last executing test programs: 3.387088334s ago: executing program 0 (id=13786): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.019460813s ago: executing program 1 (id=13789): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40002141) 3.014450083s ago: executing program 0 (id=13790): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.855347287s ago: executing program 0 (id=13791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2.729154189s ago: executing program 1 (id=13792): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x7400000, 0x7, 0x7ffffffd, 0x10, 0x80, "7a4612e6703b3e3327cdbc4b97f089c31faba0", 0xffff, 0x7}) writev(r0, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3939", 0xfe8e}], 0x1) 2.68804636s ago: executing program 0 (id=13793): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setreuid(0xee01, 0xee00) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000120001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2.497872844s ago: executing program 0 (id=13794): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2010000, &(0x7f0000006a80)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x100000000, 0x20000007fff) 2.073137084s ago: executing program 1 (id=13798): r0 = io_uring_setup(0x20, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000008}) 1.879620068s ago: executing program 1 (id=13801): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000498000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe3000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x5e}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd0}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="7bd814ebb575", @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "416c10", 0x20, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x31}, {[], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x3, 0x0, 0x3, {[@generic={0x5, 0xb, "882b6a1ceab2c5d3ad"}]}}}}}}}}, 0x0) 1.711616702s ago: executing program 1 (id=13803): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x11, 0x6246, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x29) 1.612447134s ago: executing program 2 (id=13804): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 1.402069919s ago: executing program 2 (id=13806): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1.280124542s ago: executing program 3 (id=13807): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 1.142326474s ago: executing program 3 (id=13808): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x20, @local, 0x10001}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 963.692299ms ago: executing program 3 (id=13809): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 860.059091ms ago: executing program 2 (id=13810): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x12}, [@typed={0x0, 0xa1, 0x0, 0x0, @str='batadv_slave_1\x00'}]}, 0x18}}, 0x0) 743.635754ms ago: executing program 3 (id=13811): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 591.956717ms ago: executing program 3 (id=13812): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="d16f4984406893bed0ce1cd638cedf6d5707c5b282b93495a41994d17ea0eba89e245c106539ed58a3839a1822b5946f76", 0x31}], 0x1}, 0x40000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c000800"], 0x178}}, 0x0) 509.652129ms ago: executing program 0 (id=13813): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) 486.247319ms ago: executing program 2 (id=13814): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x8, 0x1000004, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) 230.090555ms ago: executing program 2 (id=13815): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000005c0)=0x10003) 179.115236ms ago: executing program 3 (id=13816): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57, 0x3}) 47.931429ms ago: executing program 1 (id=13817): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000020c0)='./file1\x00', 0x14042, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5ee3, &(0x7f000000e480)="$eJzs3U9vHGcdB/Df/vH6T2kaVagKEYc0hdJSmv8JlH9NOXCAA0goZxK5bhVwoUoMopVFXPmAuAAvAS69cOgb6WtAvAAi2Zx6oAwa+3mS8XqddUi8s+vn85Gcmd8+O95n8vV4Zj0z+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/64c8udiLi5m/TAycjvhC9iG7EYl2fiXrmen5+PyJOxU5zvBARvfmIevmdf56LuBIRn56I2NpeX64fvnTIfly9sHbn8x//4B9/+PPmqV+8/fOPh9t/+sXLn/zxXsTJn7zxyef3ns66AwAAQCmqqqo66W3+6fT+vtt2pwCAicj7/yrJj6vVarX6qdZ/6k5Xf9SF1k3VaPeaRURsNJepjxmcjgeAGbMRn7XdBVok/6L1I+KZtjsBTLVO2x3gSGxtry93Ur6d5v7gzG57/jvlnvw3Og/u7zhoOs7wNSaT+vnajF48f0B/FifUh2mS8+8O539zt32QnnfU+U/KQfkPdm99Kk7Ovzec/5A9+f8lImY2/+7I/EuV8+8/Tv4bvRne/uUPAAAAAMDxl//+f7Ll87/zT74qh/Ko879nJtQHAAAAAAAAAHjannT8vweM/wcAAABTq36vXvvr+w8//eygz2KrH7/RiXi2fv6JyfQPmELpZpmltvsBAAAAAAAAAAAAACXp717De6MTMRcRzy4tVVVVfzUN14/rSZefdaWvP5Ss7V/yAACw69MTQ/fydyIWIuJG+qy/uaWlpapaWFyqlqrF+Xw8O5hfqBYb72vztH5sfnCIA+L+oKq/2UJjuaZx75fHtQ9/v/q1BlXvEB2bjBYDB4CI2N0bbdkjHTNV9Vy0fZTDbLD9Hz+2fw6j7Z9TAAAA4OhVVVV10sd5n07n/LttdwoAmISFvP8fPi+gVqvVarX6+NVN1Wj3mkVEbDSXqY8ZDMcPADNmIz5ruwu0SP5F60fEqbY7AUy1Ttsd4Ehsba8vd1K+neb+II3vnq8F2ZP/Rmdnubz8qOk4w9eYTOrnazN68fwB/XlhQn2YJjn/7nD+N3fbB+l5R53/pByUf72eJ1voT9ty/r3h/Iccn/y7I/MvVc6//1j59+QPAAAAAABTLP/9/6Tzv3mVAQAAAAAAAGDmbG2vL+f7XvP5/y+PeF6nOef+z2Mj5985dP7u/z1Ocv7d4fyHLsjpNebvv/Uw/39vry9/vPavL+Xp1Oc/1xvUrz3X6fb66Zqfau6duB2rsRIX9j2/v6f94r72uT3tl8a0X97XPqjbF3P7uViOX8dqvP2gfX7MhVELY9qrMe05/57tv0g5/37jq85/KbV3hqa1+x919233zemo17n+9/+8vH/rmrzN6D1Yt6Z6/c620J+d/5NnBvGbuyt3zv3u1tranYuRJnsevRRp8pTl/OfSV87/lZd22/Pv/eb2ev+jwWPnPy02o39g/i815uv1fXXCfWtDzn+QvnL+eQ80evuf5fwP3v5fa6E/AAAAAAAAAAAAAAAA8ChVVe3cIno9Iq6l+3/aujcTAJisvP+vkvy4Wq1Wq9Xq41c3VaO92SxiYe8y9THD70d9MwBgmv03Iv7ZdidojfwLlj/vr55+pe3OABN194MPf3lrdXXlzt22ewIAAAAAAAAA/L/y+J9nGuM/71wHNDRu9J7xX9+KMzM7/md30NsZ6zyt0Ivx6PG/z8ajx//uj3m9uTHtgzHt82PaF8a0j7zRoyHn/2LKOOd/Oq1YSeO/vtJCf9qW8z+bxnrO+X9t6HnN/Ku/zXL+3T35n1977/3zdz/48PXb7916d+XdlV9dvHDtyuWrVy5fvXr+ndurKxd2/22xx0cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/l1Mt/7Lk/PPxnvzLkvPP733kX5ac/6upln9Zcv5fT7X8y5Lzfy3V8i9Lzv8bqZZ/WXL+r6da/mXJ+Z9LtfzLkvM/n2r5lyXnn89wyb8sOf98ZYP8y5Lzv5Rq+Zcl53851fIvS87/SqrlX5ac/9VUy78sOf9rqZZ/WXL+30y1/MuS8/9WquVflpz/G6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dTLf+y5Py/l2r5lyXn//1Uy78sOf83Uy3/sjz8/H8zZsyYyTNt/2YCAAAAAAAAAAAAAIZN4nLittcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3t3FyFXeZwA/+2WvDQluIHzFAdsYMLCwu/4ChxhMElJK2pSSkDYtqXHstXHir3rXBBAqS6EtUZCK1F7Qi6ZJlEaR2goURWoq0Qipkdq7cpWIm6iVuLBUqByUVEoV2OrMed93Z2ZnZ9Yfa5855/dD+O+dOTPzzpkzs/us9cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gz9x6f+fCDLsvz/xh9rsuzi/O+rsl35l7PbL/QKAQAAgLP1buPPf7gknbBrCRdq2ubfrvmP78/Nzc1lX3zn5Ht/OTeXzliXZUMrs6xxXvTvv/zFXPM2wbPZ6MBg09eDPW5+qMf5wz3OH+lx/ooe56/scf5oj/MX7IAFVhW/j2lc2cbGX9cUuzS7LBtpnLexw6WeHVg5OBh/l9Mw0LjM3Mj+7GB2KJvKJhZcZqDxX5a9uj6/rfuyeFuDTbe1NsuyUz97am9cw0DYxxuzlhtraH7s3r4nW/fOz57a+52Zt67qNHvuhgUrzbJNG/J1Ppdl87+uygaylWmfxHUONq1zbYd1DrWsc6Bxufzv7es8tcR1xvs9Gtb5epd1rg2nPX5dlmWz2aLbtHs2G8xWt91q2t+jxRGRX0f+UH4gGz6t42T9Eo6T/DJvXtd6nLQfk3H/rw/7ZHiRNTQ/HG8/s2LBfj/T4yS/12U4VvPrfiC/0dHR5l+tthyr+TZPXb/4MdDxsetwDKRjuekY2NDrGBhcMdQ4Bgbn17yh5RiYXHCZwWygcVsnr+9+DIzPHD42Pv3Ek7cePLznwNSBqSOTE9u3btm2dcu2beP7Dx6amij+PL1d2kdWZ4PpGNwQXmviMXhj27bNh+TcN8/d82C0JM+D/L5/9oZ8QRcPZosc4/k2z206++dB+r7f9DwYbnoedHxN7fA8GF7C8yDf5tSmpX3PHG76v9Maluu1cE3TMXAhvx/mt/nwTYu/Fq4N63r+5tP9fji04BiId2sgPPfyU9LPe6N3hP2y8Li4Oj/johXZiemp47c9vmdm5vhkFsZ5cWnTY9V+vKxuuk/ZguNl8LSPl11//6sbru5w+pqwr0Zv6f5Y5dtsHev+WDVe3Vv354qs2J8tp27OwjjHzvf+7PTdLN+fKUt02Z/5Ns/devY/C6Zc0vT6N9Lr9W9oZLh4/RtKe2Ok5fVv4UMz1FhZlp26dWmvfyPh//P9+ndZSV7/8n318G3dj4F8m+fHT/cYGO76+nddmANhPTeFxDDalPvfa5w/WxymTY9lz+NmeHgkHDfD8RZbj5stCy6TX1t+25smzuy42XRd62PV8nNLBY+bfF/91UT34ybf5rXJs3/tWBX/2vTasaLXMTAytCJf70g6CIrXu7lV8Ri4LdubHc0OZfvSZfJHOb+tsc1LOwZWhP/P92vHlSU5BvJ99dLm7sdAvs2Ptpzbn502hVPSNk0/O7X/fmGxzH/18Pz1te+2c53583V+4sefTqd1yhD5Nm9tPd2c0X0/3RJOuajDfmp//ix2TO/Lzs9+ujKs89C27r+byre5bPsSj6ddWZa9MflG4/dd4fe73zvx4++3/N630++U35h84/7xB39yOusHAODMvdf4c3ZF8bNm079YL+Xf/wEAAIC+EHP/YJiJ/A8AAACVEXP/UJiJ/A8AAACVEXP/cJhJTfL/o3fsePndp7P0boBzQTw/7oYH7iq2ix3v2fD1url5+ekf+/bIy199emm3PZhl2a/u/1DH7R+9K66rcCyu8yOtpy9w5bVLuv1HHprfrvn9E07tKK4/3p+lHgaxq/zq+ObG9a57YrIxX7s/a8wHZ59/trj+4uu4/cktxfZ/E960ZNf+gZbLbwrr2RjmuvCeMg/smt8P+YyXe3ntNf966efmby9ebmDD+xt386U/Lq43vkfUi5cW28f7vdj6/+Vr33053/7x6zuv/+nBzus/Ga73zTB/ubPYvnmff7Vp/X8a1h9vL17utm/9sOP6X7mi2P6VcFx8I8z29d/zFx9+t9PjFW9n153F5eLtT/zv1sbl4vXF629f/+jTky37o/36X3unuJ6dj/18qHn7eHq8neiRO1uP74Hw+Lb0yLMs++6fZS37Oftocbl/blt/vL5jd3Ze/y1t6zw2cG3j8vP3Z03L/fr6323ueH/jenb945qW+/PivWH/vTP+o/x6Tz4Yjsdw/v+9Xlxf+3uZvnJv6+tN3P4ba4rnbby+8bb1v9i2/tlr833Xe/33vVOs/5W7V7asf9cnw/F0XzF7rf/A317Scvlvfqd4PI5/ZezI0ekTB/c17dXm5/HK0VWrL7r4fe+/JLyWtn+9++jMo1PH102sm8iydX34loHLvf5vhfk/xZg997dQ+MnPi+PuhU8V37du/EXx9Yvh9EfC4xm/P379r0dajtf2x3327mKe7fpvDutYqiu+9l/XLmnDk1949cQ//clb7T8XxPtz7IOjjfv30vrLG+cNvFac3/561ct/frD1ef3T4YnG/EHYr3PhnZk3XF7cXvv1x/cmeeEzxfM3/iQXL5+1vZ/ImqHW+3G26/9p+Dnmh1e2vv7F4+MHT7e9m/OabCBfwmx4fchmi/PjVnF/v3Dq8o63F9+HJ5u96nSWuajpJ6bHDx08cuLx8Zmp6Znx6See3H346IkjM7sb7126+0u9Lj///F7deH7vm9q+NWs8248WY5ld6PUfe2jvvtsnbtg3tX/Pif0zDx2bOn5g7/T03ql90zfs2b9/6iu9Ln9w387JzTu23L557MDBfTvv2LFjy46xg0eO5ssoFtXD9okvjx05vrtxkemdW3dMbtu2dWLs8NF9Uztvn5gYO9Hr8o3vTWP5pR8bOz51aM/MwcNTY9MHn5zaOblj+/bNPd/98fCx/dPrxo+fODJ+Ynrq+HhxX9bNNE7Ov/f1ujz1MH00vN61GQg/nX/+lu3p/XFz335m0asqNmn98TR7O7wXVPz+1uvrmPtHwkxqkv8BAACgDmLuD2/8P3+G/A8AAACVEXP/yjAT+R8AAAAqI+b+IvmPpo9/r0v+P1f9/2f0/xv0//X/M/3/RP9f/z/T/9f/70H/X/+/n9ev/6//T29l6/+H3J+tyjL//g8AAAAVFXP/6jAT+R8AAAAqI+b+i8JM5H8AAACojJj7Lw4zqUn+9/n/+v/6/936/3Fb/f9M/78M/f+N/63/v4D+v/5/pv9/xi50f77f11/C/v8q/X/Kpmz9/5j73xdmUpP8DwAAAHUQc//7w0zkfwAAAKiMmPsvCTOR/wEAAKAyYu5fE2ZSk/yv/6//r//v8//1//um/+/z/zvQ/9f/z/T/z9iF7s/3+/pL2P/3+f+UTtn6/zH3/1qYSU3yPwAAANRBzP0fCDOR/wEAAKAyYu6/NMxE/gcAAIDKiLn/sjCTmuT/evb/38yyTP8/0//X/29bp/6//v9y0P/X/+9G/1//v5/Xr/+v/09vZev/x9z/wTCTmuR/AAAAqIOY+y8PM5H/AQAAoDJi7r8izET+BwAAgMqIuf/KMJOa5P969v99/r/+f0H/v3Wd+v/6/8tB/1//vxv9f/3/fl6//r/+P72Vrf8fc/9VYSY1yf8AAABQBzH3Xx1mIv8DAABAZcTc/6EwE/kfAAAAKiPm/rVhJjXJ//r/+v/6//r/+v/6/8upv/r/g4ueo/9f0P9vde76/7PzC9D/75v16//r/9Nb2fr/Mfd/OMykJvkfAAAA6iDm/mvCTOR/AAAAqIyY+68NM5H/AQAAoDJi7l8XZlKT/K//r/+v/6//r/+v/7+c+qv/vzj9/4L+fyuf/6//r/+v/093Zev/x9y/PsykJvkfAAAA6iDm/g1hJvI/AAAAVEbM/deFmcj/AAAAUBkx928MM6lJ/tf/1//X/9f/1//X/19O1ej/D+j/B/r/rfT/9f/1//X/6a5s/f+Y+68PM6lJ/gcAAIA6iLn/hjAT+R8AAAAqI+b+G8NM5H8AAACojJj7N4WZ1CT/6//r/+v/93H/f0j/P9P/L71q9P99/n88Wf+/lf6//r/+v/4/3ZWt/x9z/01hJjXJ/wAAAFAHMfffHGYi/wMAAEBlxNx/S5iJ/A8AAACVEXP/WJhJTfK//r/+v/5/H/f/ff5/y/r1/8tJ/1//vxv9f/3/fl6//r/+P72Vrf8fc/+tYSY1yf8AAABQBzH33xZmIv8DAABAZcTcPx5mIv8DAABAZcTcPxFmUpP8r/+v/6//r/+v/6//v5z0//X/u9H/1//v5/Xr/+v/01vZ+v8x90+GmdQk/wMAAEAdxNy/OcxE/gcAAIDKiLl/S5iJ/A8AAACVEXP/1jCTmuR//f+K9P8H9f/1//X/9f/LSf9f/78b/X/9/35ev/6//j+tBjucVrb+f8z928JMapL/AQAAoA5i7t8eZiL/AwAAQGXE3H97mIn8DwAAAJURc/8dYSY1yf/6/xXp//v8f/1//X/9/5LS/9f/70b/X/+/n9ev/6//T29l6//H3L8jzKQm+R8AAADqIOb+j4SZyP8AAABQGTH33xlmIv8DAABAX+n0OYRRzP0fDTOpSf7X/696/39upf6//r/+f/f16/8vL/1//f9u9P/1//t5/fr/+v/0Vrb+f8z9O8NMapL/AQAAoA5i7r8rzET+BwAAgMqIuf/uMBP5HwAAACoj5v5dYSY1yf/6/1Xv//v8f/1//f9e69f/X176//r/3ej/92f/P/zYov9fov5/fgzp/1NGZev/x9x/T5hJTfI/AAAA1EHM/R8LM5H/AQAAoDJi7v94mIn8DwAAAJURc/8nwkxqkv/1//X/9f/1//X/9f+Xk/7/svX/Gy+F+v8F/f8zc6H78/2+/jL1/33+P2VVtv5/zP33hpnUJP8DAABAHcTc/8kwE/kfAAAAKiPm/l8PM5H/AQAAoDJi7r8vzKQm+V//X/9f/1//X/9f/3856f/7/P9u9P/1//t5/fr/+v/0Vrb+f8z9vxFmUpP8DwAAAHUQc//9YSbyPwAAAFRGzP2fCjOR/wEAAKDPrFj0nJj7fzPMpCb5X////PT/B9P16//r/+v/6//r/59L+v/6/5n+/xnr0Z9/r+3hX0D/X/9f/59eytb/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfc/EGZSk/x/rvv/7Zfvpk79f5//r/+f6f/r/zftVf3/c0f/X/8/0/8/Yxe6P9/v69f/1/+nt7L1/2Pu/50wk5rkfwAAAKiDmPsfDDOR/wEAAKAyYu7/TJiJ/A8AAACVEXP/Z8NMapL/ff6//r/+v/6//r/+/3LS/9f/70b/X/+/n9ev/6//T29l6//H3P9QmElN8j8AAADUQcz9nwszkf8BAACgMmLu/90wE/kfAAAAKiPm/t8LM6lJ/tf/1//X/9f/1//X/19O+v8L+//5a5j+f0H/X/+/n9ev/6//T29l6//H3P/5MJOa5H8AAACog5j7fz/MRP4HAACAyoi5/w/CTOR/AAAAqIyY+x8OM6lJ/tf/1//X/9f/1//X/19O+v8+/78b/X/9/35ev/6//j+9la3/H3P/F8JMapL/AQAAoA5i7v/DMBP5HwAAACoj5v7dYSbyPwAAAFRGzP2PhJnUJP/r/+v/6//r/+v/6/8vJ/1//f9u9P/1//t5/fr/+v/0Vrb+f8z9e8JMdrXeDAAAANC/Yu7/YphJTf79HwAAAOog5v69YSbyPwAAAFRGzP37wkxqkv/1//X/9f/1//X/9f+Xk/6//n83+v/6//28fv1//X96K1v/P+b+qTCTmuR/AAAAqIOY+/eHmcj/AAAAUBkx9x8IM5H/AQAAoDJi7n80zKQm+V//X/9f/7+2/f/Xv9e2Tv1//f/loP+v/9+N/r/+fz+vX/9f/5/eytb/j7n/YJhJTfI/AAAA1EHM/V8KM5H/AQAAoDJi7v9ymIn8DwAAAJURc/+hMJOa5H/9f/1//f/a9v99/n+g/7+89P/1/7vR/9f/7+f16//r/9Nb2fr/MfcfDjOpSf4HAACAOoi5/0iYifwPAAAAlRFz/9EwE/kfAAAAKiPm/mNhJjXJ//r/p9f/H1ikG6j/33n9+v/6//r/+v/6//r/3ej/6//38/r1//X/6a1s/f+Y+/8ozKQm+R8AAADqIOb+42Em8j8AAABURsz902Em8j8AAABURsz9M2EmNcn/+v8+/1//X/9f/1//fznp/+v/d6P/r//fz+vX/9f/p7ey9f9j7j8RZlKT/A8AAAB1EHP/Y2Em8j8A/8/efebqdVVxHH6TYBEJMQcYAiPIEBgAEhISE+ATHRJ66BB6b6G30MH03nvvvQdCD0UCEa+1EI7vOde+Prn77PU8X5ZyjeVtgUB/oZ8OAADTyN1//7jF/gcAAIBp5O5/QNzSZP/r//X/+n/9v/5f/78l/b/+f4n+X/+/5/fr//X/rBut/8/d/8C4pcn+BwAAgA5y9z8obrH/AQAAYBq5+x8ct9j/AAAAMI3c/Q+JW5rsf/2//l//r//X/+v/t6T/1/8v0f/r//f8fv2//p91o/X/ufsfGrc02f8AAADQQe7+h8Ut9j8AAABMI3f/w+MW+x8AAACmkbv/2rilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/7q4pcn+BwAAgA5y9z8ibrH/AQAAYBq5+x8Zt9j/AAAAMI3c/Y+KW5rsf/2//l//r//X/+v/t6T/1/8v0f/r//f8fv2//p91o/X/ufsfHbc02f8AAADQQe7+x8Qt9j8AAABMI3f/Y+MW+x8AAACmkbv/cXFLk/2v/9f/6//1/+36//P+O0L/vy39v/5/if5f/7/n9+v/9f+s27z/v+f1t93j9v+5+6+PW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6///1///+wr9v/6/Rf9/3p+n/9+W/l//v0T/r//f8/v1//p/1m3e/6/0/uf/c+7+J8UtTfY/AAAAdJC7/8lxi/0PAAAA08jd/5S4xf4HAACAaeTuf2rc0mT/6//1/77/r//X/+v/t6T/1/8v0f/r//f8/qX+/5pjvF//Twej9f+5+58WtzTZ/wAAANBB7v6nxy32PwAAAEwjd/8NcYv9DwAAANPI3f+MuKXJ/tf/6//1//r//+//r2zZ///3Z/r/bej/9f9L9P/6/7Hff8Wdln6/7//r/1k3Wv+fu/+ZcUuT/Q8AAAAd5O5/Vtxi/wMAAMA0cvc/O26x/wEAAGAaufufE7c02f/6f/2//l//f6Lv/181R//v+//b0f/r/5fo//X/e36//l//z7rR+v/c/c+NW5rsfwAAAOggd//z4hb7HwAAAKaRu//5cYv9DwAAANPI3f+CuKXJ/tf/6//1//r/E/X/k3z/X/+/Hf2//n/Jcfv/g/6//i76/3Her//X/7NutP4/d/8L45Ym+x8AAAA6yN3/orjF/gcAAIBp5O5/cdxi/wMAAMA0cve/JG5psv/1//p//b/+X/+v/9+S/l//v8T3//X/e36//l//z7rR+v/c/S+NW5rsfwAAAOggd//L4hb7HwAAAKaRu//lcYv9DwAAANPI3f+KuKXJ/tf/6//1//p//b/+f0v6f/3/Ev3/hfv/q4/48/T/Y71f/6//Z91o/X/u/hvjlib7HwAAADrI3f/KuMX+BwAAgGnk7n9V3GL/AwAAwDRy9786bmmy/4/q/2+5y7lf1/8fj/7/wu/X/+v/9f/6f/2//n+J/t/3//f8fv2//p91o/X/uftfE7c02f8AAADQQe7+18Yt9j8AAABMI3f/6+IW+x8AAACmkbv/9XFLk/1/+b//fzf9v/5f/x9X/6//1//r//X/y/T/+v89v1//r/9n3Wj9f+7+N8QtTfY/AAAAdJC7/41xi/0PAAAA08jd/6a4xf4HAACAaeTuf3Pc0mT/X/7+3/f/9f8X2f9fqf9P+v/491X/r/+/CPp//f9B/3/JTruf3/v79f/6f9aN1v/n7r8pbmmy/wEAAKCD3P1viVvsfwAAAJhG7v63xi32PwAAAEwjd//b4pYm+//2/f81B/2//t/3//X/5+j/9f8np//X/y/R/+v/9/x+/b/+n3Wj9f+5+98etzTZ/wAAANBB7v53xC32PwAAAEwjd/874xb7HwAAAKaRu/9dcUuT/e/7//p//f/w/f9N5//nTf+v/98T/b/+f4n+X/+/5/eP0//HD67V/zOe0fr/3P3vjlua7H8AAADoIHf/e+IW+x8AAACmkbv/bNxi/wMAAMA0zt569/vdu/6p3/7X/++9/7/PzfEC/f+8/b/v/8fV/+v/L0T/r/8/6P8v2Wn383t//zj9v+//M67R+v/33va7rj68L25psv8BAACgg9z9749b7H8AAACYRu7+D8Qt9j8AAABMI3f/B+OWJvtf/7/3/t/3//X/+n/9/9j0//r/Jfp//f+e36//1/+zbrT+P3f/h+KWJvsfAAAAOsjd/+G4xf4HAACAaeTu/0jcYv8DAADANHL3fzRuabL/9f/6f/2//v/E/f91+v+D/v9I+n/9/xL9v/5/z+/X/+v/WTda/5+7/2NxS5P9DwAAAB3k7v943GL/AwAAwDRy938ibrH/AQAAYBq5+z8ZN9zjrqf3pMvrzBE/j95c/6//1//r/33/X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+puMX//w8AAADTyN3/6bjF/gcAAIBp5O7/TNxi/wMAAMA0cvd/Nm5psv/1//p//b/+X/+v/9+S/l//v0T/r//f8/v1//p/1o3W/+fu/1zc0mT/AwAAQAe5+z8ft9j/AAAAMI3c/V+IW+x/AAAAmEbu/i/GLU32v/5f/6//1/+fVv9/r4P+X/9/cvp//f9B/3/JTruf3/v79f/6f9aN1v/n7v9S3NJk/wMAAEAHufu/HLfY/wAAADCN3P1fiVvsfwAAAJhG7v6vxi1N9r/+X/+v/9f/+/6//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/2txS5P9DwAAAB3k7v963GL/AwAAwDRy938jbrH/AQAAYBq5+78ZtzTZ/zP3/0v/Mv3/Ofp//f9B/6//35j+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/VtzSZP8DAABAB7n7vx232P8AAAAwjdz934lb7H8AAACYRu7+78YtTfb/zP3/Ev3/Ofp//f9B/6//35j+X/+/RP+v/9/z+/X/+n/WnVL/f+ZwRP+fu/97cUuT/Q8AAAAd5O7/ftxi/wMAAMA0cvf/IG6x/wEAAGAauft/GLfMs//ve3bhF/X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjfb9/9z9P4pb5tn/AAAA0F7u/h/HLfY/AAAATCN3/0/iFvsfAAAAppG7/6dxS5P9r//X/+v/W/X/Vx30//r/O5j+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/WdzSZP8DAABAB7n7fx632P8AAAAwjdz9v4hb7H8AAACYRu7+X8YtTfa//l//r/9v1f/7/r/+/w6n/9f/L9H/6//3/H79v/6fdaP1/7n7fxW3NNn/AAAA0EHu/l/HLfY/AAAATCN3/2/iFvsfAAAAppG7/7dxS5P9r//X/+v/9f/6f/3/lvT/+v8l+n/9/57fr//X/7NutP4/d//NcUuT/Q8AAAAd5O7/Xdxi/wMAAMA0cvf/Pm6x/wEAAGAauftviVua7H/9v/5/yv7/zvp//b/+fxT6/0vp/4/5P6T6f/3/CZ12P7/39+v/9f+sG63/z93/h7ilyf4HAACADnL3/zFusf8BAABgGrn7/xS32P8AAAAwjdz9f45bmux//b/+/+L7/zP19x62//f9f/2//n8Y+n/f/1/Svf+/4cZzP9b/7/P9+n/9P+tG6/9z9/8lbmmy/wEAAKCD3P1/jVvsfwAAAJhG7v6/xS32PwAAAEwjd/+tcUuT/a//1/9P+f1//b/+X/8/DP2//n9J9/7f9//3/X79v/6fdaP1/7n7/x63NNn/AAAA0EHu/n/ELfY/AAAATCN3/z/jFvsfAAAAppG7/19xS5P9r//X/+v/9f/6f/3/lvT/+v8l+n/9/57fr//X/7NutP4/d/9/AgAA///Jc0Kn") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=13818): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): nd