][ T4724] Modules linked in: [ 175.332073][ T6896] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0e5ad3fb, utbl_chksum : 0xe619d30d) [ 175.436992][ T4724] ---[ end trace 0000000000000000 ]--- [ 175.445590][ T4724] RIP: 0010:dnotify_free_mark+0x53/0x60 [ 175.451735][ T4724] Code: 48 89 df e8 9f e6 dd ff 48 83 3b 00 75 17 e8 a4 53 86 ff 48 8b 3d 9d 0f 97 0c 4c 89 f6 5b 41 5e e9 a2 0f dd ff e8 8d 53 86 ff <0f> 0b cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 41 55 41 54 [ 175.473540][ T4724] RSP: 0018:ffffc9000c6d7b88 EFLAGS: 00010293 [ 175.479770][ T4724] RAX: ffffffff82044913 RBX: ffff888076891080 RCX: ffff8880264d0000 [ 175.487829][ T4724] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffff888076891000 [ 175.497730][ T4724] RBP: ffffc9000c6d7c50 R08: dffffc0000000000 R09: fffffbfff224a064 [ 175.505885][ T4724] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881452a7000 [ 175.518393][ T4724] R13: ffffc9000c6d7be0 R14: ffff888076891000 R15: ffff888076891000 [ 175.527406][ T4724] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 175.538299][ T4724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.544990][ T4724] CR2: 00005555817d2808 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 175.554831][ T4724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.563449][ T4724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.573444][ T4724] Kernel panic - not syncing: Fatal exception [ 175.579875][ T4724] Kernel Offset: disabled [ 175.584225][ T4724] Rebooting in 86400 seconds..