last executing test programs: 55.912514294s ago: executing program 0 (id=601): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0xfe33) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000100)) 55.783706667s ago: executing program 0 (id=603): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a2, 0x4, 0x4, 0x4, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 55.66687201s ago: executing program 0 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x82f}]}) 55.462140615s ago: executing program 0 (id=611): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 54.784075011s ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 53.824068915s ago: executing program 0 (id=626): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 53.575962231s ago: executing program 32 (id=626): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 24.282976781s ago: executing program 3 (id=1028): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002280)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000001701"], 0x10}}], 0x2, 0xc000) 24.163918394s ago: executing program 3 (id=1032): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 24.071544236s ago: executing program 3 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r1, 0xb3c8ac16511349d1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffa, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) 23.963941069s ago: executing program 3 (id=1037): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400c, &(0x7f00000004c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000000b40)='./file0\x00', 0x0, 0xfffffdf3) 23.418359872s ago: executing program 3 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003280)={&(0x7f00000032c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 22.69393016s ago: executing program 3 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="fa8ee0748b50dadda99d3785db313b77c4a493fd", 0x14) 22.387444327s ago: executing program 33 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="fa8ee0748b50dadda99d3785db313b77c4a493fd", 0x14) 3.650991701s ago: executing program 5 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 3.28801298s ago: executing program 5 (id=1264): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) 3.151095064s ago: executing program 5 (id=1266): unshare(0x28000600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) 3.010740137s ago: executing program 5 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0xb00) 2.866347161s ago: executing program 5 (id=1272): pipe(&(0x7f0000003180)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.370239667s ago: executing program 5 (id=1294): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="afa95f9cab972040eb9fc46ce566bc4486ba9a6989c0bcbc795394ff2d899681dbd0ed518553fdd737cf7cab81a48db6f37ceb751a4215755dfa881b23653a6adee02280713c97c4c2337acc38d8dba2777d97f0f3a7d4e2af5e3e3d1ba6b3b729b1082f1d55cd2d183b7846d0af750ead5f2877c4fd370bb62ef882b9e0dd6aed80295d4b2ba6a08289bfcfb55e320cb2caf5a6f91228a873087a9e00e2f5ad602a07c18de258a04d36d2e3b0f0b870e59183d63fb115b871bc6a89207f588d949b52ffac44128ba019113a77f2fac987603480363031eb8005cd60c15837354e5ef4ae098636321e48b419f8ba3edb2318af88fbf18ab51a523a303863468c45714743cdb0d6decaedff7a9b47ff1231408632fdffbfcf403cb27bb7385ebe81058d44940da7da7affe020e411516c829ee69885c3a10367f0f7b3ccbd05e1ff9ca570ba15a166be4afa64df7d8bddd19cbf2f0f2117b13569fe5ac12c82caaa3102209f48eb2040bc5e200eca176bf219e7a745b5d25ca0c899bc8b5695b15d6cc83c8966f77d35c90c819d465ead79bb584690d68ea083e6d7a1b6d2c393c21a1d601f98b6d45f59160e610d9cb3f84d152061ab136f8ca7ce57587a69f1576b0539ca9694da65de323861c262395d7106c08f5c1fda6b3df676f09d7311791e1bd5927229faf9b047db8afab569a9ca319888e4b4690054c0e0caf886f7773ed7453bb8a13e857524ef57d54b405751f26090ab906625b43efbde3f9e46a9d11c93cf0121f410bb0f09083c7f7118d7c7f057b57f800a8d36b4f214d694bcde0330b27adea2bc02095f9eb1941c0f3b5cd0fe682f3ee784cf04cc45a23a8631386ac72f620351fad5e4c17e700985459a8ce15c056474d4bc8caaa54cf23be06a6dfb428c0a2c1d731a60180c882e48e2e27f9edb5478bee530e6d8b13d8d9c3cca83279a50d3fdb30f7a91743a11590a1008f47b65339e9732b415c5c664007c33762fd82cab04ee9f07ce89175080e3ca3701a14b085d60eb193e2c4fba87cf51eb36fda2642b0dabd523aa26dc6ec415e8bb1a9d03734f47be7fa81593b18cbf7be085019fd33771d082696b89fa1417f7507013fbeffe456eb062dfdbaa519ea5a236308037eeb5eed80926a6dd5152c400eca2fade1cd0614072cdcf0c85d1778ee79dc8bfa62e6f30f0faac6c67ff223d2ff8f4f73441c2e53eda8d577e2a81d447fa2ce7ff6a4ccc57d37b0d63356a86ffa23f03758d1d1f3cf20e12892f9988377f6354f4a09efc11cf902179ef309d46f4fa24d040d765fa0c25d4b99cf820059a9f7222c4ad71b582d94dcb4bec9bd8d0bad258753cfc5c1f6b147aaa59f314bb2291bfa5fdcc80b8e04ca8c2e8488c79f444c179f59d7fe68419bc6c312e7fd71415dffd3178eca60b13ce5f2879d780883ccdc37e98b66c40f9cee4ae9e8f79f61982b1545b33a063a9d2ed6a8e5011a96d2b90eb3a74c1d78f34dfad8c2ad6f12d276007d1e9c051e16ae1fbc57da26e76addf5261ea8244c2b3e3c5edfbe55341b9a6ca17a91c9701a40db62bf7e8f1889f7127f528683883b2a2b8c47bb46e19e78c170d25962b7fb80ed5113a6cae6ae2ddaaea1301a497a133368c7b105e4e0c7eca9c9055cad603e1e41808420d9a09e7b57490cead94522b6a0f3f03f604836ff16c82094782a4b705285fec1e6e77ef0a4fab3cb411b8927b4e9e29cb8fb619f3ad05e26506a05b075e578890de1e6a4b49bebc984ab9a3057553b896675f21920125ae2f66fc3b0b0d83f895f945c5d5e2b57a4247de5186c3caaa7e3c4c4755f3d2c7c64a0ad6d82904c3188e4c37c71a2297a1e0dc481d43bafc16970d335f7552c541bb596be14ed733345118419e3420a44720335517f867e2cd7c228202fc87c6f109d89b9fdf8afe59a3887826722d3cce23c11fee3b2d97bc29f970f49161b1634d9ba9f328d776a36c5e553c79ec00417d1e5db10c42bba39d1fd0b5b311b9dff6ea6533232f75ee7a1e6ebe3c695f614fa77a6fccb6d001b3c97817a66e3c3a15947468990834fb2a45455430461060c6ac258b4d228bd31ed9c3bc6122264a174722197bf1dd2d401cd33930a014f4ee353ae33edebbdd857fbc665c184fdd123aea414b694ddd66a837878c0d4b82e803f45c11a7226bb8bef2378b658ec80e93caec5f94847cd7b18844b2123edc40f563c9ede52654d733490347d202e449a2c491a9bcae41d71102d0df5bd6defd278b9a6025eb48134f4ab98bdb2cb715805bcfee79f01e9a3fa01bb969c7c0bfed86392e598118dc54ddd4591390e6a0112cae3f4dd705e8bae5aa68523940982c48351effc8a4cbcd662626393ee2ab5e1a232faeb132517d7132a035557c92daaf532f0983b6a821e98667590161065d5da666b5a759a025f06e3f0ea7c0edb84c38e44d764de2b65c537ac7719018d58137c6b9d0f5b6fb83aecf63c7beeb4b7eaf948b4f2c3abfe670c9856aebf7cf1a52ec80eb4243fbb970eb94d19bd6e4f1a86f55e76c3431f62bc6e42f3da4f9804e5f5160d699a30a9655cd279f091cbbfdc691e3a8c842e3c719a080a00e188b895f1333f1a5364a9478457c9bfcc12176750473427e93c2036a4d9eeda739e4625216a0f9a304f68d8a3dda3933981d59bbe58ed9252d6e061e749567071e9999f82c6ae29494ed813012ca96c5af3df1711064131bf7f6f1b470c2e92f6f683b646f121b195afc2d93f49a040d970c52331abd0c6c9b47ca815e150176128a117c2d55d47f6eb967265e542d798fde2d63263e21475cb3a4272522254c99d3fd72d153101981d0f172f55b96ab750f5bf1e3ac37f3d63f7a08eeae76868e79825d6d1487b136c08942bea9507ea1de097aca4ba97d23d929e7ba92723fe708bd819e1e5f83daa03366db78a4a63e01b4498a97a62acae91af71b794d2b563f46d1e56aa7652a650a1231e8a3b9890968b6a030072ad5d65f89667ab67f3b9fdd53fa8330a8dbac11e17d87882ef2a2323fb9bed881301241107340ce96444040c574a38010b093fdce2c075f5466b21d16d0ddf32646a72c5d70082d60b39563464943ae1663c9f8d5fe12867ad92c177c3b8014ebf8b6d30c911c259e6ebdf89b476907c6f777748297df71d0648c7a2f166cf6ef39d88127e64cda67a8e860463f7a1cf5a06f438ac8374ed38be7aa025a8b38bb82d409310a21a4ccc974d8ffbcb0125e19107d5cb34dc999b53c2ab4afea86b9516c1506d49859a4aeab61c023ec342fe57ddb8aed17f018a69cb01622c30fcec3e947f35394c5dc8b8b78022c41f4f9a4915baa0ff0fb84f2100f3c88e0ed56348d2cc8fd7c66534e155995f15f1777f45b404a813695096cbb8b323a66b8619e0672f610bb2c82af4102849f8f587b8bc6670f371349eb514207d1a81c6cc3f378ad9d4fcd1578dff0123149c1822a71db1f71da0c05ef82290a68ba8bc241d967344573ebbac05f3b7e2d1d352419e2854110e6cb4fbdbcc879de29208e3535fe95e817fee6906afe84a69af8018adcbb0894f17d118aa59a5970aa539513eb9124b44db166be3cc64b191576a493b8af67fdcb0e2f3bd81ca8f2bcc91caea6e491dc72b5c3db24c7b85709836af573b892745a0212e882db0e88ff443391e28aa401ac13648aeca40f816a33dd919eb45b3c4fe93f3bece67c5bae6434cb391f994a5986778afe746e7d510f912316becfea724efb0831578f24e09adc3a501d42fbddf3767c12293c2a519aea9301d16d4e6fb4616a84638b8c1c45ba2365a6bd8389843ea02a9814ec3b4f829628fd8ade85f3869e8248a7b26250ec5800d06486ec908c408f5f7d05ecea339eeeea48b1cdfc19ac63927b37ecf5b7542c2395b551b56194fefc8ded81aa303fc932cdc1ef77534d43881454848e1f47310918799c1fdec51f09e1a3b45969f9dde46722c6d42c3fea5343879a2a629c4a8bbcf91af1ad9ef8d1b7ef5cc49014251a6629bbe38628689ef6cfc40072a4cdf4e079c03569bad1e2214d021b39d40026156d38fbe6ef7196a7690da2ee5f65a8e6665ef4b509b0c5e6390bc1c24edbb67c4d9722202cc628291d68d7c8e38f2bc4a383cbf2a9b39317b21014c9c2b82ca72f13ce0b1c19c2405fed6169ad7d49c5c0e23491edf6fc65b7cd103f5fb4c150cd73850930b03ad49ccd28a5b62354c6885bec47d4b4dcdd981179c7e0b4411ae5bc819af9fb1a92b76ca54bd2a560e1596cf97fc8ee65171bc74571421b9333cdc89ba0b3d705cd350aee6d24b876d01d8f04f0323d55ba5e1606b89023507bf286a10f61ee2a719b2e769a42601129db0e80948b7b698161bcbe4344228c9ca2c469af696671afe00febfac512ba027e28a273f026ec4591c8c58a4f5fd588d2f7d2bf0e552a53cca0982f256625da621e9fb923b6bcb0bce0b136a60fcda6b1748d2f8e2559b7a203276f69336d93ef025afe44f37f8033a0d3cc3b9c22a01ea595b47485c11c17f744a6ac4c5d2e53427758f7c02844aa92cbf20862d98515aa22707ed37358141b02db787e4e0ba954eb0f07a51eb825ab5f4cbb75f33f39d657f5792c4300be32eeb418fdf63cf8d832fdac233844e45257384da412af500ece64042c79f233618168d7e9d816bc51073bcb4cecf209848c8495224355561115a3727be4071caf025fb96187d6678313e29fc06b305e856214882da8c3f7d7282df71ef6a16e5774136f68b841ee5726fead65f35f318a402ac3f8df7cf2f67befb7793b41c920e70dbb58784f25f1d597df1736ce07250a910c09cd48a1374adfa477fa434be6424e8132cbc7c0a2222b2860dc481467933b95839a964fd2888266e2ea4e443313779a307d9c61540f508557a7ca0c323118a6d262ca664f2966c98e6792514d802a58b0483fe409602c2043b9ac63d5de51b72ffb9ba2cc7417d530ce3b20fd7442dce73997c205c900a80c44f611d3fcb06c45a5264fc6e44f166f64983245bb05b6966ad29285a0bb5a019231bf43a0e01c9839a68a415a38ec062188bf322a43a8eae9cbb04358ea584f597c189577e313fa7b6c93e81e0cdeb953239d03d035bae90f0130f057f11c5c351168b3c8b62e039b850a8af8dad6b33328691ff765e23ac9fd0bf7e7ae2c0c339a57cfd878300cd36bd5c70137850989d1fd7dc04df11e33a85622cbd65b0df85b00092a87710dcf6d8b2a528b929a0fbd58ff62594e508619bef14679a953287c170abd62d770b94f9433141da5b0aa73b0b761567eccacc4e806084d1d863f2472038427392656f9b47139ee5279fb5caf8b44478424c2ea9dfdcab90b55b002dcf4cab0dfff87583c58b93e866a295bed5579a8fdc973f969c61edc103fb40f2afd38c4678f1b7f7db5f51e8fcd59a64dc21f185f6aa3e3fb755162dd0abe47341e7fe6b89b2922a20738d1179b5017ae064a90e10a367345c6e6ca2f16fe3776f43c1ed9cc995f10fe555b1d964f6872ea1ba0a0071a58d711c6c326c2a53cadf6a48d87268f1f0e219b592910134f495a2f91d9b7e33befe8a9a0f7f13ae7575f92497b9ae12a807e4fc3f551ae66b2741c99ef294fbdc5b229fff185fa4047992925512dcc790f39e0fdf2e494f19cfe1879bb4fbfde4169cbf335dc7fb299bb496e604b144dfb33e6adc417ca8a0ab451055904ed169cd69d624e2ec20fc443c7dacb1ebb12bd2680309cf6a3f535ef6b64e05c9ce9ac4ca83f952d79488e1e6d207a5f93da48932d", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPPQNMVzPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvP77Ef/z7y/8f++dcfnP7933537+QfT73dbv/T+j/u/eRuui0AAABgX6qqqnrpY/7x9Pm+33WnAICpyK//VZKXq9VqtVqtPnx1UzXe3WYRERvNber3DHfHXRkAMLs24ouuu0CH5F+0YUQc6boTwExz3P3h9PDRnbVeyrfXfD1Y2W7Px4LsyH+j9/j8jt2mk7SPMZnW/WszBvHqLv1ZnFIfZknOv9/O/+p2+yitd9D5T8tu+Y+2T30qTs5/0M6/5fDk3x+bf6ly/sN95T+QPwAAAAAAzLD89//lqX3/29txvdn8i9mdiZ72/e/KlPoAAAAAAAAAAC/a847/95jx/wAAAGBm1Z/Va38++mTZbp+x6+VXehGvtNYHCpNOllnquh8AAAAAAAAAAAAAUJLh9jG8V3oRcxHxytJSVVX1pald79fzbv+yK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+tIc3xMNRVV/ZQmO7pkmflye1t6+vvq1RNdhDx6ajw8ABICK2X40eekU6ZKrqWHT9LoeXg8f/4ePxz150fT8FAAAADl5VVVUv/Zz38fSdf7/rTgEAU5Ff/9vfC6jVarVarT58dVM13t1mEREbzW3q9wx3x10ZADC7NuKLrrtAh+RftGFEvN51J4CZ1uu6AxyIh4/urPVSvr3m60Ea3z0fC7Ij/43e1nZ5+3HTSdrHmEzr/rUZg3h1l/68NqU+zJKcf7+d/9Xt9lFa76Dzn5bd8q/3c7mD/nQt5z9o599yePLvj82/VDn/4b7yH8gfAAAAAABmWP77/7Lvf/MuAwAAAAAAAMBL5+GjO2v5vNf8/f+Xxqzn/M/DKeffk3+Rcv79Vv5fa603aMw/eP9J/v96dGftR3/4/Hie7jX/+TzTS/esXrpH9NIt9YZp+sy7Nj9u4ebcYFTf0lyvPximY36quQ/jetyI9VjdsW4//X88aT+3o73u6Vy6K2+3n9/RPtxub2x/YUf7XPrdgWoxt5+Jtfh53IgPttrrtvkJ+78wob2a0J7zH3j8FynnP2xc6vyXUnuvNa09+Kz/P4/75nTc7bz323v3Vw9+dybajMHjfWuq9+9EB/3Z+j85Mopf3lq/eebX127fvnku0mTH0vORJi9Yzn8uXR4//7+53Z6f95uP1wefjfad/6zYjOGu+b/ZmK/39+SU+9aFnP8oXXL+H6T28Y//lzn/3R//pzroDwAAAAAAAAAAAAAAADxNVVVbp4i+FxGX0vk/XZ2bCQBMV379r5K8XK1Wq9Vq9eGrm6rx3m0WEfH35jb1e4bfjLsyAGCW/SciPu+6E3RG/gXLv/dXT9/qujPAVN365NOfXrtxY/3mra57AgAAAAAAAAA8qzz+50pj/Oe3ImK5td6O8V/fj5XnHf9zmGceDzD67AN978dmfzToN4YbfyOePv73iXj6+N/DCbc3N6F9NKF97CDmDQsT2see6NGQ83+jMd55nf/x1vDrJYz/2h7zvgQ5/xON+3Od/1db6zXzr/7yjPnPwA+LbEZ/R/5nb3/8i7O3Pvn09PWPr320/tH6zy6url66cPmd1curZz+8fmM9/dthjw9Wzj+Pfe040LLk/HPm8i9Lzv/LqZZ/WXL+X0m1/MuS88/v9+Rflpx//uwj/7Lk/E+mWv5lyfl/PdXyL0vO/1Sq5V+WnP/bqZZ/WXL+p1Mt/7Lk/M+kWv5lyfmfTbX8y5Lzz99wyb8sOf98ZIP8y5LzP59q+Zcl538h1fIvS87/YqrlX5ac/zupln9Zcv6XUi3/suT8L6da/mXJ+X8j1fIvS87/m6mWf1ly/t9KtfzLkvP/dqrlX5ac/3dSLf+y5Py/m2r5lyXn/71Uy78sOf93Uy3/sjz5/X8zZsyYyTNdPzMBAAAAAAAAAAAAAG3TOJy4630EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1rjFxneQfws+tdZ+1w2UIIbgiwSUwIyZJdO77EtAZzK2lCWgqEtvQSUnsdDL7Va3NrpBiFlkiN2kjlA3wotyKVLxURoIqqFLlSK5BAIp9opbYhVaCKKLSG9gNUhK3mzPu8OzPe65mNPXPO7yfFjz17ZuadM+/M7n+d/xoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6XfPauQ+PFEXR+q/8ZbIontH6/ZapydYft7/iUq8QAAAA6NdT5a/nn50vOLCGK3Uc89UXffOLCwsLC8Vj333Z8z+ysJA/MFUUk5cVRfmx8OSdf7u985jkgWJiZLTjz6Or3P2mVT4+tsrHx1f5+OZVPn7ZKh+fWOXjF5yAC2xpfz+mvLHt5W8n26e0uKIYLz+2fYlrPTBy2ehofC+nNFJeZ2H8cHGkOFrMFbNdx7ePHSmP//I1rfu6rYj7Gu24r6tbO+SH9x2MNYykc7y9674WbzP84NXF1I9+eN/BN33s8auWmquehq7ba6/zhmtb6/xQuqS91pHisnxOYp2jHeu8eonnZFPXOkfK67V+37vO82tc56bFZV5Uvc/5RDFa/v7R8jyNdX5bL5+nq9NlP76uKIqzi8vuPeaC+ypGi61dl4wuPj8T7R3Zuo3WVnpOMbaufXrNGvZpax7a3r1Pe18T8fxfk643tswaOp+mH3xw8wXP+3r3aWg96uVeK717cKNfK4OyB2NfPFo+6AeX3IPb0+O/7/rl9+CSe2eJPZgfd8cevHa1PTi6eVO55vwkjJTXWdyDO7qO31Te00g5n7x+5T04c/rYyZn593/g5UeO3XPv3L1zx3fNzu65Ze/u2b2zM4ePHJ1Lv1Y824NvazGaXwPXpnMXr4GX9hzbuVUXPrVxr8OJFV6Hkz3HbvTrcKz3wY1cnBfkhXu6/dp4a+ukTzw0WizzGiufnxv7fx3mx93xOhzreB0u+Tllidfh2Bpeh61jTt64tq9Zxjr+W2oNT9fngsmOPdj79UjvHtzor0cGZQ9OpH3xrzcu/7ng6rTeB6fX+/XIpgv2YH646b2ndUn+en/i1nIstS+van3g8s3Fmfm5Uze/757Tp0/tKNK4KJ7bsVd69+vWjsdUXLBfR9e9Xw98+OvfuGqJyyfTuZp4eeuXiWWfq9Yxu25e+bkqP7stfT67Lt1ZpLHBLvb5XOqzeet85iy5wvlsHfOhmf6/Fs+5tOP9d3yZ99/I/T8r72d7vqkHNo2PtV+/m/LZGe96P+5+qsbK966R8r7Pz6zt/Xg8/Xex34+vWOH9eFvPsRv9fjze++Di/Xhkte929Kf3+ZxI++To7Mrvx61jtu1c754cW/H9+Lo0R9L5f1lKCjkXdeyd5fZtvq+xsfH0uMbiHrr36S1dx4+nbNa6r8/urLZPb7iufVub8qNbdLH26VTPsRu9T/P71XL7dGS1775V0/t8TqR9ccUtK+/T1jHndvX/3rklftvx3rl5tT04vmlza83jeRO23+8XtsQevLk4WJwojhaHyo9uLvfTSHlf07vXtgc3p/8u9nvlthX24A09x270Hsyfx5bbeyNjFz74DdD7fE6kffHR3SvvwdYxr9u7sV+73pAuycd0fO3a+/215b7ndVXPaXo6v+fVWuc/7F35e7OtY47eut6cufJ5uildcvkS56n39bvca+pQcXHO07a0zu/fuvx5aq2ndcxH9q1xPx0oiuILdxwov9+b/n7l82e+9cWuv3c50P7Yl/Yt3tYFX3Us9fc+X7jjwLl/vv0n63mMAAy2n5W/bt/a/lzX8TdTa/n7fwAAAGAoRO4fTTOT/wEAAKA2IvfH/xWeyf8AAABQG5H7x9LMGpL/H/y35737p/cXuZm/kMTH4zScfKJ9XHRcP5n+PLWwqHX5az7zj19/+/1ru+/Roih+evu/LHn8g0/EutoeTuuc+nb35RfY9u013f877lo8rrMDOJluPx5P7zb48n8/UV5val97nrv9XDnffPbBB1ofP7+v/efoTj75P+3j/jyVeQ8c/vuu69/wWPv+tj+28uOK633ujVvueMHbFu8vrjdy7bPKh/HRV7ZvN37uzcOvbR9/Ph233Pr/7o8/+7nW8e97ydLrv3906fU/mW73O2n+5Kn25Z3ntPXnuN4fpvXH/cX1bv70V5Zc/yNvaB//SHpePplm7/pf/acvfKrzfMX6434OPN6+Xtz/7F//R3m9uL24/d71T7zqia7z0Xv75z7fvp397/nfTZ3Hx+VxP3nfPd79PLdup3O/hc/+0bmu81z8e/t6f9Oz/ri9k48vvf6betZ5csfW8vrLVcY/PvedJR9vrOfAXz3a9Xge+V46f6+5s7zdiR+n/Zg+/n8Pt2+v96clPPq97veTOP6Tk+3XZdzeTM/6H+5Z/9kXt87d6uu/7Uft9T/yqq92Px//2V7HgR+052rrv/cT3+y6/qe+1X4+Tr13+viJ+TNHokM9mX72z8nvtm/vsoktWy9/xjOf9ez0Xtn757tPnH7n3Kmp2anZopgawh+J93Sv/9Np/ld7nN3o27+vKIr3dnxeu/H17f1XvOj8n7z4ts+8M477p9e1L3/ojvbnrZem4x5Ol59Nz3fczsc/1v582O/6436Wm3m9a3Tmax/es6YD0+P/6DVXlq+ykXPti3vfr6qK1/njz+t+3T/21vb8UjqvC+knM1975dfK43rvP342wkNvab++4yu5uH6/6//L9Hzf+Z327cft5vWmr2O+sq37/TGeny/d3/OTBibbP8XjbHr/KM62Px5HxddUD52/cj3LXNb8++dnjh45fuZ9M6fn5k/PzL//A3cfO3Hm+Om7y5/Nefe7Vrv+4ut7a/n6PjS3Z1dRvtpPtMfT7FKv/+RdBw/tnb3+0Nzhe84cPn3XyblT9x6cnz84d2j++nsOH55772rXP3Jo/46d+27Zu3P63iOH9t+6b98t+6aPHD/RWkZ7UavYM/vu6eOn7i6vMr9/174du3fvmp0+duLQ3P69s7PTZ1a7fvm5abp17fdMn5o7es/pI8fmpuePfGBu/459e/bsXPWn+x07eXh+aubUmeMzZ+bnTs20H8vU6fLi1ue+1a4PLfOf2LLk56mR9NX7jpv25J/P2vKZDy57U+1Den6A6PfTz6L5xl/82e61/Dly/3iaWUPyPwAAADRB5P7NaWbyPwAAANRG5P7L0szkfwAAAKiNyP0TaWYNyf/6//r/+v/6/0H/X/+/Cv1//f8q9P/1/4dh/fr/+v/0b9D6/5H7txRFI/M/AAAANEHk/q1pZvI/AAAA1Ebk/svTzOR/AAAAqI3I/c9IM2tI/tf/1//X/9f/D/r/+v9V6P/r/1eh/6//Pwzr1//X/6d/g9b/j9z/zDSzhuR/AAAAaILI/c9KM5P/AQAAoDYi9z87zUz+BwAAgNqI3D+ZZtaQ/K//r/+v/1+x/79Z/1//X/+/0P/X/69I/1//fxjWr/+v/0//Bq3/H7n/59LMGpL/AQAAoAki9z8nzUz+BwAAgNqI3P/cNDP5HwAAAGojcv8VaWYNyf/6//r/g9P/X6zFDkX/37//r/+v/1/S/9f/r0L/X/9/GNav/6//T/8Grf8fuf95aWYNyf8AAADQBJH7r0wzk/8BAACgNiL3Pz/NTP4HAACA2ojcvy3NrCH5X/9f/39w+v9D9u//6//r/+v/l/T/9f+r0P/X/x+G9ev/6//Tv0Hr/0fu//k0s4bkfwAAAGiCyP1XpZnJ/wAAAFAbkftfkGYm/wMAAEBtRO6/Os2sIflf/1//X/9f/z/o/+v/V6H/r/9fhf6//v8wrF//X/+f/g1a/z9y/wvTzBqS/wEAAKAJIve/KM1M/gcAAIDaiNz/4jQz+R8AAABqI3L/VJpZQ/K//r/+v/6//n/Q/9f/r0L/X/+/Cv1//f9hWL/+v/4//Ru0/n/k/mvSzBqS/wEAAKAJIvdfm2Ym/wMAAEBtRO6/Ls1M/gcAAIDaiNy/Pc2sIflf/1//X/9f/z/o/+v/V6H/r/9fhf6//v8wrF//X/+f/g1a/z9y/0vSzBqS/wEAAKAJIvdfn2Ym/wMAAEBtRO5/aZqZ/A8AAAC1Ebn/hjSzhuR//X/9f/1//f+g/6//X4X+v/5/Ffr/+v/DsH79f/1/+jdo/f/I/S9LM2tI/gcAAIAmiNx/Y5qZ/A8AAAC1Ebn/pjQz+R8AAABqI3L/dJpZQ/K//r/+v/6//n/Q/9f/r0L/X/+/Cv1//f9hWL/+v/4//Ru0/n/k/penmTUk/wMAAEATRO6/Oc1M/gcAAIDaiNw/k2Ym/wMAAEBtRO6fTTNrSP7X/9f/1//X/w/6//r/Vej/6/9Xof+v/z8M69f/1/+nf4PW/4/cvyPNrCH5HwAAAJogcv/ONDP5HwAAAGojcv8taWbyPwAAANRG5P5daWYNyf/6//r/+v/6/0H/X/+/Cv1//f8q9P/1/4dh/fr/+v/0b9D6/5H7d6eZNST/AwAAQBNE7t+TZib/AwAAQG1E7t+bZib/AwAAQG1E7r81zawh+V//X/9f/1//P+j/6/9Xof+v/1+F/r/+/zCs/6L0/x9Y/scA6P9TB4PW/4/cvy/NrCH5HwAAAJogcv8r0szkfwAAAKiNyP2/kGYm/wMAAEBtRO7/xTSzhuR//X/9f/1//f+g/6//X4X+v/5/Ffr/+v/DsH7//r/+P/0btP5/5P79aWYNyf8AAADQBJH7X5lmJv8DAABAbUTuf1WamfwPAAAAtRG5/0CaWUPyv/6//r/+v/5/0P8fkv7/H6zhmItI/1//vwr9f/3/YVi//r/+P/0btP5/5P5Xp5k1JP8DAABAE0Tuf02amfwPAAAAtRG5/7VpZvI/AAAA1Ebk/telmTUk/+v/6//r/+v/B/3/Ien/Dxj9f/3/KvT/9f+HYf36//r/9G/Q+v+R+1+fZtaQ/A8AAABNELn/l9LM5H8AAACojcj9b0gzk/8BAACgNiL335Zm1pD8r/+v//909f83p9vQ/+/Yd/r/Jf1//f/10P/X/y/W0/8fSa9g/f/Spe7PD/v69f/1/+nfoPX/I/f/cppZQ/I/AAAANEHk/tvTzOR/AAAAqI3I/Xekmcn/AAAAUBuR+9+YZtaQ/D/w/f90h/r/y/b/n9mag9j/D/r/HftO/7+k/6//vx76//r/hX//v7JL3Z8f9vXr/+v/079B6/9H7r8zzawh+R8AAACaIHL/r6SZdeb/5f6yDAAAABgKkft/Nc3M3/8DAABAbUTuf1OaWUPy/8D3/xP9/+H79/+D/n/HvtP/L+n/6/+vh/6//n+h/1/Zpe7PD/v69f/1/+nfoPX/I/f/WppZQ/I/AAAANEHk/jenmcn/AAAAUBuR+9+SZib/AwAAQG1E7n9rmllD8r/+v/6//r/+f9D/1/+vQv9f/78K/X/9/2FYv/6//j/9G7T+f+T+u9LMGpL/AQAAoAki978tzUz+BwAAgNqI3P/raWbyPwAAANRG5P7fSDNrSP7X/9f/1//X/w/6//r/Vej/6/9Xof+v/z8M69f/1/+nf4PW/4/c/5tpZg3J/wAAANAEkfvfnmYm/wMAAEBtRO7/rTQz+R8AAABqI3L/b6eZNST/6//r/+v/6/8H/f/h6P+Prn7IRaX/r/9fhf6//v8wrF//X/+f/g1a/z9y/++kmTUk/wMAAEATRO7/3TQz+R8AAABqI3L/3Wlm8j8AAADURuT+d6SZNST/6//r/+v/6/8H/f/h6P8PGv1//f8q9P/1/4dh/fr/+v/0b9D6/5H770kza0j+BwAAgCaI3P97aWbyPwAAANRG5P6DaWbyPwAAANRG5P5DaWYNyf/6//r/+v/6/0H/X/+/Cv1//f8q9P/1/8NKT8ilXv9G9f83Ffr/NNeg9f8j98+lmTUk/wMAAEATRO4/nGYm/wMAAEBtRO6/N81M/gcAAIDaiNz/zjSzhuR//X/9f/1//f+g/6//X4X+v/5/Ffr/+v/DsH7//r/+P/0btP5/5P4jaWYNyf8AAADQBJH735VmJv8DAABAbUTuf3eamfwPAAAAtRG5/2iaWUPyv/6//r/+v/5/0P/X/69C/1//vwr9f/3/YVi//r/+P/0btP5/5P5jaWYNyf8AAADQBJH7j6eZyf8AAABQG5H7T6SZyf8AAABQG5H7T6aZNST/6//r/+v/6/8H/X/9/yr0//X/q9D/1/8fhvXr/+v/079B6/9H7v/9NLOG5H8AAABogsj9p9LM5H8AAACojcj982lm8j8AAADURuT+02lmDcn/+v/6///P3l39enpVcRz+hQCZhMB/i0txd3d3p7i7u7u7S3G4IPSstcjQQbr3mXP2u9fzXHQl00yz05w0/Wbyyav/1/8n/b/+f4T+X/8/Qv+v/z/C+/X/+n/mrdb/5+6/c9zSZP8DAABAB7n77xK32P8AAACwjdz9d41b7H8AAADYRu7+u8UtTfa//l//r//X/yf9v/5/hP5f/z9C/6//X/v9t7/5r/p//T/zVuv/c/ffPW5psv8BAACgg9z994hb7H8AAADYRu7+e8Yt9j8AAABsI3f/veKWJvtf/6//1//r/5P+X/8/Qv+v/x+h/9f/H+H9+n/9P/NW6/9z9987bmmy/wEAAKCD3P33iVvsfwAAANhG7v4b4hb7HwAAALaRu/++cUuT/a//1//r//X/Sf+v/x+h/9f/j9D/6/+P8H79v/6feav1/7n77xe3NNn/AAAA0EHu/vvHLfY/AAAAbCN3/wPiFvsfAAAAtpG7/4FxS5P9r//X/+v/9f9J/6//H6H/1/+P0P/r/4/wfv2//p95q/X/ufsfFLc02f8AAADQQe7+B8ct9j8AAABsI3f/Q+IW+x8AAAC2kbv/oXFLk/2v/9f/6//1/0n/r/8fof/X/4/Q/+v/j/B+/b/+n3mr9f+5+x8WtzTZ/wAAANBB7v6Hxy32PwAAAGwjd/8j4hb7HwAAALaRu/+RcUuT/a//1//r//X/Sf+v/x+h/9f/j9D/6/+P8H79v/6feav1/7n7HxW3NNn/AAAA0EHu/kfHLfY/AAAAbCN3/2Piln/f/1cu8lUAAADAecrd/9i4pcmf/+v/9f/6f/1/0v/r/0fo//X/I/T/+v8jvF//r/9n3mr9f+7+x8UtTfY/AAAAdJC7//Fxi/0PAAAA28jd/4S4xf4HAACAbeTuf2Lc0mT/6//1//p//X/S/+v/R+j/9f8j9P/6/yO8X/+v/2feav1/7v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADbyN3/lLjF/gcAAIBt5O5/atzSZP/r//X/+n/9f9L/6/9H6P/1/yP0//r/I7xf/6//Z95q/X/u/qfFLU32PwAAAHSQu//pcYv9DwAAANvI3f+MuMX+BwAAgG3k7n9m3NJk/+v/9f/6f/1/0v/r/0fo//X/I/T/+v8jvF//r/9n3mr9f+7+Z8UtTfY/AAAAdJC7/9lxi/0PAAAA28jd/5y4xf4HAACAbeTuf27c0mT/6//1//p//X/S/+v/R2zY/5/9COj/9f/6f/2//l//z7TV+v/c/c+LW5rsfwAAAOggd//z4xb7HwAAALaRu/8FcYv9DwAAANvI3f/CuKXJ/tf/6//1//r/pP/X/4/YsP/3/f/Teff/V27xK/p//f8R3q//1/8zb7X+P3f/i+KWJvsfAAAAOsjd/+K4xf4HAACAbeTuf0ncYv8DAADANnL3vzRuabL/9f/6f/2//j/p//X/I/T/m/b/tzn5/r/+X/+v/9f/M221/j93/8vilib7HwAAADrI3f/yuMX+BwAAgG3k7n9F3GL/AwAAwDZy978ybmmy//X/+n/9v/4/6f/1/yP0/5v2/+f6/f9b0v/r/4/wfv2//p95q/X/uftfFbc02f8AAABwWLdiu+fuf3XckX8GAAAAsLbc/a+JW+x/AAAA2Ebu/tfGLU32v/5f/79G/3/j6Vrv1//r/0/6/+Xp//X/I/T/173/v8NpgX5+1mW//zr1//ljqv+nhdX6/9z9r4tbmux/AAAA6CB3/41xi/0PAAAA28jd//q4xf4HAACAbeTuf0Pc0mT/6//1/2v0/z2//39F/3/Vv0/9v/7/WvT/+v+T/n/YZffzR3+/7//r/5m3Wv+fu/+NcUuT/Q8AAAAd5O5/U9xi/wMAAMA2cve/OW6x/wEAAGAbufvfErc02f/6f/2//t/3/5P+X/8/Qv+v/x+h/9f/H+H9+n/9P/NW6/9z9781bmmy/wEAAKCD3P1vi1vsfwAAANhG7v63xy32PwAAAGwjd/874pYm+1//r//X/+v/k/5f/z9C/6//H6H/1/8f4f36f/0/81br/3P3vzNuabL/AQAAoIPc/e+KW+x/AAAA2Ebu/nfHLfY/AAAAbCN3/3vilib7X/+v/9f/6/+T/l//P0L/r/8fof/X/x/h/fp//T/zVuv/c/e/N25psv8BAACgg9z974tb7H8AAADYRu7+98ct9j8AAABsI3f/B+KWJvtf/6//1//r/5P+X/8/Qv+v/x+h/9f/H+H9+n/9P/NW6/9z938wbmmy/wEAAKCD3P0filvsfwAAANhG7v4Pxy32PwAAAGwjd/9H4pYm+1//v3j/f8PVv0//r//X/19A/39T/EdN//9/0f/r/0fo//X/R3i//l//z7zV+v/c/R+NW5rsfwAAAOggd//H4hb7HwAAALaRu//jcYv9DwAAANvI3f+JuKXJ/tf/L97/n67+ffp//b/+3/f/V6P/1/+P0P/r/4/wfv2//p95q/X/ufs/Gbc02f8AAADQQe7+T8Ut9j8AAABsI3f/p+MW+x8AAAC2kbv/Mzff2/7rbzTZ//p//b/+X/+f9P/6/xH6f/3/CP2//v8I79f/6/+Zt1r/f7b7r5w+G7c02f8AAADQQe7+z8Ut9j8AAABsI3f/5+MW+x8AAAC2kbv/C3FLk/2v/9f/6//1/0n/r/8fof/X/4/Q/+v/j/B+/b/+n3mr9f+5+78YtzTZ/wAAANBB7v4vxS32PwAAAGwjd/+X4xb7HwAAALaRu/8rcUuT/a//1//v1f+fpXj6/zMX3f/f8aT/P+n/z53+X/9/0v8Pu+x+/ujv1//r/5m3Wv+fu/+rcUuT/Q8AAAAd5O7/Wtxi/wMAAMA2cvd/PW6x/wEAAGAbufu/Ebc02f/6f/3/Xv3/Gf3/Gd//P6P/v770//r/Efp//f8R3q//1/8zb7X+P3f/N+OWJvsfAAAAOsjd/624xf4HAACAbeTu/3bcYv8DAADANnL3fyduabL/9f/6f/2//j/p//X/I/T/+v8R+n/9/39yp4Xer//X/zNvtf4/d/9345Ym+x8AAAA6yN3/vbjF/gcAAIBt5O7/ftxi/wMAAMA2cvf/IG5psv/1//p//b/+P+n/9f8j9P/6/xH6f/3/Ed6v/9f/M2+1/j93/w/jlib7HwAAADrI3f+juMX+BwAAgG3k7v9x3GL/AwAAwDZy9/8kbmmy//X/+n/9v/4/6f/1/yP0//r/Efp//f8R3q//1/8zb7X+P3f/T+OWJvsfAAAAOsjd/7O4xf4HAACAbeTu/3ncYv8DAADANnL3/yJuabL/9f/6f/2//j/p//X/I/T/+v8R+n/9/xHer//X/zPvv/X/8f/8F9r/5+7/ZdzSZP8DAABAB7n7fxW32P8AAACwjdz9v45b7H8AAADYRu7+38QtTfa//l//r//X/yf9v/5/hP5f/z9C/6//P8L79f/6f+at9v3/3P2/jVua7H8AAADoIHf/7+IW+x8AAAC2kbv/prjF/gcAAIBt5O7/fdzSZP//r/7/dnEvsf/PJ+j/9f/6f/2//n9B+n/9/wj9v/7/CO/X/+v/mbda/5+7/w9xS5P9DwAAAB3k7v9j3GL/AwAAwDZy9/8pbrH/AQAAYBu5+/8ctzTZ/77/r//X/+v/k/5f/z9C/6//H9G+///nL+v/l3+//l//z7zV+v/c/X+JW5rsfwAAAOggd/9f4xb7HwAAALaRu/9vcYv9DwAAANvI3f/3uKXJ/tf/6//1//r/pP/X/4/Q/+v/R7Tv/33//xDv1//r/5m3Wv+fu/8fAQAA///PAGyG") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x9, 0x2, 0x8, 0x38, 0x80000001}) 1.169812802s ago: executing program 4 (id=1298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x8000, 0x4) 1.123552643s ago: executing program 6 (id=1299): chroot(&(0x7f0000000040)='.\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89101) fchdir(r0) getcwd(0x0, 0x0) 930.163598ms ago: executing program 2 (id=1300): r0 = socket(0x1, 0x803, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)=@v3={0x3000000, [{0x50000000, 0x1}, {0x7b00bb87, 0xad12}]}, 0x18, 0x1) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 927.682838ms ago: executing program 4 (id=1301): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0041e96a0f5e69f9a7f61c16124cb6d02711dffa581b9544ce66de31fff051ad15c004c6c6a100a59056ebb6bf9f1d33af"], 0x1, 0x156, &(0x7f00000003c0)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f00000005c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[], 0x10448) 800.002821ms ago: executing program 1 (id=1302): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x6, 0x4) 799.869371ms ago: executing program 2 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d03, &(0x7f0000000a00)) 702.214303ms ago: executing program 2 (id=1304): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x6, 0x21, 0x9, 0xdedb, 0xe, "00000000c89cefe0"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) 686.817674ms ago: executing program 1 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfffffffc}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}]}}]}, 0x44}}, 0x0) 599.215736ms ago: executing program 4 (id=1306): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 598.645436ms ago: executing program 6 (id=1307): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}}, 0x0) 469.839419ms ago: executing program 2 (id=1308): mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)="bc", 0x1}], 0x1) 455.465319ms ago: executing program 6 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="7d6464726573735f67726f7570206772703120302e302e302e302d3235352e3235352e3235352e3235350a616464726573735f67726f7570205c727031182e3a2d666666663a666666663a666666663a666666663a666666663a666666663a4f6666663a666666660a", 0x69) 444.27276ms ago: executing program 1 (id=1310): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000700)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 375.165731ms ago: executing program 4 (id=1311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 299.148843ms ago: executing program 6 (id=1312): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r1, &(0x7f0000000200)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) 297.140443ms ago: executing program 2 (id=1313): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 287.246093ms ago: executing program 1 (id=1314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 184.334906ms ago: executing program 4 (id=1315): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='drop=0', 0x6) 183.587155ms ago: executing program 1 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 115.103537ms ago: executing program 4 (id=1317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="c51d53855869d617f03a06394738e0f59db415769063095a1b7d321617a1a68774198dfb40463c271cccda3227a858bc40901548a42cdcd973de207711edede76912ca239c5010e39eda915f0888152c4db06f86504d67d0f212b5d31f22e2c9b5bc223e9d522d6693641092f4a64662", 0x70}], 0x1, 0x0, 0x0, 0x400c000}, 0x840) 105.316967ms ago: executing program 6 (id=1318): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) 52.203039ms ago: executing program 1 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x62800, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000006ddd") 744.45碌s ago: executing program 6 (id=1320): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x6, 0x21, 0x9, 0xdedb, 0xe, "00000000c89cefe0"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) 0s ago: executing program 2 (id=1330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) kernel console output (not intermixed with test programs): y change from 0 to 512 [ 87.832061][ T4359] device bond_slave_1 left promiscuous mode [ 87.917514][ T2286] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 87.942717][ T4361] EXT4-fs (loop2): Ignoring removed oldalloc option [ 87.963200][ T2286] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 87.977872][ T4361] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 87.996860][ T2286] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 88.015201][ T2286] usb 4-1: USB disconnect, device number 2 [ 88.029406][ T4361] EXT4-fs (loop2): 1 truncate cleaned up [ 88.041550][ T4361] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,abort,data_err=ignore,acl,oldalloc,init_itable,,errors=continue. Quota mode: none. [ 88.047525][ T2286] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 88.072866][ T2286] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 88.092606][ T2286] mos7720 4-1:1.0: device disconnected [ 88.193236][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.202590][ T4361] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.24: invalid indirect mapped block 4294901760 (level 0) [ 88.227888][ T4361] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.24: invalid indirect mapped block 4294967295 (level 1) [ 88.258346][ T4375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.286303][ T4380] loop1: detected capacity change from 0 to 64 [ 88.386917][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.514790][ T4376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.916507][ T4406] nvme_fcloop: unknown parameter or missing value 'ww' [ 89.129580][ T4413] pimreg1: tun_chr_ioctl cmd 35108 [ 89.583827][ T4433] netlink: 774 bytes leftover after parsing attributes in process `syz.3.55'. [ 89.632738][ T4433] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 89.739060][ T4437] loop2: detected capacity change from 0 to 2048 [ 89.766812][ T4440] team0: Device vlan2 is already an upper device of the team interface [ 89.871348][ T4442] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.888908][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 89.937889][ T4262] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.100284][ T26] audit: type=1800 audit(1792153441.448:2): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="power" dev="configfs" ino=32680 res=0 errno=0 [ 90.273882][ T4455] loop3: detected capacity change from 0 to 256 [ 90.443640][ T4461] loop2: detected capacity change from 0 to 64 [ 90.486547][ T4425] loop1: detected capacity change from 0 to 32768 [ 90.755504][ T4471] loop3: detected capacity change from 0 to 512 [ 90.828006][ T4471] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.66: iget: bad i_size value: 38620345925642 [ 90.862111][ T4474] read_mapping_page failed! [ 90.900517][ T4474] ialloc: diAlloc returned -5! [ 90.958886][ T4471] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.66: couldn't read orphan inode 15 (err -117) [ 90.983446][ T4471] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.030137][ T278] read_mapping_page failed! [ 91.085038][ T26] audit: type=1800 audit(1792153442.438:3): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 91.112833][ T4483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 91.361222][ T26] audit: type=1326 audit(1792153442.708:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.4.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec010e0559 code=0x7fc00000 [ 91.464096][ T4492] loop1: detected capacity change from 0 to 512 [ 91.550574][ T4492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.71: invalid indirect mapped block 4294967295 (level 1) [ 91.576565][ T4492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.71: invalid indirect mapped block 4294967295 (level 1) [ 91.601848][ T4492] EXT4-fs (loop1): 2 truncates cleaned up [ 91.607642][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.786337][ T4478] loop2: detected capacity change from 0 to 32768 [ 91.835268][ T4478] (syz.2.69,4478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.885683][ T4478] (syz.2.69,4478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.953245][ T4478] (syz.2.69,4478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 91.996350][ T1108] kernel write not supported for file /snd/midiC2D0 (pid: 1108 comm: kworker/1:2) [ 92.047770][ T4478] JBD2: Ignoring recovery information on journal [ 92.090444][ T26] audit: type=1326 audit(1792153443.438:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.4.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec010e0559 code=0x7fc00000 [ 92.166916][ T4478] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.380427][ T4493] loop3: detected capacity change from 0 to 40427 [ 92.480943][ T4493] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 92.504340][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 92.512983][ T4493] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 92.565348][ T4530] loop4: detected capacity change from 0 to 128 [ 92.573234][ T4532] ubi0: attaching mtd0 [ 92.580230][ T4532] ubi0: scanning is finished [ 92.590921][ T4532] ubi0: empty MTD device detected [ 92.605865][ T4493] F2FS-fs (loop3): invalid crc value [ 92.662385][ T4530] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.693770][ T4493] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.725171][ T4530] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.865756][ T4493] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 92.885823][ T4532] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.918004][ T4532] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 92.950951][ T4532] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.980113][ T4532] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 93.027466][ T4532] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 93.053058][ T4493] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.070995][ T4532] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 93.100724][ T4532] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4278755323 [ 93.161123][ T4532] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 93.164842][ T4551] loop4: detected capacity change from 0 to 2048 [ 93.204738][ T4493] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 93.218013][ T4540] ubi0: background thread "ubi_bgt0d" started, PID 4540 [ 93.308656][ T4551] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 93.369658][ T4559] loop2: detected capacity change from 0 to 256 [ 93.416635][ T4493] attempt to access beyond end of device [ 93.416635][ T4493] loop3: rw=2049, want=45104, limit=40427 [ 93.500336][ T4559] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d) [ 93.546874][ T4551] EXT4-fs (loop4): shut down requested (1) [ 93.797042][ T4578] loop2: detected capacity change from 0 to 8 [ 93.834576][ T7] cfg80211: failed to load regulatory.db [ 93.934774][ T4578] SQUASHFS error: Failed to read block 0x636: -5 [ 93.954496][ T4578] SQUASHFS error: Unable to read metadata cache entry [634] [ 93.963848][ T4582] mmap: syz.1.106 (4582) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 94.108014][ T4590] loop2: detected capacity change from 0 to 1024 [ 94.125226][ T4591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.317950][ T4590] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.340970][ T4590] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.391038][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.461818][ T4601] program syz.1.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.539312][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 94.631335][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 94.654820][ T4613] netlink: 'syz.2.117': attribute type 29 has an invalid length. [ 94.670386][ T4614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.703955][ T4613] netlink: 'syz.2.117': attribute type 29 has an invalid length. [ 94.717411][ T4615] netlink: 'syz.2.117': attribute type 29 has an invalid length. [ 94.762345][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.789533][ T4613] netlink: 'syz.2.117': attribute type 29 has an invalid length. [ 94.942335][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.959012][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.984793][ T4626] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 95.002244][ T7] usb 5-1: Product: syz [ 95.009130][ T7] usb 5-1: Manufacturer: syz [ 95.014002][ T4626] netlink: 100 bytes leftover after parsing attributes in process `syz.1.125'. [ 95.014152][ T4626] nbd: illegal input index -1 [ 95.046135][ T7] usb 5-1: SerialNumber: syz [ 95.067841][ T7] usb 5-1: config 0 descriptor?? [ 95.118975][ T7] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.131096][ T7] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 95.259132][ T4641] netlink: 'syz.1.133': attribute type 2 has an invalid length. [ 95.277039][ T4641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'. [ 95.410439][ T26] audit: type=1326 audit(1792153446.758:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feee683f559 code=0x0 [ 95.533229][ T4658] capability: warning: `syz.2.141' uses 32-bit capabilities (legacy support in use) [ 95.781090][ T7] em28xx 5-1:0.0: chip ID is em2750 [ 95.919519][ T4655] loop1: detected capacity change from 0 to 32768 [ 96.064768][ T4671] loop2: detected capacity change from 0 to 1024 [ 96.141033][ T7] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 96.146433][ T4673] input: syz0 as /devices/virtual/input/input5 [ 96.176464][ T7] em28xx 5-1:0.0: board has no eeprom [ 96.232985][ T2286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.321105][ T7] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.329065][ T7] em28xx 5-1:0.0: dvb set to bulk mode. [ 96.387908][ T7] usb 5-1: USB disconnect, device number 2 [ 96.440198][ T7] em28xx 5-1:0.0: Disconnecting em28xx [ 96.468608][ T4262] em28xx 5-1:0.0: Binding DVB extension [ 96.518730][ T4681] loop2: detected capacity change from 0 to 512 [ 96.595303][ T4262] em28xx 5-1:0.0: Registering input extension [ 96.630059][ T7] em28xx 5-1:0.0: Closing input extension [ 96.660617][ T4681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.712783][ T4681] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.768357][ T4681] EXT4-fs (loop2): 1 truncate cleaned up [ 96.771937][ T2286] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 96.784970][ T4681] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 96.792400][ T7] em28xx 5-1:0.0: Freeing device [ 96.823697][ T2286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.880842][ T2286] usb 1-1: Product: syz [ 96.905604][ T2286] usb 1-1: Manufacturer: syz [ 96.917155][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 96.948129][ T2286] usb 1-1: SerialNumber: syz [ 96.958338][ T4676] loop3: detected capacity change from 0 to 32768 [ 96.981326][ T2286] usb 1-1: config 0 descriptor?? [ 97.037672][ T2286] hub 1-1:0.0: bad descriptor, ignoring hub [ 97.057639][ T2286] hub: probe of 1-1:0.0 failed with error -5 [ 97.139642][ T4676] XFS (loop3): Mounting V5 Filesystem [ 97.164196][ T4703] syz.4.159 (4703) used greatest stack depth: 20928 bytes left [ 97.260975][ T2286] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 97.299190][ T2286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.323960][ T4712] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.161: iget: bad i_size value: 38620345925642 [ 97.337321][ T4676] XFS (loop3): Ending clean mount [ 97.351283][ T4712] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.161: couldn't read orphan inode 15 (err -117) [ 97.363825][ T4712] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 97.364682][ T2286] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 97.392010][ T2286] usb 1-1: media controller created [ 97.406630][ T4676] XFS (loop3): Quotacheck needed: Please wait. [ 97.414887][ T2286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.571849][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.589810][ T2286] DVB: Unable to find symbol dib7000p_attach() [ 97.600207][ T2286] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 97.638685][ T4676] XFS (loop3): Quotacheck: Done. [ 97.766751][ T2286] rc_core: IR keymap rc-dib0700-rc5 not found [ 97.775731][ T2286] Registered IR keymap rc-empty [ 97.782287][ T2286] dvb-usb: could not initialize remote control. [ 97.788815][ T2286] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 97.825639][ T2286] usb 1-1: USB disconnect, device number 2 [ 97.859464][ T2286] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 97.871020][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 97.923938][ T4194] XFS (loop3): Unmounting Filesystem [ 98.009910][ T1108] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.021844][ T1108] usb 2-1: config 0 has no interface number 0 [ 98.196996][ T1108] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.241494][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.249576][ T1108] usb 2-1: Product: syz [ 98.289825][ T1108] usb 2-1: Manufacturer: syz [ 98.331369][ T1108] usb 2-1: SerialNumber: syz [ 98.354230][ T1108] usb 2-1: config 0 descriptor?? [ 98.388263][ T4750] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.176'. [ 98.432773][ T1108] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 98.664160][ T1108] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 98.701669][ T1108] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.910841][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.973594][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 99.101212][ T4266] usb 2-1: USB disconnect, device number 2 [ 99.111615][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 99.138597][ T4266] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 99.196267][ T4266] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 99.241519][ T4266] quatech2 2-1:0.51: device disconnected [ 99.351103][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.453646][ T4779] set_capacity_and_notify: 1 callbacks suppressed [ 99.453677][ T4779] loop4: detected capacity change from 0 to 64 [ 99.535640][ T1108] usb 1-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 99.555745][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.570315][ T1108] usb 1-1: Product: syz [ 99.580133][ T4779] attempt to access beyond end of device [ 99.580133][ T4779] loop4: rw=0, want=1026, limit=64 [ 99.592456][ T1108] usb 1-1: Manufacturer: syz [ 99.619216][ T4779] Buffer I/O error on dev loop4, logical block 512, async page read [ 99.636577][ T4783] loop3: detected capacity change from 0 to 4096 [ 99.646137][ T4779] attempt to access beyond end of device [ 99.646137][ T4779] loop4: rw=0, want=113154, limit=64 [ 99.658928][ T1108] navman 1-1:1.0: navman converter detected [ 99.666973][ T1108] usb 1-1: navman converter now attached to ttyUSB0 [ 99.675278][ T4779] Buffer I/O error on dev loop4, logical block 56576, async page read [ 99.701405][ T4783] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 99.729608][ T4785] attempt to access beyond end of device [ 99.729608][ T4785] loop4: rw=0, want=1026, limit=64 [ 99.752403][ T4785] Buffer I/O error on dev loop4, logical block 512, async page read [ 99.778135][ T4785] attempt to access beyond end of device [ 99.778135][ T4785] loop4: rw=0, want=113154, limit=64 [ 99.799316][ T4785] Buffer I/O error on dev loop4, logical block 56576, async page read [ 99.819825][ T26] audit: type=1800 audit(1792153451.168:7): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.188" name="minix" dev="loop4" ino=8 res=0 errno=0 [ 99.923723][ T3519] usb 1-1: USB disconnect, device number 3 [ 99.937246][ T3519] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 99.957158][ T3519] navman 1-1:1.0: device disconnected [ 100.058450][ T4791] loop1: detected capacity change from 0 to 64 [ 100.302779][ T4783] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 100.382845][ T4804] loop2: detected capacity change from 0 to 64 [ 100.411183][ T1231] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 100.463308][ T4194] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 100.470070][ T4194] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.508375][ T4194] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 100.518630][ T1231] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 100.530637][ T4810] loop0: detected capacity change from 0 to 256 [ 100.557663][ T4194] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 100.582052][ T4194] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 100.866355][ T4819] ip_tables: iptables: counters copy to user failed while replacing table [ 100.890459][ T4819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.000859][ T2286] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.118699][ T4840] process 'syz.2.219' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 101.256325][ T4852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 101.263273][ T4852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.284031][ T4852] vhci_hcd vhci_hcd.0: Device attached [ 101.576841][ T3519] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 101.686394][ T4266] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.971168][ T4266] usb 1-1: Using ep0 maxpacket: 16 [ 102.037693][ T4854] vhci_hcd: connection closed [ 102.040872][ T1231] vhci_hcd: stop threads [ 102.058676][ T1231] vhci_hcd: release socket [ 102.065263][ T1231] vhci_hcd: disconnect device [ 102.091064][ T4266] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.102930][ T4266] usb 1-1: no configurations [ 102.111186][ T3519] vhci_hcd: vhci_device speed not set [ 102.118695][ T4266] usb 1-1: can't read configurations, error -22 [ 102.126543][ T4851] loop4: detected capacity change from 0 to 131072 [ 102.166620][ T4851] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 102.173634][ T4851] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 102.192551][ T4851] F2FS-fs (loop4): invalid crc value [ 102.249539][ T4851] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.276680][ T4881] loop2: detected capacity change from 0 to 164 [ 102.292982][ T2286] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.311142][ T4851] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 102.318390][ T4851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 102.328648][ T2286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.343118][ T2286] usb 4-1: config 0 descriptor?? [ 102.408494][ T4884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.440048][ T4881] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 102.488255][ T4881] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 102.684230][ T4890] loop2: detected capacity change from 0 to 64 [ 102.851099][ T2286] [drm:udl_init] *ERROR* Selecting channel failed [ 102.892232][ T2286] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 102.913321][ T2286] [drm] Initialized udl on minor 2 [ 102.962976][ T2286] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.006637][ T2286] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 103.045590][ T2286] usb 4-1: USB disconnect, device number 3 [ 103.072757][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.126100][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.167496][ T13] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 103.590680][ T4939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.263'. [ 103.622850][ T4941] scsi_strcpy_devinfo: model string '|aヤ嬃鎢搼烙1灉濗pEw鯄恴dz' is too long [ 103.702674][ T4929] loop4: detected capacity change from 0 to 8192 [ 103.778496][ T4948] loop0: detected capacity change from 0 to 1024 [ 103.885887][ T4953] program syz.2.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.903103][ T4929] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 103.923571][ T4929] REISERFS (device loop4): using ordered data mode [ 103.930304][ T4929] reiserfs: using flush barriers [ 103.954452][ T4929] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.986777][ T4948] UBIFS error (pid: 4948): cannot open "c:::", error -22 [ 104.046240][ T4929] REISERFS (device loop4): checking transaction log (loop4) [ 104.349659][ T4961] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.364103][ T4961] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.446838][ T4961] syz.0.270 (pid 4961) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 104.465553][ T4965] set_capacity_and_notify: 2 callbacks suppressed [ 104.465570][ T4965] loop2: detected capacity change from 0 to 4096 [ 104.574858][ T4965] ntfs3: loop2: Failed to load $Extend. [ 104.624917][ T4929] REISERFS (device loop4): Using tea hash to sort names [ 104.647667][ T4929] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.821693][ T4975] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 104.895453][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 104.913948][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 105.003700][ T4985] TCP: tcp_parse_options: Illegal window scaling value 75 > 14 received [ 105.019623][ T4985] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 105.123018][ T4988] loop2: detected capacity change from 0 to 2048 [ 105.223921][ T4988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.245906][ T4992] loop3: detected capacity change from 0 to 512 [ 105.378764][ T4992] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 105.400377][ T4992] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 105.488981][ T4992] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #13: comm syz.3.287: iget: bad i_size value: 12154757448730 [ 105.603917][ T4992] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.287: couldn't read orphan inode 13 (err -117) [ 105.624482][ T4992] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 105.845472][ T5011] loop4: detected capacity change from 0 to 4096 [ 106.435421][ T5038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.464886][ T5040] loop0: detected capacity change from 0 to 256 [ 106.544635][ T4276] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.568157][ T5044] loop1: detected capacity change from 0 to 128 [ 106.656686][ T5044] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 106.743668][ T5044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.821531][ T4276] usb 5-1: Using ep0 maxpacket: 16 [ 106.850184][ T5054] loop3: detected capacity change from 0 to 512 [ 106.903965][ T5020] loop2: detected capacity change from 0 to 40427 [ 106.928233][ T5020] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 106.959471][ T4276] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 106.975791][ T4276] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.005455][ T5020] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.031134][ T4276] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.041510][ T4276] usb 5-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 107.050652][ T5020] F2FS-fs (loop2): invalid crc value [ 107.056421][ T5058] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.317'. [ 107.071088][ T4276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.083779][ T5061] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.317'. [ 107.098772][ T5020] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.120176][ T4276] usb 5-1: config 0 descriptor?? [ 107.259541][ T5020] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.267171][ T5020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.458702][ T4195] attempt to access beyond end of device [ 107.458702][ T4195] loop2: rw=2049, want=40968, limit=40427 [ 107.579533][ T5077] loop3: detected capacity change from 0 to 512 [ 107.637095][ T4276] input: HID 1b96:0006 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B96:0006.0001/input/input8 [ 107.689658][ T5077] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.325: bg 0: block 5: invalid block bitmap [ 107.762734][ T4276] ntrig 0003:1B96:0006.0001: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.4-1/input0 [ 107.788390][ T5077] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 107.844319][ T4276] usb 5-1: USB disconnect, device number 3 [ 107.858109][ T5077] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.325: invalid indirect mapped block 3 (level 2) [ 107.899714][ T5077] EXT4-fs (loop3): 1 orphan inode deleted [ 107.906330][ T5077] EXT4-fs (loop3): 1 truncate cleaned up [ 107.948008][ T5077] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 108.093313][ T26] audit: type=1804 audit(1792153459.448:8): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.325" name="/newroot/44/file0/bus" dev="loop3" ino=11 res=1 errno=0 [ 108.107999][ T5086] loop1: detected capacity change from 0 to 128 [ 108.128991][ T5082] fido_id[5082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 108.210563][ T5086] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 108.292224][ T5086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.550874][ T5102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.333'. [ 108.563235][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 108.580276][ T5064] XFS (loop0): Mounting V5 Filesystem [ 108.633758][ T5107] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.747783][ T5112] bonding: du&B. is being created... [ 108.761291][ T5064] XFS (loop0): Ending clean mount [ 108.772510][ T5064] XFS (loop0): Quotacheck needed: Please wait. [ 108.785643][ T5109] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 108.803127][ T5107] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.822149][ T5109] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.896734][ T5064] XFS (loop0): Quotacheck: Done. [ 108.907368][ T5109] EXT4-fs (loop2): shut down requested (1) [ 108.987803][ T144] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.024379][ T5122] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 109.101357][ T4193] XFS (loop0): Unmounting Filesystem [ 109.539117][ T5151] scsi_strcpy_devinfo: vendor string '嵠M裏陣8KH,P騷/(a化&縒Ca8(涧葾u樢棱槊6c1碣XPwe$XP鹤荎急5舭曮'R 猉7R.鴀O\k㧐k堓萤o俻觌覒 0餥瀧劸q6彆?U硄9謒撸7`卄0I3簿诺' is too long [ 109.571862][ T5152] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 109.613860][ T5152] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.623639][ T5152] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.760753][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.767951][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.778176][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.785374][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.829898][ T5162] syz.2.357 (5162) used greatest stack depth: 20736 bytes left [ 109.848892][ T5152] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.860265][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 109.884169][ T5155] device bridge_slave_1 left promiscuous mode [ 109.903678][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.962887][ T5155] device bridge_slave_0 left promiscuous mode [ 109.969519][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.024755][ T5170] set_capacity_and_notify: 4 callbacks suppressed [ 110.024771][ T5170] loop3: detected capacity change from 0 to 256 [ 110.071923][ T5170] exfat: Deprecated parameter 'utf8' [ 110.098442][ T5170] exfat: Deprecated parameter 'utf8' [ 110.111720][ T5172] loop0: detected capacity change from 0 to 128 [ 110.156689][ T5170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 110.185229][ T5172] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.200962][ T5172] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.225863][ T5155] bond0: (slave bridge0): Releasing backup interface [ 110.725226][ T5197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.742274][ T5196] loop0: detected capacity change from 0 to 256 [ 110.790479][ T5196] exfat: Deprecated parameter 'utf8' [ 110.804663][ T5196] exfat: Deprecated parameter 'utf8' [ 110.848954][ T5196] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 111.226672][ T5210] loop1: detected capacity change from 0 to 1024 [ 111.292675][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.301450][ T5182] loop2: detected capacity change from 0 to 40427 [ 111.324077][ T5182] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.332130][ T5182] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.349201][ T5182] F2FS-fs (loop2): invalid crc value [ 111.375491][ T5210] overlayfs: missing 'lowerdir' [ 111.393657][ T5182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.465308][ T5190] loop3: detected capacity change from 0 to 32768 [ 111.588583][ T5182] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.652112][ T5182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.705648][ T5190] XFS (loop3): Mounting V5 Filesystem [ 111.778781][ T5190] XFS (loop3): Ending clean mount [ 111.820995][ T26] audit: type=1800 audit(1792153463.178:9): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4425 res=0 errno=0 [ 111.994711][ T4194] XFS (loop3): Unmounting Filesystem [ 112.043726][ T5241] loop1: detected capacity change from 0 to 1024 [ 112.115594][ T5241] EXT4-fs (loop1): Ignoring removed oldalloc option [ 112.151964][ T5246] netlink: 'syz.4.388': attribute type 4 has an invalid length. [ 112.167163][ T5246] netlink: 'syz.4.388': attribute type 4 has an invalid length. [ 112.179564][ T5246] Zero length message leads to an empty skb [ 112.202628][ T5241] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000600006,nodelalloc,quota,oldalloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,min_batch_time=0x0000000000000005,errors=remount-ro,. Quota mode: writeback. [ 112.288213][ T5241] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 167772185 free clusters [ 112.390402][ T5241] EXT4-fs (loop1): Remounting filesystem read-only [ 112.541012][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.809326][ T5281] netlink: 'syz.0.400': attribute type 15 has an invalid length. [ 112.818201][ T5278] loop2: detected capacity change from 0 to 256 [ 112.835937][ T5281] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0 [ 112.845682][ T5281] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 112.855199][ T5281] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 112.864305][ T5281] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 112.901082][ T4262] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.908170][ T5281] device vxlan0 entered promiscuous mode [ 112.939027][ T4262] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.979924][ T5284] loop3: detected capacity change from 0 to 1024 [ 112.986778][ T4262] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.998547][ T5277] loop1: detected capacity change from 0 to 4096 [ 113.005055][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.091683][ T5252] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.099566][ T5284] hfsplus: xattr searching failed [ 113.160058][ T5289] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.395649][ T4262] usb 5-1: USB disconnect, device number 4 [ 113.854832][ T5301] udevd[5301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.883418][ T26] audit: type=1400 audit(1792153465.238:10): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5316 comm="syz.3.414" name="unknown" offset=16 [ 114.167203][ T5292] XFS (loop2): Mounting V5 Filesystem [ 114.213149][ T5292] XFS (loop2): Ending clean mount [ 114.274774][ T4195] XFS (loop2): Unmounting Filesystem [ 114.282600][ T2286] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 114.333740][ T3519] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.641144][ T3519] usb 1-1: Using ep0 maxpacket: 16 [ 114.657009][ T2286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.673960][ T2286] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 114.691052][ T2286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.715268][ T2286] usb 4-1: config 0 descriptor?? [ 114.773321][ T3519] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.794610][ T3519] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.812590][ T3519] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.829722][ T3519] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.839291][ T3519] usb 1-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 114.857003][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.880639][ T3519] usb 1-1: config 0 descriptor?? [ 114.936960][ T5349] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [36] [ 114.949473][ T5349] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 114.966995][ T5349] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 114.977414][ T5349] One or more global auth toks could not properly register; rc = [-22] [ 114.986022][ T5349] Error parsing options; rc = [-22] [ 115.250215][ T2286] logitech 0003:046D:C24F.0002: unbalanced delimiter at end of report description [ 115.285897][ T2286] logitech 0003:046D:C24F.0002: parse failed [ 115.302828][ T2286] logitech: probe of 0003:046D:C24F.0002 failed with error -22 [ 115.406017][ T3519] wacom 0003:056A:5200.0003: unknown main item tag 0x3 [ 115.423693][ T3519] wacom 0003:056A:5200.0003: unknown main item tag 0x6 [ 115.444012][ T3519] wacom 0003:056A:5200.0003: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 115.467987][ T4272] usb 4-1: USB disconnect, device number 4 [ 115.633477][ T4262] usb 1-1: USB disconnect, device number 6 [ 115.739888][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 115.903681][ T5390] set_capacity_and_notify: 2 callbacks suppressed [ 115.903697][ T5390] loop1: detected capacity change from 0 to 256 [ 115.932618][ T5392] loop2: detected capacity change from 0 to 512 [ 116.081310][ T5390] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 116.404008][ T5406] loop0: detected capacity change from 0 to 512 [ 116.459383][ T5406] EXT4-fs (loop0): Ignoring removed nobh option [ 116.506945][ T5408] loop1: detected capacity change from 0 to 256 [ 116.547173][ T5406] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 116.621484][ T5406] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.062857][ T5398] loop4: detected capacity change from 0 to 32768 [ 117.163186][ T5398] XFS (loop4): Mounting V5 Filesystem [ 117.352659][ T5398] XFS (loop4): Ending clean mount [ 117.389186][ T5398] XFS (loop4): Quotacheck needed: Please wait. [ 117.506457][ T5398] XFS (loop4): Quotacheck: Done. [ 117.582409][ T5449] loop2: detected capacity change from 0 to 8 [ 117.616815][ T5434] loop0: detected capacity change from 0 to 32768 [ 117.654943][ T5449] squashfs: Bad value for 'errors' [ 117.731556][ T5434] (syz.0.463,5434,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.733620][ T4191] XFS (loop4): Unmounting Filesystem [ 117.773079][ T5434] (syz.0.463,5434,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.907475][ T5434] JBD2: Ignoring recovery information on journal [ 118.091824][ T5434] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.138413][ T5430] loop3: detected capacity change from 0 to 32768 [ 118.260594][ T5430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.461 (5430) [ 118.290257][ T5457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.298116][ T5457] IPv6: NLM_F_CREATE should be set when creating new route [ 118.371236][ T5430] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 118.404612][ T5430] BTRFS info (device loop3): force clearing of disk cache [ 118.459041][ T5430] BTRFS info (device loop3): metadata ratio 0 [ 118.484770][ T5430] BTRFS info (device loop3): enabling ssd optimizations [ 118.528572][ T5430] BTRFS info (device loop3): using spread ssd allocation scheme [ 118.571013][ T5430] BTRFS info (device loop3): using free space tree [ 118.578125][ T5430] BTRFS info (device loop3): has skinny extents [ 118.662630][ T5465] input: syz1 as /devices/virtual/input/input12 [ 118.919495][ T5458] syz.0.463 (5458) used greatest stack depth: 19104 bytes left [ 119.102364][ T5430] BTRFS info (device loop3): clearing free space tree [ 119.110809][ T5430] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.122312][ T5430] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.150001][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 119.293012][ T5430] BTRFS info (device loop3): creating free space tree [ 119.321461][ T5464] loop4: detected capacity change from 0 to 40427 [ 119.346397][ T5430] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.390051][ T5430] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.448220][ T5464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.536624][ T5501] maxtcpc: probe of 0-0005 failed with error -5 [ 119.576082][ T5501] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x05 [ 119.648054][ T5464] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 119.716369][ T5464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.947605][ T4191] attempt to access beyond end of device [ 119.947605][ T4191] loop4: rw=2049, want=45104, limit=40427 [ 120.013837][ T144] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 120.328025][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 120.574874][ T5516] loop1: detected capacity change from 0 to 2048 [ 120.931072][ T5516] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.010988][ T5516] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.181954][ T5518] loop0: detected capacity change from 0 to 40427 [ 121.301001][ T5518] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 121.307679][ T5518] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.428109][ T5518] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.617316][ T5518] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.639116][ T5518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.690199][ T5558] netlink: 5 bytes leftover after parsing attributes in process `syz.4.496'. [ 121.794003][ T5551] loop2: detected capacity change from 0 to 4096 [ 121.824151][ T4193] attempt to access beyond end of device [ 121.824151][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 121.866969][ T5565] loop4: detected capacity change from 0 to 1024 [ 122.081028][ T5551] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 122.185028][ T5551] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 122.229699][ T5576] loop3: detected capacity change from 0 to 512 [ 122.240433][ T5551] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 122.341600][ T5551] ntfs: volume version 3.1. [ 122.420884][ T4263] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.441087][ T5576] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.500382][ T5576] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.568171][ T5576] EXT4-fs (loop3): shut down requested (0) [ 122.636908][ T5551] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 122.790543][ T5592] loop1: detected capacity change from 0 to 512 [ 122.849998][ T5592] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 122.912774][ T26] audit: type=1800 audit(1792153474.268:11): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.509" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 122.937835][ T5599] loop3: detected capacity change from 0 to 8 [ 122.976745][ T5596] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 31488 - 0 [ 123.003140][ T5596] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.021057][ T4263] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 123.058269][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.109804][ T5599] SQUASHFS error: Unable to read inode 0xa7 [ 123.110923][ T4195] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 123.139744][ T4263] usb 5-1: Product: syz [ 123.149155][ T4263] usb 5-1: Manufacturer: syz [ 123.161854][ T4263] usb 5-1: SerialNumber: syz [ 123.188106][ T4263] usb 5-1: config 0 descriptor?? [ 123.252372][ T4263] ch341 5-1:0.0: ch341-uart converter detected [ 123.525223][ T5612] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 123.549535][ T5613] loop1: detected capacity change from 0 to 512 [ 123.549553][ T5612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.563207][ T5612] IPv6: NLM_F_CREATE should be set when creating new route [ 123.570472][ T5612] IPv6: NLM_F_CREATE should be set when creating new route [ 123.637530][ T5613] EXT4-fs (loop1): inline encryption not supported [ 123.681508][ T5613] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.515: inode #1: comm syz.1.515: iget: illegal inode # [ 123.747082][ T5613] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.515: error while reading EA inode 1 err=-117 [ 123.815851][ T5621] loop2: detected capacity change from 0 to 1024 [ 123.893443][ T5613] EXT4-fs (loop1): 1 orphan inode deleted [ 123.899249][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 124.015972][ T5621] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 124.069490][ T5629] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.515: unexpected EA_INODE flag [ 124.124946][ T5621] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 124.136794][ T5633] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 124.151769][ T4263] usb 5-1: failed to send control message: -71 [ 124.158701][ T4263] ch341-uart: probe of ttyUSB0 failed with error -71 [ 124.170870][ T5633] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 124.178689][ T5633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.520'. [ 124.226419][ T4263] usb 5-1: USB disconnect, device number 5 [ 124.238450][ T5633] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 124.259543][ T4263] ch341 5-1:0.0: device disconnected [ 124.278974][ T5633] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 124.306861][ T5633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.520'. [ 124.321589][ T5621] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.517: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 124.335153][ T5633] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 124.403411][ T5621] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.517: couldn't read orphan inode 11 (err -117) [ 124.416160][ T5621] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 124.461390][ T5639] tipc: Started in network mode [ 124.466976][ T5639] tipc: Node identity ac1414aa, cluster identity 4711 [ 124.475549][ T5639] tipc: New replicast peer: 172.20.20.187 [ 124.483048][ T5639] tipc: Enabled bearer , priority 10 [ 124.616736][ T5621] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.517: Invalid block bitmap block 0 in block_group 0 [ 124.689333][ T5621] Quota error (device loop2): write_blk: dquota write failed [ 124.767308][ T5621] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 124.811616][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 124.825533][ T5621] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.517: Failed to acquire dquot type 0 [ 124.917361][ T5652] loop3: detected capacity change from 0 to 64 [ 124.979103][ T5621] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.517: Invalid inode table block 8589934593 in block_group 0 [ 125.021147][ T5652] attempt to access beyond end of device [ 125.021147][ T5652] loop3: rw=0, want=1026, limit=64 [ 125.073782][ T5652] Buffer I/O error on dev loop3, logical block 512, async page read [ 125.120545][ T5652] attempt to access beyond end of device [ 125.120545][ T5652] loop3: rw=0, want=113154, limit=64 [ 125.144968][ T5652] Buffer I/O error on dev loop3, logical block 56576, async page read [ 125.173547][ T5658] attempt to access beyond end of device [ 125.173547][ T5658] loop3: rw=0, want=1026, limit=64 [ 125.228646][ T5658] Buffer I/O error on dev loop3, logical block 512, async page read [ 125.265882][ T154] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 125.268217][ T5658] attempt to access beyond end of device [ 125.268217][ T5658] loop3: rw=0, want=113154, limit=64 [ 125.303685][ T5658] Buffer I/O error on dev loop3, logical block 56576, async page read [ 125.308945][ T5665] bond0: no command found in slaves file - use +ifname or -ifname [ 125.361041][ T5666] bond0: no command found in slaves file - use +ifname or -ifname [ 125.369640][ T26] audit: type=1800 audit(1792153476.718:12): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.526" name="minix" dev="loop3" ino=8 res=0 errno=0 [ 125.504225][ T3519] tipc: Node number set to 2886997162 [ 125.851171][ T5691] ip_tables: iptables: counters copy to user failed while replacing table [ 125.951386][ T5691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.473478][ T5730] kvm [5729]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfffffffffffffffe, nop [ 126.607353][ T5741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.613457][ T5744] loop3: detected capacity change from 0 to 512 [ 126.637895][ T5745] loop0: detected capacity change from 0 to 164 [ 126.697816][ T5744] EXT4-fs (loop3): Ignoring removed bh option [ 126.719248][ T5744] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.768990][ T5744] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 126.774155][ T5745] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 126.796978][ T5744] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.888741][ T5745] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 126.952802][ T26] audit: type=1807 audit(1792153478.308:13): action=measure uid>1000 res=1 [ 126.976604][ T5754] ima: policy update completed [ 127.118839][ T5768] loop1: detected capacity change from 0 to 512 [ 127.121485][ T5766] loop4: detected capacity change from 0 to 512 [ 127.163838][ T5768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.214819][ T5766] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.571: inode has both inline data and extents flags [ 127.229933][ T5768] EXT4-fs (loop1): 1 truncate cleaned up [ 127.244279][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 127.272509][ T5766] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.571: couldn't read orphan inode 15 (err -117) [ 127.298628][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 127.711817][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.461305][ T5806] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 128.485776][ T5806] device syz_tun entered promiscuous mode [ 128.554786][ T5806] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.714537][ T5789] loop4: detected capacity change from 0 to 32768 [ 128.789144][ T5789] JBD2: Ignoring recovery information on journal [ 128.825892][ T5818] ip_tables: iptables: counters copy to user failed while replacing table [ 128.881908][ T5789] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.110196][ T5832] program syz.1.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.146001][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 129.721290][ T5862] loop0: detected capacity change from 0 to 2048 [ 129.739642][ T5835] loop2: detected capacity change from 0 to 32768 [ 129.789681][ T5862] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.815981][ T5862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.846592][ T5867] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 129.880619][ T5835] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.598 (5835) [ 129.977436][ T5835] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 129.995601][ T5835] BTRFS info (device loop2): using free space tree [ 130.006667][ T5835] BTRFS info (device loop2): has skinny extents [ 130.020647][ T5872] loop1: detected capacity change from 0 to 512 [ 130.045487][ T5862] overlayfs: upper fs needs to support d_type. [ 130.069619][ T5872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 130.079588][ T5862] overlayfs: cleanup of 'work/#1' failed (-2) [ 130.097630][ T5862] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.099581][ T5868] loop3: detected capacity change from 0 to 4096 [ 130.112602][ T5872] System zones: 1-12 [ 130.116689][ T5862] overlayfs: failed to set xattr on upper [ 130.128284][ T5862] overlayfs: ...falling back to index=off,metacopy=off. [ 130.149011][ T5872] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.614: missing EA_INODE flag [ 130.180224][ T5868] ntfs3: loop3: ino=3, Correct links count -> 2. [ 130.199290][ T5872] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.614: error while reading EA inode 12 err=-117 [ 130.212770][ T5872] EXT4-fs (loop1): 1 orphan inode deleted [ 130.218567][ T5872] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 130.247817][ T5872] fscrypt (loop1, inode 15): Direct key flag not allowed with different contents and filenames modes [ 130.290420][ T5835] BTRFS info (device loop2): enabling ssd optimizations [ 130.332254][ T4193] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 130.345421][ T4193] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 130.660358][ T5899] loop4: detected capacity change from 0 to 256 [ 130.810327][ T5899] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 130.976584][ T4193] bond0: (slave syz_tun): Releasing backup interface [ 131.113915][ T5908] phram: illegal device length [ 131.526639][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 131.840887][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.442525][ T5939] block2mtd: too many arguments [ 132.460480][ T5921] loop2: detected capacity change from 0 to 131072 [ 132.578261][ T5921] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 132.586215][ T5921] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 132.602460][ T5921] F2FS-fs (loop2): Test dummy encryption mode enabled [ 132.611411][ T5921] F2FS-fs (loop2): invalid crc value [ 132.668792][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 132.701735][ T5921] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.741196][ T5921] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 132.752670][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.765636][ T5921] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 132.777766][ T5921] F2FS-fs (loop2): Start checkpoint disabled! [ 132.830916][ T5921] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 132.838104][ T5921] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 132.862083][ T5942] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.979093][ T5919] loop3: detected capacity change from 0 to 32768 [ 133.019837][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 133.090152][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.174942][ T144] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 134.151627][ T5992] input: syz1 as /devices/virtual/input/input13 [ 134.162686][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 134.405692][ T6001] loop3: detected capacity change from 0 to 512 [ 134.561459][ T5541] Bluetooth: hci4: command 0x0409 tx timeout [ 134.693976][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.701689][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.709994][ T5942] device bridge_slave_0 entered promiscuous mode [ 134.720336][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.728017][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.737115][ T5942] device bridge_slave_1 entered promiscuous mode [ 134.782359][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.796090][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.803293][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.031356][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.084248][ T6022] loop3: detected capacity change from 0 to 1764 [ 135.144828][ T5942] team0: Port device team_slave_0 added [ 135.190007][ T5942] team0: Port device team_slave_1 added [ 135.260003][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.289139][ T6032] ip_tables: iptables: counters copy to user failed while replacing table [ 135.330603][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.380481][ T6035] loop3: detected capacity change from 0 to 1024 [ 135.436727][ T6035] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.450523][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.495961][ T6037] loop4: detected capacity change from 0 to 1024 [ 135.507499][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.515512][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.621908][ T6035] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,dioread_nolock,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,init_itable,nogrpid,nodelalloc,grpjquota=,,errors=continue. Quota mode: none. [ 135.697061][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.757016][ T6046] rose0: tun_chr_ioctl cmd 1074025672 [ 135.763107][ T6046] rose0: ignored: set checksum enabled [ 136.035116][ T5942] device hsr_slave_0 entered promiscuous mode [ 136.054243][ T5942] device hsr_slave_1 entered promiscuous mode [ 136.071770][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.079392][ T5942] Cannot create hsr debugfs directory [ 136.134762][ T6063] loop4: detected capacity change from 0 to 64 [ 136.180655][ T6069] autofs4:pid:6069:autofs_fill_super: pipe file descriptor does not contain proper ops [ 136.631224][ T5541] Bluetooth: hci4: command 0x041b tx timeout [ 136.909748][ T5942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.958126][ T5942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.021947][ T5942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.088095][ T5942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.203107][ T6115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 137.370240][ T6118] loop3: detected capacity change from 0 to 4096 [ 137.493715][ T6118] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 137.536243][ T154] device hsr_slave_0 left promiscuous mode [ 137.576001][ T154] device hsr_slave_1 left promiscuous mode [ 137.629875][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.651622][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.691073][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.712802][ T6133] < [ 137.728377][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.753974][ T1231] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 137.763080][ T4194] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 137.785378][ T154] device bridge_slave_1 left promiscuous mode [ 137.800316][ T6100] loop4: detected capacity change from 0 to 32768 [ 137.804285][ T4194] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 137.821004][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.868074][ T4194] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 137.887739][ T154] device bridge_slave_0 left promiscuous mode [ 137.899277][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 137.908296][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.920070][ T4194] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 137.976891][ T154] device veth1_macvtap left promiscuous mode [ 138.058733][ T154] device veth0_macvtap left promiscuous mode [ 138.077836][ T154] device veth1_vlan left promiscuous mode [ 138.135795][ T154] device veth0_vlan left promiscuous mode [ 138.470832][ T4266] Bluetooth: hci0: command 0x0c20 tx timeout [ 138.692354][ T6166] Process accounting resumed [ 138.711691][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 138.931647][ T6177] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 139.122367][ T6155] loop3: detected capacity change from 0 to 32768 [ 139.143474][ T6187] kAFS: Invalid Command on /proc/fs/afs/cells file [ 139.248432][ T6155] XFS (loop3): Mounting V5 Filesystem [ 139.260865][ T154] team0 (unregistering): Port device team_slave_1 removed [ 139.287163][ T154] team0 (unregistering): Port device team_slave_0 removed [ 139.350078][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.460622][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.493565][ T6155] XFS (loop3): Ending clean mount [ 139.522601][ T6155] XFS (loop3): Quotacheck needed: Please wait. [ 139.637109][ T6155] XFS (loop3): Quotacheck: Done. [ 139.749985][ T154] bond0 (unregistering): Released all slaves [ 139.760283][ T4194] XFS (loop3): Unmounting Filesystem [ 139.840807][ T6192] tipc: Started in network mode [ 139.845765][ T6192] tipc: Node identity 7f000001, cluster identity 4711 [ 139.860836][ T6192] tipc: New replicast peer: 0.0.0.0 [ 139.867057][ T6192] tipc: Enabled bearer , priority 10 [ 140.015074][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.156285][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.219555][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.250553][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.274005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.302276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.328092][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.335287][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.363904][ T6227] loop2: detected capacity change from 0 to 4096 [ 140.391956][ T6227] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 140.413183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.455168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.494806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.530928][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.538206][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.595732][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.629982][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.666047][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.695973][ T6238] loop4: detected capacity change from 0 to 256 [ 140.751470][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.801569][ T3519] Bluetooth: hci4: command 0x0419 tx timeout [ 140.833787][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.855317][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.896483][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 140.916437][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.948776][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.963486][ T6247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.710'. [ 140.974544][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.993676][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.025545][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.053459][ T6240] loop3: detected capacity change from 0 to 8192 [ 141.092594][ T5927] tipc: Node number set to 2130706433 [ 141.099298][ T6240] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 141.111959][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.134162][ T6240] REISERFS (device loop3): using ordered data mode [ 141.178265][ T6240] reiserfs: using flush barriers [ 141.216389][ T6240] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.311594][ T6240] REISERFS (device loop3): checking transaction log (loop3) [ 141.560640][ T6264] device team_slave_0 entered promiscuous mode [ 141.567594][ T6264] device team_slave_1 entered promiscuous mode [ 141.602566][ T6264] device macvlan2 entered promiscuous mode [ 141.616275][ T6264] device team0 entered promiscuous mode [ 141.642128][ T6264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.685589][ T6240] REISERFS (device loop3): Using tea hash to sort names [ 141.704021][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.714549][ T6240] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 141.722345][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.747505][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.856107][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 141.916170][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 142.700858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.710664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.741808][ T6296] Set syz1 is full, maxelem 0 reached [ 142.785309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.795632][ T6298] loop4: detected capacity change from 0 to 2048 [ 142.813146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.846654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.884043][ T6298] NILFS (loop4): invalid segment: Magic number mismatch [ 142.911274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.938465][ T6298] NILFS (loop4): trying rollback from an earlier position [ 142.964658][ T5942] device veth0_vlan entered promiscuous mode [ 143.013205][ T6298] NILFS (loop4): recovery complete [ 143.048977][ T6306] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.057168][ T5942] device veth1_vlan entered promiscuous mode [ 143.125660][ T6286] loop2: detected capacity change from 0 to 32768 [ 143.200049][ T6286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.723 (6286) [ 143.215633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.277196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.313132][ T6286] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 143.337005][ T5942] device veth0_macvtap entered promiscuous mode [ 143.391820][ T5942] device veth1_macvtap entered promiscuous mode [ 143.407322][ T6286] BTRFS info (device loop2): force clearing of disk cache [ 143.442810][ T6286] BTRFS info (device loop2): metadata ratio 0 [ 143.465646][ T6314] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.727'. [ 143.476149][ T6286] BTRFS info (device loop2): enabling ssd optimizations [ 143.521004][ T6286] BTRFS info (device loop2): using spread ssd allocation scheme [ 143.528720][ T6286] BTRFS info (device loop2): using free space tree [ 143.550344][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.580756][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.600808][ T6286] BTRFS info (device loop2): has skinny extents [ 143.607309][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.628390][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.648743][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.662285][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.673439][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.684118][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.696075][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.707639][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.717509][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.726904][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.736309][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.748632][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.766154][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.778566][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.789368][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.799506][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.812375][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.824105][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.835175][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.847710][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.863796][ T5942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.873472][ T5942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.884563][ T5942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.893805][ T5942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.908285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.934998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.125624][ T6286] BTRFS info (device loop2): clearing free space tree [ 144.149357][ T6286] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.170763][ T6286] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.212195][ T6286] BTRFS info (device loop2): creating free space tree [ 144.219971][ T6286] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.267811][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.288251][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.297177][ T6286] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.352336][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.419145][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.447510][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.490574][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.708853][ T6364] loop5: detected capacity change from 0 to 512 [ 144.822146][ T6364] FAT-fs (loop5): Unrecognized mount option "01777777777777777777777" or missing value [ 145.028491][ T6374] netlink: 192 bytes leftover after parsing attributes in process `syz.4.742'. [ 145.085224][ T6378] netlink: 192 bytes leftover after parsing attributes in process `syz.4.742'. [ 145.231069][ T5927] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 145.551285][ T5927] usb 6-1: not running at top speed; connect to a high speed hub [ 145.817285][ T5927] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 145.837995][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.847557][ T5927] usb 6-1: Product: syz [ 145.858737][ T5927] usb 6-1: Manufacturer: syz [ 145.863736][ T5927] usb 6-1: SerialNumber: syz [ 145.962988][ T5927] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 146.002104][ T6406] macsec0: mtu greater than device maximum [ 146.018550][ T5927] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 146.047842][ T6408] loop4: detected capacity change from 0 to 512 [ 146.068589][ T5927] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 146.117593][ T5927] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 146.166863][ T5927] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 146.181436][ C0] usb 6-1: malformed indat packet [ 146.200917][ C0] usb 6-1: malformed indat packet [ 146.220947][ C0] usb 6-1: malformed indat packet [ 146.240920][ C0] usb 6-1: malformed indat packet [ 146.260943][ C0] usb 6-1: malformed indat packet [ 146.280926][ C0] usb 6-1: malformed indat packet [ 146.300902][ C0] usb 6-1: malformed indat packet [ 146.321810][ C0] usb 6-1: malformed indat packet [ 146.577302][ T5537] usb 6-1: USB disconnect, device number 2 [ 146.637121][ T5537] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 146.679843][ T5537] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 146.732993][ T5537] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 146.783238][ T6436] loop2: detected capacity change from 0 to 1024 [ 146.797325][ T5537] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 146.830263][ T5537] keyspan 6-1:1.0: device disconnected [ 147.264299][ T6464] loop4: detected capacity change from 0 to 1024 [ 147.383594][ T6464] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.770: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.442309][ T6464] __quota_error: 1 callbacks suppressed [ 147.442329][ T6464] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 147.456508][ T6464] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.770: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.477045][ T6464] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 147.496538][ T6464] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.770: Failed to acquire dquot type 0 [ 147.550436][ T6464] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 147.576935][ T6464] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.770: mark_inode_dirty error [ 147.608397][ T6464] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 147.643942][ T6464] EXT4-fs (loop4): 1 orphan inode deleted [ 147.653206][ T6464] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 147.680237][ T6224] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.738536][ T6224] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 147.757108][ T6224] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 147.911191][ T6489] loop5: detected capacity change from 0 to 2048 [ 147.935965][ T6464] EXT4-fs (loop4): Ignoring removed bh option [ 147.958909][ T6464] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.770: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.000237][ T6489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.025295][ T6464] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 148.131018][ T5927] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 148.207192][ T6498] loop4: detected capacity change from 0 to 256 [ 148.266519][ T6498] exfat: Deprecated parameter 'utf8' [ 148.372486][ T6498] exfat: Deprecated parameter 'namecase' [ 148.389902][ T6498] exfat: Deprecated parameter 'utf8' [ 148.436694][ T6498] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 148.501039][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.521135][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.631471][ T5927] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 148.673253][ T5927] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 148.717737][ T5927] usb 4-1: Manufacturer: syz [ 148.750927][ T5926] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 148.782744][ T5927] usb 4-1: config 0 descriptor?? [ 149.102149][ T5926] usb 6-1: not running at top speed; connect to a high speed hub [ 149.201053][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.218837][ T5926] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 149.239264][ T5926] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 149.255916][ T5927] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 149.275557][ T5927] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 149.297302][ T5927] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 149.306846][ T5926] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 149.316494][ T6545] netlink: 'syz.2.794': attribute type 2 has an invalid length. [ 149.325028][ T5927] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 149.325065][ T5927] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 149.334078][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.361215][ T5927] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 149.433977][ T6550] loop4: detected capacity change from 0 to 128 [ 149.442886][ T5926] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 149.479708][ T5926] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 149.508927][ T5927] usb 4-1: USB disconnect, device number 5 [ 149.519955][ T5926] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 149.563344][ T5926] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 149.574136][ T6554] loop2: detected capacity change from 0 to 128 [ 149.589355][ T5926] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 149.607021][ T6549] fido_id[6549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 149.678442][ T5926] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 149.699115][ T6554] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 149.792184][ T6554] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.177613][ T6571] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 150.221028][ T5537] usb 6-1: USB disconnect, device number 3 [ 150.255591][ T5537] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 150.292632][ T5537] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 150.307974][ T6571] SQUASHFS error: Failed to read block 0x0: -5 [ 150.339846][ T5537] keyspan 6-1:1.0: device disconnected [ 150.941834][ T5926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.035931][ T6620] loop3: detected capacity change from 0 to 256 [ 151.331082][ T5926] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.351841][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.413596][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.444063][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.611104][ T5926] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.630558][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.639435][ T6642] loop5: detected capacity change from 0 to 16 [ 151.680420][ T5926] usb 5-1: Product: syz [ 151.699378][ T5926] usb 5-1: Manufacturer: syz [ 151.711780][ T6642] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 151.772169][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 151.777497][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 151.876955][ T5926] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 151.920879][ T5926] cdc_wdm 5-1:1.0: Unknown control protocol [ 151.956977][ T6654] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 152.171846][ T6662] loop2: detected capacity change from 0 to 4096 [ 152.206369][ T6662] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 152.236731][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.266522][ T6662] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 152.280308][ T6662] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 152.300212][ T6662] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 152.363428][ T6662] ntfs: volume version 3.1. [ 152.368733][ T5926] usb 5-1: USB disconnect, device number 6 [ 152.533397][ T4195] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 152.716213][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.821098][ T1108] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 152.838756][ T1108] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 153.077915][ T6721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.151176][ T1108] usb 4-1: string descriptor 0 read error: -22 [ 153.157509][ T1108] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 153.168948][ T6717] loop4: detected capacity change from 0 to 2048 [ 153.180748][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.327611][ T6717] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.472311][ T1108] usb 4-1: unit 1 not found! [ 153.586640][ T1108] usb 4-1: USB disconnect, device number 6 [ 153.727805][ T6752] loop2: detected capacity change from 0 to 8 [ 153.799475][ T6756] loop5: detected capacity change from 0 to 1024 [ 153.878858][ T5300] udevd[5300]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.923011][ T6756] attempt to access beyond end of device [ 153.923011][ T6756] loop5: rw=2057, want=65536, limit=1024 [ 154.011862][ T6756] attempt to access beyond end of device [ 154.011862][ T6756] loop5: rw=1, want=2310, limit=1024 [ 154.039629][ T6756] attempt to access beyond end of device [ 154.039629][ T6756] loop5: rw=1, want=4358, limit=1024 [ 154.052558][ T6756] attempt to access beyond end of device [ 154.052558][ T6756] loop5: rw=1, want=6406, limit=1024 [ 154.075474][ T6756] attempt to access beyond end of device [ 154.075474][ T6756] loop5: rw=1, want=8454, limit=1024 [ 154.087260][ T3519] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.106730][ T6756] attempt to access beyond end of device [ 154.106730][ T6756] loop5: rw=1, want=10502, limit=1024 [ 154.131654][ T6756] attempt to access beyond end of device [ 154.131654][ T6756] loop5: rw=1, want=12550, limit=1024 [ 154.153743][ T6756] attempt to access beyond end of device [ 154.153743][ T6756] loop5: rw=1, want=14598, limit=1024 [ 154.171896][ T6756] attempt to access beyond end of device [ 154.171896][ T6756] loop5: rw=1, want=16646, limit=1024 [ 154.193177][ T6756] attempt to access beyond end of device [ 154.193177][ T6756] loop5: rw=1, want=18694, limit=1024 [ 154.370901][ T3519] usb 5-1: Using ep0 maxpacket: 16 [ 154.379491][ T6783] sctp: [Deprecated]: syz.1.887 (pid 6783) Use of int in max_burst socket option. [ 154.379491][ T6783] Use struct sctp_assoc_value instead [ 154.413903][ T4272] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.626237][ T6801] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 154.661726][ T4272] usb 4-1: Using ep0 maxpacket: 16 [ 154.701272][ T3519] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 154.720331][ T3519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.735194][ T3519] usb 5-1: Product: syz [ 154.749816][ T3519] usb 5-1: Manufacturer: syz [ 154.754823][ T3519] usb 5-1: SerialNumber: syz [ 154.781442][ T4272] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.809912][ T4272] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.830559][ T4272] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 154.867457][ T4272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.877523][ T4272] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 154.889806][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.905220][ T4272] usb 4-1: config 0 descriptor?? [ 154.961244][ T26] audit: type=1400 audit(1792153506.318:15): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6814 comm="syz.1.903" name="unknown" offset=16 [ 155.020434][ T6821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.049345][ T3519] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 155.082512][ T3519] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.107998][ T3519] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 155.120771][ T3519] usb 5-1: media controller created [ 155.141792][ T3519] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.352738][ T6843] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.392104][ T4272] hid (null): global environment stack underflow [ 155.398761][ T4272] hid (null): report_id 0 is invalid [ 155.413488][ T4272] hid (null): unknown global tag 0xd [ 155.427050][ T3519] zl10353_read_register: readreg error (reg=127, ret==-110) [ 155.533968][ T3519] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 155.560598][ T3519] usb 5-1: USB disconnect, device number 7 [ 155.619102][ T4272] usb 4-1: USB disconnect, device number 7 [ 155.795935][ T6871] program syz.5.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.941758][ T6881] pimreg0: tun_chr_ioctl cmd 1074025676 [ 155.947596][ T6881] pimreg0: owner set to 0 [ 156.063113][ T6883] loop5: detected capacity change from 0 to 1024 [ 156.171833][ T6883] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 156.215902][ T6883] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.395352][ T6879] loop2: detected capacity change from 0 to 32768 [ 156.516852][ T6879] XFS (loop2): Mounting V5 Filesystem [ 156.674961][ T6879] XFS (loop2): Ending clean mount [ 156.782146][ T6906] loop3: detected capacity change from 0 to 32768 [ 156.849979][ T4195] XFS (loop2): Unmounting Filesystem [ 157.003187][ T6929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.950'. [ 157.012839][ T6931] loop5: detected capacity change from 0 to 512 [ 157.040604][ T6906] XFS (loop3): Mounting V5 Filesystem [ 157.137206][ T6931] EXT4-fs (loop5): Test dummy encryption mode enabled [ 157.145398][ T6931] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 157.164681][ T6931] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 157.181012][ T6931] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,inode_readahead_blks=0x0000000000080000,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 157.230280][ T6906] XFS (loop3): Ending clean mount [ 157.327464][ T6931] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.949: Directory hole found for htree leaf block 0 [ 157.437083][ T6951] loop4: detected capacity change from 0 to 512 [ 157.440315][ T4194] XFS (loop3): Unmounting Filesystem [ 157.643062][ T6961] loop5: detected capacity change from 0 to 256 [ 157.659787][ T6951] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 157.675518][ T6961] exfat: Deprecated parameter 'utf8' [ 157.694907][ T6951] System zones: 0-2, 18-18, 34-35 [ 157.739760][ T6951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.774228][ T6951] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.828864][ T6961] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 157.847973][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.927206][ T6966] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 158.511500][ T7002] program syz.4.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.700190][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'. [ 159.602838][ T7073] tipc: Started in network mode [ 159.607800][ T7073] tipc: Node identity ac14140f, cluster identity 4711 [ 159.639643][ T7073] tipc: New replicast peer: 255.255.255.255 [ 159.665012][ T7073] tipc: Enabled bearer , priority 10 [ 159.830391][ T7054] loop5: detected capacity change from 0 to 32768 [ 159.858993][ T7092] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 159.867262][ T7092] bond0: option arp_ip_target: invalid value (-192.168.1.1}鳍򑯁 [ 163.368291][ T6224] tipc: Left network mode [ 163.417069][ T7259] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.099958][ T7259] chnl_net:caif_netlink_parms(): no params data found [ 164.131898][ T7303] loop4: detected capacity change from 0 to 2048 [ 164.263223][ T7303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.302221][ T7303] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.437221][ T7318] program syz.2.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.499454][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.517298][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.550052][ T7259] device bridge_slave_0 entered promiscuous mode [ 164.618615][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.669490][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.703280][ T7259] device bridge_slave_1 entered promiscuous mode [ 164.722863][ T7325] loop4: detected capacity change from 0 to 256 [ 164.791740][ T7325] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 164.836150][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.914130][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.038492][ T6224] device hsr_slave_0 left promiscuous mode [ 165.065739][ T6224] device hsr_slave_1 left promiscuous mode [ 165.080014][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.093400][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.112700][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.133245][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.153119][ T6224] device bridge_slave_1 left promiscuous mode [ 165.159390][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.220952][ T6224] device bridge_slave_0 left promiscuous mode [ 165.233992][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.266166][ T6224] device veth1_macvtap left promiscuous mode [ 165.280510][ T6224] device veth0_macvtap left promiscuous mode [ 165.293648][ T6224] device veth1_vlan left promiscuous mode [ 165.306324][ T6224] device veth0_vlan left promiscuous mode [ 165.361216][ T3519] Bluetooth: hci2: command 0x0409 tx timeout [ 165.430557][ T7341] loop4: detected capacity change from 0 to 128 [ 165.495919][ T7341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.557814][ T7341] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.612792][ T6224] du&B. (unregistering): Released all slaves [ 165.639153][ T7341] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 165.956767][ T6224] team0 (unregistering): Port device team_slave_1 removed [ 166.003909][ T6224] team0 (unregistering): Port device team_slave_0 removed [ 166.036950][ T6224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.078228][ T6224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.291939][ T6224] bond0 (unregistering): Released all slaves [ 166.347923][ T7259] team0: Port device team_slave_0 added [ 166.410263][ T7259] team0: Port device team_slave_1 added [ 166.460118][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.514907][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.600840][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.639055][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.657491][ T7362] block2mtd: illegal erase size [ 166.669604][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.740757][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.886628][ T7259] device hsr_slave_0 entered promiscuous mode [ 166.903508][ T7259] device hsr_slave_1 entered promiscuous mode [ 166.929437][ T7373] loop4: detected capacity change from 0 to 1024 [ 167.435001][ T5541] Bluetooth: hci2: command 0x041b tx timeout [ 167.509090][ T7259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.558434][ T7259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.586413][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1103'. [ 167.616420][ T7259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.646059][ T7259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.928127][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.981199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.002182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.035173][ T7259] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.066673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.081639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.103879][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.111058][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.154513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.170070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.192238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.212366][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.219525][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.244263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.289817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.329493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.346834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.379761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.399525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.420427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.431752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.445273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.469669][ T7259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.501807][ T7259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.521132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.538017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.829442][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.846972][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.866082][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.256705][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.289481][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.423833][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.449105][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.473321][ T7259] device veth0_vlan entered promiscuous mode [ 169.490463][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.518109][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 169.526818][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.565850][ T7259] device veth1_vlan entered promiscuous mode [ 169.585468][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.646188][ T7451] loop2: detected capacity change from 0 to 512 [ 169.691044][ T4276] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.735060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.774433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.790876][ T7259] device veth0_macvtap entered promiscuous mode [ 169.794106][ T7451] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.1113: missing EA_INODE flag [ 169.848292][ T7259] device veth1_macvtap entered promiscuous mode [ 169.889029][ T7451] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1113: error while reading EA inode 2 err=-117 [ 169.939292][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.970590][ T7451] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1113: inode #3584: comm syz.2.1113: iget: illegal inode # [ 169.972462][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.002813][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.019478][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.034167][ T4188] block nbd0: Receive control failed (result -32) [ 170.034167][ T4198] block nbd0: Receive control failed (result -32) [ 170.061195][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.091128][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.101594][ T7451] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1113: error while reading EA inode 3584 err=-117 [ 170.114899][ T7451] EXT4-fs (loop2): 1 orphan inode deleted [ 170.121010][ T4276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.130593][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.142813][ T7451] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 170.153188][ T4276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.161284][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.207438][ T4276] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 170.213540][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.240887][ T4276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.253033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.272053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.287411][ T4276] usb 6-1: config 0 descriptor?? [ 170.321526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.352354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.373222][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.441715][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.496744][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.517915][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.538509][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.552357][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.563787][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.581634][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.594225][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.620998][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.683053][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.748657][ T7259] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.769352][ T7259] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.818106][ T7259] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.844317][ T7259] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.895328][ T7489] loop4: detected capacity change from 0 to 164 [ 171.122974][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.150668][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.203430][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.211388][ T4276] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 171.293368][ T4276] usb 6-1: USB disconnect, device number 4 [ 171.302287][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.333261][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.370656][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.591370][ T3519] Bluetooth: hci2: command 0x0419 tx timeout [ 171.629583][ T7513] loop6: detected capacity change from 0 to 8 [ 171.687891][ T7518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1130'. [ 171.827500][ T7524] loop4: detected capacity change from 0 to 128 [ 171.897005][ T7524] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 171.971428][ T7524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.044408][ T26] audit: type=1400 audit(1792153523.398:17): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=7533 comm="syz.1.1136" name="foo" offset=55 [ 172.127169][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1138'. [ 172.176939][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1138'. [ 172.229110][ T7539] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.238322][ T7539] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.247532][ T7539] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.256509][ T7539] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.436534][ T7551] netlink: 'syz.4.1142': attribute type 10 has an invalid length. [ 172.534713][ T7551] team0: Port device netdevsim0 added [ 172.847141][ T7560] loop6: detected capacity change from 0 to 2048 [ 172.857682][ T7529] loop2: detected capacity change from 0 to 32768 [ 173.001915][ T7560] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 173.070755][ T7560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.559770][ T7574] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 173.659842][ T7552] loop5: detected capacity change from 0 to 40427 [ 173.806848][ T7552] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 173.844640][ T7552] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 173.866523][ T7563] comedi comedi1: reset error (fatal) [ 173.910334][ T7552] F2FS-fs (loop5): invalid crc value [ 174.011445][ T7552] F2FS-fs (loop5): Found nat_bits in checkpoint [ 174.135833][ T7596] loop6: detected capacity change from 0 to 512 [ 174.178884][ T7552] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 174.187626][ T7552] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 174.299202][ T7596] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.369129][ T7596] fs-verity: sha256 using implementation "sha256-avx2" [ 174.410749][ T7596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.1155: bg 0: bad block bitmap checksum [ 174.454264][ T7611] loop4: detected capacity change from 0 to 8 [ 174.579958][ T5942] handle_bad_sector: 23 callbacks suppressed [ 174.579995][ T5942] attempt to access beyond end of device [ 174.579995][ T5942] loop5: rw=2049, want=45104, limit=40427 [ 174.794956][ T26] audit: type=1326 audit(1792153526.148:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.2.1166" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad071d5559 