last executing test programs: 21m55.626083679s ago: executing program 32 (id=3720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, 0x0}, 0x20) 20m23.54917441s ago: executing program 33 (id=5049): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x4081ff) 9m0.603107131s ago: executing program 34 (id=16262): r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x4, 0x1, {0x0, 0x0, r0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 7m58.299094904s ago: executing program 7 (id=16867): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x18d442d, 0x0) 7m57.610575875s ago: executing program 7 (id=16871): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x940) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) 7m56.947922447s ago: executing program 7 (id=16878): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) 7m56.593295508s ago: executing program 35 (id=16878): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) 5m16.433588973s ago: executing program 6 (id=18662): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 5m14.105349648s ago: executing program 6 (id=18675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x4004c}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5m13.791625638s ago: executing program 6 (id=18681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m13.535871596s ago: executing program 6 (id=18686): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x7) 5m13.294916144s ago: executing program 6 (id=18689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000feffffff0000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 5m13.10383409s ago: executing program 6 (id=18691): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 5m12.730085282s ago: executing program 36 (id=18691): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 3m26.063794245s ago: executing program 5 (id=19943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xf, &(0x7f0000001040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m25.895104251s ago: executing program 5 (id=19945): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='-3', 0x2}]) 3m25.252219122s ago: executing program 5 (id=19952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 3m24.903734083s ago: executing program 5 (id=19957): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) 3m24.615804011s ago: executing program 5 (id=19961): r0 = socket$kcm(0x2, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x11, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 3m24.090196168s ago: executing program 5 (id=19969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a300000000028000480240001800b0001006578746864720000140002800800064000000001050002008900000014000000110001"], 0x7c}}, 0x0) 3m23.74528965s ago: executing program 37 (id=19969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a300000000028000480240001800b0001006578746864720000140002800800064000000001050002008900000014000000110001"], 0x7c}}, 0x0) 1m32.851871098s ago: executing program 1 (id=21164): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r0, 0x8b20, &(0x7f0000000080)) 1m32.659451934s ago: executing program 1 (id=21169): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m30.763676435s ago: executing program 1 (id=21199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 1m30.59413178s ago: executing program 1 (id=21201): r0 = socket(0x2b, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xf}, 0x1c) 1m30.492196074s ago: executing program 1 (id=21203): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) 1m30.363585248s ago: executing program 1 (id=21206): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x642d, &(0x7f0000001440)={0x0, 0x1cf8}) syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000000)) 1m15.168314274s ago: executing program 38 (id=21206): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x642d, &(0x7f0000001440)={0x0, 0x1cf8}) syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000000)) 34.963837431s ago: executing program 3 (id=21822): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) fcntl$setstatus(r0, 0x4, 0x0) 34.720306288s ago: executing program 3 (id=21827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) 34.479893716s ago: executing program 3 (id=21832): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 34.274061033s ago: executing program 3 (id=21836): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000006640)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="665134ec1bdd9f0d3c85f7f044fb9b61056494501f1b9bd08326df69b6a59a873a932b5d62e563eea7457b7248182065bc8be2d7f9efc6477fe948ca12322ebcdce621fdae6f9756938d7902eabe21deaddc305bbb7dc3f32fd8447fe99f8481e34816ff645bc5771882f2471af71e3d105a5c2996145e072ea884d2ef07975fd984a94f5aa6c585b6364339229b75eae2f6513c6d5c57d692ec19558a83b1276fd9f666cf8bd8cf5b2239989248e3d6dfbab467b7c0fc8421dbf4bd3ceeeb746536445f7126cacb63786e364dfdd9fbf0e7a35a534b0b3600"/232, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES16], 0x1, 0x620d, &(0x7f0000000200)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34) 32.418075542s ago: executing program 3 (id=21855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x100000000) 31.363868886s ago: executing program 3 (id=21869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "9d6c"}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 30.980693478s ago: executing program 39 (id=21869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "9d6c"}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3.455103179s ago: executing program 2 (id=22177): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x47, 0xfffffffc, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x100, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) 3.375841652s ago: executing program 4 (id=22178): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 3.249287286s ago: executing program 2 (id=22180): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000200010078", 0x7) 3.143008639s ago: executing program 8 (id=22182): pipe2$9p(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfdef) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)="9b23dc36c6ef8572ca7f1fedce945c71f66b61079a4fa1da698fb6edfca7fde4f5f09a53e7ae22854f5c1f27cec181728955dad8da2a5d70b5fb85e9acc33aed82978d332763f98efe0a3acf8bd12c1f9f24d1620a965135e19fb41e3d0f86afa6e487254c58f8fe71f31f3c31ddb7bb924787ba8a60b58185fc5681fd24ef862a9c9fba2da7b28be72ace144120e8bd7985924b5a5df4f2631ec171c80f0c11fe84ca6187d9aa80d8a502f00685bea280e7a515db52d5e5c5ebde227780f1268c830671c813b143710a7393523592b4dda111804fc80bb3762f4ad961106ee6929858ced73cbfc8f7f8f9e8ca4a1bde7cc1fd26cc86b7f68fe93d2e6813637e18e4f7b8ebff461b1232f39489e8148aca1c92824e15a93b51fd1922bfd67c65a351ad19dfc55b4cdea91cf7a5952fbb5e2a402b8be1eac034ac6953b2e5828d2faec57fd5e39a24416c914b2d142743bd37bd61a78e59023ba47487ffe91a806f65aaac1af48dac2aa05b85413fa54dbeee52d55a6fc6366de4e9cf0c1a9955d6bb2219353e2dd1e7c7f7ad15092e12dd2f11ecde8adaf92dff7dfc4a37027116807fc0b7190d27f21581c434fe9d064b9533da2e31a0e8cb4a7c75c4db3207e432a02ba47418af4e205d603ce40f94f0bcdf844cf1524d7ac0b3ccf03477a2224561457c481028fd5cfb2dd296e8b98585c7aca87fb6393c49ffe7c4dba6013f380716bb8929fc8bb0bceec053a3c92b86ce7806cae30006ab7ed415a84acd81c8017cc2955c482530145120b69c5d73cea6ca2bb0b2b1e69bb9ddb384839857935c9b31f009028ac07c3cbfa6d9a3aeba323f36dd59a24d3008682c0883c2669a6e83512c0023825a91421b5c5a10ecd16d45fbbccef73be18e582c3f239a3e58413a847df516938c0cb7918d8d22aab194fc4392afe3cd6cb0a37050f6b0a96b63394fd818d80467cf09cd7756a196e8e38956084eeec6a733bfd3bbae44ebd3ba8033273012dbea87ad537b97c54f6bec2a8c59f69daca4a15b842b6b393190770d2cff7c397849d5f5ecd9f2f128b591bba2713a7447becdc33ddea8e73e4fe64e8652008fdf3e3a066c837e26e9e44de368906fefe86ad2336fb279304c32f7978cb80d540a7a3fd00aa85c286f93485144cd49d2786f0975618e9c2ef5cc9c7d06ea79a9a9e0848428cf62ff5a54ba2821e8e698ebc8efe5502225f188a5731e3f7df96bd541c4925040924ddef91cbc99fa6751219b7d511997c1fd629aea4c0b5708ada058d833ee5bfb81c57e84cc1c6f3d29c2fde0be9d141abcd170306ae0ddb7f0505eb7deb89793b4e866cc0ac8a9db547d78eecef3e8f8c6074194fd7de4b4798f222c75fe79086c323da915eff95e9df6c4ba93c8ecd16d8071852269ba2add65a351b764b33e4969427c559807f9a939f6451f2cee4a0871a77548d4b0982d89c88302c2dbe5f37c722a1580263bcbda5cb3fee19f8b62598a10f2588140bd0f45ca0f187e466aed2cb74488df058815bd463005814a7f6ed0d9c59a55f6462e739ddb0b4a4822b3bc7844fdbd24b5f2a9c74960cfd1a138626b75b24be47249a8b7af38f4ec5078571e79e8227d00175315da3b9b0e1415e075df52f5438d8235ed9e07b5f535cb086416fdbd08ef495a358cb871f453152219b5bc2572c8ea3f3aa06577b8c97603b067483a7f052059c6e3e63b59fa4e57ea1e37c9cd5daf0ebb0a2a4df9e497758690ba4cdbf05b1d7a59b5221446c473782d92e510f129027c4b20550f7b1f146ec8b5189ef8491647c2075b63e7b4cc7ccb2eb1e0fd1108ff13968290e1f15431cb50239f5ed5bd8856bd701fd0c737f25d3cb03816b6610a07797964dace46b59c4c4e1fec62b0a04f3b83b877fb6439e44404197ed1eab33309f7727334ff8c7c36d5c93d05fb37dbbab43187729a0bff97fe4d04f32daf34ccdef6bb868645d306223acddc1bdb2661b22439836feeab31f576887a57231f8297c37da85e32baad9bc8bbfd8bab4f2da4e3eb0168866b017666b2d0cdde5e5c1b704fa8cf4b3b9da3be5e90d9258ac38a69406fe921efe441a65446e5eb1724788938f36b1384189f1beef92c60d4a2ec4b5b7e82c291e7c2fa7c48335168b5b0a4dac54840949dcf0fd3ee0ac11a5f3b11e0ec4f7e4fa66c09ee5601f4ff5a9b0f4c4e81d7447409055d76ffd6f3fb8e4998228552aeaf049d2f81023386d0c5dd510e704ce1579a4d2fdb70f5d2f34be6e54c53681e57772b8490b468050279cc21ba77b9d2eb3dae52741709df215400e41aaa47602cce02530688fdfab6a0a8aefa9caf8b26d3ca2760a72b91d458404f4596789d5446e04912a62af3a4a81d12663ab4778a377e8b46c18828a1cc17324e8123cc0fa3e2f72f9a67b79976c797a77aac8328262b595c98173e2e2dbda9b11345fe868215070647885d7eafdbe1978d6309116242bda85cbf26b3328d9e19694b667a5c2c9d24e7cb688997211763e298bf4eefb243d67ec009d9a903b9fcdffefdba0f97f91328aa2791170488e39cb7c68926712a481de5da3bb3955ea3399f0f0d4167b46c31090141f473e00da8150cfb8bf5f84cfb5ce8a8e40ca1c5879edfc7688c773257bb152703c605f9ba1c1e37f66f759ad7766f60666181ee3643e883cb3bbf5a742aa062b235f1384b769784cc2dd8118edfba6bd6716fe5ecfaeb3b5ee980896aaea50a39320f96fa33c4ec733342fab3f666775c1f1876a01ef87ca3b54f76f9f4912014404b31dafd5aa1d9e1e8f26776226bcbfd3931b3794481752a1f860bcde41c24e9432ff7e74b20c14ff223e16eea0fa3e95e50853994ff88eabc15cc7c41be77b035fd4b23f80242172928d036f80d6d82227fea4d9a35b5a28311b4dd1c254af8ab88481a9ca0786d28d238b26eb2fa577372058b9c082f7bb81033350a53c4ec88cab7bdb8ae283060e1cc05abed8c50f162cf3afdcff5073d2c9e6411994cbed2ea061b3baed63b7b81f4721b5139e3b355780ac38a40e5c5778ed7d00a70b3af02c67bb8f18828b1bf3167262fab4a57768bfa269c21fbaedb4414af8048287fdf32ce5286898ec4f07e3da2f0f11e7f63ff198b3c18f8c3f762b8f8df437eda8f30720a362af5296680d816e620f85af6783b2a29a42de770f0622dc21379f8d6e03e9f174c9d8bc6b29da13c5d742fdaa8953b92000a62984ed512922cb54f9905fcc3cb7d14307d9df51e0ed5a9feb62117339be43947c49087d06ed4042a9c2c6e76c0610efe1b28f20b4ae2f4aabfcd46a11fb680746f5b95301e8edbef01d50f9dfe4aed2314cf5ae83ce06205f1151e3714dac55547ac348f430ea4b4d4fb8e88ed8239ddbceca83dbb9d06bbb1e903d54a46cf4fa32c1b033356c1c74f0d3f93eafc6a2de25d6912849fce56e9a2d589fa593d95e3c932a81ba28c58008c97f6b1911948aa372dbd948deaed067d1195ba1300c01cac9465a5b7f7183a801d5081ab8d929b6ed2195f40c56d11d318f6d572ea509d91203bc81b1131a66c10bff6567c3e754fabcd0333825fe4d1cc7afe01cc26f67558a8da6f6c0a2a0d6d82afc54305168eb44c6fb2442befb8fe786780cc8a29712f15324f21dad9b47bb80c7dcc2caf3ab2f29b6c0e36dd1671f0eceb81950ae80c0f2f342523a2a61967626fa8a355dd45a5d407ed2c743a690e26e80702ef9111195fed166050150d207a2c04ee267ea442fcc531239e2295c43d8f054a929909cd88b3498e04cb85a34eb86ea187569bcefe8aca33cddba948c365b57a601867bcd67028980ea65b83b12bb91e61e87420356b94ef283a8a66ecb9cf45e60e48c70a525fd5f422b9c06bf68e82b58ec8e59e886b4d904443a89166700520723fdd8912f0c7338c8b0a7efe23a98205b850e6137388bca192ace1f20557838aff2b162bb36291b22353038cc6bda533174899f8eed0094398a99aa7883b68cf879390ee8cd45b62c234a35caa330a028815352ba9175315dfa45d3a643d1d116775051564e4171cb5883c89764847a889496ca363ffcc38e2ab676dd141f22bf0d7d28957863271fe348c3a18849fe4af20ee08eccd816848a905b474c87fad4e131601f0ce500c9955264c8e207385a453af7c5e085c4a6da45acf2cdefc1d87b95cda7acb09dc79a792b089c94abb00a39d39761aae2cde6f5e778101cb9678b82fd91f69eab6c377e925978c328f4c0364100e10bef7f804073b4532afd092fb3b6050bb5ad0d72ea4fc9353628a85c37d5868d96a09158663bc940672b5add3f2736b74155497443efa3aaf8eb14893b80019bae0a348dd66044de36a3999bc009110295027931954283924a93ae8e7d4555b9da7745898a68dad48c42b3d5031465d508463d4d6fbda78d98dc8de6ba9887449b5e396b48a08b06dbd9f5064b8d9ae8d0d39ba9170ab72e7d0a678608916b4473e30ea65b558c542f6cefae16f10e3c581fc205526d2e12303329fe97f2438cee4c1fc8540a7e198098094d488d5a000ae75b1cf14037282bc42c25bc04907ee0672ea9f9099b2795a5cd45f91b499c62fbb4c599c6366a77f6fd8757e60fdbe8b807b0107ee7029253b5cd4b7ad9f12dc449b47bc75ddcc884a9f918605941d9704189a935976f46bc9465b34a5f17780c58dc7b11ddaf5efe7d5e23f866293ae9fba83fd0d4021bed77853e617d60ddc9964b4d3f5860271321f37456bdea16d94cf257fc52d5a97e81872f9c41d8f2a337ed797ca372f4d7d7b2464a4cf1af1170fb5c80131fc648df4f5965ceb06fbd9379a4050c555a0d5e8ea5da7aab8d0a5e35439f9e6dab7583a094e16eb10a901648ec25f8ccf457fe42f0d192836da61a17e8f8b10fe346ba7a5ffe4094fea994a380fb7ef284093ca0177ebd46c389020193de54464aeac1a94e418d0396005a776daa91e525e097dc3677d811b2e7765520d102be554ce83ef766e2e4dca24d6a14d950fe4afca8f0c5115b6fc5d49e9f516e954dae91003fc6b00d19df910abaa4b1d23c1af6c6de495aac09fa35f35ec3f331ea58c689f05bc5fef4c4a7217a4a8959a73b00adadd64f5289505d49d6bef182735d3042e5b989526397145c27421131990e41cac95cb629e889940bae1932bd1aae4fb506e97cf18e46e885b4db003b0c0aeac20adf6b016cbaa44b69e9e8e332f8f3991e87b6ed0fadf64bf377c731d90159f3f0e5faab3938402990b1c6fa751fb82cf15766b69ad99af379d5808649dc613d6512e732dbf33804dd441bf24adc891f783da2679e1a6f22291c5b0cd140b260da4ab995f0e694b6a5dcf9feb152158ebedd34b4303184fcc8c25ef332f18f4b70214ae3c130ec7aa17492f2e1864439e18e1f11664710e19fdf8896c101cac6cc44572efd810e3b03b44fd967e1e84cbff982e71ef5bf0b9d14fa5da9e1565dd1d66b91d7bcdc6731e9219bfbfae0cdf928b030704daa01c5ae1cce5b0807295b4612db2be3d89e056cd9807855a2b77e13bbcd91f4d27076cfe6e21c191bade90f5f963c783290c595bf1246e9826ff07c5ccbef3650ef88a932490a562af71d6545a0f3e8faf8a3ffdaacdb4792d1238d37d3adec702d930d6539ff5ce76a733ba45855bc4a965009e8a04c92aba086dad197a29986a1b8e250615c582b07b552a84de4a8789475b8aab8b846d45305bba96a90910ced92cbd5c6f30940587f907fc811e64b9cd5c1735ed679bc099b6e61dfe26ac59ffb9ce39586fab2e441603b55e", 0xfff}, {&(0x7f0000000140)="56e3", 0x2}], 0x2) 3.09780266s ago: executing program 4 (id=22183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000440)=""/17, &(0x7f00000001c0)=0x11) 3.047764852s ago: executing program 2 (id=22184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 2.979532454s ago: executing program 8 (id=22186): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xfffffd6e) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r0, &(0x7f00000001c0), &(0x7f0000001200)=@tcp, 0x1}, 0x20) 2.861054838s ago: executing program 4 (id=22187): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, &(0x7f0000000040)={0x83, 0x2, 0x400, 0x9, 0x5, 0xb, 0x2401}) 2.739888842s ago: executing program 2 (id=22189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x44}}, 0x0) 2.739479072s ago: executing program 8 (id=22190): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) 2.582497027s ago: executing program 2 (id=22191): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"]) 2.411275402s ago: executing program 4 (id=22193): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.233383098s ago: executing program 4 (id=22195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x18, r1, 0x301, 0x70bd29, 0x25dfdbfa, {0x21, 0x0, 0xffff}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x815}, 0x4004814) 2.092113703s ago: executing program 4 (id=22197): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x20, 0x9, 0x16, {0x16, 0x21, "ca64fcc06e934603531c4cb6c73043b6f369a716"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.946968367s ago: executing program 9 (id=22198): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f07000000", @ANYRES32=r1, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.769314433s ago: executing program 9 (id=22199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4c}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.54805107s ago: executing program 9 (id=22201): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x10000010}) 1.336803727s ago: executing program 9 (id=22203): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x101}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@empty, 0x800, 0x2, 0x2, 0x4, 0x96, 0xd6}, 0x20) 1.091711115s ago: executing program 0 (id=22205): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 1.059108616s ago: executing program 9 (id=22206): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0xc08c9}, 0x0) 940.853479ms ago: executing program 9 (id=22207): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200040, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000100)=ANY=[], 0x105, 0x0) 938.74716ms ago: executing program 8 (id=22208): unshare(0x22020600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) 855.923782ms ago: executing program 0 (id=22209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000002300)={@void, @val={0x0, 0x4, 0x9, 0x0, 0xee9f, 