at offset 32 on loop2-75 [ 962.071431][T32649] JBD2: bad block at offset 32 [ 962.095167][T32649] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 962.251495][T32649] ocfs2: Unmounting device (7,2) on (node local) [ 963.401122][T27405] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 963.615788][T27405] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 963.630680][T27405] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 963.638795][T27405] usb 4-1: Product: syz [ 963.658211][T27405] usb 4-1: SerialNumber: syz [ 963.672293][T27405] usb 4-1: config 0 descriptor?? [ 963.903683][T27405] hso 4-1:0.0: Failed to find INT IN ep [ 963.960582][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 964.114152][T27675] usb 4-1: USB disconnect, device number 69 [ 964.150862][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 964.168895][ T9] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 964.193615][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 964.215386][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 964.230799][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 964.240258][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 964.266590][ T9] usb 3-1: config 0 has no interface number 0 [ 964.300654][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 964.330946][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 964.360781][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 964.395390][ T9] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 964.427600][ T9] usb 3-1: config 0 interface 125 has no altsetting 0 [ 964.448957][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 964.470148][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.488668][ T9] usb 3-1: Product: syz [ 964.500485][ T9] usb 3-1: Manufacturer: syz [ 964.505203][ T9] usb 3-1: SerialNumber: syz [ 964.537363][ T9] usb 3-1: config 0 descriptor?? [ 964.875847][ T308] x_tables: duplicate entry at hook 2 [ 965.173507][T27675] usb 3-1: USB disconnect, device number 67 [ 965.237459][ T318] loop3: detected capacity change from 0 to 8 [ 965.536208][ T325] loop0: detected capacity change from 0 to 1024 [ 965.672990][ T325] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 966.450841][ T356] tipc: Can't bind to reserved service type 32 [ 967.285860][ T354] loop0: detected capacity change from 0 to 32768 [ 967.332699][ T354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12483 (354) [ 967.378227][ T354] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.400601][ T354] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 967.437320][ T354] BTRFS info (device loop0): using free space tree [ 967.593637][ T354] BTRFS info (device loop0): enabling ssd optimizations [ 967.623942][ T354] BTRFS info (device loop0): auto enabling async discard [ 968.218460][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 968.455319][ T5790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5790) [ 968.662962][ T415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12505'. [ 969.246463][ T431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.536758][ T440] kAFS: unable to lookup cell '.,' [ 969.978297][ T450] loop0: detected capacity change from 0 to 4096 [ 970.002155][ T450] EXT4-fs: Ignoring removed nobh option [ 970.024908][ T450] EXT4-fs: Ignoring removed mblk_io_submit option [ 970.078527][ T450] EXT4-fs (loop0): Test dummy encryption mode enabled [ 970.102360][ T450] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=884ec018, mo2=0102] [ 970.138353][ T433] loop3: detected capacity change from 0 to 32768 [ 970.172542][ T450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.258418][ T433] JBD2: Ignoring recovery information on journal [ 970.377418][ T433] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 970.398874][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.673773][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 970.700653][ T462] netlink: 'syz.0.12524': attribute type 3 has an invalid length. [ 970.876058][ T446] loop2: detected capacity change from 0 to 32768 [ 970.889680][ T446] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.12519 (446) [ 970.921105][ T28] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 970.942898][ T446] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 970.963622][ T446] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 970.988171][ T446] BTRFS info (device loop2): force zlib compression, level 3 [ 970.997941][ T446] BTRFS info (device loop2): turning on flush-on-commit [ 971.005384][ T446] BTRFS info (device loop2): max_inline at 0 [ 971.012605][ T446] BTRFS info (device loop2): using free space tree [ 971.110579][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 971.118320][ T28] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 971.128579][ T28] usb 2-1: config 0 has no interface number 0 [ 971.135262][ T28] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 971.146479][ T28] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 971.159861][ T28] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 971.169209][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.177481][ T28] usb 2-1: Product: syz [ 971.181904][ T28] usb 2-1: Manufacturer: syz [ 971.186563][ T28] usb 2-1: SerialNumber: syz [ 971.194396][ T28] usb 2-1: config 0 descriptor?? [ 971.239705][ T446] BTRFS info (device loop2): enabling ssd optimizations [ 971.271701][ T446] BTRFS info (device loop2): auto enabling async discard [ 971.483354][ T28] radio-si470x 2-1:0.35: this is not a si470x device. [ 971.605121][ T488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 971.675760][ T28] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 971.754532][ T28] usb 2-1: USB disconnect, device number 66 [ 971.848708][ T5780] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 972.311979][ T28] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 972.540984][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 972.606893][ T28] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 972.628543][ T28] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 972.654337][ T512] netlink: 'syz.3.12541': attribute type 21 has an invalid length. [ 972.665797][ T28] usb 1-1: config 179 has no interface number 0 [ 972.673057][ T28] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 972.681202][ T512] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12541'. [ 972.695344][ T28] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 972.713116][ T28] usb 1-1: config 179 interface 65 has no altsetting 0 [ 972.720127][ T28] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 972.730565][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.013769][ T520] loop2: detected capacity change from 0 to 128 [ 973.053774][ T28] usb 1-1: USB disconnect, device number 76 [ 973.092215][ T520] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 973.127545][ T520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 973.176382][ T524] loop1: detected capacity change from 0 to 1764 [ 973.285149][ T524] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 973.492039][ T528] loop2: detected capacity change from 0 to 4096 [ 973.512408][ T528] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 973.644935][ T528] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 974.098101][ T544] loop3: detected capacity change from 0 to 256 [ 974.616144][ T558] netlink: 'syz.1.12564': attribute type 15 has an invalid length. [ 974.906286][ T538] loop0: detected capacity change from 0 to 32768 [ 975.001144][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12569'. [ 975.039950][ T571] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12570'. [ 975.069095][ T571] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12570'. [ 976.007491][ T599] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12586'. [ 976.059095][ T599] openvswitch: netlink: Key type 29 is not supported [ 976.102408][ T604] xt_l2tp: missing protocol rule (udp|l2tpip) [ 976.620937][ T622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12596'. [ 977.512301][ T656] loop3: detected capacity change from 0 to 256 [ 977.522325][ T656] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 977.570593][ T656] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 977.633186][ T656] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d) [ 977.689984][ T661] binder: 659:661 ioctl c018620c 0 returned -14 [ 978.359901][ T681] loop1: detected capacity change from 0 to 1024 [ 979.490680][ T28] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 979.694004][ T28] usb 1-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 979.713376][ T733] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 979.724120][ T28] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 979.745885][ T28] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 979.780150][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.793487][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 979.802330][ T28] usb 1-1: SerialNumber: syz [ 979.833544][ T28] cdc_acm 1-1:1.0: skipping garbage [ 979.839141][ T28] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 979.860517][ T28] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 979.868590][ T28] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 979.890629][ T28] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 980.053142][ T9] usb 1-1: USB disconnect, device number 77 [ 980.258662][ T747] ax25_connect(): syz.2.12658 uses autobind, please contact jreuter@yaina.de [ 980.379867][ T749] ±ÿ: left promiscuous mode [ 980.408177][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.447947][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.459434][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.470151][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.482778][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.493554][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.503928][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.517195][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.534457][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.546391][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12659'. [ 980.569092][ T749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 980.935056][ T741] loop1: detected capacity change from 0 to 32768 [ 981.115388][ T741] JBD2: Ignoring recovery information on journal [ 981.287088][ T741] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 981.519717][ T741] (syz.1.12655,741,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 981.563647][ T741] (syz.1.12655,741,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 981.630523][ T741] (syz.1.12655,741,0):ocfs2_mknod:502 ERROR: status = -117 [ 981.670473][ T741] (syz.1.12655,741,0):ocfs2_mkdir:659 ERROR: status = -117 [ 981.744960][ T28] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 981.811628][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 981.975952][ T28] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 981.990526][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.998674][ T28] usb 4-1: Product: syz [ 982.020819][ T28] usb 4-1: Manufacturer: syz [ 982.025641][ T28] usb 4-1: SerialNumber: syz [ 982.048613][ T28] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 982.074331][ T3372] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 982.421989][ T787] loop0: detected capacity change from 0 to 40427 [ 982.446544][ T787] F2FS-fs (loop0): invalid crc value [ 982.459465][ T787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 982.533844][ T28] usb 4-1: USB disconnect, device number 70 [ 982.565621][ T787] F2FS-fs (loop0): Start checkpoint disabled! [ 982.604240][ T787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 982.662634][ T787] syz.0.12675: attempt to access beyond end of device [ 982.662634][ T787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 982.862837][ T59] kworker/u4:4: attempt to access beyond end of device [ 982.862837][ T59] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 982.885055][ T794] loop2: detected capacity change from 0 to 1024 [ 982.903827][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 982.913823][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 983.137681][ T3372] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 983.191888][ T3372] ath9k_htc: Failed to initialize the device [ 983.231086][ T28] usb 4-1: ath9k_htc: USB layer deinitialized [ 983.441667][ T804] overlayfs: disabling nfs_export due to verity=require [ 983.488960][ T804] overlayfs: conflicting options: userxattr,verity=require [ 983.997116][ T823] loop2: detected capacity change from 0 to 164 [ 984.585094][ T844] loop1: detected capacity change from 0 to 8 [ 985.323388][ T866] loop0: detected capacity change from 0 to 256 [ 985.436131][ T866] FAT-fs (loop0): Directory bread(block 64) failed [ 985.441720][ T788] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 985.462608][ T866] FAT-fs (loop0): Directory bread(block 65) failed [ 985.469463][ T866] FAT-fs (loop0): Directory bread(block 66) failed [ 985.497512][ T866] FAT-fs (loop0): Directory bread(block 67) failed [ 985.515928][ T866] FAT-fs (loop0): Directory bread(block 68) failed [ 985.536320][ T866] FAT-fs (loop0): Directory bread(block 69) failed [ 985.546564][ T866] FAT-fs (loop0): Directory bread(block 70) failed [ 985.572468][ T866] FAT-fs (loop0): Directory bread(block 71) failed [ 985.589679][ T866] FAT-fs (loop0): Directory bread(block 72) failed [ 985.599846][ T853] loop1: detected capacity change from 0 to 32768 [ 985.606778][ T866] FAT-fs (loop0): Directory bread(block 73) failed [ 985.628802][ T853] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.12707 (853) [ 985.653957][ T788] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 985.672828][ T788] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 985.685262][ T853] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 985.708151][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 985.715995][ T853] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 985.738915][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 985.746574][ T853] BTRFS info (device loop1): force zlib compression, level 3 [ 985.763576][ T788] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 985.790853][ T853] BTRFS info (device loop1): turning on flush-on-commit [ 985.792260][ T788] usb 3-1: Product: syz [ 985.798147][ T853] BTRFS info (device loop1): max_inline at 0 [ 985.833324][ T853] BTRFS info (device loop1): using free space tree [ 985.840545][ T788] usb 3-1: Manufacturer: syz [ 985.862262][ T788] usb 3-1: SerialNumber: syz [ 985.882419][ T788] usb 3-1: config 0 descriptor?? [ 985.900266][ T788] hub 3-1:0.0: bad descriptor, ignoring hub [ 985.920722][ T788] hub: probe of 3-1:0.0 failed with error -5 [ 985.967250][ T788] usb 3-1: selecting invalid altsetting 0 [ 986.010797][ T853] BTRFS info (device loop1): enabling ssd optimizations [ 986.028204][ T853] BTRFS info (device loop1): auto enabling async discard [ 986.274864][ T891] __nla_validate_parse: 8 callbacks suppressed [ 986.274885][ T891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12718'. [ 986.338949][ T891] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 986.463883][ T5778] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 986.661632][T27405] usb 3-1: USB disconnect, device number 68 [ 988.292455][ T967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12744'. [ 988.306375][ T968] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 988.476251][ T974] loop2: detected capacity change from 0 to 1024 [ 988.492133][ T974] EXT4-fs: Ignoring removed orlov option [ 988.497914][ T974] EXT4-fs: inline encryption not supported [ 988.512113][ T974] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 988.530855][ T974] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 988.564807][ T974] EXT4-fs (loop2): invalid journal inode [ 988.591579][ T974] EXT4-fs (loop2): can't get journal size [ 988.677649][ T974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 988.832184][ T990] openvswitch: netlink: Missing valid actions attribute. [ 988.843548][ T974] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 988.843548][ T974] [ 988.863611][ T990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.092031][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.868983][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12763'. [ 989.885915][ T1028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12763'. [ 989.939152][ T1030] netlink: 'syz.3.12764': attribute type 1 has an invalid length. [ 990.010821][ T28] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 990.135575][ T1038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12766'. [ 990.200596][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 990.213271][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.233669][ T28] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 990.268107][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.281969][ T28] usb 1-1: Product: syz [ 990.286244][ T28] usb 1-1: Manufacturer: syz [ 990.309620][ T28] usb 1-1: SerialNumber: syz [ 990.323030][ T28] usb 1-1: config 0 descriptor?? [ 990.329071][ T1045] xt_bpf: check failed: parse error [ 990.339922][ T28] usb 1-1: bad CDC descriptors [ 990.371240][ T28] usb 1-1: unsupported MDLM descriptors [ 990.589986][ T28] usb 1-1: USB disconnect, device number 78 [ 990.733930][ T1063] netlink: 209860 bytes leftover after parsing attributes in process `syz.1.12776'. [ 991.130157][ T1077] netlink: 'syz.2.12783': attribute type 2 has an invalid length. [ 991.340926][ T1085] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12786'. [ 991.958850][T27673] kernel write not supported for file /input/mice (pid: 27673 comm: kworker/1:6) [ 992.078793][ T1110] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 992.099167][ T1110] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 992.118056][ T1110] overlayfs: missing 'lowerdir' [ 992.711396][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 992.711417][ T27] audit: type=1326 audit(2000000172.230:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 992.811151][ T27] audit: type=1326 audit(2000000172.230:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 992.835297][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.939907][ T27] audit: type=1326 audit(2000000172.280:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 992.964138][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.978058][ T27] audit: type=1326 audit(2000000172.280:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 993.002201][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.014779][ T27] audit: type=1326 audit(2000000172.280:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 993.093834][ T27] audit: type=1326 audit(2000000172.280:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 993.117982][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.176662][ T27] audit: type=1326 audit(2000000172.280:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 993.200823][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.259860][ T27] audit: type=1326 audit(2000000172.280:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 993.280068][ T1141] loop2: detected capacity change from 0 to 4096 [ 993.284069][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.332616][ T27] audit: type=1326 audit(2000000172.280:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.1.12811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 993.371049][ T1141] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 993.458045][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.490336][ T1152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12820'. [ 993.504118][ T1141] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 993.522631][ T1141] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 993.735983][ T1156] [U] [ 993.738824][ T1156] [U] [ 993.741587][ T1156] [U] [ 993.744356][ T1156] [U] [ 993.801096][ T1156] [U] [ 993.803933][ T1156] [U] [ 993.806694][ T1156] [U] [ 993.809447][ T1156] [U] [ 993.854254][ T1156] [U] [ 993.857082][ T1156] [U] [ 993.859852][ T1156] [U] [ 993.862618][ T1156] [U] [ 993.884737][ T1156] [U] [ 993.887548][ T1156] [U] [ 993.890311][ T1156] [U] [ 993.893078][ T1156] [U] [ 993.915217][ T1155] [U] [ 994.790606][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 994.885637][ T1198] loop0: detected capacity change from 0 to 256 [ 994.919833][ T1198] exfat: Deprecated parameter 'utf8' [ 994.930636][ T1198] exfat: Deprecated parameter 'utf8' [ 994.967789][ T1198] exfat: Deprecated parameter 'utf8' [ 994.981647][ T1198] exfat: Deprecated parameter 'namecase' [ 994.993909][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 995.029996][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.047911][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 995.059303][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 995.066484][ T1198] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 995.075671][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.099151][ T9] usb 2-1: Product: syz [ 995.109340][ T9] usb 2-1: Manufacturer: syz [ 995.119227][ T9] usb 2-1: SerialNumber: syz [ 995.131923][ T9] usb 2-1: config 0 descriptor?? [ 995.166224][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 995.383964][ T9] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 995.413472][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 995.444085][ T9] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 995.641395][ T9] usb 2-1: USB disconnect, device number 67 [ 995.943738][ T1224] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 995.964793][ T1228] overlayfs: missing 'lowerdir' [ 996.123134][ T1230] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12857'. [ 996.304353][ T27] audit: type=1326 audit(2000000175.830:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1235 comm="syz.3.12860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 996.328753][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.368943][ T1277] netlink: 300 bytes leftover after parsing attributes in process `syz.1.12878'. [ 997.501700][ T1281] loop0: detected capacity change from 0 to 1764 [ 997.577281][ T1281] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 997.890975][ T1298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12887'. [ 998.125770][ T1308] loop2: detected capacity change from 0 to 128 [ 998.190643][ T1308] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 998.224517][ T1308] hpfs: filesystem error: improperly stopped [ 998.258783][ T1308] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 998.299883][ T1308] hpfs: You really don't want any checks? You are crazy... [ 998.321111][ T1308] hpfs: hpfs_map_sector(): read error [ 998.327977][ T1308] hpfs: code page support is disabled [ 998.344601][ T1308] hpfs: hpfs_map_4sectors(): unaligned read [ 998.368500][ T1308] hpfs: hpfs_map_4sectors(): unaligned read [ 998.391675][ T1308] hpfs: filesystem error: unable to find root dir [ 998.933570][ T1333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 999.224130][ T3372] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 999.430655][ T3372] usb 2-1: Using ep0 maxpacket: 16 [ 999.445657][ T3372] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 999.458365][ T3372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.487702][ T3372] usb 2-1: Product: syz [ 999.496893][ T3372] usb 2-1: Manufacturer: syz [ 999.512608][ T3372] usb 2-1: SerialNumber: syz [ 999.526870][ T3372] r8152-cfgselector 2-1: config 0 descriptor?? [ 999.620945][T27405] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 999.780585][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 999.815616][T27405] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 999.840558][T27405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.848678][T27405] usb 4-1: Product: syz [ 999.860516][T27405] usb 4-1: Manufacturer: syz [ 999.865232][T27405] usb 4-1: SerialNumber: syz [ 999.883564][T27405] usb 4-1: config 0 descriptor?? [ 999.949459][ T1352] loop2: detected capacity change from 0 to 32768 [ 999.974038][ T3372] r8152-cfgselector 2-1: Unknown version 0x0000 [ 999.989851][ T3372] r8152-cfgselector 2-1: USB disconnect, device number 68 [ 999.990693][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1000.027649][ T1352] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1000.050619][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.068658][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.103543][T27405] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 1000.110304][T27405] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1000.120587][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1000.129726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.141506][T27405] f81604: probe of 4-1:0.0 failed with error -32 [ 1000.154175][T27405] usb 4-1: USB disconnect, device number 71 [ 1000.161942][ T9] usb 1-1: config 0 descriptor?? [ 1000.170344][ T9] hub 1-1:0.0: USB hub found [ 1000.296474][ T1352] XFS (loop2): Ending clean mount [ 1000.371169][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1000.413653][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1000.597941][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1000.613504][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1000.665786][ T9] usb 1-1: USB disconnect, device number 79 [ 1001.240771][ T3372] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1001.268135][ T1383] netlink: 'syz.3.12922': attribute type 21 has an invalid length. [ 1001.281912][ T1383] netlink: 'syz.3.12922': attribute type 30 has an invalid length. [ 1001.450707][ T3372] usb 2-1: Using ep0 maxpacket: 16 [ 1001.459404][ T3372] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1001.477734][ T3372] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1001.504997][ T3372] usb 2-1: config 1 has no interface number 1 [ 1001.521889][ T3372] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1001.550288][ T3372] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.598895][ T3372] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1001.619535][ T3372] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1001.640701][ T3372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.663857][ T3372] usb 2-1: Product: syz [ 1001.668450][ T3372] usb 2-1: Manufacturer: syz [ 1001.678572][ T3372] usb 2-1: SerialNumber: syz [ 1001.714681][ T1375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1001.972583][ T3372] aqc111: probe of 2-1:1.105 failed with error -22 [ 1002.040628][ T28] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1002.199454][ T1411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12937'. [ 1002.231193][ T788] usb 2-1: USB disconnect, device number 69 [ 1002.250762][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 1002.266172][ T28] usb 3-1: config 0 has no interfaces? [ 1002.277656][ T1413] sctp: [Deprecated]: syz.3.12938 (pid 1413) Use of int in maxseg socket option. [ 1002.277656][ T1413] Use struct sctp_assoc_value instead [ 1002.304204][ T28] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1002.321965][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.342127][ T28] usb 3-1: Product: syz [ 1002.353120][ T28] usb 3-1: Manufacturer: syz [ 1002.357845][ T28] usb 3-1: SerialNumber: syz [ 1002.391870][ T28] r8152-cfgselector 3-1: config 0 descriptor?? [ 1002.658887][ T28] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1002.876335][ T788] usb 3-1: USB disconnect, device number 69 [ 1003.061503][ T1435] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.12949' sets config #1 [ 1003.197955][ T1442] loop0: detected capacity change from 0 to 1024 [ 1003.262125][ T1442] hfsplus: unknown catalog record type 0 [ 1003.346593][ T2911] hfsplus: b-tree write err: -5, ino 25 [ 1003.363348][ T2911] hfsplus: b-tree write err: -5, ino 4 [ 1003.377793][ T2911] hfsplus: b-tree write err: -5, ino 2 [ 1003.838278][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1003.851645][ T1459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1003.883763][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1003.901221][ T1459] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1003.941277][ T1459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12959'. [ 1004.004131][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1004.004148][ T27] audit: type=1326 audit(2000000183.530:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.130212][ T27] audit: type=1326 audit(2000000183.530:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.154439][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.226311][ T27] audit: type=1326 audit(2000000183.530:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.307701][ T27] audit: type=1326 audit(2000000183.530:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.405706][ T27] audit: type=1326 audit(2000000183.560:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.506162][ T27] audit: type=1326 audit(2000000183.560:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.551054][ T27] audit: type=1326 audit(2000000183.560:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.575277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.583361][ T27] audit: type=1326 audit(2000000183.570:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.607578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.612632][ T788] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1004.677233][ T27] audit: type=1326 audit(2000000183.570:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1462 comm="syz.1.12962" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1004.826353][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1004.844378][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.870592][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.923933][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 1004.939417][ T788] usb 2-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 1004.964438][ T788] usb 2-1: Product: syz [ 1004.980578][ T788] usb 2-1: Manufacturer: syz [ 1004.995797][ T788] usb 2-1: SerialNumber: syz [ 1005.273408][ T788] usb 2-1: unit 4 not found! [ 1005.336578][ T788] usb 2-1: USB disconnect, device number 70 [ 1005.395273][ T1499] loop0: detected capacity change from 0 to 2048 [ 1005.432603][ T1499] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 1005.487498][ T1499] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1005.514742][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.532318][ T1499] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1005.588592][ T1499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1006.548043][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12998'. [ 1006.654861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.769498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.869339][ T1543] loop0: detected capacity change from 0 to 4096 [ 1006.933304][ T1543] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1006.959294][ T1543] ntfs3: loop0: Failed to load $Extend (-22). [ 1006.975161][ T1543] ntfs3: loop0: Failed to initialize $Extend. [ 1007.110553][ T28] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1007.301012][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 1007.312746][ T28] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 1007.330590][ T28] usb 2-1: config 64 has no interface number 0 [ 1007.340637][ T28] usb 2-1: config 64 interface 19 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 33 [ 1007.360543][ T28] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1007.380193][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.394099][ T1547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1007.405020][ T28] usb 2-1: probing VID:PID(2201:012C) [ 1007.443103][ T28] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1007.449909][ T28] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1007.542569][ T28] vub300: probe of 2-1:64.19 failed with error -22 [ 1007.568051][ T1565] loop3: detected capacity change from 0 to 256 [ 1007.690065][ T28] usb 2-1: USB disconnect, device number 71 [ 1007.931718][ T1573] netlink: 'syz.0.13017': attribute type 28 has an invalid length. [ 1007.939951][ T1573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13017'. [ 1008.280133][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13021'. [ 1008.495711][ T27] audit: type=1326 audit(2000000188.020:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.2.