last executing test programs: 55.030145603s ago: executing program 1 (id=626): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000640)="056bf119e39200a0bc1832cef2aabe9ea128ad450b691d26de8e58e1526bca9d63da4fe0fb46cab860011955d71c7d65c38bfdf680c4c65ee5082b57b426009d1f0d0b9cf8e48a8dd722107a7f2740da9ba71c10f542b8480d7d67e4cf9538ec08b2623915a49dcd6c864432", 0x1}, 0x38) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 54.920485886s ago: executing program 1 (id=628): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, 0x0, 0x15) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x138) 54.799781029s ago: executing program 1 (id=631): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 52.695086829s ago: executing program 1 (id=656): r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) 52.407978406s ago: executing program 1 (id=660): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000000)='./file1\x00', 0x2, 0x3) 52.25084671s ago: executing program 1 (id=662): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001042abd7000feffffff00000000", @ANYRES32=r1, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 37.078081046s ago: executing program 32 (id=662): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001042abd7000feffffff00000000", @ANYRES32=r1, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 3.375553839s ago: executing program 0 (id=1057): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='1-', @ANYRESOCT], 0x31) 3.364964939s ago: executing program 5 (id=1070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x107}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000021c0)={0x4a}) 3.092102685s ago: executing program 0 (id=1059): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/244, 0xf4}], 0x1) 2.90717205s ago: executing program 5 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x200460d4}, 0x40000) 2.752912433s ago: executing program 0 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000001680)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431202d", 0x1e) 2.662131666s ago: executing program 4 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000000080)='0', 0x1) 2.512100519s ago: executing program 5 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000300)={0x10, 0xffffffffffffffda}, 0x10) 2.336780564s ago: executing program 4 (id=1069): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.336125434s ago: executing program 0 (id=1071): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chown(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0) 2.228666946s ago: executing program 5 (id=1072): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) 1.922700594s ago: executing program 5 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x107}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000021c0)={0x4a}) 1.882351175s ago: executing program 2 (id=1076): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c757466383d302c756e695f786c6174653d302c7379735f696d6d757461626c652c73686f72746e616d653d77696e6e742c6e66732c73686f72746e616d653d6d697865642c757466383d302c757466383d302c646f733178666c6f7070792c005ed7e1c60e1e4f99bc11ea609b1c727da01621a57ec76f5bbcab08114fe9bcb8b11c670e963f24066af5d9629c983f94e83f78466f5eb1e250818b781f5babb206ca79c3ee4e7c386cbd0b7cc5dfaff3fcf343740f655d1fde1fbf4bb1f8f043977cb3805cce6be75394f05cfed0c7b937f49dfaec4a2878e925c3f8dd7dddf3b8bff64caa3d56dd247561ce0f84966d189d8edeed649e3f8f88360bee647aaadc37398e9a7bf998ba5ea6094df5510268935eb02a9033a748019ae6f0e811711fd14dddb34f2a7ed6cf17e400dfb35a"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.823309636s ago: executing program 3 (id=1077): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/244, 0xf4}], 0x1) 1.780022497s ago: executing program 4 (id=1087): open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa000014a) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.483367835s ago: executing program 5 (id=1078): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x29c3, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r0, 0x0, 0x0, 0x4000000}]) 1.356526397s ago: executing program 2 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 1.355937907s ago: executing program 3 (id=1090): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.349896277s ago: executing program 4 (id=1091): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 1.069408424s ago: executing program 2 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000001680)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431202d", 0x1e) 1.068774564s ago: executing program 0 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x200460d4}, 0x40000) 833.90299ms ago: executing program 3 (id=1082): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000000080)='0', 0x1) 826.85691ms ago: executing program 0 (id=1083): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 757.961572ms ago: executing program 2 (id=1084): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000300)={0x10, 0xffffffffffffffda}, 0x10) 489.844468ms ago: executing program 2 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001000000300051"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 489.768878ms ago: executing program 3 (id=1086): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='1-', @ANYRESOCT], 0x31) 308.919643ms ago: executing program 3 (id=1088): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe02, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "595b6028a0e4931133f6d9919fd48557896811cd874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) 308.817192ms ago: executing program 4 (id=1089): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)='(', 0x1}], 0x1}}], 0x1, 0x40000c4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x1}, 0x8) 21.27859ms ago: executing program 3 (id=1092): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="1f", 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 20.74007ms ago: executing program 2 (id=1102): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r1, 0x0) 0s ago: executing program 4 (id=1093): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000000b00), 0x64) kernel console output (not intermixed with test programs): te_media_entity: media entity 'dvb-demux' registered. [ 94.911218][ T4601] dvb-usb: bulk message failed: -22 (4/0) [ 94.940789][ T4635] loop3: detected capacity change from 0 to 512 [ 94.994347][ T127] dvb-usb: bulk message failed: -22 (6/0) [ 95.014348][ T127] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.068314][ T127] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 95.148374][ T4635] FAT-fs (loop3): error, invalid access to FAT (entry 0x00020000) [ 95.158277][ T127] dvb-usb: schedule remote query interval to 150 msecs. [ 95.179223][ T4635] FAT-fs (loop3): Filesystem has been set read-only [ 95.184720][ T127] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.200068][ T4635] FAT-fs (loop3): error, invalid access to FAT (entry 0x00020000) [ 95.205329][ T127] usb 5-1: USB disconnect, device number 2 [ 95.373934][ T127] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.830404][ T4649] Format for deleting device is "id" (uint). [ 96.347119][ T4670] loop1: detected capacity change from 0 to 512 [ 96.448253][ T4670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00020000) [ 96.467375][ T4670] FAT-fs (loop1): Filesystem has been set read-only [ 96.480047][ T4670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00020000) [ 96.567823][ T1182] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.657165][ T127] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.774779][ T1182] usb 3-1: Using ep0 maxpacket: 8 [ 96.784498][ T1182] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 96.820229][ T1182] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.852082][ T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.864008][ T1182] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.894448][ T127] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.902847][ T1182] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 96.924745][ T127] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 96.953549][ T1182] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 96.974897][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.997599][ T1182] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.024833][ T127] usb 1-1: config 0 descriptor?? [ 97.059230][ T1182] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.070610][ T127] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 97.098129][ T127] dvb-usb: bulk message failed: -22 (3/0) [ 97.103008][ T1182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.142926][ T127] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.183400][ T127] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 97.223174][ T127] usb 1-1: media controller created [ 97.229793][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.255842][ T4672] dvb-usb: bulk message failed: -22 (4/0) [ 97.288615][ T127] dvb-usb: bulk message failed: -22 (6/0) [ 97.299484][ T127] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 97.320595][ T127] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 97.340358][ T127] dvb-usb: schedule remote query interval to 150 msecs. [ 97.350736][ T1182] usb 3-1: GET_CAPABILITIES returned 0 [ 97.356897][ T1182] usbtmc 3-1:16.0: can't read capabilities [ 97.364664][ T127] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 97.398922][ T127] usb 1-1: USB disconnect, device number 3 [ 97.445974][ T127] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 97.617646][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 97.632075][ T4668] usbtmc 3-1:16.0: Unable to send data, error -71 [ 97.643733][ T7] usb 3-1: USB disconnect, device number 2 [ 97.672852][ T4689] loop4: detected capacity change from 0 to 164 [ 98.211879][ T4700] loop0: detected capacity change from 0 to 512 [ 98.238133][ T4686] loop1: detected capacity change from 0 to 32768 [ 98.330872][ T4700] FAT-fs (loop0): error, invalid access to FAT (entry 0x00020000) [ 98.383025][ T4700] FAT-fs (loop0): Filesystem has been set read-only [ 98.423621][ T4700] FAT-fs (loop0): error, invalid access to FAT (entry 0x00020000) [ 99.245981][ T4392] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.444955][ T4392] usb 2-1: Using ep0 maxpacket: 32 [ 99.462037][ T4392] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.493693][ T4392] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.532958][ T4392] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.556039][ T4392] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 99.570940][ T4392] usb 2-1: Product: syz [ 99.575483][ T4392] usb 2-1: Manufacturer: syz [ 99.601535][ T4392] hub 2-1:4.0: USB hub found [ 99.764090][ T4730] loop2: detected capacity change from 0 to 64 [ 99.806355][ T4392] hub 2-1:4.0: 1 port detected [ 100.015127][ T4392] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 100.028805][ T4738] loop2: detected capacity change from 0 to 512 [ 100.042151][ T4392] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 100.125068][ T127] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.138763][ T4392] usb 2-1: USB disconnect, device number 2 [ 100.155963][ T26] audit: type=1400 audit(1791982256.658:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=4739 comm="syz.3.134" name="p" offset=53 [ 100.187407][ T4738] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 100.214658][ T4738] FAT-fs (loop2): Filesystem has been set read-only [ 100.221613][ T4738] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 100.334810][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 100.344284][ T127] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 100.355890][ T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 100.367663][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.377889][ T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 100.389340][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 100.399787][ T127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.415442][ T127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.424726][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.644425][ T127] usb 5-1: GET_CAPABILITIES returned 0 [ 100.657673][ T127] usbtmc 5-1:16.0: can't read capabilities [ 100.723584][ T4750] loop2: detected capacity change from 0 to 512 [ 100.843328][ T4750] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 100.919959][ T4750] System zones: 0-2, 18-18, 34-35 [ 100.946560][ T4750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.971819][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 100.982787][ T4734] usbtmc 5-1:16.0: Unable to send data, error -71 [ 101.002026][ T4352] usb 5-1: USB disconnect, device number 3 [ 101.027663][ T4750] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.294703][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 101.864663][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.913040][ T4777] sock: sock_timestamping_bind_phc: sock not bind to device [ 102.056229][ T127] usb 4-1: config 3 has an invalid interface number: 127 but max is 0 [ 102.064551][ T127] usb 4-1: config 3 has no interface number 0 [ 102.082804][ T127] usb 4-1: config 3 interface 127 has no altsetting 0 [ 102.102951][ T127] usb 4-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 102.132890][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.153252][ T127] usb 4-1: Product: syz [ 102.157651][ T127] usb 4-1: Manufacturer: syz [ 102.162465][ T127] usb 4-1: SerialNumber: syz [ 102.306881][ T4786] loop2: detected capacity change from 0 to 256 [ 102.331742][ T4273] block nbd0: Receive control failed (result -32) [ 102.338806][ T4288] block nbd0: Receive control failed (result -32) [ 102.399965][ T127] usb-storage 4-1:3.127: USB Mass Storage device detected [ 102.503003][ T127] usb-storage 4-1:3.127: Quirks match for vid 0451 pid 5416: 2 [ 102.617568][ T127] usb 4-1: USB disconnect, device number 3 [ 102.934924][ T4282] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.134896][ T4282] usb 2-1: Using ep0 maxpacket: 8 [ 103.144199][ T4282] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 103.189137][ T4282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 103.234142][ T4282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.249989][ T4282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 103.292171][ T4282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 103.313966][ T4282] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.352156][ T4282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.381764][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.484169][ T4817] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.631608][ T4282] usb 2-1: GET_CAPABILITIES returned 0 [ 103.642222][ T4282] usbtmc 2-1:16.0: can't read capabilities [ 103.864140][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.873912][ T4797] usbtmc 2-1:16.0: Unable to send data, error -71 [ 103.882549][ T7] usb 2-1: USB disconnect, device number 3 [ 104.056191][ T4827] loop3: detected capacity change from 0 to 512 [ 104.110913][ T4827] EXT4-fs: Ignoring removed bh option [ 104.201523][ T4827] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 104.232984][ T4827] EXT4-fs (loop3): 1 truncate cleaned up [ 104.274809][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.450364][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 104.588888][ T4835] loop1: detected capacity change from 0 to 8 [ 104.980519][ T4849] loop0: detected capacity change from 0 to 2048 [ 105.034950][ T4849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.195024][ T4854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.181'. [ 105.912739][ T4875] loop0: detected capacity change from 0 to 16 [ 105.941480][ T4875] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 106.021489][ T4872] loop2: detected capacity change from 0 to 4096 [ 106.066769][ T4872] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 106.567168][ T4893] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 106.683836][ T4898] loop4: detected capacity change from 0 to 1024 [ 106.708377][ T4898] EXT4-fs: Ignoring removed bh option [ 106.738980][ T4898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.847759][ T4898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.950514][ T4898] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.171522][ T4898] syz.4.201 (4898) used greatest stack depth: 20656 bytes left [ 107.219937][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 107.635819][ T4925] loop3: detected capacity change from 0 to 512 [ 107.665970][ T4925] EXT4-fs: Ignoring removed nobh option [ 107.737369][ T4925] EXT4-fs (loop3): 1 truncate cleaned up [ 107.743135][ T4925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.990727][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 108.481538][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 108.513952][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 108.549844][ T4956] netlink: 'syz.2.224': attribute type 18 has an invalid length. [ 109.376954][ T4966] loop1: detected capacity change from 0 to 512 [ 109.439432][ T4966] EXT4-fs (loop1): 1 truncate cleaned up [ 109.506593][ T4966] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.543958][ T4951] loop3: detected capacity change from 0 to 40427 [ 109.557836][ T4951] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 109.564526][ T4951] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 109.641044][ T4951] F2FS-fs (loop3): invalid crc value [ 109.682950][ T26] audit: type=1800 audit(1791982266.188:3): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.228" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 109.684272][ T4966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.228: bg 0: block 465: padding at end of block bitmap is not set [ 109.727828][ T4951] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 109.785074][ T4966] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 109.855086][ T4966] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.855086][ T4966] [ 109.884436][ T4966] EXT4-fs (loop1): Total free blocks count 0 [ 109.918511][ T4966] EXT4-fs (loop1): Free/Dirty block details [ 109.924536][ T4966] EXT4-fs (loop1): free_blocks=0 [ 109.944440][ T4966] EXT4-fs (loop1): dirty_blocks=9 [ 109.953984][ T4951] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 109.957536][ T4984] loop0: detected capacity change from 0 to 2048 [ 109.974476][ T4966] EXT4-fs (loop1): Block reservation details [ 109.974857][ T4951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.980790][ T4966] EXT4-fs (loop1): i_reserved_data_blocks=9 [ 110.115917][ T1182] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 110.129637][ T4987] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.187125][ T4280] syz-executor: attempt to access beyond end of device [ 110.187125][ T4280] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.241814][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 110.306103][ T1182] usb 5-1: not running at top speed; connect to a high speed hub [ 110.327933][ T1182] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 110.376325][ T1182] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.412328][ T1182] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 110.442211][ T1182] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 110.499005][ T1182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.575709][ T1182] usb 5-1: config 0 descriptor?? [ 110.623646][ T1182] usb 5-1: Found UVC 9.00 device (046d:0825) [ 111.018995][ T1182] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 111.104021][ T1182] videodev: could not get a free minor [ 111.114514][ T5000] loop1: detected capacity change from 0 to 1024 [ 111.123391][ T1182] uvcvideo 5-1:0.1: Failed to register meta-cap device (-23). [ 111.264536][ T4348] usb 5-1: USB disconnect, device number 4 [ 111.295985][ T5000] futex_wake_op: syz.1.242 tries to shift op by -1; fix this program [ 111.335501][ T5000] futex_wake_op: syz.1.242 tries to shift op by -1; fix this program [ 111.510861][ T2906] hfsplus: b-tree write err: -5, ino 25 [ 111.525102][ T2906] hfsplus: b-tree write err: -5, ino 4 [ 111.547860][ T2906] hfsplus: b-tree write err: -5, ino 2 [ 112.089840][ T5026] netlink: 27 bytes leftover after parsing attributes in process `syz.1.252'. [ 112.721690][ T5043] Bluetooth: MGMT ver 1.22 [ 113.149882][ T5052] loop3: detected capacity change from 0 to 1024 [ 113.624726][ T4282] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.632444][ T5072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.273'. [ 113.823132][ T7] Process accounting resumed [ 113.837694][ T4282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.872703][ T4282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.903497][ T4282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.953071][ T4282] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 113.981747][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.038466][ T4282] usb 2-1: config 0 descriptor?? [ 114.297431][ T5091] loop3: detected capacity change from 0 to 64 [ 114.460998][ T5060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.509083][ T5060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.548854][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.568463][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.594708][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.613888][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.632341][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.655073][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.685880][ T4282] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 114.715281][ T4282] steelseries_srws1 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 114.776171][ T4387] usb 2-1: USB disconnect, device number 4 [ 115.881010][ T5115] loop0: detected capacity change from 0 to 32768 [ 116.295309][ T5147] loop3: detected capacity change from 0 to 64 [ 116.392564][ T5151] capability: warning: `syz.1.305' uses 32-bit capabilities (legacy support in use) [ 116.458901][ T5151] program syz.1.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.053465][ T5169] jffs2: notice: (5169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.251150][ T5175] loop0: detected capacity change from 0 to 256 [ 117.288206][ T5175] exfat: Deprecated parameter 'utf8' [ 117.318300][ T5175] exfat: Deprecated parameter 'utf8' [ 117.329605][ T5175] exfat: Deprecated parameter 'utf8' [ 117.392778][ T5175] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 117.791477][ T5190] loop4: detected capacity change from 0 to 128 [ 118.334241][ T5214] syz.4.330 (5214): attempted to duplicate a private mapping with mremap. This is not supported. [ 118.643757][ T5223] loop0: detected capacity change from 0 to 256 [ 118.655003][ T4387] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.868699][ T4387] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 118.899353][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.969939][ T4387] usb-storage 5-1:1.0: USB Mass Storage device detected [ 119.367250][ T4387] scsi host1: usb-storage 5-1:1.0 [ 119.431618][ T5239] netlink: 68 bytes leftover after parsing attributes in process `syz.2.340'. [ 119.578803][ T4387] usb 5-1: USB disconnect, device number 5 [ 119.817697][ T26] audit: type=1400 audit(1791982276.328:4): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5251 comm="syz.2.347" name="p" offset=48 [ 121.174582][ C1] sched: RT throttling activated [ 121.291415][ T5268] loop2: detected capacity change from 0 to 131072 [ 121.301970][ T5268] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 121.309972][ T5268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 121.321433][ T5268] F2FS-fs (loop2): Test dummy encryption mode enabled [ 121.331711][ T5268] F2FS-fs (loop2): invalid crc value [ 121.361569][ T5268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.401316][ T5268] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 121.424924][ T5268] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 121.457910][ T5268] F2FS-fs (loop2): Start checkpoint disabled! [ 121.530646][ T5268] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 121.539108][ T5268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.966715][ T5310] loop4: detected capacity change from 0 to 128 [ 122.082380][ T26] audit: type=1800 audit(1791982278.588:5): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.369" name="file1" dev="loop4" ino=1048677 res=0 errno=0 [ 122.137618][ T5314] syz.4.369: attempt to access beyond end of device [ 122.137618][ T5314] loop4: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 122.237995][ T5316] loop0: detected capacity change from 0 to 1024 [ 122.311547][ T5316] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 122.526395][ T11] kworker/u4:1: attempt to access beyond end of device [ 122.526395][ T11] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 122.637620][ T5328] loop1: detected capacity change from 0 to 16 [ 122.706806][ T5328] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 123.449419][ T5346] loop0: detected capacity change from 0 to 512 [ 123.574034][ T5346] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.384: iget: bad extended attribute block 134217728 [ 123.643360][ T5346] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.384: couldn't read orphan inode 15 (err -117) [ 123.656181][ T5346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.672370][ T26] audit: type=1800 audit(1791982280.178:6): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.384" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 123.677347][ T5346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.384: bg 0: block 465: padding at end of block bitmap is not set [ 123.710495][ T5346] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 123.726918][ T5346] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.384: invalid indirect mapped block 234881024 (level 0) [ 123.757551][ T5346] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.384: invalid indirect mapped block 768 (level 1) [ 123.774814][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.865596][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 123.980971][ T7] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 124.013008][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.031244][ T7] usb 5-1: Product: syz [ 124.031392][ T5361] loop0: detected capacity change from 0 to 164 [ 124.044670][ T7] usb 5-1: Manufacturer: syz [ 124.054674][ T7] usb 5-1: SerialNumber: syz [ 124.070520][ T7] usb 5-1: config 0 descriptor?? [ 124.104912][ T5363] Format for deleting device is "id" (uint). [ 124.328003][ T7] usb 5-1: USB disconnect, device number 6 [ 124.452481][ T5340] loop1: detected capacity change from 0 to 40427 [ 124.476502][ T5340] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 124.502362][ T5340] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 124.535024][ T5340] F2FS-fs (loop1): invalid crc value [ 124.552474][ T5340] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 124.671887][ T5340] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 124.687281][ T5340] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.699602][ T4392] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.819917][ T4272] syz-executor: attempt to access beyond end of device [ 124.819917][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.881052][ T5359] loop3: detected capacity change from 0 to 32768 [ 124.894668][ T4392] usb 3-1: Using ep0 maxpacket: 8 [ 124.911808][ T4392] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.943689][ T4392] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.999749][ T4392] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.032621][ T4392] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.068552][ T5359] JBD2: Ignoring recovery information on journal [ 125.130576][ T4392] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.186152][ T4392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.355263][ T5359] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.470269][ T4392] usb 3-1: GET_CAPABILITIES returned 0 [ 125.476096][ T4392] usbtmc 3-1:16.0: can't read capabilities [ 125.635319][ T5394] loop1: detected capacity change from 0 to 512 [ 125.642572][ T5359] syz.3.390 (5359) used greatest stack depth: 18624 bytes left [ 125.662086][ T5394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.693995][ T5367] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 125.713147][ T4392] usb 3-1: USB disconnect, device number 3 [ 125.752591][ T5394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.401: bg 0: block 473: padding at end of block bitmap is not set [ 125.788055][ T5394] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 125.791565][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 125.893954][ T5394] EXT4-fs (loop1): 1 orphan inode deleted [ 125.918784][ T9] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.951453][ T5394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.971192][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 125.983895][ T5394] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.169796][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 126.337565][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.359851][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.383084][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.407421][ T5413] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.416227][ T5419] capability: warning: `syz.4.412' uses deprecated v2 capabilities in a way that may be insecure [ 126.424230][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 126.608046][ T26] audit: type=1400 audit(1791982283.118:7): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5422 comm="syz.4.414" name="unknown" offset=82 [ 127.849334][ T5454] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 128.390290][ T5480] loop3: detected capacity change from 0 to 1024 [ 129.781762][ T5531] loop3: detected capacity change from 0 to 136 [ 130.711315][ T5528] loop1: detected capacity change from 0 to 32768 [ 130.862025][ T5528] XFS (loop1): Mounting V5 Filesystem [ 130.983051][ T5528] XFS (loop1): Ending clean mount [ 131.072416][ T1182] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.243095][ T4272] XFS (loop1): Unmounting Filesystem [ 131.264820][ T1182] usb 4-1: Using ep0 maxpacket: 8 [ 131.279227][ T1182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.319006][ T1182] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.367969][ T1182] usb 4-1: New USB device found, idVendor=0def, idProduct=6047, bcdDevice= 0.00 [ 131.394821][ T1182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.409655][ T1182] usb 4-1: config 0 descriptor?? [ 131.653169][ T5570] loop4: detected capacity change from 0 to 512 [ 131.695769][ T5570] EXT4-fs: Ignoring removed oldalloc option [ 131.808230][ T5570] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.478: bg 0: block 7: invalid block bitmap [ 131.832623][ T1182] hid-generic 0003:0DEF:6047.0002: unknown main item tag 0x0 [ 131.850603][ T1182] hid-generic 0003:0DEF:6047.0002: unknown main item tag 0x0 [ 131.870931][ T1182] hid-generic 0003:0DEF:6047.0002: unknown main item tag 0x1 [ 131.878903][ T1182] hid-generic 0003:0DEF:6047.0002: unknown main item tag 0x0 [ 131.886482][ T1182] hid-generic 0003:0DEF:6047.0002: unknown main item tag 0x0 [ 131.894072][ T1182] hid-generic 0003:0DEF:6047.0002: unbalanced collection at end of report description [ 131.908066][ T1182] hid-generic: probe of 0003:0DEF:6047.0002 failed with error -22 [ 131.930487][ T5570] EXT4-fs (loop4): Remounting filesystem read-only [ 131.960454][ T5570] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 132.001387][ T5570] EXT4-fs (loop4): Remounting filesystem read-only [ 132.034034][ T1182] usb 4-1: USB disconnect, device number 4 [ 132.040870][ T5570] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2921: inode #11: comm syz.4.478: corrupted xattr block 95 [ 132.097100][ T5570] EXT4-fs (loop4): Remounting filesystem read-only [ 132.103958][ T5570] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 132.121350][ T5570] EXT4-fs (loop4): 1 orphan inode deleted [ 132.142083][ T5570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.207137][ T5570] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.4.478: path /93/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=3, size=60 fake=0 [ 132.301846][ T5570] EXT4-fs (loop4): Remounting filesystem read-only [ 132.308291][ T5578] loop2: detected capacity change from 0 to 2048 [ 132.324895][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 132.333071][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.405645][ T5578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.513622][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 132.724713][ T4273] Bluetooth: hci0: command 0x0401 tx timeout [ 132.758993][ T5587] loop4: detected capacity change from 0 to 512 [ 132.827690][ T5589] Bluetooth: hci0: unsupported parameter 5135 [ 132.833869][ T5589] Bluetooth: hci0: unsupported parameter 8192 [ 132.856061][ T5590] loop0: detected capacity change from 0 to 64 [ 132.882170][ T5589] Bluetooth: hci0: unsupported parameter 5135 [ 132.890618][ T5592] program syz.1.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.922044][ T5589] Bluetooth: hci0: unsupported parameter 8192 [ 133.026673][ T5595] process 'syz.4.488' launched '/dev/fd/4' with NULL argv: empty string added [ 133.048578][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055451][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.727758][ T26] audit: type=1400 audit(1791982290.238:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/oo" pid=5615 comm="syz.0.497" [ 133.947070][ T5623] sch_tbf: burst 2464 is lower than device lo mtu (65550) ! [ 134.072402][ T5627] sd 0:0:1:0: PR command failed: 1026 [ 134.091583][ T5627] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 134.121662][ T5627] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 134.284732][ T4387] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 134.326136][ T5637] loop3: detected capacity change from 0 to 256 [ 134.349335][ T5637] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.411955][ T5637] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.496685][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.524620][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.565008][ T4387] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 134.594648][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.641383][ T4387] usb 5-1: config 0 descriptor?? [ 134.856743][ T5648] loop3: detected capacity change from 0 to 1024 [ 134.935402][ T5648] hfsplus: invalid length 1033 has been corrected to 255 [ 134.983456][ T5648] hfsplus: invalid length 1033 has been corrected to 255 [ 135.078032][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.095506][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.105406][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.112333][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.139755][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.158499][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.168632][ T4387] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 135.196007][ T4387] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 135.238969][ T2906] hfsplus: invalid length 1033 has been corrected to 255 [ 135.268423][ T2906] hfsplus: b-tree write err: -5, ino 25 [ 135.289131][ T2906] hfsplus: b-tree write err: -5, ino 4 [ 135.316451][ T2906] hfsplus: invalid length 1033 has been corrected to 255 [ 135.354786][ T2906] hfsplus: b-tree write err: -5, ino 2 [ 135.483973][ T4387] usb 5-1: USB disconnect, device number 7 [ 135.618077][ T5661] fido_id[5661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 135.807182][ T5646] loop0: detected capacity change from 0 to 40427 [ 135.845889][ T5646] F2FS-fs (loop0): invalid crc value [ 135.894770][ T5646] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.056158][ T5646] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 136.130841][ T5646] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 136.207998][ T5646] syz.0.511: attempt to access beyond end of device [ 136.207998][ T5646] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.376719][ T5692] usb usb7: usbfs: process 5692 (syz.2.529) did not claim interface 0 before use [ 136.586915][ T5696] loop2: detected capacity change from 0 to 512 [ 136.677154][ T5696] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #15: comm syz.2.533: inline data xattr refers to an external xattr inode [ 136.759315][ T5696] EXT4-fs (loop2): Remounting filesystem read-only [ 136.775354][ T5696] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.533: couldn't read orphan inode 15 (err -117) [ 136.779750][ T5671] loop3: detected capacity change from 0 to 40427 [ 136.811486][ T5696] EXT4-fs (loop2): Remounting filesystem read-only [ 136.818303][ T5696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.845536][ T5671] F2FS-fs (loop3): invalid crc value [ 136.932927][ T5671] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.165793][ T5671] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 137.236962][ T5704] f2fs_ckpt-7:3: attempt to access beyond end of device [ 137.236962][ T5704] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 137.282447][ T5723] kAFS: Invalid Command on /proc/fs/afs/cells file [ 137.422682][ T5725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.541'. [ 137.476165][ T5725] netem: change failed [ 137.593186][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 137.886219][ T5740] loop1: detected capacity change from 0 to 164 [ 138.620606][ T5751] ima: policy update completed [ 138.668037][ T5754] program syz.4.553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.704914][ T26] audit: type=1807 audit(1791982295.118:9): action=measure res=1 [ 138.713803][ T26] audit: type=1802 audit(1791982295.158:10): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.552" res=1 errno=0 [ 139.051833][ T5742] loop3: detected capacity change from 0 to 131072 [ 139.061082][ T5742] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 139.070071][ T5742] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.070976][ T26] audit: type=1800 audit(1791982295.578:11): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37635 res=0 errno=0 [ 139.155652][ T5742] F2FS-fs (loop3): invalid crc value [ 139.222449][ T5742] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.277937][ T5742] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.280805][ T5769] netlink: 'syz.4.558': attribute type 12 has an invalid length. [ 139.285250][ T5742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 139.342868][ T5769] netlink: 'syz.4.558': attribute type 29 has an invalid length. [ 139.351065][ T26] audit: type=1800 audit(1791982295.698:12): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37635 res=0 errno=0 [ 139.361386][ T5769] netlink: 148 bytes leftover after parsing attributes in process `syz.4.558'. [ 139.425228][ T5769] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 139.449701][ T26] audit: type=1800 audit(1791982295.898:13): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144292 res=0 errno=0 [ 139.472770][ T5769] netlink: 47 bytes leftover after parsing attributes in process `syz.4.558'. [ 139.495278][ T26] audit: type=1800 audit(1791982295.908:14): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144306 res=0 errno=0 [ 139.838103][ T26] audit: type=1800 audit(1791982296.348:15): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144321 res=0 errno=0 [ 139.904667][ T26] audit: type=1800 audit(1791982296.378:16): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144335 res=0 errno=0 [ 140.714330][ T4387] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0004/input/input9 [ 140.794504][ T5782] loop0: detected capacity change from 0 to 32768 [ 140.802277][ T4387] hid-generic 0005:0576:0306.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 140.833679][ T26] audit: type=1800 audit(1791982297.338:17): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144349 res=0 errno=0 [ 140.926529][ T26] audit: type=1800 audit(1791982297.338:18): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53027 res=0 errno=0 [ 141.022769][ T5782] XFS (loop0): Mounting V5 Filesystem [ 141.100068][ T5794] loop4: detected capacity change from 0 to 32768 [ 141.125542][ T1182] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.144324][ T26] audit: type=1800 audit(1791982297.368:19): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144364 res=0 errno=0 [ 141.171340][ T5782] XFS (loop0): Ending clean mount [ 141.212195][ T5794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.569 (5794) [ 141.302124][ T26] audit: type=1800 audit(1791982297.368:20): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=144380 res=0 errno=0 [ 141.354830][ T1182] usb 4-1: Using ep0 maxpacket: 8 [ 141.362215][ T1182] usb 4-1: config 0 has no interfaces? [ 141.370825][ T5827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.392279][ T5794] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.422140][ T1182] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 141.431673][ T5794] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 141.465165][ T1182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.477795][ T5794] BTRFS info (device loop4): enabling auto defrag [ 141.484308][ T5794] BTRFS info (device loop4): use no compression [ 141.506082][ T1182] usb 4-1: Product: syz [ 141.510319][ T5830] loop2: detected capacity change from 0 to 256 [ 141.529537][ T5794] BTRFS info (device loop4): force clearing of disk cache [ 141.566556][ T5830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 141.574613][ T1182] usb 4-1: Manufacturer: syz [ 141.583849][ T5794] BTRFS info (device loop4): max_inline at 60 [ 141.607798][ T5794] BTRFS info (device loop4): disabling free space tree [ 141.624194][ T1182] usb 4-1: SerialNumber: syz [ 141.645728][ T1182] usb 4-1: config 0 descriptor?? [ 141.777293][ T4279] XFS (loop0): Unmounting Filesystem [ 141.869305][ T4387] usb 4-1: USB disconnect, device number 5 [ 142.034364][ T5794] BTRFS info (device loop4): enabling ssd optimizations [ 142.106022][ T5794] BTRFS info (device loop4): rebuilding free space tree [ 142.296784][ T5794] BTRFS info (device loop4): disabling free space tree [ 142.314110][ T5794] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.334694][ T5794] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.354374][ T5856] loop1: detected capacity change from 0 to 1024 [ 142.412790][ T5856] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 142.576669][ T4274] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.891831][ T7] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 143.091119][ T5882] fido_id[5882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.174846][ T4348] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.210866][ T5886] loop0: detected capacity change from 0 to 256 [ 143.281969][ T5886] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 143.310961][ T5891] 9pnet: p9_errstr2errno: server reported unknown error [ 143.364711][ T4348] usb 4-1: Using ep0 maxpacket: 16 [ 143.372189][ T4348] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.416410][ T4348] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.436060][ T4348] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 143.474643][ T4348] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.481614][ T4348] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 143.520497][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.541810][ T4348] usb 4-1: config 0 descriptor?? [ 143.747928][ T5889] zswap: compressor not available [ 143.966014][ T4348] hid (null): report_id 0 is invalid [ 143.982230][ T4348] hid (null): report_id 0 is invalid [ 144.171223][ T4348] usb 4-1: USB disconnect, device number 6 [ 144.340522][ T26] kauditd_printk_skb: 106 callbacks suppressed [ 144.340539][ T26] audit: type=1800 audit(1791982300.848:127): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.608" name="quirks" dev="sysfs" ino=7319 res=0 errno=0 [ 144.802401][ T26] audit: type=1800 audit(1791982301.308:128): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144815 res=0 errno=0 [ 144.823210][ T26] audit: type=1800 audit(1791982301.328:129): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144827 res=0 errno=0 [ 144.831409][ T26] audit: type=1800 audit(1791982301.338:130): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144839 res=0 errno=0 [ 144.858692][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.079436][ T5941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.616'. [ 145.218783][ T26] audit: type=1800 audit(1791982301.728:131): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.619" name="cur_state" dev="sysfs" ino=28160 res=0 errno=0 [ 145.885044][ T5972] loop0: detected capacity change from 0 to 1024 [ 145.911200][ T26] audit: type=1800 audit(1791982302.418:132): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37314 res=0 errno=0 [ 145.948570][ T5972] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 145.971473][ T26] audit: type=1800 audit(1791982302.458:133): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52927 res=0 errno=0 [ 145.974248][ T5972] EXT4-fs (loop0): orphan cleanup on readonly fs [ 145.997123][ T26] audit: type=1800 audit(1791982302.468:134): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52950 res=0 errno=0 [ 146.018920][ T5972] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.630: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.027914][ T5973] loop4: detected capacity change from 0 to 4096 [ 146.041003][ T5972] EXT4-fs (loop0): 1 orphan inode deleted [ 146.047134][ T5972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.076339][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.630: path /135/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 146.099192][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 17: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.115234][ T5973] ntfs: (device loop4): parse_options(): The disable_sparse option requires a boolean argument. [ 146.140846][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 18: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.184816][ T4348] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.196491][ T5979] EXT4-fs error (device loop0): ext4_lookup:1860: inode #15: comm syz.0.630: iget: bad i_size value: 1970324836974602 [ 146.224140][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 19: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.249385][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 20: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.272219][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 21: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.301764][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.342640][ T5972] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 23: comm syz.0.630: path /135/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.396970][ T4348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.414353][ T5983] program syz.3.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.421082][ T4348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.456468][ T5982] netlink: 464 bytes leftover after parsing attributes in process `syz.4.633'. [ 146.470073][ T4348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.509825][ T4348] usb 2-1: string descriptor 0 read error: -22 [ 146.534887][ T4348] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 146.550429][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.561051][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 146.585005][ T26] audit: type=1800 audit(1791982303.088:135): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144915 res=0 errno=0 [ 146.654364][ T4348] usb 2-1: selecting invalid altsetting 1 [ 146.714929][ T4348] usb 2-1: unit 6 not found! [ 147.049954][ T4348] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 147.088825][ T6003] loop4: detected capacity change from 0 to 256 [ 147.158385][ T6003] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.174917][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 147.182691][ T4348] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 147.291515][ T4354] usb 2-1: USB disconnect, device number 5 [ 147.327150][ T4422] udevd[4422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.605867][ T6019] loop4: detected capacity change from 0 to 16 [ 147.667904][ T6019] erofs: (device loop4): mounted with root inode @ nid 36. [ 147.703609][ T6019] syz.4.651: attempt to access beyond end of device [ 147.703609][ T6019] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 147.727650][ T6019] syz.4.651: attempt to access beyond end of device [ 147.727650][ T6019] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 147.742598][ T6019] syz.4.651: attempt to access beyond end of device [ 147.742598][ T6019] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 147.873067][ T6025] loop4: detected capacity change from 0 to 512 [ 147.950743][ T4392] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.965837][ T6025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.005015][ T6025] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.089043][ T6013] loop0: detected capacity change from 0 to 32768 [ 148.109763][ T6013] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.649 (6013) [ 148.146946][ T6013] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.168233][ T4392] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.170032][ T6013] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 148.187256][ T4392] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.195798][ T6013] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 148.207245][ T4392] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.207291][ T4392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.209066][ T4392] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.233269][ T6013] BTRFS info (device loop0): use lzo compression, level 0 [ 148.245560][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 148.260115][ T6013] BTRFS info (device loop0): using free space tree [ 148.331795][ T4392] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.354691][ T4392] usb 3-1: Product: syz [ 148.359642][ T4392] usb 3-1: Manufacturer: syz [ 148.428196][ T4392] cdc_wdm 3-1:1.0: skipping garbage [ 148.433501][ T4392] cdc_wdm 3-1:1.0: skipping garbage [ 148.517421][ T4392] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 148.523413][ T4392] cdc_wdm 3-1:1.0: Unknown control protocol [ 148.598020][ T6013] BTRFS info (device loop0): enabling ssd optimizations [ 148.753015][ T4348] usb 3-1: USB disconnect, device number 4 [ 149.080872][ T6066] netlink: 'syz.3.666': attribute type 9 has an invalid length. [ 149.099208][ T6066] netlink: 379 bytes leftover after parsing attributes in process `syz.3.666'. [ 149.195957][ T4279] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 149.644537][ T4390] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4390) [ 150.340806][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 150.340823][ T26] audit: type=1800 audit(1791982306.848:167): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.675" name="group_addr" dev="sysfs" ino=91757 res=0 errno=0 [ 150.471784][ T26] audit: type=1800 audit(1791982306.968:168): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52877 res=0 errno=0 [ 150.555010][ T26] audit: type=1800 audit(1791982306.968:169): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52900 res=0 errno=0 [ 150.774938][ T6083] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.822786][ T6107] loop3: detected capacity change from 0 to 1024 [ 150.971490][ T6109] mmap: syz.4.680 (6109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.984760][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 150.993681][ T6083] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.026595][ T6083] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.050027][ T6083] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.053323][ T6111] device-mapper: ioctl: Invalid ioctl structure: name a, dev 635f796d00000000 [ 151.075495][ T9] hfsplus: b-tree write err: -5, ino 25 [ 151.081350][ T9] hfsplus: b-tree write err: -5, ino 4 [ 151.093770][ T9] hfsplus: b-tree write err: -5, ino 2 [ 151.094895][ T6083] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 151.156790][ T6083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.184634][ T6083] usb 1-1: Product: syz [ 151.188880][ T6083] usb 1-1: Manufacturer: syz [ 151.193513][ T6083] usb 1-1: SerialNumber: syz [ 151.399569][ T6121] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.447443][ T6083] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 151.464873][ T6083] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 151.657212][ T6083] usb 1-1: 2:1 : can't get High Capability descriptor [ 151.712260][ T26] audit: type=1800 audit(1791982308.208:170): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145442 res=0 errno=0 [ 151.784714][ T26] audit: type=1800 audit(1791982308.208:171): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=145485 res=0 errno=0 [ 151.829691][ T26] audit: type=1800 audit(1791982308.218:172): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=145449 res=0 errno=0 [ 151.853619][ T26] audit: type=1800 audit(1791982308.218:173): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=145450 res=0 errno=0 [ 151.910846][ T4354] usb 1-1: USB disconnect, device number 4 [ 151.939685][ T26] audit: type=1800 audit(1791982308.218:174): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=145471 res=0 errno=0 [ 152.039676][ T26] audit: type=1800 audit(1791982308.218:175): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=145472 res=0 errno=0 [ 152.075133][ T26] audit: type=1800 audit(1791982308.218:176): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=145451 res=0 errno=0 [ 152.161144][ T6138] loop2: detected capacity change from 0 to 64 [ 152.232397][ T6141] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 152.257801][ T6141] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 152.426945][ T6145] loop2: detected capacity change from 0 to 64 [ 153.548146][ T6175] loop0: detected capacity change from 0 to 256 [ 153.647368][ T6175] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 154.488847][ T6197] loop3: detected capacity change from 0 to 4096 [ 154.520097][ T6197] ntfs3: Unknown parameter 'windows_names' [ 154.716564][ T6202] loop4: detected capacity change from 0 to 16 [ 154.759031][ T6202] erofs: (device loop4): mounted with root inode @ nid 36. [ 155.125252][ T6210] loop4: detected capacity change from 0 to 2048 [ 155.187332][ T6210] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 155.225809][ T6210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.409739][ T6216] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.439467][ T6217] loop3: detected capacity change from 0 to 512 [ 155.598155][ T6217] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.729: invalid indirect mapped block 2 (level 1) [ 155.696001][ T6217] EXT4-fs (loop3): 1 truncate cleaned up [ 155.710722][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.873687][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 156.118950][ T6237] Bluetooth: ISO socket layer initialized [ 156.240954][ T6239] loop0: detected capacity change from 0 to 1024 [ 156.264063][ T6243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.306832][ T6239] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.405100][ T6239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.509500][ T6239] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 156.732469][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 156.838808][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 156.838835][ T26] audit: type=1800 audit(1791982313.348:190): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53077 res=0 errno=0 [ 156.892666][ T26] audit: type=1800 audit(1791982313.348:191): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53100 res=0 errno=0 [ 157.087120][ T6083] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.121962][ T26] audit: type=1804 audit(1791982313.628:192): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.748" name="/newroot/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=218 res=1 errno=0 [ 157.297838][ T6083] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 157.311562][ T26] audit: type=1800 audit(1791982313.818:193): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.752" name="quirks" dev="sysfs" ino=7319 res=0 errno=0 [ 157.343697][ T6083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.384112][ T6083] usb 5-1: config 0 descriptor?? [ 157.393544][ T26] audit: type=1800 audit(1791982313.878:194): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149820 res=0 errno=0 [ 157.429719][ T26] audit: type=1800 audit(1791982313.878:195): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=149860 res=0 errno=0 [ 157.463449][ T26] audit: type=1800 audit(1791982313.878:196): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=149827 res=0 errno=0 [ 157.498943][ T6278] loop0: detected capacity change from 0 to 512 [ 157.511574][ T6280] loop2: detected capacity change from 0 to 512 [ 157.522448][ T26] audit: type=1800 audit(1791982313.878:197): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=149828 res=0 errno=0 [ 157.635652][ T26] audit: type=1800 audit(1791982313.888:198): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=149829 res=0 errno=0 [ 157.650823][ T6278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.656196][ T26] audit: type=1800 audit(1791982313.938:199): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149869 res=0 errno=0 [ 157.690653][ T6278] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.709166][ T6280] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.754: missing EA_INODE flag [ 157.774386][ T6280] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.754: error while reading EA inode 2 err=-117 [ 157.789200][ T6280] EXT4-fs (loop2): 1 orphan inode deleted [ 157.789201][ T6285] misc userio: No port type given on /dev/userio [ 157.796350][ T6280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.834515][ T6280] syz.2.754 (pid 6280) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 157.850875][ T6286] misc userio: The device must be registered before sending interrupts [ 157.897744][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 157.905652][ T6083] [drm:udl_init] *ERROR* Selecting channel failed [ 158.025761][ T6083] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 158.033390][ T6083] [drm] Initialized udl on minor 2 [ 158.049894][ T6083] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 158.077161][ T6083] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 158.110285][ T6083] usb 5-1: USB disconnect, device number 8 [ 158.128773][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 158.129990][ T127] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 158.159409][ T127] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 158.195321][ T127] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 158.411370][ T6296] loop0: detected capacity change from 0 to 128 [ 158.491915][ T6296] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 158.586303][ T6296] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 158.651773][ T6296] FAT-fs (loop0): Filesystem has been set read-only [ 158.792313][ T4279] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 158.863026][ T6305] loop2: detected capacity change from 0 to 1024 [ 159.188697][ T6316] loop0: detected capacity change from 0 to 256 [ 159.251505][ T6314] loop4: detected capacity change from 0 to 2048 [ 159.309958][ T6314] loop4: p1 p2 p3 [ 159.309958][ T6314] p1: [ 159.368363][ T6314] loop4: p2 size 458752 extends beyond EOD, truncated [ 159.392275][ T6314] loop4: p3 start 65280 is beyond EOD, truncated [ 159.863178][ T6325] netlink: 'syz.0.773': attribute type 11 has an invalid length. [ 160.396630][ T6345] loop0: detected capacity change from 0 to 16 [ 160.443103][ T6345] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.670313][ T6351] loop4: detected capacity change from 0 to 2048 [ 160.753038][ T6351] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 160.768581][ T6351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.937876][ T6381] loop4: detected capacity change from 0 to 1024 [ 161.975548][ T6381] EXT4-fs: Ignoring removed orlov option [ 161.989068][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 161.989083][ T26] audit: type=1800 audit(1791982318.498:221): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37742 res=0 errno=0 [ 162.143276][ T6381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.329353][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 162.453785][ T6389] loop4: detected capacity change from 0 to 256 [ 162.540033][ T6389] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 162.722247][ T38] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.877961][ T38] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.976737][ T38] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.125370][ T38] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.313798][ T26] audit: type=1800 audit(1791982319.818:222): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150464 res=0 errno=0 [ 163.384370][ T26] audit: type=1800 audit(1791982319.848:223): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=150469 res=0 errno=0 [ 163.480385][ T26] audit: type=1800 audit(1791982319.848:224): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=150473 res=0 errno=0 [ 163.606599][ T26] audit: type=1800 audit(1791982319.848:225): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=150472 res=0 errno=0 [ 163.662408][ T6397] loop4: detected capacity change from 0 to 4096 [ 163.687963][ T4273] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 163.716395][ T6397] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 163.741994][ T26] audit: type=1800 audit(1791982319.848:226): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150548 res=0 errno=0 [ 163.894694][ T26] audit: type=1800 audit(1791982319.848:227): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=150475 res=0 errno=0 [ 163.994641][ T26] audit: type=1800 audit(1791982319.848:228): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=150553 res=0 errno=0 [ 164.076378][ T26] audit: type=1800 audit(1791982319.858:229): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=150557 res=0 errno=0 [ 164.204853][ T26] audit: type=1800 audit(1791982319.858:230): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=150556 res=0 errno=0 [ 164.238837][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.252929][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.262930][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.281311][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.289330][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.297856][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.445827][ T6404] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.607771][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.809'. [ 164.879323][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.890333][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.900910][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.910545][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.919083][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.934863][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.199466][ T6419] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.783810][ T6404] chnl_net:caif_netlink_parms(): no params data found [ 166.325297][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 166.738356][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.750402][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.776606][ T6404] device bridge_slave_0 entered promiscuous mode [ 166.821599][ T6419] chnl_net:caif_netlink_parms(): no params data found [ 166.839620][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.855189][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.863691][ T6404] device bridge_slave_1 entered promiscuous mode [ 166.965044][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 167.082038][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.090217][ T6443] loop0: detected capacity change from 0 to 32768 [ 167.119962][ T6449] loop4: detected capacity change from 0 to 32768 [ 167.126193][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.183622][ T6449] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.821 (6449) [ 167.214715][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 167.214732][ T26] audit: type=1804 audit(1791982323.718:255): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop4/uevent" dev="sysfs" ino=37742 res=1 errno=0 [ 167.215141][ T6449] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.234597][ T26] audit: type=1800 audit(1791982323.728:256): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37742 res=0 errno=0 [ 167.248538][ T6449] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 167.285273][ T6449] BTRFS info (device loop4): setting nodatasum [ 167.291505][ T6449] BTRFS info (device loop4): force zlib compression, level 3 [ 167.301314][ T6449] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 167.310992][ T6449] BTRFS info (device loop4): use lzo compression, level 0 [ 167.318670][ T6449] BTRFS info (device loop4): turning on flush-on-commit [ 167.326156][ T6449] BTRFS info (device loop4): enabling auto defrag [ 167.332838][ T6449] BTRFS info (device loop4): max_inline at 4096 [ 167.339837][ T6449] BTRFS info (device loop4): using free space tree [ 167.369001][ T38] device hsr_slave_0 left promiscuous mode [ 167.391755][ T26] audit: type=1800 audit(1791982323.898:257): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37314 res=0 errno=0 [ 167.467185][ T38] device hsr_slave_1 left promiscuous mode [ 167.534296][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.544773][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.564750][ T26] audit: type=1800 audit(1791982323.898:258): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163298 res=0 errno=0 [ 167.601176][ T6443] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 167.654781][ T6449] BTRFS info (device loop4): enabling ssd optimizations [ 167.669169][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.684727][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.725102][ T38] device bridge_slave_1 left promiscuous mode [ 167.744681][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.855496][ T38] device bridge_slave_0 left promiscuous mode [ 167.865993][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.049045][ T38] device veth1_macvtap left promiscuous mode [ 168.091621][ T38] device veth0_macvtap left promiscuous mode [ 168.125149][ T38] device veth1_vlan left promiscuous mode [ 168.131343][ T38] device veth0_vlan left promiscuous mode [ 168.151505][ T4274] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.300850][ T4279] ocfs2: Unmounting device (7,0) on (node local) [ 168.404976][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 169.055238][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 169.391498][ T26] audit: type=1800 audit(1791982325.898:259): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.834" name="bind_mode" dev="sysfs" ino=62678 res=0 errno=0 [ 170.108099][ T38] team0 (unregistering): Port device team_slave_1 removed [ 170.168190][ T38] team0 (unregistering): Port device team_slave_0 removed [ 170.224519][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.281969][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.284768][ T6081] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 170.494894][ T6081] usb 3-1: Using ep0 maxpacket: 8 [ 170.496839][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 170.502102][ T6081] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.516543][ T6081] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.527061][ T6081] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.537443][ T6081] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.550812][ T6081] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.560146][ T6081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.777412][ T6081] usb 3-1: GET_CAPABILITIES returned 0 [ 170.783444][ T6081] usbtmc 3-1:16.0: can't read capabilities [ 170.799546][ T26] audit: type=1800 audit(1791982327.308:260): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163529 res=0 errno=0 [ 170.823790][ T26] audit: type=1800 audit(1791982327.308:261): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163569 res=0 errno=0 [ 170.826845][ T38] bond0 (unregistering): Released all slaves [ 170.845999][ T26] audit: type=1800 audit(1791982327.308:262): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163536 res=0 errno=0 [ 170.871135][ T26] audit: type=1800 audit(1791982327.308:263): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=163537 res=0 errno=0 [ 170.894848][ T26] audit: type=1800 audit(1791982327.308:264): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=163538 res=0 errno=0 [ 170.976577][ T6527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.836'. [ 171.016725][ T6404] team0: Port device team_slave_0 added [ 171.042720][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.052667][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.059696][ T6081] usb 3-1: USB disconnect, device number 5 [ 171.061259][ T6419] device bridge_slave_0 entered promiscuous mode [ 171.076327][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.083596][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.093906][ T6419] device bridge_slave_1 entered promiscuous mode [ 171.124477][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.133991][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 171.143285][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.168745][ T6404] team0: Port device team_slave_1 added [ 171.280744][ T4273] Bluetooth: Wrong link type (-71) [ 171.313952][ T6419] team0: Port device team_slave_0 added [ 171.350834][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.358940][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.408070][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.451721][ T6419] team0: Port device team_slave_1 added [ 171.475595][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.482968][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.557461][ T6550] nfsd: exp_rootfh path not found \ [ 