last executing test programs: 1m4.822926468s ago: executing program 0 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000480)={0x2, 0x0, [{0x303}, {0xb90, 0x0, 0x8}]}) 1m3.852107492s ago: executing program 0 (id=270): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") unshare(0x22020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x500, 0x18, 0x4, 0x1000000000000}) 1m3.5392564s ago: executing program 0 (id=276): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xe, 0x0, 0x0) 1m3.375563164s ago: executing program 0 (id=280): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400c, &(0x7f00000004c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000500)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6") syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000000b40)='./file0\x00', 0x0, 0xfffffdf3) 1m2.913559616s ago: executing program 0 (id=285): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) 1m2.174933874s ago: executing program 0 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="1c00e7"], 0x84}}, 0x0) 1m2.126738486s ago: executing program 32 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="1c00e7"], 0x84}}, 0x0) 5.22289849s ago: executing program 4 (id=1044): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 4.924727277s ago: executing program 4 (id=1048): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a) 3.935778022s ago: executing program 4 (id=1069): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.802673215s ago: executing program 1 (id=1073): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000004000000002e0000000c000500000000020000000008000200", @ANYRES32=r0, @ANYBLOB="05002b0000000000060006000200000006000400ff"], 0x40}}, 0x40080) 3.62103077s ago: executing program 1 (id=1074): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffc23, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffc, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 3.499488253s ago: executing program 1 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0xd}, {0xfff2, 0xf}, {0xc, 0xc}}}, 0x24}}, 0x0) 3.358914116s ago: executing program 1 (id=1076): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) 3.040466194s ago: executing program 4 (id=1078): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) syz_usb_connect$uac2(0x5, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000002035121000400001020301090289000301000002080b0101010a20020904000000010120000924010700062900b20924037f950b240606030a00020004000c2403020404060603810080090401000001022000090401010101022000090501090002069980082501011b1c00000904020000010220000904020101010220000905820900020e0452082501043c40ce0300000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.319072517s ago: executing program 1 (id=1080): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a) 1.22614166s ago: executing program 4 (id=1084): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f00000002c0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGAIkkYAFGxYoW2RrMoksHEC2QU5k4Ylmw4IPAUJiiRBLVnyALNiy4wNgyUYCZYFSqGbOGdd0ut0zGU9Xj8/vJ42rnj5V06f87+rLVFWfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiB9//0bkqIi7/Mt1wIuL/oh/Ri1hp6rWIWFk7kZcfRMRzsd0cz0bEcCmiWX/7n6cjXo2Ij56KuHf/9npz8/l99uN7f/r773/8xA//9sfhmf/8+Wb/tWnL3br1m3//5c7hthkAAABKU9d1XaWP+SfT5/te150CAOYiv/7XSb59Vv3dAy6vVqvVarW6+7qtnuxOu4iIzfY6zXsGh+MB4JjZjI+77gIdkn/RBhHxRNedABZa1XUHOBL37t9er1K+Vfv1YG2nPZ8Lsif/zWr3+o5p01nGzzGZ1+NrK/rxzJT+rMypD4sk598bz//yTvsoLXfU+c/LtPxHO5c+FSfn3x/Pf8zjk39vYv6lyvkPDpR/X/4AAAAAALDA8t//T3R8/Hfp8JuyLw87/rs2pz4AAAAAAAAAwKN22PH/dhn/DwAAABZW81m98dunHtw27bvYmtvfqiKeHFseKEy6WGa1634AAAAAAAAAAAAAQEkGO+fwvlVFDCPiydXVuq6bn7bx+qAOu/5xV/r2Q8m6fpIHAIAdHz01di1/FbHcKoerq6t1vbyyWq/WK0v5/exoableaX2uzdPmtqXRPt4QD0Z188uWW+u1zfq8PKt9/Pc19zWq+/vo2Hx0EDQAtOy8Gt3zivSYqeuno+t3ORwP9v/Hj/2f/ej6cQoAAAAcvbqu6yp9nffJNL5fr+tOAQBzkV//x48LqB99/d8F649arVary6vb6snutIuI2Gyv07xnMBw/ABwzm/Fx112gQ/Iv2iAinuu6E8BCq7ruAEfi3v3b61XKt2q/HqTx3fO5IHvy36y218vrT5rOMn6OybweX1vRj2em9OfZOfVhkeT8e+P5X95pH6Xljjr/eZmWf7OdJzroT9dy/v3x/Mc8Pvn3JuZfqpz/4ED59+UPAAAAAAALLP/9/8RCHf8dfdbNmelhx3/XjuxeAQAAAAAAAOBo3bt/ez1f95qP/39uwnKu/3w85fwr+Rcp598by//LY8v1W/N333yQ/7/u317/w81//n+e7jf/pTxTpUdWlR4RVbqnapCmh9m6T9sa9kfNPQ2rXn+Qzvmph+/E1bgWG3F2z7K99P/xoP3cnvamp8Pt9rq/035+T/tgtz2vf2FP+zCd6VSv5PbTsR4/i2vx9nZ707Y0Y/uXZ7TXM9pz/n37f5Fy/oPWT5P/amqvxqaNux/2PrXft6eT7ueNq5//9dmj35yZtqK/u21tzfa90EF/tv9PnhjFL25sXD9968rNm9fPRZrsufV8pMkjlvMfpp/d5/8Xd9rz8357f7374ejA+S+KrRhMzf/F1nyzvS/NuW9dyPmP0k/O/+3UPnn/P875T9//X+6gPwAAAAAAAAAAAAAAAPAwdV1vXyL6RkRcTNf/dHVtJgAwX/n1v07y7fOq+3O+P7X6mNfVgvVnrvUn9WL1R60+jnVbPdnr7SIi/tpep3nP8KtJvwwAWFw7X+z1j667QWc+kX+58vf9NdNTXXcGmKsb73/wkyvXrm1cv9F1TwAAAAAAAACAzyqP/7nWGv/5VF3Xd8aW2zP+65uxdtjxPwd5ZneA0SkDVfcPvk0Ps9Ub9Xut4cafj2njfw935x42/vdgxv0NZ7SPZrQvzWhfntE+8UKPlpz/863xzk9FxMmx4ddLGP91fMz7EuT8X2g9npv8vzS2XDv/+nfHOf/envzP3Hzv52duvP/BK1ffu/LuxrsbP71w7tzZCxcvXrp06cw7V69tnN35t8MeH62cfx772nmgZcn558zlX5ac/xdSLf+y5Py/mGr5lyXnn9/vyb8sOf/82Uf+Zcn5v5Rq+Zcl5/+VVMu/LDn/l1Mt/7Lk/L+aavmXJef/SqrlX5ac/+lUy78sOf8zqd5n/itH3S/mI+efj3DZ/8uS889nNsi/LDn/86mWf1ly/hdSLf+y5PxfTbX8y5Lz/1qq5V+WnP/FVMu/LDn/r6da/mXJ+V9KtfzLkvP/RqrlX5ac/zdTLf+y5PxfS7X8y5Lz/1aq5V+WnP+3Uy3/suT8v5Nq+Zcl5/96quVflgff/2/GjBkzeabrZyYAAAAAAAAAAAAAYNw8TifuehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3r3FyHXXdwA/e/XagcRASJ3UkLVjjHE22fUlvtC6mHBtuJVAKPSC7XrXZsE3vHYJNJKNAiUqRkUVbcNDW0CozUuFVfFAK0B5QK0qVYL2gb4gqko8RFVAAalSW0G2mnP+///OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzba8Ye4zQ1mWNf7L/9iYZS9q/H395Mb8stfe7C0EAAAArtcv8j+fuy1dcHgVN2pa5p9e+d2vLy4uLmbvH/nTsS8sLqYrJrNsbF2W5ddFV//zA0PNywSPZxNDw01fD3dZ/UiX60e7XD/W5frxLtev63L9RJfrl+2AZdYXv4/J72xb/teNxS7Nbs/G8uu2ldzq8aF1w8Pxdzm5ofw2i2MnsvnsVDaXzbQsXyw7lC//zS2Ndb01i+sablrX5sYR8tPHjsdtGAr7eFvLupbuM/rx67PJn/30seN/feHZO8tm193Qcn/Fdu7Y2tjOT4VLim0dytalfRK3c7hpOzeXPCcjLds5lN+u8ff27Xxulds5srSZN1T7cz6RDed//16+n0abf62X9tPmcNn/3JNl2eWlzW5fZtm6suFsQ8slw0vPz0RxRDbuo3EovTQbXdNxumUVx2ljzm5rPU7bXxPx+d8Sbje6wjY0P00//uR40/P+88VrOU6jxqNe6bXSfgz2+rXSL8dgPC6+lz/oJ0qPwW3h8T+2feVjsPTYKTkG0+NuOga3djsGh8dH8m1OT8JQfpulY3BXy/Ij+ZqG8vnM9s7H4PSF0+emFz7+ifvmTx87OXdy7syeXbtm9uzbd+DAgekT86fmZoo/r3Fv978N2XB6DWwN+y6+Bl7dtmzzobr45fFl599rfR1OdHgdbmxbttevw9H2Bzd0Y16Qy4/p4rXx3sZOn7gynK3wGsufn53X/zpMj7vpdTja9Dos/Z5S8jocXcXrsLHMuZ2r+5lltOm/sm1Y+XvB9R2DG5uOwfafR9qPwV7/PNIvx+BEOC5+sHPl7wWbw/Y+MbXWn0dGlh2D6eGGc0/jkvTz/sSBfJQdl3c1rrhlPLu4MHf+/kePXbhwflcWxg3xsqZjpf143dD0mLJlx+vwmo/Xw/OvfOKukss3hn01cV/jj4kVn6vGMnvv7/xc5d/dyvdny6W7szB67Ebvz7Lv5o39OZ5lX/zOJx/+1mNffMOK+7ORNz81ff0/i6dc2nT+HVvh/Btz//PF+tJdPT4yNlq8fkfS3hlrOR+3PlWj+blrKF/3c9OrOx+Phf9u9Pn49g7n401ty/b6fDzW/uDi+Xio2287rk/78zkRjpNTM53Px41lNu1e6zE52vF8fE+YQ2H/vyYkhZSLmo6dlY7btK7R0bHwuEbjGlqP0z0ty4+FbNZY11O7r+043XFPcV8j6dEtuVHH6WTbsr0+TtPvvlY6Toe6/fbt2rQ/nxPhuLh9T+fjtLHM03uv/9y5Pv616dw53u0YHBsZb2zzWDoI8/N9trg+HoP3Z8ezs9mpbDa/djw/nobydU09sLpjcDz8d6PPlZs6HIM72pbt9TGYvo+tdOwNjS5/8D3Q/nxOhOPiyQc6H4ONZd64v7c/u+4Il6Rlmn52bf/92kq/87qrbTe9UMfKaNjO7+zv/LvZxjKnDqw1Z3beT/eGS24p2U/tr9+VXlOz2Y3ZT5vCdj57YOX91NiexjJfOLjK4+lwlmWXPvpg/vve8O8rf3fx+19v+XeXsn/TufTRB3/y4hP/uJbtB2DwPV+MDcX3uqZ/mVrNv/8DAAAAAyHm/uEwE/kfAAAAKiPm/vh/hSfyPwAAAFRGzP2jYSY1yf+b3vjs/POXstTMXwzi9Wk3PFQsFzuuM+HrycUljcsf/Orcf//DpdWtezjLsp8/9Aely296KG5XYTJs59U3tV6+zNfvW9W6jz5yKa23ub/+pXD/8fGs9jAoq+DOZFn2zds+l69n8gNX8vn0Q0fz+fDlJx5vLPPcweLrePtnXlYs/xeh/Hv4xLGW2z8T9sOPwpx5W/n+iLf72pXXbN7/vqX1xdsNbb01f9hPfrC43/g+OZ9/vFg+7ueVtv9bn33qa43lH31V+fZfGi7f/qfC/X41zP99RbF883PQ+Dre7tNh++P64u3u/8q3S7f/6meK5c+9uVjuaJhx/TvC19ve/Ox88/56dOhYy+PK3lIsF9c/8/0/zq+P9xfvv337J45cadkf7cfH0/9W3M902/Lx8rie6O/b1t+4n+bjM67/qT882rKfu63/6sPPvKJxv+3rv7dtuXMf3Zmvf+n+Wt+x6S8//bnS9cXtOfy351oez+F3h9dxWP+THwzHY7j+/64W99f+7gpH3916/onLf2njpZbHE731Z8X6r77uZD7XTazfcMuLXnzr5bsb+y7LvreuuL9u6z/5V2dbtv/LdxT7I14fO/rt619JXP/5j02dObtwcX427dXHbsvfO+ftxfbE7b0tnFvbvz5y9sKH5s5PzkzOZNlkdd9C75p9JcyfFOPyWm+/85HwfN7159/csP1fPxsv//f3FpdfeVvxfevVYbnPh8s3hufvetf/5JY78tf30NPF1y099h7YvO2/DqxqwfD4238uiMf7uZd/KN8Pjevy7xvxdX2d2//D2eJ+vhH262J4Z+atdyytr3n5+N4IV95TvN6ve/+F01x8Xv8mPN/v+FFx/3G74uP9Yfg55tubWs938fj4xqXh9vvP38XjcjifZJeL6+NScX9fee6O0s2L70OSXb4z//pP0v3cuaaHuZKFjy9Mn5o/c/HR6QtzCxemFz7+iSOnz148c+FI/l6eRz7c7fZL56cN+flpdm7f3iw/W50txgvsZm//uUeOz+6f2T47d+LYxRMXHjk3d/7k8YWF43OzC9uPnTgx97Fut5+fPbRr98E9+3dPnZyfPXTg4ME9B6fmz5xtbEaxUV3sm/nI1JnzR/KbLBzae3DXAw/snZk6fXZ27tD+mZmpi91un39vmmrc+venzs+dOnZh/vTc1ML8J+YO7Tq4b9/uru8GePrciYXJ6fMXz0xfXJg7P108lskL+cWN733dbk81LfxH8fNsu6Hijfiyd927L70/a8NXP7niXRWLtL2B6LPhvWj++SXnDqzm65j7x8JMapL/AQAAoA5i7h8PM5H/AQAAoDJi7l8XZiL/AwAAQGXE3D8RZlKT/F+5/v+mS6tav/6//n/z/qpp/3/xUl37/+/pt/5/cb7Q/+8N/f/O9P+70P/X/9f/1/+np/qt/x9z//osq2X+BwAAgDqIuX9DmIn8DwAAAJURc/8tYSbyPwAAAFRGzP0vCjOpSf7X/9f/1/+vbf+/vp//r/9fafr/nen/d7H6/v9QVtH+f1av/v/lXm6//r/+P8v1W/8/5v4Xh5nUJP8DAABAHcTcf2uYifwPAAAAlRFz/21hJvI/AAAAVEbM/RvDTGqS//X/9f/1//X/9f/L16//P5gq3/9vf4Gskf5/Fz7/3+f/6//r/7MGi+u6LdFv/f+Y+18SZlKT/A8AAAB1EHP/S8NM5H8AAADoP6PXdrOY+18WZrIs/1/jCgAAAICbLub+27O2InhN/v1f/1//X/9f/1//v3z9q+//j2T6//2j8v3/66T/34X+v/6//r/+Pz3Vb/3/PPdnE9nLw0xqkv8BAACgDmLuvyPMRP4HAACAyoi5/5fCTOR/AAAAqIyY+zeFmdQk/+v/6//r/+v/6/+Xr9/n/w8m/f/O9P+70P/X/+++/X9U9nNfpv+v/0+pfuv/x9x/Z5hJTfI/AAAA1EHM/XeFmcj/AAAAUBkx9/9ymIn8DwAAAJURc//mMJOa5H/9f/1//X/9f/3/8vXr/w8m/f/O9P+70P/X//f5//r/9FS/9f9j7n9FmElN8j8AAADUQcz9rwwzkf8BAACgMmLuvzvMRP4HAACAyoi5fzLMpCb5X/9f/1//X/9f/798/fr/g0n/vzP9/y70//X/9f/1/+mpfuv/x9y/JcykJvkfAAAA6iDm/q1hJvI/AAAAVEbM/feEmcj/AAAAUBkx928LM6lJ/tf/1//X/9f/1/8vX7/+/2DS/+9M/78L/X/9f/1//X96qt/6/zH3vyrMpCb5HwAAAOog5v7tYSbyPwAAAFRGzP2vDjOR/wEAAKAyYu7fEWZSk/yv/6//r/+v/6//X75+/f/BpP/fmf5/F/r/+v/6//r/9FS/9f9j7n9NmElN8j8AAADUQcz9O8NM5H8AAACojJj77w0zkf8BAACgMmLunwozqUn+1//X/9f/1//X/y9fv/7/YNL/70z/vwv9f/1//X/9f3qq3/r/MfffF2ZSk/wPAAAAVTK8wuUx998fZiL/AwAAQGXE3D8dZiL/AwAAQGXE3D8TZlKT/K//r/+v/6//v6b+/91L96v/X9D/7y/6/53p/3eh/6//f9P7/2P6/1RKv/X/Y+7fFWZSk/wPAAAAdRBz/+4wE/kfAAAAKiPm/j1hJvI/AAAAVEbM/XvDTGqS//X/9f/1//X/ff5/+fr1/weT/n9nve//x4eo/6//r//v8//1/1mu3/r/Mfc/EGZSk/wPAAAAdRBz/74wE/kfAAAAKiPm/v1hJvI/AAAAVEbM/QfCTGqS/6vc/19cXFxxSf1//f/m/aX/r/9ftn79/8Gk/9+Zz//vQv9f/1//X/+fnuq3/n/M/QfDTGqS/wEAAKAOYu5/bZiJ/A8AAACVEXP/r4SZyP8AAABQGTH3/2qYSU3yf5X7/53o/+v/N+8v/X/9/7L16/8PJv3/zvT/u9D/1//X/9f/p6f6rf8fc/+hMJOa5H8AAACog5j7fy3MRP4HAACAyoi5/3VhJvI/AAAAVEbM/YfDTGqS//X/9f/1//X/9f/L16//P5j0/zvT/+9C/1//v8/7/43j4/kVjmv9f/pRv/X/Y+5/fZhJTfI/AAAA1EHM/Q+Gmcj/AAAAUBkx978hzET+BwAAgMqIuf+NYSY1yf/6//r/+v/6//r/5evX/x9M+v+d6f93of+v/9/n/f9O9P/pR/3W/4+5/01hJjXJ/wAAAFAHMfe/OcxE/gcAAIDKiLn/LWEm8j8AAABURsz9bw0zqUn+1//X/9f/1//X/y9fv/7/YNL/70z/v4sa9P/v7nDdze7PX6+bvf36//r/LNdv/f+Y+389zKQm+R8AAADqIOb+h8JM5H8AAACojJj73xZmIv8DAABAZcTc//Ywk5rkf/1//X/9f/1//f/y9ev/Dyb9/84GrP//i1vD5fr/BZ//39/bP1j9/8V17bfX/+eF0G/9/5j73xFmUpP8DwAAAHUQc/87w0zkfwAAAKiMmPvfFWYi/wMAAEBlxNz/G2EmNcn/+v+N7VhqL+v/6//nF+j/6//r/w8s/f/OBqz/7/P/2+j/9/f2D1b/fzn9f14I/db/j7n/3WEmNcn/AAAAUAcx9z8cZiL/AwAAQGXE3P+eMBP5HwAAACoj5v73hpnUJP/r//v8f/1//X/9//L16/8PJv3/zvT/u9D/1//X/9f/p6f6rf8fc/8jYSY1yf8AAABQBzH3vy/MRP4HAACAyoi5/zfDTOR/AAAAqIyY+98fZlKT/K//Pyj9/0n9f/1//f+2x6P/r/9fRv+/M/3/LvT/9f/1//X/6al+6//H3P+BMJOa5H8AAACog5j7fyvMRP4HAACAyoi5/7fDTOR/AAAAqIyY+38nzKQm+V//f1D6/z7/P9P/1/9vezz6//r/ZW5c/z+eefT/9f/1/yP9f/1//X/a9Vv/P+b+3w0zqUn+BwAAgDqIuf+DYSbyPwAAAAyEsv8nu13M/UfCTOR/AAAAqIyY+4+GmdQk/+v/6//r//dp///Ptv7LD777zqO79P/1//X/1+SGfv5/48Xv8//1//X/k3R+urs4sen/6//r/9Nv/f+Y+4+FmdQk/wMAAEAdxNz/e2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8NMapL/9f/1//X/+7T/P8Cf/x/3h/5/q571/+NJV/+/1A3t/79vqSeu/7/W/v946aX6/xXp//v8f/1//X+Cfuv/x9w/F2ZSk/wPAAAAdRBy//CJYi5dIf8DAABAZcTcfzLMRP4HAACAyoi5/0NhJjXJ//r/+v/6//r/Pv+/fP192//3+f8d6f931j/9/3L6//r/g7z9+v/6/yzXb/3/mPvnw0xqkv8BAACgDmLu/3CYifwPAAAAlRFz/0fCTOR/AAAAqIyY+0+FmdQk/+v/6//r/+v/6/+Xr1//fzD1ff9/ovP69f/1//X/B3f79f/1/1mu3/r/MfefDjOpSf4HAACAOoi5/0yYifwPAAAAlRFz/9kwE/kfAAAAKiPm/nP/z959NOlxV3scH/nK91rlF3AXbNjzEryANbwAFmxYQBXFAgpMTpbJ0eRgksnZBBuMSSYbsEkGkzE5Z0w2VIly6Zyj0UxPP5Lckvr5n89nc2DE0A+FkPlZ+lbHLU32v/5f/z9s/39P/f9Bz9f/6/9Htvr+fwP9v/5f/7+9n1//r/9nv7X1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAADCN3/6Vxi/0PAAAAw8jd/4i4pcn+39P/H9rp2f9nxqv/H6n/9/7/A5+v/9f/j+zc9v+X3/krn/5f/6//D/p//b/+n73W1v/n7n9k3NJk/wMAAEAHufsfFbfY/wAAADCM3P2PjlvsfwAAABhG7v7HxC1N9r/3/3v/v/5/qv8/ov/X/+v/t5T3/8/r1P9feuvFD7n9urtdfzrP1//r//X/+n+Wtbb+P3f/Y+OWJvsfAAAAOsjd/7i4xf4HAACAYeTuf3zcYv8DAADAMHL3PyFuabL/9f/6/6X7/6ND9P/e/6//1/9vK/3/vE79/5k8X/+v/9f/6/9Z1tr6/9z9T4xbmux/AAAA6CB3/5PiFvsfAAAAhpG7/7K4xf4HAACAYeTuPxq3NNn/+n/9v/f/6//1/9PP1/9vJ/3/PP3/Bvp//b/+X//PotbW/+fuvzxuabL/AQAAoIPc/U+OW+x/AAAAGEbu/qfELfY/AAAADCN3/1Pjlib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/Bvr/u9rPX6j/1//r/9ntNPv/O2Z+2V6k/8/d/7S4pcn+BwAAgA5y9z89brH/AQAAYBi5+58Rt9j/AAAAMIzc/c+MW5rsf/2//l//r//X/08/X/+/nfT/81bT/x86PPll/f/W9//e/6//1/9zkrW9/z93/7Pilib7HwAAADrI3f/suMX+BwAAgGHk7n9O3GL/AwAAwDBy9z83bmmy//X/+n/9v/5f/z/9/Ln+//pdn0//vy76/3mr6f8PoP/X/2/z59f/6//Zb239f+7+58UtTfY/AAAAdJC7/4q4xf4HAACAYeTuf37cYv8DAADAMHL3vyBuabL/p/v/Ez+u/z81+v+TP7/+f/rnx1L9f/476v9n+/97ef9/T/r/efr/DfT/+n/9/0H9/5FN36//Z8ra+v/c/S+MW5rsfwAAAOggd/+L4hb7HwAAAIaRu//FcYv9DwAAAMPI3f+SuKXJ/vf+f/2//n/7+n/v/z/ufL7/f+ec9/+H9f+nSP8/T/+/gf5f/6//9/5/FrW2/j93/0vjlib7HwAAADrI3f+yuMX+BwAAgO2w+88O7P0DpSF3/8vjFvsfAAAAhpG7/xVxy1j7/4KDfkD/r//X/+v/19T/H5n427X6f+//Px36/3n6/w30/2ejnz88WP9/1UHfv4b+/zL9PytzUv9/w4mvn6/+P3f/lXHLWPsfAAAAWsvd/8q4xf4HAACAYeTuf1XcYv8DAADAMHL3vzpuabL/z3r/f+TgZ+v/9f/6f/2/9//r/5em/5+n/99A/+/9/97/r/9nUSf1/7ucr/4/d/9r4pYm+x8AAAA6yN3/2rjF/gcAAIBh5O6/Km6x/wEAAGAYuftfF7c02f/e/6//1//r//X/08/X/28n/f88/f8G+v9T7eevnPp+/b/+X//PXmvr/3P3vz5uabL/AQAAoIPc/W+IW+x/AAAAGEbu/jfGLfY/AAAADCN3/5vilib7X/9/dvv//Lr+X/+/o//X/+v/z4m2/f+hqb8S7XdA/3/zg47e5+Sv6P/1/97/r//X/7OAVfT/x078v8vc/W+OW5rsfwAAAOggd/9b4hb7HwAAAIaRu/+tcYv9DwAAAMPI3f+2uKXJ/tf/e/+//l//r/+ffr7+f7vkf49t+/9T5P3/G+j/9f/6f/0/i1pF/7/rn+fuf3vc0mT/AwAAQAe5+98Rt9j/AAAAMIzc/e+MW+x/AAAAGEbu/nfFLU32v/5f/6//1//r/6efr//fTvr/efr/DfT/+n/9v/6fRZ2F/v/Q7r+4nm7/n7v/6rilyf4HAACADnL3vztusf8BAABgGLn73xO32P8AAAAwjNz9741bmux//b/+X/+v/9f/Tz9f/7+d9P/z9P87OzvXzHyAqf7/2P/p/xft5/f+Kr8c/b/+n/VZ2/v/c/e/L25psv8BAACgg9z918Qt9j8AAAAMI3f/tXGL/Q8AAADDyN3//rilyf7X/+v/9f/6f/3/9PP1/9tJ/z9P/7+B9/97/7/+X//PotbW/+fu/0Dc0mT/AwAAQAe5+6+LW+x/AAAAGEbu/g/GLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nn38X+f19zrP8/N85e/7+j/9f/6/830P/r//X/7LW2/j93/4filib7HwAAADrI3f/huMX+BwAAgGHk7v9I3GL/AwAAwDBy9380bmmy//X/+n/9v/5f/z/9fO//307e/z9P/7+B/l//377/v/NnqP6f5ayt/8/d/7G4pcn+BwAAgA5y998Qt9j/AAAAMIzc/R+PW+x/AAAAGEbu/k/ELU32v/5f/6//1//r/6effw76/4t29P+L0//P0/9voP8fs/+/YGeg/v/Igd/v/f+s0dr6/9z9n4xbmux/AAAA6CB3/6fiFvsfAAAAhpG7/9Nxi/0PAAAAw8jd/5m4pcn+1//r//X/+n/9//Tzvf9/O+n/5+n/N9D/j9n/e/+//p/zZm39f+7+z8YtTfY/AAAAdJC7/8a4xf4HAACAYeTu/1zcYv8DAADAMHL3fz5uabL/9f/6f/2//l//P/18/f920v/P0/9voP/X/+v/9f8sam39f+7+L8QtTfY/AAAAdJC7/6a4xf4HAACAYeTuvzlusf8BAABgGLn7vxi3NNn/+n/9/9no//d+Dv3/cUv2/xfp//X/+v9Ja+n/L7nk3rfo//X/+n/9v/5f/9/d2vr/3P1filua7H8AAADoIHf/l+MW+x8AAACGkbv/K3HT/563TwQAAAAsLXf/V+OWJr//v7//v3DneKF63FT/H42a/n8X/f/Jn9/7/6d/fnj/v/5f/3/2raX/9/7/M/v8+n/9/zZ//tPq/+++//v1/4xobf1/7v5b4pYm+x8AAAA6yN3/tbjF/gcAAIBh5O7/etxi/wMAAMAwcvffGrc02f/e/6//1//r//X/08/X/28n/f88/f8G+n/9v/f/P/QB/6P/Zzlr6/9z938jbmmy/wEAAKCD3P3fjFvsfwAAABhG7v5vxS32PwAAAAwjd/+345Ym+1//r//X/+v/9f/Tz9f/byf9/zz9/wb6f/3/qX/+G/d+YZj+3/v/WdDa+v/c/d+JW5rsfwAAAOggd/934xb7HwAAAIaRu/97cYv9DwAAAMPI3f/9uKXJ/tf/6//H7//vr//f83z9v/5/ZGfc38f/kEfo/y+c+TH9/wb6f/2/9//r/1nU2vr/3P23xS1N9j8AAAB0kLv/B3GL/Q8AAADDyN3/w7jF/gcAAIBh5O7/UdzSZP/r/3v1/4d2Ovb/3v+v/9f/d+L9//P0/xvo//X/+n/9P4taW/+fu//HcUuT/Q8AAADb6r73ePBtp/qvzd3/k7jF/gcAAIBh5O7/adxi/wMAAMAwcvf/LG5psv/1/736/57v/9f/6//1/53o/+fp/zfQ/+v/9f/6fxa1tv4/d//P45Zdw+/waf+nBAAAANYkd/8v4pYmv/8PAAAAHeTu/2Xcsm//HzvFP9UOAAAArE3u/l/FLU1+/1//v/L+f0f/r//X/+v/9f+nQ/8/7y72/8cO6f/1/zP0//p//T97ra3/z93/67ilyf4HAACAQZ30dxRy9/8mbrH/AQAAYBi5+38bt9j/AAAAMIzc/b+LW5rsf/3/yvv/M3r//5H6R/r/5v3/FRdNPl//r/8fmf5/nvf/b6D/1//r//X/LGpt/X/u/t/HLU32PwAAAHSQu/8PcYv9DwAAAMPI3f/HuMX+BwAAgGHk7v9T3NJk/+v/R+z/vf9f/z///HH6//+/+OhN93vgtVfr/znhXPb/+XNB/6//1/8fp//X/+v/2Wtt/X/u/j/HLU32PwAAAHSQu//2uMX+BwAAgGHk7v9L3GL/AwAAwDBy9/81bmmy//X/+n/9/zb2/9kUd+//vf9f/7+f9//P0/9voP/X/+v/9f8sam39f+7+v8UtTfY/AAAAdJC7/+9xi/0PAAAAw8jd/4+4xf4HAACAYeTu/2fc0mT/6//1//r/bez/vf9/R/+v/z+A/n+e/n8D/b/+X/+v/2dRa+v/c/f/K25psv8BAACgg9z9d8Qt9j8AAAAMI3f/v+MW+x8AAACGkbv/P3FLk/2v/9f/6//1//r/6efr/7eT/n+e/n8D/b/+X/+v/2dRa+v/c/f/NwAA//+xNYBL") chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 