last executing test programs: 8m40.663877691s ago: executing program 4 (id=135): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x20000000, 0x0, 0xfffffffd], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]], '\x00', [{0x0, 0xfffffffe, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x0, 0x1}, {0x0, 0xb}, {0x0, 0x1}, {0x0, 0xfffffffd}, {0x1, 0x2000}, {0x0, 0x1000}, {}, {0x0, 0x5}, {}, {}, {0x2000000}], '\x00', 0x6b4, 0x0, 0x0, 0x1000000}) 8m40.383394788s ago: executing program 4 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 8m40.115031714s ago: executing program 4 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m39.759181114s ago: executing program 4 (id=145): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m39.435297384s ago: executing program 4 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x800) 8m38.615248042s ago: executing program 4 (id=152): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 8m37.939712871s ago: executing program 32 (id=152): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 28.738624863s ago: executing program 1 (id=7025): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb8) 28.558996803s ago: executing program 1 (id=7027): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0xd0, 0x19, 0x542c, 0x0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0xff, 0xffffffff, 'wg1\x00', 'wg0\x00'}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x0, 0x1, [0x0, 0x0, 0xfffc, 0x2e, 0x0, 0x0, 0x0, 0x21], 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0xffffffff, 'pim6reg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x1, 0x4b}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 28.27144481s ago: executing program 1 (id=7032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x7f}) 28.068024852s ago: executing program 1 (id=7037): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jEuNssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9njnn85Hsn/fMmTnPnHnOmf3t+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vm72U7Usy+p/8r82Z9kL6v/eOLE5X/bqGz1CAAAAYLV+lf/93C1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0Q1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39Lh9vMftS3bAEhuLn8fkD7Y9/+fmYpdmt2aj+W3b29zr8dqGoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fmd9W2/O4raGGra1tT5DfvbY8TiGWtjH25u2tfiY0U9em038/GePHf+7C8/e3q723A1Nj1eMc8e2+jg/EZYUY61lG9I+ieMcahjn1javyXDTOGv5/er/bh3nc8sc5/DiMNdV62s+ng3l//5uvp9GGn+sl/bT1rDsF3dlWXZ5cdit6yzZVjaUbWpaMrT4+owXM7L+GPWp9OJsZEXz9M5lzNN6ndnePE9bj4n4+t8Z7jfSYQyNL9NPPj7W8Lr/cuFa5mlUf9adjpXWObjWx0q/zME4L76bP+kn2s7B7eH5P3Z35znYdu60mYPpeTfMwW295uDQ2HA+5vQi1PL7LM7BXU3rD+dbquX1mbu7z8GpC6fPTc1/9GP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU4Xf1/j3u5/m7KhdAxsC/suHgP3tKzbOFUXvji25Px7rcfheJfjcHPLumt9HI60Prna+hyQS+d0cWy8u77Tx68MZR2Osfz12bn64zA974bjcKThOGz7ntLmOBxZxnFYX+fczuV9zzLS8KfdGDq/F6xuDm5umIOt34+0zsG1/n6kX+bgeJgX39/Z+b1gaxjvE5Mr/X5kONvU9KY6tPh0w7mnviR9vz9+IC/t5uUd9RtuGssuzs+ev//RYxcunN+VhbIuXtIwV1rn66aG55Qtma9DK56vh+de/sQdbZZvDvtq/L76X+MdX6v6Onvv7/5a5e9u7fdn09LdWShrbL33Z7t38/r+HMuyz3/r4w9/47HPv67j/qz3m5+YWv334qkvbTj/jnY4/8a+//lie+mhHh8eHSmO3+G0d0abzsfNL9VIfu6q5dt+bmp55+PR8Ge9z8e3djkfb2lZd63Px6OtTy6ej2u9ftqxOq2v53iYJ6emu5+P6+ts2b3SOTmyZE42HmN3hVoL+/9VoVNIp/CGudNp3qZtjYyMhuc1ErfQPE/3NK0/Gnqz+rae2h2+KUyjXN483XFXsf5ww/2i9ZqnEy3rrvU8TT/76jRPa71++nZtWl/P8TAvbt3TfZ7W13l67+rPnRvjPxvOnWO95uDo8Fh9zKNpEubn+2xhY5yD92fHs7PZqWwmv3Usn0+1fFuTDyzvXDkW/qz3uXJLlzm4o2XdtZ6D6X2s09yrjSx98mug9fUcD/PiyQe6z8H6Oq/ffw3fuzYtaT5X7ghL0joN37u2/nyt08+87mjZTddrroyEcX5rf/efzdbXOXVgpX1m9/10b1hyU5v91Hr8djqmZrL12U9bwjifPdB5P9XHU1/ncweXOZ8OZ1l26cMP5j/vDb9fuXTxe19t+r1Lu9/pXPrwgz994Yl/Xsn4ARh8zxdlU/Fe1/BDtOX8/h8AAAAYCLHvHwo10f8DAABAacS+P/6v8ET/DwAAAKUR+/6RUJMy9P9/3HuVLa9/du75S1lK5i8E8fa0Gx4q1osZ1+nw9cTCovryB788+9//dGl5wxvKsuyXD/1R2/W3PBTHVZgI47z6hublS3z1vmVt++gjl9J2G/PrXwiPH5/PcqdBuwjudJZlX7/lM/l2Jt53Ja9PP3Q0rw9ffuLx+jrPHSy+jvd/5iXF+n8dwr+HTxxruv8zYT/8KNTpt7TfH/F+X7nyqq3737O4vXi/2rab86f95PuLx42fk/PZx4v1437uNP5vfPqpr9TXf/SV7cd/aaj9+J8Kj/vlUP/nZcX6ja9B/et4v0+G8cftxfvd/6Vvth3/1U8V6597Y7He0VDj9neEr7e/8dm5xv31aO1Y0/PK3lSsF7c//b0/zW+Pjxcfv3X840euNO2P1vnx9L8XjzPVsn5cHrcT/WPL9uuP0zg/4/af+pOjTfu51/avPvzMy+qP27r9e1vWO/fhnfn2Fx+v+ROb/uaTn2m7vTiew/9wrun5HH5nOI7D9p98f5iP4fb/vVo8XuunKxx9Z/P5J67/hc2Xmp5P9OafF9u/+pqTed0wvnHTTS944c2XX1Hfd1n23Q3F4/Xa/sm/Pds0/i/eVuyPeHvM6Lduv5O4/fMfmTxzdv7i3Ezaq4/dkn92zluL8cTx3hLOra1fHzl74QOz5yemJ6azbKK8H6F3zb4U6k+Lcrn72gtLzqA7Hwmv5x1/+fVNd//bp+Py/3h3sfzKW4r3rXvCep8NyzeH129l21/qyTtvy4/v2tNhhAtLPy94NbZu//GBZa0Ynn/r9wVxvp976Qfy/VC/LX/fiMf1Ksf/g5nicb4W9utC+GTmbbctbq9x/fjZCFfeVRzvq95/4TQXX9e/D6/3235UPH4cV3y+Pwjfx3xzS/P5Ls6Pr10aan38/FM8LofzSXa5uD2uFff3leduazu8+Dkk2eXb86//LD3O7St6mp3Mf3R+6tTcmYuPTl2Ynb8wNf/Rjx05ffbimQtH8s/yPPLBLnf9q3uyLFs8P23Kz08zs/v2ZvnZ6mxRrrNVjD+32vGfe+T4zP7pu2dmTxy7eOLCI+dmz588Pj9/fHZm/u5jJ07MfqTX/edmDu3afXDP/t2TJ+dmDh04eHDPwcm5M2frwygG1cO+6Q9Nnjl/JL/L/KG9B3c98MDe6cnTZ2dmD+2fnp682Ov++XvTZP3efzh5fvbUsQtzp2cn5+c+Nnto18F9+3b3/DTA0+dOzE9Mnb94Zuri/Oz5qeK5TFzIF9ff+3rdn3Ka/8/i+9lWteKD+LJ33LsvfT5r3Zc/3vGhilVaPkD02fBZNN9+0bkDy/k69v2joSZl6P8BAACAXOz7x0JN9P8AAABQGrHv3xBqov8HAACA0oh9/3io6b8EVKT/L13+f8ulZW1f/l/+v3F/yf9XLP//rn7L/xfnC/n/tbHa/L38fyD/L/+f8vNjWZatT37++oxf/l/+nxup3/L/se/fmGV+/w8AAAAlFfv+TaEm+n8AAAAojdj33xRqov8HAACA0oh9/wtCTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r+T4hOh5f/np7IbmJ9fi/GvMP9/eS3HfwPy/xsbv5D/px/1W/4/9v0vDDWpSP8PAAAAVRD7/ptDTfT/AAAAUBqx778l1ET/DwAAAKUR+/7NoSYV6f/l/1eV/0+ZK/n/5vHL/zeT/w/zQf5f/n8dyP93J//fg/z/Db1+/qCP3/X/5f9Zqt/y/7Hvf1GoSUX6fwAAACit0cV/xr7/xaEm+n8AAADoPyPXdrfY978k1GRJ/3+NGwAAAABuuNj335q1BMEr8vt/+X/X/5f/l/+X/2+//eXn/4cz+f/+If/fnfx/D/L/8v/Vzf+PZ/L/XAf9lv/P+/5sPHtpqElF+n8AAACogtj33xZqov8HAACA0oh9//8LNdH/AwAAQGnEvn9LqElF+n/5/9Lk/3/R+NLJ/8v/d9u+/L/r/5eZ/H938v89yP/L/1c3/+/6/1wX/Zb/j33/7aEmFen/AQAAoApi339HqIn+HwAAAEoj9v3/P9RE/w8AAAClEfv+raEmFen/5f/7PP8fk6Ou/y//L//fl/n/cfn/viP/3538fw/y//L/8v/y/6ypfsv/x77/ZaEmFen/AQAAoApi3//yUBP9PwAAAJRG7PtfEWqi/wcAAIDSiH3/RKhJRfr/leT/a5fl/zu5ztf/H1vG9f+byP/L/3fbvvy/6/+Xmfx/d/L/Pcj/y//L/8v/s6b6Lf8f+/47Q00q0v8DAABAFcS+f1uoif4fAAAASiP2/XeFmuj/AQAAoDRi37891KQi/b/r/w9E/j+T/5f/l/+X/5f/Xx75/+7k/3uQ/5f/l/+X/2dNrXH+f6h14Urz/7Hvf2WoSUX6fwAAAKiC2PffHWqi/wcAAIDSiH3/PaEm+n8AAAAojdj37wg1qUj/L/8v/y//L/8v/99++/L/g0n+vzv5/x7k/+X/5f/l/1lT/Xb9/9j3vyrUpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/b6iJ/h8AAABKI/b9k6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/dyf/34P8v/y//L/8P2uq3/L/se+/L9SkIv0/AAAAVEHs++8PNdH/AwAAQGnEvn8q1ET/DwAAAKUR+/7pUJOK9P/y//L/8v/y/yvK/79i8XHl/wvy//1F/r87+f8e5P/l/294/n9U/p9S6bf8f+z7d4WaVKT/BwAAgCqIff/uUBP9PwAAAJRG7Pv3hJro/wEAAKA0Yt+/N9SkIv2//L/8v/y//L/r/7ffvvz/YJL/727t8//xKcr/y//L/7v+v/w/S/Vb/j/2/Q+EmlSk/wcAAIAqiH3/vlAT/T8AAACURuz794ea6P8BAACgNGLffyDUpCL9v/y//L/8v/y//H/77cv/Dyb5/+5c/7+Hlvz/WHhfkv+X/x+E/H99bsn/02/6Lf8f+/6DoSYV6f8BAACgCmLf/+pQE/0/AAAAlEbs+38t1ET/DwAAAKUR+/5fDzWpSP8v/y//L/8v/9/v+f8x+X/5/xWQ/+9O/r8H1/+X/x/g/L/r/9OP+i3/H/v+Q6EmFen/AQAAoApi3/8boSb6fwAAACiN2Pe/JtRE/w8AAAClEfv+w6EmFen/5f/XKf8fF8r/y//L/7v+v/z/dSX/3538fw/y//L/8v/y/6ypfsv/x77/taEmFen/AQAAoApi3/9gqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/9aEmFen/5f9d///G5/9Hm8Yu/794P/n/gvy//P9KyP93J//fg/y//L/8v/w/a6rf8v+x739DqElF+n8AAACogtj3vzHURP8PAAAApRH7/jeFmuj/AQAAoDRi3//mUJOK9P/y//L/Nz7/7/r/8v8F+X/5/7Ug/9/dYOb/67tR/j+T/+/78cv/y/+zVL/l/2Pf/5uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bwk10f8DAABAacS+/62hJhXp/+X/5f/l/+X/5f/bb1/+fzDJ/3c3YPn/X90clrv+f0H+v7/Hv9L8/0jL19cl///DTvn/hQ2t95f/53rot/x/7PvfFmpSkf4fAAAAqiD2/W8PNdH/AwAAQGnEvv8doSb6fwAAACiN2Pf/VqhJRfp/+f/6OBbTy/L/8v/5Avl/+X/5/4El/9/dgOX/w/X/5f8j+f/+Hr/r/8v/s1S/5f9j3//OUJOK9P8AAABQBbHvfzjURP8PAAAApRH7/neFmuj/AQAAoDRi3//uUJOK9P/y/67/L/8v/y//33778v+DaW3y/8Py//L/8v/y//2R//8v+X8GW7/l/2Pf/0ioSUX6fwAAAKiC2Pe/J9RE/w8AAAClEfv+3w410f8DAABAacS+/72hJhXp/+X/ByX/PyH/v8L8/1hYJv8v/y//Xy2u/9/d1u0/7pysbCT/L/8v/98f+X/X/2fA9Vv+P/b97ws1WX7/P77sNQEAAIAbIvb9vxNqUpHf/wMAAEAVxL7/d0NN9P8AAABQGrHv/71Qk9L1/59ru1T+f1Dy/67/n7n+v/x/y/OR/5f/b2f98v/xzDNw+X/X/+9G/l/+X/6/Y/5/qMf95f9pp9/y/7Hv//1Qk9L1/wAAAFBdse9/f6iJ/h8AAAAGQrv/k90q9v1HQk30/wAAAFAase8/GmpSkf5f/l/+X/6/T/P/f7HtX7//nbcf3SX/L/8v/78i63r9//rBP3jX/5f/70b+X/5f/t/1/1lT/Zb/j33/sVCTxcbvrS7wDwAAAIMt9v1/EGpSkd//AwAAQBXEvv94qIn+HwAAAEoj9v0zoSYV6f/l/+X/5f/7NP8/wNf/j/tjkPL/kxsGKP8fT7ry/22ta/7/PYs5cfn/leb/x9oubc3/1+T/m8j/r3j8386yTP5f/p8bqN/y/7Hvnw01qUj/DwAAAFUQ+v6hE0VdvEH/DwAAAKUR+/6ToSb6fwAAACiN2Pd/INSkIv2//L/8v/y//L/r/7ffft/m/13/vyv5/+76J//fnuv/y/8P8vjl/+X/Warf8v+x758LNalI/w8AAABVEPv+D4aa6P8BAACgNGLf/6FQE/0/APwfe/fRZFl93nH8Nm6KnqJMubzxwgu890tgYdb2C/CCjRd2lctlg22cE4OzEso5IAkFFFAACaGEhLJACQllIQnlLIQykmpU0/08z3Q4fW43fW/fc///z2fhh2nouRerC/jRfOcAADQjd/9fxi2d7H/9v/5f/6//1/8Pv77+fz3p/8fp/+fQ/+v/9f/6fxZqav1/7v6/ils62f8AAADQg9z9V8ct9j8AAAA0I3f/NXGL/Q8AAADNyN3/13HLWu7/jQePWwnq//X/zfb/f6D/P+z19f/6/5bp/8fp/+c4rf7/spn+fwlW/f5P0P8/NNP/06ip9f+5+/8mblnL/Q8AAAAMyd3/t3GL/Q8AAADNyN1/bdxi/wMAAEAzcvf/XdzSyf7f1/9vzPrs/zPj1f+31P9f6PU3Z/r/Pa+v/9f/t+x0+//rz/+VT/+v//f8/6D/9/x//T/7Ta3/z93/93FLJ/sfAAAAepC7/x/iFvsfAAAAmpG7/x/jFvsfAAAAmpG7/5/ilk72/wSf/7/9P4Ln/+/8WP+/kP7f8//3vb7+X//fsr6f/78194/oqf+/9r5Lr37o9t+94zivr//X/+v/9f8s1tT6/9z9/xy3dLL/AQAAoAe5+/8lbrH/AQAAoBm5+/81brH/AQAAYA2dGfxo7v5/i1s62f8T7P933pf+f5v+/xT7/y39v/5f/9+Cvvv/+Xrq/x/J63fS/w//Q/EE+vmTWtj7v2mm/9f/syBT6/9z9/973NLJ/gcAAIAe5O7/j7jF/gcAAIDpGvoPsUfk7r8ubrH/AQAAoBm5+8/GLZ3sf/3/8vv/X+n/16P/9/x//b/+vwn6/3H6/zn66P8Ppf/3/H/9P4s2tf4/d//1cUsn+x8AAAB6kLv/P+MW+x8AAACakbv/v+IW+x8AAACakbv/v+OWTva//t/z//X/+n/9//Dr6//Xk/5/nP5/Dv3/Sfv5i/X/+n/9P7sds/9/eOQv2wvp/3P3/0/c0sn+BwAAgB7k7v/fuMX+BwAAgGbk7v+/uMX+BwAAgGbk7v//uKWT/a//1//r/0/Y/1924efprv8/+KW3Tf8/TP9/OvT/4ybT/29sDn5Y/7/2/b/n/+v/9f/sMbXn/+fuf1Tc0sn+BwAAgB7k7n903DKy/4/9L/MBAACAlcrd/5i4xff/AQAAYO1ldZa7/7FxSyf7X/+v/9f/e/6/5/8Pv/5Y/3/Hrven/58W/f+4yfT/h9D/6//X+f3r//X/HDS1/j93/+Pilk72PwAAAPQgd/8NcYv9DwAAAM3I3f/4uMX+BwAAgGbk7n9C3NLJ/h/u/y/8fv3/0ej/975//f/w18ei+v/8GfX/o/3/lZ7/3yf9/zj9/xz6f/2//v+w/v/MvM/X/zNkav1/7v4nxi2d7H8AAADoQe7+J8Ut9j8AAAA0I3f/k+MW+x8AAACakbv/KXFLJ/vf8//1//r/9ev/Pf9/xyqf/z879f5/U/9/RPr/cfr/OfT/+n/9//jz/0d+FQD9P0Om1v/n7n9q3NLJ/gcAAIAe5O5/Wtxi/wMAAMB62P3fDuz/D0pD7v6nxy32PwAAADQjd/8z4pZ29v/oszr1//p//b/+X/8//PrT6v89//+o9P/j9P9z6P+X0c9vNtb/33jY50+h/79u2f3/CP0/Q/b0/3de+Piq+v/c/c+MW9rZ/wAAANC93P3PilvsfwAAAGhG7v5nxy32PwAAADQjd/9z4pZO9v/S+/+RX31A/6//1//r//X/+v9F0/+P0//Pof/3/H/P/9f/s1B7+v9dVtX/5+5/btzSyf4HAACAHuTuf17cYv8DAABAM3L33xi32P8AAADQjNz9z49bOtn/nv+v/9f/6//1/8Ovr/9fTyfq7y/S/xf9v/5f/6//1/+zAFPr/3P3vyBu6WT/AwAAQA9y978wbrH/AQAAoBm5+2+KW+x/AAAAaEbu/hfFLZ3sf/3/cvv//Lj+X/8/0//r//X/p6Lb5/9vDP2d6KBD+v97/vzsH+39iP5f/6//1//r/zmi3xr5fZPo/89d+KfL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/zXHLMff/WPMw7MHLj/0pS6D/9/x//b/+X/8//Pr6//XUbf9/RJ7/P4f+X/+v/9f/s1CT6P93/Th3/8viFt//BwAAgGbk7n953GL/AwAAQDNy978ibrH/AQAAoBm5+18Zt3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n2Od+v+bT9D/bw5/eNX9/Emt+v3r//X/HDS1/j93/y1xSyf7HwAAAHqQu/9VcYv9DwAAAM3I3f/quMX+BwAAgGbk7n9N3NLJ/tf/6//1//p//f/w6+v/15P+f5z+fzab3TryBob6/3OXTLP/9/z/yb1//b/+n4Om1v/n7n9t3NLJ/gcAAIAe5O6/NW6x/wEAAKAZuftvi1vsfwAAAGhG7v7XxS2d7H/9v/5f/6//X0D/v6ev1f8P0/+fDv3/OP3/HOv0/H/9/+Tev/5f/89BU+v/c/e/Pm7pZP8DAABAD3L33x632P8AAADQjNz9b4hb7H8AAABoRu7+O+KWTva//l//r//X/3v+//Dr6//X0/L6/5n+X/+v/59D/6//1/+z39T6/9z9b4xbOtn/AAAA0IPc/W+KW+x/AAAAaEbu/jfHLfY/AAAANCN3/1vilk72v/5f/7/dz8cb0P/r/2cr6//P/zVI/6//PznP/x+n/59D/6//1//r/1mo4f7/upX1/7n73xq3dLL/AQAAoAe5+++MW+x/AAAAaEbu/rfFLfY/AAAANCN3/9vjlk72v/5f/7/3+f+zmf5f/+/5/ztOof/fmun/F07/P07/P4f+v83+/6JZQ/3/mUM/X//PFE3t+f+5+++KWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADQjd/+74pZO9r/+X/+/t//3/P/tD+j/9f+e/7+29P/j9P9z6P/b7P89/1//z8pMrf/P3f/uuKWT/Q8AAAA9yN3/nrjF/gcAAIBm5O5/b9xi/wMAAEAzcve/L27pZP/r//X/+n/9v/5/+PX1/+tJ/z9O/z+H/l//r//X/7NQU+v/c/e/P27pZP8DAABAD3L33x232P8AAADQjNz998Qt9j8AAAA0I3f/B+KWTva//l//r/9fz/5/S/+v/9f/D5pK/3/FFX94r/5f/6//1//r//X/vZta/5+7/4NxSyf7HwAAAHqQu/9DcYv9DwAAAM3I3f/huMX+BwAAgGbk7v9I3NLJ/j/Y/1882ylUdwz1/9Go6f930f/vff/6/+GvD8//1//r/5dvKv2/5/8/svev/9f/r/P7P1b//3sHP1//T4um1v/n7r83bulk/wMAAEAPcvd/NG6x/wEAAKAZufs/FrfY/wAAANCM3P33xS2d7H/P/9f/6//1//r/4dfX/68n/f84/f8c+n/9v+f/X/Onv6H/Z3Gm1v/n7v943NLJ/gcAAIAe5O7/RNxi/wMAAEAzcvd/Mm6x/wEAAKAZufs/Fbd0sv/1//p//f8S+v/N4a8P/b/+X/+/fPr/cfr/sv9PbUc//f/W0AdX3c+f1Krf/5L6/7su9fx/1tjU+v/c/Z+OWzrZ/wAAANCD3P2fiVvsfwAAAGhG7v7Pxi32PwAAADQjd//n4pZO9r/+v/H+//wPuu///8Tz//e9vv5f/98y/X/+HX2Y/n+Ofvr/Qavu59f9/Tfz/H/9Pws0tf4/d//9cUsn+x8AAAB6kLv/83GL/Q8AAADNyN3/hbjF/gcAAIBm5O7/YtzSyf7X/zfe/+97/v/GrMf+fwXP/z/k60P/r//X/y+f/n+c/n8O/b/+X/+v/2ehptb/5+5/YGOzy/0PAAAA6+qPf/8v7j/qH/vA9v/dmn0pbrlydu6I38YGAAAAJu787t/YnM2+vP0j3/8HAACAFuXu/0rc0sn+1//31f/3+fz/Jfb/519Y/6//1/9Piv5/3Ar6/63jvD/9v/5/nd+//l//z0FT6/9z9381btk1/DaP/WcJAAAATEnu/q/FLZ18/x8AAAB6kLv/63HLgf3vlwMEAACAdZW7/xtxSyff/9f/T7z/ny2p/48/Tv+/w/P/9f9Dr6//X0/6/3En7P/PbXj+v/5/hP5f/6//Z7+p9f+5+78Zt3Sy/wEAAKBRe/6NQu7+b8Ut9j8AAAA0I3f/t+MW+x8AAACakbv/O3FLJ/tf/3/q/X+m6kt8/v+Z+i3P/++8/79ha/D19f/6/5bp/8et4Pn/+v+9P7/+f4l2vf9L9P/6f6Zhav1/7v7vxi2d7H8AAADoQe7+78Ut9j8AAAA0I3f/9+MW+x8AAACakbv/wfPnN/vb/yvp/+Mn6bT/P97z/4/Y///2ZXtfe+7z//X/ffT/h7x+O/3/71x69u6r/uy2W/T/XHCa/X9+Lej/9f/6/x0T6v89/1//z0Qsvv/f3PPB4/b/27t/tjX7QdzSyf4HAACAHuTufyhusf8BAACgGbn7fxi32P8AAADQjNz9P4pbOtn/nv/fRv+/3zr2//n/6xX0/2cfcf9/ZjabraT/z6a49/7f8//1/wd5/v84/f8c+n/9v/5f/89CLb7/3/vB4/b/uft/HLd0sv8BAACgB7n7fxK35P7fOPa/ugcAAAAmJnf/T+MW3/8HAACAZuTu/1nc0sn+1//r/6fS/yfP/7/weW09//+qilP77P8vr9/S/y+X/n+c/n8O/b/+X/+v/2ehptb/5+7/edzSyf4HAACAHuTufzhusf8BAACgGbn7fxG32P8AAADQjNz9v4xbOtn/+v9W+/8s4vX/+v+p9P+e/+/5/6dD/z9O/z+H/n/N+//4gpnp//X/TMXU+v/c/b8OAAD//5W8bEE=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 26.57100689s ago: executing program 1 (id=7062): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 25.391469579s ago: executing program 1 (id=7075): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xb9) 24.940196206s ago: executing program 33 (id=7075): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xb9) 3.487947656s ago: executing program 2 (id=7290): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa00000, &(0x7f0000000100)={[{@undelete}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@dmode}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {}, {}, {@dmode={'dmode', 0x3d, 0xa}}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) 2.980838235s ago: executing program 3 (id=7296): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000001c0)=0x3ff7, 0x4) 2.932005818s ago: executing program 2 (id=7297): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000001240)={0x2, "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"}, 0x401, 0x800) 2.699900922s ago: executing program 3 (id=7299): r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x60) 2.56034897s ago: executing program 2 (id=7300): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0xe0, 0x10, 0x509, 0x0, 0x25dfdbfe, "", [@generic="6f6d888f1d1c4e5ad85ce4966d", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68143be79a8614b52dd4b9657ce940be783c334d2a000"/185}]}, 0xe0}], 0x1}, 0x0) 2.477083665s ago: executing program 3 (id=7302): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.21278291s ago: executing program 3 (id=7303): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_DISCARDURB(r0, 0x802c550a, 0x0) 1.890018069s ago: executing program 3 (id=7308): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") setxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 1.652895653s ago: executing program 6 (id=7309): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=@qipcrtr={0x2a, 0xfffffffc, 0x7ffe}, 0x80) 1.616468105s ago: executing program 5 (id=7310): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x1, 0x1ff, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x1, 0x7800, 0xff, 0x6}}) 1.509096912s ago: executing program 2 (id=7312): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'GPL\x00', 0x3a, '\\', 0x3a, './file0'}, 0x2c) 1.322744973s ago: executing program 6 (id=7313): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0x8000, 0x3132564e, 0x3, @stepwise={0x7f, 0x91, 0x2, 0x0, 0x402, 0x1}}) 1.322138793s ago: executing program 5 (id=7314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast1}], 0x10) 1.266852206s ago: executing program 2 (id=7315): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000001bc0)=0xfffffffd, 0x4) 1.228868308s ago: executing program 0 (id=7316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 1.068324018s ago: executing program 5 (id=7317): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001814010000fb00000000000008"], 0x20}}, 0x0) 983.054333ms ago: executing program 6 (id=7318): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) 981.275243ms ago: executing program 0 (id=7319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000180)={0x4, 0x0, [{0x80000008, 0x5a04, 0x6, 0x822, 0x3, 0x5, 0xfb23}, {0x40000000, 0x7ff, 0x2, 0x4, 0x9, 0xa5, 0xea8b}, {0x7, 0x9, 0x0, 0x9, 0x5, 0x5, 0x7}, {0x0, 0x3, 0x4, 0x60c1, 0x3, 0x4, 0x8001}]}) 968.903604ms ago: executing program 2 (id=7320): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f646973636172642c646973636172643d3078303030303030303030303030303030382c6572726f72733d636f6e74696e7565006969736f383835392d342c756d61736b3d3078303030303030303030303030303038312c696f6368617257fd743d6d6163677265656b2c71756f74612c6572726f1729def7e35bcb756e742d726f2c726573697a653d3078303030303030303030181829303030303030312c756d61736b3d3078303030303030303030303032303034352c66736d616769633d307830dcb1c47cb87a74ac1a3030303030303030303030303030392c646566636f6e746578743d726f6f742c66736e616d653d757d407d587d5b2d292b2c000d1c13f7c892c8615d265c6376539175380511bac765713e83a65e4fdf011c705fc6838005120385ac61b970f45d1492a0612eb8000000000000808fc76f91b7b9a5ce77887858ea333961d1ef1e4eabd4c84e81dbf575c47e9b8eea9d6806fa159e0525146f6312b4931cffed0000", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x1, 