171.573001][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.757971][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.785720][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.831394][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.906574][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.954641][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.010899][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.049733][ T6564] loop4: detected capacity change from 0 to 2048 [ 172.054448][ T6404] device hsr_slave_0 entered promiscuous mode [ 172.084225][ T6404] device hsr_slave_1 entered promiscuous mode [ 172.134891][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.143400][ T6404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.156449][ T6569] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.171575][ T6404] Cannot create hsr debugfs directory [ 172.321853][ T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.349766][ T22] usb 1-1: config 0 has no interface number 0 [ 172.363665][ T22] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 172.394183][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.414272][ T22] usb 1-1: Product: syz [ 172.437107][ T22] usb 1-1: Manufacturer: syz [ 172.441971][ T22] usb 1-1: SerialNumber: syz [ 172.462577][ T6419] device hsr_slave_0 entered promiscuous mode [ 172.473781][ T6569] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 172.482730][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 172.482745][ T26] audit: type=1800 audit(1791982328.978:273): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168424 res=0 errno=0 [ 172.513112][ T22] usb 1-1: config 0 descriptor?? [ 172.514865][ T6569] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 172.539713][ T26] audit: type=1800 audit(1791982328.978:274): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=168467 res=0 errno=0 [ 172.565194][ T6419] device hsr_slave_1 entered promiscuous mode [ 172.571495][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 172.582741][ T6419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.591682][ T6569] Remounting filesystem read-only [ 172.595264][ T6419] Cannot create hsr debugfs directory [ 172.613792][ T26] audit: type=1800 audit(1791982328.978:275): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=168431 res=0 errno=0 [ 172.638734][ T4274] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 172.705181][ T26] audit: type=1800 audit(1791982328.978:276): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=168432 res=0 errno=0 [ 172.739421][ T22] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 172.767747][ T22] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.789869][ T22] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 172.810895][ T22] usb 1-1: media controller created [ 172.838324][ T26] audit: type=1800 audit(1791982328.978:277): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=168453 res=0 errno=0 [ 172.884059][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.923498][ T26] audit: type=1800 audit(1791982328.978:278): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=168454 res=0 errno=0 [ 173.017144][ T22] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 173.024751][ T26] audit: type=1800 audit(1791982328.978:279): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=168433 res=0 errno=0 [ 173.053070][ T26] audit: type=1800 audit(1791982328.978:280): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=168455 res=0 errno=0 [ 173.080382][ T26] audit: type=1800 audit(1791982329.048:281): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168576 res=0 errno=0 [ 173.141737][ T22] usb 1-1: USB disconnect, device number 5 [ 173.150636][ T26] audit: type=1800 audit(1791982329.258:282): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169305 res=0 errno=0 [ 173.204837][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 173.463900][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.707779][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 173.938780][ T6603] loop0: detected capacity change from 0 to 2048 [ 174.017815][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.027955][ T6607] loop4: detected capacity change from 0 to 256 [ 174.042117][ T6609] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.105795][ T6607] exfat: Deprecated parameter 'utf8' [ 174.111201][ T6607] exfat: Deprecated parameter 'utf8' [ 174.143983][ T6607] exfat: Deprecated parameter 'utf8' [ 174.237875][ T6607] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 174.243607][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.437779][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.569150][ T6419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.618130][ T6419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.641366][ T6622] program syz.4.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.667595][ T6419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.733457][ T6419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.927206][ T6629] loop4: detected capacity change from 0 to 8 [ 174.933985][ T6404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.020196][ T6404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.045644][ T6632] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 175.108397][ T6635] program syz.0.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.117279][ T6632] overlayfs: overlapping lowerdir path [ 175.119660][ T6404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.310863][ T6404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.382304][ T6638] scsi_strcpy_devinfo: vendor string '�ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„¾q6�•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 175.448593][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.530031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.555657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.614381][ T6642] loop4: detected capacity change from 0 to 4096 [ 175.620295][ T6419] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.718237][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.796180][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.839932][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.847234][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.046383][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.076453][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.100370][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.134234][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.141459][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.215071][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.362185][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.385842][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.416683][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.465980][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.561608][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.577755][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.605899][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.635616][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.651932][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.692987][ T6419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.730868][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.739985][ T6673] loop0: detected capacity change from 0 to 1024 [ 176.871773][ T6673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.885977][ T6673] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.897505][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.915751][ T6671] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.883: lblock 0 mapped to illegal pblock 0 (length 1) [ 176.934695][ T6679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 176.950771][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.992443][ T6681] loop2: detected capacity change from 0 to 512 [ 177.025191][ T6080] logitech-hidpp-device 0005:046D:B012.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 177.049473][ T6671] EXT4-fs (loop0): Remounting filesystem read-only [ 177.057399][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.069378][ T6673] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.883: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.084949][ T6679] EXT4-fs (loop0): Remounting filesystem read-only [ 177.095459][ T6681] EXT4-fs: Ignoring removed nobh option [ 177.100540][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.122632][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.145436][ T6673] EXT4-fs (loop0): Remounting filesystem read-only [ 177.165843][ T6673] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.883: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.179447][ T6681] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 177.235236][ T6673] EXT4-fs (loop0): Remounting filesystem read-only [ 177.277832][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.325470][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.374918][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.382360][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.476208][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 177.561671][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.576398][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.608412][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 177.608429][ T26] audit: type=1800 audit(1791982334.118:328): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.887" name="slaves" dev="sysfs" ino=92076 res=0 errno=0 [ 177.650905][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.659153][ T6694] loop0: detected capacity change from 0 to 256 [ 177.712392][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.719664][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.740281][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.764847][ T6692] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 177.806188][ T6692] bond0: option slaves: unable to set because the bond device is up [ 177.996468][ T26] audit: type=1800 audit(1791982334.508:329): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.890" name="quirks" dev="sysfs" ino=7319 res=0 errno=0 [ 178.115091][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.125580][ T26] audit: type=1800 audit(1791982334.638:330): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.891" name="sync_wait" dev="sysfs" ino=7524 res=0 errno=0 [ 178.157942][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.192423][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.203178][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.262517][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.281131][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.300719][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.318364][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.377880][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.391449][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.570286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.588594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.610528][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.662465][ T26] audit: type=1800 audit(1791982335.168:331): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=138438 res=0 errno=0 [ 178.943782][ T6726] tipc: Started in network mode [ 178.972509][ T6726] tipc: Node identity 7f000001, cluster identity 4711 [ 179.000299][ T6726] tipc: Enabled bearer , priority 10 [ 179.046742][ T38] device hsr_slave_0 left promiscuous mode [ 179.073257][ T38] device hsr_slave_1 left promiscuous mode [ 179.104956][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.138533][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.155482][ T6738] loop4: detected capacity change from 0 to 512 [ 179.168801][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.212001][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.265651][ T38] device bridge_slave_1 left promiscuous mode [ 179.272090][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.310751][ T38] device bridge_slave_0 left promiscuous mode [ 179.324442][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.398411][ T38] device veth1_macvtap left promiscuous mode [ 179.426676][ T38] device veth0_macvtap left promiscuous mode [ 179.441069][ T38] device veth1_vlan left promiscuous mode [ 179.456119][ T38] device veth0_vlan left promiscuous mode [ 179.581449][ T6749] loop4: detected capacity change from 0 to 512 [ 179.659131][ T6749] EXT4-fs (loop4): 1 truncate cleaned up [ 179.677886][ T6749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.755930][ T6749] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.905: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 179.777715][ T26] audit: type=1800 audit(1791982336.288:332): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.907" name="quirks" dev="sysfs" ino=7319 res=0 errno=0 [ 179.896843][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 179.904233][ T6757] jffs2: notice: (6757) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.078791][ T26] audit: type=1800 audit(1791982336.588:333): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172807 res=0 errno=0 [ 180.794725][ T6773] loop2: detected capacity change from 0 to 32768 [ 180.843348][ T26] audit: type=1800 audit(1791982337.348:334): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37528 res=0 errno=0 [ 180.940475][ T6773] XFS (loop2): Mounting V5 Filesystem [ 181.016147][ T38] team0 (unregistering): Port device team_slave_1 removed [ 181.075820][ T6773] XFS (loop2): Ending clean mount [ 181.133740][ T6773] XFS (loop2): Quotacheck needed: Please wait. [ 181.151516][ T38] team0 (unregistering): Port device team_slave_0 removed [ 181.178515][ T26] audit: type=1800 audit(1791982337.688:335): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172852 res=0 errno=0 [ 181.334356][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.344383][ T6773] XFS (loop2): Quotacheck: Done. [ 181.460304][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.521001][ T4271] XFS (loop2): Unmounting Filesystem [ 181.956340][ T4351] kernel read not supported for file /video9 (pid: 4351 comm: kworker/1:5) [ 182.136984][ T38] bond0 (unregistering): Released all slaves [ 182.227855][ T6734] tipc: Disabling bearer [ 182.241732][ T4260] tipc: Node