last executing test programs: 6m53.462195343s ago: executing program 2 (id=1137): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001780)) 6m52.03735528s ago: executing program 2 (id=1144): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_fuse_handle_req(r0, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0xffffffffffffffff, 0x1) 6m50.598861781s ago: executing program 2 (id=1150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) 6m48.262796631s ago: executing program 2 (id=1155): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 6m45.303829796s ago: executing program 2 (id=1162): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000002280)='./file0\x00') 6m43.413565293s ago: executing program 2 (id=1170): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0xe76180e1627182be, 0x3, 0x0}) 6m28.096713354s ago: executing program 32 (id=1170): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0xe76180e1627182be, 0x3, 0x0}) 4m49.73115353s ago: executing program 1 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {0x0, 0x4101}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40084) 4m48.985987604s ago: executing program 1 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x900, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m47.473931919s ago: executing program 1 (id=1647): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x1}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) 4m46.844659151s ago: executing program 1 (id=1650): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x7) 4m46.164004485s ago: executing program 1 (id=1655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f00000006c0)={[{@user_subvol_rm}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@nobarrier}, {@usebackuproot}, {@skip_balance}, {@noenospc_debug}, {@subvolid={'subvolid', 0x3d, 0x6}}, {@discard_async}]}, 0x3, 0x510e, &(0x7f00000196c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlVRGht7TRYv2LFNiVGIjE1EIwSlDVLyoQijKKr5ALUCEUkB4SLFESqPiKoogEChNURBpJQkIk2Q4mr23jN759ydhx9rvPT3k7xzZv7ncc+Zh+fce+dcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/+HQV67622bxh397wdPPXTxx2d51F798zQVnPh7C5OzjHVm4o//6Wyd+fuf5d+29b81t9xy58P29ebk8HgaqfzrzO9fFWo8sDeHejhC608DKwSzQk98fjPW9YzCEM8JcoFZiqj8rkTYcvt8Xwv4wF6hV9b2+EAYLgYueeOjBG6uJW/pCWBZCqKRtPFvJ2uhLA+f0ZoH+NLCtOwv86mimFvhuZxaAExbfDLUX/cHJ+gwj85dr8PrrOWkb9sZKu9cVEyON8/1s3QJvVEFv+sDkCT1tpepYEKW3xyHvtkXwbiuN882etuIXqfwbytG5UCV0bp7asvHKmV3xkc4wNtbVqKYFep6fevVLm44lvWheh3EDRk7K6/Cmx5bd2bXiE4/es3LZiwc+sO+lE93MHxWGtJheaJWQv+YWzfMYTfg8WQRvv9K3pFFfukIIWz7/e59sFi/N/0eaz//jyznedtbljrW+PpTNzeMjgzHxylA2NwcAAIBFYzHsNd029sBHCsWHK0l9pfn/aHvH/+Mh/3wyn/X2UAgTs4l9wyGcNft4FrgjNnfJcAjvnk1N1gfWJYFDIbx9NrGiVlVSYkksMZoEfjKUByaSwOEYmEwC34qBm5PAdTFwMAlsioFDSeD8GAjT9f34/aG8H20H+mJgQzaIB+NZCL8Yiq0lY/VMrSoAAICTJJ8d9tTfLZzrcKIZ4vTyYF+rDPEM7IYZKkkN6Qy2Nq1qWEN3qxo6W9VQ6/ee5t0v1dzRqubSaRgd9Rlu/eXffCo0UZr/jzef/1fm2ZCO0vH/ENbP/o25O/PITC2+YbIuAwAAAHACBv73+W82i5fm/xPtnf8f94l0FTKHR+JuiK3DIYzXB7Jq/7AcyI56D+QBAAAAWAxqx+Nrx8Kn89vsFO10Pl3OP3mM+eOB/4l58/ceun9Ds+0tzf8n2zv/v7/+NtuIw3ErvjYcwpJC4AdxK6uBWaMx8OOP1gfy/h+OA3BDrCo/MaFW1Q2xxIYYGE8C+xuV+GGtxFn1gfzJqjW+r9aP6bxEIQAAAACnXNwdEI/Lx/P/3/ObNVc1K1ea/284tvP/Z+fBpdP7ZwZCWNUdQlf6w4BH+rOFAWNgsCNPPNCf1dWVVnVtfwjnVTuWVvV8vv5/d7rG4BN9WVUxcNZ7Drx6TjXxzb4QVhUDT37m9g9WE7uSQK3xv+wL4V3V3qaNf2dJ1nhP2vjXl4TwzkKgVtUlS0KoNtabVvVQJb+OQVrVP1dCeEshUKvqQ5UQdgcAFqn4X+nm4oM7d1+9dePMzNSOBUzEffh9Ycv0zNTYpm0zmysNtmlzss11yxhdW+5Tu1e+eSZfoujTd68fbCdd+53geLGtfD9+6cTB/H78LtQz2881PXV316Zdft97y02EwjepRl3uXOAu9xcrmXsSS/XH/L1hICy5cufUjrEvbty1a8fq7G+72ddkf+NhpmysVqdj1T/ftrXx8mi4WlbieMdqebGSVbsu375q5+6rV05fvvHSqUunrlj9oTXj546vHf/wuauqvRrP/rbo6vL5qk66evT2Nvt1Ert6dnehklPxqSEhIbHYEtsGljf9P7k0/9/efP4fP3XiJ3++PkOj4/8j8TB/9vjcYf4NMbC/3eP/I42O5tdODBhNAntiYI/D/AAAALw5xEl+3JsZ90r/dMV3XmxWrjT/39Pe7/9P0vr/taXrL2y0zP+KWGK80fr/6TL/tfX/9zRa/z9d5r+2/v/+N2D9/ytrgWRIfmH9fwAA4M3g1K3/33J5//QCAaUMLZf