0x61f5, &(0x7f00000075c0)="$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") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 747.646727ms ago: executing program 5 (id=7321): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) 746.998186ms ago: executing program 6 (id=7322): r0 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x1, 0x10, 0x80000000, 0x3, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x0, 0xca, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x13}}}}}) 700.707109ms ago: executing program 0 (id=7323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_DST={0x8, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 528.946259ms ago: executing program 6 (id=7324): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 508.17772ms ago: executing program 0 (id=7325): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xfffff4f1, 0x4}) 449.819444ms ago: executing program 5 (id=7326): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5a", 0xd) 289.396273ms ago: executing program 0 (id=7327): r0 = syz_open_procfs(0x0, &(0x7f0000002440)='net/rt_cache\x00') read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 231.146786ms ago: executing program 6 (id=7328): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370480000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b12050000000000240012800b00010062726964676500001400028005001900050000000500180001"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 171.06152ms ago: executing program 5 (id=7329): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee01) 122.311933ms ago: executing program 3 (id=7330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 0s ago: executing program 0 (id=7331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d00000000140002800800010003000000080002"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): 494.639735][ T5224] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 494.738802][ T56] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 494.775161][ T4275] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 494.841867][ T5224] usb 3-1: Using ep0 maxpacket: 16 [ 494.849303][ T5224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.899817][ T5224] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.940805][ T5224] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 494.959758][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.969036][ T5224] usb 3-1: Product: syz [ 495.013944][ T5224] usb 3-1: Manufacturer: syz [ 495.018639][ T5224] usb 3-1: SerialNumber: syz [ 495.049097][ T5224] r8152-cfgselector 3-1: config 0 descriptor?? [ 495.134790][T16883] netlink: 'syz.0.5592': attribute type 17 has an invalid length. [ 495.143552][T16883] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 495.170616][ T27] audit: type=1326 audit(1769058408.049:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16884 comm="syz.5.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 495.196576][T16883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.252749][ T27] audit: type=1326 audit(1769058408.049:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16884 comm="syz.5.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 495.282968][ T5224] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 495.298460][T16887] netlink: 'syz.3.5594': attribute type 1 has an invalid length. [ 495.311387][ T27] audit: type=1326 audit(1769058408.099:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16884 comm="syz.5.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 495.434428][T16891] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 495.460261][T16891] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 495.493099][ T5609] usb 3-1: USB disconnect, device number 18 [ 495.550445][T16891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.167773][T16921] loop3: detected capacity change from 0 to 8 [ 496.808095][T16945] bond0: (slave ip6_vti0): Error: Device type is different from other slaves [ 497.489481][T16971] netlink: 'syz.0.5635': attribute type 13 has an invalid length. [ 497.520395][T16971] netlink: 'syz.0.5635': attribute type 12 has an invalid length. [ 498.009706][ T4326] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 498.142833][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5644'. [ 498.185920][T16988] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 498.199776][ T4326] usb 6-1: Using ep0 maxpacket: 16 [ 498.209518][ T4326] usb 6-1: unable to get BOS descriptor or descriptor too short [ 498.244989][ T4326] usb 6-1: config 4 has an invalid interface number: 108 but max is 0 [ 498.264402][ T4326] usb 6-1: config 4 has no interface number 0 [ 498.271797][T16988] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 498.290514][ T4326] usb 6-1: config 4 interface 108 has no altsetting 0 [ 498.310177][ T4326] usb 6-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 498.319450][T16988] device bridge2 entered promiscuous mode [ 498.330206][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.338723][ T4326] usb 6-1: Product: syz [ 498.359813][ T4326] usb 6-1: Manufacturer: syz [ 498.370711][ T4326] usb 6-1: SerialNumber: syz [ 498.612266][ T4326] usb 6-1: active config #4 != 1 ?? [ 498.643430][ T4326] usb 6-1: USB disconnect, device number 23 [ 498.709945][T16995] loop1: detected capacity change from 0 to 4096 [ 498.887110][T16969] loop2: detected capacity change from 0 to 65536 [ 498.953769][T16995] ntfs: volume version 3.1. [ 499.005445][T16969] XFS (loop2): Mounting V5 Filesystem [ 499.151747][T16969] XFS (loop2): Ending clean mount [ 499.553950][ T4278] XFS (loop2): Unmounting Filesystem [ 499.790456][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 499.821755][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 500.104650][T17037] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5663'. [ 500.421089][T17050] netlink: 'syz.5.5667': attribute type 17 has an invalid length. [ 500.444323][T17050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.074343][T17074] loop5: detected capacity change from 0 to 1764 [ 501.560469][T17089] loop5: detected capacity change from 0 to 4096 [ 501.597859][T17089] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 501.610909][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.214290][T17116] loop2: detected capacity change from 0 to 16 [ 502.254743][T17116] erofs: (device loop2): mounted with root inode @ nid 36. [ 502.308789][T17116] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 502.347044][T17118] program syz.5.5695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.415438][T17116] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 502.449198][T17116] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 502.565408][T17126] loop5: detected capacity change from 0 to 164 [ 502.887457][T17139] loop3: detected capacity change from 0 to 512 [ 502.986780][T17139] EXT4-fs: Ignoring removed bh option [ 503.017140][T17139] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.047195][T17139] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 503.111001][T17139] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 503.151105][T17139] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 503.216516][T17150] loop1: detected capacity change from 0 to 136 [ 503.247676][T17139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 503.327451][T17139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5707: bg 0: block 353: padding at end of block bitmap is not set [ 503.347134][T17150] Symlink component flag not implemented [ 503.386671][T17150] syz.1.5713: attempt to access beyond end of device [ 503.386671][T17150] loop1: rw=524288, sector=136, nr_sectors = 4 limit=136 [ 503.537696][T17150] syz.1.5713: attempt to access beyond end of device [ 503.537696][T17150] loop1: rw=0, sector=136, nr_sectors = 4 limit=136 [ 503.583791][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 503.600615][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 503.600632][ T27] audit: type=1800 audit(1769058416.479:242): pid=17150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5713" name="file1" dev="loop1" ino=1546 res=0 errno=0 [ 503.886521][T17165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 504.085421][T17169] loop3: detected capacity change from 0 to 2048 [ 504.222741][T17169] Alternate GPT is invalid, using primary GPT. [ 504.254939][T17169] loop3: p2 p3 p7 [ 504.319338][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5726'. [ 504.554675][T17153] loop2: detected capacity change from 0 to 40427 [ 504.580990][T17153] F2FS-fs (loop2): Invalid log sectorsize (131081) [ 504.596435][T17153] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 504.625456][T17153] F2FS-fs (loop2): invalid crc value [ 504.661982][T17153] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 504.834864][ T4383] udevd[4383]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 504.926265][ T4408] udevd[4408]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 504.942261][ T4383] udevd[4383]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 504.951852][T17153] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 504.979743][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5735'. [ 505.009531][T17153] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 505.065543][T17153] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 505.076999][T17153] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 505.447274][T17215] loop3: detected capacity change from 0 to 1024 [ 505.727158][T17223] loop1: detected capacity change from 0 to 128 [ 505.830802][T17223] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 505.945730][T17223] ext4 filesystem being mounted at /1151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.128855][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 506.299832][ T4326] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 506.437997][T17247] xt_nat: multiple ranges no longer supported [ 506.496897][ T4326] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 506.516684][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.552260][ T4326] usb 1-1: config 0 descriptor?? [ 506.579793][ T4326] cp210x 1-1:0.0: cp210x converter detected [ 506.604745][T17249] loop1: detected capacity change from 0 to 512 [ 506.623006][T17249] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.5760: bad orphan inode 15 [ 506.633513][ T5607] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 506.649039][T17249] ext4_test_bit(bit=14, block=5) = 0 [ 506.655075][T17249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 506.726424][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 506.775644][ T4326] usb 1-1: cp210x converter now attached to ttyUSB0 [ 506.825707][ T5607] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 506.847532][ T5607] usb 3-1: config 0 has no interface number 0 [ 506.867962][ T5607] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 506.899430][ T5607] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.948561][ T5607] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 506.977841][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.995634][ T4326] usb 1-1: USB disconnect, device number 25 [ 506.995772][ T5607] usb 3-1: Product: syz [ 507.016413][ T5607] usb 3-1: Manufacturer: syz [ 507.022548][ T5607] usb 3-1: SerialNumber: syz [ 507.039144][ T4326] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 507.042854][ T5607] usb 3-1: config 0 descriptor?? [ 507.068970][T17243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 507.071856][ T4326] cp210x 1-1:0.0: device disconnected [ 507.104888][ T5607] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 507.142814][T17256] loop3: detected capacity change from 0 to 4096 [ 507.152176][ T5607] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 507.198594][T17235] loop5: detected capacity change from 0 to 40427 [ 507.249389][T17235] F2FS-fs (loop5): Invalid log sectorsize (131081) [ 507.330727][T17235] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 507.373736][T17235] F2FS-fs (loop5): invalid crc value [ 507.406020][T17235] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 507.575513][ T5607] usb 3-1: USB disconnect, device number 19 [ 507.618584][ T5607] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 507.651753][T17235] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 507.658560][T17235] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 507.680328][ T5607] cyberjack 3-1:0.69: device disconnected [ 507.737154][T17235] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 507.754821][T17235] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 508.125333][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.170366][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.219894][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.257000][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.281205][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.306673][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.327327][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.346338][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 508.472301][T17285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.112265][T17314] loop2: detected capacity change from 0 to 256 [ 509.175821][T17310] loop3: detected capacity change from 0 to 4096 [ 509.214715][T17314] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 509.267168][T17319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 509.305093][T17310] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 509.416927][T17310] Remounting filesystem read-only [ 509.803885][T17334] libceph: resolve '0' (ret=-3): failed [ 510.177241][T17340] loop5: detected capacity change from 0 to 8192 [ 510.215373][T17340] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 510.235333][T17340] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 510.249533][T17340] REISERFS (device loop5): using ordered data mode [ 510.256334][T17340] reiserfs: using flush barriers [ 510.263981][T17340] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 510.281367][T17340] REISERFS (device loop5): checking transaction log (loop5) [ 510.293670][T17340] REISERFS (device loop5): Using r5 hash to sort names [ 510.301087][T17340] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 511.323488][T17380] loop2: detected capacity change from 0 to 256 [ 511.507638][T17384] __nla_validate_parse: 38 callbacks suppressed [ 511.507659][T17384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5823'. [ 511.574914][T17384] netlink: 'syz.3.5823': attribute type 1 has an invalid length. [ 511.594433][T17388] loop2: detected capacity change from 0 to 16 [ 511.611787][ T4326] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 511.637098][T17388] erofs: (device loop2): mounted with root inode @ nid 36. [ 511.704995][T17388] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 511.741301][ T4277] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 511.753272][T17388] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 511.765118][ T27] audit: type=1800 audit(1769058424.639:243): pid=17388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5825" name="file3" dev="loop2" ino=9895604650073 res=0 errno=0 [ 511.834871][ T4326] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.853025][ T4326] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.886736][ T4326] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.929941][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.938483][ T4326] usb 6-1: Product: syz [ 511.979851][ T4326] usb 6-1: Manufacturer: syz [ 511.984754][ T4326] usb 6-1: SerialNumber: syz [ 512.010909][ T4326] usb 6-1: config 0 descriptor?? [ 512.128814][T17398] loop3: detected capacity change from 0 to 8 [ 512.179253][T17398] SQUASHFS error: Failed to read block 0x6fc: -5 [ 512.196926][T17398] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 512.247034][ T5224] usb 6-1: USB disconnect, device number 24 [ 512.417152][T17406] 9pnet_fd: Insufficient options for proto=fd [ 512.999860][ T4326] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 513.209904][ T4326] usb 3-1: Using ep0 maxpacket: 8 [ 513.216876][ T4326] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 513.245750][ T4326] usb 3-1: config 0 has no interface number 0 [ 513.272081][ T4326] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 513.299793][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.307970][ T4326] usb 3-1: Product: syz [ 513.349745][ T4326] usb 3-1: Manufacturer: syz [ 513.359828][ T4326] usb 3-1: SerialNumber: syz [ 513.392312][ T4326] usb 3-1: config 0 descriptor?? [ 513.575235][T17447] loop3: detected capacity change from 0 to 164 [ 513.604576][ T4326] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 513.621247][ T4326] usb 3-1: No valid video chain found. [ 513.643398][ T4326] usb 3-1: USB disconnect, device number 20 [ 513.709100][T17447] iso9660: Corrupted directory entry in block 3 of inode 1792 [ 513.926223][T17433] loop5: detected capacity change from 0 to 32768 [ 513.967528][T17433] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.5847 (17433) [ 514.018701][T17433] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 514.048873][T17433] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 514.073239][T17433] BTRFS info (device loop5): using free space tree [ 514.352183][T17433] BTRFS info (device loop5): enabling ssd optimizations [ 514.569456][ T4778] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 514.848702][T17499] loop3: detected capacity change from 0 to 128 [ 515.072457][T17505] loop2: detected capacity change from 0 to 512 [ 515.141427][T17505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 515.220623][T17505] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.5875: corrupted inode contents [ 515.299353][ T4383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop5 scanned by udevd (4383) [ 515.322395][T17505] EXT4-fs (loop2): Remounting filesystem read-only [ 515.361176][T17505] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 515.410089][T17505] EXT4-fs (loop2): Remounting filesystem read-only [ 515.418246][T17505] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.5875: corrupted inode contents [ 515.474355][T17505] EXT4-fs (loop2): Remounting filesystem read-only [ 515.500084][T17505] EXT4-fs error (device loop2): ext4_evict_inode:327: inode #15: comm syz.2.5875: mark_inode_dirty error [ 515.530828][T17505] EXT4-fs (loop2): Remounting filesystem read-only [ 515.550155][T17505] EXT4-fs (loop2): 1 orphan inode deleted [ 515.556160][T17505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 515.855666][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 516.036566][T17504] loop1: detected capacity change from 0 to 32768 [ 516.145945][T17504] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 516.145945][T17504] [ 516.260856][T17534] loop5: detected capacity change from 0 to 512 [ 516.268258][T17534] EXT4-fs: Ignoring removed bh option [ 516.360464][T17534] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 516.417523][T17539] loop3: detected capacity change from 0 to 256 [ 516.474426][T17539] exfat: Deprecated parameter 'utf8' [ 516.499956][T17539] exfat: Deprecated parameter 'namecase' [ 516.509473][T17539] exfat: Deprecated parameter 'namecase' [ 516.548893][T17534] EXT4-fs (loop5): 1 truncate cleaned up [ 516.598608][T17539] exfat: Deprecated parameter 'utf8' [ 516.604506][T17534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 516.707056][T17539] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x98e76a8c, utbl_chksum : 0xe619d30d) [ 516.963326][ T2309] pvrusb2: request_firmware fatal error with code=-110 [ 516.999170][ T2309] pvrusb2: Failure uploading firmware1 [ 517.027110][ T2309] pvrusb2: Device initialization was not successful. [ 517.056449][ T4778] EXT4-fs (loop5): unmounting filesystem. [ 517.062467][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 517.097909][T17554] loop1: detected capacity change from 0 to 736 [ 517.115553][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 517.196772][ T4333] pvrusb2: Device being rendered inoperable [ 517.277487][T17554] rock: directory entry would overflow storage [ 517.331038][T17554] rock: sig=0x3b10, size=4, remaining=3 [ 517.685516][T17575] loop1: detected capacity change from 0 to 512 [ 517.726733][T17575] EXT4-fs: Ignoring removed bh option [ 517.796218][T17575] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 517.842514][T17575] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 517.880318][T17575] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 517.903076][T17575] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 517.949911][T17575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 518.107545][T17583] netlink: 'syz.3.5908': attribute type 26 has an invalid length. [ 518.326971][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 518.485723][T17591] loop3: detected capacity change from 0 to 1024 [ 518.628230][T17591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 518.908335][T17608] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 518.942194][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 519.146906][ T27] audit: type=1326 audit(1769058432.019:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.2.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 519.170137][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.219675][ T27] audit: type=1326 audit(1769058432.019:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.2.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 519.242328][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.309862][ T27] audit: type=1326 audit(1769058432.059:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.2.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 519.399858][ T4326] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 519.482278][ T27] audit: type=1326 audit(1769058432.359:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.2.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 519.505121][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.546627][T17622] Invalid ELF header magic: != ELF [ 519.566595][ T27] audit: type=1326 audit(1769058432.359:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.2.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 519.589404][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.631951][ T4326] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 519.663906][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.704352][ T4326] usb 4-1: config 0 descriptor?? [ 520.124894][ T4326] [drm:udl_init] *ERROR* Selecting channel failed [ 520.178178][ T4326] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 520.251372][ T4326] [drm] Initialized udl on minor 2 [ 520.325247][ T4326] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 520.357298][ T4326] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 520.415604][ T4326] usb 4-1: USB disconnect, device number 23 [ 520.453642][ T5224] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 520.498955][ T5224] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 520.520199][T17656] loop5: detected capacity change from 0 to 1024 [ 520.540734][ T5224] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 520.639093][ T4293] hfsplus: b-tree write err: -5, ino 4 [ 521.457692][T17690] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5961'. [ 521.797305][T17703] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 522.026951][T17710] loop2: detected capacity change from 0 to 64 [ 522.428074][T17728] netlink: 'syz.0.5980': attribute type 15 has an invalid length. [ 522.760968][T17739] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 523.046456][ T27] audit: type=1326 audit(1769058435.919:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.2.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 523.116666][ T27] audit: type=1326 audit(1769058435.919:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.2.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 523.176487][ T27] audit: type=1326 audit(1769058435.949:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.2.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 523.249782][ T27] audit: type=1326 audit(1769058435.949:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.2.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 523.302839][ T27] audit: type=1326 audit(1769058435.949:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17751 comm="syz.2.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 523.357376][ T126] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 523.360221][ T4326] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 523.563963][ T4326] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 523.579706][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 523.586182][ T4326] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 523.595928][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 523.623828][ T126] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 523.639451][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.647927][ T126] usb 4-1: config 8 has no interface number 0 [ 523.675404][ T126] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 523.701178][ T4326] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 523.719916][ T126] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 523.755325][ T126] usb 4-1: config 8 interface 24 has no altsetting 0 [ 523.775730][ T126] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 523.799672][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.830020][ T126] usb 4-1: Product: syz [ 523.839770][ T126] usb 4-1: Manufacturer: syz [ 523.844780][ T126] usb 4-1: SerialNumber: syz [ 523.882877][T17756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 524.131876][ T126] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 524.180110][ T126] usb 4-1: USB disconnect, device number 24 [ 524.227436][T17793] loop2: detected capacity change from 0 to 256 [ 524.284987][T17793] FAT-fs (loop2): Directory bread(block 64) failed [ 524.299930][T17793] FAT-fs (loop2): Directory bread(block 65) failed [ 524.306909][T17793] FAT-fs (loop2): Directory bread(block 66) failed [ 524.320874][T17793] FAT-fs (loop2): Directory bread(block 67) failed [ 524.337236][T17793] FAT-fs (loop2): Directory bread(block 68) failed [ 524.349893][ T4333] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 524.357990][T17793] FAT-fs (loop2): Directory bread(block 69) failed [ 524.370746][T17793] FAT-fs (loop2): Directory bread(block 70) failed [ 524.387737][T17793] FAT-fs (loop2): Directory bread(block 71) failed [ 524.396143][T17793] FAT-fs (loop2): Directory bread(block 72) failed [ 524.412521][T17793] FAT-fs (loop2): Directory bread(block 73) failed [ 524.539917][ T4333] usb 6-1: Using ep0 maxpacket: 32 [ 524.547068][ T4333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.570815][ T4333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.585696][ T4333] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 524.595032][ T4333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.612221][ T4333] usb 6-1: config 0 descriptor?? [ 524.634139][ T4333] hub 6-1:0.0: USB hub found [ 524.730149][ T4326] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 524.834954][ T4333] hub 6-1:0.0: 1 port detected [ 524.941808][ T4326] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 524.961815][ T4326] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 524.986873][ T4326] usb 2-1: USB disconnect, device number 24 [ 525.067694][ T4333] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 525.086058][ T4333] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 525.117307][ T4333] usbhid 6-1:0.0: can't add hid device: -71 [ 525.124514][ T4333] usbhid: probe of 6-1:0.0 failed with error -71 [ 525.180953][ T4333] usb 6-1: USB disconnect, device number 25 [ 525.602963][T17832] xt_TCPMSS: Only works on TCP SYN packets [ 525.959307][T17848] loop2: detected capacity change from 0 to 512 [ 526.283582][T17856] loop3: detected capacity change from 0 to 512 [ 526.408819][T17856] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.6044: inode has both inline data and extents flags [ 526.423457][T17864] loop1: detected capacity change from 0 to 256 [ 526.431264][T17864] exfat: Deprecated parameter 'utf8' [ 526.436977][T17864] exfat: Deprecated parameter 'namecase' [ 526.448597][T17864] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 526.495431][T17856] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6044: couldn't read orphan inode 15 (err -117) [ 526.536713][T17856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 526.677704][T17866] loop2: detected capacity change from 0 to 512 [ 526.730715][T17866] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 526.762108][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 526.829488][T17866] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 526.922321][T17866] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.6048: inode #15: comm syz.2.6048: iget: illegal inode # [ 527.001335][T17866] EXT4-fs (loop2): Remounting filesystem read-only [ 527.038629][T17866] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6048: couldn't read orphan inode 15 (err -117) [ 527.087367][T17866] EXT4-fs (loop2): Remounting filesystem read-only [ 527.095687][T17866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 527.198259][T17866] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.6048: inode #15: comm syz.2.6048: iget: illegal inode # [ 527.260225][T17866] EXT4-fs (loop2): Remounting filesystem read-only [ 527.323582][T17885] usb usb8: usbfs: process 17885 (syz.0.6057) did not claim interface 0 before use [ 527.364103][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 527.572646][T17893] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 527.599342][T17893] overlayfs: overlapping lowerdir path [ 527.607190][T17895] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 527.664583][T17899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6064'. [ 527.676953][T17897] block nbd3: NBD_DISCONNECT [ 528.097565][T17914] loop1: detected capacity change from 0 to 2048 [ 528.161170][T17914] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 528.169041][T17914] UDF-fs: Scanning with blocksize 512 failed [ 528.214193][T17914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.693644][T17937] loop1: detected capacity change from 0 to 256 [ 528.760257][T17937] FAT-fs (loop1): Directory bread(block 64) failed [ 528.767248][T17937] FAT-fs (loop1): Directory bread(block 65) failed [ 528.822720][T17937] FAT-fs (loop1): Directory bread(block 66) failed [ 528.862459][T17937] FAT-fs (loop1): Directory bread(block 67) failed [ 528.869465][T17937] FAT-fs (loop1): Directory bread(block 68) failed [ 528.919783][T17937] FAT-fs (loop1): Directory bread(block 69) failed [ 528.926975][T17937] FAT-fs (loop1): Directory bread(block 70) failed [ 528.982004][T17937] FAT-fs (loop1): Directory bread(block 71) failed [ 529.031958][T17937] FAT-fs (loop1): Directory bread(block 72) failed [ 529.038900][T17937] FAT-fs (loop1): Directory bread(block 73) failed [ 529.574118][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 529.574134][ T27] audit: type=1326 audit(1769058442.449:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 529.685426][ T27] audit: type=1326 audit(1769058442.479:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 529.809846][ T27] audit: type=1326 audit(1769058442.479:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 529.879755][ T27] audit: type=1326 audit(1769058442.479:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 530.121171][T17986] device wlan0 entered promiscuous mode [ 530.127189][T17986] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 530.464721][T17999] netlink: 'syz.1.6111': attribute type 10 has an invalid length. [ 531.352735][T18032] futex_wake_op: syz.2.6128 tries to shift op by 32; fix this program [ 531.429334][T18036] loop3: detected capacity change from 0 to 256 [ 531.462987][T18036] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 531.798924][T18048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6136'. [ 531.815801][T18046] overlayfs: missing 'lowerdir' [ 531.826621][T18048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6136'. [ 532.066580][ T27] audit: type=1326 audit(1769058444.939:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18057 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 532.136438][ T27] audit: type=1326 audit(1769058444.989:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18057 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 532.231966][ T27] audit: type=1326 audit(1769058444.989:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18057 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 532.306245][ T27] audit: type=1326 audit(1769058444.989:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18057 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 532.375649][T18062] loop1: detected capacity change from 0 to 4096 [ 532.412897][ T27] audit: type=1326 audit(1769058444.989:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18057 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 532.469824][T18062] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 532.615352][T18062] ntfs3: loop1: failed to convert "c46c" to macgreek [ 532.685533][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6151'. [ 533.070041][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6157'. [ 533.105450][T18092] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6157'. [ 533.129128][T18092] netlink: 'syz.5.6157': attribute type 1 has an invalid length. [ 533.609507][T18104] loop5: detected capacity change from 0 to 4096 [ 533.645484][T18116] netlink: 'syz.1.6169': attribute type 10 has an invalid length. [ 533.653803][T18116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6169'. [ 533.753361][T18104] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 533.761442][T18116] team0: Port device