last executing test programs: 4.773245961s ago: executing program 2 (id=375): unshare(0x62040200) syz_mount_image$xfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1810894, &(0x7f0000000880)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@subj_type={'subj_type', 0x3d, 'net/snmp\x00'}}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '#! '}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\{%+%,+'}}, {@uid_gt}, {@fowner_gt}, {@seclabel}, {@fowner_lt}, {@uid_eq}]}, 0x1, 0x96e0, &(0x7f000001c400)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/snmp\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020) 4.040784044s ago: executing program 0 (id=381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 3.978345067s ago: executing program 0 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 3.546527122s ago: executing program 0 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 2.859328203s ago: executing program 0 (id=392): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.747194919s ago: executing program 1 (id=393): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 2.641025586s ago: executing program 0 (id=395): io_setup(0x801, &(0x7f00000000c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r0, 0x0, 0x0) 2.532668732s ago: executing program 2 (id=396): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setresuid(0xee00, 0xee00, 0x0) r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0) 2.439828437s ago: executing program 1 (id=397): mkdir(&(0x7f0000000180)='./file1\x00', 0x60) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x80000000, 0x2e5, 0x6, 0x10000000004, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0xfffffffb}) 2.085475488s ago: executing program 1 (id=399): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 1.866949141s ago: executing program 2 (id=400): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x57, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0x9ec6, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x7ff, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0xfffffff7, 0x6, 0x8, 0x5, 0xd, 0xfffffffa, 0x2, 0x8e, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x3, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0x2, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x6, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x2, 0x6, 0x5, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x7a, 0x1], [0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0xfffffff7, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x7, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x1, 0x9, 0x3, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) 1.866439041s ago: executing program 3 (id=401): syz_mount_image$hpfs(&(0x7f0000009e80), &(0x7f0000000000)='./file6\x00', 0x821041, &(0x7f000000a140)=ANY=[@ANYRESOCT, @ANYRESHEX=0xee00, @ANYRESOCT], 0x2, 0x9e24, &(0x7f0000000040)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01080000000022bbcd0000000000000002080008400000000008000640ffffff0008000740000000310c00104000000000000000040c001040000000000000000240000000140a010800000020000000000a000001290008006762ccdad070ba9ee324100976be1ca0aa1d6cb518798900e5ce9dab4adf4418d7d018733f00000014000000110001000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1.560691639s ago: executing program 3 (id=402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000300), 0x4) 1.519675721s ago: executing program 0 (id=403): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa, &(0x7f00000001c0)=ANY=[], 0x1, 0x5515, &(0x7f00000079c0)="$eJzs3M1rI/UbAPAn7Xbff/sr4sHbDixCC5uw6b6gt1W7+IJdyqoHT5om05DdJFOaNK09efAoHvxPRMGTR/8GD569iQfFm6BkZqJbX0Bo2tj284HJM99vJs8831AKz0yYAM6sxeTnHytxLS5FxHxEXI3I9yvllrtfhOci4npEzD21Vcr53yfOR8TliLg2Tl7krJRvfXpzdOPuD2/89NU3F85d+ezLb2e3amDWno+I3laxv9srYtYu4uNyvjHq5LF3Z1TG4o3ek3KcFXE33cgz7DYmxzXyeLtdHJ9t7QzGcbPbaI5ju7OZz2/1ixMORu1JnvwDjxvb+biVbuSxM8jy2N4v6trbL/637Q+GRZ5Wme+DPH0Mh5NYzKd7abGerSd5bPaH5XyRN2ule+M4KmN5umhm3VZex8Zhvun/tjc7/Z29ZJRuDzpZP7lbq79Qq9+r1rezVjpM71Qbvda9O8lSuzs+rDpMG7377Sxrd9NaM+stJ0vtZrNarydLq+lGp9FP6vXa7dqt6t3lcu9m8urDd5JuK1kax5c7/Z1hpztINrPtpPjEcrJSu/3icnKjnry1tp6sP3rwYG397fdW33340trrrySr6flo/LWsZGnl1spKtX6rulJfPt3rz9NOyvqoLHqK64dDqcy6AICTR/8PzMLR9f/bjyKOvv8P/f9UnKj+96z3/0ewfjgU/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJn13cLnr+U7i8X4Sjn/v3LqmXJciYi5iPj1b8zH+QM558s8C/9w/MKfavi6EnmG8TkulNvliLhfbr/8/6i/BQAAADi9vvjw+idFt168LM66II5TcdFm7ur7U8pXiYiFxe+nlG1u/PLslJLlf9/nYm9K2fILWBenlKy45HZuWtn+lfkD4eJToVKEuWMtBwAAOBYHO4Hj7UIAAAA4Th/PugBmoxKTW5mTe8H5L+//uCF46cAIAAAAOIEqsy4AAAAAOHJ5/+/5fwAAAHC6Fc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Y+f+cdQGojgAPxuckH8KitLnKungGDlCypQRB8glOEAKcoX0EWcgXarUK1jhmWUBUayWsa1dfZ/kHY9l//S8gmJmxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl/42q/mv759+PO7pl4ez7e465d4IAAAAOLdpVvP2ZJr6b/L1d/nSh9yvIqKOiEtj91G8OMkc5Zzm/v6fx/c3ZzX8jmgTqjyjsD9eR8TnfNy87/q/AAAAAM/XerGcpdF6+jMduiD6lCZt6rdfCuVVEdFM/xVKq/d5HwuFtZ/vcXwrlNZOYE0KhaUpt3GptAdpv+6HWbvJUVOlpr74WCryz/8+SgQAAIobnTT9jkIAAADo09ehC2AYVdwtZR6WAvPv+fOC4KuTHgAAAPAEVUMXAAAAAHSuHf/3tP/fzv5/AAAAMIy0/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd2jSr+XqxnF2bs91dp8zbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyyP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzM7WVMUYZQ8RUfCgF5tua2tv4kEJHvwThJBua+jWH20OthRpLl5z7kX0KCIo8dZ/pIVe6q2HHCp4Vt7sTDJtA65aZ7bN5wNv3neGYd73zUDId94kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAbff9/ThPm8VpnFXHbt2/tp762w/1yc3tO8uppbjXZtJPhlebO71hd4kAAABweOR1fR8Rd4ud1dRni2X9X9TnpJr/u+encV3PP1z3131d+6f26y/3Xt4baHE6Tj8izm1MxscfTaX//81yvr3wt2f0yztfvnvJyweSfbT10m56QEV6Itc/GJThkTayBQD+jWN1XwX170OpH3WZGACHRr9ReNf1f77YbU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbdjdimfruBcRy/39OLl9/9r6Qf3N7TvLdTt948Z2XN+/ZrpEERHnNibj463OZr5dvnL1wtpkMr7UfvBaRMx68kI83tHfq6Z/4ZMZTo7o5P4IHlOQVQ97XvJ5MoIOfygBAPBUKqqW6vq7xc5qOtZbivjz+wfr/zcbccxY/9/79PSt5ljN+n/U2gzn38rmxS9WLl+5+vbGxbXz4/Pjz945MXp3dPLMqVNnVsp3JSvemAAAAPDfDKrWrP+zpUfX/4824pix/v/y29HXzbFy9f+B9hf9us4EAADgcHvx9T9+7x1wvDcYxFdrm5uXRtPt3v6J6baDVP+xI1Vr1v/5UtdZAQAAAG3Y3eo9sP5/thHHjOv/z/3wyk/Na+YRsVCt/x9b/3xytr3pzLU2/py46zkCAADQrYWqNdf/i/L7/2zvk4csIt56YxpX/wZwpvo///CbH5tjNb//P9neFOdSNpzej7IfRvSHXWcEAADA0+yZqqVi/7diZ3X489GPB77/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjbXwEAAP//i1o8wQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) write$binfmt_aout(r0, 0x0, 0xffffff5d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 1.438997736s ago: executing program 1 (id=404): syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x820080) openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0x8d}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/6, 0x6}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 1.37285918s ago: executing program 2 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) 1.20548785s ago: executing program 1 (id=406): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r0, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.142715673s ago: executing program 3 (id=407): bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='R', 0x1}], 0x1}, 0x4000000) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2e}, {&(0x7f0000000c40)=""/4093, 0xffd}], 0x2, 0x0, 0x4}, 0x40000022) 1.127778315s ago: executing program 2 (id=408): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 1.005047502s ago: executing program 1 (id=409): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x4460, &(0x7f0000009680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 860.90182ms ago: executing program 2 (id=410): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 830.691821ms ago: executing program 3 (id=411): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2d3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 571.679707ms ago: executing program 3 (id=412): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) 0s ago: executing program 3 (id=413): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r2, 0xf, 0x30}, &(0x7f00000003c0)=0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 83.794494][ T5756] cgroup: Unknown subsys name 'net' [ 83.960161][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.761454][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.527653][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.537081][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.546538][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.554946][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.563627][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.571045][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.579884][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.588302][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.596517][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.604076][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.611954][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.617161][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.620422][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.635593][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.657276][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.669128][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.677630][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.693338][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.723656][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.742752][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.755617][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.774460][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.783388][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.791268][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.311077][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 88.356436][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 88.461365][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.554248][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 88.577025][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.584381][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.594499][ T5768] bridge_slave_0: entered allmulticast mode [ 88.601931][ T5768] bridge_slave_0: entered promiscuous mode [ 88.629588][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.636880][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.644453][ T5770] bridge_slave_0: entered allmulticast mode [ 88.652300][ T5770] bridge_slave_0: entered promiscuous mode [ 88.660466][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.668201][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.675659][ T5770] bridge_slave_1: entered allmulticast mode [ 88.683154][ T5770] bridge_slave_1: entered promiscuous mode [ 88.690842][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.698062][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.706024][ T5768] bridge_slave_1: entered allmulticast mode [ 88.713375][ T5768] bridge_slave_1: entered promiscuous mode [ 88.820313][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.841840][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.854754][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.875400][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.882708][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.889924][ T5781] bridge_slave_0: entered allmulticast mode [ 88.898249][ T5781] bridge_slave_0: entered promiscuous mode [ 88.908607][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.958197][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.966467][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.973986][ T5781] bridge_slave_1: entered allmulticast mode [ 88.981359][ T5781] bridge_slave_1: entered promiscuous mode [ 89.029471][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.036963][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.044384][ T5767] bridge_slave_0: entered allmulticast mode [ 89.052802][ T5767] bridge_slave_0: entered promiscuous mode [ 89.063274][ T5768] team0: Port device team_slave_0 added [ 89.080266][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.088460][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.096428][ T5767] bridge_slave_1: entered allmulticast mode [ 89.104270][ T5767] bridge_slave_1: entered promiscuous mode [ 89.114316][ T5770] team0: Port device team_slave_0 added [ 89.137321][ T5768] team0: Port device team_slave_1 added [ 89.146709][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.159131][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.181329][ T5770] team0: Port device team_slave_1 added [ 89.190120][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.224854][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.279898][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.287065][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.313716][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.337887][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.345180][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.372226][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.387758][ T5781] team0: Port device team_slave_0 added [ 89.406558][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.413985][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.440836][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.475925][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.483254][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.509577][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.529317][ T5781] team0: Port device team_slave_1 added [ 89.552389][ T5767] team0: Port device team_slave_0 added [ 89.561683][ T5767] team0: Port device team_slave_1 added [ 89.615277][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.622420][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.649479][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.683686][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.692151][ T51] Bluetooth: hci2: command tx timeout [ 89.698115][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.724165][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.737776][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.744879][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.771254][ T51] Bluetooth: hci0: command tx timeout [ 89.772532][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.782014][ T51] Bluetooth: hci1: command tx timeout [ 89.809404][ T5768] hsr_slave_0: entered promiscuous mode [ 89.816470][ T5768] hsr_slave_1: entered promiscuous mode [ 89.824972][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.832168][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.858732][ T51] Bluetooth: hci3: command tx timeout [ 89.866031][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.890884][ T5770] hsr_slave_0: entered promiscuous mode [ 89.897551][ T5770] hsr_slave_1: entered promiscuous mode [ 89.904315][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.912439][ T5770] Cannot create hsr debugfs directory [ 89.992213][ T5767] hsr_slave_0: entered promiscuous mode [ 89.998740][ T5767] hsr_slave_1: entered promiscuous mode [ 90.005982][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.014262][ T5767] Cannot create hsr debugfs directory [ 90.122735][ T5781] hsr_slave_0: entered promiscuous mode [ 90.129340][ T5781] hsr_slave_1: entered promiscuous mode [ 90.136183][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.143920][ T5781] Cannot create hsr debugfs directory [ 90.563267][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.579099][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.590961][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.603750][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.673526][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.698745][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.712226][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.724710][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.849490][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.865363][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.879420][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.890526][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.988448][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.026106][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.038739][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.049394][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.068192][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.105555][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.136836][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.144245][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.177060][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.184343][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.257093][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.288647][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.322397][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.329848][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.341730][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.349049][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.510536][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.574050][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.656318][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.695675][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.720114][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.727574][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.764642][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.771869][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.783348][ T51] Bluetooth: hci2: command tx timeout [ 91.798283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.805587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.851003][ T51] Bluetooth: hci1: command tx timeout [ 91.852109][ T5776] Bluetooth: hci0: command tx timeout [ 91.870224][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.894193][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.901508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.934519][ T5776] Bluetooth: hci3: command tx timeout [ 92.059101][ T5767] veth0_vlan: entered promiscuous mode [ 92.073655][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.145127][ T5767] veth1_vlan: entered promiscuous mode [ 92.207105][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.258819][ T787] cfg80211: failed to load regulatory.db [ 92.283748][ T5767] veth0_macvtap: entered promiscuous mode [ 92.338076][ T5767] veth1_macvtap: entered promiscuous mode [ 92.375196][ T5768] veth0_vlan: entered promiscuous mode [ 92.416169][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.445743][ T5768] veth1_vlan: entered promiscuous mode [ 92.465755][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.494565][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.504917][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514655][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.526721][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.586273][ T5768] veth0_macvtap: entered promiscuous mode [ 92.637462][ T5768] veth1_macvtap: entered promiscuous mode [ 92.754470][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.766308][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.779496][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.805247][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.822062][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.841390][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.856685][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.869070][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.882959][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.903881][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.913576][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.925445][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.937982][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.948197][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059038][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.079504][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.135341][ T5781] veth0_vlan: entered promiscuous mode [ 93.165870][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.187450][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.234652][ T5781] veth1_vlan: entered promiscuous mode [ 93.263507][ T5770] veth0_vlan: entered promiscuous mode [ 93.334149][ T5770] veth1_vlan: entered promiscuous mode [ 93.347565][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.370074][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.458163][ T5781] veth0_macvtap: entered promiscuous mode [ 93.507746][ T5781] veth1_macvtap: entered promiscuous mode [ 93.527794][ T5770] veth0_macvtap: entered promiscuous mode [ 93.621249][ T5770] veth1_macvtap: entered promiscuous mode [ 93.638393][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.658235][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.669592][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.680961][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.694508][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.752996][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.776448][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.788081][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.814991][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.830162][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.850054][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.870974][ T5776] Bluetooth: hci2: command tx timeout [ 93.883274][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.899404][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.915475][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.928973][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.940312][ T5776] Bluetooth: hci0: command tx timeout [ 93.941571][ T51] Bluetooth: hci1: command tx timeout [ 93.958563][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.973163][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.003788][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.013082][ T51] Bluetooth: hci3: command tx timeout [ 94.028860][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.038808][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.052824][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.079151][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.099645][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.118464][ T5871] syz.0.8[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.124740][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.143808][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.155594][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.170409][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.192586][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.231086][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.246622][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.260077][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270393][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291006][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.421114][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 94.442111][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.481950][ T5859] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.518913][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.530783][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.546925][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.576500][ T5859] usb 3-1: config 0 descriptor?? [ 94.613383][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.662006][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.730286][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.754001][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.789575][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.822624][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.077002][ T5859] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 95.091257][ T5871] loop0: detected capacity change from 0 to 40427 [ 95.140342][ T5871] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 95.158042][ T5812] kernel write not supported for file /3/coredump_filter (pid: 5812 comm: kworker/0:3) [ 95.169089][ T5871] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 95.180194][ T5871] F2FS-fs (loop0): Image doesn't support compression [ 95.231824][ T5871] F2FS-fs (loop0): Image doesn't support compression [ 95.288371][ T5871] F2FS-fs (loop0): invalid crc value [ 95.311969][ T5859] usb 3-1: USB disconnect, device number 2 [ 95.364601][ T5871] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.608920][ T5871] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.729067][ T28] audit: type=1800 audit(1769698836.188:2): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 95.879946][ T5767] syz-executor: attempt to access beyond end of device [ 95.879946][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 95.931190][ T51] Bluetooth: hci2: command tx timeout [ 95.942835][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 96.012164][ T51] Bluetooth: hci0: command tx timeout [ 96.012178][ T5776] Bluetooth: hci1: command tx timeout [ 96.025747][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 96.038852][ T5891] loop2: detected capacity change from 0 to 512 [ 96.064479][ T5891] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.091013][ T51] Bluetooth: hci3: command tx timeout [ 96.557405][ T5901] loop1: detected capacity change from 0 to 2048 [ 96.726613][ T5904] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.980769][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.011535][ T5904] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 97.024307][ T5904] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 97.056302][ T5904] Remounting filesystem read-only [ 97.077921][ T4355] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 97.102263][ T4355] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 97.109648][ T4355] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 97.119529][ T4355] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 97.127162][ T4355] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 97.146343][ T4355] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 97.155519][ T4355] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 97.166527][ T4355] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 97.175716][ T4355] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 97.200728][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.209865][ T4355] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 97.258049][ T5840] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.266748][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.276306][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.287497][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.300183][ T4355] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 97.309376][ T5840] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.320721][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.329805][ T5840] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.344200][ T4355] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 97.351557][ T5840] usb 3-1: Manufacturer: syz [ 97.360720][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.375423][ T5840] usb 3-1: config 0 descriptor?? [ 97.380743][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.389852][ T4355] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 97.427012][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.448106][ T4355] NILFS (loop1): discard dirty page: offset=0, ino=14 [ 97.471262][ T4355] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 97.484794][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.501156][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.523551][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.554650][ T4355] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 97.567895][ T4355] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 97.575660][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.585022][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.594254][ T4355] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.601578][ T5840] rc_core: IR keymap rc-hauppauge not found [ 97.615839][ T5781] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 97.633766][ T5840] Registered IR keymap rc-empty [ 97.646327][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 97.656403][ T5840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 97.662308][ T5781] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 97.682918][ T5840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 97.689109][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.705879][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.715992][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.725969][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 97.736624][ T5781] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 97.763184][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.769412][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 97.799084][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.820040][ T971] usb 3-1: USB disconnect, device number 3 [ 97.832602][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.840859][ T5781] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.025818][ T5921] loop1: detected capacity change from 0 to 512 [ 98.041255][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 98.061198][ T5812] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 98.061641][ T5921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.080806][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.111046][ T5812] usb 4-1: Product: syz [ 98.120678][ T5812] usb 4-1: Manufacturer: syz [ 98.131258][ T5812] usb 4-1: SerialNumber: syz [ 98.135061][ T5921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.154230][ T5812] usb 4-1: config 0 descriptor?? [ 98.172229][ T5812] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 98.191561][ T5921] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.22: bad orphan inode 131083 [ 98.216905][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.356010][ T5921] EXT4-fs error (device loop1): ext4_check_dx_root:2266: inode #2: comm syz.1.22: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 98.386302][ T5922] loop0: detected capacity change from 0 to 8192 [ 98.469440][ T5922] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.492941][ T5922] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 98.541217][ T5922] REISERFS (device loop0): using ordered data mode [ 98.565891][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.591914][ T5922] reiserfs: using flush barriers [ 98.655969][ T5922] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.758329][ T5922] REISERFS (device loop0): checking transaction log (loop0) [ 98.835438][ T5922] REISERFS (device loop0): Using r5 hash to sort names [ 98.853995][ T5922] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 99.034007][ T971] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.087612][ T5922] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3669, free_space(entry_count) 2 [ 99.115006][ T5922] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 99.127573][ T5922] REISERFS (device loop0): Remounting filesystem read-only [ 99.136060][ T5922] REISERFS error (device loop0): vs-5350 reiserfs_delete_solid_item: i/o failure occurred trying to delete [-1 2 0x1 IND] [ 99.150545][ T5922] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 99.215432][ T5812] gspca_sonixj: reg_w1 err -71 [ 99.227447][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.249264][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.260932][ T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.283810][ T971] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.294790][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.317479][ T971] usb 3-1: config 0 descriptor?? [ 99.350776][ T5812] sonixj: probe of 4-1:0.0 failed with error -71 [ 99.373764][ T5812] usb 4-1: USB disconnect, device number 2 [ 99.571890][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.771580][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 99.778213][ T971] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 99.789494][ T787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 99.805585][ T971] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 99.819169][ T787] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.838195][ T787] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.870808][ T787] usb 2-1: Product: syz [ 99.873211][ T971] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 99.875045][ T787] usb 2-1: Manufacturer: syz [ 99.929762][ T787] usb 2-1: SerialNumber: syz [ 99.956420][ T787] usb 2-1: config 0 descriptor?? [ 99.978280][ T5932] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.999153][ T787] hub 2-1:0.0: bad descriptor, ignoring hub [ 100.030896][ T787] hub: probe of 2-1:0.0 failed with error -5 [ 100.242500][ T971] usb 3-1: USB disconnect, device number 4 [ 100.356630][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.451212][ T5812] usb 2-1: USB disconnect, device number 2 [ 100.830901][ T787] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.046642][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 101.083112][ T787] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.092541][ T787] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 101.102628][ T5951] loop2: detected capacity change from 0 to 8192 [ 101.111249][ T787] usb 2-1: Product: syz [ 101.115512][ T787] usb 2-1: Manufacturer: syz [ 101.120169][ T787] usb 2-1: SerialNumber: syz [ 101.140748][ T5951] FAT-fs (loop2): bogus logical sector size 155 [ 101.147396][ T5951] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 101.165829][ T787] usb 2-1: config 0 descriptor?? [ 101.172718][ T5932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.181619][ T787] hub 2-1:0.0: bad descriptor, ignoring hub [ 101.187608][ T787] hub: probe of 2-1:0.0 failed with error -5 [ 101.199535][ T5951] FAT-fs (loop2): Can't find a valid FAT filesystem [ 101.297290][ T5949] loop3: detected capacity change from 0 to 32768 [ 101.412375][ T5949] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.545480][ T5949] XFS (loop3): Ending clean mount [ 101.601837][ T971] usb 2-1: USB disconnect, device number 3 [ 101.967608][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.202496][ T5971] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.570810][ T971] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.798463][ T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.834504][ T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.878751][ T971] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.917775][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.940826][ T971] usb 1-1: SerialNumber: syz [ 103.150359][ T5979] loop3: detected capacity change from 0 to 32768 [ 103.182715][ T971] usb 1-1: 0:2 : does not exist [ 103.206025][ T971] usb 1-1: USB disconnect, device number 2 [ 103.307089][ T5975] loop2: detected capacity change from 0 to 32768 [ 103.316484][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.333449][ T5975] ======================================================= [ 103.333449][ T5975] WARNING: The mand mount option has been deprecated and [ 103.333449][ T5975] and is ignored by this kernel. Remove the mand [ 103.333449][ T5975] option from the mount to silence this warning. [ 103.333449][ T5975] ======================================================= [ 103.462460][ T28] audit: type=1326 audit(1769698843.908:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe911f9aeb9 code=0x7fc00000 [ 103.636827][ T5975] JBD2: Ignoring recovery information on journal [ 103.745154][ T5975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.846265][ T5986] loop1: detected capacity change from 0 to 512 [ 103.865391][ T5986] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.894294][ T5986] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.916884][ T5986] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4047: comm syz.1.46: Allocating blocks 41-42 which overlap fs metadata [ 103.936957][ T5986] Quota error (device loop1): write_blk: dquota write failed [ 103.946153][ T5986] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 103.957324][ T5986] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.46: Failed to acquire dquot type 0 [ 103.971094][ T5986] EXT4-fs (loop1): 1 truncate cleaned up [ 104.023438][ T5986] EXT4-fs (loop1): pa ffff8880771461d0: logic 1, phys. 41, len 23 [ 104.031970][ T5986] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5388: group 0, free 22, pa_free 23 [ 104.044548][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.135666][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.364007][ T5993] loop1: detected capacity change from 0 to 256 [ 104.493082][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 104.508461][ T5993] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 104.556943][ T5993] FAT-fs (loop1): Filesystem has been set read-only [ 104.771768][ T5998] netlink: 'syz.1.52': attribute type 34 has an invalid length. [ 104.951462][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.160694][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 105.217617][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.241839][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.260005][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.280295][ T8] usb 4-1: Product: syz [ 105.284653][ T8] usb 4-1: Manufacturer: syz [ 105.289310][ T8] usb 4-1: SerialNumber: syz [ 105.308148][ T8] usb 4-1: config 0 descriptor?? [ 105.321477][ T971] kernel write not supported for file /28/coredump_filter (pid: 971 comm: kworker/0:2) [ 105.334902][ T5996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.361752][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 105.376441][ T8] hub: probe of 4-1:0.0 failed with error -5 [ 105.776785][ T6021] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET) [ 105.790209][ T6006] loop0: detected capacity change from 0 to 32768 [ 105.800572][ T6006] XFS: attr2 mount option is deprecated. [ 105.850388][ T6006] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.896647][ T6006] XFS (loop0): Ending clean mount [ 105.926688][ T6006] XFS (loop0): Quotacheck needed: Please wait. [ 106.071701][ T6006] XFS (loop0): Quotacheck: Done. [ 106.117455][ T8] usb 4-1: USB disconnect, device number 3 [ 106.177248][ T6006] XFS (loop0): User initiated shutdown received. [ 106.188755][ T6006] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 106.208612][ T6006] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 106.301134][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.320974][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.540871][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 106.603318][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.615475][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.641673][ T8] usb 4-1: Product: syz [ 106.646400][ T8] usb 4-1: Manufacturer: syz [ 106.661778][ T8] usb 4-1: SerialNumber: syz [ 106.681824][ T8] usb 4-1: config 0 descriptor?? [ 106.691180][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.738754][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 106.771783][ T8] hub: probe of 4-1:0.0 failed with error -5 [ 107.131288][ T5840] usb 4-1: USB disconnect, device number 4 [ 107.728183][ T6055] loop0: detected capacity change from 0 to 32768 [ 107.785326][ T6055] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.70 (6055) [ 107.940418][ T6055] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 107.977347][ T6055] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 108.006213][ T6055] BTRFS info (device loop0): force zlib compression, level 