last executing test programs: 5.77925095s ago: executing program 3 (id=1899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)="b8c12fe661625bea691ff39b0d109d05ffc9f9a1b1738051c2a8d961cb80d606d1efceeeb63817fb5c5dca8f4cdba9b87fb12922829bcc8aa7b61d6a3294a176570b6feef79ad28ae1725f0e36f5ea8d5be57ba7d8296d11c26f", 0x5a}, {0x0}], 0x2, 0x0, 0x0, 0x800a0}}], 0x1, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 5.095162775s ago: executing program 3 (id=1903): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008810}, 0x20000000) 4.898763385s ago: executing program 3 (id=1904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@local, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x8000000000000001, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4.559962893s ago: executing program 3 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x4, 0x0, 0x56b}]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 4.492434537s ago: executing program 1 (id=1907): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) io_uring_setup(0x9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vimc2(0xffffff9c, &(0x7f0000001900), 0x2, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @note={0x0, 0x1, 0x2, 0xe, 0x49c3}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x3ec, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x1f4, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x448) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x24) 4.147252115s ago: executing program 3 (id=1908): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x95) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000000001306e53f1b001900002a9000470900be00b3000001000b09007a15b3ac"], 0x0}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 3.920143066s ago: executing program 0 (id=1910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 3.45910913s ago: executing program 2 (id=1912): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 3.290072389s ago: executing program 2 (id=1913): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x8}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.242859151s ago: executing program 1 (id=1914): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) 3.219956313s ago: executing program 0 (id=1915): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) dup3(0xffffffffffffffff, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000080)={0x5, r3, 'id1\x00'}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000380)='G') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) 2.477661851s ago: executing program 2 (id=1916): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.30711553s ago: executing program 1 (id=1917): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 2.210615325s ago: executing program 1 (id=1918): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x18) dup3(0xffffffffffffffff, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000080)={0x5, r3, 'id1\x00'}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000380)='G') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) 2.087203791s ago: executing program 2 (id=1919): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0x4f2c, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) 1.650302464s ago: executing program 0 (id=1920): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0xc40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.638416904s ago: executing program 3 (id=1921): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f0000000340)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/kO/vmmdknAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID4/vd+sNKJiGs/TwuWIj4TvYhuxEJdL0fEwvJSXr8fEc/FTnM8GxGDuYj69jv/PB3xakR89FTE1vb6ar344iH78d0//v13P3zirb/9YXD+v3+603tt0np37/7qP3++d7RtBgAAgNJUVVV10sf8M+nzfbftTgEAU5Ff/6skLz/19a//+dZfZqk/arVarVZPoW6qxrvXLCJio3mb+j2Dw/EAcMJsxMdtd4EWyb9o/Yh4ou1OADOt03YHOBZb2+urnZRvp/l6sLzbns8F2Zf/RufB9R2TpgcZPcdkWvvXZvTimQn9WZhSH2ZJzr87mv+13fZhWu+485+WSfkPdy99Kk7Ovzea/4jTk393bP6lyvn3Hyn/nvwBAAAAAGCG5b//L7V8/Hfu6JtyKJ90/Hd5Sn0AAAAAAAAAgMftqOP/PWD8PwAAAJhZ9Wf12m+e2ls26bvY6uVXOxFPjqwPFCZdLLPYdj8AAAAAAAAAAAAAoCT93XN4r3YiBhHx5OJiVVX1T9No/aiOevuTrvTth5K1/SQPAAC7Pnpq5Fr+TsR8RFxN3/U3WFxcrKr5hcVqsVqYy+9nh3Pz1ULjc22e1svmhod4Q9wfVvUvm2/crumgz8sHtY/+vvq+hlXvEB17TAbpf3NCc0thA0Cy+2q05RXplKmqpye9+YB9PP5PoaVYanu/Yva1vZsCAAAAx6+qqqqTvs77TDrm3227UwDAVOTX/9HjAkequxPaIx7P71er1Wq1Wv2p6qZqvHvNIiI2mrep3zMYjh8ATpiN+LjtLtAi+RetHxHPtd0JYKZ12u4Ax2Jre321k/LtNF8P0vju+VyQfflvdHZul28/bnqQ0XNMprV/bUYvnpnQn2en1IdZkvPvjuZ/bbd9mNY77vynZVL+w51L5sqT8++N5j/i9OTfHZt/qXL+/UfKvyd/AAAAAACYYfnv/0uO/+ZNBgAAAAAAAIATZ2t7fTVf95qP/39uzHqu/zydcv6dR81/Ic3L/0TL+XdH8v/yyHq9xvz9N/ce///eXl/9/Z1/fTZPD5v/XJ7ppD2rk/aITrqnTj9Nj7J1D9sc9Ib1PQ063V4/nfNTDd6JG3Ez1uLCvnW76f9jr31lX3vd08G+9ov72vsPtV/a1z5I3ztQLeT2c7EaP4mb8fZOe902d8D2zx/QXh3QnvPvef4vUs6/3/ip819M7Z2Rae3+h92HHvfN6bj7eePG53954fg350CbMT92eb19Z6fem9h9xnliGD+7vXbr3N3rd+7cWok02bf0YqTJY5bzH+z8zO09/7+w256f95uP1/sfDh85/1mxGf0H+3ZTnf8Ljfl6e1+act/akPMfpp+c/9upffzj/yTn35uY/8st9AcAAAAAAAAAAAAAAAA+SVVVO5eIvhERl9P1P21dmwkATFd+/a+SvFytVqvVavXpq5uq8V5vFhHx1+Zt6vcMvxj3ywCAWfa/iPhH252gNfIvWP6+v3r6YtudAabq9vsf/Oj6zZtrt2633RMAAAAAAAAA4NPK438uN8Z/fjEilkbW2zf+65uxfNTxP/t55sEAo495oO8JNrvDXrcx3PjzsTM+97lJ43+fjYfH/85j4vaa2zHB4ID24QHtcwe0jx/NeC+tsRd6NOT8n2+Md17nf2Zk+PUSxn8dHfO+BDn/s439uc7/SyPrNfOvfjtz+W8cdsXN6O7L//yd9356/vb7H7xy473r7669u/bjSysrFy5dvnzlypXz79y4uXZh99/j6fUMyPnnsa+dB1qWnH/OXP5lyfl/IdXyL0vO/4upln9Zcv75/Z78y5Lzz5995F+WnP9LqZZ/WXL+X0m1/Muytb0+V+f/cqrlX5b8+P9qquVflpz/K6mWf1ly/udSLf+y5PzPp/oQ+ft6+FMk55+PcHn8lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xch113cAP7MXe+0QYiAEJzWwSUwwzpJdX+ILrRsTrg1QCiQUesF2vWuz4BteuwSKZNNAiYRRUUXV9KEtINRGqiqsigdaUZqHqpen0j7Ql4qqElKjKqCAitRWlK1mzv//98zs7Mysd7yePf/PR7J/uzNn5pw5c2Z2v2t/9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7O43zH2mVhRF/U/jry1F8YL6x5smtzQue93N3kIAAABgtf6v8ffzt6ULDvdxo6Zl/u4V//i1xcXFxeJ9o787/oXFxXTFZFGMbyyKxnXR1X9/f615meCJYqI20vT5SI/Vj/a4fqzH9eM9rt/Q4/qNPa6f6HH9kh2wxKby5zGNO9ve+HBLuUuL24vxxnXbO9zqidrGkZH4s5yGWuM2i+MnivniVDFXzLQsXy5bayz/jbvr63prEdc10rSubfUj5AefOB63oRb28faWdV27z+h7ry8mf/iDTxz/4wvP3dlp9twNLfdXbueOe+rb+alwSbmttWJj2idxO0eatnNbh+dktGU7a43b1T9u387n+9zO0Wubuaban/OJYqTx8bca+2ms+cd6aT9tC5f9971FUVy+ttntyyxZVzFSbG65ZOTa8zNRHpH1+6gfSi8uxlZ0nN7dx3Fan7PbW4/T9tdEfP7vDrcbW2Ybmp+m731yw5LnfaXHaVR/1Mu9VtqPwUG/VoblGIzHxbcaD/rJjsfg9vD4P3Hf8sdgx2OnwzGYHnfTMXhPr2NwZMNoY5vTk1Br3ObaMbirZfnRxppqjfnsfd2PwekLp89NL3zs46+dP33s5NzJuTN7du2a2bNv34EDB6ZPzJ+amyn/vs69Pfw2FyPpNXBP2HfxNfDqtmWbD9XFLw3udTjR5XW4pW3ZQb8Ox9ofXG1tXpBLj+nytfFofadPXBkplnmNNZ6fnat/HabH3fQ6HGt6HXb8mtLhdTjWx+uwvsy5nf19zzLW9KfTNtyorwVbmo7B9u9H2o/BQX8/MizH4EQ4Lv515/JfC7aF7X1yaqXfj4wuOQbTww3vPfVL0vf7Ewcao9NxeVf9ils2FBcX5s4/8PixCxfO7yrCWBMvaTpW2o/XzU2PqVhyvI6s+Hg9PP+KJ+/qcPmWsK8mXlv/a2LZ56q+zN4Huj9Xja9unfdny6W7izAGbK33Z6ev5vX9mbJkl/1ZX+ZT06v/Xjzl0qb33/Fl3n9j7v9Jub50V0+Mjo+Vr9/RtHfGW96PW5+qscZ7V62x7uen+3s/Hg9/1vr9+PYu78db25Yd9PvxePuDi+/HtV4/7Vid9udzIhwnp2a6vx/Xl9m6e6XH5FjX9+N7w6yF/f+akBRSLmo6dpY7btO6xsbGw+Mai2toPU73tCw/HrJZfV1P776+43THveV9jaZHd81aHaeTbcsO+jhN71fLHae1Xj99uz7tz+dEOC5u39P9OK0v88ze1b93boofNr13buh1DI6Pbqhv83g6CMv3+8VN8Rh8oDhenC1OFbONazc0jqdaY11TD/Z3DG4If9b6vXJrl2NwR9uygz4G09ex5Y692tjSBz8A7c/nRDgunnqw+zFYX+aN+wf7veuOcElapul71/afry33M6+72nbTjfyZV307/2Z/95/N1pc5dWClObP7fro/XHJLh/3U/vpd7jU1W6zNftoatvO5A8vvp/r21Jf5wsE+j6fDRVFc+sjDjZ/3hn9f+fOL3/5ay7+7dPo3nUsfefj7t57425VsPwDr30/Ksbn8Wtf0L1P9/Ps/AAAAsC7E3D8SZiL/AwAAQGXE3B//V3gi/wMAAEBlxNw/FmaSSf7f+sbn5n9yqUjN/MUgXp92wyPlcrHjOhM+n1y8pn75w1+Z+9FfXupv3SNFUfz4kd/ouPzWR+J2lSbDdl59U+vlS294qa/1H33s2nLN/fUvhvuPj6ffw6BTBXemKIpv3Pa5xnom33+lMZ955Ghjvvvyk0/Ul3n+YPl5vP2zLymX/4NQ/j184ljL7Z8N++G7Yc68rfP+iLf76pXXbNv/3mvri7er3fPCxsN+6gPl/cbfk/P5J8rl435ebvv/6rNPf7W+/OOv6rz9l0Y6b//T4X6/Eub/vLxcvvk5qH8eb/fpsP1xffF2D3z5mx23/+pnyuXPvblc7miYcf07wufb3/zcfPP+erx2rOVxFW8pl4vrn/n2bzeuj/cX7799+yeOXGnZH+3HxzP/XN7PdNvy8fK4nugv2tZfv5/m4zOu/+nfOtqyn3ut/+q7n315/X7b139/23Kjbbdv/41Nf/jpz3VcX9yew392ruXxHH5XeB2H9T/1gXA8huv/9+rnWtYbHX1X6/tPXP6LWy61PJ7orT8s13/1oZON+R+TP/r9W15w6wsvv7K+74riW+8p76/X+k/+0dmW7f/SHTsbz0e8Pnb029e/nLj+8x+dOnN24eL8bNNebfzunLeX27NxYtPm+vbeFt5b2z8/cvbCB+fOT85MzhTFZHV/hd51+3KY3y/H5ZXefudj4fm86/e+sfm+f/psvPxfHi0vv/K28uvWq8Nynw+Xbymfv8XaKtf/1N13NF7ftWfKz1t67AOwbft/HuhrwfD4278viMf7uZd+sLEf6tc1vm7E1/Uqt/87s+X9fD3s18Xwm5nvuePa+pqXj78b4cp7ytf7qvdfeJuLz+ufhOf7Hd8t7z9uV3y83wnfx3xza+v7XTw+vn5ppP3+G7/F43J4Pykul9fHpeL+vvL8HR03L/4ekuLynY3Pfyfdz50repjLWfjYwvSp+TMXH5++MLdwYXrhYx8/cvrsxTMXjjR+l+eRD/W6/bX3p82N96fZuX17i5lNRVGcLWbW4A3rxmx//aP+tv/cY8dn98/cNzt34tjFExceOzd3/uTxhYXjc7ML9x07cWLuo71uPz97aNfug3v27546OT976MDBg3sOTs2fOVvfjHKjetg38+GpM+ePNG6ycGjvwV0PPrh3Zur02dm5Q/tnZqYu9rp942vTVP3Wvz51fu7UsQvzp+emFuY/Pndo18F9+3b3/G2Ap8+dWJicPn/xzPTFhbnz0+VjmbzQuLj+ta/X7ammhX8rv59tVyt/EV/xzvv3pd/PWveVTy57V+Uibb9A9Lnwu2j+4UXnDvTzecz942EmmeR/AAAAyEHM/RvCTOR/AAAAqIyY+zeGmcj/AAAAUBkx90+EmWSS//X/9f/76/+X1+v/59X/P/eRsle63vv/sT+v/5+Hm9z/X/X69f/1/6vX/++/P7/et1//X/+fpYat/x9z/6aiyDL/AwAAQA5i7t8cZiL/AwAAQGXE3H9LmIn8DwAAAJURc/8Lwkwyyf/6/331/3f3KlxVv//v/P/6/8X67P/HJ0f/Pxsr7t+/99GWT/X/A/1//X/9f/1//X9WbXzZa25W/z/m/lvDTDLJ/wAAAJCDmPtfGGYi/wMAAEBlxNx/W5iJ/A8AAACVEXP/ljCTTPK//r/z/+v/6/9Xuv+/2vP/N22M/v/64Pz/3en/93Dd/f8J/f/12P8fH+z2D3f/v+fm6/9zQwzb+f9j7n9RmEkm+R8AAAByEHP/i8NM5H8AAACojJj7XxJmIv8DAABAZcTcf3uYSSb5X/9f/1//X/9f/7/z+nuf/7/8SP9/uOj/d6f/34Pz/+fV/x/w9g93/3/Q5/8ff1P77fX/6WTY+v8x9780zCST/A8AAAA5iLn/jjAT+R8AAAAqI+b+l4WZyP8AAABQGTH3bw0zyST/6//r/+v/6//r/3def+/+f0n/f7jo/3en/9+D/r/+v/5/f/3/Dt/86v/TybD1/2PuvzPMJJP8DwAAADmIuf+uMBP5HwAAACoj5v6fCjOR/wEAAKAyYu7fFmaSSf7X/9f/1//Pq/9//wb9f/3/atP/707/vwf9f/1//f8+z/+/1Er6/xt73RmVMWz9/5j7Xx5mkkn+BwAAgBzE3P+KMBP5HwAAACoj5v5XhpnI/wAAAFAZMfdPhplkkv/1/6vV///Tv37qlYX+v/5/j/UPov9fC5cOUf8/HgZD3/9/SP//htL/707/vwf9f/1//f816f+Tj2Hr/8fcf3eYSSb5HwAAAHIQc/89YSbyPwAAAFRGzP33hpnI/wAAAFAZMfdvDzPJJP/r/1er/x/p/+v/d1u/8/87/3+V6f930PQi1f/vQf9f/z/7/n/87lf/n8EYtv5/zP2vCjPJJP8DAABADmLuvy/MRP4HAACAyoi5/9VhJvI/AAAAVEbM/TvCTDLJ//r/+v/6//r/+v+d16//vz7p/3e30v7/Bv1//X/9/8z6/6s7//+m8LH+P9Gw9f9j7n9NmEkm+R8AAAByEHP/zjAT+R8AAAAqI/7/zfL/vcr/AAAAUEUx90+FmWSS//X/9f9z6v/X9P/1//X/K0//vzvn/+9B/1//X/9/Vf1/5/+n3bD1/2Puf22YSSb5HwAAAHIQc/8DYSbyPwAAAFRGzP3TYSbyPwAAAFRGzP0zYSaZ5H/9f/3/nPr/zv+v/6//X336/93p//eg/6//X7X+f1Ho/3NTDVv/P+b+XWEmmeR/AAAAyEHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx9+8NM8kk/+v/6//r/+v/6/93Xr/+//qk/9+d/n8P+v/6/1Xr/zv/PzfZsPX/Y+5/MMwkk/wPAAAAOYi5f1+YifwPAAAAlRFz//4wk5D/O/2/bgAAAGB9ibn/QJhJJv/+r/9fkf7/b/59y7r1//X/u61/MP3/Tfr/Yer/D5eK9v/bXxbXTf+/B/1//X/9f/1/BmrY+v8x9x8MM8kk/wMAAEAOYu5/XZiJ/A8AAACVEXP/T4eZyP8AAABQGTH3/0yYSSb5X/+/Iv3/Nvr/+v/d1u/8//r/VVbR/v/AVKr/P6L/r/8/XNuv/6//z1I3vv8fP+qv/x9z/6Ewk0zyPwAAAOQg5v6fDTOR/wEAAKAyYu5/KMxE/gcAAIDKiLn/cJhJJvlf/1//X/9f///G9P8fKtoNY/+/fvDo/1eL/n93ler/O/+//v+Qbb/+v/4/Sw3b+f9j7n99mEkm+R8AAAByEHP/w2Em8j8AAABURsz9bwgzkf8BAACgMmLuf2OYSSb5X/9f/1//X//f+f87r1//f33S/+9O/78H/X/9f/1//X8Gatj6/zH3vynMJJP8DwAAADmIuf/NYSbyPwAAAFRGzP1vCTOR/wEAAKAyYu5/a5hJJvlf/1//X/9f/1//v/P69f/XJ/3/7vT/e9D/1//X/9f/Z6CGrf8fc//PhZlkkv8BAAAgBzH3PxJmIv8DAABAZcTc/7YwE/kfAAAAKiPm/reHmWSS//X/13H/f0z/X/9f/1//v/d6c6P/353+fw/6//r/+v/6/wzUsPX/Y+5/R5hJJvkfAAAAchBz/8+Hmcj/AAAAUBkx978zzET+BwAAgMqIuf8Xwkwyyf/6/+u4/1/J8/8vXmq+XcX6//XF9P9vVv+/fiP9/yzo/3en/99Dh/7/Rv1//X/9f/1/rtuw9f9j7n9XmEkm+R8AAAByEHP/u8NM5H8AAACojJj73xNmIv8DAABAZcTc/2iYSSb5X/8/y/5/esjD1/93/n/9f+f/1/9fner2/1d8Vx3p//fg/P/6//r/+v8M1LD1/2PufyzMJJP8DwAAADmIuf+9YSbyPwAAAFRGzP2/GGYi/wMAAEBlxNz/vjCTTPK//n+W/f8hPv9/1fr/Yy3HR079/4mm5zMdl/r/+v9roLr9/8HQ/+9B/1//f5j7/+Fo3rTM7fX/GUbD1v+Puf/9YSaZ5H8AAADIQcz9vxRmIv8DAABAZcTc/8thJvI/AAAAVEbM/b8SZpJJ/tf/1//X/3f+f+f/77x+/f/1Sf+/O/3/HvT/9f+Huf/fg/4/w2jY+v8x9/9qmMmywe/7/9XHwwQAAACGSMz9HwgzyeTf/wEAACAHMfcfCTOR/wEAAKAyYu4/GmaSSf7X/2/v/8czqur/6//r/+v/6/+vR4Pr/7/s1qLQ/69M/3+izw3Q/9f/1//X/2eghq3/H3P/sTCTTPI/AAAA5CDm/l8LM5H/AQAAoDJi7j8eZiL/AwAAQGXE3D8bZpJJ/r+J/f/x4ez/O///9fb/f6z/r/8f6P93pv+/Npz/v7ts+//90v/X/9f/1/9noIat/x9z/1yYSSb5HwAAACos/Tg45v4TYSbyPwAAAFRGzP0nw0zkfwAAAKiMmPs/GGaSSf53/n/9f+f/vxn9/7GW5fX/S/r/+v+DoP/fnf5/D/r/+v/6//r/DNSw9f9j7p8PM8kk/wMAAEAOYu7/UJiJ/A8AAACVEXP/h8NM5H8AAACojJj7T4WZZJL/9f/1/3Pv/9eK4rLz/+v/d1q//v/6pP/fnf5/D/r/+v/6//r/DNSw9f9j7j8dZpJJ/gcAAIAcxNx/JsxE/gcAAPh/9u6jObK76uN4P37GE9jAS/CaFUtYmZfAlh1VrCmSycEecgaTczDZ5JzB5JxzNjlHEw1Voqw558xI3bpXM7qjvvf//3w2B02N6JZHNvys+taFZuTuv3fcYv8DAABAM3L33ydu6WT/6//1/733/6utPP9/7+/X/5+j/9f/T2Gtvz+x+fcdFIUf2P/f6c7X3EP/r//X/w/S/+v/9f/sN7f+P3f/feOWTvY/AAAA9CB3//3iFvsfAAAAmpG7//5xi/0PAAAAzcjdf03c0sn+1//r//X/+v89/f9N+n/9/7J5/v8w/f8I/b/+X/+v/2dSc+v/c/c/IG7pZP8DAABAD3L3PzBusf8BAACgGbn7HxS32P8AAADQjNz9D45bOtn/+n/9v/5/Kf3/Sc//3/f16P/1/5vo/4fp/0fo//X/+n/9P5OaW/+fu/8hcUsn+x8AAAB6kLv/oXGL/Q8AAADNyN3/sLjF/gcAAIBm5O5/eNzSyf7X/+v/9f9L6f+P6fn/+n/9/8LdsDr/zwT9/zr9/4iR/n+10v8POXQ/v/nLW877P4D+X//Purn1/7n7HxG33HW1OnmpXyQAAAAwK7n7Hxm3dPLzfwAAAOhB7v5r4xb7HwAAAJqRu/+6uKWT/a//1//r//X/+v/Nr6//XybP/x929P7/jne41z377f+bef7/zqb/57L9fv6otv3+p+//b/vO0P+zbHPr/3P3n41bOtn/AAAA0IPc/Y+KW+x/AAAAaEbu/kfHLfY/AAAANCN3/2Pilk72v/6/tf7///d83gX9/27tov/X/+v/9f+t0/8P8/z/Ebv/mDtTHzbb/x9g2/380t+/5//r/1k3t/4/d/9j45ZO9j8AAAD0IHf/4+IW+x8AAACakbv/8XGL/Q8AAADNyN3/hLilk/2v/2+t/9/7eZ7/r//f9Pr6f/1/y/T/w/T/I1p5/v8lftdsu58/qm2/f/2//p91c+v/c/c/MW7pZP8DAABAD3L3Pylusf8BAACgGbn7nxy32P8AAADQjNz9T4lbOtn/+n/9/zL6/3wF/b/+//L3/0n/vzy30/+P0v+PaKX/v0Tb7ueX/v71//p/1s2t/8/d/9S4pZP9DwAAAD3I3f+0uMX+BwAAgGbk7n963GL/AwAAQDNy9z8jbulk/+v/9f/L6P89/1//7/n/+v/D0f8P0/+P0P/r//X/+n8mNbf+P3f/9XFLJ/sfAAAAepC7/5lxi/0PAAAAzcjd/6y4xf4HAACAZuTuf3bc0sn+1//r//X/+n/9/+bX1/8vk/5/mP5/hP5f/6//1/8zqRn1/xd81unVc+KWTvY/AAAA9CB3/3PjFvsfAAAAmpG7/3lxi/0PAAAAzcjd//y4pZP9r/+fTf+/m/O11f+fWa1W+v9Vp/3/mQv+POv7Uv+v/z8G+v9h+v8R+n/9v/5f/8+kZtT/736cu/8FcUsn+x8AAAB6kLv/hXGL/Q8AAADNyN3/orjF/gcAAIBm5O5/cdzSyf7X/8+m/9/VVv/v+f/7vz966v89/3+d/v946P+H6f9H6P/1//p//T+Tmlv/n7v/JXHTySsv+UsEAAAAZiZ3/0vjlk5+/g8AAAA9yN3/srjF/gcAAICFun7tV3L3vzxu6WT/6/+n7f9PXvBr+n/9//7vD/2//l//f/np/4fp/0fo//X/+n/9P5OaW/+fu/8VcUsn+x8AAAB6kLv/hrjF/gcAAIBm5O5/Zdxi/wMAAEAzcve/Km7pZP/r/z3/X/+v/9f/b359/f8y6f+H6f9H6P/1/9vt/0+d/4/6f9pwEf3/zs7OtZe9/8/d/+q4pZP9DwAAAE3a97PS3P2viVvsfwAAAGhG7v7Xxi32PwAAADQjd//r4pZO9r/+v9P+P7/Vl9X/X7da6f/1//p//f8w/f8w/f8I/b/+3/P/9f9Mam7P/8/d//q4pZP9DwAAAD3I3X9j3GL/AwAAQDNy978hbrH/AQAAoBm5+98Yt3Sy//X/nfb/nv+v/9f/H3f/f+tK/38sFtH/nzn49efe/5/V/+v/B3TX/9/tLns+1P/r/1k3t/4/d/+b4pZO9j8AAAD0IHf/m+MW+x8AAACakbv/LXGL/Q8AAADNyN3/1rjpRCf7X/+v/9f/6//1/5tf/5if/39ytVrp/yewiP5/wNz7/2me/7//7/Lz9P/6/yW/f/2//p91c+v/c/e/LW7pZP8DAABAD3L3vz1usf8BAACgGbn73xG32P8AAADQjNz974xbOtn/+n/9v/5f/998/392Ef2/5/9PRP8/bB79/8H0//r/Jb9//b/+n8PbVv+fu/9dcUsn+x8AAAB6kLv/3XGL/Q8AAADNyN3/nrjF/gcAAIBm5O5/b9zSyf7X/+v/L6b/z/ep/2+r/z81u/7/9J7/vk6e/6//n4j+f5j+f4T+X/+v/79e/8+U5vb8/9z974tbOtn/AAAA0IPc/e+PW//q1v4HAACAZuTu/0DcYv8DAABAM3L3fzBu6WT/6//1/57/r/9v/vn/+v+u6P+H6f9H6P/1//p/z/9nUnPr/3P3fyhu6WT/AwAAQA9y9384brH/AQAAoBm5+z8St9j/AAAA0Izc/TfFLZ3sf/2//l//r//X/5/7M9T/t0H/P+x4+v8z+n/9f/Xz/xd/F+j/9f9jn0+b5tb/5+7/aNzSyf4HAACAHuTu/1jcYv8DAABAM3L3fzxusf8BAABgkU5s+LXc/Z+IWzrZ//p//b/+X/+v/9/8+vr/ZdpK/5/fFPp/z/8P/fT/V+35aGnP/9//v1/6f/0/05tb/5+7/5NxSyf7HwAAAHqQu/9TcYv9DwAAAM3I3f/puMX+BwAAgGbk7v9M3NLJ/tf/6/+P0P+f1f/r//X/+v+58fz/Yfr/Efr/rT4/f+nvX/+v/2fd3Pr/3P2fjVs62f8AAADQg9z9n4tb7H8AAABoRu7+z8ct9j8AAAA0Y3f3Z1zW4f7X/+v/Pf9f/6//3/z6+v9l0v8P0/+P0P/r//X/+n8mNbf+/wu7n3V69cW4pZP9DwAAAD3I3f+luMX+BwAAgGbk7v9y3GL/AwAAQDNy938lbulk/+v/9f/L6P93dnau1f/r//d+Pef7/5v1/xT9/zD9/wj9v/5f/6//Z1Jz6/9z9381bulk/wMAAEAPcvd/LW6x/wEAAKAZufu/HrfY/wAAANCM3P3fiFs62f/6/xn0/6f1/57/r/9fef6//n8i+v9h+v8RLfb/pw//5W+7nz+qbb9//b/+n3Vz6/9z938zbulk/wMAAEAPcvd/K26x/wEAAKAZufu/HbfY/wAAANCM3P3fiVs62f/6/+Pr/2/7a9fL8//PrDa/f/2//l//r/+/3PT/w/T/I1rs/y/Ctvv5pb9//b/+n3Vz6/9z9383btk7/K68uK8SAAAAmJPc/d+LWzr5+T8AAAD0IHf/9+MW+x8AAACakbv/B3FLJ/tf/z+D5/832P97/v/m7w/9/6z7/yv0/23Q/w/T/4/Q/+v/9f8T9f/53az/793c+v/c/T+MWzrZ/wAAANCD3P0/ilvsfwAAAGhG7v4fxy32PwAAADQjd//NccsF+39T290K/b/+X/+v/9f/b359/f8y6f+HHbb/P7U6Wv+f9P/6f/1/r/2/5/9zztz6/9z9P4lb/PwfAAAAFufKA349d/9P4xb7HwAAAJqRu/9ncYv9DwAAAM3I3f/zuOWWK7b1lo6V/l//r//X/+v/N7++/n+Z9P/DPP9/hP5/in7+av1/G/3/aqX/5+jm1v/n7v9F3OLn/wAAANCM3P2/jFvsfwAAAGhG7v5fxS32PwAAADQjd/+v45ZO9r/+X/9/xP5/N83U/5+j/z9H/7+Z/v946P+H6f9H6P89/1//7/n/TGpu/X/u/t/ELZ3sfwAAAOhB7v7fxi32PwAAADQjd//v4hb7HwAAAJqRu//3cUsn+3/S/v/GqLAP0//HX2r9/+L7f8//1//r//X/s6L/H6b/H6H/1//r//X/TGpu/X/u/j/ELZ3sfwAAAOhB7v4/xi32PwAAADQjd/+f4hb7HwAAAJqRu//PcUsn+9/z//X/+n/9v/5/8+vr/5dJ/z9M/79Z/UHp//X/+n/9P5OaW/+fu/8vcUsn+x8AAAB6kLv/r3GL/Q8AAADNyN1/S9xi/wMAAEAzcvf/LW7pZP/r//X/+n/9v/5/8+vr/5dpVv3/Cf3/hZ9799uPv6zn/2+9/8+3oP/X/+v/mcTc+v/c/X+PWzrZ/wAAANCD3P3/iFvsfwAAAGhG7v5/xi32PwAAADQjd/+/4pZO9v9I/3+qfqP+f5D+f+/71/9v/v7Q/+v/9f+X36z6f8//X8zz/4v+3/P/9f/6fyY1t/4/d/+/45ZO9j8AAAD0IHf/rXGL/Q8AAADNyN3/n7jF/gcAAIBm5O7/b9zSyf73/P8l9f9X6//1//p//b/+f4T+f5j+f4T+X/9/Ee//qn0f6//1/6ybW/+fu/9/AQAA//9hG03z") unlink(&(0x7f0000000000)='./file1\x00') mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1.554416839s ago: executing program 2 (id=1922): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) io_uring_setup(0x9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vimc2(0xffffff9c, &(0x7f0000001900), 0x2, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @note={0x0, 0x1, 0x2, 0xe, 0x49c3}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x3ec, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x1f4, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x448) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x24) 1.126056351s ago: executing program 0 (id=1923): socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 1.009928167s ago: executing program 1 (id=1924): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 966.712579ms ago: executing program 0 (id=1925): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) 835.138186ms ago: executing program 1 (id=1926): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 385.69865ms ago: executing program 2 (id=1927): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$can_bcm(r0, &(0x7f0000000100), 0x10) 0s ago: executing program 0 (id=1928): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64042, 0x178) kernel console output (not intermixed with test programs): 0x0: -5 [ 513.532603][ T28] audit: type=1800 audit(1776765441.208:67): pid=10261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1210" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 514.159588][ T5812] usb 2-1: config 0 descriptor?? [ 514.196820][ T28] audit: type=1800 audit(1776765441.236:68): pid=10261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1210" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 515.368040][ T5812] hkems 0003:2006:0118.0008: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 515.425664][ T5812] hkems 0003:2006:0118.0008: no inputs found [ 515.445429][ T5812] hkems 0003:2006:0118.0008: force feedback init failed [ 515.697588][ T5812] usb 2-1: USB disconnect, device number 19 [ 516.578457][T10279] loop3: detected capacity change from 0 to 128 [ 516.629558][T10279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 516.697539][T10279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.992887][T10286] loop2: detected capacity change from 0 to 256 [ 517.012953][T10286] exfat: Deprecated parameter 'namecase' [ 517.060425][T10286] exfat: Deprecated parameter 'namecase' [ 517.071273][T10286] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 517.097176][T10286] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 517.192344][T10286] overlay: filesystem on ./file0 not supported [ 517.283411][ T5811] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 517.487169][ T5811] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 517.495630][ T5811] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 517.505856][ T5811] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 517.561667][ T5811] usb 1-1: config 220 has no interface number 2 [ 517.568169][ T5811] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 517.613381][ T5811] usb 1-1: config 220 interface 0 has no altsetting 0 [ 517.620342][ T5811] usb 1-1: config 220 interface 76 has no altsetting 0 [ 517.641945][ T5811] usb 1-1: config 220 interface 1 has no altsetting 0 [ 517.666573][ T5811] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 517.682708][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.702437][ T5811] usb 1-1: Product: syz [ 517.706678][ T5811] usb 1-1: Manufacturer: syz [ 517.735015][ T5811] usb 1-1: SerialNumber: syz [ 517.973059][T10285] loop3: detected capacity change from 0 to 32768 [ 517.999456][ T5811] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 518.005994][ T5811] usb 1-1: No valid video chain found. [ 518.029223][ T5811] usb 1-1: selecting invalid altsetting 0 [ 518.064790][ T5811] usb 1-1: selecting invalid altsetting 0 [ 518.082761][ T5811] usbtest: probe of 1-1:220.1 failed with error -22 [ 518.130351][ T5811] usb 1-1: USB disconnect, device number 13 [ 518.152597][T10285] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 518.152597][T10285] [ 518.197774][T10285] ERROR: (device loop3): dbDiscardAG: -EIO [ 518.197774][T10285] [ 518.445993][T10291] loop2: detected capacity change from 0 to 40427 [ 518.457993][T10291] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 518.465273][T10291] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 518.500806][T10291] F2FS-fs (loop2): heap/no_heap options were deprecated [ 518.675568][T10291] F2FS-fs (loop2): invalid crc value [ 518.799201][T10291] F2FS-fs (loop2): Found nat_bits in checkpoint [ 519.589169][T10291] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 519.628941][T10291] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 520.685713][ T5767] syz-executor: attempt to access beyond end of device [ 520.685713][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 520.764205][ T5767] F2FS-fs (loop2): Remounting filesystem read-only [ 523.291285][T10333] loop2: detected capacity change from 0 to 512 [ 523.358301][T10333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 523.428309][T10333] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1226: bad orphan inode 131083 [ 523.522097][T10333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.716500][T10328] loop3: detected capacity change from 0 to 32768 [ 523.745905][T10323] loop0: detected capacity change from 0 to 32768 [ 523.758232][T10328] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1230 (10328) [ 523.768927][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.801565][T10328] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 523.852841][T10328] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 523.877165][T10323] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.936125][T10328] BTRFS info (device loop3): enabling disk space caching [ 523.956181][T10328] BTRFS info (device loop3): force clearing of disk cache [ 524.004812][T10328] BTRFS info (device loop3): use zlib compression, level 3 [ 524.043048][T10328] BTRFS info (device loop3): disk space caching is enabled [ 524.509127][T10323] XFS (loop0): Ending clean mount [ 524.599118][T10323] XFS (loop0): Quotacheck needed: Please wait. [ 524.652997][T10328] BTRFS info (device loop3): enabling ssd optimizations [ 524.703303][T10328] BTRFS info (device loop3): auto enabling async discard [ 524.773760][T10328] BTRFS info (device loop3): rebuilding free space tree [ 524.846446][T10328] BTRFS info (device loop3): disabling free space tree [ 524.854831][T10328] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 524.944411][T10328] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 525.012433][T10323] XFS (loop0): Quotacheck: Done. [ 525.181373][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.255608][ T5768] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 525.553627][T10383] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1240'. [ 527.139981][T10400] IPv6: NLM_F_CREATE should be specified when creating new route [ 527.181662][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 527.253153][T10405] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 528.493760][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.500543][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.766040][T10467] kvm: user requested TSC rate below hardware speed [ 534.699053][T10480] usb usb8: usbfs: process 10480 (syz.0.1264) did not claim interface 0 before use [ 536.530487][T10500] loop3: detected capacity change from 0 to 128 [ 536.626240][ T9199] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 536.663320][T10484] loop1: detected capacity change from 0 to 32768 [ 536.705419][T10484] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.1265 (10484) [ 536.772957][T10484] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 536.799555][T10484] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 536.846044][T10484] BTRFS info (device loop1): using free space tree [ 536.978922][T10514] loop0: detected capacity change from 0 to 256 [ 537.044437][T10514] FAT-fs (loop0): Directory bread(block 64) failed [ 537.220107][T10514] FAT-fs (loop0): Directory bread(block 65) failed [ 537.245658][T10514] FAT-fs (loop0): Directory bread(block 66) failed [ 537.284328][T10484] BTRFS info (device loop1): enabling ssd optimizations [ 537.291424][T10484] BTRFS info (device loop1): auto enabling async discard [ 537.314901][T10514] FAT-fs (loop0): Directory bread(block 67) failed [ 537.324486][T10514] FAT-fs (loop0): Directory bread(block 68) failed [ 537.339408][T10514] FAT-fs (loop0): Directory bread(block 69) failed [ 537.346160][T10514] FAT-fs (loop0): Directory bread(block 70) failed [ 537.495550][T10514] FAT-fs (loop0): Directory bread(block 71) failed [ 537.514476][T10514] FAT-fs (loop0): Directory bread(block 72) failed [ 537.577979][T10514] FAT-fs (loop0): Directory bread(block 73) failed [ 538.261910][ T5766] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 538.350960][T10534] loop2: detected capacity change from 0 to 256 [ 538.915101][T10543] sp0: Synchronizing with TNC [ 540.507046][T10558] loop0: detected capacity change from 0 to 512 [ 540.611381][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.639163][T10558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.848372][T10569] loop1: detected capacity change from 0 to 128 [ 540.873695][T10569] EXT4-fs (loop1): Test dummy encryption mode enabled [ 540.896110][T10571] loop3: detected capacity change from 0 to 128 [ 540.922564][T10569] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 540.924460][T10571] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 540.955678][T10569] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 540.979279][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.050096][T10571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.181124][T10575] loop0: detected capacity change from 0 to 8 [ 541.397389][T10569] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 541.564383][T10581] SQUASHFS error: lzo decompression failed, data probably corrupt [ 541.572595][T10581] SQUASHFS error: Failed to read block 0x0: -5 [ 541.579111][T10581] SQUASHFS error: Failed to read block 0xff: -5 [ 541.585752][T10581] SQUASHFS error: lzo decompression failed, data probably corrupt [ 541.593732][T10581] SQUASHFS error: Failed to read block 0x0: -5 [ 541.602236][T10581] SQUASHFS error: lzo decompression failed, data probably corrupt [ 541.611011][T10581] SQUASHFS error: Failed to read block 0x0: -5 [ 541.620506][T10581] SQUASHFS error: Failed to read block 0x6a4: -5 [ 541.626941][T10581] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 541.634252][T10581] SQUASHFS error: read_indexes: reading block [6a2:0] [ 541.641143][T10581] SQUASHFS error: Failed to read block 0x0: -5 [ 541.647649][T10581] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 541.655049][T10581] SQUASHFS error: read_indexes: reading block [6a2:0] [ 541.662127][T10581] SQUASHFS error: Failed to read block 0x0: -5 [ 541.681785][ T28] audit: type=1800 audit(1776765467.530:69): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1292" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 542.201871][ T28] audit: type=1800 audit(1776765467.558:70): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1292" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 542.234293][T10583] tun0: tun_chr_ioctl cmd 1074025677 [ 542.266073][T10583] tun0: linktype set to 0 [ 542.283590][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.705397][T10589] loop0: detected capacity change from 0 to 512 [ 542.771749][T10589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.784666][T10589] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.789787][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.952572][T10604] loop1: detected capacity change from 0 to 256 [ 544.018991][T10604] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 544.234201][T10613] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1303'. [ 544.539178][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 544.715309][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 546.717078][T10635] loop1: detected capacity change from 0 to 8 [ 546.958361][T10624] loop3: detected capacity change from 0 to 32768 [ 547.061804][T10624] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 547.113516][T10644] SQUASHFS error: lzo decompression failed, data probably corrupt [ 547.121965][T10644] SQUASHFS error: Failed to read block 0x0: -5 [ 547.128348][T10644] SQUASHFS error: Failed to read block 0xff: -5 [ 547.134850][T10644] SQUASHFS error: lzo decompression failed, data probably corrupt [ 547.142890][T10644] SQUASHFS error: Failed to read block 0x0: -5 [ 547.151240][T10644] SQUASHFS error: lzo decompression failed, data probably corrupt [ 547.159389][T10644] SQUASHFS error: Failed to read block 0x0: -5 [ 547.168527][T10644] SQUASHFS error: Failed to read block 0x6a4: -5 [ 547.175026][T10644] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 547.182337][T10644] SQUASHFS error: read_indexes: reading block [6a2:0] [ 547.190051][T10644] SQUASHFS error: Failed to read block 0x0: -5 [ 547.196376][T10644] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 547.203688][T10644] SQUASHFS error: read_indexes: reading block [6a2:0] [ 547.210613][T10644] SQUASHFS error: Failed to read block 0x0: -5 [ 547.363946][ T28] audit: type=1800 audit(1776765472.721:71): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 547.393039][ T28] audit: type=1800 audit(1776765472.740:72): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 547.481756][T10624] XFS (loop3): Ending clean mount [ 547.546393][T10624] XFS (loop3): Quotacheck needed: Please wait. [ 547.785586][T10624] XFS (loop3): Quotacheck: Done. [ 548.056426][ T28] audit: type=1800 audit(1776765473.573:73): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1308" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 548.833390][ T5768] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 550.527938][T10684] loop2: detected capacity change from 0 to 8 [ 550.825837][T10689] SQUASHFS error: lzo decompression failed, data probably corrupt [ 550.835166][T10689] SQUASHFS error: Failed to read block 0x0: -5 [ 550.841451][T10689] SQUASHFS error: Failed to read block 0xff: -5 [ 550.847874][T10689] SQUASHFS error: lzo decompression failed, data probably corrupt [ 550.855903][T10689] SQUASHFS error: Failed to read block 0x0: -5 [ 550.863274][ T28] audit: type=1800 audit(1776765476.201:74): pid=10689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1322" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 550.884171][T10689] SQUASHFS error: lzo decompression failed, data probably corrupt [ 550.892050][T10689] SQUASHFS error: Failed to read block 0x0: -5 [ 550.900752][T10689] SQUASHFS error: Failed to read block 0x6a4: -5 [ 550.908719][T10689] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 550.916343][T10689] SQUASHFS error: read_indexes: reading block [6a2:0] [ 550.923222][T10689] SQUASHFS error: Failed to read block 0x0: -5 [ 550.929524][T10689] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 550.936877][T10689] SQUASHFS error: read_indexes: reading block [6a2:0] [ 550.943784][T10689] SQUASHFS error: Failed to read block 0x0: -5 [ 551.042731][ T28] audit: type=1800 audit(1776765476.229:75): pid=10689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1322" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 551.151932][T10692] sp0: Synchronizing with TNC [ 554.023955][T10725] loop0: detected capacity change from 0 to 8 [ 554.256233][T10727] SQUASHFS error: lzo decompression failed, data probably corrupt [ 554.266464][T10727] SQUASHFS error: Failed to read block 0x0: -5 [ 554.275471][T10727] SQUASHFS error: Failed to read block 0xff: -5 [ 554.282459][T10727] SQUASHFS error: lzo decompression failed, data probably corrupt [ 554.290338][T10727] SQUASHFS error: Failed to read block 0x0: -5 [ 554.297470][ T28] audit: type=1800 audit(1776765479.409:76): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1334" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 554.318575][T10727] SQUASHFS error: lzo decompression failed, data probably corrupt [ 554.326482][T10727] SQUASHFS error: Failed to read block 0x0: -5 [ 554.334904][T10727] SQUASHFS error: Failed to read block 0x6a4: -5 [ 554.341510][T10727] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 554.348848][T10727] SQUASHFS error: read_indexes: reading block [6a2:0] [ 554.355662][T10727] SQUASHFS error: Failed to read block 0x0: -5 [ 554.361920][T10727] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 554.369333][T10727] SQUASHFS error: read_indexes: reading block [6a2:0] [ 554.376312][T10727] SQUASHFS error: Failed to read block 0x0: -5 [ 554.466416][ T28] audit: type=1800 audit(1776765479.438:77): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1334" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 559.281300][T10759] program syz.3.