0xc}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x39, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, {0x0, 0x7, 0x0, @multicast1}}}, 0x26) 701.129808ms ago: executing program 8 (id=22210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 639.615179ms ago: executing program 2 (id=22211): syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f0000001300)="$eJzs3EtvG9UXAPDjpGnTx7//CLFg15EqpESqrTpNKtgFaMVDpIoKLFiBYzuWW9sTxY4TsmLBErHgmyCQWLHkM7BgzQ6xALFDAnlmAg0PqSh+0Ob3k8Zn7vX1mXOtqtKZiRzAmbWU/PxjKa7GxYiYj4grEdl5qTgyG3l4LiKuRcTcI0epmP994nxEXIqIq6Pkec5S8danN4bX139446evvrlw7vJnX347u10Ds/Z8RHR38/ODbh7TVh4fFPO1YTuL3bVhEfM3ug+LcZrHg+Z2luGgdryulsVbrXx9urvfH8WdTq0+iq32Tja/28sv2B+2jvNkH3hQ28vGjeZ2Ftv9NIuto7yuw6P8/7aj/iDP0yjyfZClj8HgOObzzcNmvp/dh1ms9wbFfJ43bTQPR3FYxOJyUU87jayO7dN80/9tb7Z7+4fJsLnXb6e9ZL1SfaFSvV2u7qWN5qC5Vq51G7fXkuVWZ7SsPGjWuhutNG11mpV62l1Jllv1erlaTZbvNLfbtV5SrVZuVW6W11eKsxvJq/feSTqNZHkUX2739gftTj/ZSfeS/BMrlyPixZXkejV5a3Mr2bp/9+7m1tvv3Xn33kubr79SLPpLWcny6s3V1XL1Znm1ujLB/S/GxPefrFZuPfb+PyqKHuP+4VRKsy4A4Mmj/wdmYXL9/979iMn3/6H/H4tZ9///qv+ddv9/BvYPp6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4s75b+Py17GQpH18u5v9XTD1TjEsRMRcRv/6N+Th/Iud8kWfhH9Yv/KmGr0uRZRhd40JxXIqIjeL45f+T/hYAAADg6fXFh9c+ybv1/GVp1gUxTflNm7kr748p32JELCx9P6Zsc6OXZ8eULPv3fS4Ox5Qtu4G1OKZk+S23c+PK9ljmT4TFR0IpD3NTLQcAAJiKk53AdLsQAAAApunjWRfAbJTi+FHm8bPg7C/v/3ggePHECAAAAHgClWZdAAAAADBxWf/v9/8AAADg6Zb//h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7FzP7eJA1EcgJ8NXtj/aLX3bWVvUMaWsMc9riggTVBADqSFNEAN5JYSIojwOAQiDpE8tpXo+yQzjGV+PCN8mBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6dFetFzf/f121zdnt28lzNwAAAMAl22q9qN/MUv9zc/5rc+pH0y8iooyIS2P3UXw4yxw1OdXz9den11cvariNqBMO3zFpjk8R8bs5Hr53/SsAAADA+7VZruZptJ5eZkMXRJ/SpE355U+mvCIiqtl9prTykPczU1j9/x7Hv0xp9QTWt0xhacptnCvtVerH/ThrNz1pitSUFz92LHLaeYUAAEB+o7Om31EIAAAAffo7dAEMo4inpczjUuAkNc3y3sezHgAAAPAGFUMXAAAAAHSuHv/3tP/f3v5/AAAAMIy0/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd2lbrxWa5mrfN2e3byXM3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/NykQwkAQRmvG/53k/oeVAj2DCO9B4EuaXgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdJ+cTU6O3Ocm/sfR5JFk7amwdNfYuNI4ujLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH8zs7O1VXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+DzknkEu85bCHCJ6VmZ3JTn6A66+ZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0ensSJ9mhM47j4tzm3sOlrN861Gcer23PZy2LozqTPhlerH6Ius0lAgAAwNmRlPV9CGEnXV/I+riT1/9peU1W83/79Dgu6/nDdX/Zl7V/1n75eff5/YE643Gym95cHg4uHU2l9f/NcrY985dXtPInn797SfIvJH5v9blRmj/P6OuNjXfaeXiujmwBgH/iYtkXQfn7UNb3m0wMgDOjVSm8y/o/6TSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdRqvhyTKOQgjzrUmc2dp7uHRc/3hte75s1x49WgtfTu6Z3SINIdxcHg4u1Tqb2Xbv/oPbi8Ph4G79wUshhKZGf6uY/u0Pprg4hEaej+A/CuLiy56VfE5G0OAPJQAATqW0aFldv5OuL2TnorkQ/vjuYP3/aiUOU9b/ux9e26yOVa3/+7XNcPb1Vu582rt3/8Hry3cWbw1uDT5+43L/zf6V61evXu/l70p63pgAAADw77SLVq3/47mj6/8XKnGYsv7/7Jv+F9WxEvX/sSaLfk1nAgAAcLY9+/Lvv0XHnI/a7fD54srK3f74uP/58vjYQKp/27miVev/ZK7prAAAAIA6jFajA+v/NypxmHL9/6nvX/ixes8khHC+WP+/uPTJ8EZ905lpdfw5cdNzBAAAoFnni1Zd/0/z/f/x/paHOITw2ivjuPg3gFPV/8m7X/1QXN4Jh/b/X6l3mjMn7o6fR953Q2h1m84IAACA0+yJomXF/q/p+sJHP114v23/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/gwAAP///ls9vA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000500)) 609.03664ms ago: executing program 0 (id=22212): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x20, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) 520.963793ms ago: executing program 8 (id=22213): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="ebe3a0ad28af7b32621617c8a71eb201ee8ae9796cfd1647e299f4e376fdba128280b372219d0b5e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693b849e6098ed884e", 0x4a}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x40800) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 386.460177ms ago: executing program 0 (id=22214): capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000ec0)=""/4120) 221.266172ms ago: executing program 0 (id=22215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x9, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 0 (id=22216): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000004c0)=ANY=[@ANYBLOB="f8ff040083"]) kernel console output (not intermixed with test programs): 19922] netlink: 'syz.0.20527': attribute type 1 has an invalid length. [ 1486.556815][ T7648] usb 5-1: Product: syz [ 1486.561025][ T7648] usb 5-1: Manufacturer: syz [ 1486.586230][ T7648] usb 5-1: SerialNumber: syz [ 1486.597448][ T7648] usb 5-1: config 0 descriptor?? [ 1486.626244][ T26] audit: type=1326 audit(1486.575:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19917 comm="syz.9.20528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1486.746744][ T26] audit: type=1326 audit(1486.575:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19917 comm="syz.9.20528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1486.837888][ T7648] usb 5-1: USB disconnect, device number 78 [ 1486.855168][ T26] audit: type=1326 audit(1486.575:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19917 comm="syz.9.20528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1487.958499][T19976] loop1: detected capacity change from 0 to 256 [ 1488.025825][T19976] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1488.112225][ T26] audit: type=1800 audit(1488.165:966): pid=19976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20551" name="file1" dev="loop1" ino=1049091 res=0 errno=0 [ 1488.346987][T19989] loop9: detected capacity change from 0 to 256 [ 1488.435814][T19989] exfat: Deprecated parameter 'utf8' [ 1488.442891][T19993] batman_adv: batadv0: Adding interface: gretap2 [ 1488.454850][T19993] batman_adv: batadv0: Interface activated: gretap2 [ 1488.472258][T19989] exfat: Deprecated parameter 'utf8' [ 1488.491459][T19989] exfat: Deprecated parameter 'utf8' [ 1488.528663][T19989] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1488.688630][T19999] loop1: detected capacity change from 0 to 256 [ 1488.712451][T19999] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 1489.020842][T20007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20562'. [ 1489.083976][T20007] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 1489.153163][T20014] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.20565'. [ 1489.222174][T20014] netlink: zone id is out of range [ 1489.246190][T20014] netlink: zone id is out of range [ 1489.256230][T20014] netlink: zone id is out of range [ 1489.276234][T20014] netlink: zone id is out of range [ 1489.293137][T20021] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1489.302894][T20014] netlink: zone id is out of range [ 1489.346054][T20014] netlink: zone id is out of range [ 1489.366171][T20014] netlink: zone id is out of range [ 1489.466317][T20027] loop1: detected capacity change from 0 to 256 [ 1489.516025][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1489.530469][T20027] FAT-fs (loop1): Directory bread(block 64) failed [ 1489.546398][T20027] FAT-fs (loop1): Directory bread(block 65) failed [ 1489.564348][T20029] program syz.4.20570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1489.564398][T20027] FAT-fs (loop1): Directory bread(block 66) failed [ 1489.621166][T20027] FAT-fs (loop1): Directory bread(block 67) failed [ 1489.649966][T20027] FAT-fs (loop1): Directory bread(block 68) failed [ 1489.676799][T20027] FAT-fs (loop1): Directory bread(block 69) failed [ 1489.697220][T20027] FAT-fs (loop1): Directory bread(block 70) failed [ 1489.726157][T20027] FAT-fs (loop1): Directory bread(block 71) failed [ 1489.763557][T20027] FAT-fs (loop1): Directory bread(block 72) failed [ 1489.793898][T20027] FAT-fs (loop1): Directory bread(block 73) failed [ 1490.048963][T20037] netlink: 16 bytes leftover after parsing attributes in process `syz.9.20573'. [ 1490.479881][ T26] audit: type=1326 audit(1490.535:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20052 comm="syz.9.20579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1490.544278][ T26] audit: type=1326 audit(1490.535:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20052 comm="syz.9.20579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1490.617478][ T26] audit: type=1326 audit(1490.535:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20052 comm="syz.9.20579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1490.641174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1490.726316][ T26] audit: type=1326 audit(1490.535:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20052 comm="syz.9.20579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1490.829642][ T26] audit: type=1326 audit(1490.535:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20052 comm="syz.9.20579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f7f2c99ce59 code=0x7ffc0000 [ 1491.028714][T20070] loop9: detected capacity change from 0 to 1024 [ 1492.304691][T20119] loop9: detected capacity change from 0 to 1024 [ 1492.389272][T20121] loop4: detected capacity change from 0 to 512 [ 1492.534881][T20121] EXT4-fs (loop4): 1 truncate cleaned up [ 1492.572033][T20121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1492.888907][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1492.982101][T20130] loop9: detected capacity change from 0 to 4096 [ 1493.068054][T20130] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 1493.256510][T20130] ntfs3: loop9: failed to convert "c46c" to cp850 [ 1493.684659][T20157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20618'. [ 1493.696365][T20160] loop9: detected capacity change from 0 to 64 [ 1493.734933][T20157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20618'. [ 1493.808154][T20162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20618'. [ 1494.135336][T20173] xt_hashlimit: size too large, truncated to 1048576 [ 1494.539937][T20191] batman_adv: batadv0: Adding interface: gretap1 [ 1494.567148][T20191] batman_adv: batadv0: Interface activated: gretap1 [ 1494.724428][T20196] loop4: detected capacity change from 0 to 256 [ 1494.789666][T20196] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1494.950571][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1494.950586][ T26] audit: type=1800 audit(1495.006:974): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20633" name="file1" dev="loop4" ino=1049115 res=0 errno=0 [ 1495.193084][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20638'. [ 1495.241080][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.20638'. [ 1496.498643][T20250] loop4: detected capacity change from 0 to 256 [ 1496.567341][T20250] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 1497.244172][T20239] loop9: detected capacity change from 0 to 32768 [ 1497.351311][T20239] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1497.390115][ T7648] kernel write not supported for file /vcsa (pid: 7648 comm: kworker/1:10) [ 1497.450031][T20239] JBD2: Ignoring recovery information on journal [ 1497.660077][T20239] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1497.754023][T20286] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20667'. [ 1497.804304][T20286] netlink: 7 bytes leftover after parsing attributes in process `syz.8.20667'. [ 1497.992293][T20293] loop4: detected capacity change from 0 to 256 [ 1498.167858][T20293] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba6f1341, utbl_chksum : 0xe619d30d) [ 1498.202382][T15065] ocfs2: Unmounting device (7,9) on (node local) [ 1498.594157][T20305] loop4: detected capacity change from 0 to 164 [ 1499.083754][T20319] loop4: detected capacity change from 0 to 64 [ 1499.648415][T20336] tipc: Enabling of bearer rejected, failed to enable media [ 1499.915761][T20341] loop4: detected capacity change from 0 to 1024 [ 1500.111826][T20349] hfsplus: invalid xattr key length: 0 [ 1500.315145][T10034] hfsplus: b-tree write err: -5, ino 8 [ 1500.546882][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20696'. [ 1500.954834][T20383] binder: 20379:20383 ioctl 4018620d 0 returned -22 [ 1501.380046][T20399] tipc: Enabling of bearer rejected, failed to enable media [ 1501.695394][T20408] nbd: must specify a device to reconfigure [ 1501.938566][T20416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.20715'. [ 1502.353317][T20427] loop4: detected capacity change from 0 to 1024 [ 1502.418976][T20427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1502.565995][T20427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1502.595955][T20427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.20721: missing EA_INODE flag [ 1502.685528][T20427] EXT4-fs (loop4): Remounting filesystem read-only [ 1502.692288][T20427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.20721: error while reading EA inode 11 err=-117 [ 1502.746191][T20427] EXT4-fs (loop4): Remounting filesystem read-only [ 1502.860833][T20451] netlink: 28 bytes leftover after parsing attributes in process `syz.9.20729'. [ 1502.934323][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1503.105432][ C1] sd 0:0:1:0: [sda] tag#2127 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1503.115936][ C1] sd 0:0:1:0: [sda] tag#2127 CDB: Read(6) 08 00 00 00 00 00 [ 1503.585237][ T5809] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1503.621410][T20485] loop0: detected capacity change from 0 to 2048 [ 1503.654186][T20485] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1503.690226][T20485] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1503.725296][T20485] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1503.751438][T20485] UDF-fs: Scanning with blocksize 512 failed [ 1503.785227][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 1503.802421][ T5809] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1503.826998][T20485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1503.848536][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.885509][ T5809] usb 5-1: Product: syz [ 1503.900027][ T5809] usb 5-1: Manufacturer: syz [ 1503.904689][ T5809] usb 5-1: SerialNumber: syz [ 1503.941933][ T5809] usb 5-1: config 0 descriptor?? [ 1503.968360][ T5809] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1504.214421][ T5809] pwc: Warning: more than 1 configuration available. [ 1504.626442][ T5809] pwc: send_video_command error -71 [ 1504.633167][ T5809] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1504.675191][ T5809] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1504.703047][ T5809] usb 5-1: USB disconnect, device number 79 [ 1505.127188][T20530] loop1: detected capacity change from 0 to 256 [ 1505.208310][T20530] FAT-fs (loop1): Directory bread(block 64) failed [ 1505.225373][T20530] FAT-fs (loop1): Directory bread(block 65) failed [ 1505.236256][T20530] FAT-fs (loop1): Directory bread(block 66) failed [ 1505.242837][T20530] FAT-fs (loop1): Directory bread(block 67) failed [ 1505.336293][T20530] FAT-fs (loop1): Directory bread(block 68) failed [ 1505.342886][T20530] FAT-fs (loop1): Directory bread(block 69) failed [ 1505.418662][T20530] FAT-fs (loop1): Directory bread(block 70) failed [ 1505.470318][T20530] FAT-fs (loop1): Directory bread(block 71) failed [ 1505.492333][T20530] FAT-fs (loop1): Directory bread(block 72) failed [ 1505.512628][T20530] FAT-fs (loop1): Directory bread(block 73) failed [ 1505.625515][T20544] loop0: detected capacity change from 0 to 2048 [ 1505.748916][T20544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1505.755161][ T4317] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1505.821613][T20544] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 1505.835626][T20544] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 1505.978144][ T4317] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1505.999004][ T4317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.037102][ T4317] usb 10-1: config 0 descriptor?? [ 1506.043997][T18308] EXT4-fs (loop0): unmounting filesystem. [ 1506.102291][ T4317] cp210x 10-1:0.0: cp210x converter detected [ 1506.185533][T20565] device vlan0 entered promiscuous mode [ 1506.234954][T20565] device wlan0 entered promiscuous mode [ 1506.513533][ T4317] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1506.653664][T23659] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1506.664579][T23659] CPU: 0 PID: 23659 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1506.672246][T23659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1506.682326][T23659] Workqueue: hci3 hci_rx_work [ 1506.687144][T23659] Call Trace: [ 1506.690421][T23659] [ 1506.693346][T23659] dump_stack_lvl+0x188/0x24e [ 1506.698029][T23659] ? show_regs_print_info+0x12/0x12 [ 1506.703225][T23659] ? load_image+0x400/0x400 [ 1506.707745][T23659] sysfs_create_dir_ns+0x26a/0x290 [ 1506.712931][T23659] ? sysfs_warn_dup+0xa0/0xa0 [ 1506.717614][T23659] ? do_raw_spin_unlock+0x11d/0x230 [ 1506.722814][T23659] kobject_add_internal+0x61c/0xcc0 [ 1506.728082][T23659] kobject_add+0x160/0x230 [ 1506.732512][T23659] ? kobject_init+0x1d0/0x1d0 [ 1506.737201][T23659] ? klist_children_get+0x50/0x50 [ 1506.742301][T23659] ? get_device_parent+0x121/0x3f0 [ 1506.747444][T23659] device_add+0x48c/0x1000 [ 1506.752044][T23659] ? kmem_cache_free+0xf7/0x290 [ 1506.756983][T23659] hci_conn_add_sysfs+0xd1/0x1e0 [ 1506.762005][T23659] le_conn_complete_evt+0x1062/0x1670 [ 