3 [ 108.022112][ T6055] BTRFS info (device loop0): turning on flush-on-commit [ 108.049575][ T6055] BTRFS info (device loop0): max_inline at 4096 [ 108.056358][ T6055] BTRFS info (device loop0): using free space tree [ 108.126354][ T6056] loop2: detected capacity change from 0 to 40427 [ 108.138320][ T6056] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 108.146483][ T6056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.173342][ T6056] F2FS-fs (loop2): build fault injection attr: rate: 18446, type: 0x7ffff [ 108.183655][ T6056] F2FS-fs (loop2): invalid crc value [ 108.230763][ T6056] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.355076][ T6055] BTRFS info (device loop0): enabling ssd optimizations [ 108.375232][ T6055] BTRFS info (device loop0): auto enabling async discard [ 108.489063][ T6056] F2FS-fs (loop2): Start checkpoint disabled! [ 108.591035][ T6056] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.619401][ T6056] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 108.759394][ T6056] syz.2.71: attempt to access beyond end of device [ 108.759394][ T6056] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.808579][ T6055] BTRFS info (device loop0): balance: start -d -m [ 108.848321][ T6055] BTRFS info (device loop0): balance: paused [ 109.065168][ T5767] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.096547][ T1014] kworker/u4:6: attempt to access beyond end of device [ 109.096547][ T1014] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 109.164050][ T1014] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 109.193028][ T1014] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 109.207149][ T1014] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 109.396698][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 109.466934][ T5859] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.351999][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.493208][ T6115] loop2: detected capacity change from 0 to 4096 [ 110.563017][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.604376][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.617875][ T6117] loop0: detected capacity change from 0 to 4096 [ 110.626685][ T5812] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.667101][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.694227][ T5812] usb 2-1: SerialNumber: syz [ 110.943860][ T5812] usb 2-1: 0:2 : does not exist [ 111.012223][ T5812] usb 2-1: USB disconnect, device number 4 [ 111.129641][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.149385][ T6121] loop3: detected capacity change from 0 to 256 [ 111.466653][ T6124] syzkaller1: entered promiscuous mode [ 111.485080][ T6124] syzkaller1: entered allmulticast mode [ 111.933293][ T6137] netlink: 'syz.2.99': attribute type 4 has an invalid length. [ 111.958391][ T6136] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 112.252908][ T6147] loop2: detected capacity change from 0 to 2048 [ 112.292057][ T6147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.470779][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.503828][ T6125] syz.0.93: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 112.540981][ T6125] CPU: 0 PID: 6125 Comm: syz.0.93 Not tainted syzkaller #0 [ 112.548280][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.558606][ T6125] Call Trace: [ 112.561954][ T6125] [ 112.565049][ T6125] dump_stack_lvl+0x18c/0x250 [ 112.569897][ T6125] ? show_regs_print_info+0x20/0x20 [ 112.575264][ T6125] ? load_image+0x400/0x400 [ 112.579840][ T6125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 112.586418][ T6125] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 112.593266][ T6125] warn_alloc+0x246/0x340 [ 112.597911][ T6125] ? zone_watermark_ok_safe+0x230/0x230 [ 112.603643][ T6125] ? _raw_spin_unlock+0x28/0x40 [ 112.608667][ T6125] ? netlink_rcv_skb+0x241/0x4d0 [ 112.613723][ T6125] __vmalloc_node_range+0x662/0x1330 [ 112.619522][ T6125] ? __asan_memset+0x22/0x40 [ 112.624175][ T6125] ? free_vm_area+0x50/0x50 [ 112.628728][ T6125] ? kvmalloc_node+0x70/0x180 [ 112.633800][ T6125] ? rcu_is_watching+0x15/0xb0 [ 112.638602][ T6125] ? kvmalloc_node+0x70/0x180 [ 112.643433][ T6125] ? trace_kmalloc+0x1f/0x90 [ 112.648617][ T6125] kvmalloc_node+0x13f/0x180 [ 112.654055][ T6125] ? hash_netport4_resize+0x232/0x1b40 [ 112.659648][ T6125] hash_netport4_resize+0x232/0x1b40 [ 112.665148][ T6125] ? hash_netport4_uadt+0xc99/0xf30 [ 112.670393][ T6125] ? hash_netport4_uadt+0xf30/0xf30 [ 112.675638][ T6125] ? hash_netport4_kadt+0x590/0x590 [ 112.680896][ T6125] ? _local_bh_enable+0xa0/0xa0 [ 112.685854][ T6125] call_ad+0x454/0xb40 [ 112.689988][ T6125] ? ip_set_ad+0x9c0/0x9c0 [ 112.694480][ T6125] ? __nla_parse+0x40/0x50 [ 112.698956][ T6125] ip_set_ad+0x81a/0x9c0 [ 112.703330][ T6125] ? ip_set_dump_done+0x1e0/0x1e0 [ 112.708482][ T6125] ? rcu_is_watching+0x15/0xb0 [ 112.713352][ T6125] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 112.718424][ T6125] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.724612][ T6125] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 112.729958][ T6125] ? nfnetlink_unbind+0x160/0x160 [ 112.735152][ T6125] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 112.740487][ T6125] ? __netlink_deliver_tap+0x5ab/0x830 [ 112.746165][ T6125] ? netlink_deliver_tap+0x19c/0x1b0 [ 112.751679][ T6125] ? netlink_unicast+0x72c/0x8d0 [ 112.757176][ T6125] ? netlink_sendmsg+0x8d0/0xbf0 [ 112.763751][ T6125] ? ____sys_sendmsg+0x5ba/0x960 [ 112.768863][ T6125] ? ___sys_sendmsg+0x2a6/0x360 [ 112.773846][ T6125] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 112.779231][ T6125] ? do_syscall_64+0x55/0xa0 [ 112.783913][ T6125] netlink_rcv_skb+0x241/0x4d0 [ 112.788747][ T6125] ? nfnetlink_unbind+0x160/0x160 [ 112.793820][ T6125] ? netlink_ack+0x1180/0x1180 [ 112.798636][ T6125] ? apparmor_capable+0x137/0x1a0 [ 112.803806][ T6125] ? bpf_lsm_capable+0x9/0x10 [ 112.808623][ T6125] ? security_capable+0x89/0xb0 [ 112.813620][ T6125] nfnetlink_rcv+0x2c9/0x24a0 [ 112.818353][ T6125] ? __local_bh_enable_ip+0x13a/0x1c0 [ 112.823852][ T6125] ? lockdep_hardirqs_on+0x98/0x150 [ 112.829299][ T6125] ? __local_bh_enable_ip+0x13a/0x1c0 [ 112.834880][ T6125] ? _local_bh_enable+0xa0/0xa0 [ 112.839768][ T6125] ? __dev_queue_xmit+0x26b/0x36b0 [ 112.844922][ T6125] ? __dev_queue_xmit+0x26b/0x36b0 [ 112.850253][ T6125] ? __dev_queue_xmit+0x124f/0x36b0 [ 112.855999][ T6125] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 112.861946][ T6125] ? __dev_queue_xmit+0x26b/0x36b0 [ 112.867734][ T6125] ? ref_tracker_free+0x690/0x840 [ 112.873173][ T6125] ? refcount_inc+0x70/0x70 [ 112.877704][ T6125] ? __asan_memcpy+0x40/0x70 [ 112.882503][ T6125] ? __skb_clone+0x63/0x790 [ 112.887241][ T6125] ? __skb_clone+0x480/0x790 [ 112.891892][ T6125] ? __netlink_deliver_tap+0x7e8/0x830 [ 112.897940][ T6125] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.903195][ T6125] ? __lock_acquire+0x7d40/0x7d40 [ 112.908437][ T6125] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.913712][ T6125] netlink_unicast+0x751/0x8d0 [ 112.918613][ T6125] netlink_sendmsg+0x8d0/0xbf0 [ 112.923420][ T6125] ? netlink_getsockopt+0x590/0x590 [ 112.928682][ T6125] ? aa_sock_msg_perm+0x94/0x150 [ 112.934033][ T6125] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 112.939550][ T6125] ? security_socket_sendmsg+0x80/0xa0 [ 112.945148][ T6125] ? netlink_getsockopt+0x590/0x590 [ 112.950457][ T6125] ____sys_sendmsg+0x5ba/0x960 [ 112.955616][ T6125] ? __asan_memset+0x22/0x40 [ 112.960613][ T6125] ? __sys_sendmsg_sock+0x30/0x30 [ 112.966072][ T6125] ? __import_iovec+0x5f2/0x850 [ 112.970992][ T6125] ? import_iovec+0x73/0xa0 [ 112.976074][ T6125] ___sys_sendmsg+0x2a6/0x360 [ 112.980975][ T6125] ? __sys_sendmsg+0x2a0/0x2a0 [ 112.986439][ T6125] __se_sys_sendmsg+0x1c2/0x2b0 [ 112.991437][ T6125] ? __x64_sys_sendmsg+0x80/0x80 [ 112.996720][ T6125] ? lockdep_hardirqs_on+0x98/0x150 [ 113.001978][ T6125] do_syscall_64+0x55/0xa0 [ 113.006525][ T6125] ? clear_bhb_loop+0x40/0x90 [ 113.011428][ T6125] ? clear_bhb_loop+0x40/0x90 [ 113.016174][ T6125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.022213][ T6125] RIP: 0033:0x7f136f59aeb9 [ 113.026673][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.046621][ T6125] RSP: 002b:00007f137051d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.055171][ T6125] RAX: ffffffffffffffda RBX: 00007f136f815fa0 RCX: 00007f136f59aeb9 [ 113.063656][ T6125] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 113.071964][ T6125] RBP: 00007f136f608c1f R08: 0000000000000000 R09: 0000000000000000 [ 113.079973][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.088144][ T6125] R13: 00007f136f816038 R14: 00007f136f815fa0 R15: 00007fffdaa4b5d8 [ 113.096434][ T6125] [ 113.125688][ T6125] Mem-Info: [ 113.128903][ T6125] active_anon:5714 inactive_anon:0 isolated_anon:0 [ 113.128903][ T6125] active_file:11251 inactive_file:39963 isolated_file:0 [ 113.128903][ T6125] unevictable:768 dirty:715 writeback:0 [ 113.128903][ T6125] slab_reclaimable:10159 slab_unreclaimable:92653 [ 113.128903][ T6125] mapped:24591 shmem:1368 pagetables:611 [ 113.128903][ T6125] sec_pagetables:0 bounce:0 [ 113.128903][ T6125] kernel_misc_reclaimable:0 [ 113.128903][ T6125] free:1352876 free_pcp:8977 free_cma:0 [ 113.141104][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 113.174651][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.186201][ T6125] Node 0 active_anon:22856kB inactive_anon:0kB active_file:45004kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98364kB dirty:2860kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11196kB pagetables:2444kB sec_pagetables:0kB all_unreclaimable? no [ 113.222157][ T6125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 113.290009][ T6125] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.320387][ T787] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 113.345163][ T787] usb 4-1: config 179 has no interface number 0 [ 113.358095][ T787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 113.380771][ T787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 113.388204][ T6125] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 113.394174][ T787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.399148][ T6125] Node 0 DMA32 free:1505356kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22624kB inactive_anon:0kB active_file:45004kB inactive_file:158836kB unevictable:1536kB writepending:2860kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:17856kB local_pcp:8600kB free_cma:0kB [ 113.447761][ T787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 113.447799][ T787] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.447847][ T787] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.447871][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.475509][ T6145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.500812][ T6125] lowmem_reserve[]: [ 113.504385][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.504400][ T6125] 0 0 0 0 0 [ 113.537014][ T6125] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 113.600132][ T6125] lowmem_reserve[]: 0 0 0 0 0 [ 113.618140][ T6125] Node 1 Normal free:3890788kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18848kB local_pcp:11520kB free_cma:0kB [ 113.715995][ T6125] lowmem_reserve[]: 0 0 0 0 0 [ 113.725697][ T6125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.745254][ T6125] Node 0 DMA32: 1179*4kB (UM) 1374*8kB (UME) 1139*16kB (UM) 454*32kB (UME) 264*64kB (UM) 54*128kB (UM) 26*256kB (UM) 14*512kB (ME) 8*1024kB (UM) 3*2048kB (ME) 343*4096kB (M) = 1505356kB [ 113.769605][ T6125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.792908][ T6125] Node 1 Normal: 247*4kB (UME) 59*8kB (UME) 35*16kB (UME) 40*32kB (UME) 12*64kB (UE) 9*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890788kB [ 113.812590][ T6125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.823426][ T6125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.836505][ T6125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.849147][ T6125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.859636][ T6125] 52568 total pagecache pages [ 113.865235][ T6125] 0 pages in swap cache [ 113.870251][ T6125] Free swap = 124464kB [ 113.899867][ T6125] Total swap = 124996kB [ 113.925905][ T6125] 2097051 pages RAM [ 113.929827][ T6125] 0 pages HighMem/MovableOnly [ 113.937566][ T6125] 416922 pages reserved [ 113.946897][ T6125] 0 pages cma reserved [ 114.081751][ T5812] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.088779][ T6157] loop1: detected capacity change from 0 to 1024 [ 114.113786][ T787] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 114.245485][ T6157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.290530][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.350196][ T6157] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.361059][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.401240][ T5859] usb 4-1: USB disconnect, device number 5 [ 114.401248][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 114.416439][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 114.435368][ T5812] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.448883][ T5859] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 114.471672][ T6157] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.107: bg 0: block 112: padding at end of