1.038940815s ago: executing program 5 (id=1087): syz_mount_image$hfsplus(&(0x7f0000001380), &(0x7f0000000a40)='./bus\x00', 0x800094, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="d830a56bfc3c7a9390888ce278902d15ad9de904b25fb95d5f459bad9da72a25c552a3bf0047e73cec843ef4c46ed9b5bfc4a6e5"], 0x5, 0x6b5, &(0x7f0000001700)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 988.617536ms ago: executing program 3 (id=1088): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) 810.86182ms ago: executing program 3 (id=1089): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './sys/file0', [], 0xa, "d22067fb0a5c51"}, 0x16) 810.71624ms ago: executing program 5 (id=1091): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 708.482463ms ago: executing program 2 (id=1092): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="14000280060001000100000006"], 0x2c}}, 0x0) 698.213933ms ago: executing program 3 (id=1093): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bca38be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x400200, 0x0, 0x0, 0x3}, 0x20) 630.833545ms ago: executing program 5 (id=1094): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 520.117008ms ago: executing program 2 (id=1095): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a000004090001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="d83900001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a800c00020006"], 0x39d8}], 0x1}, 0x0) 481.103458ms ago: executing program 5 (id=1096): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 406.91593ms ago: executing program 3 (id=1097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580)={0x0, 0x2710}, 0x10) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="ef", 0x1}], 0x1}, 0x80) 348.272592ms ago: executing program 2 (id=1098): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='crush_location\x00', &(0x7f0000000600)='rack:foo\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 249.639724ms ago: executing program 2 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 248.963724ms ago: executing program 5 (id=1109): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89101) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000380)=r1) 178.939216ms ago: executing program 3 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 156.496146ms ago: executing program 5 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='*ub:*', 0x5) 130.287687ms ago: executing program 2 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='/,0x7f0000800000,0x', 0x13) 53.199769ms ago: executing program 1 (id=1103): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x3}, @TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 52.976329ms ago: executing program 2 (id=1104): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x9, 0xfffffffffffffffe]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2.8676ms ago: executing program 4 (id=1105): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x4, 0x40000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000800)=0x800) 0s ago: executing program 3 (id=1106): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents(r0, 0x0, 0x58) kernel console output (not intermixed with test programs): [ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.707281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.715191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.724380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.734504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.743503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.771167][ T4195] device veth0_macvtap entered promiscuous mode [ 69.785045][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.797088][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.814019][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.825519][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.836214][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.848110][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.859787][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.878524][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.886384][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.912734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.925966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.942456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.954659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.967861][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.980827][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.994242][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.003586][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.037909][ T4195] device veth1_macvtap entered promiscuous mode [ 70.047692][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.055541][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.082488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.123055][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.168958][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.197704][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.218051][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.233058][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.271392][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.285561][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.306418][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.318894][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.330815][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.340676][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.367661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.381135][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.384244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.411767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.423436][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.435972][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.447408][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.460445][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.487337][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.506170][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.517846][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.529346][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.541862][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.580568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.595744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.618634][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.644469][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.667339][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.697190][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.771525][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.809791][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.834520][ T4290] loop6: detected capacity change from 0 to 7 [ 70.851938][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.872029][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.893127][ T4290] Dev loop6: unable to read RDB block 7 [ 70.900622][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.917622][ T4290] loop6: unable to read partition table [ 70.929832][ T4290] loop6: partition table beyond EOD, truncated [ 70.936368][ T4290] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 70.966653][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.988250][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.000859][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.043282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.108891][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.121438][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.165050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.385916][ T4309] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 71.410549][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.431829][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.441721][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.472025][ T4307] sctp: [Deprecated]: syz.4.18 (pid 4307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.472025][ T4307] Use struct sctp_sack_info instead [ 71.646139][ T4232] kernel read not supported for file /video9 (pid: 4232 comm: kworker/1:5) [ 71.668497][ T1339] Bluetooth: hci0: command 0x0419 tx timeout [ 71.682904][ T1339] Bluetooth: hci2: command 0x0419 tx timeout [ 71.705803][ T1339] Bluetooth: hci1: command 0x0419 tx timeout [ 71.727584][ T1339] Bluetooth: hci3: command 0x0419 tx timeout [ 71.743055][ T4316] loop3: detected capacity change from 0 to 4096 [ 71.752067][ T1339] Bluetooth: hci4: command 0x0419 tx timeout [ 71.805758][ T4325] process 'syz.1.25' launched '/dev/fd/3' with NULL argv: empty string added [ 71.818620][ T4316] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 71.819517][ T4323] device bond_slave_0 entered promiscuous mode [ 71.834334][ T4323] device bond_slave_1 entered promiscuous mode [ 71.949932][ T4330] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 71.960562][ T4323] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 71.960798][ T4323] team0: Device macvtap1 failed to register rx_handler [ 72.004705][ T4323] device bond_slave_0 left promiscuous mode [ 72.010799][ T4323] device bond_slave_1 left promiscuous mode [ 72.204921][ T4339] tipc: Started in network mode [ 72.220437][ T4339] tipc: Node identity ac1414aa, cluster identity 4711 [ 72.256005][ T4339] tipc: New replicast peer: 172.20.20.187 [ 72.256487][ T4344] tipc: New replicast peer: 172.20.20.187 [ 72.274911][ T4339] tipc: Enabled bearer , priority 10 [ 72.356259][ T4341] loop1: detected capacity change from 0 to 4096 [ 72.474771][ T4341] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 72.993418][ T4376] loop3: detected capacity change from 0 to 512 [ 73.056489][ T4379] program syz.2.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.098926][ T4376] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.46: inode has both inline data and extents flags [ 73.124264][ T4376] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 73.129700][ T4337] loop0: detected capacity change from 0 to 32768 [ 73.180414][ T4337] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.31 (4337) [ 73.205809][ T4376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.369814][ T4337] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 73.380648][ T4376] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 73.388469][ T4230] tipc: Node number set to 2886997162 [ 73.424736][ T4337] BTRFS info (device loop0): force zlib compression, level 3 [ 73.446537][ T4337] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 73.492265][ T4337] BTRFS info (device loop0): use zstd compression, level 3 [ 73.537212][ T4337] BTRFS info (device loop0): enabling ssd optimizations [ 73.571165][ T4337] BTRFS info (device loop0): using free space tree [ 73.589934][ T4337] BTRFS info (device loop0): has skinny extents [ 73.858155][ T4428] loop4: detected capacity change from 0 to 64 [ 73.897508][ T4387] loop1: detected capacity change from 0 to 32768 [ 73.993519][ T4428] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 74.084865][ T4387] XFS (loop1): Mounting V5 Filesystem [ 74.236096][ T4442] loop3: detected capacity change from 0 to 1024 [ 74.261618][ T4387] XFS (loop1): Ending clean mount [ 74.470437][ T4447] loop4: detected capacity change from 0 to 512 [ 74.568188][ T4447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.636234][ T4447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.689874][ T4447] EXT4-fs (loop4): 1 truncate cleaned up [ 74.695739][ T4447] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 74.752660][ T4177] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (4177) [ 74.754575][ T4185] XFS (loop1): Unmounting Filesystem [ 75.111145][ T4465] loop2: detected capacity change from 0 to 8192 [ 75.225579][ T4465] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 75.241614][ T4465] REISERFS (device loop2): using ordered data mode [ 75.249095][ T4465] reiserfs: using flush barriers [ 75.256169][ T4465] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.367950][ T4465] REISERFS (device loop2): checking transaction log (loop2) [ 75.552145][ T4490] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.582308][ T4492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.612304][ T4465] REISERFS (device loop2): Using tea hash to sort names [ 75.631916][ T4465] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 75.848927][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 75.862832][ T4502] set_capacity_and_notify: 1 callbacks suppressed [ 75.862849][ T4502] loop4: detected capacity change from 0 to 1024 [ 75.881083][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 76.015649][ T4509] loop3: detected capacity change from 0 to 64 [ 76.029964][ T4502] hfsplus: xattr searching failed [ 76.074156][ T4502] hfsplus: xattr searching failed [ 76.110176][ T4502] hfsplus: xattr searching failed [ 76.204930][ T4226] hfsplus: bad catalog file entry [ 76.241085][ T4226] hfsplus: b-tree write err: -5, ino 3 [ 76.932099][ T4560] Zero length message leads to an empty skb [ 76.934032][ T4554] loop3: detected capacity change from 0 to 8192 [ 76.970692][ T4562] hsr0: VLAN not yet supported [ 76.996953][ T4554] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 77.025375][ T4554] REISERFS (device loop3): using ordered data mode [ 77.037465][ T4554] reiserfs: using flush barriers [ 77.052068][ T4554] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.127710][ T4554] REISERFS (device loop3): checking transaction log (loop3) [ 77.241825][ T4554] REISERFS (device loop3): Using tea hash to sort names [ 77.267537][ T4554] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 77.846075][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.854034][ T4600] loop1: detected capacity change from 0 to 64 [ 78.089537][ T4610] loop0: detected capacity change from 0 to 1024 [ 78.358106][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 78.385555][ T4624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 78.503133][ T4630] device bond0 entered promiscuous mode [ 78.527282][ T4630] device bond_slave_0 entered promiscuous mode [ 78.533631][ T4630] device bond_slave_1 entered promiscuous mode [ 78.576786][ T4630] device bond0 left promiscuous mode [ 78.589578][ T4630] device bond_slave_0 left promiscuous mode [ 78.596129][ T4590] loop2: detected capacity change from 0 to 32768 [ 78.613569][ T4630] device bond_slave_1 left promiscuous mode [ 78.661150][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 78.683767][ T4590] XFS (loop2): Mounting V5 Filesystem [ 78.759164][ T4590] XFS (loop2): Ending clean mount [ 78.816487][ T4195] XFS (loop2): Unmounting Filesystem [ 78.861132][ T4622] loop0: detected capacity change from 0 to 32768 [ 78.882989][ T4646] nvme_fcloop: unknown parameter or missing value 'ww' [ 78.907821][ T4622] ======================================================= [ 78.907821][ T4622] WARNING: The mand mount option has been deprecated and [ 78.907821][ T4622] and is ignored by this kernel. Remove the mand [ 78.907821][ T4622] option from the mount to silence this warning. [ 78.907821][ T4622] ======================================================= [ 79.124606][ T4622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 79.136272][ T4654] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 