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.562636][T10776] loop1: detected capacity change from 0 to 1024 [ 560.644192][T10776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.849999][T10786] loop0: detected capacity change from 0 to 8 [ 560.851156][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.917227][T10786] SQUASHFS error: Failed to read block 0x1ec: -5 [ 560.938672][T10786] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 561.107165][T10789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1349'. [ 562.925483][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 562.966926][T10804] block nbd0: Unsupported socket: should be TCP or UNIX. [ 563.065110][T10802] loop0: detected capacity change from 0 to 8192 [ 563.105704][T10802] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 563.121698][T10802] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 563.133340][T10802] REISERFS (device loop0): using ordered data mode [ 563.140388][T10802] reiserfs: using flush barriers [ 563.300734][T10802] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 563.339481][T10802] REISERFS (device loop0): checking transaction log (loop0) [ 563.371475][T10802] REISERFS (device loop0): Using r5 hash to sort names [ 563.480542][T10802] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 564.504230][ T5811] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 564.740866][T10828] loop0: detected capacity change from 0 to 256 [ 564.766015][T10828] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 565.648391][ T5811] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 565.677722][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.700134][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.720884][T10833] loop1: detected capacity change from 0 to 128 [ 565.729109][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.730623][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.737031][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 565.793302][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.818690][T10833] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 565.826627][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.869352][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.871422][T10833] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 565.880997][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.975372][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.993496][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.015205][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.042441][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.051142][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.086435][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.104061][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.150789][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.168966][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.195853][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.204049][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.229172][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.255208][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.315482][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.337640][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.360421][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.408550][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.425335][ T5811] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 566.440968][ T5811] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 566.455096][ T5811] usb 3-1: Product: syz [ 566.462937][ T5811] usb 3-1: Manufacturer: syz [ 566.467798][ T5811] usb 3-1: SerialNumber: syz [ 566.494327][ T5811] usb 3-1: config 0 descriptor?? [ 566.524878][ T5811] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 566.846371][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 566.862535][ T5811] usb 3-1: USB disconnect, device number 16 [ 566.887220][ T5811] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 567.559163][T10850] loop1: detected capacity change from 0 to 32768 [ 567.608377][T10850] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 567.757922][T10850] XFS (loop1): Ending clean mount [ 567.874628][T10868] loop2: detected capacity change from 0 to 256 [ 568.016006][T10853] loop0: detected capacity change from 0 to 40427 [ 568.055677][T10853] F2FS-fs (loop0): invalid crc value [ 568.099965][T10853] F2FS-fs (loop0): Found nat_bits in checkpoint [ 568.259712][T10876] loop2: detected capacity change from 0 to 8 [ 568.314140][T10853] F2FS-fs (loop0): Start checkpoint disabled! [ 568.345198][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 568.512669][T10853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 568.608987][T10879] SQUASHFS error: lzo decompression failed, data probably corrupt [ 568.617102][T10879] SQUASHFS error: Failed to read block 0x0: -5 [ 568.623549][T10879] SQUASHFS error: Failed to read block 0xff: -5 [ 568.630121][T10879] SQUASHFS error: lzo decompression failed, data probably corrupt [ 568.638079][T10879] SQUASHFS error: Failed to read block 0x0: -5 [ 568.647074][T10879] SQUASHFS error: lzo decompression failed, data probably corrupt [ 568.655037][T10879] SQUASHFS error: Failed to read block 0x0: -5 [ 568.664418][T10879] SQUASHFS error: Failed to read block 0x6a4: -5 [ 568.670811][T10879] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 568.678235][T10879] SQUASHFS error: read_indexes: reading block [6a2:0] [ 568.685216][T10879] SQUASHFS error: Failed to read block 0x0: -5 [ 568.691463][T10879] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 568.698851][T10879] SQUASHFS error: read_indexes: reading block [6a2:0] [ 568.705813][T10879] SQUASHFS error: Failed to read block 0x0: -5 [ 568.759836][ T28] audit: type=1800 audit(1776765492.832:78): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1373" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 569.403871][ T28] audit: type=1800 audit(1776765492.851:79): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1373" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 569.868757][ T12] kworker/u4:1: attempt to access beyond end of device [ 569.868757][ T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 569.920384][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 569.930613][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 571.065717][T10894] loop1: detected capacity change from 0 to 256 [ 571.153294][T10884] loop3: detected capacity change from 0 to 32768 [ 571.176076][T10884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1376 (10884) [ 571.253043][T10884] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 571.281341][T10894] FAT-fs (loop1): Directory bread(block 64) failed [ 571.310066][T10894] FAT-fs (loop1): Directory bread(block 65) failed [ 571.324190][T10884] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 571.342245][T10894] FAT-fs (loop1): Directory bread(block 66) failed [ 571.349954][T10884] BTRFS info (device loop3): setting nodatacow, compression disabled [ 571.360180][T10894] FAT-fs (loop1): Directory bread(block 67) failed [ 571.368231][T10884] BTRFS info (device loop3): turning on flush-on-commit [ 571.375557][T10894] FAT-fs (loop1): Directory bread(block 68) failed [ 571.386675][T10884] BTRFS info (device loop3): trying to use backup root at mount time [ 571.397485][T10894] FAT-fs (loop1): Directory bread(block 69) failed [ 571.413669][T10894] FAT-fs (loop1): Directory bread(block 70) failed [ 571.422047][T10884] BTRFS info (device loop3): max_inline at 0 [ 571.432364][T10884] BTRFS info (device loop3): using free space tree [ 571.439400][T10894] FAT-fs (loop1): Directory bread(block 71) failed [ 571.455347][T10896] 9pnet_virtio: no channels available for device syz [ 571.464295][T10894] FAT-fs (loop1): Directory bread(block 72) failed [ 571.470898][T10894] FAT-fs (loop1): Directory bread(block 73) failed [ 571.597195][ T143] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 571.638655][T10884] BTRFS error (device loop3): failed to load root extent [ 571.648331][T10884] BTRFS warning (device loop3): try to load backup roots slot 1 [ 571.659006][ T6894] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 571.713084][T10884] BTRFS warning (device loop3): couldn't read tree root [ 571.737591][T10884] BTRFS warning (device loop3): try to load backup roots slot 2 [ 571.787173][ T143] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 571.825493][T10884] BTRFS warning (device loop3): couldn't read tree root [ 571.854146][T10884] BTRFS warning (device loop3): try to load backup roots slot 3 [ 571.955048][T10884] BTRFS info (device loop3): enabling ssd optimizations [ 571.962107][T10884] BTRFS info (device loop3): auto enabling async discard [ 572.012192][T10884] BTRFS info (device loop3): rebuilding free space tree [ 572.076601][T10884] BTRFS info (device loop3): checking UUID tree [ 572.179765][ T5811] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 572.353928][ T5768] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.382872][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 572.394401][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.418362][ T5811] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 572.434560][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.470367][ T5811] usb 1-1: config 0 descriptor?? [ 572.781863][ T5811] usbhid 1-1:0.0: can't add hid device: -71 [ 572.861281][ T5811] usbhid: probe of 1-1:0.0 failed with error -71 [ 573.035144][ T5811] usb 1-1: USB disconnect, device number 14 [ 573.114816][T10932] loop3: detected capacity change from 0 to 64 [ 574.082620][T10936] loop2: detected capacity change from 0 to 512 [ 574.239861][T10936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.269332][T10936] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.298971][T10919] loop1: detected capacity change from 0 to 32768 [ 574.383255][T10936] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.1387: Abort forced by user [ 574.405175][T10936] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 574.424638][ T5811] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 574.524318][T10919] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 574.524318][T10919] [ 574.578225][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.599078][T10919] ERROR: (device loop1): remounting filesystem as read-only [ 574.615399][T10942] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 574.615399][T10942] [ 574.653671][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.671164][T10919] jfs_create: dtInsert returned -EIO [ 574.685144][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.697585][T10919] ERROR: (device loop1): jfs_create: [ 574.697585][T10919] [ 574.714627][ T5811] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 574.732402][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.758626][ T5811] usb 1-1: config 0 descriptor?? [ 574.997528][T10934] loop3: detected capacity change from 0 to 32768 [ 575.080075][T10934] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.237605][ T5811] logitech-djreceiver 0003:046D:C71F.0009: unbalanced delimiter at end of report description [ 575.289442][T10934] XFS (loop3): Ending clean mount [ 575.302775][ T5811] logitech-djreceiver 0003:046D:C71F.0009: logi_dj_probe: parse failed [ 575.311861][ T5811] logitech-djreceiver: probe of 0003:046D:C71F.0009 failed with error -22 [ 575.454266][T10934] XFS (loop3): Quotacheck needed: Please wait. [ 575.604811][T10934] XFS (loop3): Quotacheck: Done. [ 575.616488][ T5811] usb 1-1: USB disconnect, device number 15 [ 575.775093][ T28] audit: type=1800 audit(1776765499.483:80): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1386" name="file2" dev="loop3" ino=4423 res=0 errno=0 [ 575.861602][ T5768] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.940442][T10959] loop2: detected capacity change from 0 to 128 [ 576.095294][ T967] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 576.305547][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 576.323228][ T967] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 576.354080][ T967] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 576.374191][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.420502][ T967] usb 2-1: Product: syz [ 576.425537][ T967] usb 2-1: Manufacturer: syz [ 576.430207][ T967] usb 2-1: SerialNumber: syz [ 576.431185][T10961] loop3: detected capacity change from 0 to 4096 [ 576.452308][ T967] usb 2-1: config 0 descriptor?? [ 576.483804][ T967] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 576.514527][T10966] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 576.514706][ T967] usb 2-1: Detected FT232R [ 576.606124][T10961] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 576.629096][T10961] Remounting filesystem read-only [ 576.732581][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 576.758994][ T967] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 576.992010][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 577.027022][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.045517][ T967] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 577.072188][ T8] usb 3-1: config 0 descriptor?? [ 577.134644][T10976] loop3: detected capacity change from 0 to 256 [ 577.304284][T10976] FAT-fs (loop3): Directory bread(block 64) failed [ 577.332965][T10976] FAT-fs (loop3): Directory bread(block 65) failed [ 577.361902][T10976] FAT-fs (loop3): Directory bread(block 66) failed [ 577.365121][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 577.402855][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 577.416391][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 577.425419][ T787] usb 2-1: USB disconnect, device number 20 [ 577.433426][T10976] FAT-fs (loop3): Directory bread(block 67) failed [ 577.453387][T10976] FAT-fs (loop3): Directory bread(block 68) failed [ 577.467853][T10976] FAT-fs (loop3): Directory bread(block 69) failed [ 577.497598][T10976] FAT-fs (loop3): Directory bread(block 70) failed [ 577.506492][ T8] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 577.550677][T10976] FAT-fs (loop3): Directory bread(block 71) failed [ 577.565066][ T8] [drm] Initialized udl on minor 2 [ 577.565754][ T787] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 577.588782][T10976] FAT-fs (loop3): Directory bread(block 72) failed [ 577.603443][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 577.607972][ T787] ftdi_sio 2-1:0.0: device disconnected [ 577.636858][T10976] FAT-fs (loop3): Directory bread(block 73) failed [ 577.685099][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 577.722166][ T8] usb 3-1: USB disconnect, device number 17 [ 577.731565][ T967] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 577.776692][ T967] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 579.005737][T10992] loop2: detected capacity change from 0 to 64 [ 579.102957][T10992] hfs: unable to locate alternate MDB [ 579.140431][T10992] hfs: continuing without an alternate MDB [ 579.234883][ T787] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 579.449511][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 579.467132][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.510131][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.552552][ T787] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.608302][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.646698][ T787] usb 1-1: config 0 descriptor?? [ 579.704711][ T787] hub 1-1:0.0: USB hub found [ 579.918463][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 579.933614][ T787] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 580.110685][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 580.128000][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 580.140029][ T8] usb 2-1: config 0 has no interface number 0 [ 580.158380][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 580.181590][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.192994][ T8] usb 2-1: Product: syz [ 580.197755][ T8] usb 2-1: Manufacturer: syz [ 580.209475][ T8] usb 2-1: SerialNumber: syz [ 580.226353][ T8] usb 2-1: config 0 descriptor?? [ 580.262100][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 580.375803][ T787] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 580.410333][ T787] hid-generic: probe of 0003:046D:C31C.000A failed with error -22 [ 580.501456][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 580.555411][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 580.798823][T11007] loop2: detected capacity change from 0 to 4096 [ 580.816376][T11007] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 580.863604][ T787] usb 1-1: USB disconnect, device number 16 [ 581.007532][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 581.011002][ T5811] usb 2-1: USB disconnect, device number 21 [ 581.055290][ T5811] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 581.090165][ T5811] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 581.131750][ T5811] quatech2 2-1:0.51: device disconnected [ 581.276264][ T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 581.513052][ T787] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 581.523821][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.539841][ T787] usb 4-1: config 0 descriptor?? [ 581.558890][ T787] cp210x 4-1:0.0: cp210x converter detected [ 581.740735][T11024] program syz.1.