1506.767414][T23659] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1506.773676][T23659] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1506.779316][T23659] ? skb_pull_data+0xf7/0x200 [ 1506.784067][T23659] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1506.789991][T23659] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 1506.796413][T23659] ? hci_remote_host_features_evt+0x270/0x270 [ 1506.802485][T23659] hci_event_packet+0x7b9/0x1280 [ 1506.807430][T23659] ? bis_list+0x280/0x280 [ 1506.811754][T23659] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1506.817668][T23659] ? kcov_remote_start+0x4c7/0x7e0 [ 1506.822873][T23659] ? mt_dump_node+0x750/0x1920 [ 1506.827651][T23659] ? hci_send_to_monitor+0x9c/0x4a0 [ 1506.832856][T23659] hci_rx_work+0x3eb/0xd40 [ 1506.837281][T23659] ? _raw_spin_unlock+0x40/0x40 [ 1506.842146][T23659] ? process_one_work+0x7b0/0x1160 [ 1506.847323][T23659] process_one_work+0x8a2/0x1160 [ 1506.852281][T23659] ? worker_detach_from_pool+0x240/0x240 [ 1506.857915][T23659] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1506.862943][T23659] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1506.868491][T23659] ? kthread_data+0x4b/0xc0 [ 1506.873113][T23659] worker_thread+0xaa2/0x1270 [ 1506.877834][T23659] kthread+0x29d/0x330 [ 1506.881990][T23659] ? worker_clr_flags+0x1a0/0x1a0 [ 1506.887013][T23659] ? kthread_blkcg+0xd0/0xd0 [ 1506.891599][T23659] ret_from_fork+0x1f/0x30 [ 1506.896104][T23659] [ 1506.908655][T23659] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1506.922045][T23659] Bluetooth: hci3: failed to register connection device [ 1506.975371][ T4320] usb 10-1: USB disconnect, device number 9 [ 1507.000641][ T4320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1507.055727][ T4320] cp210x 10-1:0.0: device disconnected [ 1507.295249][T20597] loop1: detected capacity change from 0 to 2048 [ 1507.302509][T20597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1507.386182][T20597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1507.532063][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1507.722815][T20609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20786'. [ 1507.740926][T20611] vivid-006: disconnect [ 1507.813547][T20615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20787'. [ 1508.316911][T20632] loop4: detected capacity change from 0 to 2048 [ 1508.390958][T20632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1508.407514][T20610] loop9: detected capacity change from 0 to 32768 [ 1508.481306][T20605] vivid-006: reconnect [ 1508.614617][T20610] JBD2: Ignoring recovery information on journal [ 1508.678203][T20610] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1508.860927][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1508.972669][T15065] ocfs2: Unmounting device (7,9) on (node local) [ 1509.521330][T20668] loop4: detected capacity change from 0 to 1024 [ 1509.583278][T20668] hfsplus: bad catalog entry type [ 1509.858643][T20680] loop1: detected capacity change from 0 to 512 [ 1509.984389][T20680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1510.012987][ T26] audit: type=1326 audit(1766.069:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.044308][ T26] audit: type=1326 audit(1766.099:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.050595][T20680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1510.175019][ T26] audit: type=1326 audit(1766.099:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.300993][ T26] audit: type=1326 audit(1766.099:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.327062][T20691] netlink: 140 bytes leftover after parsing attributes in process `syz.4.20815'. [ 1510.355312][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1510.361241][T20691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20815'. [ 1510.429362][ T26] audit: type=1326 audit(1766.099:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.519895][ T26] audit: type=1326 audit(1766.099:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.632944][ T26] audit: type=1326 audit(1766.099:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.758487][ T26] audit: type=1326 audit(1766.099:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20685 comm="syz.4.20814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fedc2f9ce59 code=0x7ffc0000 [ 1510.906920][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20823'. [ 1510.952112][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20824'. [ 1510.993605][T20714] device 30ªî{X¹¦ entered promiscuous mode [ 1511.198814][T20721] loop9: detected capacity change from 0 to 1024 [ 1511.228015][T20724] loop4: detected capacity change from 0 to 512 [ 1511.274034][T20724] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1511.289497][T20724] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 1511.634254][ T7653] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1511.824104][ T7653] usb 5-1: Using ep0 maxpacket: 8 [ 1511.850944][ T7653] usb 5-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice= 0.40 [ 1511.854956][T20739] loop0: detected capacity change from 0 to 4096 [ 1511.880530][ T7653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.915074][ T7653] usb 5-1: Product: syz [ 1511.919300][ T7653] usb 5-1: Manufacturer: syz [ 1511.954812][ T7653] usb 5-1: SerialNumber: syz [ 1511.994360][T20739] ntfs3: loop0: Failed to load $Extend. [ 1512.086676][T20739] ntfs3: loop0: ino=5, "/" directory corrupted [ 1512.114144][T20739] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1512.234304][ T7653] usb 5-1: USB disconnect, device number 80 [ 1512.396625][T20757] loop9: detected capacity change from 0 to 1024 [ 1512.429987][T20757] EXT4-fs: inline encryption not supported [ 1512.456327][T20762] netlink: 616 bytes leftover after parsing attributes in process `syz.8.20844'. [ 1512.469769][T20757] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1512.513655][T20764] loop0: detected capacity change from 0 to 2048 [ 1512.525773][ T9143] udevd[9143]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.550669][T20757] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #3: block 1: comm syz.9.20842: lblock 1 mapped to illegal pblock 1 (length 1) [ 1512.595309][T20764] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1512.676831][T20757] EXT4-fs (loop9): Remounting filesystem read-only [ 1512.683408][T20757] Quota error (device loop9): write_blk: dquota write failed [ 1512.739477][T20770] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1512.754815][T20757] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1512.832002][T20757] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.20842: Failed to acquire dquot type 0 [ 1512.893480][T20757] EXT4-fs (loop9): Remounting filesystem read-only [ 1512.923792][T20757] EXT4-fs error (device loop9): ext4_free_blocks:6220: comm syz.9.20842: Freeing blocks not in datazone - block = 0, count = 4096 [ 1512.981819][T20757] EXT4-fs (loop9): Remounting filesystem read-only [ 1513.004613][T20757] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.20842: Invalid inode bitmap blk 0 in block_group 0 [ 1513.029351][T10034] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1513.064780][T20757] EXT4-fs (loop9): Remounting filesystem read-only [ 1513.071697][T20757] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 1513.080993][T10034] EXT4-fs (loop9): Remounting filesystem read-only [ 1513.105933][T10034] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 1513.161724][T20757] EXT4-fs (loop9): Remounting filesystem read-only [ 1513.169369][T10034] EXT4-fs (loop9): Remounting filesystem read-only [ 1513.184112][T20757] EXT4-fs (loop9): 1 orphan inode deleted [ 1513.189906][T20757] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1513.459343][T15065] EXT4-fs (loop9): unmounting filesystem. [ 1513.556537][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20852'. [ 1514.252635][T20819] loop0: detected capacity change from 0 to 8192 [ 1514.300106][T20819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1514.400764][T20819] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1514.462104][T20819] REISERFS (device loop0): using ordered data mode [ 1514.494073][T20819] reiserfs: using flush barriers [ 1514.519625][T20819] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1514.584179][T20819] REISERFS (device loop0): checking transaction log (loop0) [ 1514.622266][T20819] REISERFS (device loop0): Using r5 hash to sort names [ 1514.650813][T20819] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1514.729702][T20841] netlink: 'syz.4.20869': attribute type 1 has an invalid length. [ 1515.450006][T20861] device macsec1 entered promiscuous mode [ 1515.783623][T20875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20883'. [ 1516.030345][T20850] loop0: detected capacity change from 0 to 32768 [ 1516.180484][T20850] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1516.383547][ T7651] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1516.449736][T18308] ocfs2: Unmounting device (7,0) on (node local) [ 1516.607421][ T7651] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1516.637684][ T7651] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.663557][ T7651] usb 10-1: Product: syz [ 1516.667865][ T7651] usb 10-1: Manufacturer: syz [ 1516.719903][ T7651] usb 10-1: SerialNumber: syz [ 1516.756697][ T7651] usb 10-1: config 0 descriptor?? [ 1516.851990][T20913] netlink: 5 bytes leftover after parsing attributes in process `syz.0.20898'. [ 1516.998162][ T7651] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1517.310830][T20930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20905'. [ 1517.417656][ T7651] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 1517.459977][ T7651] usb 10-1: USB disconnect, device number 10 [ 1517.665596][T20943] loop1: detected capacity change from 0 to 128 [ 1517.701928][T20945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20911'. [ 1518.345425][T20940] loop4: detected capacity change from 0 to 32768 [ 1518.389535][T20965] loop0: detected capacity change from 0 to 128 [ 1518.444275][T20940] ialloc: diAlloc returned -5! [ 1518.492297][T20965] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1518.568128][T20965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1518.838528][ T5809] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1518.917229][T18308] EXT4-fs (loop0): unmounting filesystem. [ 1519.038843][ T5809] usb 9-1: Using ep0 maxpacket: 32 [ 1519.051836][ T5809] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 1519.111960][ T5809] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1519.163261][ T5809] usb 9-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1519.187744][T20994] loop1: detected capacity change from 0 to 256 [ 1519.218286][ T5809] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1519.251194][T20994] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 1519.273226][ T5809] usb 9-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1519.312101][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.357889][ T5809] usb 9-1: config 0 descriptor?? [ 1519.399155][T20973] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1519.695300][T21014] loop9: detected capacity change from 0 to 256 [ 1519.843969][ T5809] hid (null): unknown global tag 0xe [ 1519.879061][ T5809] asus 0003:048D:CE50.002A: unknown main item tag 0x2 [ 1519.893126][ T5809] asus 0003:048D:CE50.002A: unknown global tag 0xe [ 1519.899683][ T5809] asus 0003:048D:CE50.002A: item 0 2 1 14 parsing failed [ 1519.939409][ T5809] asus 0003:048D:CE50.002A: Asus hid parse failed: -22 [ 1519.959527][T21021] device bridge0 entered promiscuous mode [ 1519.967710][ T5809] asus: probe of 0003:048D:CE50.002A failed with error -22 [ 1520.093280][ T4320] usb 9-1: USB disconnect, device number 20 [ 1520.493628][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20948'. [ 1520.559032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1520.762646][T21035] loop4: detected capacity change from 0 to 8192 [ 1520.801619][T21035] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1520.859296][T21030] loop0: detected capacity change from 0 to 32768 [ 1520.900593][T21035] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1520.950225][T21035] ntfs3: loop4: Failed to load $Extend. [ 1521.828813][T21076] loop9: detected capacity change from 0 to 4096 [ 1521.867109][T21076] ntfs3: loop9: Different NTFS' sector size (2048) and media sector size (512) [ 1522.209220][T21086] loop1: detected capacity change from 0 to 4096 [ 1522.295128][T21094] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1522.336744][T21086] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 1522.495305][T21100] netlink: 72 bytes leftover after parsing attributes in process `syz.8.20975'. [ 1522.567032][T21105] loop9: detected capacity change from 0 to 512 [ 1522.579466][T21100] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20975'. [ 1522.612981][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20975'. [ 1522.698116][T21105] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.20978: inode has both inline data and extents flags [ 1522.760734][T21105] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.20978: couldn't read orphan inode 15 (err -117) [ 1522.865127][T21115] loop1: detected capacity change from 0 to 64 [ 1522.868324][T21105] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1523.062381][T15065] EXT4-fs (loop9): unmounting filesystem. [ 1523.694471][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1523.694484][ T26] audit: type=1326 audit(1779.761:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.8.20991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f59ce59 code=0x7ffc0000 [ 1523.699307][T21106] loop4: detected capacity change from 0 to 32768 [ 1523.705623][ T26] audit: type=1326 audit(1779.761:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.8.20991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6e9f59ce59 code=0x7ffc0000 [ 1523.913726][ T26] audit: type=1326 audit(1779.821:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.8.20991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f59ce59 code=0x7ffc0000 [ 1524.053017][ T26] audit: type=1326 audit(1779.821:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.8.20991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9f59ce59 code=0x7ffc0000 [ 1524.336540][T21126] loop1: detected capacity change from 0 to 32768 [ 1524.627477][T21166] tipc: Enabling not permitted [ 1524.672559][T21166] tipc: Enabling of bearer rejected, failed to enable media [ 1524.994858][T21177] loop1: detected capacity change from 0 to 128 [ 1525.072882][T21177] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1525.103944][T21174] loop0: detected capacity change from 0 to 4096 [ 1525.149224][T21177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1525.185300][T21148] loop9: detected capacity change from 0 to 40427 [ 1525.225950][T21148] F2FS-fs (loop9): invalid crc value [ 1525.275097][T21185] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1525.327228][T21174] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 2 already freed [ 1525.351147][T21148] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1525.367306][T21174] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 1525.396928][T21191] device macsec2 entered promiscuous mode [ 1525.409404][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1525.462619][T21191] device vlan1 entered promiscuous mode [ 1525.493242][T21193] devtmpfs: Too few inodes for current use [ 1525.515142][T21148] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 1525.584978][T21191] device vlan1 left promiscuous mode [ 1525.621449][T21148] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 1525.797043][T21200] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 1525.990714][T15065] syz-executor: attempt to access beyond end of device [ 1525.990714][T15065] loop9: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1526.053254][T15065] syz-executor: attempt to access beyond end of device [ 1526.053254][T15065] loop9: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 1526.136077][T15065] F2FS-fs (loop9): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1526.136129][T15065] F2FS-fs (loop9): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 1526.150411][T21211] loop0: detected capacity change from 0 to 512 [ 1526.282500][T21211] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1526.389947][T21211] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.21011: bad orphan inode 131083 [ 1526.459938][T21211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1526.688761][T18308] EXT4-fs (loop0): unmounting filesystem. [ 1526.854955][T21230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21020'. [ 1526.907751][T21232] [U] ¹é [ 1527.257623][T21251] sock: sock_set_timeout: `syz.8.21026' (pid 21251) tries to set negative timeout [ 1527.392301][ T4322] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1527.597534][ T4322] usb 10-1: Using ep0 maxpacket: 16 [ 1527.606838][ T4322] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1527.658680][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.690967][ T4322] usb 10-1: Product: syz [ 1527.710166][ T4322] usb 10-1: Manufacturer: syz [ 1527.722849][ T4322] usb 10-1: SerialNumber: syz [ 1527.771170][ T4322] usb 10-1: config 0 descriptor?? [ 1527.792889][ T4322] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1527.882414][ T4317] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1528.122412][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 1528.135548][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.172984][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.189290][ T4317] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1528.232280][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.273755][ T4317] usb 5-1: config 0 descriptor?? [ 1528.402780][ T4322] ssu100: probe of 10-1:0.0 failed with error -71 [ 1528.445111][ T4322] usb 10-1: USB disconnect, device number 11 [ 1528.518215][T21297] loop0: detected capacity change from 0 to 512 [ 1528.604310][T21297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1528.708600][ T4317] hid-multitouch 0003:1FD2:6007.002B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 1528.778037][T18308] EXT4-fs (loop0): unmounting filesystem. [ 1528.930683][ T4317] usb 5-1: USB disconnect, device number 81 [ 1529.058397][T21303] fido_id[21303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1529.163980][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21048'. [ 1529.404744][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21053'. [ 1529.462157][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21053'. [ 1529.975908][T21351] loop9: detected capacity change from 0 to 256 [ 1530.015590][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21063'. [ 1530.025854][T21351] exfat: Deprecated parameter 'namecase' [ 1530.074400][T21351] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1530.315282][T21362] netlink: 22 bytes leftover after parsing attributes in process `syz.4.21067'. [ 1530.970608][T21389] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1531.061077][T21393] genirq: Flags mismatch irq 10. 