79.202853][ T4656] loop2: detected capacity change from 0 to 2048 [ 79.231112][ T4622] (syz.0.133,4622,0):ocfs2_verify_group_and_input:424 ERROR: add a group which is in the current volume. [ 79.250974][ T4622] (syz.0.133,4622,0):ocfs2_group_add:505 ERROR: status = -22 [ 79.260988][ T4654] team0: Port device team_slave_0 removed [ 79.276204][ T4657] netlink: 'syz.1.145': attribute type 27 has an invalid length. [ 79.285812][ T4656] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.358519][ T4658] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.383996][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 79.390743][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.419683][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.443878][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 79.479837][ T4656] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 79.524904][ T4656] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 79.552881][ T4656] Remounting filesystem read-only [ 79.562706][ T4656] NILFS (loop2): error -5 truncating bmap (ino=15) [ 79.582134][ T4657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.689052][ T4644] loop3: detected capacity change from 0 to 32768 [ 79.754967][ T4644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.140 (4644) [ 79.854562][ T4644] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.908905][ T4644] BTRFS info (device loop3): setting nodatacow, compression disabled [ 79.917058][ T4644] BTRFS info (device loop3): enabling auto defrag [ 80.005746][ T4644] BTRFS info (device loop3): max_inline at 0 [ 80.017937][ T4644] BTRFS info (device loop3): using free space tree [ 80.024505][ T4644] BTRFS info (device loop3): has skinny extents [ 80.265218][ T4696] pimreg1: tun_chr_ioctl cmd 35108 [ 80.375935][ T4712] loop2: detected capacity change from 0 to 256 [ 80.439456][ T4712] exfat: Deprecated parameter 'utf8' [ 80.444817][ T4712] exfat: Deprecated parameter 'namecase' [ 80.460864][ T4712] exfat: Deprecated parameter 'namecase' [ 80.473619][ T4712] exfat: Deprecated parameter 'namecase' [ 80.487866][ T4712] exfat: Deprecated parameter 'namecase' [ 80.564010][ T4712] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x26a8b90f, utbl_chksum : 0xe619d30d) [ 81.079704][ T4730] loop2: detected capacity change from 0 to 128 [ 81.188068][ T4730] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 81.305548][ T4697] loop0: detected capacity change from 0 to 32768 [ 81.545970][ T4749] loop3: detected capacity change from 0 to 1024 [ 81.562146][ T4753] loop4: detected capacity change from 0 to 512 [ 81.600648][ T4749] EXT4-fs (loop3): Ignoring removed oldalloc option [ 81.624971][ T26] audit: type=1326 audit(1791881793.716:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 81.687945][ T4749] EXT4-fs (loop3): Ignoring removed orlov option [ 81.732720][ T4753] EXT4-fs (loop4): Ignoring removed bh option [ 81.752136][ T4753] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 81.785467][ T4753] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 81.794158][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,max_dir_size_kb=0x0000000000000002,grpjquota=,,errors=continue. Quota mode: none. [ 81.824117][ T26] audit: type=1326 audit(1791881793.736:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 81.914701][ T26] audit: type=1326 audit(1791881793.736:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 81.940517][ T26] audit: type=1326 audit(1791881793.736:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 81.966927][ T26] audit: type=1326 audit(1791881793.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 81.999934][ T4749] EXT4-fs error (device loop3): __ext4_new_inode:1294: comm syz.3.178: failed to insert inode 15: doubly allocated? [ 82.036691][ T26] audit: type=1326 audit(1791881793.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 82.110040][ T4749] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 82.134056][ T26] audit: type=1326 audit(1791881793.736:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 82.240401][ T26] audit: type=1326 audit(1791881793.736:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 82.377851][ T26] audit: type=1326 audit(1791881793.736:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 82.437754][ T26] audit: type=1326 audit(1791881793.736:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.2.181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8146f2d9 code=0x7ffc0000 [ 82.838137][ T4790] loop1: detected capacity change from 0 to 8192 [ 82.901459][ T4790] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 82.933663][ T4790] REISERFS (device loop1): using ordered data mode [ 82.943722][ T4790] reiserfs: using flush barriers [ 82.970719][ T4790] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.068480][ T4790] REISERFS (device loop1): checking transaction log (loop1) [ 83.073717][ T4803] tipc: Enabled bearer , priority 10 [ 83.276646][ T4809] program syz.3.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.301552][ T4790] REISERFS (device loop1): Using tea hash to sort names [ 83.311537][ T4790] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 83.336277][ T4790] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 83.377054][ T4811] loop4: detected capacity change from 0 to 2048 [ 83.445488][ T4811] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.475546][ T4784] loop2: detected capacity change from 0 to 32768 [ 83.516632][ T4817] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.547348][ T4819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.549952][ T4811] attempt to access beyond end of device [ 83.549952][ T4811] loop4: rw=524288, want=33554432, limit=2048 [ 83.630314][ T4784] ea_get: invalid extended attribute [ 83.643387][ T4784] ffff888076bb6000: f0 f1 7c 63 10 00 00 00 00 10 00 00 07 00 00 00 ..|c............ [ 83.656924][ T4784] ffff888076bb6010: 04 00 00 00 2c 07 ....,. [ 83.710414][ T4823] block2mtd: device name too long [ 83.883515][ T4827] loop0: detected capacity change from 0 to 2048 [ 84.018046][ T4827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.085276][ T4836] loop1: detected capacity change from 0 to 512 [ 84.114777][ T4838] loop2: detected capacity change from 0 to 8 [ 84.173347][ T4840] input: syz0 as /devices/virtual/input/input5 [ 84.337019][ T4836] FAT-fs (loop1): error, clusters badly computed (0 != 1) [ 84.388848][ T4836] FAT-fs (loop1): Filesystem has been set read-only [ 84.395796][ T4836] FAT-fs (loop1): error, clusters badly computed (1 != 2) [ 84.569939][ T4851] block2mtd: device name too long [ 84.916892][ T4828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.214 (4828) [ 84.950293][ T4828] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 84.972808][ T4828] BTRFS info (device loop3): force clearing of disk cache [ 84.990531][ T4828] BTRFS info (device loop3): metadata ratio 0 [ 85.006856][ T4828] BTRFS info (device loop3): enabling ssd optimizations [ 85.029762][ T4828] BTRFS info (device loop3): using spread ssd allocation scheme [ 85.056799][ T4828] BTRFS info (device loop3): using free space tree [ 85.084099][ T4828] BTRFS info (device loop3): has skinny extents [ 85.134749][ T4882] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 85.224225][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,bsddf,delalloc,resuid=0x000000000000ee01,init_itable,nodelalloc,grpid,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 85.287336][ T4451] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.463912][ T4828] BTRFS info (device loop3): clearing free space tree [ 85.488333][ T4828] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.539160][ T4828] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.597296][ T4451] usb 2-1: Using ep0 maxpacket: 16 [ 85.607376][ T4870] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 85.634692][ T4828] BTRFS info (device loop3): creating free space tree [ 85.667540][ T4870] F2FS-fs (loop2): invalid crc value [ 85.680063][ T4828] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.710921][ T4828] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.735040][ T4870] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.748004][ T4451] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 85.766734][ T4451] usb 2-1: config 1 has no interface number 0 [ 85.784046][ T4451] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 85.837906][ T4451] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.874687][ T4451] usb 2-1: config 1 interface 105 has no altsetting 0 [ 86.042367][ T4870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.050461][ T4451] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 86.070432][ T4451] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 86.112408][ T4451] usb 2-1: Product: syz [ 86.137296][ T4451] usb 2-1: Manufacturer: syz [ 86.173872][ T4451] usb 2-1: SerialNumber: syz [ 86.249280][ T4876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.293929][ T4876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.512824][ T4195] attempt to access beyond end of device [ 86.512824][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 86.768273][ T4876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.768508][ T4922] set_capacity_and_notify: 3 callbacks suppressed [ 86.768522][ T4922] loop4: detected capacity change from 0 to 131072 [ 86.778038][ T4876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.801547][ T1108] cfg80211: failed to load regulatory.db [ 86.888611][ T4922] F2FS-fs (loop4): invalid crc value [ 86.964496][ T4922] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.011467][ T4922] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 87.052994][ T4922] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 87.153219][ T4914] loop0: detected capacity change from 0 to 40427 [ 87.196998][ T4914] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 87.227339][ T4914] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.258673][ T4451] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 87.295779][ T4914] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.302701][ T4451] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 87.369667][ T4451] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 87.424087][ T4451] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 28:27:b1:ce:ba:ae [ 87.488698][ T4451] usb 2-1: USB disconnect, device number 2 [ 87.507611][ T4914] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.516030][ T4451] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 87.522431][ T4914] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.623647][ T4451] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 87.643571][ T4451] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 87.670134][ T4451] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 87.776398][ T4190] attempt to access beyond end of device [ 87.776398][ T4190] loop0: rw=2049, want=45104, limit=40427 [ 87.880498][ T4951] loop1: detected capacity change from 0 to 22 [ 87.928339][ T4952] loop2: detected capacity change from 0 to 2048 [ 87.968784][ T4951] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 88.047560][ T4951] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 88.099972][ T4957] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.525174][ T4952] syz.2.258 (4952) used greatest stack depth: 20544 bytes left [ 88.758411][ T4983] loop0: detected capacity change from 0 to 128 [ 88.777381][ T4460] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.814028][ T4983] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.852274][ T4983] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.197594][ T4460] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 89.227353][ T4460] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.246404][ T5004] loop0: detected capacity change from 0 to 512 [ 89.289032][ T5004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.328836][ T5004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 89.337029][ T5004] System zones: 1-12 [ 89.349689][ T5004] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.280: bad orphan inode 131072 [ 89.372996][ T5004] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 89.437702][ T4460] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.474896][ T4985] loop2: detected capacity change from 0 to 32768 [ 89.485948][ T4460] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.511552][ T5004] overlayfs: upper fs needs to support d_type. [ 89.531322][ T4460] usb 4-1: Product: syz [ 89.545036][ T4460] usb 4-1: Manufacturer: syz [ 89.565666][ T4460] usb 4-1: SerialNumber: syz [ 89.603923][ T4460] usb 4-1: config 0 descriptor?? [ 89.639403][ T4985] XFS (loop2): Mounting V5 Filesystem [ 89.657786][ T4965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.707331][ T4190] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /42/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 89.762554][ T4460] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 89.794242][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.826278][ T4985] XFS (loop2): Ending clean mount [ 89.852997][ T5015] loop1: detected capacity change from 0 to 32768 [ 89.861420][ T4985] XFS (loop2): Quotacheck needed: Please wait. [ 89.910101][ T5015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.284 (5015) [ 89.975974][ T4985] XFS (loop2): Quotacheck: Done. [ 90.019278][ T5015] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 90.057676][ T5015] BTRFS info (device loop1): force clearing of disk cache [ 90.072524][ T5015] BTRFS info (device loop1): metadata ratio 0 [ 90.085590][ T4230] usb 4-1: USB disconnect, device number 2 [ 90.087254][ T5015] BTRFS info (device loop1): enabling ssd optimizations [ 90.130944][ T5011] overlayfs: statfs failed on './file0' [ 90.134821][ T5015] BTRFS info (device loop1): using spread ssd allocation scheme [ 90.145783][ T5015] BTRFS info (device loop1): using free space tree [ 90.154972][ T5015] BTRFS info (device loop1): has skinny extents [ 90.228743][ T4195] XFS (loop2): Unmounting Filesystem [ 90.485981][ T4924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.508392][ T5015] BTRFS info (device loop1): clearing free space tree [ 90.515473][ T5015] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.526136][ T5015] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.548825][ T5015] BTRFS info (device loop1): creating free space tree [ 90.556464][ T5015] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.577841][ T5015] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.637523][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.675633][ T4924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.815324][ T4924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.877333][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 91.038362][ T4230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.082168][ T4230] usb 5-1: config 0 interface 0 has no altsetting 1 [ 91.162979][ T4924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.187792][ T4230] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 91.206990][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.224732][ T4230] usb 5-1: SerialNumber: syz [ 91.265979][ T4230] usb 5-1: config 0 descriptor?? [ 91.338641][ T4230] usb-storage 5-1:0.0: USB Mass Storage device detected [ 91.405678][ T4230] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 91.613006][ T5084] loop1: detected capacity change from 0 to 1024 [ 91.640722][ T5060] usb 5-1: USB disconnect, device number 2 [ 91.712198][ T5050] chnl_net:caif_netlink_parms(): no params data found [ 91.945293][ T5081] loop2: detected capacity change from 0 to 32768 [ 92.017558][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.024846][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.033580][ T5050] device bridge_slave_0 entered promiscuous mode [ 92.051785][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.059259][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.067824][ T5050] device bridge_slave_1 entered promiscuous mode [ 92.151550][ T5081] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 92.178709][ T5050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.254978][ T5050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.268468][ T5081] JBD2: Ignoring recovery information on journal [ 92.413979][ T5081] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.495085][ T5050] team0: Port device team_slave_0 added [ 92.546462][ T5050] team0: Port device team_slave_1 added [ 92.653904][ T5050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.684202][ T5050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.717397][ T4453] Bluetooth: hci2: command 0x0409 tx timeout [ 92.772884][ T5081] syz.2.299 (5081) used greatest stack depth: 18480 bytes left [ 92.781859][ T5050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.802657][ T5050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.817169][ T5050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.868311][ T5050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.899692][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 92.935439][ T5129] capability: warning: `syz.3.311' uses 32-bit capabilities (legacy support in use) [ 92.970667][ T5109] loop1: detected capacity change from 0 to 40427 [ 92.995321][ T5130] program syz.3.