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.029024][ T787] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 582.076914][T11033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1417'. [ 582.159222][ T787] usb 4-1: cp210x converter now attached to ttyUSB0 [ 582.363263][ T787] usb 4-1: USB disconnect, device number 12 [ 582.408907][ T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 582.480038][ T787] cp210x 4-1:0.0: device disconnected [ 583.800614][T11051] loop0: detected capacity change from 0 to 128 [ 583.833361][T11051] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.847330][T11052] 9pnet_virtio: no channels available for device syz [ 583.881905][T11051] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 583.959988][T11051] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.159980][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 585.416580][T11073] loop3: detected capacity change from 0 to 512 [ 585.505829][T11073] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 585.548868][T11073] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 585.560193][T11073] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.1432: iget: bad i_size value: 12154757448730 [ 585.580259][T11073] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1432: couldn't read orphan inode 13 (err -117) [ 585.622293][T11073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.838243][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.861426][T11081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1433'. [ 585.974549][T11083] loop1: detected capacity change from 0 to 512 [ 586.033511][T11083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 586.105597][T11083] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1435: invalid indirect mapped block 6684672 (level 2) [ 586.161694][T11086] 9pnet_virtio: no channels available for device syz [ 586.180108][T11083] EXT4-fs (loop1): 1 truncate cleaned up [ 586.191171][T11083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.423703][T11083] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.1435: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 586.476707][T11083] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 586.577566][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.003019][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 589.212828][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 589.220280][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.252432][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 589.261556][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.283772][ T8] usb 3-1: config 0 descriptor?? [ 589.338516][ T967] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 589.349568][ T27] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 589.382947][T11119] loop3: detected capacity change from 0 to 8 [ 589.554136][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 589.575541][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 589.590095][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 589.611296][ T27] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 589.621001][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.645372][ T8] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 589.647542][ T27] usb 1-1: config 0 descriptor?? [ 589.684761][T11115] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 589.754945][T11121] SQUASHFS error: lzo decompression failed, data probably corrupt [ 589.763124][T11121] SQUASHFS error: Failed to read block 0x0: -5 [ 589.772377][T11121] SQUASHFS error: Failed to read block 0xff: -5 [ 589.779170][T11121] SQUASHFS error: lzo decompression failed, data probably corrupt [ 589.787375][T11121] SQUASHFS error: Failed to read block 0x0: -5 [ 589.796947][T11121] SQUASHFS error: lzo decompression failed, data probably corrupt [ 589.805096][T11121] SQUASHFS error: Failed to read block 0x0: -5 [ 589.815317][T11121] SQUASHFS error: Failed to read block 0x6a4: -5 [ 589.821801][T11121] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 589.829183][T11121] SQUASHFS error: read_indexes: reading block [6a2:0] [ 589.836164][T11121] SQUASHFS error: Failed to read block 0x0: -5 [ 589.842607][T11121] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 589.850024][T11121] SQUASHFS error: read_indexes: reading block [6a2:0] [ 589.856893][T11121] SQUASHFS error: Failed to read block 0x0: -5 [ 589.907540][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.931937][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.956948][ T967] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 589.966258][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.004501][ T28] audit: type=1800 audit(1776765512.607:81): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1445" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 590.349142][ T5812] usb 3-1: USB disconnect, device number 18 [ 590.392540][ T967] usb 2-1: config 0 descriptor?? [ 590.463210][ T28] audit: type=1800 audit(1776765512.635:82): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1445" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 590.584512][ T27] hid (null): unknown global tag 0xe [ 590.594286][ T27] itetech 0003:048D:8595.000B: unknown main item tag 0x0 [ 590.604587][ T27] itetech 0003:048D:8595.000B: unknown main item tag 0x0 [ 590.613744][ T27] itetech 0003:048D:8595.000B: unknown main item tag 0x0 [ 590.624076][ T27] itetech 0003:048D:8595.000B: unknown main item tag 0x0 [ 590.631374][ T27] itetech 0003:048D:8595.000B: unknown main item tag 0x0 [ 590.638735][ T27] itetech 0003:048D:8595.000B: unknown main item tag 0x0 [ 590.650165][ T27] itetech 0003:048D:8595.000B: unknown global tag 0xe [ 590.657425][ T27] itetech 0003:048D:8595.000B: item 0 0 1 14 parsing failed [ 590.674624][ T27] itetech: probe of 0003:048D:8595.000B failed with error -22 [ 590.881872][ T27] usb 1-1: USB disconnect, device number 17 [ 590.903232][ T967] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 590.923710][ T967] pyra 0003:1E7D:2CF6.000C: item fetching failed at offset 6/7 [ 590.933123][ T967] pyra 0003:1E7D:2CF6.000C: parse failed [ 590.938874][ T967] pyra: probe of 0003:1E7D:2CF6.000C failed with error -22 [ 592.495300][ T967] usb 2-1: USB disconnect, device number 22 [ 592.618046][T11141] loop1: detected capacity change from 0 to 256 [ 592.668956][T11141] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 593.196467][T11155] loop1: detected capacity change from 0 to 8 [ 593.626563][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 593.657598][T11163] SQUASHFS error: lzo decompression failed, data probably corrupt [ 593.665517][T11163] SQUASHFS error: Failed to read block 0x0: -5 [ 593.672113][T11163] SQUASHFS error: Failed to read block 0xff: -5 [ 593.678976][T11163] SQUASHFS error: lzo decompression failed, data probably corrupt [ 593.686832][T11163] SQUASHFS error: Failed to read block 0x0: -5 [ 593.696504][T11163] SQUASHFS error: lzo decompression failed, data probably corrupt [ 593.704607][T11163] SQUASHFS error: Failed to read block 0x0: -5 [ 593.714235][T11163] SQUASHFS error: Failed to read block 0x6a4: -5 [ 593.720687][T11163] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 593.728008][T11163] SQUASHFS error: read_indexes: reading block [6a2:0] [ 593.734978][T11163] SQUASHFS error: Failed to read block 0x0: -5 [ 593.741259][T11163] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 593.748590][T11163] SQUASHFS error: read_indexes: reading block [6a2:0] [ 593.755615][T11163] SQUASHFS error: Failed to read block 0x0: -5 [ 594.181766][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.188145][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.363270][ T28] audit: type=1800 audit(1776765516.264:83): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1458" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 594.486868][ T28] audit: type=1800 audit(1776765516.283:84): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1458" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 594.499884][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 594.596621][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.625379][ T27] usb 1-1: config 0 descriptor?? [ 594.670670][ T27] cp210x 1-1:0.0: cp210x converter detected [ 594.838314][T11178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1461'. [ 595.135788][ T27] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 595.162460][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 596.269454][ T5812] usb 1-1: USB disconnect, device number 18 [ 596.291154][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.357795][ T5812] cp210x 1-1:0.0: device disconnected [ 596.668532][T11201] loop2: detected capacity change from 0 to 8 [ 597.396917][T11207] SQUASHFS error: lzo decompression failed, data probably corrupt [ 597.405211][T11207] SQUASHFS error: Failed to read block 0x0: -5 [ 597.411602][T11207] SQUASHFS error: Failed to read block 0xff: -5 [ 597.418025][T11207] SQUASHFS error: lzo decompression failed, data probably corrupt [ 597.425976][T11207] SQUASHFS error: Failed to read block 0x0: -5 [ 597.437077][ T28] audit: type=1800 audit(1776765519.763:85): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1470" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 597.532925][T11207] SQUASHFS error: lzo decompression failed, data probably corrupt [ 597.541094][T11207] SQUASHFS error: Failed to read block 0x0: -5 [ 597.550935][T11207] SQUASHFS error: Failed to read block 0x6a4: -5 [ 597.557343][T11207] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 597.564772][T11207] SQUASHFS error: read_indexes: reading block [6a2:0] [ 597.571677][T11207] SQUASHFS error: Failed to read block 0x0: -5 [ 597.577938][T11207] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 597.585460][T11207] SQUASHFS error: read_indexes: reading block [6a2:0] [ 597.592423][T11207] SQUASHFS error: Failed to read block 0x0: -5 [ 597.909286][ T28] audit: type=1800 audit(1776765519.875:86): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1470" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 598.282336][T11212] loop0: detected capacity change from 0 to 4096 [ 598.313542][T11212] EXT4-fs: inline encryption not supported [ 598.376145][T11212] EXT4-fs (loop0): Test dummy encryption mode enabled [ 598.421553][T11212] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 598.461339][T11212] System zones: 0-5 [ 599.463515][T11212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.035952][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.932642][T11242] loop0: detected capacity change from 0 to 32768 [ 602.959194][T11242] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1477 (11242) [ 602.960721][T11254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1483'. [ 603.050687][T11242] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 603.105799][T11242] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 603.173723][T11242] BTRFS info (device loop0): using free space tree [ 603.433393][T11242] BTRFS info (device loop0): enabling ssd optimizations [ 603.501317][T11246] loop1: detected capacity change from 0 to 32768 [ 603.517622][T11242] BTRFS info (device loop0): auto enabling async discard [ 603.627124][T11246] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 604.760817][T11246] XFS (loop1): Ending clean mount [ 604.852304][T11286] loop3: detected capacity change from 0 to 128 [ 604.879299][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 604.901618][T11286] EXT4-fs: Ignoring removed i_version option [ 605.065793][T11286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 605.117807][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 605.139537][T11286] System zones: 1-3, 19-19, 35-36 [ 605.168473][T11286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 605.212791][T11286] ext4 filesystem being mounted at /361/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 605.346569][T11286] EXT4-fs (loop3): shut down requested (1) [ 608.119618][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.706909][T11312] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'. [ 609.930632][T11325] loop1: detected capacity change from 0 to 8 [ 610.244320][T11329] SQUASHFS error: lzo decompression failed, data probably corrupt [ 610.252350][T11329] SQUASHFS error: Failed to read block 0x0: -5 [ 610.258792][T11329] SQUASHFS error: Failed to read block 0xff: -5 [ 610.265262][T11329] SQUASHFS error: lzo decompression failed, data probably corrupt [ 610.273300][T11329] SQUASHFS error: Failed to read block 0x0: -5 [ 610.281850][T11329] SQUASHFS error: lzo decompression failed, data probably corrupt [ 610.289761][T11329] SQUASHFS error: Failed to read block 0x0: -5 [ 610.298994][T11329] SQUASHFS error: Failed to read block 0x6a4: -5 [ 610.305423][T11329] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 610.312928][T11329] SQUASHFS error: read_indexes: reading block [6a2:0] [ 610.319780][T11329] SQUASHFS error: Failed to read block 0x0: -5 [ 610.327535][T11329] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 610.334951][T11329] SQUASHFS error: read_indexes: reading block [6a2:0] [ 610.341798][T11329] SQUASHFS error: Failed to read block 0x0: -5 [ 610.354954][ T28] audit: type=1800 audit(1776765531.782:87): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1497" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 611.001876][ T28] audit: type=1800 audit(1776765531.801:88): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1497" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 611.134547][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1495'. [ 611.547287][T11319] loop3: detected capacity change from 0 to 32768 [ 611.607921][T11319] JBD2: Ignoring recovery information on journal [ 611.685199][T11319] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 612.903231][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 613.663856][T11334] loop0: detected capacity change from 0 to 32768 [ 613.986199][T11334] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 614.187140][T11334] XFS (loop0): Ending clean mount [ 614.500599][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 615.267374][T11375] loop2: detected capacity change from 0 to 4096 [ 616.681642][T11391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1507'. [ 618.282146][T11410] block nbd0: shutting down sockets [ 618.362804][T11388] loop1: detected capacity change from 0 to 32768 [ 618.508554][T11388] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1511 (11388) [ 618.559688][T11388] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 618.573487][T11388] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 618.583641][T11388] BTRFS info (device loop1): using free space tree [ 619.659011][T11388] BTRFS info (device loop1): enabling ssd optimizations [ 619.744451][T11388] BTRFS info (device loop1): auto enabling async discard [ 620.002461][ T5766] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 620.054903][T11440] 9pnet_virtio: no channels available for device syz [ 623.542929][T11468] loop1: detected capacity change from 0 to 32768 [ 623.557448][T11468] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1532 (11468) [ 623.586441][T11481] loop2: detected capacity change from 0 to 256 [ 623.634254][T11468] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 623.654117][T11468] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 623.668851][T11468] BTRFS info (device loop1): enabling disk space caching [ 623.676964][T11468] BTRFS info (device loop1): force clearing of disk cache [ 623.689903][T11468] BTRFS info (device loop1): use zlib compression, level 3 [ 623.720470][T11468] BTRFS