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ffc0000 [ 1008.519950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.529908][ T1571] loop3: detected capacity change from 0 to 32768 [ 1008.540628][ T1571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.13016 (1571) [ 1008.579655][ T1571] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1008.599131][ T1571] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1008.609231][ T1571] BTRFS info (device loop3): setting nodatasum [ 1008.617154][ T1571] BTRFS info (device loop3): force zlib compression, level 3 [ 1008.625260][ T1571] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1008.635563][ T1571] BTRFS info (device loop3): use lzo compression, level 0 [ 1008.648987][ T1571] BTRFS info (device loop3): turning on flush-on-commit [ 1008.658116][ T1571] BTRFS info (device loop3): enabling auto defrag [ 1008.680538][ T3372] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1008.690710][ T1571] BTRFS info (device loop3): max_inline at 4096 [ 1008.697778][ T1571] BTRFS info (device loop3): using free space tree [ 1008.849403][ T1571] BTRFS info (device loop3): enabling ssd optimizations [ 1008.911605][ T3372] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 82, changing to 7 [ 1008.946303][ T3372] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 1009.035723][ T3372] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 1009.045244][ T28] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1009.058684][ T3372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.090533][ T3372] usb 2-1: Product: syz [ 1009.094810][ T3372] usb 2-1: Manufacturer: syz [ 1009.099467][ T3372] usb 2-1: SerialNumber: syz [ 1009.223155][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1009.260656][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 1009.305118][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.341851][ T28] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1009.377879][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.387869][ T3372] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1009.431940][ T28] usb 1-1: Product: syz [ 1009.436480][ T3372] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1009.460708][ T28] usb 1-1: Manufacturer: syz [ 1009.475844][ T28] usb 1-1: SerialNumber: syz [ 1009.510554][ T28] usb 1-1: config 0 descriptor?? [ 1009.527621][ T28] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1009.535117][ T3372] usb 2-1: USB disconnect, device number 72 [ 1009.543703][ T28] usb 1-1: selecting invalid altsetting 1 [ 1009.610786][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5790) [ 1009.714369][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.789954][ T1618] loop2: detected capacity change from 0 to 256 [ 1009.797658][ T28] gspca_stk014: init reg: 0x00 [ 1009.820883][ T28] stk014: probe of 1-1:0.0 failed with error -5 [ 1010.048071][T27675] usb 1-1: USB disconnect, device number 80 [ 1010.257183][ T1624] smb3: Unexpected value for 'rdma' [ 1011.090908][T27675] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1011.283139][T27675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1011.293356][T27675] usb 1-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 1011.307963][T27675] usb 1-1: config 66 interface 0 has no altsetting 0 [ 1011.327626][T27675] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1011.348326][T27675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.369648][T27675] usb 1-1: Product: syz [ 1011.375334][T27675] usb 1-1: Manufacturer: syz [ 1011.380153][T27675] usb 1-1: SerialNumber: syz [ 1011.402566][ T1636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1011.493620][ T1655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.676304][T27675] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 1011.742415][T27675] usb 1-1: USB disconnect, device number 81 [ 1011.919496][ T1670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1012.295583][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13063'. [ 1012.785577][ T1698] netlink: 'syz.3.13072': attribute type 3 has an invalid length. [ 1013.167601][ T1712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.327309][ T1716] netlink: 'syz.1.13079': attribute type 21 has an invalid length. [ 1013.600809][ T28] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1013.817411][ T28] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1013.832013][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.853118][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1013.874862][ T28] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.916889][ T28] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1013.945506][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.985190][ T28] hub 3-1:1.0: bad descriptor, ignoring hub [ 1014.005744][ T28] hub: probe of 3-1:1.0 failed with error -5 [ 1014.041714][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 1014.056903][ T28] cdc_wdm 3-1:1.0: invalid descriptor buffer length [ 1014.075879][ T28] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1014.351535][ T28] usb 3-1: USB disconnect, device number 70 [ 1014.866771][ T1768] loop3: detected capacity change from 0 to 128 [ 1014.929666][ T1768] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1014.976807][ T1768] hpfs: filesystem error: improperly stopped [ 1014.997514][ T1768] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1015.028861][ T1768] hpfs: You really don't want any checks? You are crazy... [ 1015.067973][ T1768] hpfs: hpfs_map_sector(): read error [ 1015.090825][ T1768] hpfs: code page support is disabled [ 1015.117764][ T1768] hpfs: hpfs_map_4sectors(): unaligned read [ 1015.129456][ T1768] hpfs: hpfs_map_4sectors(): unaligned read [ 1015.150229][ T1768] hpfs: filesystem error: unable to find root dir [ 1015.212574][ T1768] hpfs: hpfs_map_4sectors(): unaligned read [ 1015.241235][ T1768] hpfs: hpfs_map_sector(): read error [ 1015.462159][ T1785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13114'. [ 1015.760566][ T788] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1015.962741][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1015.984199][ T788] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1015.998462][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.008178][ T788] usb 3-1: Product: syz [ 1016.025711][ T788] usb 3-1: Manufacturer: syz [ 1016.044344][ T788] usb 3-1: SerialNumber: syz [ 1016.077677][ T788] usb 3-1: config 0 descriptor?? [ 1016.093777][ T1788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1016.102080][ T1788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1016.117811][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1016.127869][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1016.137952][ T788] port100 3-1:0.0: NFC: Could not get supported command types [ 1016.371023][ T3372] usb 3-1: USB disconnect, device number 71 [ 1017.045701][ T1837] raw_sendmsg: syz.1.13140 forgot to set AF_INET. Fix it! [ 1017.081339][ T1839] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13141'. [ 1017.264794][ T1847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13144'. [ 1017.454420][ T1853] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 [ 1017.939964][ T1871] netlink: 'syz.1.13158': attribute type 5 has an invalid length. [ 1017.978175][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1017.978194][ T27] audit: type=1326 audit(2000000197.500:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1872 comm=162E44A480DB682108B49543019E91 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5dd99de59 code=0x0 [ 1018.039150][ T1877] loop0: detected capacity change from 0 to 164 [ 1018.072664][ T1877] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 1018.540694][ T3372] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1018.702379][ T1887] loop1: detected capacity change from 0 to 32768 [ 1018.723588][ T3372] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1018.742953][ T3372] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1018.750259][ T1887] [ 1018.750259][ T1887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1018.750259][ T1887] [ 1018.758920][ T3372] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1018.791628][ T3372] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1018.803237][ T1887] [ 1018.803237][ T1887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1018.803237][ T1887] [ 1018.833994][ T1887] [ 1018.833994][ T1887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1018.833994][ T1887] [ 1018.834642][ T3372] usb 1-1: config 129 has no interface number 0 [ 1018.873786][ T1887] [ 1018.873786][ T1887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1018.873786][ T1887] [ 1018.898836][ T1887] [ 1018.898836][ T1887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1018.898836][ T1887] [ 1018.914003][ T3372] usb 1-1: config 129 has no interface number 1 [ 1018.942767][ T3372] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1018.992827][ T3372] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1019.024047][ T113] [ 1019.024047][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1019.024047][ T113] [ 1019.039134][ T3372] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1019.096469][ T3372] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1019.110582][ T3372] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1019.137770][ T3372] usb 1-1: string descriptor 0 read error: -22 [ 1019.164743][ T5778] [ 1019.164743][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1019.164743][ T5778] [ 1019.176722][ T3372] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1019.212526][ T3372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.212772][ T5778] [ 1019.212772][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1019.212772][ T5778] [ 1019.303338][ T3372] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1019.320554][ T3372] usb 1-1: MIDIStreaming interface descriptor not found [ 1019.698165][ T788] usb 1-1: USB disconnect, device number 82 [ 1020.299716][ T1921] netlink: 'syz.2.13181': attribute type 21 has an invalid length. [ 1020.319260][ T1921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13181'. [ 1020.857547][ T1912] loop1: detected capacity change from 0 to 32768 [ 1020.902523][ T1912] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1021.080772][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1021.106468][ T1951] loop0: detected capacity change from 0 to 2048 [ 1021.136358][ T1951] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1021.184571][ T1912] XFS (loop1): Ending clean mount [ 1021.208814][ T1951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.232113][ T1912] XFS (loop1): Quotacheck needed: Please wait. [ 1021.272854][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1021.288348][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1021.315590][ T9] usb 3-1: config 0 has no interface number 0 [ 1021.334152][ T9] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1021.385824][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.420588][ T9] usb 3-1: Product: syz [ 1021.425325][ T9] usb 3-1: Manufacturer: syz [ 1021.435233][ T9] usb 3-1: SerialNumber: syz [ 1021.453357][ T9] usb 3-1: config 0 descriptor?? [ 1021.467273][ T1912] XFS (loop1): Quotacheck: Done. [ 1021.695806][ T9] usb 3-1: selecting invalid altsetting 1 [ 1021.717688][ T9] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1021.739831][ T9] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1021.749320][ T1959] loop3: detected capacity change from 0 to 256 [ 1021.770703][ T9] speedtch: probe of 3-1:0.1 failed with error -22 [ 1021.803667][ T5778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1021.832386][ T9] usb 3-1: USB disconnect, device number 72 [ 1022.390877][ T1968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13202'. [ 1022.417794][ T1968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13202'. [ 1022.845631][ T1989] netlink: 'syz.1.13209': attribute type 2 has an invalid length. [ 1023.315604][ T2008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13220'. [ 1023.586366][ T2021] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13226'. [ 1023.758880][ T2027] loop0: detected capacity change from 0 to 512 [ 1023.804242][ T2027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1023.848608][ T2031] loop2: detected capacity change from 0 to 512 [ 1023.868678][ T2031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.916441][ T2031] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1023.976423][ T2027] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.13230: corrupted xattr entries [ 1024.000555][ T2031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1024.008773][ T2031] System zones: 0-1, 15-15, 18-18, 34-34 [ 1024.017570][ T2031] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1024.024559][ T2031] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1024.034580][ T2031] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1024.057544][ T2031] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1024.080279][ T2031] EXT4-fs (loop2): 1 truncate cleaned up [ 1024.088009][ T2027] EXT4-fs (loop0): Remounting filesystem read-only [ 1024.098714][ T2031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.111318][ T2027] EXT4-fs (loop0): 1 truncate cleaned up [ 1024.115283][ T2027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.170285][ T2031] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 1024.265077][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.291028][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.074714][ T2070] netlink: 'syz.2.13249': attribute type 12 has an invalid length. [ 1025.210781][ T3372] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1025.392962][ T3372] usb 2-1: Using ep0 maxpacket: 8 [ 1025.412407][ T3372] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1025.429727][ T3372] usb 2-1: config 179 has no interface number 0 [ 1025.443859][ T3372] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1025.475206][ T3372] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1025.502574][ T3372] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1025.547217][ T3372] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1025.577319][ T3372] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1025.624227][ T3372] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1025.642910][ T3372] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1025.663791][ T3372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.679758][ T2088] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1025.710315][ T3372] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input54 [ 1026.060655][ T3372] usb 2-1: USB disconnect, device number 73 [ 1026.073978][ T3372] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1026.253331][ T2101] loop2: detected capacity change from 0 to 256 [ 1026.290639][ T2101] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.395523][ T2101] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1026.955000][ T2122] (null): rxe_set_mtu: Set mtu to 1024 [ 1027.160915][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13277'. [ 1027.207375][ T2128] bridge7: entered promiscuous mode [ 1027.644524][ T2122] infiniband syz1: set down [ 1027.654020][ T2122] infiniband syz1: added bond0 [ 1027.907961][ T2122] RDS/IB: syz1: added [ 1027.950631][ T2122] smc: adding ib device syz1 with port count 1 [ 1027.956941][ T2122] smc: ib device syz1 port 1 has pnetid [ 1028.655697][ T3372] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1028.847092][ T3372] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1028.871547][ T3372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.890075][ T3372] usb 3-1: config 0 has no interface number 0 [ 1028.906965][ T3372] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1028.930964][ T3372] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1028.952903][ T3372] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.987248][ T3372] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1029.002774][ T3372] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1029.017609][ T3372] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1029.036898][ T3372] usb 3-1: Product: syz [ 1029.046699][ T3372] usb 3-1: SerialNumber: syz [ 1029.087202][ T3372] usb 3-1: config 0 descriptor?? [ 1029.352144][ T3372] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1029.382338][ T3372] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 1029.410912][ T27] audit: type=1326 audit(2000000208.920:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.473753][ T27] audit: type=1326 audit(2000000208.920:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.551045][ T27] audit: type=1326 audit(2000000208.920:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.573304][ T3372] usb 3-1: USB disconnect, device number 73 [ 1029.638757][ T27] audit: type=1326 audit(2000000208.920:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.688366][ T27] audit: type=1326 audit(2000000208.920:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.692314][ T2193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13307'. [ 1029.743398][ T27] audit: type=1326 audit(2000000208.980:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb5dd95e68e code=0x7ffc0000 [ 1029.798571][ T27] audit: type=1326 audit(2000000208.980:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.848619][ T27] audit: type=1326 audit(2000000208.980:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.924215][ T27] audit: type=1326 audit(2000000209.010:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1029.977873][ T27] audit: type=1326 audit(2000000209.010:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2187 comm="syz.3.13305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1030.895912][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1030.951611][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1030.977242][ T2230] netlink: 'syz.3.13325': attribute type 1 has an invalid length. [ 1030.984078][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1031.021604][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1031.046351][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1031.071799][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1031.098570][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1031.122143][ T2228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1031.196627][ T2228] vlan0: left promiscuous mode [ 1031.220558][ T2228] veth0_vlan: left promiscuous mode [ 1031.236280][ T2228] macvlan0: left promiscuous mode [ 1031.257178][ T2228] ip6gre1: left promiscuous mode [ 1031.278187][ T2228] bridge2: left promiscuous mode [ 1031.321610][ T2228] ip6gre3: left promiscuous mode [ 1031.327688][ T2228] batadv0: left promiscuous mode [ 1031.338630][ T2228] ipip0: left promiscuous mode [ 1031.347829][ T2228] ip6gretap2: left promiscuous mode [ 1031.362217][ T2228] geneve3: left promiscuous mode [ 1031.378662][ T2228] bond7: left promiscuous mode [ 1031.523558][ T2246] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1031.875111][ T2255] loop1: detected capacity change from 0 to 4096 [ 1032.664314][ T2261] loop3: detected capacity change from 0 to 32768 [ 1032.690987][ T2261] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1032.702850][T27405] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1032.934019][T27405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.947649][ T5790] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1032.968572][T27405] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.008142][T27405] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1033.034883][T27405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.063248][T27405] usb 2-1: config 0 descriptor?? [ 1033.074656][T27405] qmi_wwan 2-1:0.0: bogus CDC Union: master=25, slave=0 [ 1033.148587][ T2269] loop0: detected capacity change from 0 to 32768 [ 1033.186735][ T2269] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1033.222565][ T2269] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1033.243165][ T2269] BTRFS info (device loop0): using free space tree [ 1033.300609][T27405] usb 2-1: string descriptor 0 read error: -71 [ 1033.307088][T27405] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 1033.334096][T27405] usb 2-1: USB disconnect, device number 74 [ 1033.437358][ T2269] BTRFS info (device loop0): enabling ssd optimizations [ 1033.444695][ T2269] BTRFS info (device loop0): auto enabling async discard [ 1033.551380][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1033.715787][ T2300] loop3: detected capacity change from 0 to 4096 [ 1033.722503][ T2306] netlink: 'syz.2.13355': attribute type 8 has an invalid length. [ 1033.771083][ T2300] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1033.787380][ T2306] bridge8: entered promiscuous mode [ 1034.229872][ T2312] loop1: detected capacity change from 0 to 512 [ 1034.337555][ T2312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1034.426037][ T2312] System zones: 1-12 [ 1034.434446][ T2312] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.13357: Directory hole found for htree index block 0 [ 1034.450538][ T2312] EXT4-fs (loop1): Remounting filesystem read-only [ 1034.457241][ T2312] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1034.476944][ T2312] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1034.505881][ T2312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.732860][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.449512][ T2342] loop0: detected capacity change from 0 to 512 [ 1035.539687][ T2342] __quota_error: 9 callbacks suppressed [ 1035.539714][ T2342] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1035.651600][ T2342] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1035.706910][ T2342] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13369: Failed to acquire dquot type 1 [ 1035.749834][ T2342] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1035.780910][ T2342] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1035.800916][ T2342] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13369: Failed to acquire dquot type 1 [ 1035.829205][ T2342] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.13369: bg 0: block 248: padding at end of block bitmap is not set [ 1035.896830][ T2342] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1035.917324][ T2342] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1035.938410][ T2342] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1035.970859][ T2342] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13369: Failed to acquire dquot type 1 [ 1036.003529][ T2342] EXT4-fs (loop0): 1 orphan inode deleted [ 1036.020591][ T2342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.043662][ T2342] ext4 filesystem being mounted at /3445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.078173][ T2339] loop3: detected capacity change from 0 to 32768 [ 1036.081986][ T2330] loop1: detected capacity change from 0 to 32764 [ 1036.105900][ T2339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13368 (2339) [ 1036.148099][ T2330] syz.1.13363: attempt to access beyond end of device [ 1036.148099][ T2330] loop1: rw=4096, sector=32767, nr_sectors = 1 limit=32764 [ 1036.170140][ T2330] XFS (loop1): last sector read failed [ 1036.171120][ T2339] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1036.200903][ T2339] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1036.209896][ T2339] BTRFS info (device loop3): using free space tree [ 1036.332370][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.361357][ T2359] bridge_slave_0: default FDB implementation only supports local addresses [ 1036.731147][ T2339] BTRFS info (device loop3): enabling ssd optimizations [ 1036.748579][ T2339] BTRFS info (device loop3): auto enabling async discard [ 1036.906947][ T2391] loop2: detected capacity change from 0 to 16 [ 1036.930978][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1036.952986][ T2391] erofs: (device loop2): mounted with root inode @ nid 36. [ 1037.023208][ T2391] syz.2.13379: attempt to access beyond end of device [ 1037.023208][ T2391] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1037.064930][ T5777] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1037.160588][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1037.205179][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1037.229007][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1037.270246][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1037.321781][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1037.390474][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1037.424505][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1037.476681][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.516651][ T9] usb 1-1: config 0 descriptor?? [ 1037.527224][ T2379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1037.851317][ C1] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 1037.858943][ T2401] Bluetooth: hci4: unexpected event 0x10 length: 71 > 1 [ 1037.960679][ T27] audit: type=1326 audit(2000000217.480:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2409 comm="syz.1.13385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1038.076838][ T27] audit: type=1326 audit(2000000217.480:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2409 comm="syz.1.13385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ffc0000 [ 1038.083914][ T9] usb 1-1: USB disconnect, device number 83 [ 1038.118684][ T5785] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1038.126698][ T5785] Bluetooth: hci4: hardware error 0x51 [ 1038.258305][ T27] audit: type=1326 audit(2000000217.540:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2409 comm="syz.1.13385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9c615e68e code=0x7ffc0000 [ 1038.365898][ T27] audit: type=1326 audit(2000000217.540:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2409 comm="syz.1.13385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9c615e68e code=0x7ffc0000 [ 1038.740048][ T2412] loop3: detected capacity change from 0 to 32768 [ 1038.858852][ T2412] (syz.3.13387,2412,1):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 1038.885825][ T2412] (syz.3.13387,2412,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1038.988576][ T2433] loop1: detected capacity change from 0 to 256 [ 1040.403321][ T2464] tipc: Enabling of bearer rejected, failed to enable media [ 1040.512506][ T2446] loop0: detected capacity change from 0 to 32768 [ 1040.610342][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1040.616989][ T27] audit: type=1800 audit(2000000220.130:715): pid=2446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13398" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 1041.222906][ T2479] loop3: detected capacity change from 0 to 256 [ 1041.253619][ T2479] exfat: Deprecated parameter 'utf8' [ 1041.276216][ T2479] exfat: Deprecated parameter 'namecase' [ 1041.299201][ T2479] exfat: Deprecated parameter 'utf8' [ 1041.408714][ T2479] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1041.421233][ T2462] loop1: detected capacity change from 0 to 32768 [ 1041.460805][ T2462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.13404 (2462) [ 1041.548008][ T2462] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1041.631246][ T2462] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1041.640015][ T2462] BTRFS info (device loop1): using free space tree [ 1041.871039][ T2513] loop0: detected capacity change from 0 to 64 [ 1041.882949][ T2462] BTRFS info (device loop1): enabling ssd optimizations [ 1041.920817][ T2462] BTRFS info (device loop1): auto enabling async discard [ 1041.945345][ T2513] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1042.070899][ T788] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1042.312945][ T788] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1042.326421][ T2526] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1042.364886][ T788] usb 4-1: not running at top speed; connect to a high speed hub [ 1042.385007][ T788] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1042.407310][ T788] usb 4-1: config 0 has no interface number 0 [ 1042.423200][ T788] usb 4-1: config 0 interface 175 has no altsetting 0 [ 1042.448250][ T788] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 1042.468168][ T788] usb 4-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 1042.487724][ T788] usb 4-1: Product: syz [ 1042.493636][ T788] usb 4-1: Manufacturer: syz [ 1042.508416][ T788] usb 4-1: SerialNumber: syz [ 1042.545857][ T788] usb 4-1: config 0 descriptor?? [ 1042.712475][ T5778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1042.792075][ T788] usb-storage 4-1:0.175: USB Mass Storage device detected [ 1042.940881][ T788] usb 4-1: USB disconnect, device number 72 [ 1043.158334][ T2540] Bluetooth: MGMT ver 1.22 [ 1043.311467][T27675] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1043.520587][T27675] usb 3-1: Using ep0 maxpacket: 16 [ 1043.528358][T27675] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.573198][T27675] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.592911][T27675] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1043.611014][ T3372] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1043.644123][T27675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.664710][T27675] usb 3-1: Product: syz [ 1043.668986][T27675] usb 3-1: Manufacturer: syz [ 1043.691770][T27675] usb 3-1: SerialNumber: syz [ 1043.709762][T27675] usb 3-1: config 0 descriptor?? [ 1043.838552][ T3372] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1043.860114][ T3372] usb 1-1: config 0 has no interface number 0 [ 1043.876408][ T3372] usb 1-1: config 0 interface 231 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1043.889793][ T3372] usb 1-1: config 0 interface 231 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.907317][ T3372] usb 1-1: config 0 interface 231 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1043.926405][ T3372] usb 1-1: config 0 interface 231 has no altsetting 0 [ 1043.934038][ T3372] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1043.970809][ T3372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.991749][ T3372] usb 1-1: config 0 descriptor?? [ 1044.012339][ T788] usb 3-1: USB disconnect, device number 74 [ 1044.056765][ T2557] program syz.1.13431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.345768][ T2568] loop1: detected capacity change from 0 to 512 [ 1044.373661][ T2568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1044.405617][ T2568] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1044.428693][ T3372] uclogic 0003:28BD:1903.0001: interface is invalid, ignoring [ 1044.451705][ T2568] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13435: invalid indirect mapped block 2683928664 (level 1) [ 1044.498481][ T2568] EXT4-fs (loop1): Remounting filesystem read-only [ 1044.529298][ T2568] EXT4-fs (loop1): 1 truncate cleaned up [ 1044.536972][ T2568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.643044][ T3372] usb 1-1: USB disconnect, device number 84 [ 1044.684593][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.921340][ T2587] loop3: detected capacity change from 0 to 64 [ 1045.195156][ T2592] team0: entered allmulticast mode [ 1045.609657][ T2606] __nla_validate_parse: 103 callbacks suppressed [ 1045.609686][ T2606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13449'. [ 1045.901944][ T2615] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1046.137668][ T2620] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13455'. [ 1046.700251][ T2647] loop3: detected capacity change from 0 to 256 [ 1046.713510][ T2647] exfat: Deprecated parameter 'utf8' [ 1046.725082][ T2647] exfat: Deprecated parameter 'namecase' [ 1046.750674][ T2647] exfat: Deprecated parameter 'utf8' [ 1046.770738][T27673] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1046.831691][ T2647] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1046.961179][T27673] usb 2-1: Using ep0 maxpacket: 8 [ 