3Ty8QUMrQchn/di8QcMzr/z/7n3/136GJ0vz/5vbm/xbuBwAAgNPHl//sqt9pFi/N//e3N/8/9ev/hUbn/482Ckw2WhjQ+n8AAAAsUo3W/xu5vv9zzcqV5v8H25v/x9MuOutyx1pfH8rWtAvpmnavDNV+MgAAAACLQ2cYG+tpM2/dyqjrjr/Np/KlQJuli57/kyPHdv7/ofbm/3W/y7jpsWV3dq34xKOv37Ny2YsHPrDvpbnj/wAAAMDCaXe/BAAAAAAAAAAAAAAA8MZ7/j/2rm0WL/3+P6yffbzR7//jdf/i7wveWpc71tp6/b/8/kUfv2v37JKFjwyF8N5iYOverWeE/Nr8y4uBBz+74m3VxN60xP3Pnf9CNfG5NPCxlWe+Vk2clwQ2xEUS354G4lUVX1uaBOLyiv+eBuJ4HEwDvXngq0uzfnSkY/XTwWysOtKxenowhOFCoDZW9w5mbXSkHbwlCdQ6+IU0EDv453mgM92quwayrYqBwVj0toFsqwAAOG3Fb4E9Ycv0zNR4/Aofb8/urr+N6pYsu7ZcbUebzT+TL0326bvXD7aT7kq/i85da7wnVKpdWF36ulrM0jHby5NTS4uhe2uDLrda7a2zQbnUsQ5db+Me9WU9Gtu0bWZzT8uOr22dZU13yyyrS5OdYpbO2SFto5Y2tqWNHrU5Nm1scrzfGcbGupJcfxCDI6FOq1dEu7/XL67z1+hVUMxzxZF9v2pWX2n+P9Le/L9S7Ndr+cUA9sQr6/3dsGX+AQAAYGF9dd2vvxH/fer6h59slrc0/x9tb/4f92Dlh4KzvR2H4vX/9w2HMHtp/ZEscEds7pLhEN49m5qMJbIL6l8YS4xngTviDpMVscSGyfqqlsTAwSTwk6E8cCgJHI6BfC/FgZDvyvn7oRA+OJtaX19ieywxkgQ+GQOjSWAsBsaTwNIYmEgCLy/NA5NJ4N9iIEzXj9XdS/OxAgAAOBb5PKun/m5I53kHu1tl6GiVob9Vhs5WGSpNM/SEg416Ee9/O2bo6SiPQnyoJ222L6mllCFeDL/hhrcc3drh/x/W50wLlpqO5x/UzjfoqM9w30e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qdy8r8VTx0dj4McfrQ/kOwYOx8nuDbWqJvMS+aT9hlhiIgZGk8D2GJhIAhvW54H9b6sP5DPtWuP7ao1P5yUKAQAAADjl4g6CuJsmzv9v2/mVgWblSvP/ifbm/7G9gWJj18VajywN4d6Oua2pBVYOZoG4H2Mw/jz+HYMhnFHYwVErMdWflehNGg7f78t+od6bVvW9vuzHB/H+RU889OCN1cQtfSEsK+x9qbXxbCVroy8NnNObBfrTwLbuLBD3/NQC3+3MAnDCansF4wsqP9WlZmT+cg1ef2+Wa4Km3SvtA50n33y/uVoopR2u+T7VmmN72pruv+WkKb09Dnm3LcZ324h3W/GLVP4N5ehcqBI6N09t2XjlzK74SPGXrCUL9DwXf6XaTvokvA73HP/WtlZJN2A8+fgYn7/c/K/DjljdTY8tu7NrxScevWflshcPfGDfS21vRgPxh8IPXfOvgz8qDO9Cq4T8NbfoPk8mfZ4siv8Gknf3qKcthLD+5a/f0Cxemv9Ptjf/705uZ/06DubO4RDeVxjcR+Lw//Fw9jlYCGSfkm8pB7JD7v811PCTEwAAAE622u6O2v6C6fw2OyE8nSeX80+GcHT4GPLH/RUT8+Zvd7v7//qzy5rFS/P/Dc3n/0uSzXT83/F/Fojj//M63XdFL0kf2HNCu6JL1bEgHP+f1+n+bnP8f16O/zv+Px/H/1tw/H9ep/vTVvqWtN2XrhDCi3/0wNPN4qX5//b25v/W/5t/0b7a+n8bGq3/t73R+n97rP8HAAAsqAYLzaXzvNLqfaUM6ep9pQwtFwhsucRg8/X/mqyz96ZZ/680qK3W/3vh7Gd/E5oozf/3tDf/jy+HgWLri2X9v9H1Daq6OQa2WxgQAACA01GjfRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8se77h//Z3Cz+8G8vePq5iycu27vu4pevueDMx0OYnn28Iwt39F9/68TP7zz/rr33rbntniMXvr+Sl+vJb3+3Lnes9fWhEPYXHhmMiVeGqnfmAhd9/K7d3dXEI0MhvLcY2Lp36xnVxLeGQlheDDz42RVvqyb2piXuf+78F6qJz6WBj60887Vq4rw80JFu7j8uzTa3I93cG5eGMFwI1Db3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4bwQQnda1XO9WVXdac8f782qioGz3nPg1XOqif29IawqBp78zO0frCa+kARqjf9Fbwjvqr5k0sa/3ZM13pM2fktPCO8MIfSmJX7ZnZXoTUs83x3CWwqBWuOf7w5hd+BNIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kmxTIx2F9NFrj7/vz7z6pU3V20/fvX6wnXR3Xq5ndpPX9NTdXXu6b33crv5iJXPPR6n+mL83DIQlV+6c2jH2xY27du1Ynf1tN/ua7G9XHs3GavViGavlxUpW7bp8+6qdu69eOX35xkunLp26YvWH1oyfO752/MPnrqr2ajz7ezK6evup7+rZ3YVKTsUHgISExGJLdNZ9uo2f7h/kpS/6cxvaEyqzH9ClaUUxS8dsL09Gp9cdZ4+P53tKyx6tLk0cSlnWzJPl2vosa0uTibla+rIss9/rSpPDYmOds0Ma73eGsbGuRuMwUn+3OLw/O4HhfSofunbTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6zB6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//56HJTY=") 4m45.484630848s ago: executing program 1 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) 4m42.77376378s ago: executing program 33 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) 5.004754057s ago: executing program 3 (id=2829): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a000100040000000000000002000000000000ba"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.889202744s ago: executing program 0 (id=2830): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendmsg$rds(r0, &(0x7f0000001880)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4004000}, 0x800) 4.842132639s ago: executing program 5 (id=2831): openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0xd34b, 0x114}, 0x10, 0x4}) 4.755864288s ago: executing program 4 (id=2832): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='wchan\x00') socket$inet6_sctp(0xa, 0x0, 0x84) lseek(r0, 0x1fff9, 0x0) 