00000000 (das16m1) vs. 00000080 (virtio2) [ 1531.412562][T21408] bridge0: port 1(veth1_macvtap) entered blocking state [ 1531.432385][T21408] bridge0: port 1(veth1_macvtap) entered disabled state [ 1532.310529][T21402] loop1: detected capacity change from 0 to 40427 [ 1532.317923][T21441] netlink: 28 bytes leftover after parsing attributes in process `syz.9.21103'. [ 1532.333765][T21402] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1532.342763][T21402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1532.346620][T21439] loop4: detected capacity change from 0 to 8192 [ 1532.358112][T21402] F2FS-fs (loop1): invalid crc value [ 1532.395997][T21402] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 1532.398480][T21439] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1532.526621][T21402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1532.539554][T21439] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1532.588213][T21402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1532.595804][T21439] REISERFS (device loop4): using ordered data mode [ 1532.608385][T21402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1532.616309][T21439] reiserfs: using flush barriers [ 1532.664624][T21439] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1532.762472][T21439] REISERFS (device loop4): checking transaction log (loop4) [ 1532.770313][T21402] syz.1.21084: attempt to access beyond end of device [ 1532.770313][T21402] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1533.109961][T21439] REISERFS (device loop4): Using tea hash to sort names [ 1533.125089][T21439] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1533.164349][T21455] loop9: detected capacity change from 0 to 4096 [ 1533.296969][T21455] ntfs: volume version 3.1. [ 1534.212874][T21461] loop4: detected capacity change from 0 to 32768 [ 1534.335032][T21475] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1534.342635][T21475] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1534.412235][T21461] XFS (loop4): Mounting V5 Filesystem [ 1534.466977][T21461] XFS (loop4): Ending clean mount [ 1534.482289][ T5809] XFS (loop4): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1534.500508][ T5809] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 1534.515508][ T5809] XFS (loop4): Unmount and run xfs_repair [ 1534.521315][ T5809] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1534.532907][ T5809] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1534.542258][ T5809] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 1534.551170][ T5809] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1534.575883][ T5809] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 1534.605225][ T5809] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1534.630370][ T5809] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1534.665494][ T5809] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1534.696041][ T5809] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1534.716372][T21461] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 1534.760198][T21461] XFS (loop4): Failed to initialize disk quotas. [ 1534.928173][ T4273] XFS (loop4): Unmounting Filesystem [ 1535.167557][T21502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21125'. [ 1535.849168][T21526] netlink: 536 bytes leftover after parsing attributes in process `syz.8.21134'. [ 1536.054773][T21534] loop9: detected capacity change from 0 to 256 [ 1536.148244][T21534] FAT-fs (loop9): Directory bread(block 64) failed [ 1536.208207][T21534] FAT-fs (loop9): Directory bread(block 65) failed [ 1536.231199][T21534] FAT-fs (loop9): Directory bread(block 66) failed [ 1536.232494][T21541] program syz.1.21139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1536.262055][T21534] FAT-fs (loop9): Directory bread(block 67) failed [ 1536.301564][T21534] FAT-fs (loop9): Directory bread(block 68) failed [ 1536.331255][T21534] FAT-fs (loop9): Directory bread(block 69) failed [ 1536.356007][T21534] FAT-fs (loop9): Directory bread(block 70) failed [ 1536.378411][T21534] FAT-fs (loop9): Directory bread(block 71) failed [ 1536.408022][T21534] FAT-fs (loop9): Directory bread(block 72) failed [ 1536.428468][T21534] FAT-fs (loop9): Directory bread(block 73) failed [ 1536.489301][T21547] loop4: detected capacity change from 0 to 4096 [ 1536.532842][T21547] ntfs3: loop4: ino=3, Correct links count -> 2. [ 1536.714219][T21547] ntfs3: loop4: ino=5, "/" directory corrupted [ 1537.022806][T21567] syz.4.21149[21567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.022897][T21567] syz.4.21149[21567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.445515][T21584] netlink: 'syz.9.21156': attribute type 3 has an invalid length. [ 1537.481175][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21156'. [ 1538.411184][ T7653] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1538.632880][ T7653] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1538.670848][ T7653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.701454][ T7653] usb 2-1: config 0 descriptor?? [ 1538.718118][ T7653] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1538.722655][T21642] loop4: detected capacity change from 0 to 1764 [ 1538.945541][T21652] loop9: detected capacity change from 0 to 128 [ 1538.973037][T21652] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1539.115390][ T7653] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1539.131953][ T7653] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1539.190034][T21654] loop4: detected capacity change from 0 to 4096 [ 1539.235336][T21654] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1539.325004][ T4320] usb 2-1: USB disconnect, device number 66 [ 1539.488336][T21666] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1539.526276][ T7653] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1539.713898][ T7653] usb 10-1: Using ep0 maxpacket: 8 [ 1539.726408][ T7653] usb 10-1: config 0 has no interfaces? [ 1539.745390][ T7653] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1539.781472][ T7653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.813256][ T7653] usb 10-1: config 0 descriptor?? [ 1540.021514][T21686] sctp: [Deprecated]: syz.8.21200 (pid 21686) Use of int in max_burst socket option. [ 1540.021514][T21686] Use struct sctp_assoc_value instead [ 1540.052064][ T4317] usb 10-1: USB disconnect, device number 12 [ 1540.770651][ T4317] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1540.972544][ T4317] usb 9-1: Using ep0 maxpacket: 32 [ 1540.985115][ T4317] usb 9-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.030804][ T4317] usb 9-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.058034][ T4317] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1541.080583][ T4317] usb 9-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1541.091090][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.125469][ T4317] usb 9-1: config 0 descriptor?? [ 1541.369768][T21722] usb usb1: usbfs: process 21722 (syz.4.21217) did not claim interface 0 before use [ 1541.540058][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21219'. [ 1541.549517][T21726] netlink: 5 bytes leftover after parsing attributes in process `syz.9.21219'. [ 1541.569308][ T4317] a4tech 0003:09DA:0006.002C: unknown main item tag 0x5 [ 1541.588306][ T4317] a4tech 0003:09DA:0006.002C: unknown main item tag 0x4 [ 1541.627217][ T4317] a4tech 0003:09DA:0006.002C: unknown main item tag 0x2 [ 1541.637514][ T4317] a4tech 0003:09DA:0006.002C: unknown main item tag 0x7 [ 1541.665635][ T4317] a4tech 0003:09DA:0006.002C: unknown main item tag 0x7 [ 1541.686325][ T4317] a4tech 0003:09DA:0006.002C: hidraw0: USB HID v0.08 Device [HID 09da:0006] on usb-dummy_hcd.8-1/input0 [ 1541.809244][ T4317] usb 9-1: USB disconnect, device number 21 [ 1541.931582][T21735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21223'. [ 1541.959253][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21224'. [ 1542.006463][T21731] fido_id[21731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1542.242075][T21745] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21228'. [ 1542.278081][T21745] netlink: 'syz.4.21228': attribute type 1 has an invalid length. [ 1542.350661][T21745] netlink: 634 bytes leftover after parsing attributes in process `syz.4.21228'. [ 1542.769610][T21763] IPv6: Can't replace route, no match found [ 1543.252404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.873403][T21804] loop4: detected capacity change from 0 to 512 [ 1543.971916][T21804] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.21256: inode has both inline data and extents flags [ 1544.006936][T21804] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.21256: couldn't read orphan inode 15 (err -117) [ 1544.080608][T21804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1544.260416][ T5809] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1544.288491][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1544.460238][ T5809] usb 10-1: Using ep0 maxpacket: 32 [ 1544.468530][ T5809] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1544.523215][ T5809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.560250][ T5809] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1544.612112][ T5809] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1544.640842][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.649011][ T5809] usb 10-1: Product: syz [ 1544.684388][ T5809] usb 10-1: Manufacturer: syz [ 1544.689132][ T5809] usb 10-1: SerialNumber: syz [ 1544.936569][ T5809] usb 10-1: unit 4 not found! [ 1544.945956][ T5809] usb 10-1: unit 0 not found! [ 1545.200210][ T4320] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1545.359267][ T4322] usb 10-1: USB disconnect, device number 13 [ 1545.390191][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 1545.404653][ T4320] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1545.438128][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1545.448271][ T4320] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 1545.470940][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.491230][ T4320] usb 5-1: config 0 descriptor?? [ 1545.660210][ T7651] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1545.834904][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.841910][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.870361][ T7651] usb 9-1: Using ep0 maxpacket: 8 [ 1545.896241][ T7651] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.910085][ T7651] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1545.926556][ T4320] hid (null): unknown global tag 0xa3 [ 1545.933375][ T7651] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1545.944246][ T4320] apple 0003:05AC:029F.002D: unexpected long global item [ 1545.964030][ T7651] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1545.974210][ T4320] apple 0003:05AC:029F.002D: parse failed [ 1545.983617][ T4320] apple: probe of 0003:05AC:029F.002D failed with error -22 [ 1545.991983][ T7651] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.021192][ T7651] usb 9-1: config 0 descriptor?? [ 1546.167377][ T7653] usb 5-1: USB disconnect, device number 82 [ 1546.463321][ T7651] lenovo 0003:17EF:60A3.002E: unknown main item tag 0x2 [ 1546.472989][ T7651] lenovo 0003:17EF:60A3.002E: unknown main item tag 0x0 [ 1546.489943][ T7651] lenovo 0003:17EF:60A3.002E: unknown main item tag 0x0 [ 1546.511128][ T7651] lenovo 0003:17EF:60A3.002E: unknown main item tag 0x0 [ 1546.525154][ T7651] lenovo 0003:17EF:60A3.002E: unknown main item tag 0x0 [ 1546.539906][ T7651] lenovo 0003:17EF:60A3.002E: unknown main item tag 0x0 [ 1546.571571][ T7651] lenovo 0003:17EF:60A3.002E: hidraw0: USB HID v0.04 Device [HID 17ef:60a3] on usb-dummy_hcd.8-1/input0 [ 1546.680902][ T7651] usb 9-1: USB disconnect, device number 22 [ 1546.852332][T21871] loop4: detected capacity change from 0 to 512 [ 1546.876052][T21868] fido_id[21868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1546.916744][T21871] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.21282: iget: bad i_size value: 38620345925642 [ 1546.975399][T21871] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.21282: couldn't read orphan inode 15 (err -117) [ 1547.029697][T21871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1547.167038][T21876] netlink: 64 bytes leftover after parsing attributes in process `syz.9.21284'. [ 1547.207289][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1547.738253][ T4320] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1547.932340][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1547.948028][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1547.968019][ T4320] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1547.995518][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1548.010392][ T4320] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1548.029786][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.072696][ T4320] usb 5-1: config 0 descriptor?? [ 1548.088374][T21883] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1548.518649][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.531481][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.547676][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.562930][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.578044][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.593193][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.605595][ T4320] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1548.620709][ T4320] samsung 0003:0419:0001.002F: hidraw0: USB HID v1.01 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 1548.732640][ T7651] usb 5-1: USB disconnect, device number 83 [ 1548.882258][T21899] fido_id[21899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1549.362581][T21912] loop9: detected capacity change from 0 to 512 [ 1549.428561][T21912] FAT-fs (loop9): error, clusters badly computed (1 != 0) [ 1550.094896][T21931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.142039][T21931] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1550.495017][T21947] Bluetooth: MGMT ver 1.22 [ 1551.454445][T21981] netlink: 'syz.0.21335': attribute type 298 has an invalid length. [ 1551.880001][T21998] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 1552.556870][T22022] loop4: detected capacity change from 0 to 164 [ 1552.582996][T22022] ISOFS: Unable to identify CD-ROM format. [ 1552.903074][ T5809] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1553.029347][T23659] Bluetooth: hci3: command 0x0406 tx timeout [ 1553.109178][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 1553.116123][ T5809] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 1553.134666][ T5809] usb 5-1: config 0 has no interface number 0 [ 1553.144800][ T5809] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1553.165299][ T5809] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 28526, setting to 1024 [ 1553.186997][ T5809] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1553.209934][ T5809] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1553.229051][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.247549][ T5809] usb 5-1: Product: syz [ 1553.257672][ T5809] usb 5-1: Manufacturer: syz [ 1553.262718][ T5809] usb 5-1: SerialNumber: syz [ 1553.283420][ T5809] usb 5-1: config 0 descriptor?? [ 1553.289178][T22022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1553.306393][T22022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1553.469332][T22032] loop9: detected capacity change from 0 to 32768 [ 1553.505014][T22032] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 11 [ 1553.617914][ T4320] usb 5-1: USB disconnect, device number 84 [ 1553.797052][ T9144] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 11 [ 1556.247901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.360979][ T6791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1556.377374][ T6791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1556.387562][ T6791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1556.402809][ T6791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1556.413559][ T6791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1556.420918][ T6791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1556.645971][T22100] lo speed is unknown, defaulting to 1000 [ 1556.800631][T22109] loop9: detected capacity change from 0 to 1024 [ 1556.880313][T22109] hfsplus: bad catalog entry type [ 1557.041553][ T32] hfsplus: b-tree write err: -5, ino 25 [ 1557.047359][ T32] hfsplus: b-tree write err: -5, ino 4 [ 1557.069944][ T32] hfsplus: b-tree write err: -5, ino 2 [ 1557.362957][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.402697][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.583783][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.612597][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.791449][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.805824][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.823971][T22136] tipc: Enabling of bearer rejected, failed to enable media [ 1557.833127][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21407'. [ 1557.917425][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.935381][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.955721][T22100] chnl_net:caif_netlink_parms(): no params data found [ 1558.134473][T22100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.141929][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.151109][T22100] device bridge_slave_0 entered promiscuous mode [ 1558.159962][T22100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.167201][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.175798][T22100] device bridge_slave_1 entered promiscuous mode [ 1558.334903][T22151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21414'. [ 1558.393863][T22100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.460220][T22100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.469959][T23659] Bluetooth: hci1: command 0x0409 tx timeout [ 1558.752546][T22100] team0: Port device team_slave_0 added [ 1558.800890][T22100] team0: Port device team_slave_1 added [ 1558.840717][ T46] tipc: Left network mode [ 1558.965649][T22100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.990623][T22100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.016620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.101874][T22100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.332402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.410854][T22187] netlink: 277 bytes leftover after parsing attributes in process `syz.0.21427'. [ 1559.891725][T22100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.920916][T22100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.946882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.003894][T22100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.148750][ T7651] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 1560.361250][ T7651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1560.410492][ T7651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.430417][ T7651] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1560.452338][ T7651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.483436][ T7651] usb 5-1: config 0 descriptor?? [ 1560.531141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.562937][T23659] Bluetooth: hci1: command 0x041b tx timeout [ 1560.597867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.707870][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21437'. [ 1560.938445][ T7651] hid-generic 0003:0C70:F0B6.0030: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 1561.117751][ T5813] usb 5-1: USB disconnect, device number 85 [ 1561.147475][T22224] fido_id[22224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1561.286349][T22100] device hsr_slave_0 entered promiscuous mode [ 1561.296346][T22100] device hsr_slave_1 entered promiscuous mode [ 1561.327830][T22100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1561.357680][T22100] Cannot create hsr debugfs directory [ 1561.448809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.105903][T22259] loop4: detected capacity change from 0 to 4096 [ 1562.227755][T22264] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1562.246152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.628144][T23659] Bluetooth: hci1: command 0x040f tx timeout [ 1562.865549][T22283] netlink: 'syz.9.21463': attribute type 1 has an invalid length. [ 1562.900122][T22283] netlink: 252 bytes leftover after parsing attributes in process `syz.9.21463'. [ 1563.105972][T22293] netlink: 104 bytes leftover after parsing attributes in process `syz.9.21467'. [ 1563.160036][ T46] batman_adv: batadv0: Interface deactivated: gretap2 [ 1563.364027][T22297] loop9: detected capacity change from 0 to 4096 [ 1563.425323][T22303] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1563.715557][ T46] batman_adv: batadv0: Removing interface: gretap2 [ 1563.982649][T22318] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1563.997839][T22318] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1564.014647][T22318] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1564.058522][T22318] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 1564.087885][T22318] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1564.116197][T22324] loop9: detected capacity change from 0 to 256 [ 1564.123830][T22318] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1564.140687][T22318] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1564.147182][T22318] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1564.157117][T22318] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1564.193056][T22318] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1564.217868][T22318] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1564.251030][T22318] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1564.280851][T22318] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1564.324715][T22318] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1564.614199][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.712064][T23659] Bluetooth: hci1: command 0x0419 tx timeout [ 1564.755179][T22340] loop9: detected capacity change from 0 to 256 [ 1564.840849][T22340] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 1565.189539][T22352] netlink: 40 bytes leftover after parsing attributes in process `syz.9.21495'. [ 1565.198870][T22352] netlink: 56 bytes leftover after parsing attributes in process `syz.9.21495'. [ 1565.283852][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21493'. [ 1565.300676][T22350] loop4: detected capacity change from 0 to 4096 [ 1565.315245][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21493'. [ 1565.376165][T22350] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1565.424867][T22350] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1565.491677][T22350] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1565.508447][T22350] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1565.559078][T22350] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1565.641450][T22350] ntfs: volume version 3.1. [ 1565.673706][T22350] ntfs: (device loop4): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 1565.722620][T22350] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 1565.762674][T22350] ntfs: (device loop4): load_system_files(): Failed to load root directory. [ 1565.842444][T22350] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 1566.042065][T22350] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1566.178740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.228308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.298932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.525532][T22387] loop9: detected capacity change from 0 to 256 [ 1566.583229][T22100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1566.625148][T22387] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1566.709880][ T26] audit: type=1800 audit(1822.766:987): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.21506" name="file2" dev="loop9" ino=1049134 res=0 errno=0 [ 1566.730502][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.981579][T22100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1567.037000][T22100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1567.118265][T22100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1567.332044][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21510'. [ 1567.336536][T22403] overlayfs: failed to set xattr on upper [ 1567.357957][T22403] overlayfs: ...falling back to index=off,metacopy=off. [ 1567.410861][T22403] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1567.445592][ T46] device hsr_slave_0 left promiscuous mode [ 1567.463394][ T46] device hsr_slave_1 left promiscuous mode [ 1567.477456][ T5813] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1567.503509][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.537987][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.580397][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.597539][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.605533][ T46] device bridge_slave_1 left promiscuous mode [ 1567.643701][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.665047][ T46] device bridge_slave_0 left promiscuous mode [ 1567.697448][ T5813] usb 10-1: Using ep0 maxpacket: 32 [ 1567.711257][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.723865][ T5813] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1567.771799][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.798610][ T5813] usb 10-1: config 0 descriptor?? [ 1567.836822][ T5813] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1567.932458][ T46] device virt_wifi0 left promiscuous mode [ 1567.974568][ T46] device veth1_macvtap left promiscuous mode [ 1567.987644][ T46] device veth0_macvtap left promiscuous mode [ 1567.991959][ T4433] udevd[4433]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1568.007630][ T46] device veth1_vlan left promiscuous mode [ 1568.040206][ T46] device veth0_vlan left promiscuous mode [ 1568.497368][ T5813] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1568.503297][ T5813] sq930x: probe of 10-1:0.0 failed with error -71 [ 1568.528672][ T5813] usb 10-1: USB disconnect, device number 14 [ 1568.930865][T22423] sock: sock_timestamping_bind_phc: sock not bind to device [ 1569.327214][ T1749] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1569.356205][ T46] bond3 (unregistering): Released all slaves [ 1569.513035][ T1749] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1569.524183][ T1749] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.554930][ T1749] usb 10-1: Product: syz [ 1569.559372][ T1749] usb 10-1: Manufacturer: syz [ 1569.564083][ T1749] usb 10-1: SerialNumber: syz [ 1569.577745][ T1749] usb 10-1: config 0 descriptor?? [ 1569.589020][ T1749] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1569.594912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.628993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.712376][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.758798][ T46] bond2 (unregistering): Released all slaves [ 1570.027937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.127741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.175779][ T46] bond1 (unregistering): Released all slaves [ 1570.226149][ T1749] gspca_sunplus: reg_r err -71 [ 1570.232148][ T1749] sunplus: probe of 10-1:0.0 failed with error -71 [ 1570.285450][ T1749] usb 10-1: USB disconnect, device number 15 [ 1572.197573][T22100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.244114][T22100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.316247][T22435] netlink: 1 bytes leftover after parsing attributes in process `syz.4.21524'. [ 1572.337280][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1572.345251][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1572.348410][T22439] CUSE: unknown device info "" [ 1572.375286][T22439] CUSE: unknown device info "Ö" [ 1572.376293][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21525'. [ 1572.397345][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1572.406147][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1572.416087][T22439] CUSE: unknown device info "" [ 1572.427082][T22439] CUSE: unknown device info "" [ 1572.442342][T22439] CUSE: unknown device info "ðÿÿÿ" [ 1572.445223][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.454685][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.497095][T22439] CUSE: unknown device info "" [ 1572.522758][T22440] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21525'. [ 1572.523609][T22439] CUSE: unknown device info "" [ 1572.553992][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1572.586124][T22439] CUSE: unknown device info "" [ 1572.588390][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1572.614611][T22439] CUSE: unknown device info "" [ 1572.626557][T22446] netlink: 72 bytes leftover after parsing attributes in process `syz.4.21528'. [ 1572.627505][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.642807][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.646298][T22439] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1572.674868][T22446] netlink: 3 bytes leftover after parsing attributes in process `syz.4.21528'. [ 1572.691751][T22439] CUSE: unknown device info "ÿÿÿÿ" [ 1572.705239][T22439] CUSE: unknown device info "" [ 1572.723539][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1572.732879][T22439] CUSE: unknown device info "€" [ 1572.763259][T22439] CUSE: DEVNAME unspecified [ 1572.792141][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1572.809984][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1572.864641][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1572.877935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.885819][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1572.935445][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1572.951745][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1573.017606][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1573.062075][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1573.094829][ T7648] kernel write not supported for file /sysvipc/msg (pid: 7648 comm: kworker/1:10) [ 1573.106198][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1573.152020][T22100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1573.191247][T22100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1573.243790][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1573.262823][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1573.263076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.974584][T22496] loop9: detected capacity change from 0 to 256 [ 1574.073080][T22496] FAT-fs (loop9): Directory bread(block 64) failed [ 1574.146503][T22496] FAT-fs (loop9): Directory bread(block 65) failed [ 1574.153175][T22496] FAT-fs (loop9): Directory bread(block 66) failed [ 1574.201964][T22496] FAT-fs (loop9): Directory bread(block 67) failed [ 1574.220824][T22496] FAT-fs (loop9): Directory bread(block 68) failed [ 1574.238100][T22496] FAT-fs (loop9): Directory bread(block 69) failed [ 1574.244785][T22496] FAT-fs (loop9): Directory bread(block 70) failed [ 1574.267325][T22496] FAT-fs (loop9): Directory bread(block 71) failed [ 1574.283709][T22496] FAT-fs (loop9): Directory bread(block 72) failed [ 1574.316558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1574.335393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1574.343621][T22496] FAT-fs (loop9): Directory bread(block 73) failed [ 1574.356076][T22100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.458296][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1574.478491][T22509] loop4: detected capacity change from 0 to 512 [ 1574.495555][T22509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1574.507390][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1574.546037][T22509] EXT4-fs (loop4): 1 truncate cleaned up [ 1574.567234][T22509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1574.583934][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1574.602318][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1574.646295][T22100] device veth0_vlan entered promiscuous mode [ 1574.671216][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1574.689644][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1574.724243][T22100] device