number set to 2130706433 [ 182.517079][ T26] audit: type=1800 audit(1791982339.028:336): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.920" name="quirks" dev="sysfs" ino=7319 res=0 errno=0 [ 182.605384][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 182.704459][ T26] audit: type=1800 audit(1791982339.208:337): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.922" name="vendor" dev="sysfs" ino=28095 res=0 errno=0 [ 182.834988][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.842684][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.897780][ T6816] loop4: detected capacity change from 0 to 128 [ 182.934073][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.983156][ T26] audit: type=1800 audit(1791982339.488:338): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37742 res=0 errno=0 [ 182.984507][ T6816] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 183.052460][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.109830][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.118075][ T6816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.128345][ T6816] ext2 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.240099][ T6404] device veth0_vlan entered promiscuous mode [ 183.266539][ T6404] device veth1_vlan entered promiscuous mode [ 183.287250][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.325238][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.375856][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.385795][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.415464][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.497069][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 183.531460][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.558689][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.617549][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.646102][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.667067][ T6404] device veth0_macvtap entered promiscuous mode [ 183.696252][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.717563][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.745516][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.768123][ T6404] device veth1_macvtap entered promiscuous mode [ 183.778926][ T6419] device veth0_vlan entered promiscuous mode [ 183.787503][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.797137][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.809064][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.843328][ T6419] device veth1_vlan entered promiscuous mode [ 183.865356][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.884062][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.908401][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.919260][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.930425][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.942540][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.967807][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.977111][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 183.993787][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.013048][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.042360][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.069939][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.092306][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.111366][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.132694][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.155831][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.183600][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.203454][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.223238][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.242549][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.253658][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.289596][ T6419] device veth0_macvtap entered promiscuous mode [ 184.314489][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.336187][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.363224][ T6404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.380638][ T6404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.391885][ T6404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.392454][ T6859] loop0: detected capacity change from 0 to 256 [ 184.412133][ T6404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.433857][ T26] audit: type=1800 audit(1791982340.938:339): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37314 res=0 errno=0 [ 184.476177][ T6419] device veth1_macvtap entered promiscuous mode [ 184.508833][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.538866][ T6859] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d) [ 184.582684][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.625294][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.644101][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.663738][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.674374][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.693436][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.704336][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.722361][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.737260][ T6081] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 184.752908][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.768153][ T6864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.822960][ T6865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.839170][ T26] audit: type=1800 audit(1791982341.348:340): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172932 res=0 errno=0 [ 184.842304][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.936468][ T6081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.948835][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.964708][ T6081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 184.979011][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.994713][ T6081] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.014764][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.034713][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.049366][ T6081] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.064598][ T6081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.072902][ T6081] usb 5-1: Product: syz [ 185.084628][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.104653][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.115311][ T6081] usb 5-1: Manufacturer: syz [ 185.119963][ T6081] usb 5-1: SerialNumber: syz [ 185.132289][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.137185][ T6081] usb 5-1: config 0 descriptor?? [ 185.149182][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.166769][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.179453][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.215094][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.243176][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.291767][ T6419] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.321664][ T6419] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.356907][ T6419] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.377284][ T6419] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.417406][ T6081] usb 5-1: USB disconnect, device number 9 [ 185.423498][ T26] audit: type=1800 audit(1791982341.918:341): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172944 res=0 errno=0 [ 185.510021][ T26] audit: type=1800 audit(1791982341.928:342): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=172987 res=0 errno=0 [ 185.549968][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.572557][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.583185][ T26] audit: type=1800 audit(1791982341.928:343): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=172951 res=0 errno=0 [ 185.624651][ T26] audit: type=1800 audit(1791982341.928:344): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=172952 res=0 errno=0 [ 185.653653][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.681033][ T26] audit: type=1800 audit(1791982341.928:345): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=172973 res=0 errno=0 [ 185.701250][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.709063][ T26] audit: type=1800 audit(1791982341.928:346): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=172974 res=0 errno=0 [ 185.796988][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.807436][ T4539] udevd[4539]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.825260][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.843531][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.860434][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.912078][ T2906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.940868][ T2906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.004082][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.045105][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.076939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.087447][ T6892] loop0: detected capacity change from 0 to 764 [ 186.137456][ T6892] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.234782][ T6081] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.372012][ T6900] loop4: detected capacity change from 0 to 128 [ 186.398307][ T6902] netlink: 'syz.5.807': attribute type 8 has an invalid length. [ 186.434738][ T6081] usb 3-1: Using ep0 maxpacket: 32 [ 186.442003][ T6081] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 186.448033][ T6902] netem: change failed [ 186.484246][ T6081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.535719][ T6081] usb 3-1: config 0 descriptor?? [ 186.748833][ T6081] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 186.766715][ T6081] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.792290][ T6911] loop7: detected capacity change from 0 to 6 [ 186.803387][ T6081] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 186.813257][ T6081] usb 3-1: media controller created [ 186.832928][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.842473][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.865512][ T6081] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.875583][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 186.885148][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.894318][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.903011][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.912483][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.932154][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.941457][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.965523][ T6081] az6027: usb out operation failed. (-71) [ 186.975108][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.984563][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.994810][ T6081] az6027: usb out operation failed. (-71) [ 187.000667][ T6081] stb0899_attach: Driver disabled by Kconfig [ 187.001413][ T6911] ldm_validate_partition_table(): Disk read failed. [ 187.017949][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.027288][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.045626][ T6081] az6027: no front-end attached [ 187.045626][ T6081] [ 187.067960][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.077342][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.085914][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.088542][ T6081] az6027: usb out operation failed. (-71) [ 187.095142][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.105723][ T6922] overlayfs: upper fs is r/o, try multi-lower layers mount [ 187.116557][ T6081] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.125821][ T6081] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 187.147256][ T6081] dvb-usb: schedule remote query interval to 400 msecs. [ 187.161713][ T6081] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 187.169497][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.178983][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.186073][ T6081] usb 3-1: USB disconnect, device number 6 [ 187.195633][ T6911] Dev loop7: unable to read RDB block 0 [ 187.228082][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.252598][ T6911] loop7: unable to read partition table [ 187.264961][ T6911] loop7: partition table beyond EOD, truncated [ 187.314956][ T6911] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–4FLQkÝÇ5) failed (rc=-5) [ 187.325300][ T6081] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 187.412340][ T3638] ldm_validate_partition_table(): Disk read failed. [ 187.421954][ T3638] Dev loop7: unable to read RDB block 0 [ 187.441621][ T3638] loop7: unable to read partition table [ 187.468615][ T3638] loop7: partition table beyond EOD, truncated [ 187.540217][ T6933] pimreg: tun_chr_ioctl cmd 2147767520 [ 187.941954][ T6945] program syz.4.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.210329][ T6959] program syz.3.