4.632918337s ago: executing program 6 (id=2833): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da9388a6dc628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x8004) 4.154022823s ago: executing program 3 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.099421654s ago: executing program 0 (id=2835): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 3.867489401s ago: executing program 5 (id=2836): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x5, 0xfffff034}, {0xc, 0x0, 0x0, 0xfffff010}, {0x6, 0x43, 0xff}]}, 0x10) syz_emit_ethernet(0x3588, &(0x7f0000003b80)=ANY=[@ANYBLOB="f793a202787a0180c200000181000a008847"], 0x0) 3.758233676s ago: executing program 6 (id=2837): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) 3.260589377s ago: executing program 3 (id=2838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000012000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 3.174411236s ago: executing program 6 (id=2839): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1ffc, 0x0) 3.072173098s ago: executing program 4 (id=2840): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000080), 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x24044055}, 0x40408c0) 2.984342054s ago: executing program 5 (id=2841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x19d5}}}, 0x84) 2.911602569s ago: executing program 0 (id=2842): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000100)) 2.519509893s ago: executing program 6 (id=2843): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010001", 0x7) 2.423458362s ago: executing program 3 (id=2844): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x808001, 0xfffffffc}) 2.29734875s ago: executing program 4 (id=2845): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 2.090507813s ago: executing program 0 (id=2846): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000080), 0x4, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.934297822s ago: executing program 5 (id=2847): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x42268597) 1.781350919s ago: executing program 6 (id=2848): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) 1.625549387s ago: executing program 3 (id=2849): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) unshare(0xc000400) ppoll(&(0x7f0000000100)=[{r0, 0x3a1}], 0x1, 0x0, 0x0, 0x0) 1.331050357s ago: executing program 4 (id=2850): r0 = socket(0xa, 0x3, 0xff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x25, 0x4, 0xcd5}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0) 1.121983563s ago: executing program 0 (id=2851): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 1.008925262s ago: executing program 6 (id=2852): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0e4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 989.01218ms ago: executing program 5 (id=2853): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab647b4d859e550e6b4d1409617ecace12bad02576e600000000000000ff00000000c7bd08d6c14c45c437a05f7ba3559ff28fe0a4a990ac1fc3b56ad2022cdfff5b379818a5c9df412af0105d717516fd3cee99012a830ed7c0cb273292f55c027cdc59ddac3f7b72bf2ace72a1e1f7889d7de5a7d8bb", 0x2c3e5d42134e5ee0) 701.914925ms ago: executing program 3 (id=2854): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000200)={0x40, 0x14}, 0x0, 0x0}) 633.73707ms ago: executing program 4 (id=2855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0xd668163053759017, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}}, 0x24000840) 315.993905ms ago: executing program 5 (id=2856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 278.050035ms ago: executing program 0 (id=2857): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 0s ago: executing program 4 (id=2858): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000003c0)={[{@gid}, {@gid}, {@part={'part', 0x3d, 0x4}}, {@nodecompose}, {@force}, {@gid}, {@gid}, {@nls={'nls', 