1046.970031][T27673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1046.997444][T27673] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1047.011791][T27673] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1047.040494][T27673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.080959][T27673] usb 2-1: config 0 descriptor?? [ 1047.529439][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.559423][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.579791][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.597149][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.613017][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.620322][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.628258][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.636042][T27673] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 1047.772778][T27673] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 1047.822064][T27673] lenovo 0003:17EF:6047.0002: Failed to switch F7/9/11 mode: -71 [ 1047.856704][T27673] lenovo 0003:17EF:6047.0002: Failed to switch middle button: -71 [ 1047.888417][T27673] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71 [ 1047.922535][T27673] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 1047.965543][T27673] usb 2-1: USB disconnect, device number 75 [ 1048.036331][ T2682] syz.3.13478[2682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.036612][ T2682] syz.3.13478[2682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.127928][ T2678] fido_id[2678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1048.271535][ T788] kernel write not supported for file /amidi2 (pid: 788 comm: kworker/0:2) [ 1048.424642][ T2697] sock: sock_timestamping_bind_phc: sock not bind to device [ 1048.519994][ T27] audit: type=1326 audit(2000000228.040:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1048.610021][ T27] audit: type=1326 audit(2000000228.070:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1048.675791][ T27] audit: type=1326 audit(2000000228.070:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1048.759310][ T27] audit: type=1326 audit(2000000228.090:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1048.829531][ T27] audit: type=1326 audit(2000000228.090:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1048.910695][ T27] audit: type=1326 audit(2000000228.090:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1048.975422][ T27] audit: type=1326 audit(2000000228.090:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1049.014554][ T2714] loop0: detected capacity change from 0 to 256 [ 1049.049594][ T2714] FAT-fs (loop0): Directory bread(block 64) failed [ 1049.079143][ T2714] FAT-fs (loop0): Directory bread(block 65) failed [ 1049.096450][ T2714] FAT-fs (loop0): Directory bread(block 66) failed [ 1049.107969][ T27] audit: type=1326 audit(2000000228.090:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1049.134932][ T2714] FAT-fs (loop0): Directory bread(block 67) failed [ 1049.159422][ T27] audit: type=1326 audit(2000000228.090:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1049.171324][ T2714] FAT-fs (loop0): Directory bread(block 68) failed [ 1049.189551][ T27] audit: type=1326 audit(2000000228.110:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2698 comm="syz.3.13485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dd99de59 code=0x7ffc0000 [ 1049.215721][ T2714] FAT-fs (loop0): Directory bread(block 69) failed [ 1049.241667][ T2714] FAT-fs (loop0): Directory bread(block 70) failed [ 1049.258952][ T2714] FAT-fs (loop0): Directory bread(block 71) failed [ 1049.270609][ T2714] FAT-fs (loop0): Directory bread(block 72) failed [ 1049.277263][ T2714] FAT-fs (loop0): Directory bread(block 73) failed [ 1050.201219][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1050.399068][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1050.416060][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.437403][ T9] usb 4-1: Product: syz [ 1050.450537][ T9] usb 4-1: Manufacturer: syz [ 1050.455379][ T9] usb 4-1: SerialNumber: syz [ 1050.470781][ T9] usb 4-1: config 0 descriptor?? [ 1050.488651][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1050.547154][ T2759] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1050.549738][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1050.596800][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1050.607047][ T9] usb 4-1: media controller created [ 1050.673011][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1050.700111][ T2737] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1050.739276][ T2737] dvb-usb: bulk message failed: -22 (7/0) [ 1050.854700][ T9] DVB: Unable to find symbol mt352_attach() [ 1051.021971][ T9] DVB: Unable to find symbol nxt6000_attach() [ 1051.040516][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1051.076107][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 1051.089649][ T2772] loop0: detected capacity change from 0 to 1024 [ 1051.098995][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 1051.140608][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1051.167475][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1051.193429][ T2772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.213059][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1051.282574][ T9] usb 4-1: USB disconnect, device number 73 [ 1051.309262][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.569673][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1051.597431][ T2792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1051.647603][ T2792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1051.696383][ T2794] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1051.711079][ T2794] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1051.717680][ T2794] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1051.753064][ T2794] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1051.759713][ T2794] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1051.800925][ T2794] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1051.820641][ T2794] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1051.861900][ T2794] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1051.878830][ T2794] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1051.902043][ T2794] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1051.937959][ T2794] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1051.946182][ T2794] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1051.962293][ T2794] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 1051.969294][ T2794] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1052.411716][ T2817] team0: left promiscuous mode [ 1052.431195][ T2817] vxcan1: left promiscuous mode [ 1052.461620][ T2817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13525'. [ 1052.500954][ T2817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1052.557336][ T2826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13527'. [ 1052.773358][ T2835] loop1: detected capacity change from 0 to 16 [ 1052.816570][ T2835] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1052.868335][ T2842] loop0: detected capacity change from 0 to 512 [ 1052.877821][ T2842] EXT4-fs: inline encryption not supported [ 1052.920105][ T2842] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.13532: corrupted in-inode xattr: e_value size too large [ 1052.971197][ T2842] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.13532: couldn't read orphan inode 15 (err -117) [ 1052.994065][ T2842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.066224][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.303109][ T2853] loop0: detected capacity change from 0 to 1024 [ 1053.455258][ T2853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.484229][ T2858] mkiss: ax0: crc mode is auto. [ 1053.593021][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 1053.593042][ T27] audit: type=1800 audit(2000000233.120:792): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13536" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1053.728741][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.828211][ T2869] loop1: detected capacity change from 0 to 256 [ 1053.907130][ T2869] FAT-fs (loop1): Directory bread(block 64) failed [ 1053.950570][ T2869] FAT-fs (loop1): Directory bread(block 65) failed [ 1053.968250][ T2869] FAT-fs (loop1): Directory bread(block 66) failed [ 1053.984430][ T2869] FAT-fs (loop1): Directory bread(block 67) failed [ 1053.995516][ T2869] FAT-fs (loop1): Directory bread(block 68) failed [ 1054.005409][ T2869] FAT-fs (loop1): Directory bread(block 69) failed [ 1054.014996][ T2869] FAT-fs (loop1): Directory bread(block 70) failed [ 1054.030754][ T2869] FAT-fs (loop1): Directory bread(block 71) failed [ 1054.071359][ T2869] FAT-fs (loop1): Directory bread(block 72) failed [ 1054.092411][ T2869] FAT-fs (loop1): Directory bread(block 73) failed [ 1054.435611][ T2884] loop0: detected capacity change from 0 to 256 [ 1054.908199][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.969531][ T2901] loop0: detected capacity change from 0 to 1024 [ 1055.064577][ T2901] hfsplus: bad catalog entry type [ 1055.558771][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1055.564897][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1055.575305][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1055.700619][ T9] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1055.784831][ T2912] loop2: detected capacity change from 0 to 512 [ 1055.852985][ T2912] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1055.879108][ T2912] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.13562: inode has both inline data and extents flags [ 1055.899234][ T2912] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.13562: couldn't read orphan inode 15 (err -117) [ 1055.915404][ T2912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.942785][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.980890][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1056.025688][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1056.054867][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.072033][ T2921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13565'. [ 1056.096029][ T9] usb 4-1: config 0 descriptor?? [ 1056.117481][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1056.167838][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1056.192862][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1056.231176][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1056.253878][ T9] usb 4-1: media controller created [ 1056.274951][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1056.309812][ T2912] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1056.332885][ T2927] netlink: 'syz.1.13567': attribute type 3 has an invalid length. [ 1056.335508][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1056.375260][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1056.389003][ T2907] dvb-usb: bulk message failed: -22 (2/0) [ 1056.424670][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input58 [ 1056.477218][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1056.517520][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1056.526534][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.563361][ T9] usb 4-1: USB disconnect, device number 74 [ 1056.666406][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1056.925538][ T2937] vlan2: entered promiscuous mode [ 1056.931390][ T2937] veth1_to_bridge: entered promiscuous mode [ 1056.976399][ T2939] loop2: detected capacity change from 0 to 4096 [ 1057.032626][ T2940] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.044358][ T2939] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1057.078756][ T2939] Remounting filesystem read-only [ 1057.590333][ T2955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1057.860253][ T2964] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1058.026147][ T2969] loop3: detected capacity change from 0 to 128 [ 1058.047789][ T2972] loop0: detected capacity change from 0 to 128 [ 1058.089430][ T2969] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1058.113417][ T2972] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1058.147202][ T2969] hpfs: filesystem error: improperly stopped [ 1058.159596][ T2969] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1058.185732][ T2972] ext4 filesystem being mounted at /3497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.222885][ T2969] hpfs: You really don't want any checks? You are crazy... [ 1058.231034][ T2969] hpfs: hpfs_map_sector(): read error [ 1058.236575][ T2969] hpfs: code page support is disabled [ 1058.244099][ T2969] hpfs: hpfs_map_4sectors(): unaligned read [ 1058.250328][ T2969] hpfs: hpfs_map_4sectors(): unaligned read [ 1058.262500][ T2969] hpfs: filesystem error: unable to find root dir [ 1058.311300][ T2972] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.13589: No space for directory leaf checksum. Please run e2fsck -D. [ 1058.336732][ T2969] hpfs: hpfs_map_4sectors(): unaligned read [ 1058.357157][ T2969] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1058.361182][ T2972] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #2: comm syz.0.13589: Directory block failed checksum [ 1058.602232][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1058.739440][ T2986] loop0: detected capacity change from 0 to 128 [ 1058.798173][ T2986] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1058.848903][ T2986] hpfs: filesystem error: improperly stopped [ 1058.865082][ T2986] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1058.876071][ T2986] hpfs: You really don't want any checks? You are crazy... [ 1058.893620][ T2986] hpfs: hpfs_map_sector(): read error [ 1058.921510][ T2986] hpfs: code page support is disabled [ 1058.927281][ T2986] hpfs: hpfs_map_4sectors(): unaligned read [ 1058.955514][ T2986] hpfs: hpfs_map_4sectors(): unaligned read [ 1058.970109][ T2986] hpfs: filesystem error: unable to find root dir [ 1059.033933][ T2986] hpfs: hpfs_map_4sectors(): unaligned read [ 1059.067873][ T2986] hpfs: hpfs_map_sector(): read error [ 1059.216369][ T2995] loop3: detected capacity change from 0 to 8192 [ 1059.277208][ T2995] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1059.303608][ T2995] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1059.313984][ T2995] REISERFS (device loop3): using ordered data mode [ 1059.321101][ T2995] reiserfs: using flush barriers [ 1059.329342][ T2995] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1059.346893][ T2995] REISERFS (device loop3): checking transaction log (loop3) [ 1059.347172][ T3000] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13599'. [ 1059.367133][ T2995] REISERFS (device loop3): Using r5 hash to sort names [ 1059.376864][ T2995] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1059.511714][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1059.665601][ T3006] loop3: detected capacity change from 0 to 512 [ 1059.695991][ T3008] loop0: detected capacity change from 0 to 1024 [ 1059.703188][ T3006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1059.727493][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.744181][ T3006] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1059.763299][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.794330][ T3006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 1059.806585][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 1059.820837][ T3006] System zones: 1-12 [ 1059.825254][ T3006] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1059.825349][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.849133][ T9] usb 2-1: config 0 descriptor?? [ 1059.882414][ T3006] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.13602: invalid indirect mapped block 2 (level 2) [ 1059.931303][ T3006] EXT4-fs (loop3): Remounting filesystem read-only [ 1059.938314][ T3006] EXT4-fs (loop3): 1 truncate cleaned up [ 1059.965735][ T3006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1060.054281][ T3011] loop2: detected capacity change from 0 to 1024 [ 1060.240211][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1060.544864][T27675] usb 2-1: USB disconnect, device number 76 [ 1060.658798][ T3026] loop2: detected capacity change from 0 to 256 [ 1060.671847][ T3026] exfat: Deprecated parameter 'namecase' [ 1060.677956][ T3026] exfat: Deprecated parameter 'namecase' [ 1060.710201][ T3026] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1061.004776][ T3033] loop2: detected capacity change from 0 to 16 [ 1061.044319][ T3033] erofs: (device loop2): mounted with root inode @ nid 36. [ 1061.347200][ T3038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.367840][T27675] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1061.421654][ T3038] EXT4-fs error (device loop2): ext4_readdir:223: inode #2: comm syz.2.13616: path (unknown): directory fails checksum at offset 0 [ 1061.503726][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.594825][T27675] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1061.597094][ T3046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1061.648884][T27675] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1061.670705][T27675] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1061.693776][T27675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.743398][T27675] usb 4-1: config 0 descriptor?? [ 1062.213532][T27675] itetech 0003:048D:8595.0004: unknown main item tag 0x2 [ 1062.249830][T27675] itetech 0003:048D:8595.0004: unknown main item tag 0x6 [ 1062.277763][T27675] itetech 0003:048D:8595.0004: ignoring exceeding usage max [ 1062.328349][T27675] itetech 0003:048D:8595.0004: hidraw0: USB HID v0.81 Device [HID 048d:8595] on usb-dummy_hcd.3-1/input0 [ 1062.376045][ T3059] set_capacity_and_notify: 2 callbacks suppressed [ 1062.376109][ T3059] loop2: detected capacity change from 0 to 4096 [ 1062.417216][ T3059] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1062.557282][T27673] usb 4-1: USB disconnect, device number 75 [ 1062.592873][ T3066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13628'. [ 1062.672202][ T3064] fido_id[3064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1063.230702][T27673] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1063.421527][T27673] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1063.429923][T27673] usb 3-1: config 0 has no interface number 0 [ 1063.451737][T27673] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1063.473319][T27673] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 1063.492666][ T3084] loop1: detected capacity change from 0 to 256 [ 1063.499225][T27673] usb 3-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1063.537174][T27673] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1063.553872][ T3085] loop0: detected capacity change from 0 to 1024 [ 1063.567830][T27673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.616858][ T3085] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1063.630238][T27673] usb 3-1: config 0 descriptor?? [ 1063.646781][ T3075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1063.661611][ T3084] FAT-fs (loop1): Directory bread(block 64) failed [ 1063.691020][ T3084] FAT-fs (loop1): Directory bread(block 65) failed [ 1063.697805][ T3084] FAT-fs (loop1): Directory bread(block 66) failed [ 1063.752156][ T3084] FAT-fs (loop1): Directory bread(block 67) failed [ 1063.758952][ T3084] FAT-fs (loop1): Directory bread(block 68) failed [ 1063.800205][ T3084] FAT-fs (loop1): Directory bread(block 69) failed [ 1063.827714][ T3084] FAT-fs (loop1): Directory bread(block 70) failed [ 1063.849615][ T3084] FAT-fs (loop1): Directory bread(block 71) failed [ 1063.884436][ T3084] FAT-fs (loop1): Directory bread(block 72) failed [ 1063.901914][ T3084] FAT-fs (loop1): Directory bread(block 73) failed [ 1064.342093][T27673] usb 3-1: USB disconnect, device number 75 [ 1064.559340][ T3087] loop3: detected capacity change from 0 to 32768 [ 1064.598325][ T3087] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1064.738199][ T3087] XFS (loop3): Ending clean mount [ 1064.929706][ T5777] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1065.583802][ T27] audit: type=1326 audit(2000000245.110:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ff00000 [ 1065.680608][ T27] audit: type=1326 audit(2000000245.110:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ff00000 [ 1065.758046][ T27] audit: type=1326 audit(2000000245.110:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ff00000 [ 1065.830888][ T27] audit: type=1326 audit(2000000245.110:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c619de59 code=0x7ff00000 [ 1065.890337][ T3123] loop0: detected capacity change from 0 to 1024 [ 1065.897277][ T27] audit: type=1326 audit(2000000245.120:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c619daeb code=0x7ff00000 [ 1065.938382][ T27] audit: type=1326 audit(2000000245.120:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c619daeb code=0x7ff00000 [ 1065.987542][ T27] audit: type=1326 audit(2000000245.120:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c619daeb code=0x7ff00000 [ 1066.060810][ T27] audit: type=1326 audit(2000000245.120:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c619daeb code=0x7ff00000 [ 1066.130610][ T27] audit: type=1326 audit(2000000245.120:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c619daeb code=0x7ff00000 [ 1066.187125][ T27] audit: type=1326 audit(2000000245.120:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.1.13649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c619daeb code=0x7ff00000 [ 1066.550908][T27675] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1066.792007][T27675] usb 2-1: Using ep0 maxpacket: 8 [ 1066.824553][T27675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.850504][T27675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1066.870510][T27675] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 1066.905077][T27675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.923465][T27675] usb 2-1: config 0 descriptor?? [ 1067.385155][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.405959][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.420849][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.437473][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.447256][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.460582][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.469464][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.491812][T27675] wacom 0003:056A:0027.0006: unknown main item tag 0x0 [ 1067.500317][T27675] wacom 0003:056A:0027.0006: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 1067.555220][T27675] wacom 0003:056A:0027.0006: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 1067.622930][T27675] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.0006/input/input59 [ 1067.895010][ T3165] netlink: 'syz.0.13669': attribute type 5 has an invalid length. [ 1067.938569][T27675] usb 2-1: USB disconnect, device number 77 [ 1068.143859][ T3174] Bluetooth: MGMT ver 1.22 [ 1068.424019][ T3181] loop3: detected capacity change from 0 to 512 [ 1068.480751][ T3181] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.13677: inode has both inline data and extents flags [ 1068.624199][ T3181] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.13677: couldn't read orphan inode 15 (err -117) [ 1068.665248][ T3181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.766744][ T3181] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1068.928583][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.177105][ T3199] loop2: detected capacity change from 0 to 256 [ 1069.205353][ T3199] exfat: Deprecated parameter 'namecase' [ 1069.242857][ T3199] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1069.411412][T27673] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1069.616261][T27673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.642054][T27673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1069.660914][T27673] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1069.681145][T27673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.703572][T27673] usb 4-1: config 0 descriptor?? [ 1069.732723][T27673] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1069.751424][T27673] dvb-usb: bulk message failed: -22 (3/0) [ 1069.769205][T27673] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1069.804379][T27673] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1069.851077][T27673] usb 4-1: media controller created [ 1069.858435][T27673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.904791][T27673] dvb-usb: bulk message failed: -22 (6/0) [ 1069.920982][T27673] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1069.953637][T27673] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 1070.010651][ T3197] dibusb: i2c wr: len=61 is too big! [ 1070.010651][ T3197] [ 1070.032904][T27673] dvb-usb: schedule remote query interval to 150 msecs. [ 1070.039952][T27673] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1070.103808][T27673] usb 4-1: USB disconnect, device number 76 [ 1070.203449][T27673] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1070.575341][ T3230] tipc: Started in network mode [ 1070.587803][ T3230] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 1070.628802][ T3230] tipc: Enabling of bearer rejected, failed to enable media [ 1071.036818][ T3243] loop2: detected capacity change from 0 to 16 [ 1071.057841][ T3243] erofs: (device loop2): mounted with root inode @ nid 36. [ 1071.128521][ T3243] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 1071.194380][ T3246] usb usb8: usbfs: process 3246 (syz.0.13704) did not claim interface 0 before use [ 1071.391734][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 1071.391756][ T27] audit: type=1326 audit(2000000250.910:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.479696][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13707'. [ 1071.492983][ T27] audit: type=1326 audit(2000000250.910:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.522153][ T27] audit: type=1326 audit(2000000250.910:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.571734][ T27] audit: type=1326 audit(2000000250.910:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.619082][ T27] audit: type=1326 audit(2000000250.910:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.651750][ T27] audit: type=1326 audit(2000000250.910:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.677093][ T27] audit: type=1326 audit(2000000250.910:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.704159][ T27] audit: type=1326 audit(2000000250.910:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.771917][ T27] audit: type=1326 audit(2000000250.910:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1071.825921][ T27] audit: type=1326 audit(2000000250.910:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3247 comm="syz.2.13705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe519de59 code=0x7ff00000 [ 1072.295085][ T3262] loop3: detected capacity change from 0 to 4096 [ 1072.327542][ T3262] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1072.724070][ T3255] loop1: detected capacity change from 0 to 32768 [ 1072.800898][ T3255] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1072.976718][ T3255] XFS (loop1): Ending clean mount [ 1073.114552][ T3280] loop0: detected capacity change from 0 to 4096 [ 1073.239941][ T5778] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1073.264671][ T3286] vxcan4: entered allmulticast mode [ 1073.285199][ T3280] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1074.240604][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1074.350657][ T3303] loop0: detected capacity change from 0 to 256 [ 1074.358717][ T3303] exfat: Deprecated parameter 'utf8' [ 1074.406349][ T3303] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 1074.429120][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1074.448934][ T9] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1074.469353][ T9] usb 2-1: Product: syz [ 1074.479738][ T9] usb 2-1: Manufacturer: syz [ 1074.509854][ T9] usb 2-1: config 0 descriptor?? [ 1074.525703][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1074.547433][ T9] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 1074.648839][ T3291] loop3: detected capacity change from 0 to 40427 [ 1074.677976][ T3291] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 1074.713408][ T3291] F2FS-fs (loop3): invalid crc value [ 1074.761725][ T3291] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1074.770247][ T9] usb 2-1: USB disconnect, device number 78 [ 1074.786800][ T9] ftdi_sio 2-1:0.0: device disconnected [ 1074.892363][ T3291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1075.062035][ T5777] syz-executor: attempt to access beyond end of device [ 1075.062035][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1075.120640][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1075.418363][ T3318] loop2: detected capacity change from 0 to 512 [ 1075.494954][ T3318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.560861][ T3318] ext4 filesystem being mounted at /3442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.803530][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.856288][ T3326] loop1: detected capacity change from 0 to 256 [ 1076.019886][ T3326] FAT-fs (loop1): Directory bread(block 64) failed [ 1076.038192][ T3328] loop2: detected capacity change from 0 to 128 [ 1076.060568][ T3326] FAT-fs (loop1): Directory bread(block 65) failed [ 1076.067439][ T3326] FAT-fs (loop1): Directory bread(block 66) failed [ 1076.086348][ T3328] EXT4-fs: Ignoring removed mblk_io_submit option [ 1076.100889][ T3326] FAT-fs (loop1): Directory bread(block 67) failed [ 1076.107649][ T3326] FAT-fs (loop1): Directory bread(block 68) failed [ 1076.136910][ T3328] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1076.160602][ T3326] FAT-fs (loop1): Directory bread(block 69) failed [ 1076.167375][ T3326] FAT-fs (loop1): Directory bread(block 70) failed [ 1076.199086][ T3328] ext4 filesystem being mounted at /3443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.246568][ T3326] FAT-fs (loop1): Directory bread(block 71) failed [ 1076.259125][ T3326] FAT-fs (loop1): Directory bread(block 72) failed [ 1076.266079][ T3326] FAT-fs (loop1): Directory bread(block 73) failed [ 1076.430513][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1076.430535][ T27] audit: type=1800 audit(2000000255.950:909): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13738" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 1076.599017][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1076.808609][ T3343] loop1: detected capacity change from 0 to 64 [ 1077.067919][ T3346] nbd: must specify a size in bytes for the device [ 1077.247439][ T3333] loop0: detected capacity change from 0 to 32768 [ 1077.311069][ T3333] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1077.350723][T27405] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1077.484347][ T3333] XFS (loop0): Ending clean mount [ 1077.498993][ T3333] XFS (loop0): Quotacheck needed: Please wait. [ 1077.583066][T27405] usb 3-1: Using ep0 maxpacket: 32 [ 1077.619466][T27405] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1077.677694][T27405] usb 3-1: config 0 has no interface number 0 [ 1077.698426][ T3333] XFS (loop0): Quotacheck: Done. [ 1077.716102][T27405] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1077.725518][T27405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.734345][T27405] usb 3-1: Product: syz [ 1077.738688][T27405] usb 3-1: Manufacturer: syz [ 1077.745099][T27405] usb 3-1: SerialNumber: syz [ 1077.753835][T27405] usb 3-1: config 0 descriptor?? [ 1077.762926][T27405] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1077.847991][ T27] audit: type=1800 audit(2000000257.370:910): pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13739" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 1077.935884][ T5779] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1077.978021][T27405] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1078.071925][T27405] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1078.377575][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1078.388318][T27405] usb 3-1: USB disconnect, device number 76 [ 1078.403124][T27405] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1078.472205][T27405] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1078.521977][T27405] quatech2 