info (device loop1): disk space caching is enabled [ 623.769923][T11481] FAT-fs (loop2): Directory bread(block 64) failed [ 623.813065][T11481] FAT-fs (loop2): Directory bread(block 65) failed [ 623.843006][T11481] FAT-fs (loop2): Directory bread(block 66) failed [ 623.880928][T11481] FAT-fs (loop2): Directory bread(block 67) failed [ 623.935142][T11481] FAT-fs (loop2): Directory bread(block 68) failed [ 623.978899][T11468] BTRFS info (device loop1): enabling ssd optimizations [ 623.989864][T11481] FAT-fs (loop2): Directory bread(block 69) failed [ 624.036425][T11481] FAT-fs (loop2): Directory bread(block 70) failed [ 624.054545][T11481] FAT-fs (loop2): Directory bread(block 71) failed [ 624.057766][T11468] BTRFS info (device loop1): auto enabling async discard [ 624.063814][T11481] FAT-fs (loop2): Directory bread(block 72) failed [ 624.076065][T11481] FAT-fs (loop2): Directory bread(block 73) failed [ 624.153143][T11468] BTRFS info (device loop1): rebuilding free space tree [ 624.227655][T11468] BTRFS info (device loop1): disabling free space tree [ 624.328375][T11468] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 624.420241][T11468] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 625.366497][ T5766] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 625.496285][T11515] loop5: detected capacity change from 0 to 7 [ 625.557311][T11515] Dev loop5: unable to read RDB block 7 [ 625.583774][T11515] loop5: unable to read partition table [ 625.598896][T11518] program syz.3.1543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.640175][T11515] loop5: partition table beyond EOD, truncated [ 625.658075][T11515] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëܽõ£µ4FLQkÝŠ5) failed (rc=-5) [ 625.719170][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 626.047293][T11522] erspan0: entered promiscuous mode [ 626.419672][T11524] loop1: detected capacity change from 0 to 4096 [ 626.653102][T11534] loop0: detected capacity change from 0 to 4096 [ 626.685573][T11534] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 627.140510][T11540] loop1: detected capacity change from 0 to 512 [ 627.166144][T11540] EXT4-fs: Ignoring removed orlov option [ 627.230481][T11540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 627.309124][T11540] EXT4-fs (loop1): 1 truncate cleaned up [ 627.347451][T11540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.062358][ T7042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.257537][ T7042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.416188][ T7042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.560888][ T7042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.782088][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 628.798790][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 628.811913][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 628.820374][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 628.830605][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 628.838119][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.745522][ T7042] tipc: Left network mode [ 631.031021][ T5772] Bluetooth: hci2: command tx timeout [ 631.106916][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 631.231829][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.374362][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.424699][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 631.500850][ T27] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 631.524575][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.537637][ T27] usb 4-1: Product: syz [ 631.556139][ T27] usb 4-1: Manufacturer: syz [ 631.561040][ T27] usb 4-1: SerialNumber: syz [ 631.572946][ T27] usb 4-1: config 0 descriptor?? [ 631.604279][T11563] chnl_net:caif_netlink_parms(): no params data found [ 632.897286][ T27] usb 4-1: USB disconnect, device number 13 [ 632.983288][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.998489][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.007610][T11563] bridge_slave_0: entered allmulticast mode [ 633.030576][T11563] bridge_slave_0: entered promiscuous mode [ 633.133045][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.150564][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.165121][T11563] bridge_slave_1: entered allmulticast mode [ 633.177270][T11563] bridge_slave_1: entered promiscuous mode [ 633.243147][ T5772] Bluetooth: hci2: command tx timeout [ 633.346904][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.410551][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.568666][T11632] loop1: detected capacity change from 0 to 512 [ 633.690727][T11632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.881609][T11643] loop2: detected capacity change from 0 to 2048 [ 633.938209][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.976908][T11563] team0: Port device team_slave_0 added [ 633.982784][T11643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.990316][T11563] team0: Port device team_slave_1 added [ 634.146450][ T28] audit: type=1800 audit(1776765554.101:89): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1577" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 634.307626][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.325680][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.504678][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.336942][T11650] bridge33: entered promiscuous mode [ 635.344872][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.364844][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.371227][ T967] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 635.439898][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.466720][ T5772] Bluetooth: hci2: command tx timeout [ 635.650335][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 635.678545][ T967] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 635.712784][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.741059][ T967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.792496][ T967] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 635.828312][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.863846][ T967] usb 3-1: config 0 descriptor?? [ 635.901741][ T967] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 636.009643][T11563] hsr_slave_0: entered promiscuous mode [ 636.021531][T11563] hsr_slave_1: entered promiscuous mode [ 636.081612][T11563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.134771][T11563] Cannot create hsr debugfs directory [ 636.281483][T11596] usb 3-1: USB disconnect, device number 19 [ 636.663741][ T7042] hsr_slave_0: left promiscuous mode [ 636.695613][ T7042] hsr_slave_1: left promiscuous mode [ 636.709731][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.734432][ T7042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.759996][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.768093][ T7042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.784154][ T7042] bridge_slave_1: left allmulticast mode [ 636.789887][ T7042] bridge_slave_1: left promiscuous mode [ 636.812461][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.854610][ T7042] bridge_slave_0: left allmulticast mode [ 636.862552][ T7042] bridge_slave_0: left promiscuous mode [ 636.880091][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.988674][ T7042] veth1_macvtap: left allmulticast mode [ 636.994691][ T7042] veth1_macvtap: left promiscuous mode [ 637.045809][ T7042] veth0_macvtap: left promiscuous mode [ 637.063938][ T7042] veth1_vlan: left promiscuous mode [ 637.081816][ T7042] veth0_vlan: left promiscuous mode [ 637.691786][ T5772] Bluetooth: hci2: command tx timeout [ 638.677501][T11702] loop1: detected capacity change from 0 to 256 [ 641.051804][ T7042] team0 (unregistering): Port device team_slave_1 removed [ 641.121735][ T7042] team0 (unregistering): Port device team_slave_0 removed [ 641.200549][ T7042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.879186][ T7042] bond0 (unregistering): Released all slaves [ 642.254674][T11714] loop1: detected capacity change from 0 to 512 [ 642.532306][T11714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.608677][T11719] loop2: detected capacity change from 0 to 4096 [ 642.609049][T11714] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.635619][T11719] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 643.214277][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.326343][T11739] 9pnet_virtio: no channels available for device syz [ 643.330320][ T7042] IPVS: stop unused estimator thread 0... [ 643.648377][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 644.151963][T11563] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 644.189854][T11563] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 644.225872][T11563] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 644.252515][T11563] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 644.517965][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.585253][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.633724][T11758] loop1: detected capacity change from 0 to 256 [ 644.661615][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.671346][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.744523][T11758] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 644.790891][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.798085][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.477149][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.614454][T11563] veth0_vlan: entered promiscuous mode [ 646.637595][T11789] 9pnet_virtio: no channels available for device syz [ 646.697969][T11563] veth1_vlan: entered promiscuous mode [ 646.815290][T11563] veth0_macvtap: entered promiscuous mode [ 646.826786][T11563] veth1_macvtap: entered promiscuous mode [ 646.896453][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.922888][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.947249][T11795] loop2: detected capacity change from 0 to 128 [ 646.953799][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.988502][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.003910][T11795] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.018841][ T5772] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 647.019472][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.044403][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.059656][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.080583][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.091965][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.121108][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.168693][T11795] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 647.173469][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.204928][ T5811] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 647.207513][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.249626][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.303590][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.325355][T11563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.375063][T11563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.396732][T11563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.417136][T11563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.436428][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.453530][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 647.467490][ T5811] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 647.496616][ T5811] usb 2-1: config 179 has no interface number 0 [ 647.503094][ T5811] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 647.555391][ T5811] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 647.583247][ T5811] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 647.601695][ T5811] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 647.706630][ T5811] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 647.762899][ T5811] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 647.803589][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.825600][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.850782][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.862501][T11793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 648.033051][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.082793][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.560003][T11822] batadv1: entered allmulticast mode [ 648.590191][T11822] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 648.603717][T11822] bridge0: port 3(batadv1) entered blocking state [ 648.645653][T11822] bridge0: port 3(batadv1) entered disabled state [ 648.663291][T11826] 9pnet_virtio: no channels available for device syz [ 648.687352][T11822] batadv1: entered promiscuous mode [ 648.688176][ T5811] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 648.708282][T11822] bridge0: port 3(batadv1) entered blocking state [ 648.716552][T11822] bridge0: port 3(batadv1) entered forwarding state [ 649.079190][ T7042] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 649.090829][ T7042] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 649.191092][ T5810] usb 2-1: USB disconnect, device number 23 [ 649.191163][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 649.206720][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 649.211209][ T5810] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 650.105575][T11851] loop1: detected capacity change from 0 to 512 [ 650.137375][T11851] EXT4-fs: Ignoring removed bh option [ 650.151220][T11853] netlink: 'syz.2.1622': attribute type 12 has an invalid length. [ 650.180136][T11851] EXT4-fs: inline encryption not supported [ 650.230394][T11851] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 650.340298][T11851] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 650.482542][T11851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1621: bg 0: block 248: padding at end of block bitmap is not set [ 650.516516][T11851] Quota error (device loop1): write_blk: dquota write failed [ 650.546345][T11851] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 650.563696][T11851] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1621: Failed to acquire dquot type 1 [ 650.591414][T11851] EXT4-fs (loop1): 1 truncate cleaned up [ 650.599407][T11851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 650.756704][ T28] audit: type=1800 audit(1776765569.638:90): pid=11851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1621" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 650.906835][T11874] loop0: detected capacity change from 0 to 1024 [ 650.956922][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 650.970444][ T34] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 650.994195][ T34] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 1 [ 651.780239][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 651.831126][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1635'. [ 651.929793][T11906] loop3: detected capacity change from 0 to 256 [ 651.966819][T11906] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 652.505589][T11911] loop2: detected capacity change from 0 to 4096 [ 652.560367][T11911] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 653.201693][T11904] loop0: detected capacity change from 0 to 32768 [ 653.248392][T11904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1636 (11904) [ 653.282205][T11904] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.305491][T11904] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 653.315174][T11904] BTRFS info (device loop0): setting nodatasum [ 653.353943][T11904] BTRFS info (device loop0): force zlib compression, level 3 [ 653.370960][T11904] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 653.437149][T11904] BTRFS info (device loop0): use lzo compression, level 0 [ 653.456611][T11904] BTRFS info (device loop0): turning on flush-on-commit [ 653.481946][T11904] BTRFS info (device loop0): enabling auto defrag [ 653.505944][T11904] BTRFS info (device loop0): max_inline at 4096 [ 653.541330][T11904] BTRFS info (device loop0): using free space tree [ 653.816312][T11904] BTRFS info (device loop0): enabling ssd optimizations [ 653.856842][T11959] loop1: detected capacity change from 0 to 512 [ 654.046064][T11959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.266549][T11959] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.278076][T11563] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 