0x3d, 'cp1255'}}]}, 0x44, 0x712, &(0x7f0000000d00)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIRGqCvlQQSQuvS6J01heu8F2kRMh4gCFI5xQDj0UIXPoCfWAVMQBUc5ISFxR7pF6tziwaH52veuf3XX9l6TPI83ONzPfzzuvZz6vZxNtAJ9bs2/F6HokMXvhzbV0++FGvflwo77YLkfEWESUIsr5KpKliOSTiKuRL/GFdGfRXbLXOK89+vj98w8+rOdb5WLJ6pf6tdvS6jPCerHEZESMFOsY31cmynv1dz1ez/vrcm9fXSeduNOEnWsnDk5aa4f1/TQf4r4FHnf3IkZGd9lfizhV/CpN3wdEMTuUjjm8Q5ZstlonHQMAAAAc2MigCs9uxmasxcTxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPhyT/zsCkWErt8mQk7e//rxT7UpXKCcfb39cGHH/v5jEFAgAAAAAAAABH4qPig/uzm7EZazHR3t9Kss/8X8k2Tmevz8S7sRJzsRwXYy0asRqrsRzTEaMTXR1W1hqrq8vTO1v+LtKWrVbrXtFyJiJqO1rO7BFo6ZBPHAAAAAAAAACeTj+P2Zg46SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBbEjGSr7LldLtci1I5IsYjopLWW4/4a7v8JPvbSQcAAAAAR69arCeS/+WFVpL9zf9i9nf/eLwbS7Ea87EazZiLG9mzgPyv/tK/1uvNhxv1xXTZ2fF3P91XHFmPETES9/cYeSqrcabTYja+Fz+MCzEZ12I55uMn0YjVmIvJqKYnEY1IolbNn17U2nHuHu/Vnq1rnVIrP9uz22J9OYukGjdjPovtYlyvRP7YJDuHdMyXu0b7cyVi24j30+wk3ykMmaMbXT+v3xbPZdqRPjtkH0ejlp35aCcjU2nui2w81z/3fa+THw8caTpKnWdQp7dGSTe3j9TO+Y/2k/NT+Wo8fflVb84PW59HaaO77NueiZkoFVdfxIu9Ob/95QfP9zb+6r//fu1WaWnh1s2VC0d4SgcxOahCJynbM1HvysRL/a++IhPNNBPrw2dix89jfNiWR6tSZCObioacLd/ISo14pesSfCduxFxcjqmYjisxFd+Kmah3rrB0OdOT13J9sTcn2b1W2jm/VfsEf+4rXZV+PaDy8Urz8lxXXrtnulp2rNhz9Tcx1XX1Pd//6rv/6Rs/yEtDzkjp+F8syukYv+j8xnkc9GSimJvb0b3QPxO/b6WvK82lheVbjdtDjne+WKe37Xu9c/Mfho96+2/3g2hHkF4v6YxbzraynFTb10t67IVO3d58VYpPXPJ2pR3HznSO1WIi5uP7e96pleI93M6e8mMvdR/7z9bMWSne37SP9bzLiXeimb0L2WbgVA3AMTv16qlK9VH1n9UPqr+s3qq+Of762JWxL1Vi9B/lv4z8qfTH0reTV+OD+FlMnHSkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNFi5c3eh0WzOLXcKMb59z0ELlT3H6l+I0sA6G88M12HUIvqPlRSFyuGe+5NYqMa2Pe3vNzpozx9FRJ86lQMHn+z7Gtt3Ic3DoXTYauVJzfa0RvbRvNxutXudcqyMx0IjKe9yx41t3QVRW2g0/9vqaV6NrlsGeMpdWl28fWnlzt2vzy823p57e25p5srlK5fr35z+xqWb8825qfz1pKMEjsLKnbsju+ze7ZuHAQAAAAAAAAAAgMdE8a//Vz/zf2YoD6hTWV7ZfeSzx32qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBNq9q0YXY8kpqcuTqXbDzfqzXRpl4tqpa1V8tOI5JOIq5EvUevqLtlrnNceffz++Qcf1vOtcrFk9Uv92g1nvVhiMiJGivVgY7t0s7O/6139rX+m8JLOGaYJO9dOHJy0/wcAAP//tIn6iw==") mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) kernel console output (not intermixed with test programs): m1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.065500][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 553.184584][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.446422][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.626662][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.286197][ T59] bridge_slave_1: left allmulticast mode [ 554.292530][ T59] bridge_slave_1: left promiscuous mode [ 554.299325][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.362598][ T59] bridge_slave_0: left allmulticast mode [ 554.369026][ T59] bridge_slave_0: left promiscuous mode [ 554.375696][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.352088][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.377410][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.416149][ T59] bond0 (unregistering): Released all slaves [ 555.881889][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 556.371282][ T59] hsr_slave_0: left promiscuous mode [ 556.408630][ T59] hsr_slave_1: left promiscuous mode [ 556.416738][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.425182][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.557824][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.570114][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.739389][ T59] veth1_macvtap: left promiscuous mode [ 556.745222][ T59] veth0_macvtap: left promiscuous mode [ 556.797858][ T59] veth1_vlan: left promiscuous mode [ 556.844828][ T59] veth0_vlan: left promiscuous mode [ 557.220585][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.251956][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.261926][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.284137][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.309963][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.641664][ T9855] loop3: detected capacity change from 0 to 4096 [ 558.693442][ T9855] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 559.221822][ T9855] ntfs3(loop3): ino=18, mi_enum_attr [ 559.227395][ T9855] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 559.410937][ T5797] Bluetooth: hci3: command tx timeout [ 559.864343][ T59] team0 (unregistering): Port device team_slave_1 removed [ 559.966221][ T59] team0 (unregistering): Port device team_slave_0 removed [ 561.491417][ T5797] Bluetooth: hci3: command tx timeout [ 562.331258][ T5954] IPVS: starting estimator thread 0... [ 562.420222][ T9894] IPVS: using max 192 ests per chain, 9600 per kthread [ 562.538629][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 562.738812][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 562.802159][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.812441][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 562.828739][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 562.838041][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.006793][ T9] usb 1-1: config 0 descriptor?? [ 563.086921][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 563.586859][ T5797] Bluetooth: hci3: command tx timeout [ 563.738483][ T9] sony 0003:054C:1000.000C: hidraw0: USB HID v2.00 Device [HID 054c:1000] on usb-dummy_hcd.0-1/input0 [ 563.752566][ T9] sony 0003:054C:1000.000C: failed to claim input [ 563.906704][ T9] usb 1-1: USB disconnect, device number 11 [ 564.050606][ T9910] loop3: detected capacity change from 0 to 1024 [ 564.694581][ T1134] hfsplus: b-tree write err: -5, ino 4 [ 564.740072][ T9911] fido_id[9911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 565.517353][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.525273][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.595735][ T9844] bridge_slave_0: entered allmulticast mode [ 565.622423][ T9844] bridge_slave_0: entered promiscuous mode [ 565.649942][ T5797] Bluetooth: hci3: command tx timeout [ 565.687306][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.695189][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.729886][ T9844] bridge_slave_1: entered allmulticast mode [ 565.760810][ T9844] bridge_slave_1: entered promiscuous mode [ 566.191280][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.273219][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.555819][ T9927] loop3: detected capacity change from 0 to 8192 [ 566.646021][ T9927] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 566.727996][ T9844] team0: Port device team_slave_0 added [ 566.795115][ T9844] team0: Port device team_slave_1 added [ 567.206570][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.214816][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.245916][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.452887][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.463060][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.495709][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.464595][ T9844] hsr_slave_0: entered promiscuous mode [ 568.545125][ T9844] hsr_slave_1: entered promiscuous mode [ 568.571613][ T9844] debugfs: 'hsr0' already exists in 'hsr' [ 568.577685][ T9844] Cannot create hsr debugfs directory [ 568.603174][ T9951] loop3: detected capacity change from 0 to 4096 [ 569.336606][ T9951] ntfs3(loop3): failed to convert "0080" to cp850 [ 570.035994][ T9970] loop4: detected capacity change from 0 to 512 [ 570.154322][ T9970] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 570.177758][ T9971] loop3: detected capacity change from 0 to 512 [ 570.232235][ T9971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 570.330541][ T9971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 570.404929][ T9971] EXT4-fs (loop3): 1 truncate cleaned up [ 570.446220][ T9971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.254671][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.484932][ T30] audit: type=1326 audit(1770636836.852:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.622906][ T9844] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 571.632434][ T30] audit: type=1326 audit(1770636836.852:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.656113][ T30] audit: type=1326 audit(1770636836.882:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.679306][ T30] audit: type=1326 audit(1770636836.882:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.704864][ T30] audit: type=1326 audit(1770636836.892:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.728911][ T30] audit: type=1326 audit(1770636836.892:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.751773][ T30] audit: type=1326 audit(1770636836.892:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.776027][ T30] audit: type=1326 audit(1770636836.992:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.801818][ T30] audit: type=1326 audit(1770636836.992:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.825509][ T30] audit: type=1326 audit(1770636837.012:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 571.967707][ T9844] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 572.202801][ T9844] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 572.374087][ T9844] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 573.634906][T10007] loop4: detected capacity change from 0 to 128 [ 574.315924][ T9844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.698323][ T9844] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.790197][T10021] trusted_key: encrypted_key: key trusted:syz not found [ 574.815040][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.830009][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.865376][ T5797] Bluetooth: hci5: command 0x0406 tx timeout [ 575.123321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.131150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.816488][T10030] loop3: detected capacity change from 0 to 8 [ 576.063471][T10030] SQUASHFS error: zlib decompression failed, data probably corrupt [ 576.072122][T10030] SQUASHFS error: Failed to read block 0x4de: -5 [ 576.126633][T10030] SQUASHFS error: zlib decompression failed, data probably corrupt [ 576.135267][T10030] SQUASHFS error: Failed to read block 0x4df: -5 [ 576.239818][T10030] SQUASHFS error: zlib decompression failed, data probably corrupt [ 576.251044][T10030] SQUASHFS error: Failed to read block 0x4e0: -5 [ 576.476588][T10030] SQUASHFS error: zlib decompression failed, data probably corrupt [ 576.485553][T10030] SQUASHFS error: Failed to read block 0x4de: -5 [ 576.588855][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 576.588941][ T30] audit: type=1800 audit(1770636841.942:92): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1729" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 579.402258][T10060] loop4: detected capacity change from 0 to 32768 [ 579.474828][T10060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1739 (10060) [ 579.573842][T10060] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 579.584609][T10060] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 579.598053][T10060] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 579.623147][T10060] workqueue: max_active 8195 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 579.639440][T10060] workqueue: max_active 8195 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 579.702299][T10060] workqueue: max_active 8195 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 579.718001][T10060] workqueue: max_active 8195 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 579.744306][T10060] workqueue: max_active 8195 