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.500772][ T6968] loop3: detected capacity change from 0 to 256 [ 188.549140][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 188.549157][ T26] audit: type=1800 audit(1791982345.058:364): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37635 res=0 errno=0 [ 188.871682][ T26] audit: type=1800 audit(1791982345.378:365): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.973" name="comp_algorithm" dev="sysfs" ino=42642 res=0 errno=0 [ 188.996202][ T26] audit: type=1800 audit(1791982345.468:366): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.974" name="group_addr" dev="sysfs" ino=155149 res=0 errno=0 [ 189.553591][ T6952] loop5: detected capacity change from 0 to 40427 [ 189.616555][ T6952] F2FS-fs (loop5): invalid crc value [ 189.655199][ T6952] F2FS-fs (loop5): Found nat_bits in checkpoint [ 189.662501][ T7011] loop3: detected capacity change from 0 to 512 [ 189.699212][ T7011] EXT4-fs: Ignoring removed bh option [ 189.704969][ T26] audit: type=1800 audit(1791982346.208:367): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37635 res=0 errno=0 [ 189.747668][ T7011] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 189.869762][ T7011] EXT4-fs (loop3): 1 truncate cleaned up [ 189.875843][ T7011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.911653][ T7011] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.984: bg 0: block 465: padding at end of block bitmap is not set [ 189.931961][ T6952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 189.968146][ T7011] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 190.038895][ T7011] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.038895][ T7011] [ 190.068766][ T7011] EXT4-fs (loop3): Total free blocks count 0 [ 190.090102][ T7011] EXT4-fs (loop3): Free/Dirty block details [ 190.096878][ T7011] EXT4-fs (loop3): free_blocks=0 [ 190.111577][ T7011] EXT4-fs (loop3): dirty_blocks=2 [ 190.120785][ T7011] EXT4-fs (loop3): Block reservation details [ 190.150504][ T7011] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 190.237301][ T4361] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.080233][ T26] audit: type=1800 audit(1791982347.588:368): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.999" name="gpe00" dev="sysfs" ino=11739 res=0 errno=0 [ 191.283788][ T7067] loop4: detected capacity change from 0 to 128 [ 191.864878][ T7050] loop0: detected capacity change from 0 to 32768 [ 191.915213][ T26] audit: type=1800 audit(1791982348.428:369): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37314 res=0 errno=0 [ 191.954941][ T7050] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 191.993169][ T7050] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 192.004070][ T26] audit: type=1800 audit(1791982348.458:370): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174305 res=0 errno=0 [ 192.034479][ T7050] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.044353][ T7050] BTRFS info (device loop0): use zstd compression, level 3 [ 192.072395][ T7050] BTRFS info (device loop0): using free space tree [ 192.116313][ T26] audit: type=1800 audit(1791982348.628:371): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1012" name="gpe00" dev="sysfs" ino=11739 res=0 errno=0 [ 192.232178][ T7050] BTRFS info (device loop0): enabling ssd optimizations [ 192.505893][ T4279] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 193.406324][ T26] audit: type=1800 audit(1791982349.918:372): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1025" name="gpe00" dev="sysfs" ino=11739 res=0 errno=0 [ 193.620021][ T7160] loop5: detected capacity change from 0 to 128 [ 193.714429][ T26] audit: type=1800 audit(1791982350.218:373): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37849 res=0 errno=0 [ 194.160516][ T7177] loop0: detected capacity change from 0 to 128 [ 194.290759][ T26] audit: type=1800 audit(1791982350.798:374): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174410 res=0 errno=0 [ 194.374501][ T26] audit: type=1800 audit(1791982350.818:375): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=174414 res=0 errno=0 [ 194.454695][ T26] audit: type=1800 audit(1791982350.828:376): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174493 res=0 errno=0 [ 194.487773][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.494234][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.518841][ T26] audit: type=1800 audit(1791982350.828:377): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=174497 res=0 errno=0 [ 194.954327][ T7179] loop2: detected capacity change from 0 to 32768 [ 195.002298][ T26] audit: type=1800 audit(1791982351.508:378): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37528 res=0 errno=0 [ 195.005026][ T7179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1037 (7179) [ 195.119096][ T26] audit: type=1800 audit(1791982351.628:379): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1043" name="gpe00" dev="sysfs" ino=11739 res=0 errno=0 [ 195.154894][ T7179] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 195.199806][ T7179] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 195.210802][ T26] audit: type=1800 audit(1791982351.658:380): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174583 res=0 errno=0 [ 195.238213][ T7179] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.304804][ T7179] BTRFS info (device loop2): use zstd compression, level 3 [ 195.312182][ T7179] BTRFS info (device loop2): using free space tree [ 195.333843][ T7210] loop3: detected capacity change from 0 to 256 [ 195.396215][ T26] audit: type=1800 audit(1791982351.908:381): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37635 res=0 errno=0 [ 195.406160][ T7210] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.519508][ T6075] smpboot: CPU 1 is now offline [ 195.548644][ T26] audit: type=1800 audit(1791982351.948:382): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1048" name="target" dev="sysfs" ino=14747 res=0 errno=0 [ 195.774422][ T7179] BTRFS info (device loop2): enabling ssd optimizations [ 195.841480][ T7241] loop5: detected capacity change from 0 to 256 [ 195.927683][ T7241] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.253475][ T4271] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 196.300151][ T7251] loop0: detected capacity change from 0 to 256 [ 196.427371][ T7251] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.780849][ T4390] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (4390) [ 197.447044][ T7266] loop3: detected capacity change from 0 to 128 [ 197.462623][ T7252] loop4: detected capacity change from 0 to 32768 [ 197.592349][ T7252] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 198.122893][ T4414] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 198.491383][ T7296] loop4: detected capacity change from 0 to 256 [ 198.573219][ T7296] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.921999][ T7308] loop2: detected capacity change from 0 to 128 [ 199.204972][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 199.211186][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 199.962623][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 199.962635][ T26] audit: type=1800 audit(1791982356.468:392): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1082" name="target" dev="sysfs" ino=14747 res=0 errno=0 [ 200.134046][ T26] audit: type=1800 audit(1791982356.568:393): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1084" name="wakealarm" dev="sysfs" ino=63036 res=0 errno=0 [ 200.463906][ T7320] loop5: detected capacity change from 0 to 32768 [ 200.514249][ T7320] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 200.545553][ T26] audit: type=1800 audit(1791982357.058:394): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174910 res=0 errno=0 [ 200.742998][ T26] audit: type=1800 audit(1791982357.078:395): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=174914 res=0 errno=0 [ 200.866405][ T7358] ------------[ cut here ]------------ [ 200.872315][ T7358] WARNING: CPU: 0 PID: 7358 at kernel/trace/ring_buffer.c:4570 rb_get_reader_page+0xabf/0xcd0 [ 200.882658][ T7358] Modules linked in: [ 200.886567][ T7358] CPU: 0 PID: 7358 Comm: syz.4.1093 Not tainted syzkaller #0 [ 200.894197][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.904257][ T7358] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 200.910347][ T7358] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 68 62 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 f6 63 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 200.930177][ T7358] RSP: 0018:ffffc9000495f7e0 EFLAGS: 00010002 [ 200.936546][ T7358] RAX: 1ffff1100308f101 RBX: 1ffff1100308e876 RCX: ffffffff8185401a [ 200.944616][ T7358] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888018470408 [ 200.952681][ T7358] RBP: ffffc9000495f970 R08: ffff88801847040b R09: 1ffff1100308e081 [ 200.960656][ T7358] R10: dffffc0000000000 R11: ffffed100308e082 R12: ffff888018478810 [ 200.968647][ T7358] R13: 0000000000000054 R14: 1ffff1100308e873 R15: ffff888018470400 [ 200.976725][ T7358] FS: 00007f729f3896c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 200.985844][ T7358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.992426][ T7358] CR2: 0000001b3001eff8 CR3: 000000007d45d000 CR4: 00000000003506f0 [ 201.000498][ T7358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.008579][ T7358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.016753][ T7358] Call Trace: [ 201.020043][ T7358] [ 201.022989][ T7358] ? string+0x257/0x290 [ 201.027209][ T7358] ? ring_buffer_read_page+0x1370/0x1370 [ 201.032936][ T7358] ? do_raw_spin_lock+0x128/0x2f0 [ 201.037976][ T7358] rb_buffer_peek+0x5e/0x940 [ 201.042568][ T7358] ring_buffer_peek+0x1f8/0x440 [ 201.047523][ T7358] ? ring_buffer_iter_empty+0x340/0x340 [ 201.053095][ T7358] ? ring_buffer_empty+0x560/0x560 [ 201.058240][ T7358] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.064239][ T7358] peek_next_entry+0x113/0x1c0 [ 201.069009][ T7358] __find_next_entry+0x547/0x6c0 [ 201.073961][ T7358] ? ring_buffer_consume+0x441/0x490 [ 201.079251][ T7358] ? trace_find_next_entry+0x3a0/0x3a0 [ 201.084733][ T7358] tracing_read_pipe+0x3bd/0xb10 [ 201.089679][ T7358] ? s_show+0x300/0x300 [ 201.093854][ T7358] vfs_read+0x2db/0x960 [ 201.098077][ T7358] ? kernel_read+0x1e0/0x1e0 [ 201.102697][ T7358] ? __fget_files+0x28/0x460 [ 201.107477][ T7358] ? __fget_files+0x3fc/0x460 [ 201.112355][ T7358] ? __fdget_pos+0x2ae/0x360 [ 201.116976][ T7358] ? ksys_read+0x70/0x260 [ 201.121341][ T7358] ksys_read+0x14d/0x260 [ 201.125609][ T7358] ? vfs_write+0x9a0/0x9a0 [ 201.130044][ T7358] ? lockdep_hardirqs_on+0x94/0x140 [ 201.135339][ T7358] do_syscall_64+0x4c/0xa0 [ 201.139781][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 201.144564][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 201.149366][ T7358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.155447][ T7358] RIP: 0033:0x7f729e59e559 [ 201.159864][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.179670][ T7358] RSP: 002b:00007f729f389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.188084][ T7358] RAX: ffffffffffffffda RBX: 00007f729e825fa0 RCX: 00007f729e59e559 [ 201.196074][ T7358] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003 [ 201.204296][ T7358] RBP: 00007f729e6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 201.212363][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.220340][ T7358] R13: 00007f729e826038 R14: 00007f729e825fa0 R15: 00007ffed33efc48 [ 201.228419][ T7358] [ 201.231522][ T7358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.238890][ T7358] CPU: 0 PID: 7358 Comm: syz.4.1093 Not tainted syzkaller #0 [ 201.246270][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.256319][ T7358] Call Trace: [ 201.259596][ T7358] [ 201.262613][ T7358] dump_stack_lvl+0x188/0x24e [ 201.267296][ T7358] ? memcpy+0x3c/0x60 [ 201.271289][ T7358] ? show_regs_print_info+0x12/0x12 [ 201.276515][ T7358] ? load_image+0x410/0x410 [ 201.281018][ T7358] panic+0x2d3/0x710 [ 201.284935][ T7358] ? bpf_jit_dump+0xd0/0xd0 [ 201.289444][ T7358] __warn+0x2f8/0x4f0 [ 201.293510][ T7358] ? rb_get_reader_page+0xabf/0xcd0 [ 201.298724][ T7358] ? rb_get_reader_page+0xabf/0xcd0 [ 201.304037][ T7358] report_bug+0x2ba/0x4f0 [ 201.308420][ T7358] ? rb_get_reader_page+0xabf/0xcd0 [ 201.313795][ T7358] handle_bug+0x3a/0x70 [ 201.317950][ T7358] exc_invalid_op+0x16/0x40 [ 201.322453][ T7358] asm_exc_invalid_op+0x16/0x20 [ 201.327562][ T7358] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 201.333383][ T7358] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 68 62 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 f6 63 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 201.353075][ T7358] RSP: 0018:ffffc9000495f7e0 EFLAGS: 00010002 [ 201.359223][ T7358] RAX: 1ffff1100308f101 RBX: 1ffff1100308e876 RCX: ffffffff8185401a [ 201.367294][ T7358] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888018470408 [ 201.375371][ T7358] RBP: ffffc9000495f970 R08: ffff88801847040b R09: 1ffff1100308e081 [ 201.383562][ T7358] R10: dffffc0000000000 R11: ffffed100308e082 R12: ffff888018478810 [ 201.391640][ T7358] R13: 0000000000000054 R14: 1ffff1100308e873 R15: ffff888018470400 [ 201.399614][ T7358] ? rb_get_reader_page+0xaba/0xcd0 [ 201.405088][ T7358] ? string+0x257/0x290 [ 201.409353][ T7358] ? ring_buffer_read_page+0x1370/0x1370 [ 201.415248][ T7358] ? do_raw_spin_lock+0x128/0x2f0 [ 201.420385][ T7358] rb_buffer_peek+0x5e/0x940 [ 201.425003][ T7358] ring_buffer_peek+0x1f8/0x440 [ 201.429866][ T7358] ? ring_buffer_iter_empty+0x340/0x340 [ 201.435537][ T7358] ? ring_buffer_empty+0x560/0x560 [ 201.440788][ T7358] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.447256][ T7358] peek_next_entry+0x113/0x1c0 [ 201.452169][ T7358] __find_next_entry+0x547/0x6c0 [ 201.457164][ T7358] ? ring_buffer_consume+0x441/0x490 [ 201.462489][ T7358] ? trace_find_next_entry+0x3a0/0x3a0 [ 201.468051][ T7358] tracing_read_pipe+0x3bd/0xb10 [ 201.473275][ T7358] ? s_show+0x300/0x300 [ 201.477889][ T7358] vfs_read+0x2db/0x960 [ 201.482205][ T7358] ? kernel_read+0x1e0/0x1e0 [ 201.486830][ T7358] ? __fget_files+0x28/0x460 [ 201.491502][ T7358] ? __fget_files+0x3fc/0x460 [ 201.496178][ T7358] ? __fdget_pos+0x2ae/0x360 [ 201.500795][ T7358] ? ksys_read+0x70/0x260 [ 201.505142][ T7358] ksys_read+0x14d/0x260 [ 201.509435][ T7358] ? vfs_write+0x9a0/0x9a0 [ 201.514335][ T7358] ? lockdep_hardirqs_on+0x94/0x140 [ 201.519644][ T7358] do_syscall_64+0x4c/0xa0 [ 201.524166][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 201.528843][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 201.533524][ T7358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.539521][ T7358] RIP: 0033:0x7f729e59e559 [ 201.543961][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.563937][ T7358] RSP: 002b:00007f729f389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.572460][ T7358] RAX: ffffffffffffffda RBX: 00007f729e825fa0 RCX: 00007f729e59e559 [ 201.580448][ T7358] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003 [ 201.588457][ T7358] RBP: 00007f729e6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 201.596445][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.604436][ T7358] R13: 00007f729e826038 R14: 00007f729e825fa0 R15: 00007ffed33efc48 [ 201.612514][ T7358] [ 201.615591][ T7358] Kernel Offset: disabled [ 201.620002][ T7358] Rebooting in 86400 seconds..