geneve0 added [ 533.767068][T18116] IPv6: ADDRCONF(NETDEV_CHANGE): geneve0: link becomes ready [ 533.780368][T18104] ntfs3: loop5: Failed to load $Extend. [ 533.788697][T18118] loop2: detected capacity change from 0 to 256 [ 533.849650][ T4333] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 533.892364][T18118] FAT-fs (loop2): Directory bread(block 64) failed [ 533.899261][T18118] FAT-fs (loop2): Directory bread(block 65) failed [ 533.951891][T18118] FAT-fs (loop2): Directory bread(block 66) failed [ 533.985688][T18118] FAT-fs (loop2): Directory bread(block 67) failed [ 534.013011][T18118] FAT-fs (loop2): Directory bread(block 68) failed [ 534.033247][T18118] FAT-fs (loop2): Directory bread(block 69) failed [ 534.049782][ T4333] usb 4-1: Using ep0 maxpacket: 8 [ 534.058885][ T4333] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 534.080180][T18118] FAT-fs (loop2): Directory bread(block 70) failed [ 534.102900][ T4333] usb 4-1: config 0 has no interface number 0 [ 534.116826][T18118] FAT-fs (loop2): Directory bread(block 71) failed [ 534.132916][ T4333] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 534.169344][T18118] FAT-fs (loop2): Directory bread(block 72) failed [ 534.170450][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.219312][T18118] FAT-fs (loop2): Directory bread(block 73) failed [ 534.227704][ T4333] usb 4-1: Product: syz [ 534.256128][ T4333] usb 4-1: Manufacturer: syz [ 534.283578][ T4333] usb 4-1: SerialNumber: syz [ 534.326080][ T4333] usb 4-1: config 0 descriptor?? [ 534.528566][T18134] netlink: 'syz.1.6178': attribute type 1 has an invalid length. [ 534.568949][ T4333] usb 4-1: USB disconnect, device number 25 [ 534.785116][T18144] device wlan0 entered promiscuous mode [ 534.800037][T18144] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 534.951824][T18150] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 535.019936][ T4326] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 535.213824][ T4326] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 535.249726][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.278295][ T4326] usb 3-1: Product: syz [ 535.288460][ T4326] usb 3-1: Manufacturer: syz [ 535.295282][ T4326] usb 3-1: SerialNumber: syz [ 535.304188][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6192'. [ 535.315637][T18162] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6193'. [ 535.319200][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6192'. [ 535.352337][ T4326] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 535.399156][ T4326] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 535.887015][ T5224] usb 3-1: USB disconnect, device number 21 [ 536.126622][T18192] netlink: 'syz.1.6208': attribute type 25 has an invalid length. [ 536.150138][T18192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6208'. [ 536.223873][T11750] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 536.263336][T18191] loop5: detected capacity change from 0 to 4096 [ 536.421690][T11750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 536.455958][T11750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.506773][T11750] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 536.526188][T11750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.538079][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6213'. [ 536.554091][T11750] usb 4-1: config 0 descriptor?? [ 536.559505][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6213'. [ 536.586532][T18202] binder: 18199:18202 ioctl c018620b 0 returned -14 [ 536.719904][ T4326] usb 3-1: Service connection timeout for: 256 [ 536.746795][ T4326] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 536.778052][ T4326] ath9k_htc: Failed to initialize the device [ 536.788452][T11750] usbhid 4-1:0.0: can't add hid device: -71 [ 536.797664][T11750] usbhid: probe of 4-1:0.0 failed with error -71 [ 536.818413][ T5224] usb 3-1: ath9k_htc: USB layer deinitialized [ 536.841203][T11750] usb 4-1: USB disconnect, device number 26 [ 536.930446][T18208] Timeout policy `syz0' can only be used by L3 protocol number 24580 [ 537.061720][T18216] netlink: 'syz.0.6220': attribute type 24 has an invalid length. [ 538.224239][T18268] loop1: detected capacity change from 0 to 256 [ 538.286334][T18268] FAT-fs (loop1): Directory bread(block 64) failed [ 538.312246][T18268] FAT-fs (loop1): Directory bread(block 65) failed [ 538.319260][T18268] FAT-fs (loop1): Directory bread(block 66) failed [ 538.414220][T18268] FAT-fs (loop1): Directory bread(block 67) failed [ 538.417577][T18273] __nla_validate_parse: 5 callbacks suppressed [ 538.417621][T18273] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6248'. [ 538.447404][T18268] FAT-fs (loop1): Directory bread(block 68) failed [ 538.485170][T18268] FAT-fs (loop1): Directory bread(block 69) failed [ 538.506411][T18268] FAT-fs (loop1): Directory bread(block 70) failed [ 538.554764][T18268] FAT-fs (loop1): Directory bread(block 71) failed [ 538.581551][T18268] FAT-fs (loop1): Directory bread(block 72) failed [ 538.618849][T18268] FAT-fs (loop1): Directory bread(block 73) failed [ 538.660398][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6251'. [ 538.740557][T18282] ipt_CLUSTERIP: Please specify destination IP [ 538.777141][ T27] audit: type=1800 audit(1769058451.649:268): pid=18268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6245" name="file1" dev="loop1" ino=1048679 res=0 errno=0 [ 538.970587][T18286] SET target dimension over the limit! [ 539.064584][T18293] kAFS: unable to lookup cell '' [ 539.321815][T18301] loop5: detected capacity change from 0 to 1024 [ 539.350020][T18301] EXT4-fs: Ignoring removed bh option [ 539.436914][T18301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 539.632585][ T4778] EXT4-fs (loop5): unmounting filesystem. [ 539.789773][ T5224] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 540.001679][ T5224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.019716][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 540.047338][ T5224] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 540.074488][ T5224] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 540.099825][ T5224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.122958][ T5224] usb 4-1: Product: syz [ 540.165638][ T5224] usb 4-1: Manufacturer: syz [ 540.189857][ T5224] usb 4-1: SerialNumber: syz [ 540.210553][ T5224] usb 4-1: config 0 descriptor?? [ 540.370667][T18340] loop1: detected capacity change from 0 to 736 [ 540.425637][ T5224] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 540.437717][ T5224] usb 4-1: No valid video chain found. [ 540.479169][ T5224] usb 4-1: USB disconnect, device number 27 [ 540.807034][T18352] loop1: detected capacity change from 0 to 1764 [ 540.854693][ T4383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 540.885434][T18352] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 540.905804][T11750] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 540.972053][T18352] CIFS mount error: No usable UNC path provided in device string! [ 540.972053][T18352] [ 541.012376][T18352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 541.120063][T11750] usb 1-1: Using ep0 maxpacket: 32 [ 541.140275][T11750] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 541.169726][T11750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.178520][T11750] usb 1-1: Product: syz [ 541.198682][T11750] usb 1-1: Manufacturer: syz [ 541.229732][T11750] usb 1-1: SerialNumber: syz [ 541.262167][T11750] usb 1-1: config 0 descriptor?? [ 541.369516][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'. [ 541.414440][ T27] audit: type=1326 audit(1769058454.289:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18369 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 541.476105][T11750] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 541.477403][ T27] audit: type=1326 audit(1769058454.329:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18369 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 541.489878][T11750] eb [ 541.560913][ T27] audit: type=1326 audit(1769058454.329:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18369 comm="syz.3.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 541.602087][T11750] 2a 3b 80 9b e4 7a f0 [ 541.606518][T11750] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 541.692992][ T4402] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 541.739759][ T4333] usb 1-1: USB disconnect, device number 26 [ 541.906500][ T4402] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 541.930967][ T4402] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.948460][ T4402] usb 6-1: config 0 has no interface number 0 [ 541.956367][ T4402] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 541.968661][ T4402] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 541.995802][ T4402] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.035443][ T4402] usb 6-1: config 0 interface 52 has no altsetting 0 [ 542.044810][ T4402] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 542.064007][ T4402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 542.078422][ T4402] usb 6-1: SerialNumber: syz [ 542.088115][T18388] loop2: detected capacity change from 0 to 128 [ 542.104774][ T4402] usb 6-1: config 0 descriptor?? [ 542.170668][T18388] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 542.184954][T18388] FAT-fs (loop2): Filesystem has been set read-only [ 542.258168][ T4278] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 542.319875][ T5609] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 542.332245][ T4402] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 542.367235][ T4402] synaptics_usb: probe of 6-1:0.52 failed with error -5 [ 542.529948][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 542.545271][ T5609] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 542.580658][ T4402] usb 6-1: USB disconnect, device number 26 [ 542.592143][ T5609] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 542.628699][ T5609] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 542.658559][ T5609] usb 2-1: Product: syz [ 542.667940][ T5609] usb 2-1: Manufacturer: syz [ 542.678086][ T5609] usb 2-1: SerialNumber: syz [ 542.838004][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6313'. [ 542.847619][T18408] netlink: 'syz.3.6313': attribute type 1 has an invalid length. [ 542.861864][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6313'. [ 542.918684][ T5609] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 542.950283][ T5609] usb 2-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 542.958807][ T5609] usb 2-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 542.986515][ T5609] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 543.041182][ T5219] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 543.119390][ T5609] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 543.149812][ T5609] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 543.161499][ T5609] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 543.189427][ T5609] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 543.209330][ T5609] usb 2-1: USB disconnect, device number 25 [ 543.243179][ T5219] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 543.267249][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.289062][ T5609] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 543.304711][ T5219] usb 3-1: Product: syz [ 543.324640][ T5219] usb 3-1: Manufacturer: syz [ 543.330513][ T5609] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 543.347654][ T5219] usb 3-1: SerialNumber: syz [ 543.358169][ T5609] visor 2-1:1.0: device disconnected [ 543.378465][ T5219] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 543.451062][ T5219] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 543.891756][ T5609] usb 3-1: USB disconnect, device number 22 [ 544.304249][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6335'. [ 544.491335][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'. [ 544.559837][ T5219] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 544.577287][ T5219] ath9k_htc: Failed to initialize the device [ 544.592628][ T5609] usb 3-1: ath9k_htc: USB layer deinitialized [ 544.798989][T18468] loop1: detected capacity change from 0 to 512 [ 544.810543][T18469] loop2: detected capacity change from 0 to 128 [ 544.848649][T18468] EXT4-fs: Ignoring removed nobh option [ 544.939643][ T5224] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 544.965337][T18468] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.6342: inode #15: comm syz.1.6342: iget: illegal inode # [ 545.051420][T18468] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6342: couldn't read orphan inode 15 (err -117) [ 545.068691][T18468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 545.169821][ T5224] usb 1-1: Using ep0 maxpacket: 32 [ 545.194549][ T5224] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 545.252881][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.255224][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 545.298913][ T5224] usb 1-1: config 0 descriptor?? [ 545.384805][T18481] netlink: 'syz.3.6350': attribute type 21 has an invalid length. [ 545.393188][ T5224] gspca_main: sq930x-2.14.0 probing 041e:403c [ 545.410413][T18481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6350'. [ 545.425454][T18481] netlink: 'syz.3.6350': attribute type 1 has an invalid length. [ 545.560731][ T5224] gspca_sq930x: reg_r 001f failed -71 [ 545.575996][ T5224] sq930x: probe of 1-1:0.0 failed with error -71 [ 545.603321][ T5224] usb 1-1: USB disconnect, device number 27 [ 545.610082][ T4402] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 545.804707][ T4402] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 545.837388][ T4402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.866867][ T4402] usb 6-1: Product: syz [ 545.876785][ T4402] usb 6-1: Manufacturer: syz [ 545.885209][ T4402] usb 6-1: SerialNumber: syz [ 545.903163][ T4402] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 545.959181][ T4402] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 546.393516][ T5609] usb 6-1: USB disconnect, device number 27 [ 546.463137][T18512] ipt_rpfilter: unknown options [ 547.019914][ T5224] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 547.040048][ T4402] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 547.055268][ T4402] ath9k_htc: Failed to initialize the device [ 547.064018][ T27] audit: type=1326 audit(1769058459.939:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.0.6374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 547.095914][ T5609] usb 6-1: ath9k_htc: USB layer deinitialized [ 547.122647][ T27] audit: type=1326 audit(1769058459.989:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.0.6374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 547.239780][ T5224] usb 3-1: Using ep0 maxpacket: 32 [ 547.264412][ T5224] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 547.284387][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.301622][ T5224] usb 3-1: Product: syz [ 547.313467][ T5224] usb 3-1: Manufacturer: syz [ 547.346848][ T5224] usb 3-1: SerialNumber: syz [ 547.413774][ T27] audit: type=1326 audit(1769058460.289:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.0.6374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 547.491333][ T27] audit: type=1326 audit(1769058460.319:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.0.6374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 547.585254][ T5224] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 547.644399][ T5224] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 547.676446][ T5224] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 547.828155][ T5224] usb 3-1: USB disconnect, device number 23 [ 547.880637][ T5224] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 547.935313][ T5224] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 547.980815][ T5224] visor 3-1:1.0: device disconnected [ 548.227158][T18566] loop3: detected capacity change from 0 to 4096 [ 548.292448][T18573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.350760][T18566] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 548.415388][T18566] Remounting filesystem read-only [ 548.440033][ T52] block nbd0: Attempted send on invalid socket [ 548.447149][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 548.708975][T18583] xt_TCPMSS: Only works on TCP SYN packets [ 549.009841][T11750] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 549.199925][T11750] usb 3-1: Using ep0 maxpacket: 16 [ 549.220530][T11750] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 549.232824][T11750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.250097][ T5219] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 549.264907][T11750] usb 3-1: Product: syz [ 549.269509][T11750] usb 3-1: Manufacturer: syz [ 549.276578][T11750] usb 3-1: SerialNumber: syz [ 549.285725][T11750] usb 3-1: config 0 descriptor?? [ 549.301086][T11750] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 549.449949][ T5219] usb 4-1: Using ep0 maxpacket: 16 [ 549.458051][ T5219] usb 4-1: config 0 has no interfaces? [ 549.481883][ T5219] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 549.541965][ T5219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.563092][ T5219] usb 4-1: Product: syz [ 549.582490][ T5219] usb 4-1: Manufacturer: syz [ 549.598803][ T5219] usb 4-1: SerialNumber: syz [ 549.621221][T11750] usb 3-1: USB disconnect, device number 24 [ 549.639944][ T5219] r8152-cfgselector 4-1: config 0 descriptor?? [ 549.734903][ T27] audit: type=1326 audit(1769058462.609:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18620 comm="syz.1.6416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 549.809321][ T27] audit: type=1326 audit(1769058462.629:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18620 comm="syz.1.6416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 549.854174][ T5219] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 549.902937][ T27] audit: type=1326 audit(1769058462.779:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18620 comm="syz.1.6416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 549.949816][ T27] audit: type=1326 audit(1769058462.779:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18620 comm="syz.1.6416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 550.067652][ T5609] usb 4-1: USB disconnect, device number 28 [ 550.679919][ T5219] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 550.826805][T18641] loop1: detected capacity change from 0 to 32768 [ 550.863195][ T27] audit: type=1326 audit(1769058463.709:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.3.