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.049623][ T5050] device hsr_slave_0 entered promiscuous mode [ 93.058989][ T5050] device hsr_slave_1 entered promiscuous mode [ 93.068424][ T5109] F2FS-fs (loop1): invalid crc value [ 93.097840][ T5050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.105450][ T5050] Cannot create hsr debugfs directory [ 93.136936][ T5109] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.343766][ T5109] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 93.398811][ T5141] loop2: detected capacity change from 0 to 64 [ 93.404328][ T5109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 93.480572][ T5120] loop4: detected capacity change from 0 to 32768 [ 93.659619][ T5109] attempt to access beyond end of device [ 93.659619][ T5109] loop1: rw=2049, want=40976, limit=40427 [ 93.715014][ T5120] XFS (loop4): Mounting V5 Filesystem [ 93.766739][ T5156] loop2: detected capacity change from 0 to 2048 [ 93.832641][ T4924] device hsr_slave_0 left promiscuous mode [ 93.837558][ T5120] XFS (loop4): Ending clean mount [ 93.843972][ T4924] device hsr_slave_1 left promiscuous mode [ 93.855686][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.866825][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.874879][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.885579][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.895362][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.910360][ T4924] device bridge_slave_1 left promiscuous mode [ 93.921709][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.992370][ T4924] device bridge_slave_0 left promiscuous mode [ 94.002709][ T4197] XFS (loop4): Unmounting Filesystem [ 94.006003][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.109460][ T4924] device veth1_macvtap left promiscuous mode [ 94.141190][ T4924] device veth0_macvtap left promiscuous mode [ 94.168754][ T4924] device veth1_vlan left promiscuous mode [ 94.185527][ T4924] device veth0_vlan left promiscuous mode [ 94.517074][ T5177] loop4: detected capacity change from 0 to 8 [ 94.582357][ T5177] SQUASHFS error: Failed to read block 0x6e6: -5 [ 94.593688][ T5177] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 94.606017][ T5181] netlink: 332 bytes leftover after parsing attributes in process `syz.3.321'. [ 94.617305][ T5177] SQUASHFS error: Unable to read directory block [6aa:26] [ 94.623181][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 94.634896][ T5181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 94.719890][ T5187] program syz.3.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.790065][ T5060] Bluetooth: hci2: command 0x041b tx timeout [ 95.914751][ T5196] loop4: detected capacity change from 0 to 131072 [ 95.930205][ T4924] team0 (unregistering): Port device team_slave_1 removed [ 95.944567][ T4924] team0 (unregistering): Port device team_slave_0 removed [ 95.962416][ T4924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.971019][ T5196] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 95.981321][ T5196] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.991745][ T5196] F2FS-fs (loop4): invalid crc value [ 96.001494][ T5196] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.011618][ T4924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.053449][ T5196] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 96.060605][ T5196] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 96.124082][ T4924] bond0 (unregistering): Released all slaves [ 96.257631][ T5050] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.276500][ T5050] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.321496][ T5205] loop2: detected capacity change from 0 to 256 [ 96.405015][ T5210] loop1: detected capacity change from 0 to 1024 [ 96.417250][ T5050] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.469787][ T5050] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.564544][ T5210] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 96.741252][ T5210] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.332: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.884971][ T5226] loop2: detected capacity change from 0 to 8 [ 96.897693][ T5210] __quota_error: 4 callbacks suppressed [ 96.897709][ T5210] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 96.903103][ T5061] Bluetooth: hci2: command 0x040f tx timeout [ 96.925905][ T5210] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.332: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.943886][ T5050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.978267][ T5226] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 96.978893][ T5050] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.021292][ T5210] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 97.048938][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.064461][ T5210] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.332: Failed to acquire dquot type 0 [ 97.092459][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.125248][ T5210] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 97.147624][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.168127][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.213927][ T5210] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.332: mark_inode_dirty error [ 97.248634][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.255740][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.286677][ T5210] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 97.294506][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.328563][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.358582][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.365784][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.367480][ T5210] EXT4-fs (loop1): 1 orphan inode deleted [ 97.386779][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.406631][ T144] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.434866][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.442452][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 97.483342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.538813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.547250][ T144] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 97.556139][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 97.573750][ T5252] loop3: detected capacity change from 0 to 1024 [ 97.587600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.625898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.685186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.702141][ T5252] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 97.726141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.752258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.761212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.777628][ T5252] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 97.788928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.797864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.808179][ T5210] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.332: Invalid inode table block 1 in block_group 0 [ 97.831938][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 97.865562][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.900103][ T5210] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.183388][ T5134] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.259643][ T5134] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 98.308696][ T5134] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 98.362733][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 98.407531][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.450952][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 98.522280][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.556173][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.602045][ T5050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.758494][ T5294] loop3: detected capacity change from 0 to 512 [ 98.959280][ T4453] Bluetooth: hci2: command 0x0419 tx timeout [ 99.384286][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.404106][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.469473][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.477223][ T4453] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.498065][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.506657][ T5050] device veth0_vlan entered promiscuous mode [ 99.559861][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.579434][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.615165][ T5050] device veth1_vlan entered promiscuous mode [ 99.657629][ T5061] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.688149][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.701563][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.724049][ T5050] device veth0_macvtap entered promiscuous mode [ 99.761485][ T5050] device veth1_macvtap entered promiscuous mode [ 99.798369][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.817730][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.833989][ T5302] loop1: detected capacity change from 0 to 32768 [ 99.840663][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.867462][ T4453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 99.883982][ T4453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.884262][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.904831][ T4453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 99.916552][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.927930][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.938019][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.948750][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.949541][ T4453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 99.960315][ T5050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.991545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.031417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.057843][ T5302] XFS (loop1): Mounting V5 Filesystem [ 100.068771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.085214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.097964][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.114174][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.125091][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.136080][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.145814][ T5302] XFS (loop1): Ending clean mount [ 100.146417][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.165948][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.176684][ T5050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.188756][ T5050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.200253][ T5050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.211211][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.222085][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.232797][ T4453] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 100.242755][ T4453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.251165][ T5061] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 100.263900][ T5050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.277418][ T4453] usb 3-1: Product: syz [ 100.281619][ T4453] usb 3-1: Manufacturer: syz [ 100.286239][ T4453] usb 3-1: SerialNumber: syz [ 100.293244][ T5061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.301569][ T5050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.310524][ T5061] usb 5-1: Product: syz [ 100.314709][ T5061] usb 5-1: Manufacturer: syz [ 100.319828][ T5050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.341364][ T4453] usb 3-1: config 0 descriptor?? [ 100.346511][ T5061] usb 5-1: SerialNumber: syz [ 100.351659][ T5050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.390891][ T5061] usb 5-1: config 0 descriptor?? [ 100.422044][ T4185] XFS (loop1): Unmounting Filesystem [ 100.440970][ T5061] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 100.495941][ T5061] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.531969][ T5061] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 100.563534][ T5061] usb 5-1: media controller created [ 100.648650][ T5061] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.662262][ T5322] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 100.698407][ T4453] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 100.818322][ T5061] DVB: Unable to find symbol mt352_attach() [ 100.826771][ T5315] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 100.844355][ T5060] usb 3-1: USB disconnect, device number 2 [ 100.920868][ T5061] DVB: Unable to find symbol nxt6000_attach() [ 100.934909][ T5061] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 100.989319][ T5061] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 101.033693][ T5061] dvb-usb: schedule remote query interval to 1000 msecs. [ 101.050615][ T5061] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 101.077508][ T5061] dvb-usb: bulk message failed: -22 (7/0) [ 101.093987][ T5061] dvb-usb: bulk message failed: -22 (7/0) [ 101.134132][ T5061] usb 5-1: USB disconnect, device number 3 [ 101.223236][ T5061] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 101.337595][ T5354] mmap: syz.1.365 (5354) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 101.571898][ T5368] loop4: detected capacity change from 0 to 8 [ 101.610086][ T5367] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 101.626766][ T5367] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 101.635398][ T5367] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 101.644435][ T5367] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 101.653808][ T5367] page dumped because: unmovable page [ 101.654271][ T5368] SQUASHFS error: zlib decompression failed, data probably corrupt [ 101.659660][ T5367] page_owner info is not present (never set?) [ 101.679109][ T5368] SQUASHFS error: Failed to read block 0x4e8: -5 [ 101.686052][ T5368] SQUASHFS error: zlib decompression failed, data probably corrupt [ 101.696328][ T5368] SQUASHFS error: Failed to read block 0x4ee: -5 [ 101.706908][ T26] audit: type=1800 audit(1791881813.796:16): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.372" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 