veth1_vlan entered promiscuous mode [ 1574.744343][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1574.827283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1574.851092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1574.866841][T22519] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 1574.891557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1574.916191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1574.959081][T22100] device veth0_macvtap entered promiscuous mode [ 1575.033945][T22100] device veth1_macvtap entered promiscuous mode [ 1575.115332][T22100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.158145][T22100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.169278][T22531] netlink: 260 bytes leftover after parsing attributes in process `syz.9.21559'. [ 1575.178731][T22100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.216464][T22100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.254880][T22100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.293424][T22100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.305466][T22100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.328618][T22100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.356406][T22100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.368998][T22100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.395727][T22100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.422815][T22100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.466720][T22100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.488567][T22100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.502862][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1575.517599][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1575.547037][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1575.561926][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1575.621976][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1575.637104][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1575.659753][T22100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.682139][T22100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.710434][T22100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.751715][T22100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.859670][T22551] loop9: detected capacity change from 0 to 4096 [ 1576.017976][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.025849][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.143557][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1576.164562][T22558] syz.8.21567[22558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1576.166015][T15065] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 1576.178418][T22558] syz.8.21567[22558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1576.189732][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.231927][T15065] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1576.299233][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.322156][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1576.417540][ T7648] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1576.460443][T22563] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1576.480479][T22563] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1576.532277][T22563] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1576.630555][ T7648] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1576.650221][ T7648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.671473][ T7648] usb 5-1: Product: syz [ 1576.679207][ T7648] usb 5-1: Manufacturer: syz [ 1576.688765][ T7648] usb 5-1: SerialNumber: syz [ 1576.698745][ T7648] usb 5-1: config 0 descriptor?? [ 1576.706908][ T7648] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1576.734912][ T7648] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1576.751453][ T7648] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1576.770058][ T7648] usb 5-1: media controller created [ 1576.823236][ T7648] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.036940][T22573] loop3: detected capacity change from 0 to 4096 [ 1577.062402][T22573] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1577.134197][ T7648] DVB: Unable to find symbol mt352_attach() [ 1577.327400][ T7655] kernel write not supported for file /sg0 (pid: 7655 comm: kworker/1:14) [ 1577.418323][ T7648] DVB: Unable to find symbol nxt6000_attach() [ 1577.468287][ T7648] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1577.536585][ T7648] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input78 [ 1577.613732][ T7648] dvb-usb: schedule remote query interval to 1000 msecs. [ 1577.644416][ T7648] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1577.686500][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21578'. [ 1577.700957][ T7648] dvb-usb: bulk message failed: -22 (7/0) [ 1577.709563][T22100] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 1577.712690][ T7648] dvb-usb: bulk message failed: -22 (7/0) [ 1577.729849][T22100] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 1577.758192][T22100] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1577.775183][ T7648] usb 5-1: USB disconnect, device number 86 [ 1578.185074][T22610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1578.192421][T22610] IPv6: NLM_F_CREATE should be set when creating new route [ 1578.751105][T22616] loop3: detected capacity change from 0 to 8192 [ 1578.794116][T22616] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1578.834015][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21588'. [ 1578.885632][ T7648] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1578.900757][T22616] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1578.910402][T22616] REISERFS (device loop3): using ordered data mode [ 1578.917325][T22616] reiserfs: using flush barriers [ 1578.936960][T22616] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1578.975515][T22616] REISERFS (device loop3): checking transaction log (loop3) [ 1579.249243][T22632] sp0: Synchronizing with TNC [ 1579.296555][T22616] REISERFS (device loop3): Using tea hash to sort names [ 1579.303843][T22616] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1580.880650][ T7648] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1581.079914][ T7648] usb 9-1: Using ep0 maxpacket: 16 [ 1581.092277][ T7648] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.118117][ T7648] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.134377][ T7648] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.150637][ T7648] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1581.159139][ T7648] usb 9-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1581.174240][ T7648] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.192743][ T7648] usb 9-1: config 0 descriptor?? [ 1581.403004][T22720] loop9: detected capacity change from 0 to 64 [ 1581.427189][T22720] hfs: gid requires an argument [ 1581.433578][T22720] hfs: unable to parse mount options [ 1581.612047][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.630682][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.657492][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.668723][ T6791] Bluetooth: hci1: command 0x0405 tx timeout [ 1581.688823][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.717487][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.730391][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.744627][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.758072][ T7648] glorious 0003:258A:0033.0031: unknown main item tag 0x0 [ 1581.790071][ T7648] glorious 0003:258A:0033.0031: hidraw0: USB HID v0.04 Device [Glorious Model D] on usb-dummy_hcd.8-1/input0 [ 1581.834265][ T7648] usb 9-1: USB disconnect, device number 23 [ 1581.936844][ T26] audit: type=1326 audit(1838.008:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518139ce59 code=0x7ffc0000 [ 1581.957898][T22736] loop3: detected capacity change from 0 to 256 [ 1581.960525][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.008983][ T26] audit: type=1326 audit(1838.008:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f518139ce59 code=0x7ffc0000 [ 1582.056516][T22736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1582.078054][T22734] fido_id[22734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1582.093824][ T26] audit: type=1326 audit(1838.018:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f518139cbc2 code=0x7ffc0000 [ 1582.210988][ T26] audit: type=1326 audit(1838.018:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f518135d68e code=0x7ffc0000 [ 1582.286946][ T26] audit: type=1326 audit(1838.018:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f518139cc87 code=0x7ffc0000 [ 1582.311956][T22744] loop4: detected capacity change from 0 to 128 [ 1582.406366][T22744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1582.420962][ T26] audit: type=1326 audit(1838.028:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f518135d68e code=0x7ffc0000 [ 1582.498214][T22744] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1582.625713][ T26] audit: type=1326 audit(1838.028:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518139caeb code=0x7ffc0000 [ 1582.651097][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1582.764276][ T26] audit: type=1326 audit(1838.088:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f518135d68e code=0x7ffc0000 [ 1582.828412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.854446][ T26] audit: type=1326 audit(1838.088:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f518135d68e code=0x7ffc0000 [ 1582.877980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.028811][ T26] audit: type=1326 audit(1838.088:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.3.21628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f518139bcc7 code=0x7ffc0000 [ 1583.963308][T22803] netlink: 'syz.3.21653': attribute type 3 has an invalid length. [ 1584.548723][T22822] loop3: detected capacity change from 0 to 2048 [ 1584.640471][T22822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1584.863669][T22100] EXT4-fs (loop3): unmounting filesystem. [ 1585.819905][T22876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21679'. [ 1585.974565][T22841] loop4: detected capacity change from 0 to 32768 [ 1586.062158][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21682'. [ 1586.194427][T22887] netlink: 'syz.0.21684': attribute type 27 has an invalid length. [ 1587.365530][T22925] device bridge12 entered promiscuous mode [ 1587.655461][T22892] loop3: detected capacity change from 0 to 40427 [ 1587.682884][T22892] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1587.714393][T22892] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1587.765426][T22892] F2FS-fs (loop3): invalid crc value [ 1587.865344][T22892] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1587.876069][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1587.911345][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1587.939648][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1587.974849][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.013025][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.043534][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.054289][T22892] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1588.066177][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.071937][T22892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1588.081460][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.081489][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.081510][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.081530][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.192984][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.203110][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.233530][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.242132][T22892] F2FS-fs (loop3): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 1588.253477][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.306234][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.334284][ T7655] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1588.357617][ T7655] hid-generic 0006:0008:0001.0032: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1588.433643][T22100] syz-executor: attempt to access beyond end of device [ 1588.433643][T22100] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1588.749047][T22973] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21715'. [ 1588.856733][T22971] fido_id[22971]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1589.534428][T22985] loop3: detected capacity change from 0 to 16384 [ 1589.680529][T23000] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1590.132163][T23016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21730'. [ 1590.216143][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21732'. [ 1590.230801][T23019] netlink: 'syz.4.21731': attribute type 2 has an invalid length. [ 1590.283250][T22987] loop9: detected capacity change from 0 to 32768 [ 1590.408441][T22987] JBD2: Ignoring recovery information on journal [ 1590.594386][T22987] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1590.671380][T23039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21739'. [ 1590.913745][T15065] ocfs2: Unmounting device (7,9) on (node local) [ 1591.568146][T23069] netlink: 332 bytes leftover after parsing attributes in process `syz.0.21752'. [ 1591.600107][T23069] netlink: 196 bytes leftover after parsing attributes in process `syz.0.21752'. [ 1591.896717][T23086] loop9: detected capacity change from 0 to 1024 [ 1591.991345][T23090] loop4: detected capacity change from 0 to 1024 [ 1592.461762][T23110] loop4: detected capacity change from 0 to 64 [ 1593.338790][T23144] device syz_tun entered promiscuous mode [ 1593.374639][T23144] device macvtap1 entered promiscuous mode [ 1593.426928][T23144] device syz_tun left promiscuous mode [ 1593.546026][T23155] loop4: detected capacity change from 0 to 64 [ 1594.090946][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1594.090961][ T26] audit: type=1326 audit(1850.160:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23174 comm="syz.3.21795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f518139ce59 code=0x0 [ 1594.191200][T23182] netlink: 'syz.8.21798': attribute type 1 has an invalid length. [ 1594.199601][T23183] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1594.871221][T23212] loop9: detected capacity change from 0 to 512 [ 1594.982322][T23212] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1595.089714][T23222] loop3: detected capacity change from 0 to 256 [ 1595.093872][T23220] netlink: 36 bytes leftover after parsing attributes in process `syz.8.21811'. [ 1595.198189][T23222] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1595.215198][T15065] EXT4-fs (loop9): unmounting filesystem. [ 1596.263133][T23271] device macsec1 entered promiscuous mode [ 1596.831592][T23289] loop4: detected capacity change from 0 to 4096 [ 1596.875365][T23289] EXT4-fs: Ignoring removed mblk_io_submit option [ 1596.976465][T23289] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1597.065516][T23289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1597.305216][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1597.498260][T23305] loop9: detected capacity change from 0 to 8192 [ 1597.599623][T23305] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1597.646349][T23305] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1597.678802][T23305] REISERFS (device loop9): using ordered data mode [ 1597.703899][T23305] reiserfs: using flush barriers [ 1597.741931][T23305] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1597.805715][T23305] REISERFS (device loop9): checking transaction log (loop9) [ 1597.878255][T23284] loop3: detected capacity change from 0 to 32768 [ 1597.988273][T23284] [ 1597.988273][T23284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1597.988273][T23284] [ 1598.144294][T23305] REISERFS (device loop9): Using tea hash to sort names [ 1598.182063][T23305] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1598.233178][T23331] EXT4-fs: Conflicting test_dummy_encryption options [ 1598.272979][T22100] non-latin1 character 0x3ff found in JFS file name [ 1598.342113][T22100] mount with iocharset=utf8 to access [ 1598.363275][T23335] loop4: detected capacity change from 0 to 1024 [ 1598.391243][T22100] ERROR: (device loop3): diWrite: ixpxd invalid [ 1598.391243][T22100] [ 1598.460432][T22100] ERROR: (device loop3): remounting filesystem as read-only [ 1598.489098][T22100] ERROR: (device loop3): txCommit: [ 1598.489098][T22100] [ 1598.877308][T23348] netlink: 'syz.0.21861': attribute type 3 has an invalid length. [ 1599.105553][T23354] netlink: 132 bytes leftover after parsing attributes in process `syz.8.21862'. [ 1599.635876][ T4339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.824534][T23373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21873'. [ 1599.880961][T23379] netlink: 'syz.8.21874': attribute type 29 has an invalid length. [ 1599.881045][T23373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21873'. [ 1599.896013][ T4339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.920529][T23379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21874'. [ 1600.000197][T23379] netlink: 'syz.8.21874': attribute type 29 has an invalid length. [ 1600.045090][T23379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21874'. [ 1600.152654][ T4339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.183150][T23382] netlink: 'syz.8.21874': attribute type 29 has an invalid length. [ 1600.197708][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21874'. [ 1600.425192][ T4339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.425508][ T26] audit: type=1326 audit(1856.500:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23392 comm="syz.0.21877" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff83999ce59 code=0x0 [ 1600.642791][ T6791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1600.660087][ T6791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1600.671329][ T6791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1600.691700][ T6791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1600.699777][ T6791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1600.707878][ T6791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1600.841546][T23402] lo speed is unknown, defaulting to 1000 [ 1601.014648][T23408] loop4: detected capacity change from 0 to 4096 [ 1601.131892][T23415] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1601.779804][T23434] loop4: detected capacity change from 0 to 128 [ 1601.843283][T23434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1601.924689][T23434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1602.122906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.356466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.636983][T23402] chnl_net:caif_netlink_parms(): no params data found [ 1602.793566][T23659] Bluetooth: hci1: command 0x0409 tx timeout [ 1603.156355][T23402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.175839][T23402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.220052][T23402] device bridge_slave_0 entered promiscuous mode [ 1603.303250][T23402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.322841][T23402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.332152][T23402] device bridge_slave_1 entered promiscuous mode [ 1603.405102][ T7655] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1603.618215][ T7655] usb 10-1: Using ep0 maxpacket: 32 [ 1603.626939][ T7655] usb 10-1: config 0 has an invalid interface number: 153 but max is 0 [ 1603.689905][ T7655] usb 10-1: config 0 has no interface number 0 [ 1603.713594][ T7655] usb 10-1: config 0 interface 153 has no altsetting 0 [ 1603.733965][ T7655] usb 10-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1603.737606][T23493] CUSE: zero length info key specified [ 1603.749395][ T7655] usb 10-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1603.768137][ T7655] usb 10-1: Product: syz [ 1603.772446][ T7655] usb 10-1: Manufacturer: syz [ 1603.787864][T23402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.810465][ T7655] usb 10-1: SerialNumber: syz [ 1603.830700][ T7655] usb 10-1: config 0 descriptor?? [ 1603.842064][T23402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.017403][T23402] team0: Port device team_slave_0 added [ 1604.050445][ T7655] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1604.391646][T23402] team0: Port device team_slave_1 added [ 1604.633079][ T7655] usb 10-1: reset high-speed USB device number 16 using dummy_hcd [ 1604.636216][T23402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.670075][T23402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.696021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1604.733682][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21921'. [ 1604.763260][T23402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.812454][T23402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.844869][T23402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.871155][ T6791] Bluetooth: hci1: command 0x041b tx timeout [ 1604.891906][T23402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.925254][ T4339] device hsr_slave_0 left promiscuous mode [ 1604.931864][ T4339] device hsr_slave_1 left promiscuous mode [ 1604.947580][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.955434][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.963788][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.981856][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.990089][ T4339] device bridge_slave_1 left promiscuous mode [ 1604.997572][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.091155][ T4339] device bridge_slave_0 left promiscuous mode [ 1605.102297][ T7655] usb 10-1: failed to restore interface 153 altsetting 198 (error=-71) [ 1605.102993][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.139530][T23535] loop4: detected capacity change from 0 to 512 [ 1605.140969][ T7655] ueagle-atm 10-1:0.153: usbatm_usb_probe: bind failed: -19! [ 1605.183588][T23535] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1605.230642][ T7655] usb 10-1: USB disconnect, device number 16 [ 1605.332290][ T4339] device veth1_macvtap left promiscuous mode [ 1605.348864][ T4339] device veth0_macvtap left promiscuous mode [ 1605.363094][ T4339] device veth1_vlan left promiscuous mode [ 1605.374547][ T4339] device veth0_vlan left promiscuous mode [ 1606.412304][T23571] loop9: detected capacity change from 0 to 16 [ 1606.452995][T23571] erofs: (device loop9): mounted with root inode @ nid 36. [ 1606.465397][ T26] audit: type=1800 audit(1862.541:1010): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.21941" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 1606.948502][T23659] Bluetooth: hci1: command 0x040f tx timeout [ 1607.196272][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 1607.268406][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.278687][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.301961][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 1607.390127][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.475792][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1608.193761][ T4339] bond0 (unregistering): Released all slaves [ 1608.237189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.496699][T23402] device hsr_slave_0 entered promiscuous mode [ 1608.523367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.550489][T23402] device hsr_slave_1 entered promiscuous mode [ 1608.584940][T23402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1608.612587][T23402] Cannot create hsr debugfs directory [ 1608.826249][T23583] loop4: detected capacity change from 0 to 4096 [ 1608.922947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.943420][T23583] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1608.959034][T23593] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1608.977783][T23583] NILFS (loop4): mounting fs with errors [ 1609.022569][T23659] Bluetooth: hci1: command 0x0419 tx timeout [ 1609.070676][T23583] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 1609.102725][T23583] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 1610.701379][T23652] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21972'. [ 1611.208881][T23672] netlink: 104 bytes leftover after parsing attributes in process `syz.8.21978'. [ 1611.253260][T23673] loop9: detected capacity change from 0 to 2048 [ 1611.335759][T23676] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1611.692195][T23686] netlink: 88 bytes leftover after parsing attributes in process `syz.9.21984'. [ 1611.767422][T23686] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21984'. [ 1611.954194][T23402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1611.988959][T23402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1612.053413][T23402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1612.064127][T23402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1612.350921][T23709] loop9: detected capacity change from 0 to 1024 [ 1612.379331][T23402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.425634][T23711] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21994'. [ 1612.482659][T23709] hfsplus: xattr exists yet [ 1612.494051][T23402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.531505][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1612.540385][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1612.599101][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1612.628651][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1612.680587][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.687787][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.742210][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1612.782469][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1612.824738][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.831910][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.897326][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1612.924593][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1612.957489][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1612.983781][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1613.040361][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1613.075894][T23402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1613.096697][T23402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.125034][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1613.142812][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1613.165278][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1613.194719][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1613.222732][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1613.251160][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1613.285813][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1613.305316][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1613.632178][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22009'. [ 1613.661974][T23752] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22009'. [ 1613.881559][T23763] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.22012'. [ 1614.142715][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1614.150365][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1614.199388][T23402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.275580][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1614.293463][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1614.350838][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1614.402568][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1614.416275][T23402] device veth0_vlan entered promiscuous mode [ 1614.431220][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1614.462975][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1614.481260][T23777] netlink: 'syz.8.22017': attribute type 3 has an invalid length. [ 1614.520553][T23402] device veth1_vlan entered promiscuous mode [ 1614.631675][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1614.671481][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1614.712925][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1614.754084][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1614.766211][T23748] loop4: detected capacity change from 0 to 40427 [ 1614.790659][T23402] device veth0_macvtap entered promiscuous mode [ 1614.823328][T23402] device veth1_macvtap entered promiscuous mode [ 1614.842999][T23748] F2FS-fs (loop4): invalid crc value [ 1614.917132][T23748] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1614.978786][T23402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.025900][T23402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.048486][T23802] devpts: called with bogus options [ 1615.067768][T23402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.112056][T23402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.122375][T23748] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1615.151853][T23402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.190514][T23402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.230010][T23402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1615.338532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1615.382890][ T4273] syz-executor: attempt to access beyond end of device [ 1615.382890][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1615.401891][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1615.430466][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1615.461112][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1615.506815][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1615.544306][T23402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1615.600633][T23402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.641123][T23402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1615.683629][T23402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.711397][T23822] netlink: 'syz.8.22031': attribute type 29 has an invalid length. [ 1615.732559][T23402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1615.767191][T23402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.788970][T23402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1615.865151][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1615.897495][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1615.936205][T23822] netlink: 'syz.8.22031': attribute type 29 has an invalid length. [ 1615.951824][T23824] netlink: 'syz.8.22031': attribute type 29 has an invalid length. [ 1615.968824][T23829] netlink: 'syz.9.22032': attribute type 27 has an invalid length. [ 1615.994247][T23402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.013490][T23833] usb usb1: usbfs: process 23833 (syz.4.22033) did not claim interface 0 before use [ 1616.041458][T23402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.050210][T23402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.101545][T23402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.362104][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.369976][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.443141][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1616.456052][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.472660][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.507019][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1616.858944][T23859] loop4: detected capacity change from 0 to 64 [ 1616.900411][T23859] syz.4.22044: attempt to access beyond end of device [ 1616.900411][T23859] loop4: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1616.974259][T23859] Trying to free block not in datazone [ 1617.051429][T23865] syz.4.22044: attempt to access beyond end of device [ 1617.051429][T23865] loop4: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1617.142600][T23865] Buffer I/O error on dev loop4, logical block 206, async page read [ 1617.164086][ T26] audit: type=1800 audit(1873.232:1011): pid=23865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.22044" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1617.912715][T23898] netlink: 88 bytes leftover after parsing attributes in process `syz.4.22058'. [ 1617.942470][T23898] tipc: New replicast peer: 172.20.20.170 [ 1618.034920][T23898] tipc: Enabled bearer , priority 9 [ 1618.351995][T23908] netlink: 'syz.4.22062': attribute type 5 has an invalid length. [ 1618.541499][ T6791] Bluetooth: hci1: command 0x0405 tx timeout [ 1618.762258][T23892] loop9: detected capacity change from 0 to 32768 [ 1618.968623][T23892] XFS (loop9): Mounting V5 Filesystem [ 1619.105017][ T4345] tipc: Node number set to 2151776430 [ 1619.141184][T23892] XFS (loop9): Ending clean mount [ 1619.237181][T23892] XFS (loop9): Quotacheck needed: Please wait. [ 1619.417463][T23950] tipc: Enabled bearer , priority 31 [ 1619.469469][T23892] XFS (loop9): Quotacheck: Done. [ 1619.623100][T15065] XFS (loop9): Unmounting Filesystem [ 1619.664510][T23958] netem: incorrect ge model size [ 1619.670377][T23958] netem: change failed [ 1620.904269][T24004] loop4: detected capacity change from 0 to 1024 [ 1621.078238][T24007] device bond_slave_0 entered promiscuous mode [ 1621.085903][T24007] device bond_slave_1 entered promiscuous mode [ 1621.151173][ T7655] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1621.151971][T24007] device bond_slave_0 left promiscuous mode [ 1621.165041][T24007] device bond_slave_1 left promiscuous mode [ 1621.219477][T24014] ALSA: mixer_oss: invalid OSS volume '' [ 1621.341274][ T7655] usb 10-1: Using ep0 maxpacket: 16 [ 1621.368751][ T7655] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.410997][ T7655] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.455308][ T7655] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1621.489964][ T7655] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1621.541597][ T7655] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.567121][ T7655] usb 10-1: config 0 descriptor?? [ 1621.608782][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22106'. [ 1621.801123][T24033] Bluetooth: MGMT ver 1.22 [ 