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 550.886294][ T5219] usb 3-1: Using ep0 maxpacket: 8 [ 550.892273][ T5219] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 550.901757][ T5219] usb 3-1: config 0 has no interface number 0 [ 550.914866][T18641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.6425 (18641) [ 550.935995][ T5219] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 550.967226][ T27] audit: type=1326 audit(1769058463.739:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.3.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 550.976439][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.060913][ T5219] usb 3-1: Product: syz [ 551.069042][ T5219] usb 3-1: Manufacturer: syz [ 551.096480][ T5219] usb 3-1: SerialNumber: syz [ 551.119514][ T5219] usb 3-1: config 0 descriptor?? [ 551.126158][T18641] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.157950][T18641] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 551.185738][T18641] BTRFS info (device loop1): turning on flush-on-commit [ 551.208806][T18641] BTRFS info (device loop1): enabling disk space caching [ 551.235308][T18641] BTRFS info (device loop1): disabling tree log [ 551.266301][T18641] BTRFS info (device loop1): enabling ssd optimizations [ 551.302158][T18641] BTRFS info (device loop1): force clearing of disk cache [ 551.339246][ T5219] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 551.350030][ T5219] usb 3-1: No valid video chain found. [ 551.359900][T18641] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 551.409630][T18641] BTRFS info (device loop1): use lzo compression, level 0 [ 551.427331][T18641] BTRFS info (device loop1): setting nodatacow, compression disabled [ 551.457735][T18641] BTRFS info (device loop1): disk space caching is enabled [ 551.557410][ T5609] usb 3-1: USB disconnect, device number 25 [ 551.720923][T18641] BTRFS info (device loop1): rebuilding free space tree [ 551.756831][T18641] BTRFS info (device loop1): disabling free space tree [ 551.786162][T18641] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 551.817481][T18641] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 551.878764][T18641] BTRFS info (device loop1): checking UUID tree [ 552.040778][T18641] BTRFS info (device loop1: state M): setting datasum, datacow enabled [ 552.088733][T18641] BTRFS info (device loop1: state M): force clearing of disk cache [ 552.107719][T18641] BTRFS info (device loop1: state M): use lzo compression, level 0 [ 552.171823][T18641] BTRFS info (device loop1: state M): setting nodatacow, compression disabled [ 552.394074][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 552.448034][T18706] device bridge4 entered promiscuous mode [ 552.634570][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 552.634585][ T27] audit: type=1326 audit(1769058465.509:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 552.763187][ T27] audit: type=1326 audit(1769058465.549:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 552.898007][ T27] audit: type=1326 audit(1769058465.549:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 552.993316][ T27] audit: type=1326 audit(1769058465.849:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 553.101544][ T27] audit: type=1326 audit(1769058465.849:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb112b9acb9 code=0x7ffc0000 [ 553.278659][T18725] xt_connbytes: Forcing CT accounting to be enabled [ 553.413207][T18732] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6461'. [ 553.450029][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6461'. [ 553.646957][T18738] cgroup: Invalid name [ 553.778877][T18736] loop2: detected capacity change from 0 to 4096 [ 553.827728][T18736] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 554.431862][T18762] loop1: detected capacity change from 0 to 4096 [ 554.468133][T18762] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 554.649027][T18762] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 554.670071][T18762] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 554.699755][T18762] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 554.925669][ T56] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 554.957533][ T4269] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 555.077566][T18788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.283245][T18791] loop5: detected capacity change from 0 to 4096 [ 555.749370][ T4778] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 555.771985][ T4778] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 555.951183][T18810] netlink: 'syz.5.6498': attribute type 21 has an invalid length. [ 556.007126][T18787] loop3: detected capacity change from 0 to 32768 [ 556.075259][T18787] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 556.075259][T18787] [ 556.118657][T18787] ialloc: diAlloc returned -5! [ 556.319960][ T126] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 556.512622][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.539833][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.580397][ T126] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.627436][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.669336][ T126] usb 2-1: SerialNumber: syz [ 556.904693][ T126] usb 2-1: 0:2 : does not exist [ 556.956793][ T126] usb 2-1: USB disconnect, device number 26 [ 557.235183][ T4468] udevd[4468]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.273260][T18854] autofs4:pid:18854:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 557.348352][T18854] autofs4:pid:18854:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 557.928860][T18878] xt_hashlimit: max too large, truncated to 1048576 [ 557.982620][T18878] No such timeout policy "syz1" [ 558.177006][T18886] loop2: detected capacity change from 0 to 2048 [ 558.290992][T18894] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.351672][T18886] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 558.369657][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.460535][T18886] Remounting filesystem read-only [ 558.466707][ T27] audit: type=1326 audit(1769058471.339:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18900 comm="syz.1.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 558.584286][ T27] audit: type=1326 audit(1769058471.379:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18900 comm="syz.1.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 558.678834][ T27] audit: type=1326 audit(1769058471.409:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18900 comm="syz.1.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821db9acb9 code=0x7ffc0000 [ 559.124196][T18925] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 559.263589][T18930] loop5: detected capacity change from 0 to 256 [ 559.356761][T18930] FAT-fs (loop5): Directory bread(block 64) failed [ 559.389389][T18930] FAT-fs (loop5): Directory bread(block 65) failed [ 559.423557][T18930] FAT-fs (loop5): Directory bread(block 66) failed [ 559.456059][T18930] FAT-fs (loop5): Directory bread(block 67) failed [ 559.499275][T18930] FAT-fs (loop5): Directory bread(block 68) failed [ 559.525349][T18937] netlink: 'syz.1.6555': attribute type 21 has an invalid length. [ 559.530106][T18930] FAT-fs (loop5): Directory bread(block 69) failed [ 559.567260][T18930] FAT-fs (loop5): Directory bread(block 70) failed [ 559.581317][T18930] FAT-fs (loop5): Directory bread(block 71) failed [ 559.603825][T18930] FAT-fs (loop5): Directory bread(block 72) failed [ 559.625670][T18930] FAT-fs (loop5): Directory bread(block 73) failed [ 559.634142][T18937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6555'. [ 560.008211][T18952] loop3: detected capacity change from 0 to 64 [ 560.407168][T18967] x_tables: unsorted entry at hook 3 [ 560.573217][T18973] netlink: 'syz.2.6571': attribute type 3 has an invalid length. [ 560.592293][T18973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6571'. [ 560.792142][T18982] loop5: detected capacity change from 0 to 64 [ 560.825369][ T5219] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 561.032168][ T5219] usb 4-1: Using ep0 maxpacket: 32 [ 561.064769][ T5219] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 561.105985][ T5219] usb 4-1: config 0 has no interface number 0 [ 561.119834][ T5219] usb 4-1: config 0 interface 6 has no altsetting 0 [ 561.157096][ T5219] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=ab.5a [ 561.183229][ T5219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.226465][ T5219] usb 4-1: Product: syz [ 561.232084][ T5219] usb 4-1: Manufacturer: syz [ 561.236801][ T5219] usb 4-1: SerialNumber: syz [ 561.273961][ T5219] usb 4-1: config 0 descriptor?? [ 561.502417][ T5219] cdc_subset: probe of 4-1:0.6 failed with error -22 [ 561.727383][T11750] usb 4-1: USB disconnect, device number 29 [ 561.741193][T19012] syz.1.6590 (19012): /proc/19009/oom_adj is deprecated, please use /proc/19009/oom_score_adj instead. [ 562.472465][T19030] device bridge5 entered promiscuous mode [ 562.717678][T19043] loop5: detected capacity change from 0 to 1024 [ 562.845827][T19048] loop3: detected capacity change from 0 to 2048 [ 562.865986][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6610'. [ 562.900261][T19048] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 562.963142][T19048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.989853][ T126] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 563.044751][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.129449][ T4293] hfsplus: b-tree write err: -5, ino 4 [ 563.174077][T19054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6612'. [ 563.201678][ T126] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 563.214922][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 563.233018][T19056] vcan0 speed is unknown, defaulting to 1000 [ 563.248168][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.290654][T19056] vcan0 speed is unknown, defaulting to 1000 [ 563.299073][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 563.324518][T19056] vcan0 speed is unknown, defaulting to 1000 [ 563.336258][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.378663][ T126] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 563.412723][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 563.447825][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.487416][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 563.500469][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.547570][ T126] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 563.586913][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 563.621870][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.648668][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 563.676966][ T126] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.714360][ T126] usb 2-1: string descriptor 0 read error: -22 [ 563.739719][ T126] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 563.777415][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.868888][ T126] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 563.890848][ T4403] vcan0 speed is unknown, defaulting to 1000 [ 563.935907][T19056] infiniband syz1: set active [ 563.951064][T19056] infiniband syz1: added vcan0 [ 564.122817][T19077] loop5: detected capacity change from 0 to 512 [ 564.146904][T19077] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 564.183010][T19077] EXT4-fs (loop5): 1 truncate cleaned up [ 564.189118][T19077] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 564.211134][T11750] usb 2-1: USB disconnect, device number 27 [ 564.313303][T19081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6624'. [ 564.342974][T19056] RDS/IB: syz1: added [ 564.359466][T19056] smc: adding ib device syz1 with port count 1 [ 564.377286][T19056] smc: ib device syz1 port 1 has pnetid [ 564.395282][ T126] vcan0 speed is unknown, defaulting to 1000 [ 564.407612][ T4778] EXT4-fs (loop5): unmounting filesystem. [ 564.423386][T19056] vcan0 speed is unknown, defaulting to 1000 [ 564.526417][T19085]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 564.828628][T19056] vcan0 speed is unknown, defaulting to 1000 [ 565.275387][T19056] vcan0 speed is unknown, defaulting to 1000 [ 565.326345][ T27] audit: type=1326 audit(1769058478.199:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.399708][ T27] audit: type=1326 audit(1769058478.219:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.499761][ T27] audit: type=1326 audit(1769058478.219:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.599900][ T27] audit: type=1326 audit(1769058478.219:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.693027][ T27] audit: type=1326 audit(1769058478.219:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.734932][T19056] vcan0 speed is unknown, defaulting to 1000 [ 565.783603][ T27] audit: type=1326 audit(1769058478.219:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.871632][ T27] audit: type=1326 audit(1769058478.219:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 565.959655][ T27] audit: type=1326 audit(1769058478.219:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.5.