655.464077][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.957393][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.134790][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.411030][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.450344][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.486756][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.506086][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.548316][T12019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.654709][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'. [ 658.683007][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 658.743336][T12024] netlink: 'syz.2.1659': attribute type 6 has an invalid length. [ 659.618757][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.719549][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 662.243641][T12082] loop1: detected capacity change from 0 to 512 [ 662.269776][T12082] EXT4-fs: Ignoring removed oldalloc option [ 662.292043][T12082] EXT4-fs (loop1): Test dummy encryption mode enabled [ 662.452692][T12082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.496789][T12105] loop0: detected capacity change from 0 to 2048 [ 663.593858][T12105] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 663.622572][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.666745][T12105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.780454][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 663.957259][ T5756] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 664.070086][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 664.205226][ T5756] usb 4-1: Using ep0 maxpacket: 8 [ 664.227444][ T5756] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 664.235973][T12120] loop0: detected capacity change from 0 to 512 [ 664.251317][T12120] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.1684: corrupted in-inode xattr: invalid ea_ino [ 664.290580][T12120] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1684: couldn't read orphan inode 15 (err -117) [ 664.325841][ T5756] usb 4-1: config 179 has no interface number 0 [ 664.365232][T12120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.407811][ T5756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 664.419292][T12123] Bluetooth: MGMT ver 1.22 [ 664.463582][ T5756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 664.504072][ T5756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 664.551709][ T5756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 664.570516][ T5756] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.597523][ T5756] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 664.660906][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.677002][T11563] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.705111][T12110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.348988][ T5756] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input21 [ 665.827010][T11596] usb 4-1: USB disconnect, device number 14 [ 665.827065][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 665.841550][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 665.885936][T11596] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 665.999146][ T5781] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 666.016762][ T5781] Bluetooth: hci1: Injecting HCI hardware error event [ 666.028217][ T5781] Bluetooth: hci1: hardware error 0x00 [ 667.027302][T12158] loop1: detected capacity change from 0 to 8 [ 668.652031][ T5781] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 671.266914][T12221] loop2: detected capacity change from 0 to 4096 [ 671.465332][T12221] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 671.511137][T12221] ntfs3: loop2: Failed to load $Extend (-22). [ 671.551875][T12221] ntfs3: loop2: Failed to initialize $Extend. [ 671.747199][ T28] audit: type=1800 audit(1776765589.272:91): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1715" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 673.151136][ T5812] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 673.396956][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 673.416665][ T5812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 673.456234][ T5812] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 673.496507][ T5812] usb 1-1: string descriptor 0 read error: -22 [ 673.523988][ T5812] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 673.622445][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.661031][T12239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 673.709717][ T5812] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 673.755838][ T5812] usb 1-1: MIDIStreaming interface descriptor not found [ 674.173656][ T787] usb 1-1: USB disconnect, device number 19 [ 674.442909][T12255] loop3: detected capacity change from 0 to 512 [ 674.858928][T12255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.874307][ T5812] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 675.120190][ T5812] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 675.144188][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.160934][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.254316][ T5812] usb 2-1: config 0 descriptor?? [ 675.573029][T12267] loop3: detected capacity change from 0 to 512 [ 675.587634][T12267] EXT4-fs: Ignoring removed bh option [ 675.593300][T12267] EXT4-fs: inline encryption not supported [ 675.604233][T12267] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 675.613967][ T5812] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 675.724629][ T5812] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 675.961032][ T5812] [drm:udl_init] *ERROR* Selecting channel failed [ 676.257563][ T5812] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 676.311707][T12267] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 676.371031][ T5812] [drm] Initialized udl on minor 2 [ 676.391770][T12267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1727: bg 0: block 248: padding at end of block bitmap is not set [ 676.426599][ T5812] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.777460][ T5812] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 676.811721][T12267] Quota error (device loop3): write_blk: dquota write failed [ 676.822681][T12267] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 676.826476][ T5810] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.843122][T12267] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1727: Failed to acquire dquot type 1 [ 676.862779][ T5812] usb 2-1: USB disconnect, device number 24 [ 677.160236][T12267] EXT4-fs (loop3): 1 truncate cleaned up [ 677.254884][T12280] loop2: detected capacity change from 0 to 512 [ 677.274792][T12267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 677.364585][T12280] EXT4-fs: Ignoring removed i_version option [ 677.370686][T12280] EXT4-fs: Ignoring removed bh option [ 677.441440][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 677.498629][T12280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.517463][T12280] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.554613][ T28] audit: type=1800 audit(1776765594.697:92): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1727" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 677.752678][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 677.775851][ T1325] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 677.804883][ T1325] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 677.862788][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.656057][T12328] loop0: detected capacity change from 0 to 512 [ 681.664117][T12328] EXT4-fs: Ignoring removed bh option [ 681.669669][T12328] EXT4-fs: inline encryption not supported [ 681.719767][T12328] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 681.827033][T12328] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 681.873569][T12328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1744: bg 0: block 248: padding at end of block bitmap is not set [ 681.901860][T12328] Quota error (device loop0): write_blk: dquota write failed [ 681.909955][T12328] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 681.922988][T12328] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1744: Failed to acquire dquot type 1 [ 681.947139][T12328] EXT4-fs (loop0): 1 truncate cleaned up [ 681.959391][T12328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 682.102047][ T28] audit: type=1800 audit(1776765598.963:93): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1744" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 682.207166][T11563] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 682.222588][ T1325] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 682.235205][ T1325] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 684.247522][T12379] loop0: detected capacity change from 0 to 8 [ 684.626519][T12369] loop3: detected capacity change from 0 to 32768 [ 684.640288][T12381] SQUASHFS error: lzo decompression failed, data probably corrupt [ 684.648651][T12381] SQUASHFS error: Failed to read block 0x0: -5 [ 684.655071][T12381] SQUASHFS error: Failed to read block 0xff: -5 [ 684.661673][T12381] SQUASHFS error: lzo decompression failed, data probably corrupt [ 684.669961][T12381] SQUASHFS error: Failed to read block 0x0: -5 [ 684.678474][T12381] SQUASHFS error: lzo decompression failed, data probably corrupt [ 684.687260][T12381] SQUASHFS error: Failed to read block 0x0: -5 [ 684.696273][T12381] SQUASHFS error: Failed to read block 0x6a4: -5 [ 684.702727][T12381] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 684.710182][T12381] SQUASHFS error: read_indexes: reading block [6a2:0] [ 684.717011][T12381] SQUASHFS error: Failed to read block 0x0: -5 [ 684.723330][T12381] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 684.730977][T12381] SQUASHFS error: read_indexes: reading block [6a2:0] [ 684.738062][T12381] SQUASHFS error: Failed to read block 0x0: -5 [ 684.752806][ T28] audit: type=1800 audit(1776765601.367:94): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1762" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 685.103945][T12369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1758 (12369) [ 685.274374][ T28] audit: type=1800 audit(1776765601.386:95): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1762" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 685.349234][T12369] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 685.446929][T12369] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 685.457271][T12369] BTRFS info (device loop3): allowing degraded mounts [ 685.464196][T12369] BTRFS info (device loop3): metadata ratio 4 [ 685.475084][T12369] BTRFS info (device loop3): turning on sync discard [ 685.487567][T12369] BTRFS info (device loop3): turning off discard [ 685.534261][T12369] BTRFS info (device loop3): turning on sync discard [ 685.572510][T12369] BTRFS info (device loop3): disabling tree log [ 685.597044][T12369] BTRFS info (device loop3): using free space tree [ 685.917035][T12369] BTRFS info (device loop3): enabling ssd optimizations [ 687.017809][ T5768] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 687.196732][ T9199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (9199) [ 687.313861][T12430] loop2: detected capacity change from 0 to 8 [ 687.730195][T12439] SQUASHFS error: lzo decompression failed, data probably corrupt [ 687.739814][T12439] SQUASHFS error: Failed to read block 0x0: -5 [ 687.746862][T12439] SQUASHFS error: Failed to read block 0xff: -5 [ 687.754133][T12439] SQUASHFS error: lzo decompression failed, data probably corrupt [ 687.762104][T12439] SQUASHFS error: Failed to read block 0x0: -5 [ 687.770680][T12439] SQUASHFS error: lzo decompression failed, data probably corrupt [ 687.778667][T12439] SQUASHFS error: Failed to read block 0x0: -5 [ 687.787904][T12439] SQUASHFS error: Failed to read block 0x6a4: -5 [ 687.794303][T12439] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 687.801696][T12439] SQUASHFS error: read_indexes: reading block [6a2:0] [ 687.808657][T12439] SQUASHFS error: Failed to read block 0x0: -5 [ 687.814895][T12439] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 687.822271][T12439] SQUASHFS error: read_indexes: reading block [6a2:0] [ 687.829240][T12439] SQUASHFS error: Failed to read block 0x0: -5 [ 687.929147][ T28] audit: type=1800 audit(1776765604.267:96): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1773" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 688.383733][ T28] audit: type=1800 audit(1776765604.276:97): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1773" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 690.067130][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 690.659535][T12473] loop2: detected capacity change from 0 to 8 [ 690.899168][ T5811] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 691.045621][T12476] SQUASHFS error: lzo decompression failed, data probably corrupt [ 691.053808][T12476] SQUASHFS error: Failed to read block 0x0: -5 [ 691.061814][T12476] SQUASHFS error: Failed to read block 0xff: -5 [ 691.068256][T12476] SQUASHFS error: lzo decompression failed, data probably corrupt [ 691.076212][T12476] SQUASHFS error: Failed to read block 0x0: -5 [ 691.084816][T12476] SQUASHFS error: lzo decompression failed, data probably corrupt [ 691.092762][T12476] SQUASHFS error: Failed to read block 0x0: -5 [ 691.101966][T12476] SQUASHFS error: Failed to read block 0x6a4: -5 [ 691.108363][T12476] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 691.115730][T12476] SQUASHFS error: read_indexes: reading block [6a2:0] [ 691.123253][T12476] SQUASHFS error: Failed to read block 0x0: -5 [ 691.129496][T12476] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 691.136894][T12476] SQUASHFS error: read_indexes: reading block [6a2:0] [ 691.144741][T12476] SQUASHFS error: Failed to read block 0x0: -5 [ 691.408623][ T28] audit: type=1800 audit(1776765607.363:98): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1784" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 691.691591][ T28] audit: type=1800 audit(1776765607.372:99): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1784" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 691.863633][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.880144][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.890478][ T5811] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 691.902386][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.916312][ T5811] usb 4-1: config 0 descriptor?? [ 692.177222][T12464] loop1: detected capacity change from 0 to 32768 [ 692.213581][T12464] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 692.421969][ T9199] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 692.430651][ T5811] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 692.490612][ T5811] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 692.497781][ T5811] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 692.650773][ T5811] hid-led 0003:1D34:000A.000D: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 692.741402][ T5811] hid-led 0003:1D34:000A.000D: Dream Cheeky Webmail Notifier initialized [ 693.010877][ T5811] usb 4-1: USB disconnect, device number 15 [ 693.481680][T12488] loop1: detected capacity change from 0 to 32768 [ 693.513572][T12488] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 693.528704][T12488] gfs2: fsid=syz:syz: unknown hostdata (\) [ 693.883943][T12504] loop0: detected capacity change from 0 to 8 [ 694.077563][T12505] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 694.088459][ T5810] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 694.175339][T12507] SQUASHFS error: lzo decompression failed, data probably corrupt [ 694.185342][T12507] SQUASHFS error: Failed to read block 0x0: -5 [ 694.191934][T12507] SQUASHFS error: Failed to read block 0xff: -5 [ 694.198440][T12507] SQUASHFS error: lzo decompression failed, data probably corrupt [ 694.207264][T12507] SQUASHFS error: Failed to read block 0x0: -5 [ 694.215856][T12507] SQUASHFS error: lzo decompression failed, data probably corrupt [ 694.223804][T12507] SQUASHFS error: Failed to read block 0x0: -5 [ 694.233195][T12507] SQUASHFS error: Failed to read block 0x6a4: -5 [ 694.239608][T12507] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 694.247301][T12507] SQUASHFS error: read_indexes: reading block [6a2:0] [ 694.254306][T12507] SQUASHFS error: Failed to read block 0x0: -5 [ 694.260555][T12507] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 694.268004][T12507] SQUASHFS error: read_indexes: reading block [6a2:0] [ 694.274838][T12507] SQUASHFS error: Failed to read block 0x0: -5 [ 694.344604][ T28] audit: type=1800 audit(1776765610.291:100): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1793" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 