101.880153][ T5380] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 101.893141][ T5380] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 101.901668][ T5380] i2c-slave-eeprom: probe of 0-0001 failed with error -22 [ 101.915425][ T5380] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 102.037271][ T4174] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.318210][ T5313] block2mtd: error: cannot open device #! [ 102.421693][ T4174] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 102.438915][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.444384][ T4174] usb 2-1: config 0 has no interface number 0 [ 102.448933][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.499037][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.544000][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.562401][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.593931][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.637421][ T4174] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 102.646524][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.691237][ T4174] usb 2-1: Product: syz [ 102.705667][ T4174] usb 2-1: Manufacturer: syz [ 102.730037][ T4174] usb 2-1: SerialNumber: syz [ 102.771386][ T4174] usb 2-1: config 0 descriptor?? [ 103.385162][ T5400] loop5: detected capacity change from 0 to 32768 [ 103.495207][ T26] audit: type=1800 audit(1791881815.586:17): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.291" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 103.516184][ T4174] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 103.536334][ T4174] asix: probe of 2-1:0.251 failed with error -524 [ 103.693603][ T5446] loop4: detected capacity change from 0 to 256 [ 103.818319][ T21] usb 2-1: USB disconnect, device number 3 [ 104.308211][ T5435] loop3: detected capacity change from 0 to 32768 [ 104.316652][ T5467] loop5: detected capacity change from 0 to 128 [ 104.418414][ T5467] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 104.450198][ T5435] JBD2: Ignoring recovery information on journal [ 104.477997][ T5467] hpfs: filesystem error: improperly stopped [ 104.484050][ T5467] hpfs: You really don't want any checks? You are crazy... [ 104.553954][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 104.568511][ T5467] hpfs: hpfs_map_sector(): read error [ 104.577200][ T5467] hpfs: code page support is disabled [ 104.593941][ T5435] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.607853][ T5473] loop4: detected capacity change from 0 to 8192 [ 104.619033][ T5467] hpfs: filesystem error: map_dirent: not a directory [ 104.625852][ T5467] [ 104.657100][ T5213] loop4: p1 p2 < > p3 [ 104.661446][ T5213] loop4: partition table partially beyond EOD, truncated [ 104.664769][ T5467] hpfs: hpfs_map_4sectors(): unaligned read [ 104.685757][ T5467] hpfs: filesystem error: unable to find root dir [ 104.688649][ T5213] loop4: p1 start 16777216 is beyond EOD, truncated [ 104.732440][ T5213] loop4: p2 start 268435456 is beyond EOD, truncated [ 104.757611][ T5213] loop4: p3 size 60489728 extends beyond EOD, truncated [ 104.850596][ T5473] loop4: p1 p2 < > p3 [ 104.870940][ T5473] loop4: partition table partially beyond EOD, truncated [ 104.917410][ T5473] loop4: p1 start 16777216 is beyond EOD, truncated [ 104.947345][ T5473] loop4: p2 start 268435456 is beyond EOD, truncated [ 104.981640][ T5473] loop4: p3 size 60489728 extends beyond EOD, truncated [ 105.038263][ T4186] (syz-executor,4186,1):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 105.066807][ T5450] loop2: detected capacity change from 0 to 40427 [ 105.085956][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 105.147273][ T5450] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 105.155854][ T5450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.318586][ T5450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.338298][ T5497] loop1: detected capacity change from 0 to 1024 [ 105.349176][ T5503] synth uevent: /devices/virtual/cpuid/cpu0: unknown uevent action string [ 105.443856][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.454230][ T5503] cpuid cpu0: uevent: failed to send synthetic uevent [ 105.592854][ T5450] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.595002][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.630743][ T5450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.635499][ T5511] program syz.4.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.785273][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 105.931768][ T4195] attempt to access beyond end of device [ 105.931768][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 106.145860][ T5492] loop5: detected capacity change from 0 to 32768 [ 106.226051][ T5492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.413 (5492) [ 106.347403][ T5492] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 106.376229][ T5492] BTRFS info (device loop5): setting nodatasum [ 106.425538][ T5492] BTRFS info (device loop5): force zlib compression, level 3 [ 106.438652][ T5533] loop4: detected capacity change from 0 to 4096 [ 106.473480][ T5492] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 106.561538][ T5492] BTRFS info (device loop5): use lzo compression, level 0 [ 106.585797][ T5543] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.596679][ T5492] BTRFS info (device loop5): turning on flush-on-commit [ 106.652150][ T5492] BTRFS info (device loop5): enabling auto defrag [ 106.672978][ T5492] BTRFS info (device loop5): max_inline at 4096 [ 106.706288][ T5492] BTRFS info (device loop5): using free space tree [ 106.723472][ T5492] BTRFS info (device loop5): has skinny extents [ 106.749806][ T5549] loop3: detected capacity change from 0 to 256 [ 106.779919][ T5549] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.827460][ T5549] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 106.877409][ T5549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.097285][ T5492] BTRFS info (device loop5): enabling ssd optimizations [ 107.245412][ T5492] BTRFS info (device loop5): setting nodatasum [ 107.256217][ T5492] BTRFS info (device loop5): force zlib compression, level 3 [ 107.266157][ T5492] BTRFS info (device loop5): use lzo compression, level 0 [ 107.274438][ T5492] BTRFS info (device loop5): max_inline at 4096 [ 107.343047][ T5547] [ 107.343047][ T5547] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.343047][ T5547] [ 107.362798][ T5585] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 107.436967][ T5585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.448472][ T26] audit: type=1800 audit(1791881819.546:18): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.427" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 107.540772][ T5547] [ 107.540772][ T5547] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.540772][ T5547] [ 107.759850][ T155] [ 107.759850][ T155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.759850][ T155] [ 107.796450][ T155] [ 107.796450][ T155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.796450][ T155] [ 107.826114][ T277] [ 107.826114][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.826114][ T277] [ 107.890046][ T4185] [ 107.890046][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.890046][ T4185] [ 107.911275][ T4185] [ 107.911275][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.911275][ T4185] [ 108.379898][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 108.615781][ T5629] set_capacity_and_notify: 4 callbacks suppressed [ 108.615797][ T5629] loop2: detected capacity change from 0 to 2048 [ 108.754891][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.766978][ T5635] synth uevent: /devices/virtual/cpuid/cpu0: unknown uevent action string [ 108.776357][ T5629] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.787194][ T5635] cpuid cpu0: uevent: failed to send synthetic uevent [ 108.877246][ T5604] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.137497][ T5604] usb 5-1: Using ep0 maxpacket: 32 [ 109.294024][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.308762][ T5638] loop1: detected capacity change from 0 to 4096 [ 109.323869][ T5604] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.348977][ T5638] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 109.376474][ T5638] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 109.397635][ T26] audit: type=1400 audit(1791881821.486:19): apparmor="STATUS" operation="profile_load" profile="unconfined" name="::o" pid=5645 comm="syz.5.451" [ 109.402708][ T5604] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 109.471711][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.513258][ T5638] ntfs: volume version 3.1. [ 109.546076][ T5604] usb 5-1: config 0 descriptor?? [ 109.805143][ T5667] loop1: detected capacity change from 0 to 512 [ 109.876981][ T5667] FAT-fs (loop1): bogus number of FAT sectors [ 109.877769][ T5063] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.886749][ T5667] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.042478][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.057397][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.070876][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.080558][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.087837][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.094989][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.102479][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.111035][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x3 [ 110.123121][ T5604] wacom 0003:056A:00FA.0001: unknown main item tag 0x0 [ 110.154726][ T5604] wacom 0003:056A:00FA.0001: hidraw0: USB HID v0.02 Joystick [HID 056a:00fa] on usb-dummy_hcd.4-1/input0 [ 110.257369][ T5063] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.266468][ T5063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.327533][ T5063] usb 3-1: config 0 descriptor?? [ 110.330074][ T5664] loop3: detected capacity change from 0 to 32768 [ 110.369274][ T5063] cp210x 3-1:0.0: cp210x converter detected [ 110.379662][ T5604] usb 5-1: USB disconnect, device number 4 [ 110.430005][ T26] audit: type=1800 audit(1791881822.526:20): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.462" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 110.652344][ T5687] loop5: detected capacity change from 0 to 8192 [ 110.720014][ T5687] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.797385][ T5063] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 110.865246][ T5063] usb 3-1: cp210x converter now attached to ttyUSB0 [ 111.090106][ T5062] usb 3-1: USB disconnect, device number 3 [ 111.140597][ T5062] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.197809][ T5062] cp210x 3-1:0.0: device disconnected [ 111.290183][ T5708] loop3: detected capacity change from 0 to 512 [ 111.292305][ T5710] loop4: detected capacity change from 0 to 256 [ 111.324332][ T5708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 111.428637][ T5708] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 111.577497][ T4237] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 111.626215][ T5692] loop1: detected capacity change from 0 to 32768 [ 111.635789][ T5718] loop4: detected capacity change from 0 to 4096 [ 111.724435][ T26] audit: type=1800 audit(1791881823.816:21): pid=5692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.474" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 111.761260][ T5692] read_mapping_page failed! [ 111.777357][ T5692] ERROR: (device loop1): txCommit: [ 111.777357][ T5692] [ 111.792577][ T5718] ntfs3: loop4: Failed to load $Extend. [ 111.889888][ T5718] ntfs3: loop4: ino=21, "cpu.stat" mmap(write) compressed not supported [ 112.020069][ T4197] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 112.027101][ T4197] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 112.213652][ T5742] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.223976][ T5744] loop2: detected capacity change from 0 to 256 [ 112.555391][ T5753] EXT4-fs (loop4): Ignoring removed oldalloc option [ 112.595415][ T5753] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.626406][ T5753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 112.649257][ T5753] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.655652][ T5753] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.498: bad orphan inode 267 [ 112.695158][ T5753] EXT4-fs (loop4): Remounting filesystem read-only [ 112.744656][ T5753] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 112.771880][ T5753] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.498: dx entry: limit 0 != root limit 125 [ 112.784171][ T5753] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.498: Corrupt directory, running e2fsck is recommended [ 113.410445][ T5789] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.435328][ T5789] gfs2: path_lookup on c::: returned error -2 [ 113.458923][ T5727] XFS (loop3): Mounting V5 Filesystem [ 113.495139][ T5796] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 113.546244][ T5796] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 113.558169][ T5796] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 113.699083][ T5727] XFS (loop3): Ending clean mount [ 113.763780][ T5809] sctp: [Deprecated]: syz.2.514 (pid 5809) Use of int in max_burst socket option. [ 113.763780][ T5809] Use struct sctp_assoc_value instead [ 113.785345][ T5796] EXT4-fs (loop1): 1 truncate cleaned up [ 113.796767][ T5796] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 114.021619][ T5825] netlink: 'syz.5.519': attribute type 3 has an invalid length. [ 114.156428][ T4186] XFS (loop3): Unmounting Filesystem [ 114.243543][ T5833] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.298001][ T5839] set_capacity_and_notify: 6 callbacks suppressed [ 114.298016][ T5839] loop4: detected capacity change from 0 to 512 [ 114.428682][ T5839] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.526: bg 0: block 5: invalid block bitmap [ 114.496711][ T5839] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 114.529131][ T5839] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.526: invalid indirect mapped block 3 (level 2) [ 114.652431][ T5839] EXT4-fs (loop4): 1 orphan inode deleted [ 114.675158][ T5839] EXT4-fs (loop4): 1 truncate cleaned up [ 114.695033][ T5839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.052075][ T5874] program syz.3.