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9a8999acb9 code=0x7ffc0000 [ 566.036267][T19131] netlink: 'syz.0.6649': attribute type 1 has an invalid length. [ 566.078295][T19131] netlink: 'syz.0.6649': attribute type 2 has an invalid length. [ 566.149995][T19134] loop1: detected capacity change from 0 to 1024 [ 566.157589][T19134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.203347][T19134] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 566.220823][T19056] vcan0 speed is unknown, defaulting to 1000 [ 566.240218][T19134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 566.311781][T19134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 566.445152][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 566.781725][ T27] audit: type=1400 audit(1769058479.659:301): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=19149 comm="syz.2.6659" [ 567.456461][T19178] loop5: detected capacity change from 0 to 256 [ 567.506639][ T27] audit: type=1400 audit(1769058480.379:302): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=19179 comm="syz.1.6672" [ 567.572963][T19178] FAT-fs (loop5): Directory bread(block 64) failed [ 567.600007][T19178] FAT-fs (loop5): Directory bread(block 65) failed [ 567.610153][T19178] FAT-fs (loop5): Directory bread(block 66) failed [ 567.616940][T19178] FAT-fs (loop5): Directory bread(block 67) failed [ 567.678561][T19178] FAT-fs (loop5): Directory bread(block 68) failed [ 567.708650][T19178] FAT-fs (loop5): Directory bread(block 69) failed [ 567.729960][T19178] FAT-fs (loop5): Directory bread(block 70) failed [ 567.759246][T19178] FAT-fs (loop5): Directory bread(block 71) failed [ 567.789826][T19178] FAT-fs (loop5): Directory bread(block 72) failed [ 567.820640][T19178] FAT-fs (loop5): Directory bread(block 73) failed [ 568.024151][T19191] loop3: detected capacity change from 0 to 4096 [ 568.437180][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6688'. [ 569.717278][T19260] loop1: detected capacity change from 0 to 4096 [ 569.803197][T19260] ntfs: volume version 3.1. [ 569.961058][T19270] lo speed is unknown, defaulting to 1000 [ 569.967091][T19270] lo speed is unknown, defaulting to 1000 [ 570.028046][T19270] lo speed is unknown, defaulting to 1000 [ 570.087986][T19270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 570.165332][T19270] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 570.287845][T19270] lo speed is unknown, defaulting to 1000 [ 570.320981][T19270] lo speed is unknown, defaulting to 1000 [ 570.355576][T19270] lo speed is unknown, defaulting to 1000 [ 570.378989][T19270] lo speed is unknown, defaulting to 1000 [ 570.401164][T19270] lo speed is unknown, defaulting to 1000 [ 570.702833][T19289] SET target dimension over the limit! [ 571.263788][T19313] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 571.419967][T19318] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 571.419967][T19318] SÃȘØÈžZ§6ŸÂ' [ 571.737589][T19334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6748'. [ 571.929753][T11750] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 572.029708][ T5219] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 572.140030][T11750] usb 2-1: Using ep0 maxpacket: 32 [ 572.150538][T11750] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 572.160908][T19350] loop3: detected capacity change from 0 to 64 [ 572.180365][T11750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.196786][T19350] Trying to free block not in datazone [ 572.205012][T11750] usb 2-1: Product: syz [ 572.209344][T11750] usb 2-1: Manufacturer: syz [ 572.219751][ T5219] usb 1-1: Using ep0 maxpacket: 8 [ 572.228616][T19350] Trying to free block not in datazone [ 572.235549][T11750] usb 2-1: SerialNumber: syz [ 572.244051][ T5219] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 572.253759][T19350] Trying to free block not in datazone [ 572.271495][T11750] usb 2-1: config 0 descriptor?? [ 572.276982][ T5219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.300633][T11750] smsc75xx v1.0.0 [ 572.309774][ T5219] usb 1-1: Product: syz [ 572.314134][ T5219] usb 1-1: Manufacturer: syz [ 572.329700][T11750] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 572.343242][ T5219] usb 1-1: SerialNumber: syz [ 572.359428][T11750] smsc75xx: probe of 2-1:0.0 failed with error -22 [ 572.368648][ T5219] usb 1-1: config 0 descriptor?? [ 572.385816][ T5219] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 572.397319][ T5219] dvb-usb: bulk message failed: -22 (2/0) [ 572.405026][ T5219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.419990][ T5609] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 572.428927][ T5219] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 572.467930][ T5219] usb 1-1: media controller created [ 572.538667][ T5219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.559396][T19358] loop2: detected capacity change from 0 to 16 [ 572.580432][ T5219] dvb-usb: bulk message failed: -22 (1/0) [ 572.588047][T19358] erofs: (device loop2): mounted with root inode @ nid 36. [ 572.596603][ T5219] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 572.619778][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 572.626990][ T5609] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 572.638265][T19358] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-95] [ 572.647158][T11750] usb 2-1: USB disconnect, device number 28 [ 572.670672][ T5219] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 572.683755][ T5609] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.704753][ T5219] dvb-usb: schedule remote query interval to 50 msecs. [ 572.726869][ T5219] dvb-usb: bulk message failed: -22 (2/0) [ 572.734468][ T5609] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 572.749941][ T5219] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 572.780664][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.800155][ T5219] usb 1-1: USB disconnect, device number 28 [ 572.821547][ T5609] usb 6-1: Product: syz [ 572.835967][ T5609] usb 6-1: Manufacturer: syz [ 572.842104][ T5609] usb 6-1: SerialNumber: syz [ 572.900951][ T5609] usb 6-1: config 0 descriptor?? [ 572.933305][ T5609] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 572.967986][ T5219] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 573.120593][ T5609] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 573.165763][T19368] loop3: detected capacity change from 0 to 64 [ 573.172577][ T5609] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 573.218697][T19368] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 573.245253][T19368] hfs: filesystem is marked locked, mounting read-only. [ 573.405849][ T5609] usb 6-1: USB disconnect, device number 28 [ 573.713542][T19379] syz.2.6770 (19379): drop_caches: 2 [ 573.807314][T19388] Zero length message leads to an empty skb [ 574.012357][T19391] loop3: detected capacity change from 0 to 4096 [ 574.041579][T19391] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 574.888274][T19422] netlink: 'syz.3.6789': attribute type 2 has an invalid length. [ 574.928248][T19422] netlink: 'syz.3.6789': attribute type 1 has an invalid length. [ 574.965066][T19422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6789'. [ 574.988211][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6792'. [ 575.010690][T19427] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 575.031339][T19427] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 575.413271][T19442] loop2: detected capacity change from 0 to 2048 [ 575.501614][T19442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.656182][T19450] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.034153][T19465] loop1: detected capacity change from 0 to 256 [ 576.113225][T19465] FAT-fs (loop1): Directory bread(block 64) failed [ 576.139656][T19465] FAT-fs (loop1): Directory bread(block 65) failed [ 576.190582][T19465] FAT-fs (loop1): Directory bread(block 66) failed [ 576.244425][T19465] FAT-fs (loop1): Directory bread(block 67) failed [ 576.266595][T19465] FAT-fs (loop1): Directory bread(block 68) failed [ 576.295381][T19465] FAT-fs (loop1): Directory bread(block 69) failed [ 576.315773][T19465] FAT-fs (loop1): Directory bread(block 70) failed [ 576.339770][T19465] FAT-fs (loop1): Directory bread(block 71) failed [ 576.371464][T19465] FAT-fs (loop1): Directory bread(block 72) failed [ 576.398582][T19465] FAT-fs (loop1): Directory bread(block 73) failed [ 576.453292][T19475] loop2: detected capacity change from 0 to 256 [ 576.549998][ T4403] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 576.753445][ T4403] usb 6-1: Using ep0 maxpacket: 16 [ 576.764282][ T4403] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 576.814984][ T4403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.833670][ T4403] usb 6-1: Product: syz [ 576.838114][ T4403] usb 6-1: Manufacturer: syz [ 576.848388][T19481] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 576.864652][ T4403] usb 6-1: SerialNumber: syz [ 576.889516][ T4403] r8152-cfgselector 6-1: config 0 descriptor?? [ 576.897158][T19481] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.923114][T19483] 9pnet_fd: Insufficient options for proto=fd [ 577.166903][T19473] loop3: detected capacity change from 0 to 32768 [ 577.211238][T19473] (syz.3.6815,19473,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 577.265370][T19473] (syz.3.6815,19473,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 577.321297][ T4403] r8152-cfgselector 6-1: Unknown version 0x0000 [ 577.327813][ T4403] r8152-cfgselector 6-1: bad CDC descriptors [ 577.363039][T19473] JBD2: Ignoring recovery information on journal [ 577.418666][ T4403] r8152-cfgselector 6-1: Unknown version 0x0000 [ 577.487230][ T4403] r8152-cfgselector 6-1: USB disconnect, device number 29 [ 577.559339][T19473] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 577.718139][T19502] siw: device registration error -23 [ 578.071620][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 578.179655][ T4403] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 578.372093][ T4403] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 578.390951][ T4403] usb 2-1: config 220 has an invalid descriptor of length 127, skipping remainder of the config [ 578.449635][ T4403] usb 2-1: config 220 has no interface number 2 [ 578.466499][ T4403] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 578.499611][ T4403] usb 2-1: config 220 interface 0 has no altsetting 0 [ 578.529667][ T4403] usb 2-1: config 220 interface 76 has no altsetting 0 [ 578.536805][ T4403] usb 2-1: config 220 interface 1 has no altsetting 0 [ 578.592916][ T4403] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 578.620977][ T4403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.659654][ T4403] usb 2-1: Product: syz [ 578.665303][ T4403] usb 2-1: Manufacturer: syz [ 578.678741][ T4403] usb 2-1: SerialNumber: syz [ 578.916044][ T4403] usb 2-1: selecting invalid altsetting 0 [ 578.937584][ T4403] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 578.960422][ T4403] usb 2-1: No valid video chain found. [ 578.990917][T19533] device gre1 entered promiscuous mode [ 579.011732][ T4403] usb 2-1: selecting invalid altsetting 0 [ 579.017749][ T4403] usbtest: probe of 2-1:220.1 failed with error -22 [ 579.075143][ T4403] usb 2-1: USB disconnect, device number 29 [ 579.086436][T19536] loop3: detected capacity change from 0 to 512 [ 579.168795][T19536] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.186182][T19515] loop2: detected capacity change from 0 to 32768 [ 579.251391][T19536] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 579.285247][T19536] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6846: bg 0: block 248: padding at end of block bitmap is not set [ 579.311541][T19536] __quota_error: 9 callbacks suppressed [ 579.311562][T19536] Quota error (device loop3): write_blk: dquota write failed [ 579.324977][T19536] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 579.365150][T19515] XFS (loop2): Mounting V5 Filesystem [ 579.379808][T19536] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.6846: Failed to acquire dquot type 1 [ 579.405917][ T52] block nbd0: Attempted send on invalid socket [ 579.412295][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.432563][T19536] EXT4-fs (loop3): 1 truncate cleaned up [ 579.447644][T19536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 579.554901][T19515] XFS (loop2): Ending clean mount [ 579.587572][T19515] XFS (loop2): Quotacheck needed: Please wait. [ 579.737255][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 579.771039][ T9] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 579.787410][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 1 [ 579.807871][T19515] XFS (loop2): Quotacheck: Done. [ 579.989505][ T4278] XFS (loop2): Unmounting Filesystem [ 580.009422][T19561] netlink: 'syz.5.6853': attribute type 8 has an invalid length. [ 580.048262][T19565] loop1: detected capacity change from 0 to 64 [ 580.069705][T11750] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 580.164786][T19567] netlink: 'syz.3.6856': attribute type 1 has an invalid length. [ 580.259700][T11750] usb 1-1: Using ep0 maxpacket: 16 [ 580.270573][T11750] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 580.304952][T11750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.319172][T11750] usb 1-1: Product: syz [ 580.327733][T11750] usb 1-1: Manufacturer: syz [ 580.335525][T11750] usb 1-1: SerialNumber: syz [ 580.356740][T11750] usb 1-1: config 0 descriptor?? [ 580.389283][T11750] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 580.594085][T11750] gp8psk: usb in 128 operation failed. [ 580.603642][T11750] gp8psk: usb in 137 operation failed. [ 580.626733][T11750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 580.647306][T11750] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 580.666922][T11750] usb 1-1: media controller created [ 580.732694][T11750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.807356][T11750] gp8psk_fe: Frontend revision 1 attached [ 580.826279][T11750] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 580.851638][T11750] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 580.872631][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6866'. [ 580.985613][T11750] gp8psk: usb in 138 operation failed. [ 580.993571][T11750] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 581.027745][T11750] gp8psk: found Genpix USB device pID = 201 (hex) [ 581.053895][T11750] usb 1-1: USB disconnect, device number 29 [ 581.118748][T11750] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 581.628691][T19609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.734657][T19611] loop5: detected capacity change from 0 to 164 [ 581.789879][T19611] Unable to read rock-ridge attributes [ 581.841342][T19611] Unable to read rock-ridge attributes [ 581.868356][T19611] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 582.181251][T19624] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 582.413702][T19632] loop3: detected capacity change from 0 to 64 [ 582.460351][T19635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6889'. [ 582.487900][T19635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6889'. [ 583.147222][T19664] deleting an unspecified loop device is not supported. [ 583.453295][T19672] netlink: 'syz.0.6907': attribute type 15 has an invalid length. [ 583.470188][T19672] netlink: 'syz.0.6907': attribute type 7 has an invalid length. [ 583.494202][T19672] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6907'. [ 583.778712][T19680] netlink: 'syz.3.6911': attribute type 21 has an invalid length. [ 583.801009][T19680] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6911'. [ 583.817016][T19680] netlink: 'syz.3.6911': attribute type 4 has an invalid length. [ 583.826769][T19680] netlink: 'syz.3.6911': attribute type 5 has an invalid length. [ 583.840797][T19680] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6911'. [ 584.243601][T19659] loop5: detected capacity change from 0 to 40427 [ 584.280276][T19659] F2FS-fs (loop5): invalid crc value [ 584.317235][T19659] F2FS-fs (loop5): Found nat_bits in checkpoint [ 584.526512][T19659] F2FS-fs (loop5): Start checkpoint disabled! [ 584.599867][T19659] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 584.772072][T19659] F2FS-fs (loop5): inode mapping table is corrupted, run fsck to fix it, ino:3, nid:3, level:3, offset:167 [ 584.842720][T19718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6929'. [ 585.384949][T19737] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6939'. [ 585.413245][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6939'. [ 585.457233][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6939'. [ 586.057528][T19763] netlink: 'syz.1.6951': attribute type 3 has an invalid length. [ 586.089731][T19763] netlink: 'syz.1.6951': attribute type 1 has an invalid length. [ 586.372018][T19777] netlink: 'syz.3.6959': attribute type 2 has an invalid length. [ 586.410976][T19777] device .d entered promiscuous mode [ 586.719840][ T4326] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 586.917196][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 586.976881][ T4326] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 586.997764][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 587.057845][ T4326] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 587.068239][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6967'. [ 587.089752][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6967'. [ 587.104033][ T4326] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 587.130787][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.166457][ T4326] usb 1-1: config 0 descriptor?? [ 587.340989][T19801] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.366781][T19787] loop2: detected capacity change from 0 to 32768 [ 587.408860][ T4326] hdpvr 1-1:0.0: firmware version 0x8 dated [ 587.450345][T19784] loop5: detected capacity change from 0 to 32768 [ 587.462469][T19787] XFS (loop2): Mounting V5 Filesystem [ 587.534881][T19784] XFS (loop5): Mounting V5 Filesystem [ 587.614912][T19787] XFS (loop2): Ending clean mount [ 587.620849][ T4326] hdpvr 1-1:0.0: device init failed [ 587.626572][ T4326] hdpvr: probe of 1-1:0.0 failed with error -12 [ 587.659827][ T4326] usb 1-1: USB disconnect, device number 30 [ 587.675878][T19787] XFS (loop2): Quotacheck needed: Please wait. [ 587.686287][T19784] XFS (loop5): Ending clean mount [ 587.750852][T19784] XFS (loop5): Quotacheck needed: Please wait. [ 587.896484][T19784] XFS (loop5): Quotacheck: Done. [ 587.896510][T19787] XFS (loop2): Quotacheck: Done. [ 588.028679][ T4778] XFS (loop5): Unmounting Filesystem [ 588.088556][ T4278] XFS (loop2): Unmounting Filesystem [ 588.249732][T19825] netlink: 'syz.1.6975': attribute type 2 has an invalid length. [ 588.338560][T19827] netlink: 'syz.0.6977': attribute type 11 has an invalid length. [ 588.471414][T19818] loop3: detected capacity change from 0 to 32768 [ 588.556726][T19818] XFS (loop3): Mounting V5 Filesystem [ 588.860974][T19818] XFS (loop3): Ending clean mount [ 588.868871][T19818] XFS (loop3): Quotacheck needed: Please wait. [ 588.907079][T19849] loop1: detected capacity change from 0 to 8 [ 588.928970][T19847] loop2: detected capacity change from 0 to 512 [ 589.035665][T19818] XFS (loop3): Quotacheck: Done. [ 589.058248][ T27] audit: type=1326 audit(1769058501.929:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19852 comm="syz.0.6984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 589.116528][T19847] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6976: bg 0: block 473: padding at end of block bitmap is not set [ 589.144959][ T27] audit: type=1326 