694.971078][ T28] audit: type=1800 audit(1776765610.300:101): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1793" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 695.077278][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 695.117980][ T5810] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 695.145704][ T5810] usb 4-1: config 0 has no interface number 0 [ 695.152101][ T5810] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.199684][ T5810] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 695.242433][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 695.272128][ T5810] usb 4-1: Product: syz [ 695.289368][ T5810] usb 4-1: config 0 descriptor?? [ 695.314181][ T5810] iowarrior 4-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 695.525377][T12518] loop0: detected capacity change from 0 to 164 [ 695.541694][ T5810] usb 4-1: USB disconnect, device number 16 [ 695.541783][ C0] iowarrior 4-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 695.575995][T12518] ISOFS: unable to read i-node block [ 695.614482][T12518] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 696.089243][T12514] loop2: detected capacity change from 0 to 32768 [ 696.102235][T12514] [ 696.102235][T12514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.102235][T12514] [ 696.146046][T12523] loop1: detected capacity change from 0 to 256 [ 696.153655][ T28] audit: type=1800 audit(1776765612.105:102): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1796" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 696.186639][T12514] [ 696.186639][T12514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.186639][T12514] [ 696.191855][T12523] exfat: Deprecated parameter 'namecase' [ 696.204901][T12514] [ 696.204901][T12514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.204901][T12514] [ 696.204960][T12514] [ 696.204960][T12514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.204960][T12514] [ 696.269312][T12514] JFS: metapage_get_blocks failed [ 696.279746][T12514] [ 696.279746][T12514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.279746][T12514] [ 696.298886][T12523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 696.341392][T12524] ERROR: (device loop2): diWrite: ixpxd invalid [ 696.341392][T12524] [ 696.410455][T12524] ERROR: (device loop2): txCommit: [ 696.410455][T12524] [ 696.467459][T12524] ERROR: (device loop2): diFree: invalid inoext [ 696.467459][T12524] [ 696.579326][ T6894] ERROR: (device loop2): diWrite: ixpxd invalid [ 696.579326][ T6894] [ 696.609353][ T6894] ERROR: (device loop2): txCommit: [ 696.609353][ T6894] [ 696.651721][ T6894] jfs_write_inode: jfs_commit_inode failed! [ 696.657824][ T5767] [ 696.657824][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.657824][ T5767] [ 696.683045][ T5767] [ 696.683045][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 696.683045][ T5767] [ 697.127447][T12526] loop0: detected capacity change from 0 to 32768 [ 697.172864][ T5810] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 697.184007][T12526] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 697.421860][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 697.434057][ T5810] usb 2-1: config 0 has no interfaces? [ 697.446849][ T5810] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 697.471223][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.501663][ T5810] usb 2-1: Product: syz [ 697.538252][ T5810] usb 2-1: Manufacturer: syz [ 697.542959][ T5810] usb 2-1: SerialNumber: syz [ 697.591028][ T5810] usb 2-1: config 0 descriptor?? [ 697.616692][T11563] ocfs2: Unmounting device (7,0) on (node local) [ 697.881086][ T5810] usb 2-1: USB disconnect, device number 25 [ 698.077018][T12535] loop2: detected capacity change from 0 to 32768 [ 698.099713][T12535] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 698.288724][ T9199] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 698.346433][T12550] tipc: Started in network mode [ 698.368457][T12550] tipc: Node identity ac14140f, cluster identity 4711 [ 698.399865][T12550] tipc: New replicast peer: 255.255.255.255 [ 698.452429][T12550] tipc: Enabled bearer , priority 10 [ 698.489643][ T5810] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 698.517853][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 698.575699][T12553] tipc: Disabling bearer [ 698.691498][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 698.699918][ T5810] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 698.720115][ T5810] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 698.768066][ T5810] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 698.789759][ T5810] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 698.815360][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 698.827173][ T5810] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 698.846310][ T5810] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 698.879076][ T5810] usb 1-1: Product: syz [ 698.885726][ T5810] usb 1-1: Manufacturer: syz [ 698.890826][ T5810] usb 1-1: SerialNumber: syz [ 698.900718][ T5810] usb 1-1: config 0 descriptor?? [ 698.923186][ T5810] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 698.953090][ T5810] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 699.229009][ T5810] usb 1-1: USB disconnect, device number 20 [ 699.239412][ T5810] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 699.567597][ T787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 699.788939][ T787] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 699.813857][ T787] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 699.832346][ T787] usb 4-1: config 1 interface 0 has no altsetting 0 [ 699.844903][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.868788][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.911264][ T787] usb 4-1: Product: syz [ 699.915631][ T787] usb 4-1: Manufacturer: syz [ 699.935791][ T787] usb 4-1: SerialNumber: syz [ 699.961946][T12571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 699.996403][T12571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 700.149136][T12578] kvm: kvm [12577]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 700.275496][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.297647][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.354373][ T5781] Bluetooth: hci3: Unknown advertising packet type: 0x30 [ 700.354411][ T5781] Bluetooth: hci3: adv larger than maximum supported [ 700.362667][ T787] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 700.371848][ T787] usb 4-1: USB disconnect, device number 17 [ 700.377463][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 700.438873][T12581] 9pnet_virtio: no channels available for device syz [ 701.117844][ T5810] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 701.119217][T12594] loop1: detected capacity change from 0 to 8 [ 701.331578][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 701.344499][ T5810] usb 1-1: config 0 has no interfaces? [ 701.386418][ T5810] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 701.397129][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.414860][ T5810] usb 1-1: Product: syz [ 701.432811][ T5810] usb 1-1: Manufacturer: syz [ 701.448555][ T5810] usb 1-1: SerialNumber: syz [ 701.527894][T12598] SQUASHFS error: lzo decompression failed, data probably corrupt [ 701.536350][T12598] SQUASHFS error: Failed to read block 0x0: -5 [ 701.543469][T12598] SQUASHFS error: Failed to read block 0xff: -5 [ 701.550065][T12598] SQUASHFS error: lzo decompression failed, data probably corrupt [ 701.558003][T12598] SQUASHFS error: Failed to read block 0x0: -5 [ 701.566733][T12598] SQUASHFS error: lzo decompression failed, data probably corrupt [ 701.574613][T12598] SQUASHFS error: Failed to read block 0x0: -5 [ 701.583680][T12598] SQUASHFS error: Failed to read block 0x6a4: -5 [ 701.590124][T12598] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 701.597629][T12598] SQUASHFS error: read_indexes: reading block [6a2:0] [ 701.604658][T12598] SQUASHFS error: Failed to read block 0x0: -5 [ 701.610932][T12598] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 701.618242][T12598] SQUASHFS error: read_indexes: reading block [6a2:0] [ 701.625252][T12598] SQUASHFS error: Failed to read block 0x0: -5 [ 701.637337][ T28] audit: type=1800 audit(1776765617.166:103): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1824" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 701.934719][ T28] audit: type=1800 audit(1776765617.185:104): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1824" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 702.344676][ T5810] usb 1-1: config 0 descriptor?? [ 702.533678][T12600] loop1: detected capacity change from 0 to 4096 [ 702.540790][T12592] loop2: detected capacity change from 0 to 40427 [ 702.568014][T12592] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 702.575144][T12600] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 702.604655][T12592] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 702.626959][T12592] F2FS-fs (loop2): invalid crc value [ 702.647878][T12592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 702.654195][ T5810] usb 1-1: USB disconnect, device number 21 [ 702.790860][T12600] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 702.816172][T12592] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 702.901240][T12596] loop3: detected capacity change from 0 to 32768 [ 702.910106][T12592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 702.966787][T12596] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 703.092353][T12592] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 703.164852][T12596] XFS (loop3): Ending clean mount [ 703.375282][ T5767] syz-executor: attempt to access beyond end of device [ 703.375282][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 703.426289][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 703.449546][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 704.142984][T12623] loop0: detected capacity change from 0 to 4096 [ 704.194811][T12623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.739516][T12637] loop2: detected capacity change from 0 to 8 [ 705.131138][T12642] SQUASHFS error: lzo decompression failed, data probably corrupt [ 705.139293][T12642] SQUASHFS error: Failed to read block 0x0: -5 [ 705.145596][T12642] SQUASHFS error: Failed to read block 0xff: -5 [ 705.152334][T12642] SQUASHFS error: lzo decompression failed, data probably corrupt [ 705.161178][T12642] SQUASHFS error: Failed to read block 0x0: -5 [ 705.169760][T12642] SQUASHFS error: lzo decompression failed, data probably corrupt [ 705.177740][T12642] SQUASHFS error: Failed to read block 0x0: -5 [ 705.186849][T12642] SQUASHFS error: Failed to read block 0x6a4: -5 [ 705.193546][T12642] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 705.200880][T12642] SQUASHFS error: read_indexes: reading block [6a2:0] [ 705.208074][T12642] SQUASHFS error: Failed to read block 0x0: -5 [ 705.214395][T12642] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 705.221709][T12642] SQUASHFS error: read_indexes: reading block [6a2:0] [ 705.228590][T12642] SQUASHFS error: Failed to read block 0x0: -5 [ 705.250322][ T28] audit: type=1800 audit(1776765620.533:105): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1834" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 705.285922][ T28] audit: type=1800 audit(1776765620.552:106): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1834" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 705.954655][T11563] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.251285][T12651] dummy0: entered promiscuous mode [ 706.257310][T12651] macvtap1: entered promiscuous mode [ 706.294105][T12651] dummy0: left promiscuous mode [ 707.200165][T12667] loop3: detected capacity change from 0 to 512 [ 707.292176][T12667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.361142][T12667] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.499701][T12667] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 707.523935][T12667] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 707.538428][T12667] EXT4-fs (loop3): This should not happen!! Data will be lost [ 707.538428][T12667] [ 707.668902][T12667] EXT4-fs (loop3): Total free blocks count 0 [ 707.676067][T12667] EXT4-fs (loop3): Free/Dirty block details [ 707.684997][T12667] EXT4-fs (loop3): free_blocks=65280 [ 707.690517][T12667] EXT4-fs (loop3): dirty_blocks=2 [ 707.696231][T12667] EXT4-fs (loop3): Block reservation details [ 707.702266][T12667] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 707.725812][ T5810] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 707.813352][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.929316][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 707.937723][ T5810] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.972021][ T5810] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.995338][ T5810] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 708.013352][ T5810] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 708.043485][ T5810] usb 2-1: Product: syz [ 708.065083][ T5810] usb 2-1: Manufacturer: syz [ 708.093576][ T5810] hub 2-1:4.0: USB hub found [ 708.352099][ T5810] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 708.385358][T12684] loop3: detected capacity change from 0 to 4096 [ 708.416819][T12684] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 708.473018][T12684] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 708.521563][T12684] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 708.532478][T12684] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 708.587330][T12684] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 708.611780][T12684] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 708.643881][T12684] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 708.673471][T12684] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 708.719163][T12684] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 708.741912][T12684] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 708.784347][ T5812] usb 2-1: USB disconnect, device number 26 [ 708.838849][T12684] ntfs: volume version 3.1. [ 710.679838][T12708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1859'. [ 711.125530][T12714] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1861'. [ 712.084607][T12720] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 712.355009][ T5812] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 712.381802][T12726] syzkaller1: entered promiscuous mode [ 712.399029][T12726] syzkaller1: entered allmulticast mode [ 712.578922][ T5812] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 712.593768][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.653138][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.674218][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.736917][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.760287][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.781375][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.854887][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.866309][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.880988][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.941918][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.950901][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.965585][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.974162][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.996222][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.014129][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 713.025306][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.060305][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.096988][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 713.118773][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.136511][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.166135][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 713.180119][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.200321][ T5812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.230127][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 713.251996][ T5812] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 713.278438][ T5812] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 713.307678][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1870'. [ 713.320847][ T5812] usb 3-1: Product: syz [ 713.331803][ T5812] usb 3-1: Manufacturer: syz [ 713.341403][ T5812] usb 3-1: SerialNumber: syz [ 713.355519][ T5812] usb 3-1: config 0 descriptor?? [ 