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.174121][ T5868] loop4: detected capacity change from 0 to 4096 [ 115.251060][ T5868] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 115.333902][ T5868] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 115.397258][ T5868] ntfs3: loop4: Failed to load $Extend. [ 115.730982][ T5868] ntfs3: loop4: ino=5, "/" directory corrupted [ 115.759926][ T5868] ntfs3: loop4: ino=5, "/" directory corrupted [ 115.886115][ T5854] loop2: detected capacity change from 0 to 32768 [ 116.143956][ T5905] loop5: detected capacity change from 0 to 8192 [ 116.165739][ T5878] loop1: detected capacity change from 0 to 32768 [ 116.254138][ T5905] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 116.320050][ T26] audit: type=1800 audit(1791881828.416:22): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.537" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 116.371390][ T5905] REISERFS (device loop5): using ordered data mode [ 116.379301][ T5905] reiserfs: using flush barriers [ 116.405129][ T5905] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.452068][ T5905] REISERFS (device loop5): checking transaction log (loop5) [ 116.548951][ T5905] REISERFS (device loop5): Using r5 hash to sort names [ 116.597729][ T5905] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 116.677352][ T5062] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.681412][ T5932] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 117.022903][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 117.172284][ T5953] user requested TSC rate below hardware speed [ 117.217452][ T5062] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 117.226977][ T5062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.247315][ T5062] usb 4-1: Product: syz [ 117.257448][ T5062] usb 4-1: Manufacturer: syz [ 117.273109][ T5062] usb 4-1: SerialNumber: syz [ 117.304620][ T5062] usb 4-1: config 0 descriptor?? [ 117.348671][ T5062] ch341 4-1:0.0: ch341-uart converter detected [ 117.358238][ T5061] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.393939][ T5937] loop1: detected capacity change from 0 to 32768 [ 117.534021][ T5937] XFS (loop1): Mounting V5 Filesystem [ 117.610482][ T5937] XFS (loop1): Ending clean mount [ 117.723607][ T5061] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 117.755470][ T5061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.822488][ T5061] usb 6-1: config 0 descriptor?? [ 117.879559][ T5061] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 117.915825][ T5984] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.007488][ T5062] usb 4-1: failed to send control message: -71 [ 118.013749][ T5062] ch341-uart: probe of ttyUSB0 failed with error -71 [ 118.042220][ T5062] usb 4-1: USB disconnect, device number 3 [ 118.049050][ T4185] XFS (loop1): Unmounting Filesystem [ 118.072028][ T5062] ch341 4-1:0.0: device disconnected [ 118.227534][ T5969] loop4: detected capacity change from 0 to 32768 [ 118.314726][ T5061] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 118.454761][ T5969] XFS (loop4): Mounting V5 Filesystem [ 118.592547][ T5969] XFS (loop4): Ending clean mount [ 118.742528][ T5989] loop2: detected capacity change from 0 to 40427 [ 118.757350][ T5061] gspca_cpia1: usb_control_msg 02, error -71 [ 118.766170][ T5061] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 118.804484][ T5061] usb 6-1: USB disconnect, device number 2 [ 118.869439][ T4197] XFS (loop4): Unmounting Filesystem [ 118.878123][ T5989] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 118.897727][ T5989] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.989964][ T5989] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.061695][ T6024] tipc: Bearer : already 2 bearers with priority 10 [ 119.106916][ T6024] tipc: Bearer : trying with adjusted priority [ 119.125848][ T6024] tipc: New replicast peer: 255.255.255.255 [ 119.148638][ T6024] tipc: Enabled bearer , priority 9 [ 119.154930][ T5989] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.167410][ T5989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.663448][ T4174] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 119.927346][ T4174] usb 6-1: Using ep0 maxpacket: 32 [ 120.036703][ T6071] loop3: detected capacity change from 0 to 1024 [ 120.079663][ T4174] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 120.116113][ T6074] loop1: detected capacity change from 0 to 1024 [ 120.117245][ T4174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.173788][ T4174] usb 6-1: config 0 descriptor?? [ 120.456171][ T6084] loop3: detected capacity change from 0 to 256 [ 120.484172][ T4174] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 120.514055][ T4174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.551865][ T6084] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 120.599043][ T4174] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 120.610420][ T4174] usb 6-1: media controller created [ 120.693231][ T6036] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 120.703966][ T4174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.818727][ T4174] az6027: usb out operation failed. (-71) [ 120.857510][ T4174] az6027: usb out operation failed. (-71) [ 120.874554][ T6053] loop4: detected capacity change from 0 to 40427 [ 120.877262][ T4174] stb0899_attach: Driver disabled by Kconfig [ 120.887758][ T4174] az6027: no front-end attached [ 120.887758][ T4174] [ 120.928149][ T4174] az6027: usb out operation failed. (-71) [ 120.933558][ T6053] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 120.942151][ T4174] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 120.973396][ T4174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 120.982631][ T6053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 121.031591][ T26] audit: type=1400 audit(1791881833.126:23): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=6104 comm="syz.1.600" name="p" offset=92 [ 121.036786][ T4174] dvb-usb: schedule remote query interval to 400 msecs. [ 121.093602][ T4174] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 121.125724][ T4174] usb 6-1: USB disconnect, device number 3 [ 121.141530][ T6053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.254489][ T4174] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 121.333858][ T6053] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 121.344630][ T6053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.453375][ T6128] loop2: detected capacity change from 0 to 1024 [ 121.544944][ T6128] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 122.207291][ T5062] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.520570][ T6173] loop4: detected capacity change from 0 to 64 [ 122.563437][ T6177] program syz.5.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.587495][ T5062] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.715014][ T26] audit: type=1800 audit(1791881834.806:24): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.611" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 122.772094][ T26] audit: type=1804 audit(1791881834.836:25): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.611" name="/newroot/127/file1/file1" dev="loop4" ino=5 res=1 errno=0 [ 122.797386][ T5062] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.817262][ T5062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.825455][ T5062] usb 4-1: Product: syz [ 122.834156][ T5062] usb 4-1: Manufacturer: syz [ 122.853117][ T5062] usb 4-1: SerialNumber: syz [ 122.899736][ T26] audit: type=1800 audit(1791881834.996:26): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.627" name="dead_threshold" dev="configfs" ino=38928 res=0 errno=0 [ 123.018492][ T6203] device macvlan0 entered promiscuous mode [ 123.038206][ T6203] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 123.172277][ T6218] loop1: detected capacity change from 0 to 512 [ 123.282836][ T6218] EXT4-fs (loop1): inline encryption not supported [ 123.312114][ T6218] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.635: inode #1: comm syz.1.635: iget: illegal inode # [ 123.325442][ T6227] tipc: Enabling of bearer rejected, media not registered [ 123.348773][ T6218] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.635: error while reading EA inode 1 err=-117 [ 123.404171][ T6218] EXT4-fs (loop1): 1 orphan inode deleted [ 123.413407][ T6218] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 123.476478][ T5061] kernel read not supported for file /media6 (pid: 5061 comm: kworker/0:16) [ 123.553039][ T6244] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.635: unexpected EA_INODE flag [ 123.805125][ T5062] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 123.815490][ T6260] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 123.837345][ T5062] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 123.877454][ T5062] cdc_ncm 4-1:1.0: bind() failure [ 123.901082][ T5062] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 123.929815][ T5062] cdc_ncm 4-1:1.1: bind() failure [ 123.960286][ T5062] usb 4-1: USB disconnect, device number 4 [ 123.997330][ T5061] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.061316][ T6277] bond0: option arp_interval: invalid value ( ) [ 124.079566][ T6277] bond0: option arp_interval: allowed values 0 - 2147483647 [ 124.367473][ T5061] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.376585][ T5061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.426319][ T5061] usb 5-1: config 0 descriptor?? [ 124.478588][ T5061] cp210x 5-1:0.0: cp210x converter detected [ 124.590583][ T5062] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.691393][ T6279] loop1: detected capacity change from 0 to 40427 [ 124.715788][ T6279] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 124.731954][ T6279] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.754669][ T6279] F2FS-fs (loop1): invalid crc value [ 124.775449][ T6279] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 124.928336][ T6279] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.935542][ T6279] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.957535][ T5062] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 124.979033][ T5062] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.007244][ T5062] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.024330][ T5062] usb 3-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 125.033961][ T6318] loop3: detected capacity change from 0 to 8 [ 125.040366][ T5062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.053570][ T5062] usb 3-1: config 0 descriptor?? [ 125.064076][ T4185] attempt to access beyond end of device [ 125.064076][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 125.137428][ T5061] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 125.146073][ T5061] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 125.169743][ T5061] usb 5-1: cp210x converter now attached to ttyUSB0 [ 125.196455][ T5061] usb 5-1: USB disconnect, device number 5 [ 125.331786][ T5061] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.350322][ T5061] cp210x 5-1:0.0: device disconnected [ 125.541799][ T5062] asus 0003:0B05:183D.0002: ignoring exceeding usage max [ 125.541954][ T6335] loop1: detected capacity change from 0 to 64 [ 125.563872][ T5062] asus 0003:0B05:183D.0002: No inputs registered, leaving [ 125.574319][ T5062] asus 0003:0B05:183D.0002: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.2-1/input0 [ 125.646643][ T6339] loop5: detected capacity change from 0 to 64 [ 125.697893][ T6339] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 125.707014][ T6335] MINIX-fs: deleted inode referenced: 6 [ 125.718922][ T6339] hfs: get root inode failed [ 125.872622][ T5062] usb 3-1: USB disconnect, device number 4 [ 125.965117][ T6347] serial 00:04: in use; can't configure [ 126.211691][ T6362] loop4: detected capacity change from 0 to 2048 [ 126.231947][ T6365] binder: 6364:6365 ioctl c0306201 200000000440 returned -14 [ 126.263421][ T6362] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 126.297642][ T6367] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.690'. [ 126.305823][ T6362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.407259][ T5062] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 126.700995][ T6384] loop3: detected capacity change from 0 to 4096 [ 126.758366][ T6384] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 126.939783][ T5062] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.956704][ T5062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.012821][ T5062] usb 6-1: Product: syz [ 127.022963][ T5062] usb 6-1: Manufacturer: syz [ 127.033120][ T5062] usb 6-1: SerialNumber: syz [ 127.162747][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 127.227554][ T5060] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.369711][ T6413] loop1: detected capacity change from 0 to 1024 [ 127.372588][ T6399] loop2: detected capacity change from 0 to 32768 [ 127.413552][ T26] audit: type=1800 audit(1791881839.506:27): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.712" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 127.425371][ T6413] hfsplus: found bad thread record in catalog [ 127.471103][ T145] hfsplus: found bad thread record in catalog [ 127.482197][ T5060] usb 5-1: Using ep0 maxpacket: 16 [ 127.531869][ T6399] XFS (loop2): Mounting V5 Filesystem [ 127.608072][ T5060] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.619620][ T5060] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.632843][ T6399] XFS (loop2): Ending clean mount [ 127.633026][ T6425] loop1: detected capacity change from 0 to 128 [ 127.644603][ T4722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.688857][ T4195] XFS (loop2): Unmounting Filesystem [ 127.707623][ T5062] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.715153][ T6425] ufs: ufs_fill_super(): bad magic number [ 127.790057][ T5060] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.799370][ T5060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.809550][ T5060] usb 5-1: Product: syz [ 127.813792][ T5060] usb 5-1: Manufacturer: syz [ 127.836482][ T5060] usb 5-1: SerialNumber: syz [ 127.897347][ T4722] usb 4-1: Using ep0 maxpacket: 32 [ 127.986690][ T6432] ima: policy update failed [ 127.991817][ T26] audit: type=1802 audit(1791881840.086:28): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.719" res=0 errno=0 [ 128.029311][ T4722] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 128.045963][ T6435] vivid-000: disconnect [ 128.057950][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.060468][ T6435] vivid-000: reconnect [ 128.087284][ T4722] usb 4-1: config 0 descriptor?? [ 128.169511][ T5060] usb 5-1: 0:2 : does not exist [ 128.190704][ T4453] usb 6-1: USB disconnect, device number 4 [ 128.267088][ T5060] usb 5-1: USB disconnect, device number 6 [ 128.347433][ T4722] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.370059][ T4722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.397603][ T4722] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.406036][ T4722] usb 4-1: media controller created [ 128.445778][ T4722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.549841][ T6415] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 128.577383][ T4722] az6027: usb out operation failed. (-71) [ 128.599343][ T4722] az6027: usb out operation failed. (-71) [ 128.606173][ T4722] stb0899_attach: Driver disabled by Kconfig [ 128.612340][ T4722] az6027: no front-end attached [ 128.612340][ T4722] [ 128.637280][ T4722] az6027: usb out operation failed. (-71) [ 128.643943][ T4722] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.674744][ T4722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 128.695733][ T4722] dvb-usb: schedule remote query interval to 400 msecs. [ 128.703670][ T4722] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 128.742464][ T4722] usb 4-1: USB disconnect, device number 5 [ 128.787282][ T5062] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 128.797865][ T5062] ath9k_htc: Failed to initialize the device [ 128.823040][ T4453] usb 6-1: ath9k_htc: USB layer deinitialized [ 128.830268][ T4722] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 128.863242][ T4230] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 129.064044][ T6473] UHID_CREATE from different security context by process 313 (syz.4.735), this is not allowed. [ 