audit(1769058501.959:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19852 comm="syz.0.6984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 589.169432][ T27] audit: type=1326 audit(1769058501.959:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19852 comm="syz.0.6984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b1d9acb9 code=0x7ffc0000 [ 589.269707][T19847] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 589.323551][ T4275] XFS (loop3): Unmounting Filesystem [ 589.346787][T19847] EXT4-fs (loop2): 1 orphan inode deleted [ 589.360072][ T4295] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 589.435119][ T4295] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 589.449705][T19847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 589.487471][T19847] ext4 filesystem being mounted at /1421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.593028][T19847] Invalid option length (230) for dns_resolver key [ 589.808311][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 590.020552][T19868] loop2: detected capacity change from 0 to 512 [ 590.141256][T19868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 590.174732][T19868] ext4 filesystem being mounted at /1422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.261546][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 590.573216][T19883] loop2: detected capacity change from 0 to 4096 [ 590.612158][T19883] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 591.417534][T19911] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7010'. [ 591.544501][T19914] loop3: detected capacity change from 0 to 4096 [ 591.607705][T19914] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 591.658578][T19914] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 591.683815][T19914] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 591.737773][T19914] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 591.777789][T19922] loop5: detected capacity change from 0 to 1024 [ 591.845458][T19914] ntfs: volume version 3.1. [ 591.913084][T19914] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 591.969806][T19914] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 592.559463][T19945] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 592.583179][T19947] xt_limit: Overflow, try lower: 0/0 [ 593.129440][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7040'. [ 593.180203][T19971] netlink: 'syz.3.7040': attribute type 1 has an invalid length. [ 593.221639][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7040'. [ 593.710828][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7050'. [ 593.752585][T19991] loop3: detected capacity change from 0 to 1764 [ 593.825716][T19995] netlink: 'syz.2.7049': attribute type 29 has an invalid length. [ 593.850058][T19995] netlink: 'syz.2.7049': attribute type 29 has an invalid length. [ 594.207766][T19966] loop1: detected capacity change from 0 to 32768 [ 594.445700][ T4269] read_mapping_page failed! [ 594.463665][ T4269] ERROR: (device loop1): txCommit: [ 594.463665][ T4269] [ 594.512622][ T4269] read_mapping_page failed! [ 594.532065][ T4269] ERROR: (device loop1): txCommit: [ 594.532065][ T4269] [ 594.540096][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7061'. [ 594.729293][T20024] loop5: detected capacity change from 0 to 8 [ 594.866895][T20024] SQUASHFS error: Unable to read inode 0xa7 [ 594.893057][T20028] netlink: get zone limit has 4 unknown bytes [ 595.183589][T20034] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.7070'. [ 595.223480][T20034] netlink: zone id is out of range [ 595.238119][T20034] netlink: del zone limit has 4 unknown bytes [ 595.323110][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.375652][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.685198][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.716349][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.905465][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.931574][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.017275][T20027] loop2: detected capacity change from 0 to 40427 [ 596.081452][T20027] F2FS-fs (loop2): invalid crc value [ 596.098407][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.122891][T20027] F2FS-fs (loop2): Found nat_bits in checkpoint [ 596.145405][T20052] ax25_connect(): syz.0.7079 uses autobind, please contact jreuter@yaina.de [ 596.169211][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.378766][T20027] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 596.420277][T20027] F2FS-fs (loop2): Start checkpoint disabled! [ 596.460421][T20027] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 597.409072][T20085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.424088][T20085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.433571][T20085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.442088][T20085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.452133][T20085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 597.460038][T20085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.481546][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.489261][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.497496][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.505526][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.514883][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 597.523300][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.585505][T20088] loop5: detected capacity change from 0 to 1764 [ 597.961859][T20082] vcan0 speed is unknown, defaulting to 1000 [ 598.529663][T20082] lo speed is unknown, defaulting to 1000 [ 599.036102][T20094] loop3: detected capacity change from 0 to 32768 [ 599.208212][T20094] XFS (loop3): Mounting V5 Filesystem [ 599.478375][T20094] XFS (loop3): Ending clean mount [ 599.496060][T20094] XFS (loop3): Quotacheck needed: Please wait. [ 599.599997][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 599.693378][T20094] XFS (loop3): Quotacheck: Done. [ 599.804251][T20153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7115'. [ 599.941376][ T4275] XFS (loop3): Unmounting Filesystem [ 600.034204][T20082] chnl_net:caif_netlink_parms(): no params data found [ 600.709814][T20082] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.717637][T20082] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.807658][T20082] device bridge_slave_0 entered promiscuous mode [ 600.817172][T20082] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.817309][T20082] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.819939][T20082] device bridge_slave_1 entered promiscuous mode [ 600.951817][T20082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.988341][T20082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.097325][ T46] device hsr_slave_0 left promiscuous mode [ 601.152186][ T46] device hsr_slave_1 left promiscuous mode [ 601.170226][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.198816][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.221436][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.240579][ T46] device bridge_slave_1 left promiscuous mode [ 601.247039][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.354239][ T46] device bridge_slave_0 left promiscuous mode [ 601.381048][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.499733][T20196] raw_sendmsg: syz.2.7130 forgot to set AF_INET. Fix it! [ 601.572879][ T46] device veth1_vlan left promiscuous mode [ 601.578856][ T46] device veth0_vlan left promiscuous mode [ 601.679732][T20085] Bluetooth: hci3: command 0x041b tx timeout [ 602.049808][T20213] netlink: 'syz.3.7136': attribute type 1 has an invalid length. [ 602.974574][ T46] bond3 (unregistering): Released all slaves [ 603.401648][ T46] bond2 (unregistering): Released all slaves [ 603.762978][T20085] Bluetooth: hci3: command 0x040f tx timeout [ 603.810376][ T46] bond1 (unregistering): Released all slaves [ 603.979839][ T46] team0 (unregistering): Port device geneve0 removed [ 604.499979][ T46] team0 (unregistering): Port device team_slave_1 removed [ 604.573199][ T46] team0 (unregistering): Port device team_slave_0 removed [ 604.633895][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.710542][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.198278][ T46] team0 (unregistering): Port device bond0 removed [ 605.246077][ T46] bond0 (unregistering): Released all slaves [ 605.546450][T20082] team0: Port device team_slave_0 added [ 605.591764][T20082] team0: Port device team_slave_1 added [ 605.662085][T20264] netlink: 'syz.3.7160': attribute type 10 has an invalid length. [ 605.680283][T20264] device team0 left promiscuous mode [ 605.685983][T20264] device team_slave_0 left promiscuous mode [ 605.694632][T20266] loop5: detected capacity change from 0 to 2048 [ 605.710076][T20264] device team_slave_1 left promiscuous mode [ 605.750082][T20264] team0: Cannot enslave team device to itself [ 605.802152][T20266] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 605.827208][T20266] NILFS (loop5): mounting unchecked fs [ 605.838548][T20268] binder: 20267:20268 ioctl c018620c 200000000380 returned -22 [ 605.843478][T20082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.853626][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 605.884055][T20266] NILFS (loop5): recovery complete [ 605.910035][T20271] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 605.930892][T20082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.981916][T20082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.026750][T20082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.044450][T20082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.191162][T20082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.226711][T20275] netlink: 'syz.0.7166': attribute type 8 has an invalid length. [ 606.401403][T20082] device hsr_slave_0 entered promiscuous mode [ 606.421016][T20082] device hsr_slave_1 entered promiscuous mode [ 606.458621][T20082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.478851][T20082] Cannot create hsr debugfs directory [ 606.484712][ T5609] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 606.610865][T20287] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.7172'. [ 606.686364][ T5609] usb 4-1: Using ep0 maxpacket: 8 [ 606.693499][ T5609] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 606.722287][ T5609] usb 4-1: config 2 has no interface number 0 [ 606.745389][ T5609] usb 4-1: config 2 interface 31 has no altsetting 0 [ 606.776490][ T5609] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 606.836353][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.867424][ T5609] usb 4-1: Product: syz [ 606.879695][ T5609] usb 4-1: Manufacturer: syz [ 606.909651][ T5609] usb 4-1: SerialNumber: syz [ 607.150047][T20304] tmpfs: Bad value for 'mpol' [ 607.156296][T20082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 607.192160][T20082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 607.221021][T20082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 607.278862][T20082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 607.379849][ T5609] ch9200: probe of 4-1:2.31 failed with error -22 [ 607.409038][ T5609] usb 4-1: USB disconnect, device number 30 [ 607.652986][T20082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.718493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.731482][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.754798][T20082] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.784171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 607.805099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.817052][T20327] loop5: detected capacity change from 0 to 1024 [ 607.830744][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.838323][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.867558][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 607.940019][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 607.971717][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.035110][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.042534][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.091707][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 608.155665][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.217592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 608.263349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.331023][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 608.346117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.388405][T20082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.462009][T20082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.474102][ T27] audit: type=1326 audit(1769058521.349:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20343 comm="syz.3.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 608.507940][ T5224] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 608.565936][ T27] audit: type=1326 audit(1769058521.349:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20343 comm="syz.3.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 608.602959][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.618403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 608.639932][ T27] audit: type=1326 audit(1769058521.409:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20343 comm="syz.3.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 608.672359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 608.695728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 608.719811][ T5224] usb 1-1: Using ep0 maxpacket: 8 [ 608.726854][ T5224] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.738267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.768199][ T5224] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 608.790592][ T27] audit: type=1326 audit(1769058521.409:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20343 comm="syz.3.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 608.811376][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 608.834755][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.896637][ T5224] usb 1-1: config 0 descriptor?? [ 608.928287][ T5224] usb 1-1: Found UVC 0.00 device (2801:0201) [ 608.940604][ T27] audit: type=1326 audit(1769058521.409:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20343 comm="syz.3.7192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6579acb9 code=0x7ffc0000 [ 608.979694][ T5224] usb 1-1: No valid video chain found. [ 609.152520][ T5224] usb 1-1: USB disconnect, device number 31 [ 609.594432][T20366] loop5: detected capacity change from 0 to 4096 [ 609.700163][T20366] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 609.787448][T20366] ntfs3: loop5: Failed to load $Extend. [ 609.888258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.936838][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.977608][T20082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.351341][T20395] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7210'. [ 610.852161][T20412] tmpfs: Bad value for 'mpol' [ 611.226457][T20422] SET target dimension over the limit! [ 611.356990][T20429] netlink: 'syz.5.7223': attribute type 11 has an invalid length. [ 611.572010][T20432] loop2: detected capacity change from 0 to 2048 [ 611.670430][T20432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 611.758893][T20432] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.7224: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 611.841259][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.870600][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.952768][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 612.017831][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.022298][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 612.051895][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.070342][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.105833][T20442] loop5: detected capacity change from 0 to 4096 [ 612.120838][T20082] device veth0_vlan entered promiscuous mode [ 612.144678][T20442] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 612.201540][T20082] device veth1_vlan entered promiscuous mode [ 612.297143][T20442] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 612.331205][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 612.351513][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 612.376521][T20442] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 612.398906][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.412574][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.432249][T20442] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 612.462178][T20082] device veth0_macvtap entered promiscuous mode [ 612.509297][T20082] device veth1_macvtap entered promiscuous mode [ 612.520636][T20442] ntfs: volume version 3.1. [ 612.586732][T20442] syz.5.7227: attempt to access beyond end of device [ 612.586732][T20442] loop5: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 612.614780][T20460] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7235'. [ 612.647847][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.660724][T20442] ntfs: (device loop5): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x8a0222. [ 