code=0x0 [ 174.941721][ T7631] loop6: detected capacity change from 0 to 8 [ 175.034648][ T7631] SQUASHFS error: Unable to read directory block [629:fe] [ 175.427603][ T7655] cramfs: checking physical address 0x00000001472f5000 for linear cramfs image [ 175.459179][ T7655] cramfs: wrong magic [ 175.492720][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.508427][ T7655] cramfs: wrong magic [ 175.522965][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.538647][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.554787][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.580126][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.610146][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.645433][ T7662] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 175.647349][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.708733][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.734630][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 175.766261][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 176.059266][ T7683] loop6: detected capacity change from 0 to 512 [ 176.107763][ T7683] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 176.130496][ T7690] loop5: detected capacity change from 0 to 8 [ 176.145644][ T7683] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 176.171016][ T7685] kvm [7684]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 176.228353][ T7683] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 176.274750][ T7693] device vti0 entered promiscuous mode [ 176.285919][ T7683] EXT4-fs (loop6): 1 truncate cleaned up [ 176.292749][ T7683] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 176.620816][ T7710] loop6: detected capacity change from 0 to 1024 [ 176.677190][ T7712] block2mtd: erasesize must be a divisor of device size [ 176.868229][ T7715] loop5: detected capacity change from 0 to 4096 [ 177.008117][ T7729] loop6: detected capacity change from 0 to 128 [ 177.105773][ T7729] FAT-fs (loop6): Directory bread(block 1048) failed [ 177.114490][ T7733] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.116863][ T7715] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 177.144586][ T7729] FAT-fs (loop6): Directory bread(block 1049) failed [ 177.165249][ T7729] FAT-fs (loop6): Directory bread(block 1050) failed [ 177.186086][ T7729] FAT-fs (loop6): Directory bread(block 1051) failed [ 177.212092][ T7715] NILFS (loop5): mounting fs with errors [ 177.226422][ T7729] FAT-fs (loop6): Directory bread(block 1052) failed [ 177.261450][ T7729] FAT-fs (loop6): Directory bread(block 1053) failed [ 177.294552][ T7729] FAT-fs (loop6): Directory bread(block 1054) failed [ 177.330458][ T7729] FAT-fs (loop6): Directory bread(block 1055) failed [ 177.369557][ T7739] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 177.382798][ T7729] FAT-fs (loop6): Directory bread(block 1048) failed [ 177.391785][ T7729] FAT-fs (loop6): Directory bread(block 1049) failed [ 177.425281][ T7739] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 177.645832][ T7702] loop2: detected capacity change from 0 to 32768 [ 177.731026][ T26] audit: type=1400 audit(1792153529.078:19): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=7751 comm="syz.4.1211" name="p" offset=92 [ 177.856745][ T7702] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 177.971253][ T7768] tap0: tun_chr_ioctl cmd 21731 [ 178.219991][ T7702] syz.2.1194 (7702) used greatest stack depth: 18224 bytes left [ 178.368301][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 178.970610][ T7782] loop6: detected capacity change from 0 to 32768 [ 179.062619][ T7782] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.1219 (7782) [ 179.136406][ T7832] bonding: unable to delete non-existent b [ 179.185857][ T7782] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 179.228799][ T7782] BTRFS info (device loop6): enabling ssd optimizations [ 179.261542][ T7782] BTRFS info (device loop6): not using ssd optimizations [ 179.292330][ T7782] BTRFS info (device loop6): turning off barriers [ 179.315024][ T7838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.322618][ T7782] BTRFS info (device loop6): use no compression [ 179.361905][ T7782] BTRFS info (device loop6): using free space tree [ 179.394059][ T7782] BTRFS info (device loop6): has skinny extents [ 179.585663][ T7855] loop5: detected capacity change from 0 to 1024 [ 179.688625][ T7855] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 180.007485][ T5929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.274148][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 180.378682][ T7901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.398139][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.501192][ T5929] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 180.510345][ T5929] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 180.571088][ T5929] usb 5-1: Manufacturer: syz [ 180.591967][ T5929] usb 5-1: config 0 descriptor?? [ 180.611583][ T7911] __nla_validate_parse: 11 callbacks suppressed [ 180.611620][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 180.788730][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 181.070292][ T5929] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0007/input/input16 [ 181.086321][ T7923] loop5: detected capacity change from 0 to 64 [ 181.209427][ T5929] creative-sb0540 0003:041E:3100.0007: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 181.300152][ T7923] hfs: request for non-existent node 131072 in B*Tree [ 181.334870][ T7923] hfs: request for non-existent node 131072 in B*Tree [ 181.436030][ T7892] loop2: detected capacity change from 0 to 40427 [ 181.507100][ T5927] usb 5-1: USB disconnect, device number 8 [ 181.566471][ T7892] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 181.609324][ T7934] fido_id[7934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 181.625835][ T7892] F2FS-fs (loop2): invalid crc value [ 181.659494][ T7892] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.829597][ T7892] F2FS-fs (loop2): recover fsync data on readonly fs [ 181.871187][ T7892] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 181.878177][ T7892] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 181.936574][ T7892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.109656][ T7892] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 182.541918][ T7989] loop4: detected capacity change from 0 to 256 [ 182.767328][ T7994] binder: 7993:7994 ioctl c018620c 200000000000 returned -22 [ 183.230570][ T7978] loop6: detected capacity change from 0 to 32768 [ 183.378409][ T7978] [ 183.378409][ T7978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.378409][ T7978] [ 183.568322][ T7978] ERROR: (device loop6): diWrite: ixpxd invalid [ 183.568322][ T7978] [ 183.657208][ T7978] ERROR: (device loop6): txCommit: [ 183.657208][ T7978] [ 183.749131][ T7978] [ 183.749131][ T7978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.749131][ T7978] [ 183.817022][ T7978] [ 183.817022][ T7978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.817022][ T7978] [ 183.954793][ T8047] device veth0_macvtap left promiscuous mode [ 184.198620][ T8056] loop4: detected capacity change from 0 to 64 [ 184.437807][ T8069] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 184.488905][ T8069] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) 糩 185.166593][ T8051] loop5: detected capacity change from 0 to 32768 [ 196.234803][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.241189][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.430932][ T3519] Bluetooth: hci1: command 0x0406 tx timeout [ 203.430930][ T5929] Bluetooth: hci0: command 0x0406 tx timeout [ 203.431024][ T5929] Bluetooth: hci3: command 0x0406 tx timeout [ 257.675318][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.681893][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.351014][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 290.471004][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 319.113473][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.119835][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.871078][ T27] INFO: task jbd2/sda1-8:3522 blocked for more than 143 seconds. [ 340.878873][ T27] Not tainted syzkaller #0 [ 340.885103][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.893966][ T27] task:jbd2/sda1-8 state:D stack:25360 pid: 3522 ppid: 2 flags:0x00004000 [ 340.904003][ T27] Call Trace: [ 340.907350][ T27] [ 340.910341][ T27] __schedule+0x11c3/0x4350 [ 340.915054][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 340.921192][ T27] ? lock_chain_count+0x20/0x20 [ 340.926085][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 340.934230][ T27] ? release_firmware_map_entry+0x190/0x190 [ 340.940186][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 340.946177][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 340.951659][ T27] schedule+0x11b/0x1e0 [ 340.955869][ T27] io_schedule+0x7c/0xd0 [ 340.960146][ T27] bit_wait_io+0xd/0xc0 [ 340.964429][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 340.969961][ T27] ? bit_wait+0xc0/0xc0 [ 340.974708][ T27] ? __wait_on_bit+0x170/0x170 [ 340.979592][ T27] ? do_raw_write_lock+0x11a/0x260 [ 340.984824][ T27] ? bit_waitqueue+0x30/0x30 [ 340.989451][ T27] ? do_raw_read_unlock+0x39/0x70 [ 340.994601][ T27] jbd2_journal_commit_transaction+0x2f0b/0x5c30 [ 341.001782][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 341.008914][ T27] ? _raw_spin_unlock+0x40/0x40 [ 341.013899][ T27] ? rcu_is_watching+0x11/0xa0 [ 341.018759][ T27] ? __timer_delete_sync+0x1f5/0x290 [ 341.024235][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 341.029308][ T27] ? timer_delete_sync+0x20/0x20 [ 341.034433][ T27] ? do_raw_read_unlock+0x70/0x70 [ 341.039511][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 341.047655][ T27] kjournald2+0x45a/0x900 [ 341.052293][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 341.057543][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 341.063566][ T27] ? init_wait_entry+0xd0/0xd0 [ 341.068380][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.074636][ T27] ? __kthread_parkme+0x14e/0x1b0 [ 341.079732][ T27] kthread+0x42e/0x520 [ 341.083918][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 341.089160][ T27] ? kthread_blkcg+0xd0/0xd0 [ 341.093877][ T27] ret_from_fork+0x1f/0x30 [ 341.098395][ T27] [ 341.102522][ T27] INFO: task syz-executor:4175 blocked for more than 143 seconds. [ 341.110370][ T27] Not tainted syzkaller #0 [ 341.115815][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.124923][ T27] task:syz-executor state:D stack:21584 pid: 4175 ppid: 4174 flags:0x00004002 [ 341.134440][ T27] Call Trace: [ 341.137759][ T27] [ 341.140810][ T27] __schedule+0x11c3/0x4350 [ 341.145387][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 341.151467][ T27] ? lock_chain_count+0x20/0x20 [ 341.156382][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 341.163883][ T27] ? release_firmware_map_entry+0x190/0x190 [ 341.169892][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 341.175917][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 341.181261][ T27] schedule+0x11b/0x1e0 [ 341.185456][ T27] io_schedule+0x7c/0xd0 [ 341.189735][ T27] bit_wait_io+0xd/0xc0 [ 341.194068][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 341.199567][ T27] ? bit_wait+0xc0/0xc0 [ 341.204564][ T27] ? __wait_on_bit+0x170/0x170 [ 341.209417][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 341.214563][ T27] ? bit_waitqueue+0x30/0x30 [ 341.219212][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 341.224580][ T27] do_get_write_access+0x134/0xe40 [ 341.229753][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 341.235875][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 341.242201][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 341.248396][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 341.253772][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 341.259367][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 341.264999][ T27] ext4_dirty_inode+0xbf/0x100 [ 341.269822][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 341.278555][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 341.283779][ T27] generic_update_time+0x1cd/0x1f0 [ 341.288938][ T27] file_update_time+0x3c0/0x440 [ 341.293886][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 341.299067][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 341.304276][ T27] ? wp_page_shared+0x15b/0x6c0 [ 341.309592][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 341.316123][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 341.321437][ T27] do_page_mkwrite+0x168/0x3c0 [ 341.326261][ T27] wp_page_shared+0x163/0x6c0 [ 341.331057][ T27] handle_mm_fault+0x1fbd/0x4440 [ 341.336039][ T27] ? get_page+0xe0/0xe0 [ 341.340213][ T27] ? vmacache_find+0x238/0x590 [ 341.345088][ T27] ? find_vma+0xd2/0x230 [ 341.349366][ T27] do_user_addr_fault+0x494/0xc90 [ 341.354769][ T27] exc_page_fault+0x60/0x100 [ 341.359423][ T27] ? clear_bhb_loop+0x30/0x80 [ 341.364267][ T27] asm_exc_page_fault+0x22/0x30 [ 341.369161][ T27] RIP: 0033:0x7fc2411feae2 [ 341.374191][ T27] RSP: 002b:00007fff26f73b00 EFLAGS: 00010202 [ 341.380314][ T27] RAX: 00007fc23f2ba000 RBX: 0000555565fe7e90 RCX: 0000000000000002 [ 341.389482][ T27] RDX: 0000000000002212 RSI: 0000555565f7a0f0 RDI: 0000000000000004 [ 341.397877][ T27] RBP: 00007fff26f74000 R08: 0000555565f7a4e8 R09: 0000000000000087 [ 341.406252][ T27] R10: 0000000000000010 R11: 0000000000000002 R12: 00007fff26f73e40 [ 341.415015][ T27] R13: 00007fff26f73c30 R14: 585858582e7a7973 R15: 00007fff26f73b80 [ 341.423293][ T27] [ 341.426492][ T27] INFO: task syz.5.1294:8042 blocked for more than 143 seconds. [ 341.434269][ T27] Not tainted syzkaller #0 [ 341.439236][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.448042][ T27] task:syz.5.1294 state:D stack:27408 pid: 8042 ppid: 5942 flags:0x00004004 [ 341.457519][ T27] Call Trace: [ 341.460888][ T27] [ 341.463868][ T27] __schedule+0x11c3/0x4350 [ 341.468573][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 341.474672][ T27] ? lock_chain_count+0x20/0x20 [ 341.479586][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 341.485443][ T27] ? release_firmware_map_entry+0x190/0x190 [ 341.491660][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 341.497614][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 341.503261][ T27] schedule+0x11b/0x1e0 [ 341.507489][ T27] io_schedule+0x7c/0xd0 [ 341.517441][ T27] bit_wait_io+0xd/0xc0 [ 341.523473][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 341.529103][ T27] ? bit_wait+0xc0/0xc0 [ 341.533758][ T27] ? __wait_on_bit+0x170/0x170 [ 341.538780][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 341.544387][ T27] ? bit_waitqueue+0x30/0x30 [ 341.549030][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 341.554357][ T27] do_get_write_access+0x134/0xe40 [ 341.559522][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 341.565700][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 341.572043][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 341.578242][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 341.583793][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 341.589417][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 341.598057][ T27] ext4_dirty_inode+0xbf/0x100 [ 341.603023][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 341.608892][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 341.614555][ T27] generic_update_time+0x1cd/0x1f0 [ 341.619740][ T27] file_update_time+0x3c0/0x440 [ 341.624818][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 341.630006][ T27] ? mark_lock+0x94/0x320 [ 341.634489][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 341.639564][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 341.645635][ T27] ? pte_alloc_one+0x287/0x310 [ 341.650441][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 341.656827][ T27] ? count_memcg_event_mm+0x324/0x370 [ 341.662466][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 341.668680][ T27] ? verify_lock_unused+0x140/0x140 [ 341.674101][ T27] do_page_mkwrite+0x168/0x3c0 [ 341.678919][ T27] handle_mm_fault+0x1e47/0x4440 [ 341.684113][ T27] ? get_page+0xe0/0xe0 [ 341.688317][ T27] ? vmacache_find+0x53c/0x590 [ 341.693222][ T27] ? vmacache_update+0xa0/0x100 [ 341.698114][ T27] ? find_vma+0x1df/0x230 [ 341.704517][ T27] do_user_addr_fault+0x494/0xc90 [ 341.709625][ T27] exc_page_fault+0x60/0x100 [ 341.714984][ T27] asm_exc_page_fault+0x22/0x30 [ 341.720128][ T27] RIP: 0033:0x7f891e3a0c09 [ 341.724868][ T27] RSP: 002b:00007ffd08f3c540 EFLAGS: 00010202 [ 341.733417][ T27] RAX: 0000001b2ed24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 341.741589][ T27] RDX: 0000001b2ed23ffc RSI: 00000000005ffde8 RDI: 00007f891f283700 [ 341.749602][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f891e740000 [ 341.757762][ T27] R10: 00007f891f283700 R11: 0000000000000000 R12: 0000000000000000 [ 341.765895][ T27] R13: 0000000000006fd7 R14: ffffffff819d82f4 R15: 00007f891f283720 [ 341.773976][ T27] ? trace_user_enter+0x74/0x190 [ 341.778989][ T27] [ 341.782096][ T27] INFO: task syz.4.1317:8103 blocked for more than 144 seconds. [ 341.789767][ T27] Not tainted syzkaller #0 [ 341.794996][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.803754][ T27] task:syz.4.1317 state:D stack:27664 pid: 8103 ppid: 4191 flags:0x00004004 [ 341.813072][ T27] Call Trace: [ 341.816386][ T27] [ 341.819820][ T27] __schedule+0x11c3/0x4350 [ 341.824905][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 341.831256][ T27] ? lock_chain_count+0x20/0x20 [ 341.836202][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 341.843726][ T27] ? release_firmware_map_entry+0x190/0x190 [ 341.849679][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 341.855733][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 341.861404][ T27] schedule+0x11b/0x1e0 [ 341.865626][ T27] io_schedule+0x7c/0xd0 [ 341.869902][ T27] bit_wait_io+0xd/0xc0 [ 341.874121][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 341.879636][ T27] ? bit_wait+0xc0/0xc0 [ 341.883946][ T27] ? __wait_on_bit+0x170/0x170 [ 341.888771][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 341.893966][ T27] ? bit_waitqueue+0x30/0x30 [ 341.898600][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 341.903898][ T27] do_get_write_access+0x134/0xe40 [ 341.909163][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 341.915768][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 341.923270][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 341.929485][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 341.934857][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 341.940493][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 341.946146][ T27] ext4_dirty_inode+0xbf/0x100 [ 341.953155][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 341.959044][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 341.964167][ T27] generic_update_time+0x1cd/0x1f0 [ 341.969416][ T27] file_update_time+0x3c0/0x440 [ 341.974477][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 341.979673][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 341.984819][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 341.990571][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 341.997062][ T27] ? count_memcg_event_mm+0x324/0x370 [ 342.002595][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 342.008841][ T27] ? verify_lock_unused+0x140/0x140 [ 342.014156][ T27] do_page_mkwrite+0x168/0x3c0 [ 342.018961][ T27] handle_mm_fault+0x1e47/0x4440 [ 342.024563][ T27] ? get_page+0xe0/0xe0 [ 342.028790][ T27] ? vmacache_find+0x238/0x590 [ 342.033740][ T27] ? find_vma+0xd2/0x230 [ 342.038035][ T27] do_user_addr_fault+0x494/0xc90 [ 342.043160][ T27] exc_page_fault+0x60/0x100 [ 