block bitmap is not set [ 114.494648][ T6157] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 114.508365][ T6157] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.508365][ T6157] [ 114.510888][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.543193][ T6166] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 1: comm syz.1.107: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.560258][ T5812] usb 3-1: SerialNumber: syz [ 114.576778][ T6166] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 1: comm syz.1.107: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.717232][ T39] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.740520][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 114.759263][ T39] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.759263][ T39] [ 114.783945][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.828172][ T5812] usb 3-1: 0:2 : does not exist [ 114.859978][ T6169] loop0: detected capacity change from 0 to 8192 [ 114.928813][ T5812] usb 3-1: USB disconnect, device number 5 [ 115.000224][ T6165] udevd[6165]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.039301][ T6171] input: syz1 as /devices/virtual/input/input7 [ 115.236751][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 115.260257][ T6174] block nbd0: Unsupported socket: should be TCP or UNIX. [ 115.542545][ T6182] Bluetooth: MGMT ver 1.22 [ 115.622533][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.680295][ T6186] netlink: 'syz.2.120': attribute type 5 has an invalid length. [ 115.711049][ T5859] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.810776][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 115.829348][ T5812] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 115.840150][ T5812] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.850384][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.863863][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.874516][ T5812] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.910399][ T5812] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.920018][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.950798][ T5859] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 115.959230][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.999424][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.009914][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.023438][ T5859] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.033333][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.058951][ T5859] usb 4-1: config 0 descriptor?? [ 116.526126][ T5859] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 116.543535][ T5859] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 116.569590][ T5859] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 116.763653][ T6196] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 116.787381][ T971] usb 2-1: USB disconnect, device number 5 [ 116.858335][ T5859] usb 4-1: USB disconnect, device number 6 [ 117.060630][ C1] sched: RT throttling activated [ 117.217652][ T6194] loop2: detected capacity change from 0 to 131072 [ 117.228182][ T6194] F2FS-fs (loop2): invalid crc value [ 117.246969][ T6194] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.301269][ T6194] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 117.611050][ T5776] Bluetooth: hci0: command 0x1407 tx timeout [ 117.613074][ T51] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 118.505327][ T6210] loop0: detected capacity change from 0 to 32768 [ 118.538966][ T6210] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.128 (6210) [ 118.581201][ T6210] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.608426][ T6210] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.634177][ T6210] BTRFS info (device loop0): setting nodatacow, compression disabled [ 118.663331][ T6210] BTRFS info (device loop0): force clearing of disk cache [ 118.692241][ T6210] BTRFS info (device loop0): enabling ssd optimizations [ 118.708657][ T6210] BTRFS info (device loop0): using spread ssd allocation scheme [ 118.726708][ T6210] BTRFS info (device loop0): turning off barriers [ 118.748705][ T6210] BTRFS info (device loop0): disabling free space tree [ 118.771080][ T6210] BTRFS info (device loop0): not using ssd optimizations [ 118.790889][ T6210] BTRFS info (device loop0): not using spread ssd allocation scheme [ 118.999876][ T6210] BTRFS info (device loop0): rebuilding free space tree [ 119.162523][ T6210] BTRFS info (device loop0): disabling free space tree [ 119.211040][ T6210] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.242258][ T6210] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.505983][ T971] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.605803][ T5767] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.701652][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 119.728193][ T971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.771169][ T971] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 119.798659][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.837100][ T971] usb 2-1: config 0 descriptor?? [ 120.289978][ T971] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 120.334940][ T971] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 120.352482][ T971] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 120.375658][ T6264] loop3: detected capacity change from 0 to 128 [ 120.390769][ T971] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 120.408581][ T971] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 120.462222][ T971] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 120.626421][ T971] corsair-cpro: probe of 0003:1B1C:0C10.0005 failed with error -71 [ 120.674418][ T971] usb 2-1: USB disconnect, device number 6 [ 120.758640][ T6268] fido_id[6268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 120.919294][ T6275] Zero length message leads to an empty skb [ 121.511028][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.532179][ T6273] loop0: detected capacity change from 0 to 32768 [ 121.567595][ T6273] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.667614][ T6273] XFS (loop0): Ending clean mount [ 121.677731][ T6273] XFS (loop0): Quotacheck needed: Please wait. [ 121.726344][ T787] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.740119][ T787] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.750947][ T787] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.761164][ T971] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.766668][ T6273] XFS (loop0): Quotacheck: Done. [ 121.774544][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.795018][ T6281] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.843748][ T787] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 121.979764][ T971] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 121.990744][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 122.049812][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 122.090784][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.125870][ T971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.135615][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.157056][ T971] usb 4-1: config 0 descriptor?? [ 122.180825][ T6287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 122.208034][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.610304][ T5859] usb 2-1: USB disconnect, device number 7 [ 122.683213][ T971] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 122.721826][ T971] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 122.762770][ T971] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 122.879653][ T6305] warning: `syz.0.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.025645][ T787] usb 4-1: USB disconnect, device number 7 [ 123.145789][ T6298] loop2: detected capacity change from 0 to 40427 [ 123.166142][ T6298] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 123.188584][ T6298] F2FS-fs (loop2): invalid crc value [ 123.198101][ T6298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.281815][ T6298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.375082][ T5771] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 123.509889][ T5768] syz-executor: attempt to access beyond end of device [ 123.509889][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.557975][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.583233][ T5771] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.601105][ T5771] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.634540][ T5771] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.644544][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.843361][ T6321] loop3: detected capacity change from 0 to 4096 [ 123.928357][ T5771] usb 1-1: usb_control_msg returned -32 [ 123.949219][ T5771] usbtmc 1-1:16.0: can't read capabilities [ 124.540445][ T5771] usb 1-1: USB disconnect, device number 3 [ 124.796556][ T6343] process 'syz.3.172' launched './file1' with NULL argv: empty string added [ 125.935684][ T6361] loop1: detected capacity change from 0 to 164 [ 125.938581][ T6344] loop2: detected capacity change from 0 to 131072 [ 125.955441][ T6344] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 125.963719][ T6344] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.976714][ T6344] F2FS-fs (loop2): invalid crc value [ 126.008816][ T6344] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.049914][ T6361] Unable to read rock-ridge attributes [ 126.081478][ T6344] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.088656][ T6344] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 126.174466][ T6361] Unable to read rock-ridge attributes [ 126.282616][ T28] audit: type=1800 audit(1769698866.738:4): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.171" name="file2" dev="loop2" ino=8 res=0 errno=0 [ 126.308645][ T6371] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.764657][ T6377] loop0: detected capacity change from 0 to 2048 [ 126.801850][ T6377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.051454][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.254795][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 127.264135][ T787] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 127.273176][ T787] usb 2-1: config 0 has no interface number 0 [ 127.279479][ T787] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 127.310709][ T787] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 127.336135][ T787] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 127.373737][ T787] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 127.393964][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.417238][ T787] usb 2-1: Product: syz [ 127.422143][ T5771] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 127.433425][ T787] usb 2-1: Manufacturer: syz [ 127.438930][ T787] usb 2-1: SerialNumber: syz [ 127.467281][ T787] usb 2-1: config 0 descriptor?? [ 127.481771][ T6379] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.489730][ T6379] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.631149][ T5771] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 127.640923][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.660909][ T5771] usb 4-1: config 0 descriptor?? [ 127.721077][ T971] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.740212][ T6379] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.752589][ T6379] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.921248][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 127.936756][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.948762][ T971] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 127.958178][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.969850][ T971] usb 1-1: config 0 descriptor?? [ 127.988372][ T787] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 128.150096][ T6396] loop2: detected capacity change from 0 to 8192 [ 128.171431][ T6396] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.189607][ T787] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 115 [ 128.442166][ T971] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 128.648775][ T971] usb 1-1: USB disconnect, device number 4 [ 128.722290][ T5771] pegasus: probe of 4-1:0.0 failed with error -71 [ 128.763222][ T5771] usb 4-1: USB disconnect, device number 8 [ 129.007187][ T6406] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.836835][ T971] usb 2-1: USB disconnect, device number 8 [ 130.565454][ T5859] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.803886][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.829967][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.856699][ T5859] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.882108][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.890254][ T5859] usb 4-1: SerialNumber: syz [ 130.922204][ T6459] random: crng reseeded on system resumption [ 131.157728][ T5859] usb 4-1: 0:2 : does not exist [ 131.206029][ T5859] usb 4-1: USB disconnect, device number 9 [ 131.335988][ T6165] udevd[6165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.529822][ T6471] loop0: detected capacity change from 0 to 1024 [ 131.730875][ T5859] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.730891][ T5828] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.930806][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 131.939148][ T5828] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 131.950924][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 131.959176][ T5828] usb 2-1: config 0 has no interface number 0 [ 131.970098][ T5859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.979521][ T5828] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 131.998875][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.000800][ T5859] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.017462][ T5828] usb 2-1: Product: syz [ 132.041139][ T5828] usb 2-1: Manufacturer: syz [ 132.041673][ T5859] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.046077][ T5828] usb 2-1: SerialNumber: syz [ 132.068182][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.090632][ T5859] usb 3-1: Product: syz [ 132.098684][ T5859] usb 3-1: Manufacturer: syz [ 132.117473][ T5828] usb 2-1: config 0 descriptor?? [ 132.119353][ T5859] usb 3-1: SerialNumber: syz [ 132.145583][ T5828] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 132.370722][ T5859] usb 3-1: 0:2 : does not exist [ 132.417271][ T5859] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 132.487870][ T5859] usb 3-1: USB disconnect, device number 6 [ 132.518917][ T6484] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 132.569340][ T6165] udevd[6165]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.790059][ T6486] loop3: detected capacity change from 0 to 512 [ 133.132438][ T6492] loop2: detected capacity change from 0 to 16 [ 133.174075][ T6492] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.206689][ T51] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 133.225620][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.234574][ T6492] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 133.248275][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.259654][ T28] audit: type=1800 audit(1769698873.718:5): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.238" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 133.321150][ T5771] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.503589][ T5771] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 133.512418][ T5771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 133.524916][ T5771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 133.537320][ T5859] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.546352][ T5771] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.563367][ T5771] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.574220][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.587688][ T5771] usb 1-1: config 0 descriptor?? [ 133.604673][ T6488] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.729972][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.740873][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 133.750127][ T5859] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 133.759515][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.772088][ T5859] usb 3-1: config 0 descriptor?? [ 133.957909][ T5812] usb 2-1: USB disconnect, device number 9 [ 134.044709][ T5771] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 134.074293][ T5771] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 134.097735][ T5771] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.239665][ T6492] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 134.274641][ T6492] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 134.293942][ T5859] Bluetooth: Can't get state to change to load configuration err [ 134.330880][ T5859] Bluetooth: Loading sysconfig file failed [ 134.345553][ T5859] ath3k: probe of 3-1:0.0 failed with error -16 [ 134.364742][ T5859] usb 3-1: USB disconnect, device number 7 [ 134.434845][ T5828] usb 1-1: USB disconnect, device number 5 [ 134.686091][ T6498] loop1: detected capacity change from 0 to 40427 [ 134.709792][ T6498] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 134.719560][ T6498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 134.732910][ T6498] F2FS-fs (loop1): invalid crc value [ 134.839121][ T6498] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 134.846692][ T6498] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.904003][ T6492] syz.2.238 (6492) used greatest stack depth: 20336 bytes left [ 134.973143][ T6498] syz.1.240: attempt to access beyond end of device [ 134.973143][ T6498] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 135.024435][ T6498] syz.1.240: attempt to access beyond end of device [ 135.024435][ T6498] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 135.075556][ T5781] syz-executor: attempt to access beyond end of device [ 135.075556][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.093350][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.175407][ T6506] loop0: detected capacity change from 0 to 128 [ 135.210670][ T28] audit: type=1800 audit(1769698875.668:6): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="bus" dev="loop0" ino=1048597 res=0 errno=0 [ 135.318902][ T5767] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.338481][ T5767] FAT-fs (loop0): Filesystem has been set read-only [ 136.034614][ T5771] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.095646][ T6510] loop0: detected capacity change from 0 to 40427 [ 136.105733][ T6510] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 136.120430][ T6510] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.129526][ T6510] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 136.146975][ T6510] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 136.156594][ T6510] F2FS-fs (loop0): Image doesn't support compression [ 136.167230][ T6510] F2FS-fs (loop0): invalid crc value [ 136.185694][ T6510] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.230785][ T5771] usb 3-1: Using ep0 maxpacket: 8 [ 136.246184][ T5771] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 136.272193][ T5771] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.300771][ T5771] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.321329][ T6510] F2FS-fs (loop0): Start checkpoint disabled! [ 136.329037][ T5771] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.347580][ T5771] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.362488][ T6510] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 136.369764][ T6510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 136.382164][ T5771] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.396012][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.439137][ T28] audit: type=1800 audit(1769698876.898:7): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.245" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 136.559398][ T6510] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 136.574595][ T6510] syz.0.245: attempt to access beyond end of device [ 136.574595][ T6510] loop0: rw=2049, sector=45096, nr_sectors = 56 limit=40427 [ 136.620304][ T5771] usb 3-1: usb_control_msg returned -32 [ 136.637826][ T5771] usbtmc 3-1:16.0: can't read capabilities [ 136.783673][ T1319] kworker/u4:7: attempt to access beyond end of device [ 136.783673][ T1319] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.824082][ T1319] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 136.837500][ T1319] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 136.879617][ T6521] loop1: detected capacity change from 0 to 32768 [ 136.934516][ T6521] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.978056][ T6537] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 137.023826][ T971] usb 3-1: USB disconnect, device number 8 [ 137.252299][ T6521] XFS (loop1): Ending clean mount [ 137.302321][ T6521] XFS (loop1): Quotacheck needed: Please wait. [ 137.397335][ T6521] XFS (loop1): Quotacheck: Done. [ 137.665302][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.683535][ T6541] loop3: detected capacity change from 0 to 8192 [ 137.725446][ T6541] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.850749][ T6541] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 137.903833][ T6541] REISERFS (device loop3): using ordered data mode [ 137.944825][ T6541] reiserfs: using flush barriers [ 138.007628][ T6541] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.072663][ T6541] REISERFS (device loop3): checking transaction log (loop3) [ 138.088160][ T6541] REISERFS (device loop3): Using r5 hash to sort names [ 138.103011][ T6541] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 138.930847][ T5840] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 139.143383][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.170856][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.195934][ T5840] usb 3-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 139.213577][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.261550][ T5840] usb 3-1: config 0 descriptor?? [ 139.442033][ T6580] netlink: 'syz.3.270': attribute type 9 has an invalid length. [ 139.450063][ T6580] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.270'. [ 139.706840][ T5840] wacom 0003:056A:0335.0009: hidraw0: USB HID v0.00 Device [HID 056a:0335] on usb-dummy_hcd.2-1/input0 [ 139.972464][ T787] usb 3-1: USB disconnect, device number 9 [ 140.114456][ T6597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.896112][ T6599] loop1: detected capacity change from 0 to 32768 [ 140.956601][ T6599] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.075870][ T787] kernel write not supported for file /vcs (pid: 787 comm: kworker/1:2) [ 141.218987][ T6599] OCFS2: ERROR (device loop1): int ocfs2_change_extent_flag(handle_t *, struct ocfs2_extent_tree *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *, int, int): Owner 17058 has an extent at cpos 0 which can no longer be found [ 141.258121][ T6599] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 141.269455][ T6599] OCFS2: File system is now read-only. [ 141.276541][ T6599] (syz.1.278,6599,1):ocfs2_mark_extent_refcounted:2359 ERROR: status = -30 [ 141.295784][ T6599] (syz.1.278,6599,1):ocfs2_add_refcount_flag:3706 ERROR: status = -30 [ 141.305221][ T6599] (syz.1.278,6599,1):ocfs2_reflink_remap_extent:4570 ERROR: status = -30 [ 141.332292][ T6599] (syz.1.278,6599,0):ocfs2_reflink_remap_blocks:4694 ERROR: status = -30 [ 141.383206][ T6599] (syz.1.278,6599,0):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 141.812831][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 142.188917][ T6628] loop2: detected capacity change from 0 to 1024 [ 142.224409][ T6628] EXT4-fs (loop2): invalid inodes per group: 1048608 [ 142.224409][ T6628] [ 142.278647][ T6631] loop1: detected capacity change from 0 to 128 [ 142.286615][ T6628] binder: 6627:6628 ioctl c018620c 200000000000 returned -22 [ 142.324176][ T6631] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.359866][ T6631] hpfs: filesystem error: improperly stopped [ 142.400369][ T6631] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.430455][ T6631] hpfs: You really don't want any checks? You are crazy... [ 142.469853][ T6631] hpfs: hpfs_map_sector(): read error [ 142.483928][ T6631] hpfs: code page support is disabled [ 142.505788][ T6631] hpfs: hpfs_map_4sectors(): unaligned read [ 142.532079][ T6631] hpfs: hpfs_map_4sectors(): unaligned read [ 142.548319][ T6631] hpfs: filesystem error: unable to find root dir [ 142.606941][ T6631] hpfs: hpfs_map_4sectors(): unaligned read [ 142.614959][ T6633] loop3: detected capacity change from 0 to 1024 [ 142.631099][ T6631] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 142.647832][ T6633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.674450][ T6635] loop2: detected capacity change from 0 to 512 [ 142.746673][ T6633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.813480][ T6635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.901107][ T6633] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2852: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 142.940991][ T6635] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.096602][ T6635] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 143.116393][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.134912][ T6635] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 143.149743][ T6635] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.149743][ T6635] [ 143.161194][ T6635] EXT4-fs (loop2): Total free blocks count 0 [ 143.167353][ T6635] EXT4-fs (loop2): Free/Dirty block details [ 143.175027][ T6635] EXT4-fs (loop2): free_blocks=65280 [ 143.181088][ T6635] EXT4-fs (loop2): dirty_blocks=48 [ 143.187086][ T6635] EXT4-fs (loop2): Block reservation details [ 143.193916][ T6635] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 143.312438][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.694648][ T6683] loop3: detected capacity change from 0 to 1024 [ 144.778951][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.116068][ T6683] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.308: inode #1846196256: comm syz.3.308: iget: illegal inode # [ 145.159212][ T6683] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.308: error while reading EA inode 1846196256 err=-117 [ 145.234684][ T6693] loop2: detected capacity change from 0 to 2048 [ 145.278814][ T6693] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 145.305096][ T6693] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 145.317620][ T6693] UDF-fs: Scanning with blocksize 512 failed [ 