612.685210][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.700930][T20442] syz.5.7227: attempt to access beyond end of device [ 612.700930][T20442] loop5: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 612.716244][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.747895][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.767635][T20442] syz.5.7227: attempt to access beyond end of device [ 612.767635][T20442] loop5: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 612.782707][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.806374][T20442] syz.5.7227: attempt to access beyond end of device [ 612.806374][T20442] loop5: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 612.822703][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.867230][T20082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.923652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.958640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.999102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.028988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.081570][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.119352][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.189690][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.217805][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.253419][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.304635][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.318189][T20082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.349828][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 613.358857][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.400999][T20082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.449691][T20082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.472276][T20082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.483125][T20082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.783400][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.823746][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.895634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 613.937215][T19556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.970464][T19556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.020323][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 614.221529][T20506] ipt_ECN: cannot use operation on non-tcp rule [ 614.912311][T20520] loop6: detected capacity change from 0 to 8192 [ 614.979876][T20520] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 615.003730][T20520] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 615.006003][T20528] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 615.025224][T20520] REISERFS (device loop6): using ordered data mode [ 615.044503][T20520] reiserfs: using flush barriers [ 615.054653][T20520] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 615.111751][T20500] loop3: detected capacity change from 0 to 32768 [ 615.130265][T20520] REISERFS (device loop6): checking transaction log (loop6) [ 615.159065][T20500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7251 (20500) [ 615.224001][T20500] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 615.255251][T20500] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 615.305842][T20500] BTRFS info (device loop3): using free space tree [ 615.462637][T20520] REISERFS (device loop6): Using tea hash to sort names [ 615.503157][T20520] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 615.522506][T20543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7267'. [ 615.687766][T20500] BTRFS info (device loop3): enabling ssd optimizations [ 615.897674][ T4275] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.516890][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7274'. [ 617.353804][T20608] xt_cgroup: xt_cgroup: no path or classid specified [ 617.716082][T20617] loop2: detected capacity change from 0 to 2048 [ 617.778728][T20617] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 617.851508][T20617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.232005][T20585] loop5: detected capacity change from 0 to 40427 [ 618.293076][T20585] F2FS-fs (loop5): invalid crc value [ 618.336140][T20585] F2FS-fs (loop5): Found nat_bits in checkpoint [ 618.549687][T20585] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 618.603858][T20650] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 618.725867][T20585] syz.5.7277: attempt to access beyond end of device [ 618.725867][T20585] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 620.486437][T20668] loop3: detected capacity change from 0 to 32768 [ 620.565110][T20668] [ 620.565110][T20668] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.565110][T20668] [ 620.667216][T20668] __jfs_setxattr: xattr_size = 72, new_size = 166 [ 620.888105][ T39] [ 620.888105][ T39] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.888105][ T39] [ 620.938626][T20719] loop5: detected capacity change from 0 to 512 [ 620.954874][ T39] [ 620.954874][ T39] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.954874][ T39] [ 620.997283][ T4275] [ 620.997283][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.997283][ T4275] [ 621.049013][ T4275] [ 621.049013][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 621.049013][ T4275] [ 621.076092][ T108] ================================================================== [ 621.085292][ T108] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 621.093098][ T108] Read of size 8 at addr ffff8880748c70d8 by task jfsCommit/108 [ 621.101172][ T108] [ 621.103551][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 621.111234][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.121431][ T108] Call Trace: [ 621.124960][ T108] [ 621.128199][ T108] dump_stack_lvl+0x188/0x24e [ 621.132974][ T108] ? __lock_acquire+0x7d10/0x7d10 [ 621.138054][ T108] ? show_regs_print_info+0x12/0x12 [ 621.143480][ T108] ? load_image+0x400/0x400 [ 621.148245][ T108] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 621.154034][ T108] ? __virt_addr_valid+0x188/0x540 [ 621.159301][ T108] ? __virt_addr_valid+0x465/0x540 [ 621.164907][ T108] ? __lock_acquire+0x106/0x7d10 [ 621.169930][ T108] print_report+0xa8/0x210 [ 621.174577][ T108] kasan_report+0x10b/0x140 [ 621.179229][ T108] ? __lock_acquire+0x106/0x7d10 [ 621.184230][ T108] __lock_acquire+0x106/0x7d10 [ 621.189047][ T108] ? mark_lock+0x94/0x320 [ 621.193503][ T108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 621.199613][ T108] ? lock_chain_count+0x20/0x20 [ 621.204697][ T108] ? __schedule+0x119d/0x40e0 [ 621.209471][ T108] ? verify_lock_unused+0x140/0x140 [ 621.214929][ T108] ? finish_task_switch+0x265/0x8f0 [ 621.220188][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 621.225595][ T108] ? finish_task_switch+0x265/0x8f0 [ 621.230834][ T108] ? __schedule+0x11d9/0x40e0 [ 621.235640][ T108] lock_acquire+0x1bb/0x4a0 [ 621.240179][ T108] ? __mutex_lock+0x27d/0xaf0 [ 621.244904][ T108] ? mutex_spin_on_owner+0x1b4/0x350 [ 621.250396][ T108] ? read_lock_is_recursive+0x10/0x10 [ 621.255830][ T108] _raw_spin_lock+0x2a/0x40 [ 621.260457][ T108] ? __mutex_lock+0x27d/0xaf0 [ 621.265253][ T108] __mutex_lock+0x27d/0xaf0 [ 621.269814][ T108] ? jfs_syncpt+0x21/0x90 [ 621.274296][ T108] ? txEnd+0x2d4/0x520 [ 621.278480][ T108] ? mutex_lock_nested+0x10/0x10 [ 621.283549][ T108] ? __rwlock_init+0x140/0x140 [ 621.288429][ T108] jfs_syncpt+0x21/0x90 [ 621.292617][ T108] txEnd+0x2e1/0x520 [ 621.296635][ T108] jfs_lazycommit+0x5a0/0xa70 [ 621.301349][ T108] ? txFreelock+0x5a0/0x5a0 [ 621.306018][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 621.312235][ T108] ? do_task_dead+0xd0/0xd0 [ 621.316871][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 621.322939][ T108] ? __kthread_parkme+0x162/0x1c0 [ 621.328279][ T108] kthread+0x29d/0x330 [ 621.332525][ T108] ? txFreelock+0x5a0/0x5a0 [ 621.337347][ T108] ? kthread_blkcg+0xd0/0xd0 [ 621.342068][ T108] ret_from_fork+0x1f/0x30 [ 621.346798][ T108] [ 621.349838][ T108] [ 621.352377][ T108] Allocated by task 20668: [ 621.356814][ T108] kasan_set_track+0x4b/0x70 [ 621.361699][ T108] __kasan_kmalloc+0x8e/0xa0 [ 621.366572][ T108] lmLogOpen+0x2c0/0xf90 [ 621.370853][ T108] jfs_mount_rw+0xf8/0x5c0 [ 621.375313][ T108] jfs_fill_super+0x594/0xad0 [ 621.380119][ T108] mount_bdev+0x287/0x3c0 [ 621.384487][ T108] legacy_get_tree+0xe6/0x180 [ 621.389370][ T108] vfs_get_tree+0x88/0x270 [ 621.394159][ T108] do_new_mount+0x24a/0xa40 [ 621.398799][ T108] __se_sys_mount+0x2e3/0x3d0 [ 621.403506][ T108] do_syscall_64+0x4c/0xa0 [ 621.408149][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.414182][ T108] [ 621.416642][ T108] Freed by task 4275: [ 621.420652][ T108] kasan_set_track+0x4b/0x70 [ 621.425273][ T108] kasan_save_free_info+0x2d/0x50 [ 621.430405][ T108] ____kasan_slab_free+0x126/0x1e0 [ 621.435589][ T108] slab_free_freelist_hook+0x131/0x1a0 [ 621.441099][ T108] __kmem_cache_free+0xb6/0x1f0 [ 621.446074][ T108] lmLogClose+0x293/0x520 [ 621.450429][ T108] jfs_umount+0x28f/0x360 [ 621.455160][ T108] jfs_put_super+0x88/0x190 [ 621.459956][ T108] generic_shutdown_super+0x130/0x340 [ 621.465761][ T108] kill_block_super+0x7c/0xe0 [ 621.470548][ T108] deactivate_locked_super+0x93/0xf0 [ 621.475890][ T108] cleanup_mnt+0x42c/0x4b0 [ 621.480433][ T108] task_work_run+0x1d0/0x260 [ 621.485327][ T108] exit_to_user_mode_loop+0xe6/0x110 [ 621.490782][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 621.496466][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 621.502221][ T108] do_syscall_64+0x58/0xa0 [ 621.506667][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.512841][ T108] [ 621.515184][ T108] Last potentially related work creation: [ 621.520997][ T108] kasan_save_stack+0x3a/0x60 [ 621.526093][ T108] __kasan_record_aux_stack+0xb2/0xc0 [ 621.531602][ T108] insert_work+0x54/0x3c0 [ 621.536315][ T108] __queue_work+0xba3/0xfb0 [ 621.541211][ T108] queue_work_on+0x124/0x1f0 [ 621.545832][ T108] blk_update_request+0x593/0xe30 [ 621.551167][ T108] blk_mq_end_request+0x3a/0x70 [ 621.556269][ T108] blk_flush_complete_seq+0x5ad/0xc30 [ 621.561877][ T108] flush_end_io+0x726/0xa50 [ 621.566501][ T108] __blk_mq_end_request+0x475/0x550 [ 621.571821][ T108] blk_done_softirq+0x100/0x150 [ 621.576707][ T108] handle_softirqs+0x2a1/0x930 [ 621.581503][ T108] run_ksoftirqd+0xa4/0x100 [ 621.586128][ T108] smpboot_thread_fn+0x64a/0xa40 [ 621.591312][ T108] kthread+0x29d/0x330 [ 621.595604][ T108] ret_from_fork+0x1f/0x30 [ 621.600269][ T108] [ 621.602761][ T108] Second to last potentially related work creation: [ 621.609462][ T108] kasan_save_stack+0x3a/0x60 [ 621.614531][ T108] __kasan_record_aux_stack+0xb2/0xc0 [ 621.620118][ T108] kvfree_call_rcu+0x103/0x870 [ 621.624922][ T108] batadv_hard_if_event+0x781/0x1550 [ 621.630429][ T108] raw_notifier_call_chain+0xcb/0x160 [ 621.635931][ T108] unregister_netdevice_many+0x1086/0x1930 [ 621.641883][ T108] default_device_exit_batch+0x9e6/0xa80 [ 621.647555][ T108] cleanup_net+0x791/0xba0 [ 621.652147][ T108] process_one_work+0x8a2/0x1160 [ 621.657583][ T108] worker_thread+0xaa2/0x1270 [ 621.662289][ T108] kthread+0x29d/0x330 [ 621.666485][ T108] ret_from_fork+0x1f/0x30 [ 621.671270][ T108] [ 621.673761][ T108] The buggy address belongs to the object at ffff8880748c7000 [ 621.673761][ T108] which belongs to the cache kmalloc-1k of size 1024 [ 621.688098][ T108] The buggy address is located 216 bytes inside of [ 621.688098][ T108] 1024-byte region [ffff8880748c7000, ffff8880748c7400) [ 621.702104][ T108] [ 621.704652][ T108] The buggy address belongs to the physical page: [ 621.711174][ T108] page:ffffea0001d23000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x748c0 [ 621.721449][ T108] head:ffffea0001d23000 order:3 compound_mapcount:0 compound_pincount:0 [ 621.730179][ T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 621.738286][ T108] raw: 00fff00000010200 ffffea0001f30c00 dead000000000003 ffff888017441dc0 [ 621.746995][ T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 621.756018][ T108] page dumped because: kasan: bad access detected [ 621.762712][ T108] page_owner tracks the page as allocated [ 621.768555][ T108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4275, tgid 4275 (syz-executor), ts 81634051888, free_ts 81603972924 [ 621.790740][ T108] post_alloc_hook+0x173/0x1a0 [ 621.795718][ T108] get_page_from_freelist+0x1a1e/0x1ab0 [ 621.801301][ T108] __alloc_pages+0x1ec/0x4f0 [ 621.806016][ T108] alloc_slab_page+0x5d/0x160 [ 621.811070][ T108] new_slab+0x87/0x2c0 [ 621.815334][ T108] ___slab_alloc+0xbc6/0x1240 [ 621.820229][ T108] __kmem_cache_alloc_node+0x1a0/0x260 [ 621.825800][ T108] __kmalloc_node+0xa0/0x240 [ 621.830421][ T108] qdisc_alloc+0x95/0xa50 [ 621.834905][ T108] qdisc_create_dflt+0x5f/0x4b0 [ 621.839878][ T108] dev_activate+0x393/0x11a0 [ 621.844767][ T108] __dev_open+0x343/0x430 [ 621.849299][ T108] __dev_change_flags+0x20d/0x6a0 [ 621.854874][ T108] dev_change_flags+0x82/0x1a0 [ 621.860137][ T108] do_setlink+0xba1/0x3e60 [ 621.864785][ T108] rtnl_newlink+0x177c/0x2080 [ 621.869581][ T108] page last free stack trace: [ 621.874452][ T108] free_unref_page_prepare+0x8b4/0x9a0 [ 621.880041][ T108] free_unref_page+0x2e/0x3f0 [ 621.884833][ T108] __unfreeze_partials+0x1a5/0x200 [ 621.890151][ T108] put_cpu_partial+0x17c/0x250 [ 621.894938][ T108] qlist_free_all+0x76/0xe0 [ 621.899464][ T108] kasan_quarantine_reduce+0x144/0x160 [ 621.904944][ T108] __kasan_slab_alloc+0x1e/0x80 [ 621.910000][ T108] slab_post_alloc_hook+0x4b/0x480 [ 621.915502][ T108] __kmem_cache_alloc_node+0x140/0x260 [ 621.921442][ T108] kmalloc_trace+0x26/0xe0 [ 621.926020][ T108] netdevice_event+0x325/0x900 [ 621.930855][ T108] raw_notifier_call_chain+0xcb/0x160 [ 621.936428][ T108] __dev_notify_flags+0x194/0x300 [ 621.941569][ T108] dev_change_flags+0xe3/0x1a0 [ 621.946766][ T108] do_setlink+0xba1/0x3e60 [ 621.951310][ T108] rtnl_newlink+0x177c/0x2080 [ 621.956656][ T108] [ 621.959184][ T108] Memory state around the buggy address: [ 621.965378][ T108] ffff8880748c6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 621.973643][ T108] ffff8880748c7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 621.982081][ T108] >ffff8880748c7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 621.990348][ T108] ^ [ 621.997307][ T108] ffff8880748c7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 622.006089][ T108] ffff8880748c7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 622.014443][ T108] ================================================================== [ 622.022795][ T108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 622.030356][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 622.037718][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.047804][ T108] Call Trace: [ 622.051111][ T108] [ 622.054068][ T108] dump_stack_lvl+0x188/0x24e [ 622.058872][ T108] ? memcpy+0x3c/0x60 [ 622.062967][ T108] ? show_regs_print_info+0x12/0x12 [ 622.068366][ T108] ? load_image+0x400/0x400 [ 622.073082][ T108] panic+0x2e5/0x730 [ 622.077135][ T108] ? __lock_acquire+0x7d10/0x7d10 [ 622.082275][ T108] ? bpf_jit_dump+0xd0/0xd0 [ 622.086898][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 622.092910][ T108] ? _raw_spin_unlock+0x40/0x40 [ 622.097792][ T108] check_panic_on_warn+0x80/0xa0 [ 622.102847][ T108] ? __lock_acquire+0x106/0x7d10 [ 622.107817][ T108] end_report+0x66/0x110 [ 622.112187][ T108] kasan_report+0x118/0x140 [ 622.117003][ T108] ? __lock_acquire+0x106/0x7d10 [ 622.121999][ T108] __lock_acquire+0x106/0x7d10 [ 622.127006][ T108] ? mark_lock+0x94/0x320 [ 622.131545][ T108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 622.137681][ T108] ? lock_chain_count+0x20/0x20 [ 622.142828][ T108] ? __schedule+0x119d/0x40e0 [ 622.147544][ T108] ? verify_lock_unused+0x140/0x140 [ 622.152872][ T108] ? finish_task_switch+0x265/0x8f0 [ 622.158202][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 622.163537][ T108] ? finish_task_switch+0x265/0x8f0 [ 622.169377][ T108] ? __schedule+0x11d9/0x40e0 [ 622.174194][ T108] lock_acquire+0x1bb/0x4a0 [ 622.179083][ T108] ? __mutex_lock+0x27d/0xaf0 [ 622.184064][ T108] ? mutex_spin_on_owner+0x1b4/0x350 [ 622.189379][ T108] ? read_lock_is_recursive+0x10/0x10 [ 622.194883][ T108] _raw_spin_lock+0x2a/0x40 [ 622.199518][ T108] ? __mutex_lock+0x27d/0xaf0 [ 622.204321][ T108] __mutex_lock+0x27d/0xaf0 [ 622.209114][ T108] ? jfs_syncpt+0x21/0x90 [ 622.213814][ T108] ? txEnd+0x2d4/0x520 [ 622.218098][ T108] ? mutex_lock_nested+0x10/0x10 [ 622.223236][ T108] ? __rwlock_init+0x140/0x140 [ 622.228024][ T108] jfs_syncpt+0x21/0x90 [ 622.232214][ T108] txEnd+0x2e1/0x520 [ 622.236148][ T108] jfs_lazycommit+0x5a0/0xa70 [ 622.240857][ T108] ? txFreelock+0x5a0/0x5a0 [ 622.245647][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 622.251573][ T108] ? do_task_dead+0xd0/0xd0 [ 622.256115][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 622.262300][ T108] ? __kthread_parkme+0x162/0x1c0 [ 622.267604][ T108] kthread+0x29d/0x330 [ 622.271894][ T108] ? txFreelock+0x5a0/0x5a0 [ 622.276436][ T108] ? kthread_blkcg+0xd0/0xd0 [ 622.281321][ T108] ret_from_fork+0x1f/0x30 [ 622.285874][ T108] [ 622.289554][ T108] Kernel Offset: disabled [ 622.293985][ T108] Rebooting in 86400 seconds..