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 579.777888][T10060] workqueue: max_active 8195 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 579.814186][ T5838] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 579.830767][ T35] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xab06a7dc80447b3c6130d7282cda4e35b2274aa4c9843b430310751eca95a5c4 level 0 [ 579.855621][T10060] BTRFS error (device loop4): failed to read chunk root [ 579.908462][ T9844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.953682][T10060] BTRFS error (device loop4): open_ctree failed: -5 [ 580.075763][ T5838] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 580.134785][ T5838] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 580.148393][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.326675][ T5838] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 580.870619][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 581.432070][ T5838] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 581.441116][ T5838] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 581.505685][ T5838] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 581.517423][ T5838] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 581.607387][ T5838] usb 1-1: USB disconnect, device number 12 [ 581.735719][T10105] libceph: resolve '. [ 581.735719][T10105] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 581.735719][T10105] ' (ret=-3): failed [ 582.007232][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1749'. [ 582.084716][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1749'. [ 582.614601][T10114] loop5: detected capacity change from 0 to 1764 [ 583.207554][T10121] loop0: detected capacity change from 0 to 1024 [ 583.966404][T10130] loop5: detected capacity change from 0 to 1024 [ 584.266810][ T9844] veth0_vlan: entered promiscuous mode [ 584.519316][ T9844] veth1_vlan: entered promiscuous mode [ 585.163716][ T9844] veth0_macvtap: entered promiscuous mode [ 585.266843][ T9844] veth1_macvtap: entered promiscuous mode [ 585.667569][T10139] loop4: detected capacity change from 0 to 512 [ 585.733274][T10139] EXT4-fs: Ignoring removed bh option [ 585.814180][ T9844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.935793][T10139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 585.945442][T10139] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 586.057398][T10139] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 586.115972][T10139] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 586.129527][ T9844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.229114][T10139] System zones: 0-2, 18-18, 34-35 [ 586.283001][T10139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.324943][ T1016] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.523862][T10069] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.540634][T10069] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.551321][T10069] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.011601][T10147] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 587.307580][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.252254][T10195] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1774'. [ 590.818901][ T30] audit: type=1326 audit(1770636856.182:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2132f9af79 code=0x7ffc0000 [ 590.948779][ T30] audit: type=1326 audit(1770636856.272:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2132f9af79 code=0x7ffc0000 [ 590.972188][ T30] audit: type=1326 audit(1770636856.302:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2132f9af79 code=0x7ffc0000 [ 590.997199][ T30] audit: type=1326 audit(1770636856.302:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2132f9af79 code=0x7ffc0000 [ 591.020243][ T30] audit: type=1326 audit(1770636856.302:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f2132f9af79 