129.111123][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.129349][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.150044][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.159462][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.166928][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.174438][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.181888][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.189342][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.196777][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.204249][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.211696][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.219176][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.226579][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.235439][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.243286][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.251990][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.263518][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.271139][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.285519][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.298461][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.305891][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.313901][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.321903][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.329786][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.337260][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.344752][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.363206][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.370701][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.378235][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.385692][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.393270][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.401472][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.417190][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.424634][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.432718][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.452679][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.462094][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.469731][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.477209][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.477753][ T4230] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 129.484720][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.502263][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.510110][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.510148][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.517713][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.517742][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.543404][ T4230] usb 3-1: Product: syz [ 129.547207][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.555110][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.555176][ T4230] usb 3-1: Manufacturer: syz [ 129.575120][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.580144][ T4230] usb 3-1: SerialNumber: syz [ 129.595500][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.604757][ T4230] usb 3-1: config 0 descriptor?? [ 129.620642][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.642818][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.666903][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.694987][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.720957][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.735311][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.746923][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.771548][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.789784][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.809094][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.830029][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.846246][ T6504] loop3: detected capacity change from 0 to 256 [ 129.853160][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.861055][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.870286][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.877443][ T4230] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 129.878550][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.893083][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.901403][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.909037][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.916483][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.924062][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.931560][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.963253][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.984879][ T6504] FAT-fs (loop3): Directory bread(block 64) failed [ 130.006483][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.014183][ T6504] FAT-fs (loop3): Directory bread(block 65) failed [ 130.027299][ T6504] FAT-fs (loop3): Directory bread(block 66) failed [ 130.033911][ T6504] FAT-fs (loop3): Directory bread(block 67) failed [ 130.046808][ T5063] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.070156][ T5063] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 130.087290][ T6504] FAT-fs (loop3): Directory bread(block 68) failed [ 130.093877][ T6504] FAT-fs (loop3): Directory bread(block 69) failed [ 130.109534][ T6504] FAT-fs (loop3): Directory bread(block 70) failed [ 130.116136][ T6504] FAT-fs (loop3): Directory bread(block 71) failed [ 130.127491][ T6504] FAT-fs (loop3): Directory bread(block 72) failed [ 130.145382][ T6504] FAT-fs (loop3): Directory bread(block 73) failed [ 130.202609][ T6511] fido_id[6511]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.309821][ T4230] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 130.473852][ T6532] binder: 6530:6532 ioctl 4018620d 0 returned -22 [ 130.597253][ T4174] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 130.612942][ T5062] usb 3-1: USB disconnect, device number 5 [ 130.859831][ T6556] loop1: detected capacity change from 0 to 128 [ 130.945231][ T6556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.961021][ T4174] usb 5-1: not running at top speed; connect to a high speed hub [ 130.969006][ T6556] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.057672][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.073669][ T4174] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 131.084492][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.149668][ T4174] usb 5-1: Found UVC 1.00 device (046d:0825) [ 131.177459][ T4174] usb 5-1: No streaming interface found for terminal 2. [ 131.286741][ T6572] netem: change failed [ 131.398203][ T4174] usb 5-1: USB disconnect, device number 7 [ 132.051225][ T6600] loop2: detected capacity change from 0 to 2048 [ 132.115554][ T6600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.183966][ T26] audit: type=1800 audit(1791881841.272:29): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.781" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 132.242981][ T6613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.786'. [ 132.493248][ T6630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.794'. [ 132.613716][ T6637] bond0: no command found in slaves file - use +ifname or -ifname [ 132.625386][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'. [ 132.644336][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'. [ 132.667719][ T6642] loop4: detected capacity change from 0 to 512 [ 132.668847][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'. [ 132.698980][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'. [ 132.778063][ T6642] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 132.812019][ T6642] EXT4-fs (loop4): inline encryption not supported [ 132.836824][ T6642] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.869873][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.876262][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916886][ T6642] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.951835][ T6642] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.799: bg 0: block 248: padding at end of block bitmap is not set [ 133.031009][ T6642] Quota error (device loop4): write_blk: dquota write failed [ 133.051453][ T6642] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 133.084294][ T6642] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.799: Failed to acquire dquot type 1 [ 133.183587][ T6642] EXT4-fs (loop4): 1 truncate cleaned up [ 133.207290][ T6642] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 133.514522][ T6647] loop3: detected capacity change from 0 to 32768 [ 133.664956][ T6647] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.855436][ T6676] bond0: (slave bond_slave_0): Releasing backup interface [ 133.872788][ T6647] ocfs2: Unmounting device (7,3) on (node local) [ 134.012107][ T6661] loop2: detected capacity change from 0 to 32768 [ 134.125969][ T6661] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.339211][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 134.398225][ T6690] loop3: detected capacity change from 0 to 256 [ 134.405409][ T6690] exfat: Bad value for 'uid' [ 135.049676][ T6715] CIFS: Attempting to mount \\127.0.0.1\share [ 135.072321][ T6715] CIFS: VFS: No username specified [ 135.176084][ T6724] loop4: detected capacity change from 0 to 64 [ 135.213557][ T6725] netlink: 120 bytes leftover after parsing attributes in process `syz.5.835'. [ 135.339918][ T6731] loop4: detected capacity change from 0 to 1024 [ 135.515902][ T6735] loop3: detected capacity change from 0 to 2048 [ 135.641714][ T6746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.846'. [ 135.671363][ T6746] sch_fq: defrate 0 ignored. [ 135.686664][ T6735] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 135.715630][ T6735] EXT4-fs (loop3): shut down requested (1) [ 136.101421][ T6774] loop4: detected capacity change from 0 to 128 [ 136.222860][ T6779] loop2: detected capacity change from 0 to 1024 [ 136.507523][ T26] audit: type=1400 audit(1791881845.602:30): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6785 comm="syz.2.863" [ 136.693787][ T6753] loop5: detected capacity change from 0 to 32768 [ 136.696106][ T6798] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.954045][ T6808] maxtcpc: probe of 0-0005 failed with error -5 [ 136.956344][ T6812] loop5: detected capacity change from 0 to 1024 [ 136.970881][ T6808] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x05 [ 138.213965][ T6900] program syz.3.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.514882][ T6917] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 138.514882][ T6917] The task syz.3.921 (6917) triggered the difference, watch for misbehavior. [ 138.789502][ T6905] loop4: detected capacity change from 0 to 32768 [ 138.805609][ T5063] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0004/input/input13 [ 138.832182][ T5063] hid-generic 0005:FFFD057E:0305.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 138.838281][ T6905] XFS: noikeep mount option is deprecated. [ 138.942120][ T6905] XFS (loop4): Mounting V5 Filesystem [ 138.946117][ T6939] loop5: detected capacity change from 0 to 512 [ 139.069116][ T6939] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,noblock_validity,usrquota,. Quota mode: writeback. [ 139.094565][ T6939] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.099292][ T6905] XFS (loop4): Ending clean mount [ 139.141552][ T6905] XFS (loop4): Quotacheck needed: Please wait. [ 139.207376][ T5062] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 139.305252][ T6905] XFS (loop4): Quotacheck: Done. [ 139.353400][ T6950] loop3: detected capacity change from 0 to 2048 [ 139.386505][ T4197] XFS (loop4): Unmounting Filesystem [ 139.449253][ T6950] Alternate GPT is invalid, using primary GPT. [ 139.455684][ T6950] loop3: p2 p3 p7 [ 139.615268][ T5062] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.625951][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 139.627919][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 139.642351][ T5206] udevd[5206]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 139.729819][ T5062] usb 3-1: no configurations [ 139.734516][ T5062] usb 3-1: can't read configurations, error -22 [ 139.762705][ T6963] loop3: detected capacity change from 0 to 512 [ 139.827703][ T4453] Bluetooth: hci5: command 0x1003 tx timeout [ 139.833812][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 139.923400][ T6963] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 139.938205][ T6963] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.101732][ T6976] netlink: 'syz.5.945': attribute type 10 has an invalid length. [ 140.134194][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.150191][ T6976] device bridge_slave_1 left promiscuous mode [ 140.159174][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.191510][ T6976] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 140.293884][ T6981] loop3: detected capacity change from 0 to 1024 [ 140.301433][ T6985] netlink: 260 bytes leftover after parsing attributes in process `syz.2.948'. [ 140.365772][ T6981] hfsplus: invalid length 1280 has been corrected to 255 [ 140.572435][ T6994] WARNING! power/level is deprecated; use power/control instead [ 140.616223][ T6996] loop3: detected capacity change from 0 to 128 [ 140.743379][ T6998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.801804][ T6998] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.042242][ T6998] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz.5.953: invalid size [ 141.124595][ T7021] netlink: 27 bytes leftover after parsing attributes in process `syz.4.964'. [ 141.194916][ T7019] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.207737][ T7019] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.309875][ T7019] fscrypt (loop3, inode 12): Unsupported encryption flags (0x47) [ 141.799822][ T7035] ip_tables: iptables: counters copy to user failed while replacing table [ 141.907764][ T5062] Bluetooth: hci5: command 0x1001 tx timeout [ 141.915103][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 142.216259][ T7042] set_capacity_and_notify: 2 callbacks suppressed [ 142.216275][ T7042] loop4: detected capacity change from 0 to 8192 [ 142.264668][ T7042] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 142.298998][ T7042] REISERFS (device loop4): using ordered data mode [ 142.305645][ T7042] reiserfs: using flush barriers [ 142.356642][ T7042] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.378602][ T7042] REISERFS (device loop4): checking transaction log (loop4) [ 142.450488][ T7047] netlink: 192 bytes leftover after parsing attributes in process `syz.2.973'. [ 142.572052][ T7042] REISERFS (device loop4): Using tea hash to sort names [ 142.577550][ T4174] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 142.595851][ T7042] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 142.846155][ T26] audit: type=1400 audit(1791881851.932:31): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7054 comm="syz.2.978" name="p" offset=48 [ 142.867693][ T4174] usb 6-1: Using ep0 maxpacket: 16 [ 143.004038][ T4174] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.019158][ T4174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 143.053606][ T4174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.093667][ T7061] loop3: detected capacity change from 0 to 128 [ 143.192943][ T7061] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.241286][ T7061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.259913][ T7069] loop2: detected capacity change from 0 to 16 [ 143.289242][ T4174] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 143.316861][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.348920][ T4174] usb 6-1: Product: syz [ 143.353141][ T4174] usb 6-1: Manufacturer: syz [ 143.377726][ T4174] usb 6-1: SerialNumber: syz [ 143.378085][ T7069] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 143.393619][ T7071] loop4: detected capacity change from 0 to 164 [ 143.401425][ T4174] usb 6-1: config 0 descriptor?? [ 143.500470][ T4174] mcba_usb 6-1:0.0: Can't find endpoints [ 143.695210][ T26] audit: type=1400 audit(1791881852.782:32): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7074 comm="syz.3.987" [ 143.843158][ T7045] udc-core: couldn't find an available UDC or it's busy [ 143.877201][ T7045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.920270][ T21] usb 6-1: USB disconnect, device number 5 [ 143.991466][ T5062] Bluetooth: hci5: command 0x1009 tx timeout [ 144.386897][ T7094] loop4: detected capacity change from 0 to 1024 [ 144.498600][ T4722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.564521][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.998'. [ 144.574573][ T7096] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 144.624761][ T7098] loop5: detected capacity change from 0 to 2048 [ 144.675912][ T7100] loop4: detected capacity change from 0 to 2048 [ 144.698332][ T7098] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 144.734950][ T7098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.778137][ T7100] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none. [ 144.824368][ T7100] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.869812][ T4722] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 144.902402][ T4722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.954428][ T4722] usb 3-1: config 0 descriptor?? [ 144.970648][ T7108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.999: bg 0: block 345: padding at end of block bitmap is not set [ 144.991636][ T7108] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 145.013430][ T7108] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.013430][ T7108] [ 145.108859][ T7113] loop5: detected capacity change from 0 to 4096 [ 145.136064][ T4226] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 145.155221][ T4226] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.155221][ T4226] [ 145.158375][ T7114] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.177765][ T4226] EXT4-fs (loop4): Total free blocks count 0 [ 145.183790][ T4226] EXT4-fs (loop4): Free/Dirty block details [ 145.190709][ T4226] EXT4-fs (loop4): free_blocks=0 [ 145.195777][ T4226] EXT4-fs (loop4): dirty_blocks=464 [ 145.201681][ T4226] EXT4-fs (loop4): Block reservation details [ 145.207772][ T4226] EXT4-fs (loop4): i_reserved_data_blocks=29 [ 145.227183][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.392864][ T7119] loop4: detected capacity change from 0 to 256 [ 145.428037][ T7119] exfat: Deprecated parameter 'utf8' [ 145.434763][ T7119] exfat: Deprecated parameter 'utf8' [ 145.449882][ T7092] udc-core: couldn't find an available UDC or it's busy [ 145.456850][ T7092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.467387][ T4722] ath6kl: Failed to read usb control message: -32 [ 145.473871][ T4722] ath6kl: Unable to read the bmi data from the device: -32 [ 145.492338][ T4722] ath6kl: Unable to recv target info: -32 [ 145.499815][ T7119] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 145.512370][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 145.541724][ T4722] ath6kl: Failed to init ath6kl core: -32 [ 145.570913][ T4722] ath6kl_usb: probe of 3-1:0.0 failed with error -32 [ 145.619153][ T4722] usb 3-1: USB disconnect, device number 8 [ 145.790246][ T7134] kAFS: bad VL server IP address [ 145.837244][ T21] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 145.844393][ T7139] loop5: detected capacity change from 0 to 16 [ 145.851083][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.862409][ T21] usb 4-1: Product: syz [ 145.866611][ T21] usb 4-1: Manufacturer: syz [ 145.871923][ T7138] netlink: 'syz.4.1015': attribute type 15 has an invalid length. [ 145.880363][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1015'. [ 145.889911][ T21] usb 4-1: SerialNumber: syz [ 145.901313][ T21] usb 4-1: config 0 descriptor?? [ 145.905695][ T7139] erofs: (device loop5): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 145.949354][ T21] gspca_main: sq930x-2.14.0 probing 2770:930c [ 146.069423][ T7143] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 146.130907][ T7143] attempt to access beyond end of device [ 146.130907][ T7143] loop4: rw=524288, want=4281, limit=256 [ 146.176747][ T7143] attempt to access beyond end of device [ 146.176747][ T7143] loop4: rw=0, want=4281, limit=256 [ 146.194799][ T7150] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 146.227232][ T7150] exFAT-fs (loop4): Filesystem has been set read-only [ 146.237027][ T26] audit: type=1800 audit(1791881855.322:33): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1017" name="file1" dev="loop4" ino=1048678 res=0 errno=0 [ 146.359615][ T7154] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1022'. [ 146.741448][ T7171] block2mtd: illegal erase size [ 146.797718][ T21] gspca_sq930x: ucbus_write failed -71 [ 147.058993][ T21] gspca_sq930x: Sensor ov9630 not yet treated [ 147.065205][ T21] sq930x: probe of 4-1:0.0 failed with error -22 [ 147.114573][ T21] usb 4-1: USB disconnect, device number 6 [ 147.232120][ T7196] set_capacity_and_notify: 2 callbacks suppressed [ 147.232138][ T7196] loop5: detected capacity change from 0 to 64 [ 147.306363][ T7196] attempt to access beyond end of device [ 147.306363][ T7196] loop5: rw=0, want=1026, limit=64 [ 147.322803][ T7196] Buffer I/O error on dev loop5, logical block 512, async page read [ 147.324584][ T7202] loop2: detected capacity change from 0 to 128 [ 147.331655][ T7196] attempt to access beyond end of device [ 147.331655][ T7196] loop5: rw=0, want=113154, limit=64 [ 147.352553][ T7196] Buffer I/O error on dev loop5, logical block 56576, async page read [ 147.394798][ T7203] attempt to access beyond end of device [ 147.394798][ T7203] loop5: rw=0, want=1026, limit=64 [ 147.410437][ T7202] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.446122][ T7203] Buffer I/O error on dev loop5, logical block 512, async page read [ 147.456340][ T7203] attempt to access beyond end of device [ 147.456340][ T7203] loop5: rw=0, want=113154, limit=64 [ 147.474919][ T7203] Buffer I/O error on dev loop5, logical block 56576, async page read [ 147.486999][ T26] audit: type=1800 audit(1791881856.572:34): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1040" name="minix" dev="loop5" ino=8 res=0 errno=0 [ 147.877076][ T7228] sctp: [Deprecated]: syz.5.1054 (pid 7228) Use of int in max_burst socket option deprecated. [ 147.877076][ T7228] Use struct sctp_assoc_value instead [ 147.927267][ T5602] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.197260][ T5602] usb 3-1: Using ep0 maxpacket: 8 [ 148.241318][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.363818][ T5602] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 148.376766][ T5602] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 148.427321][ T5602] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.445951][ T5602] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 148.464595][ T5602] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 148.501499][ T7251] MTRR 1 not used [ 148.515037][ T5602] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.554162][ T5602] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.565642][ T5602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.623604][ T7257] tun0: tun_chr_ioctl cmd 1074812118 [ 148.697427][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.837745][ T21] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 148.853825][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 148.862699][ T5602] usb 3-1: GET_CAPABILITIES returned 0 [ 148.872587][ T5602] usbtmc 3-1:16.0: can't read capabilities [ 148.930713][ T21] usb 4-1: Product: syz [ 148.945139][ T21] usb 4-1: Manufacturer: syz [ 149.006243][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 149.040980][ T21] navman 4-1:1.0: navman converter detected [ 149.056079][ T21] usb 4-1: navman converter now attached to ttyUSB0 [ 149.070533][ T5062] usb 3-1: USB disconnect, device number 9 [ 149.293833][ T4174] usb 4-1: USB disconnect, device number 7 [ 149.316041][ T4174] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 149.334604][ T4174] navman 4-1:1.0: device disconnected [ 149.567505][ T21] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.571585][ T4453] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 149.827307][ T5062] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.937491][ T4453] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 149.949476][ T4453] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.962319][ T4453] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.968996][ T4453] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 149.977583][ T21] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.978217][ T4453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.994383][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.999775][ T4453] usb 2-1: config 0 descriptor?? [ 150.027471][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.067403][ T5062] usb 5-1: Using ep0 maxpacket: 32 [ 150.098022][ T21] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.107191][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.115439][ T21] usb 6-1: SerialNumber: syz [ 150.227615][ T5062] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.307645][ T5062] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.316699][ T5062] usb 5-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 150.327035][ T5062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.409436][ T21] usb 6-1: 0:2 : does not exist [ 150.419545][ T21] usb 6-1: USB disconnect, device number 6 [ 150.489287][ T4453] apple 0003:05AC:0240.0005: ignoring exceeding usage max [ 150.496575][ T5062] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 150.507251][ T5062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.515274][ T5062] usb 5-1: Product: syz [ 150.521588][ T4453] apple 0003:05AC:0240.0005: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 150.532930][ T5062] usb 5-1: Manufacturer: syz [ 150.537581][ T5062] usb 5-1: SerialNumber: syz [ 150.543134][ T4453] apple 0003:05AC:0240.0005: No inputs registered, leaving [ 150.551711][ T4453] apple 0003:05AC:0240.0005: hidraw0: USB HID v0.11 Joystick [HID 05ac:0240] on usb-dummy_hcd.1-1/input0 [ 150.599787][ T5062] usb 5-1: selecting invalid altsetting 1 [ 150.638420][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.662984][ T5062] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 150.710665][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.741519][ T5062] usb 2-1: USB disconnect, device number 4 [ 150.817020][ T4453] usb 5-1: USB disconnect, device number 8 [ 151.308583][ T7285] loop2: detected capacity change from 0 to 128 [ 151.370057][ T7293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.373325][ T7285] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.484046][ T7285] hpfs: filesystem error: improperly stopped [ 151.510539][ T7285] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.537606][ T7285] hpfs: You really don't want any checks? You are crazy... [ 151.565772][ T7285] hpfs: Code page index out of array [ 151.583103][ T7285] hpfs: code page support is disabled [ 151.603700][ T7285] hpfs: hpfs_map_4sectors(): unaligned read [ 151.612976][ T7302] loop5: detected capacity change from 0 to 1024 [ 151.623449][ T7285] hpfs: hpfs_map_4sectors(): unaligned read [ 151.664288][ T7285] hpfs: filesystem error: unable to find root dir [ 151.684817][ T7302] hfsplus: walked past end of dir [ 151.815829][ T7306] phram: not enough arguments [ 151.992376][ T7310] loop3: detected capacity change from 0 to 512 [ 152.115768][ T7316] netlink: 14752 bytes leftover after parsing attributes in process `syz.2.1095'. [ 152.342395][ T7296] loop4: detected capacity change from 0 to 32768 [ 152.416087][ T7296] find_entry called with index = 0 [ 152.446458][ T7296] read_mapping_page failed! [ 152.459483][ T7296] ERROR: (device loop4): txCommit: [ 152.459483][ T7296] [ 152.499155][ T7330] batman_adv: batadv0: Adding interface: vlan2 [ 152.505366][ T7330] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.536343][ T7330] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 152.561576][ T277] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 152.587414][ T277] ------------[ cut here ]------------ [ 152.592923][ T277] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 152.602841][ T7336] netlink: 'syz.1.1103': attribute type 5 has an invalid length. [ 152.611614][ T277] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 152.617719][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 152.624933][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.635008][ T277] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 152.636009][ T7342] netlink: 'syz.1.1108': attribute type 2 has an invalid length. [ 152.639976][ T277] Code: 59 e4 e3 06 0f 0b e8 02 95 a5 fe 48 c7 c7 40 56 62 8a 48 c7 c6 29 52 62 8a ba a4 03 00 00 48 c7 c1 00 61 62 8a e8 33 e4 e3 06 <0f> 0b e8 dc 94 a5 fe 48 c7 c7 40 56 62 8a 48 c7 c6 29 52 62 8a ba [ 152.639997][ T277] RSP: 0018:ffffc90002d6fd30 EFLAGS: 00010246 [ 152.640017][ T277] RAX: 0000000000000037 RBX: 0000000000000000 RCX: 8062972e30d21600 [ 152.640030][ T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 152.640042][ T277] RBP: ffff88805ecefd90 R08: ffff8880b8f33d7f R09: 1ffff110171e67af [ 152.649266][ T7340] loop3: detected capacity change from 0 to 64 [ 152.667423][ T277] R10: dffffc0000000000 R11: ffffed10171e67b0 R12: ffffc900028d21f8 [ 152.667447][ T277] R13: dffffc0000000000 R14: 000000000000003f R15: ffff88801bda5a94 [ 152.667459][ T277] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 152.667473][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.667486][ T277] CR2: 0000555574375a38 CR3: 000000007285e000 CR4: 00000000003506e0 [ 152.667503][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.750998][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.758971][ T277] Call Trace: [ 152.762251][ T277] [ 152.765185][ T277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 152.770734][ T277] ? lockdep_hardirqs_on+0x94/0x140 [ 152.775942][ T277] jfs_lazycommit+0x598/0xb60 [ 152.780616][ T277] ? txFreelock+0x5a0/0x5a0 [ 152.785117][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 152.791100][ T277] ? sched_dynamic_update+0x210/0x210 [ 152.796488][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 152.802380][ T277] ? __kthread_parkme+0x14e/0x1b0 [ 152.807403][ T277] kthread+0x42e/0x520 [ 152.811470][ T277] ? txFreelock+0x5a0/0x5a0 [ 152.815967][ T277] ? kthread_blkcg+0xd0/0xd0 [ 152.820555][ T277] ret_from_fork+0x1f/0x30 [ 152.824973][ T277] [ 152.827986][ T277] Modules linked in: [ 152.838899][ T277] ---[ end trace 0369ed18f29503e4 ]--- [ 152.847046][ T277] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 152.852997][ T277] Code: 59 e4 e3 06 0f 0b e8 02 95 a5 fe 48 c7 c7 40 56 62 8a 48 c7 c6 29 52 62 8a ba a4 03 00 00 48 c7 c1 00 61 62 8a e8 33 e4 e3 06 <0f> 0b e8 dc 94 a5 fe 48 c7 c7 40 56 62 8a 48 c7 c6 29 52 62 8a ba [ 152.883666][ T277] RSP: 0018:ffffc90002d6fd30 EFLAGS: 00010246 [ 152.886314][ T7340] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop3:00000002 [ 152.890445][ T277] RAX: 0000000000000037 RBX: 0000000000000000 RCX: 8062972e30d21600 [ 152.923368][ T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 152.940746][ T277] RBP: ffff88805ecefd90 R08: ffff8880b8f33d7f R09: 1ffff110171e67af [ 152.949051][ T277] R10: dffffc0000000000 R11: ffffed10171e67b0 R12: ffffc900028d21f8 [ 152.957079][ T277] R13: dffffc0000000000 R14: 000000000000003f R15: ffff88801bda5a94 [ 152.965428][ T277] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 152.975866][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.983094][ T277] CR2: 00007f697e1cb2f8 CR3: 000000002bf98000 CR4: 00000000003506e0 [ 152.991267][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.999489][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.007555][ T277] Kernel panic - not syncing: Fatal exception [ 153.013730][ T277] Kernel Offset: disabled [ 153.018059][ T277] Rebooting in 86400 seconds..