145.328134][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.375865][ T6693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.511038][ T6695] loop1: detected capacity change from 0 to 1024 [ 145.529807][ T6695] EXT4-fs: inline encryption not supported [ 145.559456][ T6695] EXT4-fs: Ignoring removed orlov option [ 145.583907][ T6695] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 145.640451][ T6695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800c019, mo2=0002] [ 145.675958][ T6695] System zones: 0-1, 3-12 [ 145.704813][ T6695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.796356][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.830717][ T5828] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.951541][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.023191][ T5828] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 146.040710][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.062263][ T5828] usb 4-1: config 0 descriptor?? [ 146.173174][ T787] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.188256][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.225520][ T787] usb 3-1: config 0 descriptor?? [ 146.240694][ T6707] ./file0: Can't open blockdev [ 146.253254][ T787] cp210x 3-1:0.0: cp210x converter detected [ 146.489459][ T5828] [drm:udl_init] *ERROR* Selecting channel failed [ 146.539829][ T5828] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 146.581799][ T5828] [drm] Initialized udl on minor 2 [ 146.605145][ T5828] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 146.653764][ T5828] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 146.669213][ T787] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 146.687228][ T5840] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 146.711123][ T5828] usb 4-1: USB disconnect, device number 10 [ 146.749637][ T5840] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 146.940251][ T787] usb 3-1: cp210x converter now attached to ttyUSB0 [ 147.169961][ T6726] loop0: detected capacity change from 0 to 8192 [ 147.180546][ T971] usb 3-1: USB disconnect, device number 10 [ 147.210356][ T971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.220926][ T6726] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.238408][ T971] cp210x 3-1:0.0: device disconnected [ 147.244189][ T6726] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 147.258682][ T6726] REISERFS (device loop0): using ordered data mode [ 147.265412][ T6726] reiserfs: using flush barriers [ 147.272570][ T6726] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.291753][ T6726] REISERFS (device loop0): checking transaction log (loop0) [ 147.310023][ T6726] REISERFS (device loop0): Using r5 hash to sort names [ 147.329168][ T6726] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 148.059009][ T6746] loop1: detected capacity change from 0 to 64 [ 148.096630][ T6746] hfs: unable to locate alternate MDB [ 148.109500][ T6746] hfs: continuing without an alternate MDB [ 148.611161][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 148.676688][ T6758] loop3: detected capacity change from 0 to 512 [ 148.711768][ T6758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.779139][ T6758] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.921001][ T5859] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 149.086904][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.130956][ T5859] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.147834][ T5859] usb 3-1: not running at top speed; connect to a high speed hub [ 149.197157][ T5859] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 149.206449][ T5859] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 149.260914][ T5859] usb 3-1: config 17 has no interface number 0 [ 149.292270][ T5859] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 208, setting to 64 [ 149.317325][ T5859] usb 3-1: config 17 interface 8 has no altsetting 0 [ 149.343680][ T5859] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 149.354526][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.370688][ T5859] usb 3-1: Product: syz [ 149.374953][ T5859] usb 3-1: Manufacturer: syz [ 149.393408][ T5859] usb 3-1: SerialNumber: syz [ 149.457075][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 149.635089][ T5859] usb 3-1: selecting invalid altsetting 0 [ 149.692854][ T5859] usb 3-1: USB disconnect, device number 11 [ 149.743708][ T6609] udevd[6609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.021044][ T5842] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 150.261599][ T5842] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 150.269947][ T5842] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 150.289889][ T5842] usb 1-1: config 0 has no interface number 0 [ 150.306593][ T5842] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 150.340772][ T5842] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 150.374657][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.393126][ T5842] usb 1-1: config 0 descriptor?? [ 150.399126][ T6781] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.047052][ T5842] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input14 [ 151.162052][ T6801] loop2: detected capacity change from 0 to 32768 [ 151.198453][ T6801] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 151.218067][ T6801] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 151.257057][ T4851] (kworker/u4:10,4851,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 151.527464][ T5842] usb 1-1: USB disconnect, device number 6 [ 151.533520][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 151.629458][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 152.248118][ T6815] loop2: detected capacity change from 0 to 2048 [ 152.311573][ T6815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.324083][ T6815] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.356499][ T6815] fs-verity: sha512 using implementation "sha512-avx2" [ 152.458373][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.529183][ T6805] loop3: detected capacity change from 0 to 32768 [ 152.707550][ T6811] loop1: detected capacity change from 0 to 32768 [ 152.886924][ T6811] read_mapping_page failed! [ 152.918915][ T6811] ERROR: (device loop1): txCommit: [ 152.918915][ T6811] [ 152.953585][ T28] audit: type=1800 audit(1769698893.408:8): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 153.002873][ T6828] loop2: detected capacity change from 0 to 2048 [ 153.078371][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.191030][ T6828] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.493408][ T6828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.367: bg 0: block 345: padding at end of block bitmap is not set [ 153.512907][ T6828] EXT4-fs (loop2): Remounting filesystem read-only [ 153.636831][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.287506][ T6839] loop3: detected capacity change from 0 to 32768 [ 154.361125][ T6839] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 154.387738][ T4851] (kworker/u4:10,4851,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 154.598869][ T5770] (syz-executor,5770,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 154.641204][ T5770] (syz-executor,5770,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 154.769039][ T6865] binder: 6864:6865 ioctl c018620b 200000000100 returned -14 [ 154.808128][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 155.488288][ T6882] loop1: detected capacity change from 0 to 128 [ 155.493844][ T6878] syzkaller1: entered promiscuous mode [ 155.508600][ T6882] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.511613][ T6878] syzkaller1: entered allmulticast mode [ 155.522710][ T6882] hpfs: filesystem error: improperly stopped [ 155.546698][ T6856] loop2: detected capacity change from 0 to 32768 [ 155.550772][ T6882] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 155.581772][ T6856] xfs: Unknown parameter 'smackfstransmute' [ 155.588429][ T6882] hpfs: You really don't want any checks? You are crazy... [ 155.615423][ T6882] hpfs: hpfs_map_sector(): read error [ 155.633298][ T6882] hpfs: code page support is disabled [ 155.647537][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 155.657896][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 155.668185][ T6882] hpfs: filesystem error: unable to find root dir [ 155.732758][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 156.183378][ T6895] loop3: detected capacity change from 0 to 64 [ 156.352140][ T6895] Trying to free block not in datazone [ 156.416964][ T6899] Trying to free block not in datazone [ 156.445461][ T6901] loop2: detected capacity change from 0 to 512 [ 156.542947][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.621621][ T6901] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.920749][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.997430][ T6915] loop3: detected capacity change from 0 to 128 [ 157.216971][ T6917] input: syz1 as /devices/virtual/input/input15 [ 157.859680][ T12] tipc: Subscription rejected, illegal request [ 158.271234][ T5842] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.354704][ T6921] loop0: detected capacity change from 0 to 40427 [ 158.372527][ T6940] loop3: detected capacity change from 0 to 16 [ 158.385938][ T6934] loop1: detected capacity change from 0 to 32768 [ 158.392951][ T6921] F2FS-fs (loop0): invalid crc value [ 158.412749][ T6940] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.429384][ T6921] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.462229][ T6934] JBD2: Ignoring recovery information on journal [ 158.480905][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 158.489563][ T6940] syz.3.412: attempt to access beyond end of device [ 158.489563][ T6940] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 158.498597][ T5842] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 158.549243][ T5842] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 158.573637][ T6940] syz.3.412: attempt to access beyond end of device [ 158.573637][ T6940] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 158.586286][ T5842] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 158.628853][ T6940] syz.3.412: attempt to access beyond end of device [ 158.628853][ T6940] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 158.643867][ T5842] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 158.667137][ T6934] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 158.678465][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.707532][ T5842] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 158.711134][ T6921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.767556][ T5842] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 158.789988][ T5842] usb 3-1: Product: syz [ 158.800890][ T5842] usb 3-1: Manufacturer: syz [ 158.813754][ T5842] usb 3-1: SerialNumber: syz [ 158.832473][ T5842] usb 3-1: config 0 descriptor?? [ 158.861633][ T5770] BUG: Bad page state in process syz-executor pfn:5d8b9 [ 158.869428][ T5770] page:ffffea0001762e40 refcount:0 mapcount:0 mapping:ffff88805e550d20 index:0x2 pfn:0x5d8b9 [ 158.879911][ T5770] aops:z_erofs_cache_aops ino:0 [ 158.885695][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 158.893904][ T5770] page_type: 0xffffffff() [ 158.898318][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805e550d20 [ 158.907432][ T5770] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 158.916190][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 158.923596][ T5770] page_owner tracks the page as allocated [ 158.929886][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6940, tgid 6939 (syz.3.412), ts 158488991183, free_ts 157567400820 [ 158.952732][ T5770] post_alloc_hook+0x1c1/0x200 [ 158.957696][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 158.963375][ T5770] __alloc_pages+0x1f0/0x460 [ 158.968042][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 158.973817][ T5770] z_erofs_pcluster_readmore+0x2cf/0x450 [ 158.979524][ T5770] z_erofs_read_folio+0x237/0x5c0 [ 158.984699][ T5770] filemap_read_folio+0x172/0x760 [ 158.990727][ T5770] do_read_cache_folio+0x468/0x7d0 [ 158.995911][ T5770] erofs_bread+0x16f/0x630 [ 159.000389][ T5770] erofs_namei+0x2ae/0xf50 [ 159.005096][ T5770] erofs_lookup+0x135/0x310 [ 159.009683][ T5770] lookup_one_qstr_excl+0x112/0x250 [ 159.015111][ T5770] filename_create+0x23e/0x480 [ 159.020379][ T5770] do_mkdirat+0xa9/0x450 [ 159.020933][ T28] audit: type=1800 audit(1769698899.448:9): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.409" name="file1" dev="loop1" ino=30722 res=0 errno=0 [ 159.024777][ T5770] __x64_sys_mkdir+0x6e/0x80 [ 159.045356][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.057054][ T5770] do_syscall_64+0x55/0xa0 [ 159.062000][ T5770] page last free stack trace: [ 159.066815][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 159.072600][ T5770] free_unref_page+0x32/0x2e0 [ 159.077358][ T5770] vfree+0x1a6/0x320 [ 159.081453][ T5770] snd_pcm_lib_free_pages+0x1e8/0x2a0 [ 159.086990][ T5770] snd_pcm_release_substream+0x2a2/0x460 [ 159.093555][ T5770] snd_pcm_oss_release+0x184/0x240 [ 159.098766][ T5770] __fput+0x234/0x970 [ 159.103838][ T5770] task_work_run+0x1d4/0x260 [ 159.108610][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 159.114380][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 