342.047794][ T27] ? clear_bhb_loop+0x30/0x80 [ 342.052654][ T27] asm_exc_page_fault+0x22/0x30 [ 342.057552][ T27] RIP: 0033:0x7fec00fb5332 [ 342.064292][ T27] RSP: 002b:00007ffc579aa350 EFLAGS: 00010202 [ 342.070416][ T27] RAX: 0000000000001008 RBX: 00007fec01e97720 RCX: 0000000000000000 [ 342.078516][ T27] RDX: 0000001b32c23000 RSI: 0000000000000008 RDI: 00007fec01e97720 [ 342.086570][ T27] RBP: 0000000000000124 R08: 00007fec01352000 R09: 00007fec01368038 [ 342.094724][ T27] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff83a742f9 [ 342.102789][ T27] R13: 00007fec01368038 R14: 000000000000006f R15: fffffffffffff000 [ 342.110849][ T27] ? security_sk_alloc+0x79/0x130 [ 342.115943][ T27] [ 342.119036][ T27] INFO: task syz.1.1319:8106 blocked for more than 144 seconds. [ 342.127880][ T27] Not tainted syzkaller #0 [ 342.132982][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.141718][ T27] task:syz.1.1319 state:D stack:27664 pid: 8106 ppid: 4187 flags:0x00004004 [ 342.151106][ T27] Call Trace: [ 342.154425][ T27] [ 342.157394][ T27] __schedule+0x11c3/0x4350 [ 342.162009][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 342.168056][ T27] ? lock_chain_count+0x20/0x20 [ 342.175116][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 342.180479][ T27] ? release_firmware_map_entry+0x190/0x190 [ 342.186565][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 342.192577][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 342.197841][ T27] schedule+0x11b/0x1e0 [ 342.202119][ T27] io_schedule+0x7c/0xd0 [ 342.206405][ T27] bit_wait_io+0xd/0xc0 [ 342.210594][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 342.216182][ T27] ? bit_wait+0xc0/0xc0 [ 342.220426][ T27] ? __wait_on_bit+0x170/0x170 [ 342.225303][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 342.230879][ T27] ? bit_waitqueue+0x30/0x30 [ 342.235679][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 342.241027][ T27] do_get_write_access+0x134/0xe40 [ 342.246208][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 342.252282][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 342.258507][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 342.264752][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 342.270094][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 342.275764][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 342.283570][ T27] ext4_dirty_inode+0xbf/0x100 [ 342.288402][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 342.294284][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 342.299349][ T27] generic_update_time+0x1cd/0x1f0 [ 342.304564][ T27] file_update_time+0x3c0/0x440 [ 342.309467][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 342.314699][ T27] ? mark_lock+0x94/0x320 [ 342.319110][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 342.324327][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 342.331241][ T27] ? pte_alloc_one+0x287/0x310 [ 342.336095][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 342.342573][ T27] ? __rwlock_init+0x140/0x140 [ 342.347386][ T27] ? count_memcg_event_mm+0x324/0x370 [ 342.353020][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 342.358276][ T27] do_page_mkwrite+0x168/0x3c0 [ 342.365922][ T27] handle_mm_fault+0x1e47/0x4440 [ 342.371080][ T27] ? get_page+0xe0/0xe0 [ 342.375314][ T27] ? vmacache_find+0x4e3/0x590 [ 342.380130][ T27] ? vmacache_update+0xa0/0x100 [ 342.385106][ T27] ? find_vma+0x1df/0x230 [ 342.389478][ T27] do_user_addr_fault+0x494/0xc90 [ 342.394811][ T27] exc_page_fault+0x60/0x100 [ 342.399472][ T27] ? clear_bhb_loop+0x30/0x80 [ 342.404288][ T27] asm_exc_page_fault+0x22/0x30 [ 342.409199][ T27] RIP: 0033:0x7feaed5c8ea3 [ 342.413826][ T27] RSP: 002b:00007ffe9b4d55d0 EFLAGS: 00010246 [ 342.420049][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32364000 [ 342.428234][ T27] RDX: 0000001b32324000 RSI: 0000000000600000 RDI: 00007feaed940708 [ 342.437108][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.445206][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 342.453389][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe9b4d5860 [ 342.461517][ T27] [ 342.464636][ T27] INFO: task syz.2.1330:8107 blocked for more than 144 seconds. [ 342.475790][ T27] Not tainted syzkaller #0 [ 342.480910][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.489722][ T27] task:syz.2.1330 state:D stack:27664 pid: 8107 ppid: 4195 flags:0x00004004 [ 342.499419][ T27] Call Trace: [ 342.502835][ T27] [ 342.505803][ T27] __schedule+0x11c3/0x4350 [ 342.510353][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 342.516468][ T27] ? lock_chain_count+0x20/0x20 [ 342.521473][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 342.526818][ T27] ? release_firmware_map_entry+0x190/0x190 [ 342.532893][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 342.539673][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 342.545033][ T27] schedule+0x11b/0x1e0 [ 342.549252][ T27] io_schedule+0x7c/0xd0 [ 342.554273][ T27] bit_wait_io+0xd/0xc0 [ 342.558521][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 342.564694][ T27] ? bit_wait+0xc0/0xc0 [ 342.569003][ T27] ? __wait_on_bit+0x170/0x170 [ 342.574327][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 342.579410][ T27] ? bit_waitqueue+0x30/0x30 [ 342.584497][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 342.589751][ T27] do_get_write_access+0x134/0xe40 [ 342.595431][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 342.602322][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 342.608540][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 342.615166][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 342.620516][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 342.627337][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 342.633625][ T27] ext4_dirty_inode+0xbf/0x100 [ 342.639136][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 342.645146][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 342.650235][ T27] generic_update_time+0x1cd/0x1f0 [ 342.655546][ T27] file_update_time+0x3c0/0x440 [ 342.660455][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 342.665740][ T27] ? mark_lock+0x94/0x320 [ 342.670131][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 342.675382][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 342.681213][ T27] ? pte_alloc_one+0x287/0x310 [ 342.686082][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 342.692527][ T27] ? __rwlock_init+0x140/0x140 [ 342.697589][ T27] ? count_memcg_event_mm+0x324/0x370 [ 342.703362][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 342.708634][ T27] do_page_mkwrite+0x168/0x3c0 [ 342.714632][ T27] handle_mm_fault+0x1e47/0x4440 [ 342.719661][ T27] ? get_page+0xe0/0xe0 [ 342.724318][ T27] ? vmacache_find+0x4e3/0x590 [ 342.729129][ T27] ? vmacache_update+0xa0/0x100 [ 342.734319][ T27] ? find_vma+0x1df/0x230 [ 342.739451][ T27] do_user_addr_fault+0x494/0xc90 [ 342.746236][ T27] exc_page_fault+0x60/0x100 [ 342.751037][ T27] ? clear_bhb_loop+0x30/0x80 [ 342.755772][ T27] asm_exc_page_fault+0x22/0x30 [ 342.760786][ T27] RIP: 0033:0x7fad070a2ea3 [ 342.765248][ T27] RSP: 002b:00007ffd06f0e630 EFLAGS: 00010246 [ 342.771416][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32464000 [ 342.779424][ T27] RDX: 0000001b32424000 RSI: 0000000000600000 RDI: 00007fad0741a708 [ 342.787601][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.796311][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 342.804456][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd06f0e8c0 [ 342.812609][ T27] [ 342.815756][ T27] INFO: task syz.6.1320:8108 blocked for more than 145 seconds. [ 342.823946][ T27] Not tainted syzkaller #0 [ 342.828920][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.838036][ T27] task:syz.6.1320 state:D stack:27664 pid: 8108 ppid: 7259 flags:0x00004004 [ 342.848407][ T27] Call Trace: [ 342.851926][ T27] [ 342.854908][ T27] __schedule+0x11c3/0x4350 [ 342.859480][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 342.865770][ T27] ? lock_chain_count+0x20/0x20 [ 342.870836][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 342.876180][ T27] ? release_firmware_map_entry+0x190/0x190 [ 342.882198][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 342.888133][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 342.893550][ T27] schedule+0x11b/0x1e0 [ 342.897758][ T27] io_schedule+0x7c/0xd0 [ 342.902185][ T27] bit_wait_io+0xd/0xc0 [ 342.906389][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 342.912338][ T27] ? bit_wait+0xc0/0xc0 [ 342.916545][ T27] ? __wait_on_bit+0x170/0x170 [ 342.922424][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 342.927525][ T27] ? bit_waitqueue+0x30/0x30 [ 342.933360][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 342.938631][ T27] do_get_write_access+0x134/0xe40 [ 342.944235][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 342.950457][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 342.956841][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 342.963180][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 342.968527][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 342.974337][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 342.979853][ T27] ext4_dirty_inode+0xbf/0x100 [ 342.984809][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 342.990817][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 342.995895][ T27] generic_update_time+0x1cd/0x1f0 [ 343.001179][ T27] file_update_time+0x3c0/0x440 [ 343.006088][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 343.011349][ T27] ? mark_lock+0x94/0x320 [ 343.015743][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 343.020972][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 343.026767][ T27] ? pte_alloc_one+0x287/0x310 [ 343.034659][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 343.041021][ T27] ? __rwlock_init+0x140/0x140 [ 343.046142][ T27] ? count_memcg_event_mm+0x324/0x370 [ 343.051974][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 343.057330][ T27] do_page_mkwrite+0x168/0x3c0 [ 343.062225][ T27] handle_mm_fault+0x1e47/0x4440 [ 343.067240][ T27] ? get_page+0xe0/0xe0 [ 343.071573][ T27] ? vmacache_find+0x4e3/0x590 [ 343.076400][ T27] ? vmacache_update+0xa0/0x100 [ 343.081391][ T27] ? find_vma+0x1df/0x230 [ 343.085776][ T27] do_user_addr_fault+0x494/0xc90 [ 343.090971][ T27] exc_page_fault+0x60/0x100 [ 343.095609][ T27] ? clear_bhb_loop+0x30/0x80 [ 343.100326][ T27] asm_exc_page_fault+0x22/0x30 [ 343.105310][ T27] RIP: 0033:0x7fada1a2bea3 [ 343.109759][ T27] RSP: 002b:00007ffd39d1f470 EFLAGS: 00010246 [ 343.116032][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30b64000 [ 343.124126][ T27] RDX: 0000001b30b24000 RSI: 0000000000600000 RDI: 00007fada1da3708 [ 343.132217][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.140219][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 343.149610][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd39d1f700 [ 343.157945][ T27] [ 343.161254][ T27] [ 343.161254][ T27] Showing all locks held in the system: [ 343.169006][ T27] 1 lock held by khungtaskd/27: [ 343.174664][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 343.184166][ T27] 3 locks held by kworker/u4:3/155: [ 343.189443][ T27] 2 locks held by getty/3944: [ 343.195266][ T27] #0: ffff88802d997098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 343.205943][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 343.216240][ T27] 3 locks held by syz-executor/4175: [ 343.221705][ T27] #0: ffff88802d72e328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 343.231720][ T27] #1: ffff88814c64c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 343.241563][ T27] #2: ffff88814c7f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 343.251843][ T27] 4 locks held by kworker/u4:7/6224: [ 343.257725][ T27] #0: ffff8881431a6138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 343.268399][ T27] #1: ffffc90003417d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 343.280391][ T27] #2: ffff88814c64c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 343.291352][ T27] #3: ffff88814c64ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 343.302845][ T27] 3 locks held by syz.5.1294/8042: [ 343.308000][ T27] #0: ffff88807e709d28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 343.318655][ T27] #1: ffff88814c64c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 343.328623][ T27] #2: ffff88814c7f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 343.338442][ T27] 3 locks held by syz.4.1317/8103: [ 343.343731][ T27] #0: ffff88802d98dc28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 343.354523][ T27] #1: ffff88814c64c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 343.364510][ T27] #2: ffff88814c7f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 343.374283][ T27] 3 locks held by syz.1.1319/8106: [ 343.379431][ T27] #0: ffff88801f9c6328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 343.389649][ T27] #1: ffff88814c64c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 343.399549][ T27] #2: ffff88814c7f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 343.410350][ T27] 3 locks held by syz.2.1330/8107: [ 343.415903][ T27] #0: ffff88801f9c0f28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 343.427837][ T27] #1: ffff88814c64c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 343.438318][ T27] #2: ffff88814c7f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 343.449150][ T27] 3 locks held by syz.6.1320/8108: [ 343.454456][ T27] #0: ffff88802d989d28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 343.465170][ T27] #1: ffff88814c64c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 343.475096][ T27] #2: ffff88814c7f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 343.485129][ T27] [ 343.487590][ T27] ============================================= [ 343.487590][ T27] [ 343.496224][ T27] NMI backtrace for cpu 0 [ 343.500784][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 343.508160][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.518394][ T27] Call Trace: [ 343.521726][ T27] [ 343.524686][ T27] dump_stack_lvl+0x188/0x250 [ 343.529416][ T27] ? show_regs_print_info+0x20/0x20 [ 343.534663][ T27] ? load_image+0x410/0x410 [ 343.539402][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 343.544550][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 343.549535][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 343.555992][ T27] ? _printk+0xda/0x130 [ 343.560207][ T27] ? load_image+0x410/0x410 [ 343.564783][ T27] ? load_image+0x410/0x410 [ 343.569322][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 343.575426][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 343.581452][ T27] watchdog+0xe1b/0xe60 [ 343.585682][ T27] kthread+0x42e/0x520 [ 343.589786][ T27] ? hungtask_pm_notify+0x40/0x40 [ 343.594857][ T27] ? kthread_blkcg+0xd0/0xd0 [ 343.599512][ T27] ret_from_fork+0x1f/0x30 [ 343.603991][ T27] [ 343.607621][ T27] Sending NMI from CPU 0 to CPUs 1: [ 343.613079][ C1] NMI backtrace for cpu 1 [ 343.613092][ C1] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 343.613109][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.613119][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 343.613149][ C1] RIP: 0010:unwind_next_frame+0x894/0x1cf0 [ 343.613171][ C1] Code: c0 0f 85 bf 0e 00 00 4d 89 f4 49 c1 ec 03 41 0f b6 04 2c 84 c0 0f 85 cb 0e 00 00 41 0f b6 47 01 83 e0 03 ff 24 c5 b0 92 28 8a <48> 8d 7b 08 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 76 41 89 00 [ 343.613191][ C1] RSP: 0018:ffffc900016beef0 EFLAGS: 00000246 [ 343.613210][ C1] RAX: 0000000000000000 RBX: ffffc900016bef88 RCX: ffffffff8e809640 [ 343.613222][ C1] RDX: ffffc900016bf2e8 RSI: ffffffff8e809614 RDI: 0000000000000001 [ 343.613233][ C1] RBP: dffffc0000000000 R08: 0000000000000010 R09: 0000000000000000 [ 343.613244][ C1] R10: dffffc0000000000 R11: fffff520002d7dfd R12: 1ffffffff1ddfb49 [ 343.613256][ C1] R13: 1ffffffff1ddfb49 R14: ffffffff8eefda4b R15: ffffffff8eefda4a [ 343.613269][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 343.613283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.613294][ C1] CR2: 0000564fa9d97168 CR3: 0000000020d4e000 CR4: 00000000003506e0 [ 343.613309][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.613318][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.613328][ C1] Call Trace: [ 343.613333][ C1] [ 343.613342][ C1] ? kasan_save_stack+0x35/0x60 [ 343.613363][ C1] ? stack_trace_save+0xf0/0xf0 [ 343.613379][ C1] arch_stack_walk+0x10c/0x140 [ 343.613401][ C1] ? kasan_save_stack+0x35/0x60 [ 343.613420][ C1] stack_trace_save+0xa6/0xf0 [ 343.613435][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 343.613450][ C1] ? mark_lock+0x94/0x320 [ 343.613469][ C1] kasan_save_stack+0x35/0x60 [ 343.613490][ C1] ? kasan_save_stack+0x35/0x60 [ 343.613531][ C1] kasan_record_aux_stack+0xb8/0x100 [ 343.613550][ C1] kvfree_call_rcu+0x105/0x7f0 [ 343.613569][ C1] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 343.613591][ C1] ? call_rcu+0x900/0x900 [ 343.613606][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 343.613627][ C1] cfg80211_update_known_bss+0x184/0xb60 [ 343.613648][ C1] cfg80211_bss_update+0x156/0x21f0 [ 343.613674][ C1] ? cfg80211_inform_bss_frame_data+0x6c7/0x1ed0 [ 343.613695][ C1] cfg80211_inform_bss_frame_data+0x88d/0x1ed0 [ 343.613722][ C1] ? psi_poll_worker+0x6e4/0x9e0 [ 343.613743][ C1] ? cfg80211_parse_mbssid_data+0x30e0/0x30e0 [ 343.613771][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 343.613797][ C1] ieee80211_bss_info_update+0x6ba/0xa80 [ 343.613819][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 343.613839][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 343.613858][ C1] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 343.613886][ C1] ? mark_lock+0x94/0x320 [ 343.613901][ C1] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 343.613919][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.613940][ C1] ? lock_chain_count+0x20/0x20 [ 343.613958][ C1] ? __rwlock_init+0x140/0x140 [ 343.613975][ C1] ? kcov_remote_start+0x135/0x5e0 [ 343.613992][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 343.614016][ C1] ieee80211_iface_work+0x714/0xc50 [ 343.614035][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 343.614055][ C1] cfg80211_wiphy_work+0x224/0x260 [ 343.614089][ C1] process_one_work+0x867/0xff0 [ 343.614115][ C1] ? worker_detach_from_pool+0x240/0x240 [ 343.614132][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 343.614153][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 343.614170][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 343.614188][ C1] ? wq_worker_running+0x97/0x170 [ 343.614205][ C1] worker_thread+0xad7/0x12a0 [ 343.614236][ C1] kthread+0x42e/0x520 [ 343.614250][ C1] ? rcu_lock_release+0x20/0x20 [ 343.614265][ C1] ? kthread_blkcg+0xd0/0xd0 [ 343.614281][ C1] ret_from_fork+0x1f/0x30 [ 343.614305][ C1] [ 343.617343][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 344.009482][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 344.016687][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.026753][ T27] Call Trace: [ 344.030039][ T27] [ 344.032975][ T27] dump_stack_lvl+0x188/0x250 [ 344.037688][ T27] ? show_regs_print_info+0x20/0x20 [ 344.042905][ T27] ? load_image+0x410/0x410 [ 344.047426][ T27] panic+0x2f8/0x850 [ 344.051328][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 344.056965][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 344.061513][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 344.067700][ T27] watchdog+0xe5a/0xe60 [ 344.071885][ T27] kthread+0x42e/0x520 [ 344.075984][ T27] ? hungtask_pm_notify+0x40/0x40 [ 344.081020][ T27] ? kthread_blkcg+0xd0/0xd0 [ 344.085616][ T27] ret_from_fork+0x1f/0x30 [ 344.090046][ T27] [ 344.095638][ T27] Kernel Offset: disabled [ 344.099988][ T27] Rebooting in 86400 seconds..