713.404307][ T5812] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 714.463391][T12744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1872'. [ 715.585391][ T787] usb 3-1: USB disconnect, device number 20 [ 715.599757][ T787] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 715.749749][T12757] loop2: detected capacity change from 0 to 8 [ 716.131965][T12754] team0 (unregistering): Port device team_slave_0 removed [ 716.164316][T12754] team0 (unregistering): Port device team_slave_1 removed [ 716.202636][T12761] SQUASHFS error: lzo decompression failed, data probably corrupt [ 716.211318][T12761] SQUASHFS error: Failed to read block 0x0: -5 [ 716.219473][T12761] SQUASHFS error: Failed to read block 0xff: -5 [ 716.226049][T12761] SQUASHFS error: lzo decompression failed, data probably corrupt [ 716.233926][T12761] SQUASHFS error: Failed to read block 0x0: -5 [ 716.242328][T12761] SQUASHFS error: lzo decompression failed, data probably corrupt [ 716.250325][T12761] SQUASHFS error: Failed to read block 0x0: -5 [ 716.259384][T12761] SQUASHFS error: Failed to read block 0x6a4: -5 [ 716.265790][T12761] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 716.273307][T12761] SQUASHFS error: read_indexes: reading block [6a2:0] [ 716.280345][T12761] SQUASHFS error: Failed to read block 0x0: -5 [ 716.286671][T12761] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 716.294095][T12761] SQUASHFS error: read_indexes: reading block [6a2:0] [ 716.300970][T12761] SQUASHFS error: Failed to read block 0x0: -5 [ 716.477676][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 716.477718][ T28] audit: type=1800 audit(1776765630.888:107): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1877" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 716.864406][ T28] audit: type=1800 audit(1776765630.907:108): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1877" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 717.129190][T12766] loop2: detected capacity change from 0 to 256 [ 717.495806][ T5810] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 717.688114][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 717.706479][ T5810] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.724612][ T5810] usb 4-1: config 0 has no interface number 0 [ 717.745103][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.759505][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.778725][ T5810] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 717.788539][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.803303][ T5810] usb 4-1: config 0 descriptor?? [ 718.532896][ T5810] uclogic 0003:28BD:0071.000E: pen parameters not found [ 718.554013][ T5810] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 718.610932][T12693] Set syz1 is full, maxelem 65536 reached [ 718.803043][ T5810] usb 4-1: USB disconnect, device number 18 [ 719.069234][T12790] loop0: detected capacity change from 0 to 4096 [ 719.082608][T12780] loop1: detected capacity change from 0 to 32768 [ 719.091390][T12780] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1884 (12780) [ 719.141026][T12780] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 719.204229][T12780] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 719.227622][T12780] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 719.237196][T12780] BTRFS info (device loop1): use zstd compression, level 3 [ 719.259157][T12780] BTRFS info (device loop1): using free space tree [ 719.423475][T12790] ntfs3: loop0: ino=5, "/" directory corrupted [ 719.470514][T12780] BTRFS info (device loop1): enabling ssd optimizations [ 719.548645][T12780] BTRFS info (device loop1): auto enabling async discard [ 719.585447][T12811] overlayfs: upper fs does not support file handles, falling back to index=off. [ 719.931025][T12821] process 'syz.2.1893' launched './file0' with NULL argv: empty string added [ 720.338898][ T5766] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 720.538740][T12815] loop3: detected capacity change from 0 to 32768 [ 720.605021][T12815] (syz.3.1891,12815,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 720.722051][T12829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1895'. [ 720.737987][T12815] (syz.3.1891,12815,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 720.881554][T12815] JBD2: Ignoring recovery information on journal [ 720.973122][T12815] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 721.350190][T12815] (syz.3.1891,12815,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 721.725439][T12844] loop2: detected capacity change from 0 to 64 [ 721.734993][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 722.368453][ T5812] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 722.934265][ T5812] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 723.021992][T12864] sctp: [Deprecated]: syz.0.1905 (pid 12864) Use of int in max_burst socket option deprecated. [ 723.021992][T12864] Use struct sctp_assoc_value instead [ 723.633644][ T5756] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 723.777987][T12881] input: syz1 as /devices/virtual/input/input22 [ 723.869298][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 723.891743][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.941813][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.985903][ T5756] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 724.016748][ T5756] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 724.033472][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.067235][ T5756] usb 4-1: config 0 descriptor?? [ 724.330093][T12888] loop2: detected capacity change from 0 to 1024 [ 724.391273][T12888] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 724.431509][T12888] System zones: 0-1, 3-36 [ 724.500081][T12888] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1913: bad orphan inode 134217728 [ 724.564252][ T5756] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 724.571668][ T5756] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 724.606645][T12888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.647083][ T5756] microsoft 0003:045E:07DA.0010: unknown main item tag 0x1 [ 724.688347][ T5756] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 724.696773][ T5756] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 724.706323][ T5756] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 724.718836][ T5756] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 724.730600][ T5756] microsoft 0003:045E:07DA.0010: no inputs found [ 724.739766][ T5756] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 724.789436][ T5756] usb 4-1: USB disconnect, device number 19 [ 724.902872][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.009447][T12895] fido_id[12895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 725.332603][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.026617][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 726.158275][T12911] netlink: 'syz.0.1920': attribute type 30 has an invalid length. [ 726.186645][T12911] netlink: 'syz.0.1920': attribute type 29 has an invalid length. [ 726.207570][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 727.013156][T12908] loop3: detected capacity change from 0 to 32768 [ 727.145695][T12908] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 727.145695][T12908] [ 727.228154][T12908] ERROR: (device loop3): remounting filesystem as read-only [ 727.270048][T12908] ERROR: (device loop3): jfs_unlink: [ 727.270048][T12908] [ 727.396988][T12908] overlayfs: failed to resolve './bus': -2 [ 727.413989][ T111] BUG: Bad page state in process jfsCommit pfn:4a54d [ 727.422434][ T111] page:ffffea0001295340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x4a54d [ 727.433079][ T111] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 727.446656][ T111] page_type: 0xffffffff() [ 727.453142][ T111] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 727.464133][ T111] raw: 000000000000001c ffff88802f2412e8 00000000ffffffff 0000000000000000 [ 727.472959][ T111] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 727.480372][ T111] page_owner tracks the page as allocated [ 727.489272][ T111] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 12908, tgid 12907 (syz.3.1921), ts 727072435494, free_ts 727030016703 [ 727.569752][ T111] post_alloc_hook+0x1c1/0x200 [ 727.595647][ T111] get_page_from_freelist+0x1951/0x19e0 [ 727.617638][ T111] __alloc_pages+0x1f0/0x460 [ 727.635178][ T111] folio_alloc+0x1e/0x30 [ 727.639733][T12931] loop0: detected capacity change from 0 to 512 [ 727.649687][ T111] filemap_alloc_folio+0xdf/0x490 [ 727.679945][ T111] do_read_cache_folio+0x364/0x7d0 [ 727.696464][ T111] do_read_cache_page+0x32/0x250 [ 727.701514][ T111] __get_metapage+0x31a/0xfa0 [ 727.719344][ T111] diRead+0x6d3/0xb90 [ 727.745337][ T111] jfs_iget+0x90/0x440 [ 727.756410][ T111] jfs_fill_super+0x712/0xad0 [ 727.774799][ T111] mount_bdev+0x221/0x2d0 [ 727.783951][ T111] legacy_get_tree+0xea/0x180 [ 727.822116][ T111] vfs_get_tree+0x8c/0x280 [ 727.833891][ T111] do_new_mount+0x24b/0xa40 [ 727.838472][ T111] __se_sys_mount+0x2e7/0x3d0 [ 727.843281][ T111] page last free stack trace: [ 727.868969][ T111] free_unref_page_prepare+0x7b2/0x8c0 [ 727.874549][ T111] free_unref_page_list+0xbe/0x860 [ 727.900472][ T111] release_pages+0x1f7a/0x2200 [ 727.905324][ T111] tlb_flush_mmu+0x379/0x510 [ 727.916233][ T111] tlb_finish_mmu+0xf9/0x220 [ 727.923225][ T111] exit_mmap+0x428/0xb90 [ 727.928172][ T111] __mmput+0x118/0x3c0 [ 727.932961][ T111] exit_mm+0x1f2/0x2c0 [ 727.937209][ T111] do_exit+0x8dd/0x2460 [ 727.943872][ T111] do_group_exit+0x21b/0x2d0 [ 727.948650][ T111] get_signal+0x12fc/0x13f0 [ 727.953729][ T111] arch_do_signal_or_restart+0xc2/0x800 [ 727.959329][ T111] exit_to_user_mode_loop+0x70/0x110 [ 727.966601][ T111] exit_to_user_mode_prepare+0xee/0x180 [ 727.972253][ T111] syscall_exit_to_user_mode+0x1a/0x50 [ 727.977884][ T111] do_syscall_64+0x61/0xa0 [ 727.982597][ T5768] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 727.982597][ T5768] [ 727.998218][ T111] Modules linked in: [ 728.002190][ T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 728.009436][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 728.019613][ T111] Call Trace: [ 728.022913][ T111] [ 728.025875][ T111] dump_stack_lvl+0x18c/0x250 [ 728.030603][ T111] ? show_regs_print_info+0x20/0x20 [ 728.036000][ T111] ? swiotlb_print_info+0x70/0x70 [ 728.041056][ T111] ? dump_page+0xba3/0x14a0 [ 728.045586][ T111] bad_page+0x14b/0x170 [ 728.049759][ T111] free_unref_page_prepare+0x85f/0x8c0 [ 728.055258][ T111] free_unref_page+0x32/0x2e0 [ 728.059959][ T111] ? __folio_put+0xef/0x210 [ 728.064479][ T111] txUnlock+0x27e/0xcb0 [ 728.068681][ T111] ? lockdep_hardirqs_on+0x98/0x150 [ 728.074089][ T111] jfs_lazycommit+0x56e/0xa70 [ 728.078807][ T111] ? txFreelock+0x5a0/0x5a0 [ 728.083343][ T111] ? do_task_dead+0xd0/0xd0 [ 728.087869][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 728.092828][ T111] kthread+0x2fa/0x390 [ 728.096914][ T111] ? txFreelock+0x5a0/0x5a0 [ 728.101436][ T111] ? kthread_blkcg+0xd0/0xd0 [ 728.106145][ T111] ret_from_fork+0x48/0x80 [ 728.110576][ T111] ? kthread_blkcg+0xd0/0xd0 [ 728.115181][ T111] ret_from_fork_asm+0x11/0x20 [ 728.119973][ T111] [ 728.125516][ T5768] ERROR: (device loop3): remounting filesystem as read-only [ 728.135141][ T111] Disabling lock debugging due to kernel taint [ 728.141404][ T111] page:ffffea0001295340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x4a54d [ 728.154882][ T111] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 728.172406][ T111] page_type: 0xffffffff() [ 728.178598][ T111] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 728.187997][ T111] raw: 000000000000001c ffff88802f2412e8 00000000ffffffff 0000000000000000 [ 728.204735][ T111] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 728.222044][ T111] page_owner tracks the page as allocated [ 728.235080][ T111] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 12908, tgid 12907 (syz.3.1921), ts 727072435494, free_ts 727030016703 [ 728.256560][ T111] post_alloc_hook+0x1c1/0x200 [ 728.261693][ T111] get_page_from_freelist+0x1951/0x19e0 [ 728.267554][ T111] __alloc_pages+0x1f0/0x460 [ 728.273257][ T111] folio_alloc+0x1e/0x30 [ 728.277572][ T111] filemap_alloc_folio+0xdf/0x490 [ 728.284316][ T111] do_read_cache_folio+0x364/0x7d0 [ 728.289541][ T111] do_read_cache_page+0x32/0x250 [ 728.294538][ T111] __get_metapage+0x31a/0xfa0 [ 728.299239][ T111] diRead+0x6d3/0xb90 [ 728.303339][ T111] jfs_iget+0x90/0x440 [ 728.309163][ T111] jfs_fill_super+0x712/0xad0 [ 728.313857][ T111] mount_bdev+0x221/0x2d0 [ 728.318237][ T111] legacy_get_tree+0xea/0x180 [ 728.323055][ T111] vfs_get_tree+0x8c/0x280 [ 728.328372][ T111] do_new_mount+0x24b/0xa40 [ 728.332970][ T111] __se_sys_mount+0x2e7/0x3d0 [ 728.338649][ T111] page last free stack trace: [ 728.343350][ T111] free_unref_page_prepare+0x7b2/0x8c0 [ 728.349752][ T111] free_unref_page_list+0xbe/0x860 [ 728.354982][ T111] release_pages+0x1f7a/0x2200 [ 728.360110][ T111] tlb_flush_mmu+0x379/0x510 [ 728.365327][ T111] tlb_finish_mmu+0xf9/0x220 [ 728.371728][ T111] exit_mmap+0x428/0xb90 [ 728.376020][ T111] __mmput+0x118/0x3c0 [ 728.380302][ T111] exit_mm+0x1f2/0x2c0 [ 728.384429][ T111] do_exit+0x8dd/0x2460 [ 728.388615][ T111] do_group_exit+0x21b/0x2d0 [ 728.394215][ T111] get_signal+0x12fc/0x13f0 [ 728.398749][ T111] arch_do_signal_or_restart+0xc2/0x800 [ 728.404474][ T111] exit_to_user_mode_loop+0x70/0x110 [ 728.409803][ T111] exit_to_user_mode_prepare+0xee/0x180 [ 728.416130][ T111] syscall_exit_to_user_mode+0x1a/0x50 [ 728.421710][ T111] do_syscall_64+0x61/0xa0 [ 728.426318][ T111] ------------[ cut here ]------------ [ 728.431790][ T111] kernel BUG at include/linux/mm.h:1458! [ 728.439889][ T111] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 728.445988][ T111] CPU: 1 PID: 111 Comm: jfsCommit Tainted: G B syzkaller #0 [ 728.454749][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 728.464859][ T111] RIP: 0010:put_metapage+0x253/0x340 [ 728.470183][ T111] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 3d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 56 45 81 [ 728.489903][ T111] RSP: 0018:ffffc9000250fcc0 EFLAGS: 00010246 [ 728.496008][ T111] RAX: d9da66207ad23600 RBX: ffff88802f2412e8 RCX: d9da66207ad23600 [ 728.504007][ T111] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00 [ 728.511990][ T111] RBP: 000000000000007f R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 728.519985][ T111] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802f241310 [ 728.527987][ T111] R13: ffffea0001295374 R14: 1ffff11005e48262 R15: 1ffff11005e4826f [ 728.536002][ T111] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 728.544960][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.551560][ T111] CR2: 00007f8e057eb4b8 CR3: 000000002dff8000 CR4: 00000000003506e0 [ 728.559541][ T111] Call Trace: [ 728.562829][ T111] [ 728.565772][ T111] txUnlock+0x427/0xcb0 [ 728.569960][ T111] jfs_lazycommit+0x56e/0xa70 [ 728.574656][ T111] ? txFreelock+0x5a0/0x5a0 [ 728.579167][ T111] ? do_task_dead+0xd0/0xd0 [ 728.583896][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 728.588845][ T111] kthread+0x2fa/0x390 [ 728.592920][ T111] ? txFreelock+0x5a0/0x5a0 [ 728.597433][ T111] ? kthread_blkcg+0xd0/0xd0 [ 728.602025][ T111] ret_from_fork+0x48/0x80 [ 728.606451][ T111] ? kthread_blkcg+0xd0/0xd0 [ 728.611048][ T111] ret_from_fork_asm+0x11/0x20 [ 728.615833][ T111] [ 728.618861][ T111] Modules linked in: [ 728.629972][ T111] ---[ end trace 0000000000000000 ]--- [ 728.636385][ T111] RIP: 0010:put_metapage+0x253/0x340 [ 728.641710][ T111] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 3d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 56 45 81 [ 728.662621][ T111] RSP: 0018:ffffc9000250fcc0 EFLAGS: 00010246 [ 728.668770][ T111] RAX: d9da66207ad23600 RBX: ffff88802f2412e8 RCX: d9da66207ad23600 [ 728.676787][ T111] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00 [ 728.686100][ T111] RBP: 000000000000007f R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 728.696250][ T111] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802f241310 [ 728.705197][ T111] R13: ffffea0001295374 R14: 1ffff11005e48262 R15: 1ffff11005e4826f [ 728.713361][ T111] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 728.723301][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.729898][ T111] CR2: 00007f8e057eb4b8 CR3: 000000002dff8000 CR4: 00000000003506e0 [ 728.737942][ T111] Kernel panic - not syncing: Fatal exception [ 728.744490][ T111] Kernel Offset: disabled [ 728.748818][ T111] Rebooting in 86400 seconds..