159.120350][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 159.126114][ T5770] do_syscall_64+0x61/0xa0 [ 159.130917][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.136097][ T28] audit: type=1800 audit(1769698899.538:10): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.409" name="file1" dev="loop1" ino=30722 res=0 errno=0 [ 159.137077][ T5770] Modules linked in: [ 159.161858][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0 [ 159.169811][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.180265][ T5770] Call Trace: [ 159.183676][ T5770] [ 159.186682][ T5770] dump_stack_lvl+0x18c/0x250 [ 159.191426][ T5770] ? show_regs_print_info+0x20/0x20 [ 159.196727][ T5770] ? swiotlb_print_info+0x70/0x70 [ 159.201908][ T5770] bad_page+0x14b/0x170 [ 159.206117][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 159.211628][ T5770] free_unref_page+0x32/0x2e0 [ 159.216355][ T5770] ? __folio_put+0xef/0x210 [ 159.220910][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 159.227428][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 159.233020][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 159.238872][ T5770] ? io_schedule+0xd0/0xd0 [ 159.243447][ T5770] ? kobject_put+0x428/0x460 [ 159.248076][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 159.253670][ T5770] erofs_put_super+0x4e/0x150 [ 159.258415][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 159.263506][ T5770] generic_shutdown_super+0x134/0x2b0 [ 159.268920][ T5770] kill_block_super+0x44/0x90 [ 159.273638][ T5770] erofs_kill_sb+0x4c/0x140 [ 159.278186][ T5770] deactivate_locked_super+0x97/0x100 [ 159.283611][ T5770] cleanup_mnt+0x43b/0x4d0 [ 159.288101][ T5770] task_work_run+0x1d4/0x260 [ 159.292798][ T5770] ? task_work_cancel+0x220/0x220 [ 159.298098][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 159.303610][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 159.308949][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 159.314629][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 159.320316][ T5770] do_syscall_64+0x61/0xa0 [ 159.324789][ T5770] ? clear_bhb_loop+0x40/0x90 [ 159.329530][ T5770] ? clear_bhb_loop+0x40/0x90 [ 159.334245][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.340176][ T5770] RIP: 0033:0x7f3c5139c117 [ 159.344706][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 159.365146][ T5770] RSP: 002b:00007ffe8f464be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 159.373693][ T5770] RAX: 0000000000000000 RBX: 00007f3c5140471f RCX: 00007f3c5139c117 [ 159.381783][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8f464ca0 [ 159.389904][ T5770] RBP: 00007ffe8f464ca0 R08: 00007ffe8f465ca0 R09: 00000000ffffffff [ 159.398013][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8f465d30 [ 159.406630][ T5770] R13: 00007f3c5140471f R14: 0000000000026ba3 R15: 00007ffe8f465d70 [ 159.414923][ T5770] [ 159.419176][ T5770] Disabling lock debugging due to kernel taint [ 159.425566][ T5770] BUG: Bad page state in process syz-executor pfn:309e9 [ 159.432926][ T5770] page:ffffea0000c27a40 refcount:0 mapcount:0 mapping:ffff88805e550d20 index:0x3 pfn:0x309e9 [ 159.443501][ T5770] aops:z_erofs_cache_aops ino:0 [ 159.448403][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 159.457327][ T5770] page_type: 0xffffffff() [ 159.461991][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805e550d20 [ 159.470907][ T5770] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 159.479629][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 159.487053][ T5770] page_owner tracks the page as allocated [ 159.492833][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6940, tgid 6939 (syz.3.412), ts 158489010327, free_ts 157567383725 [ 159.516070][ T5770] post_alloc_hook+0x1c1/0x200 [ 159.521296][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 159.527067][ T5770] __alloc_pages+0x1f0/0x460 [ 159.531938][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 159.537583][ T5770] z_erofs_pcluster_readmore+0x2cf/0x450 [ 159.543403][ T5770] z_erofs_read_folio+0x237/0x5c0 [ 159.548470][ T5770] filemap_read_folio+0x172/0x760 [ 159.553604][ T5770] do_read_cache_folio+0x468/0x7d0 [ 159.558856][ T5770] erofs_bread+0x16f/0x630 [ 159.563367][ T5770] erofs_namei+0x2ae/0xf50 [ 159.567865][ T5770] erofs_lookup+0x135/0x310 [ 159.573017][ T5770] lookup_one_qstr_excl+0x112/0x250 [ 159.578265][ T5770] filename_create+0x23e/0x480 [ 159.583156][ T5770] do_mkdirat+0xa9/0x450 [ 159.587438][ T5770] __x64_sys_mkdir+0x6e/0x80 [ 159.592119][ T5770] do_syscall_64+0x55/0xa0 [ 159.596593][ T5770] page last free stack trace: [ 159.601391][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 159.607349][ T5770] free_unref_page+0x32/0x2e0 [ 159.613015][ T5770] vfree+0x1a6/0x320 [ 159.616969][ T5770] snd_pcm_lib_free_pages+0x1e8/0x2a0 [ 159.622586][ T5770] snd_pcm_release_substream+0x2a2/0x460 [ 159.628278][ T5770] snd_pcm_oss_release+0x184/0x240 [ 159.633526][ T5770] __fput+0x234/0x970 [ 159.637999][ T5770] task_work_run+0x1d4/0x260 [ 159.642698][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 159.648140][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 159.653878][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 159.659447][ T5770] do_syscall_64+0x61/0xa0 [ 159.664138][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.670098][ T5770] Modules linked in: [ 159.674108][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Tainted: G B syzkaller #0 [ 159.683479][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.693577][ T5770] Call Trace: [ 159.696901][ T5770] [ 159.699971][ T5770] dump_stack_lvl+0x18c/0x250 [ 159.704711][ T5770] ? show_regs_print_info+0x20/0x20 [ 159.709954][ T5770] ? swiotlb_print_info+0x70/0x70 [ 159.715036][ T5770] bad_page+0x14b/0x170 [ 159.719246][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 159.724761][ T5770] free_unref_page+0x32/0x2e0 [ 159.729492][ T5770] ? __folio_put+0xef/0x210 [ 159.734021][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 159.740469][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 159.746087][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 159.752007][ T5770] ? io_schedule+0xd0/0xd0 [ 159.756456][ T5770] ? kobject_put+0x428/0x460 [ 159.761164][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 159.766832][ T5770] erofs_put_super+0x4e/0x150 [ 159.771545][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 159.776432][ T5770] generic_shutdown_super+0x134/0x2b0 [ 159.782175][ T5770] kill_block_super+0x44/0x90 [ 159.786876][ T5770] erofs_kill_sb+0x4c/0x140 [ 159.791497][ T5770] deactivate_locked_super+0x97/0x100 [ 159.796907][ T5770] cleanup_mnt+0x43b/0x4d0 [ 159.801356][ T5770] task_work_run+0x1d4/0x260 [ 159.806024][ T5770] ? task_work_cancel+0x220/0x220 [ 159.811095][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 159.816648][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 159.821982][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 159.827596][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 159.833193][ T5770] do_syscall_64+0x61/0xa0 [ 159.837651][ T5770] ? clear_bhb_loop+0x40/0x90 [ 159.842360][ T5770] ? clear_bhb_loop+0x40/0x90 [ 159.847069][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.852992][ T5770] RIP: 0033:0x7f3c5139c117 [ 159.857435][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 159.878021][ T5770] RSP: 002b:00007ffe8f464be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 159.886542][ T5770] RAX: 0000000000000000 RBX: 00007f3c5140471f RCX: 00007f3c5139c117 [ 159.894539][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8f464ca0 [ 159.902726][ T5770] RBP: 00007ffe8f464ca0 R08: 00007ffe8f465ca0 R09: 00000000ffffffff [ 159.910725][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8f465d30 [ 159.918900][ T5770] R13: 00007f3c5140471f R14: 0000000000026ba3 R15: 00007ffe8f465d70 [ 159.926915][ T5770] [ 159.930048][ T5770] BUG: Bad page state in process syz-executor pfn:2d070 [ 159.938235][ T5770] page:ffffea0000b41c00 refcount:0 mapcount:0 mapping:ffff88805e550d20 index:0x4 pfn:0x2d070 [ 159.948659][ T5770] aops:z_erofs_cache_aops ino:0 [ 159.953585][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 159.961374][ T5770] page_type: 0xffffffff() [ 159.965751][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805e550d20 [ 159.974445][ T5770] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 159.983173][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 159.990653][ T5770] page_owner tracks the page as allocated [ 159.996680][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6940, tgid 6939 (syz.3.412), ts 158489029416, free_ts 157567366064 [ 160.019621][ T5770] post_alloc_hook+0x1c1/0x200 [ 160.024720][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 160.030412][ T5770] __alloc_pages+0x1f0/0x460 [ 160.035113][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 160.040548][ T5770] z_erofs_pcluster_readmore+0x2cf/0x450 [ 160.046292][ T5770] z_erofs_read_folio+0x237/0x5c0 [ 160.051949][ T5770] filemap_read_folio+0x172/0x760 [ 160.057018][ T5770] do_read_cache_folio+0x468/0x7d0 [ 160.062210][ T5770] erofs_bread+0x16f/0x630 [ 160.066758][ T5770] erofs_namei+0x2ae/0xf50 [ 160.071252][ T5770] erofs_lookup+0x135/0x310 [ 160.075793][ T5770] lookup_one_qstr_excl+0x112/0x250 [ 160.081087][ T5770] filename_create+0x23e/0x480 [ 160.085901][ T5770] do_mkdirat+0xa9/0x450 [ 160.090182][ T5770] __x64_sys_mkdir+0x6e/0x80 [ 160.095349][ T5770] do_syscall_64+0x55/0xa0 [ 160.099825][ T5770] page last free stack trace: [ 160.104591][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 160.110123][ T5770] free_unref_page+0x32/0x2e0 [ 160.115535][ T5770] vfree+0x1a6/0x320 [ 160.119458][ T5770] snd_pcm_lib_free_pages+0x1e8/0x2a0 [ 160.125049][ T5770] snd_pcm_release_substream+0x2a2/0x460 [ 160.130779][ T5770] snd_pcm_oss_release+0x184/0x240 [ 160.135954][ T5770] __fput+0x234/0x970 [ 160.140043][ T5770] task_work_run+0x1d4/0x260 [ 160.144713][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 160.150055][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 160.155701][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 160.161233][ T5770] do_syscall_64+0x61/0xa0 [ 160.165797][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.171748][ T5770] Modules linked in: [ 160.175686][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Tainted: G B syzkaller #0 [ 160.185043][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.195874][ T5770] Call Trace: [ 160.199294][ T5770] [ 160.202698][ T5770] dump_stack_lvl+0x18c/0x250 [ 160.207424][ T5770] ? show_regs_print_info+0x20/0x20 [ 160.213352][ T5770] ? swiotlb_print_info+0x70/0x70 [ 160.218665][ T5770] bad_page+0x14b/0x170 [ 160.223415][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 160.229275][ T5770] free_unref_page+0x32/0x2e0 [ 160.234197][ T5770] ? __folio_put+0xef/0x210 [ 160.238749][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 160.245239][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 160.250937][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 160.256921][ T5770] ? io_schedule+0xd0/0xd0 [ 160.261694][ T5770] ? kobject_put+0x428/0x460 [ 160.266482][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 160.272267][ T5770] erofs_put_super+0x4e/0x150 [ 160.276990][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 160.282252][ T5770] generic_shutdown_super+0x134/0x2b0 [ 160.287693][ T5770] kill_block_super+0x44/0x90 [ 160.292516][ T5770] erofs_kill_sb+0x4c/0x140 [ 160.297073][ T5770] deactivate_locked_super+0x97/0x100 [ 160.302485][ T5770] cleanup_mnt+0x43b/0x4d0 [ 160.306948][ T5770] task_work_run+0x1d4/0x260 [ 160.311588][ T5770] ? task_work_cancel+0x220/0x220 [ 160.316705][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 160.322343][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 160.327711][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 160.333473][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 160.338955][ T5770] do_syscall_64+0x61/0xa0 [ 160.343531][ T5770] ? clear_bhb_loop+0x40/0x90 [ 160.348259][ T5770] ? clear_bhb_loop+0x40/0x90 [ 160.352989][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.359113][ T5770] RIP: 0033:0x7f3c5139c117 [ 160.363573][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 160.383474][ T5770] RSP: 002b:00007ffe8f464be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 160.392012][ T5770] RAX: 0000000000000000 RBX: 00007f3c5140471f RCX: 00007f3c5139c117 [ 160.400289][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8f464ca0 [ 160.408739][ T5770] RBP: 00007ffe8f464ca0 R08: 00007ffe8f465ca0 R09: 00000000ffffffff [ 160.416839][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8f465d30 [ 160.424839][ T5770] R13: 00007f3c5140471f R14: 0000000000026ba3 R15: 00007ffe8f465d70 [ 160.433201][ T5770] [ 160.444027][ T5842] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 160.455627][ T5842] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 160.558598][ T5767] syz-executor: attempt to access beyond end of device [ 160.558598][ T5767] loop0: rw=2051, sector=77824, nr_sectors = 4096 limit=40427 [ 160.574891][ T5767] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5 [ 160.703858][ T5828] usb 3-1: USB disconnect, device number 12 [ 160.709883][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 160.733494][ T5828] ldusb 3-1:0.0: LD USB Device #0 now disconnected