1622.011334][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.018620][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.038424][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.063955][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.084246][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.104039][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.140446][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.156432][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.171145][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.188676][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.213196][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.241077][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.260847][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.268131][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.290950][ T7655] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1622.314003][ T7655] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0033/input/input79 [ 1622.355820][ T7655] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1622.387810][ T7655] usb 10-1: USB disconnect, device number 17 [ 1622.746512][T24057] fido_id[24057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1622.930784][ T5803] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1623.120833][ T5803] usb 9-1: Using ep0 maxpacket: 16 [ 1623.128055][ T5803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.181951][ T5803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.238585][ T5803] usb 9-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1623.278434][ T5803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.304658][ T5803] usb 9-1: config 0 descriptor?? [ 1623.513025][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22129'. [ 1623.536600][T24089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22129'. [ 1623.566163][T24089] netlink: 'syz.2.22129': attribute type 14 has an invalid length. [ 1623.610753][T24089] netlink: 'syz.2.22129': attribute type 12 has an invalid length. [ 1623.691015][ T4345] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 1623.762722][ T5803] razer 0003:1532:011B.0034: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.8-1/input0 [ 1623.892363][ T4345] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1623.937931][ T4345] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1623.968752][ T4345] usb 10-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1623.968896][ T7655] usb 9-1: USB disconnect, device number 24 [ 1623.996631][ T4345] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.043637][T24097] fido_id[24097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1624.059013][ T4345] usb 10-1: config 0 descriptor?? [ 1624.420687][ T5813] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1624.487139][ T4345] hid (null): unknown global tag 0xa3 [ 1624.508892][ T4345] magicmouse 0003:05AC:0269.0035: unexpected long global item [ 1624.521003][ T4345] magicmouse 0003:05AC:0269.0035: magicmouse hid parse failed [ 1624.528654][ T4345] magicmouse: probe of 0003:05AC:0269.0035 failed with error -22 [ 1624.631748][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.653047][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.693677][ T5813] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1624.739710][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.782576][ T4345] usb 10-1: USB disconnect, device number 18 [ 1624.801365][ T5813] usb 3-1: config 0 descriptor?? [ 1624.856242][T24132] netlink: 'syz.4.22142': attribute type 3 has an invalid length. [ 1624.887046][T24132] netlink: 'syz.4.22142': attribute type 3 has an invalid length. [ 1625.228274][ T5813] razer 0003:1532:010E.0036: unknown main item tag 0x5 [ 1625.387925][T24154] netlink: 172 bytes leftover after parsing attributes in process `syz.9.22151'. [ 1625.426639][ T5813] razer 0003:1532:010E.0036: failed to enable macro keys: -71 [ 1625.450712][ T5813] razer 0003:1532:010E.0036: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 1625.490536][ T5813] usb 3-1: USB disconnect, device number 57 [ 1625.719809][T24158] fido_id[24158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1625.837879][T24170] loop4: detected capacity change from 0 to 128 [ 1625.906345][T24170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1626.035423][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1626.667382][T24205] loop9: detected capacity change from 0 to 16 [ 1626.716725][T24205] erofs: (device loop9): mounted with root inode @ nid 36. [ 1626.755937][T24207] netlink: 80 bytes leftover after parsing attributes in process `syz.4.22168'. [ 1626.775690][T24205] erofs: (device loop9): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1626.801428][T24205] syz.9.22167: attempt to access beyond end of device [ 1626.801428][T24205] loop9: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1626.871211][T24205] erofs: (device loop9): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1626.896751][T24205] syz.9.22167: attempt to access beyond end of device [ 1626.896751][T24205] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1626.996092][T24205] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 1627.052068][ T26] audit: type=1800 audit(1883.124:1012): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.22167" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 1627.533767][T24238] Bluetooth: MGMT ver 1.22 [ 1627.993313][T24255] loop4: detected capacity change from 0 to 2048 [ 1628.047828][T24255] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1628.066316][T24255] NILFS (loop4): mounting unchecked fs [ 1628.131605][T24255] NILFS (loop4): recovery complete [ 1628.165176][T24266] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1628.481916][ T5813] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1628.690014][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 1628.697545][ T5813] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1628.716850][ T5813] usb 3-1: config 0 has no interface number 0 [ 1628.732255][ T5813] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1628.770777][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.789278][ T5813] usb 3-1: Product: syz [ 1628.796442][ T5813] usb 3-1: Manufacturer: syz [ 1628.813317][ T5813] usb 3-1: SerialNumber: syz [ 1628.818593][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22198'. [ 1628.828945][ T5813] usb 3-1: config 0 descriptor?? [ 1628.842109][ T5813] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1628.954202][ T7655] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1629.049426][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1629.089774][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1629.170034][ T7655] usb 5-1: Using ep0 maxpacket: 32 [ 1629.191526][ T7655] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.245099][ T7655] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.277543][ T7655] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.339998][ T7655] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.379951][ T7655] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1629.386625][ T7655] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1629.448808][ T7655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.471890][ T7655] usb 5-1: config 0 descriptor?? [ 1629.477126][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1629.486764][ T4345] usb 3-1: USB disconnect, device number 58 [ 1629.517661][ T4345] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1629.544423][ T4345] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1629.571704][ T4345] quatech2 3-1:0.51: device disconnected [ 1629.888473][ T7655] corsair-psu 0003:1B1C:1C09.0037: item fetching failed at offset 4/5 [ 1629.907690][ T7655] corsair-psu: probe of 0003:1B1C:1C09.0037 failed with error -22 [ 1630.106836][ T4320] usb 5-1: USB disconnect, device number 87 [ 1630.539789][ T5813] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1630.582535][T24316] loop9: detected capacity change from 0 to 32768 [ 1630.657012][T24316] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1630.726348][ T26] audit: type=1800 audit(1886.794:1013): pid=24316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.22207" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1630.728292][T24316] [ 1630.749201][T24316] ====================================================== [ 1630.756231][T24316] WARNING: possible circular locking dependency detected [ 1630.763275][T24316] syzkaller #0 Not tainted [ 1630.767699][T24316] ------------------------------------------------------ [ 1630.774739][T24316] syz.9.22207/24316 is trying to acquire lock: [ 1630.780912][T24316] ffff88805530ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba0/0x13e0 [ 1630.793205][T24316] [ 1630.793205][T24316] but task is already holding lock: [ 1630.800583][T24316] ffff88805200eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0 [ 1630.810097][T24316] [ 1630.810097][T24316] which lock already depends on the new lock. [ 1630.810097][T24316] [ 1630.820499][T24316] [ 1630.820499][T24316] the existing dependency chain (in reverse order) is: [ 1630.829529][T24316] [ 1630.829529][T24316] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1630.837382][T24316] down_read+0x42/0x2d0 [ 1630.842155][T24316] ocfs2_init_acl+0x307/0x770 [ 1630.847434][T24316] ocfs2_mknod+0x15e8/0x25b0 [ 1630.852627][T24316] vfs_mknod+0x424/0x4c0 [ 1630.857385][T24316] do_mknodat+0x356/0x4d0 [ 1630.862524][T24316] __x64_sys_mknodat+0xa5/0xc0 [ 1630.867977][T24316] do_syscall_64+0x4c/0xa0 [ 1630.872923][T24316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.879333][T24316] [ 1630.879333][T24316] -> #1 (jbd2_handle){++++}-{0:0}: [ 1630.886654][T24316] jbd2_journal_lock_updates+0xa8/0x390 [ 1630.892911][T24316] __ocfs2_flush_truncate_log+0x2cf/0x1220 [ 1630.899331][T24316] ocfs2_flush_truncate_log+0x4b/0x60 [ 1630.905224][T24316] ocfs2_sync_fs+0x119/0x330 [ 1630.910337][T24316] sync_filesystem+0x1be/0x220 [ 1630.915702][T24316] generic_shutdown_super+0x6b/0x340 [ 1630.921560][T24316] kill_block_super+0x7c/0xe0 [ 1630.926762][T24316] deactivate_locked_super+0x93/0xf0 [ 1630.932565][T24316] cleanup_mnt+0x42c/0x4b0 [ 1630.937515][T24316] task_work_run+0x1d0/0x260 [ 1630.942719][T24316] exit_to_user_mode_loop+0xe6/0x110 [ 1630.948579][T24316] exit_to_user_mode_prepare+0xee/0x180 [ 1630.954653][T24316] syscall_exit_to_user_mode+0x16/0x40 [ 1630.960801][T24316] do_syscall_64+0x58/0xa0 [ 1630.965905][T24316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.972315][T24316] [ 1630.972315][T24316] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 1630.982822][T24316] __lock_acquire+0x2d07/0x7d10 [ 1630.988187][T24316] lock_acquire+0x1bb/0x4a0 [ 1630.993222][T24316] down_write+0x36/0x60 [ 1630.997902][T24316] ocfs2_xattr_set+0xba0/0x13e0 [ 1631.003303][T24316] __vfs_setxattr+0x3e0/0x420 [ 1631.008510][T24316] __vfs_setxattr_noperm+0x129/0x5e0 [ 1631.014316][T24316] vfs_setxattr+0x167/0x2e0 [ 1631.019334][T24316] setxattr+0x346/0x360 [ 1631.024004][T24316] path_setxattr+0x147/0x290 [ 1631.029108][T24316] __x64_sys_setxattr+0xb7/0xd0 [ 1631.034512][T24316] do_syscall_64+0x4c/0xa0 [ 1631.039438][T24316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1631.045857][T24316] [ 1631.045857][T24316] other info that might help us debug this: [ 1631.045857][T24316] [ 1631.056073][T24316] Chain exists of: [ 1631.056073][T24316] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 1631.056073][T24316] [ 1631.071811][T24316] Possible unsafe locking scenario: [ 1631.071811][T24316] [ 1631.079247][T24316] CPU0 CPU1 [ 1631.084598][T24316] ---- ---- [ 1631.089975][T24316] lock(&oi->ip_xattr_sem); [ 1631.094565][T24316] lock(jbd2_handle); [ 1631.101145][T24316] lock(&oi->ip_xattr_sem); [ 1631.108248][T24316] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 1631.115530][T24316] [ 1631.115530][T24316] *** DEADLOCK *** [ 1631.115530][T24316] [ 1631.123664][T24316] 3 locks held by syz.9.22207/24316: [ 1631.128934][T24316] #0: ffff8880740c4460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1631.138163][T24316] #1: ffff88805200ed88 (&sb->s_type->i_mutex_key#50){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 1631.148789][T24316] #2: ffff88805200eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0 [ 1631.158712][T24316] [ 1631.158712][T24316] stack backtrace: [ 1631.164775][T24316] CPU: 0 PID: 24316 Comm: syz.9.22207 Not tainted syzkaller #0 [ 1631.172319][T24316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1631.182364][T24316] Call Trace: [ 1631.185637][T24316] [ 1631.188585][T24316] dump_stack_lvl+0x188/0x24e [ 1631.193266][T24316] ? load_image+0x400/0x400 [ 1631.197879][T24316] ? show_regs_print_info+0x12/0x12 [ 1631.203075][T24316] ? print_circular_bug+0x12b/0x1a0 [ 1631.208275][T24316] check_noncircular+0x296/0x330 [ 1631.213210][T24316] ? look_up_lock_class+0x75/0x140 [ 1631.218318][T24316] ? add_chain_block+0x940/0x940 [ 1631.223255][T24316] ? lockdep_lock+0xf1/0x1f0 [ 1631.227840][T24316] ? lockdep_unlock+0x142/0x2e0 [ 1631.232689][T24316] ? _find_first_zero_bit+0xcf/0x100 [ 1631.238035][T24316] __lock_acquire+0x2d07/0x7d10 [ 1631.242894][T24316] ? verify_lock_unused+0x140/0x140 [ 1631.248181][T24316] ? ocfs2_downconvert_lock+0x530/0x530 [ 1631.253727][T24316] ? verify_lock_unused+0x140/0x140 [ 1631.258920][T24316] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 1631.264635][T24316] ? do_raw_spin_lock+0x128/0x2f0 [ 1631.269651][T24316] lock_acquire+0x1bb/0x4a0 [ 1631.274147][T24316] ? ocfs2_xattr_set+0xba0/0x13e0 [ 1631.279267][T24316] ? _raw_spin_unlock+0x24/0x40 [ 1631.284119][T24316] ? ocfs2_xattr_block_find+0x157/0x4d0 [ 1631.289657][T24316] ? __might_sleep+0xd0/0xd0 [ 1631.294310][T24316] ? read_lock_is_recursive+0x10/0x10 [ 1631.299676][T24316] ? rwsem_write_trylock+0x135/0x1c0 [ 1631.304961][T24316] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 1631.310503][T24316] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 1631.316044][T24316] down_write+0x36/0x60 [ 1631.320292][T24316] ? ocfs2_xattr_set+0xba0/0x13e0 [ 1631.325311][T24316] ocfs2_xattr_set+0xba0/0x13e0 [ 1631.330160][T24316] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 1631.335872][T24316] ? __lock_acquire+0x13cf/0x7d10 [ 1631.340898][T24316] ? __stack_depot_save+0x35/0x460 [ 1631.346096][T24316] ? verify_lock_unused+0x140/0x140 [ 1631.351307][T24316] ? aa_get_newest_label+0xf9/0x5b0 [ 1631.356544][T24316] ? kasan_set_track+0x4b/0x70 [ 1631.361307][T24316] ? posix_xattr_acl+0x8f/0xb0 [ 1631.366122][T24316] ? evm_protect_xattr+0x333/0x9d0 [ 1631.371336][T24316] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 1631.376804][T24316] __vfs_setxattr+0x3e0/0x420 [ 1631.381488][T24316] __vfs_setxattr_noperm+0x129/0x5e0 [ 1631.386771][T24316] vfs_setxattr+0x167/0x2e0 [ 1631.391270][T24316] ? xattr_permission+0x500/0x500 [ 1631.396288][T24316] ? _copy_from_user+0x10b/0x170 [ 1631.401310][T24316] ? setxattr+0x2ce/0x360 [ 1631.405642][T24316] setxattr+0x346/0x360 [ 1631.409800][T24316] ? path_setxattr+0x290/0x290 [ 1631.414579][T24316] ? __mnt_want_write+0x21f/0x2a0 [ 1631.419605][T24316] path_setxattr+0x147/0x290 [ 1631.424191][T24316] ? simple_xattr_list_add+0xf0/0xf0 [ 1631.429474][T24316] ? lock_chain_count+0x20/0x20 [ 1631.434333][T24316] __x64_sys_setxattr+0xb7/0xd0 [ 1631.439180][T24316] do_syscall_64+0x4c/0xa0 [ 1631.443611][T24316] ? clear_bhb_loop+0x60/0xb0 [ 1631.448282][T24316] ? clear_bhb_loop+0x60/0xb0 [ 1631.452961][T24316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1631.458851][T24316] RIP: 0033:0x7f7f2c99ce59 [ 1631.463266][T24316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.482908][T24316] RSP: 002b:00007f7f2d7c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1631.491403][T24316] RAX: ffffffffffffffda RBX: 00007f7f2cc15fa0 RCX: 00007f7f2c99ce59 [ 1631.499369][T24316] RDX: 0000200000000100 RSI: 0000200000000200 RDI: 0000200000000180 [ 1631.507336][T24316] RBP: 00007f7f2ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1631.515310][T24316] R10: 0000000000000105 R11: 0000000000000246 R12: 0000000000000000 [ 1631.523278][T24316] R13: 00007f7f2cc16038 R14: 00007f7f2cc15fa0 R15: 00007ffdd53a2188 [ 1631.531250][T24316] [ 1631.534338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.546158][ T5813] usb 9-1: Using ep0 maxpacket: 32 [ 1631.567854][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.603102][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.664086][ T5813] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1631.693794][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.716143][T15065] ocfs2: Unmounting device (7,9) on (node local) [ 1631.731125][ T5813] usb 9-1: config 0 descriptor?? [ 1631.780259][ T5813] hub 9-1:0.0: USB hub found [ 1631.981216][ T5813] hub 9-1:0.0: 1 port detected [ 1632.187075][ T5813] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 1632.197015][ T5813] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 1632.209169][ T5813] usbhid 9-1:0.0: can't add hid device: -71 [ 1632.215345][ T5813] usbhid: probe of 9-1:0.0 failed with error -71 [ 1632.250165][ T5813] usb 9-1: USB disconnect, device number 25 [ 1637.941678][ T3935] eql: remember to turn off Van-Jacobson compression on your slave devices