3-1:0.51: device disconnected [ 1079.117283][ T3384] loop3: detected capacity change from 0 to 32768 [ 1079.158762][ T3384] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.13754 (3384) [ 1079.227958][ T3384] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1079.240251][ T3384] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1079.251083][ T3384] BTRFS info (device loop3): using free space tree [ 1079.357013][ T3384] BTRFS info (device loop3): enabling ssd optimizations [ 1079.370652][ T3384] BTRFS info (device loop3): auto enabling async discard [ 1079.513005][ T5777] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1079.534500][ T3402] loop1: detected capacity change from 0 to 4096 [ 1079.789591][ T3402] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1080.720901][ T3442] loop1: detected capacity change from 0 to 4096 [ 1080.733686][ T3442] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1080.903849][ T3442] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1081.025247][ T3442] ntfs3: loop1: ino=5, "/" directory corrupted [ 1081.662745][ T3444] loop2: detected capacity change from 0 to 32768 [ 1081.713629][ T3444] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1081.722661][T27675] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1081.737738][ T3469] macsec0: entered promiscuous mode [ 1081.819435][ T3444] XFS (loop2): Ending clean mount [ 1081.936185][T27675] usb 4-1: Using ep0 maxpacket: 8 [ 1081.972322][T27675] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.990501][T27675] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1081.999603][T27675] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1082.029779][T27675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.129425][ T5780] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1082.341232][T27675] usb 4-1: USB disconnect, device number 77 [ 1083.022238][ T3501] loop3: detected capacity change from 0 to 16 [ 1083.068293][ T3503] bridge0: port 1(geneve1) entered blocking state [ 1083.077446][ T3503] bridge0: port 1(geneve1) entered disabled state [ 1083.085543][ T3501] erofs: (device loop3): mounted with root inode @ nid 36. [ 1083.095725][ T3503] geneve1: entered allmulticast mode [ 1083.128026][ T3503] geneve1: entered promiscuous mode [ 1083.138840][ T3503] bridge0: port 1(geneve1) entered blocking state [ 1083.146991][ T3503] bridge0: port 1(geneve1) entered forwarding state [ 1083.171185][ T3501] syz.3.13797: attempt to access beyond end of device [ 1083.171185][ T3501] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1083.212333][ T3501] syz.3.13797: attempt to access beyond end of device [ 1083.212333][ T3501] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1083.979436][ T3497] loop0: detected capacity change from 0 to 40427 [ 1084.021816][ T3497] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1084.056254][ T3497] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1084.086496][ T3497] F2FS-fs (loop0): invalid crc value [ 1084.116893][ T3497] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1084.337930][ T3497] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1084.367507][ T3497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1084.590194][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13810'. [ 1084.652059][ T3515] loop1: detected capacity change from 0 to 32768 [ 1084.687115][ T3515] [ 1084.687115][ T3515] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1084.687115][ T3515] [ 1084.802384][ T27] audit: type=1800 audit(2000000264.320:911): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13803" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 1084.854534][ T3515] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1084.854534][ T3515] [ 1084.933543][ T3538] team0: entered allmulticast mode [ 1085.013522][ T3515] xtLookup: xtSearch returned -5 [ 1085.018730][ T3515] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1085.018730][ T3515] [ 1085.226634][ T59] [ 1085.226634][ T59] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1085.226634][ T59] [ 1085.248219][ T59] [ 1085.248219][ T59] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1085.248219][ T59] [ 1085.280163][ T5778] [ 1085.280163][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1085.280163][ T5778] [ 1085.295415][ T5778] [ 1085.295415][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1085.295415][ T5778] [ 1085.320466][ T113] ================================================================== [ 1085.328634][ T113] BUG: KASAN: slab-use-after-free in __lock_acquire+0x10c/0x7d80 [ 1085.336535][ T113] Read of size 8 at addr ffff88807c27c0d8 by task jfsCommit/113 [ 1085.344309][ T113] [ 1085.346689][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 1085.353955][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.364070][ T113] Call Trace: [ 1085.367404][ T113] [ 1085.370390][ T113] dump_stack_lvl+0x18c/0x250 [ 1085.375170][ T113] ? __lock_acquire+0x7d80/0x7d80 [ 1085.380272][ T113] ? show_regs_print_info+0x20/0x20 [ 1085.385552][ T113] ? load_image+0x420/0x420 [ 1085.390144][ T113] ? mark_lock+0x94/0x320 [ 1085.394573][ T113] ? __virt_addr_valid+0x10c/0x380 [ 1085.399758][ T113] ? __virt_addr_valid+0x10c/0x380 [ 1085.404948][ T113] ? __virt_addr_valid+0x10c/0x380 [ 1085.410143][ T113] print_report+0xa8/0x210 [ 1085.414654][ T113] ? __lock_acquire+0x10c/0x7d80 [ 1085.419685][ T113] kasan_report+0x117/0x150 [ 1085.424275][ T113] ? __lock_acquire+0x10c/0x7d80 [ 1085.429301][ T113] __lock_acquire+0x10c/0x7d80 [ 1085.434144][ T113] ? mark_lock+0x94/0x320 [ 1085.438569][ T113] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1085.444620][ T113] ? read_lock_is_recursive+0x20/0x20 [ 1085.450067][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 1085.455352][ T113] ? finish_task_switch+0x262/0x8f0 [ 1085.460660][ T113] ? verify_lock_unused+0x140/0x140 [ 1085.465929][ T113] ? __schedule+0x15b6/0x4660 [ 1085.470689][ T113] ? lock_chain_count+0x20/0x20 [ 1085.475613][ T113] lock_acquire+0x19e/0x420 [ 1085.480179][ T113] ? __mutex_lock+0x3a6/0xc80 [ 1085.484920][ T113] ? asan.module_dtor+0x20/0x20 [ 1085.489839][ T113] ? read_lock_is_recursive+0x20/0x20 [ 1085.495303][ T113] _raw_spin_lock+0x2e/0x40 [ 1085.499900][ T113] ? __mutex_lock+0x3a6/0xc80 [ 1085.504652][ T113] __mutex_lock+0x3a6/0xc80 [ 1085.509235][ T113] ? jfs_syncpt+0x25/0x90 [ 1085.513642][ T113] ? mutex_lock_nested+0x20/0x20 [ 1085.518658][ T113] ? __rwlock_init+0x150/0x150 [ 1085.523558][ T113] jfs_syncpt+0x25/0x90 [ 1085.527782][ T113] txEnd+0x2e5/0x520 [ 1085.531748][ T113] jfs_lazycommit+0x5c3/0xaa0 [ 1085.536510][ T113] ? txFreelock+0x5a0/0x5a0 [ 1085.541097][ T113] ? do_task_dead+0xd0/0xd0 [ 1085.545663][ T113] ? _raw_spin_unlock+0x40/0x40 [ 1085.550587][ T113] ? __kthread_parkme+0x71/0x1c0 [ 1085.555599][ T113] ? __kthread_parkme+0x15b/0x1c0 [ 1085.560744][ T113] kthread+0x2fa/0x390 [ 1085.564880][ T113] ? txFreelock+0x5a0/0x5a0 [ 1085.569482][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1085.574139][ T113] ret_from_fork+0x48/0x80 [ 1085.578607][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1085.583249][ T113] ret_from_fork_asm+0x11/0x20 [ 1085.588169][ T113] [ 1085.591322][ T113] [ 1085.593686][ T113] Allocated by task 3515: [ 1085.598054][ T113] kasan_set_track+0x4e/0x70 [ 1085.602712][ T113] __kasan_kmalloc+0x8f/0xa0 [ 1085.607356][ T113] lmLogOpen+0x2df/0xfa0 [ 1085.611641][ T113] jfs_mount_rw+0xf4/0x670 [ 1085.616118][ T113] jfs_fill_super+0x581/0xab0 [ 1085.620839][ T113] mount_bdev+0x21c/0x2c0 [ 1085.625219][ T113] legacy_get_tree+0xea/0x180 [ 1085.629990][ T113] vfs_get_tree+0x8c/0x280 [ 1085.634469][ T113] do_new_mount+0x24a/0xa40 [ 1085.639019][ T113] __se_sys_mount+0x2e7/0x3d0 [ 1085.643739][ T113] do_syscall_64+0x55/0xb0 [ 1085.648215][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.654171][ T113] [ 1085.656566][ T113] Freed by task 5778: [ 1085.661283][ T113] kasan_set_track+0x4e/0x70 [ 1085.665942][ T113] kasan_save_free_info+0x28/0x40 [ 1085.671019][ T113] ____kasan_slab_free+0x126/0x1f0 [ 1085.676176][ T113] slab_free_freelist_hook+0x130/0x1a0 [ 1085.681672][ T113] __kmem_cache_free+0xba/0x1f0 [ 1085.686618][ T113] lmLogClose+0x296/0x530 [ 1085.691000][ T113] jfs_umount+0x2ca/0x3a0 [ 1085.695373][ T113] jfs_put_super+0x8c/0x190 [ 1085.699929][ T113] generic_shutdown_super+0x134/0x2b0 [ 1085.705344][ T113] kill_block_super+0x44/0x90 [ 1085.710095][ T113] deactivate_locked_super+0x97/0x100 [ 1085.715509][ T113] cleanup_mnt+0x3d7/0x460 [ 1085.719980][ T113] task_work_run+0x1d4/0x260 [ 1085.724625][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 1085.729975][ T113] exit_to_user_mode_prepare+0xee/0x180 [ 1085.735586][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 1085.741095][ T113] do_syscall_64+0x61/0xb0 [ 1085.745565][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.751517][ T113] [ 1085.753879][ T113] Last potentially related work creation: [ 1085.759625][ T113] kasan_save_stack+0x3e/0x60 [ 1085.764355][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 1085.769786][ T113] insert_work+0x3d/0x310 [ 1085.774168][ T113] __queue_work+0xbfd/0xfd0 [ 1085.778719][ T113] queue_work_on+0x128/0x1f0 [ 1085.783347][ T113] cleanup_net+0x707/0xbb0 [ 1085.787861][ T113] process_scheduled_works+0xa60/0x1600 [ 1085.793455][ T113] worker_thread+0xa5e/0xfe0 [ 1085.798096][ T113] kthread+0x2fa/0x390 [ 1085.802208][ T113] ret_from_fork+0x48/0x80 [ 1085.806667][ T113] ret_from_fork_asm+0x11/0x20 [ 1085.811484][ T113] [ 1085.813833][ T113] Second to last potentially related work creation: [ 1085.820884][ T113] kasan_save_stack+0x3e/0x60 [ 1085.825612][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 1085.831036][ T113] kvfree_call_rcu+0xee/0x780 [ 1085.835772][ T113] neigh_periodic_work+0x3f6/0xd70 [ 1085.841023][ T113] process_scheduled_works+0xa60/0x1600 [ 1085.846628][ T113] worker_thread+0xa5e/0xfe0 [ 1085.851315][ T113] kthread+0x2fa/0x390 [ 1085.855428][ T113] ret_from_fork+0x48/0x80 [ 1085.859884][ T113] ret_from_fork_asm+0x11/0x20 [ 1085.864690][ T113] [ 1085.867058][ T113] The buggy address belongs to the object at ffff88807c27c000 [ 1085.867058][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 1085.881258][ T113] The buggy address is located 216 bytes inside of [ 1085.881258][ T113] freed 1024-byte region [ffff88807c27c000, ffff88807c27c400) [ 1085.895230][ T113] [ 1085.897591][ T113] The buggy address belongs to the physical page: [ 1085.904162][ T113] page:ffffea0001f09e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c278 [ 1085.914355][ T113] head:ffffea0001f09e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1085.923334][ T113] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1085.931363][ T113] page_type: 0xffffffff() [ 1085.935751][ T113] raw: 00fff00000000840 ffff888017c41dc0 ffffea000177cc00 dead000000000002 [ 1085.944388][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1085.953013][ T113] page dumped because: kasan: bad access detected [ 1085.959478][ T113] page_owner tracks the page as allocated [ 1085.965232][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5526, tgid 5526 (dhcpcd), ts 62244295942, free_ts 61853044170 [ 1085.986128][ T113] post_alloc_hook+0x1c1/0x200 [ 1085.990941][ T113] get_page_from_freelist+0x2181/0x22a0 [ 1085.996604][ T113] __alloc_pages+0x1f0/0x460 [ 1086.001218][ T113] alloc_slab_page+0x5d/0x180 [ 1086.005932][ T113] new_slab+0x87/0x2d0 [ 1086.010029][ T113] ___slab_alloc+0xc5c/0x12f0 [ 1086.014734][ T113] __kmem_cache_alloc_node+0x11f/0x250 [ 1086.020248][ T113] __kmalloc+0xa7/0x240 [ 1086.024444][ T113] load_elf_binary+0x275/0x2850 [ 1086.029338][ T113] bprm_execve+0xb0b/0x1730 [ 1086.033931][ T113] do_execveat_common+0x501/0x6b0 [ 1086.038999][ T113] __x64_sys_execve+0x92/0xa0 [ 1086.043725][ T113] do_syscall_64+0x55/0xb0 [ 1086.048191][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1086.054153][ T113] page last free stack trace: [ 1086.058871][ T113] free_unref_page_prepare+0x7d7/0x8f0 [ 1086.064396][ T113] free_unref_page+0x32/0x2e0 [ 1086.069133][ T113] __slab_free+0x35a/0x400 [ 1086.073597][ T113] qlist_free_all+0x75/0xd0 [ 1086.078152][ T113] kasan_quarantine_reduce+0x143/0x160 [ 1086.083674][ T113] __kasan_slab_alloc+0x22/0x80 [ 1086.088612][ T113] slab_post_alloc_hook+0x6a/0x4d0 [ 1086.093776][ T113] kmem_cache_alloc_node+0x1af/0x310 [ 1086.099116][ T113] __alloc_skb+0x103/0x2c0 [ 1086.103693][ T113] rtmsg_ifinfo_build_skb+0x83/0x260 [ 1086.109040][ T113] rtmsg_ifinfo+0x8c/0x1a0 [ 1086.113500][ T113] register_netdevice+0x1785/0x1ba0 [ 1086.118753][ T113] lapbeth_new_device+0x305/0x560 [ 1086.123824][ T113] lapbeth_device_event+0x286/0x3a0 [ 1086.129068][ T113] notifier_call_chain+0x18f/0x380 [ 1086.134232][ T113] __dev_notify_flags+0x1ab/0x310 [ 1086.139322][ T113] [ 1086.141687][ T113] Memory state around the buggy address: [ 1086.147357][ T113] ffff88807c27bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1086.155459][ T113] ffff88807c27c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.163572][ T113] >ffff88807c27c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.171672][ T113] ^ [ 1086.178645][ T113] ffff88807c27c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.186780][ T113] ffff88807c27c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1086.194879][ T113] ================================================================== [ 1086.202989][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1086.210227][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 1086.217462][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.227561][ T113] Call Trace: [ 1086.230880][ T113] [ 1086.233848][ T113] dump_stack_lvl+0x18c/0x250 [ 1086.238596][ T113] ? show_regs_print_info+0x20/0x20 [ 1086.243848][ T113] ? load_image+0x420/0x420 [ 1086.248407][ T113] panic+0x2ca/0x720 [ 1086.252351][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 1086.256907][ T113] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1086.262881][ T113] ? _raw_spin_unlock+0x40/0x40 [ 1086.267813][ T113] ? print_memory_metadata+0x314/0x400 [ 1086.273328][ T113] ? __lock_acquire+0x10c/0x7d80 [ 1086.278324][ T113] check_panic_on_warn+0x84/0xa0 [ 1086.283321][ T113] ? __lock_acquire+0x10c/0x7d80 [ 1086.288307][ T113] end_report+0x6f/0x130 [ 1086.292597][ T113] kasan_report+0x128/0x150 [ 1086.297151][ T113] ? __lock_acquire+0x10c/0x7d80 [ 1086.302147][ T113] __lock_acquire+0x10c/0x7d80 [ 1086.307039][ T113] ? mark_lock+0x94/0x320 [ 1086.311444][ T113] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1086.317473][ T113] ? read_lock_is_recursive+0x20/0x20 [ 1086.322896][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 1086.328142][ T113] ? finish_task_switch+0x262/0x8f0 [ 1086.333390][ T113] ? verify_lock_unused+0x140/0x140 [ 1086.338644][ T113] ? __schedule+0x15b6/0x4660 [ 1086.343409][ T113] ? lock_chain_count+0x20/0x20 [ 1086.348317][ T113] lock_acquire+0x19e/0x420 [ 1086.352877][ T113] ? __mutex_lock+0x3a6/0xc80 [ 1086.357609][ T113] ? asan.module_dtor+0x20/0x20 [ 1086.362512][ T113] ? read_lock_is_recursive+0x20/0x20 [ 1086.367943][ T113] _raw_spin_lock+0x2e/0x40 [ 1086.372509][ T113] ? __mutex_lock+0x3a6/0xc80 [ 1086.377236][ T113] __mutex_lock+0x3a6/0xc80 [ 1086.381787][ T113] ? jfs_syncpt+0x25/0x90 [ 1086.386161][ T113] ? mutex_lock_nested+0x20/0x20 [ 1086.391142][ T113] ? __rwlock_init+0x150/0x150 [ 1086.395953][ T113] jfs_syncpt+0x25/0x90 [ 1086.400153][ T113] txEnd+0x2e5/0x520 [ 1086.404089][ T113] jfs_lazycommit+0x5c3/0xaa0 [ 1086.408811][ T113] ? txFreelock+0x5a0/0x5a0 [ 1086.413362][ T113] ? do_task_dead+0xd0/0xd0 [ 1086.417910][ T113] ? _raw_spin_unlock+0x40/0x40 [ 1086.422886][ T113] ? __kthread_parkme+0x71/0x1c0 [ 1086.427867][ T113] ? __kthread_parkme+0x15b/0x1c0 [ 1086.432946][ T113] kthread+0x2fa/0x390 [ 1086.437069][ T113] ? txFreelock+0x5a0/0x5a0 [ 1086.441628][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1086.446260][ T113] ret_from_fork+0x48/0x80 [ 1086.450738][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1086.455376][ T113] ret_from_fork_asm+0x11/0x20 [ 1086.460215][ T113] [ 1086.463866][ T113] Kernel Offset: disabled [ 1086.468219][ T113] Rebooting in 86400 seconds..