code=0x7ffc0000 [ 591.045749][ T30] audit: type=1326 audit(1770636856.302:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2132f9af79 code=0x7ffc0000 [ 591.059722][T10203] batadv_slave_0: entered promiscuous mode [ 591.077174][T10203] batadv_slave_0: entered allmulticast mode [ 592.251030][T10207] loop4: detected capacity change from 0 to 40427 [ 592.272696][T10207] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 592.280785][T10207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 592.540982][T10207] F2FS-fs (loop4): build fault injection rate: 4 [ 592.547898][T10207] F2FS-fs (loop4): build fault injection type: 0x1c25c2 [ 592.600291][T10207] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x298/0x13e0 [ 592.657889][T10207] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x7bcd/0xa880 [ 592.668533][T10207] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 593.706581][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 593.972396][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.989676][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.117607][ T10] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 594.127532][ T10] usb 6-1: New USB device strings: Mfr=0, Product=117, SerialNumber=0 [ 594.139388][ T10] usb 6-1: Product: syz [ 594.211367][ T10] usb 6-1: config 0 descriptor?? [ 594.765282][ T10] uclogic 0003:5543:0064.000D: unbalanced collection at end of report description [ 594.813586][ T10] uclogic 0003:5543:0064.000D: parse failed [ 594.820436][ T10] uclogic 0003:5543:0064.000D: probe with driver uclogic failed with error -22 [ 595.021753][ T10] usb 6-1: USB disconnect, device number 3 [ 596.081695][T10247] loop0: detected capacity change from 0 to 2048 [ 596.224528][T10247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.333812][T10069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.343064][T10069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.397876][T10247] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.643480][T10255] loop5: detected capacity change from 0 to 512 [ 596.714427][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.730344][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.005233][T10255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 597.131538][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.817669][T10257] loop3: detected capacity change from 0 to 32768 [ 597.847816][T10257] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 597.856639][T10257] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 597.923036][T10257] gfs2: fsid=syz:syz.s: journal 0 mapped with 9 extents in 0ms [ 597.970149][T10257] syz.3.1796: attempt to access beyond end of device [ 597.970149][T10257] loop3: rw=0, sector=274877909088, nr_sectors = 8 limit=32768 [ 598.180887][ T8687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.397726][T10257] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount. [ 600.203962][T10286] loop5: detected capacity change from 0 to 164 [ 600.340993][T10286] rock: directory entry would overflow storage [ 600.347416][T10286] rock: sig=0x66, size=4, remaining=3 [ 600.528912][T10286] rock: directory entry would overflow storage [ 600.538307][T10286] rock: sig=0x66, size=4, remaining=3 [ 601.363074][T10299] loop4: detected capacity change from 0 to 256 [ 601.710215][T10299] FAT-fs (loop4): Directory bread(block 64) failed [ 601.763501][T10299] FAT-fs (loop4): Directory bread(block 65) failed [ 601.818617][T10299] FAT-fs (loop4): Directory bread(block 66) failed [ 601.825428][T10299] FAT-fs (loop4): Directory bread(block 67) failed [ 601.883413][T10299] FAT-fs (loop4): Directory bread(block 68) failed [ 601.953955][T10299] FAT-fs (loop4): Directory bread(block 69) failed [ 601.965209][T10299] FAT-fs (loop4): Directory bread(block 70) failed [ 602.026265][T10299] FAT-fs (loop4): Directory bread(block 71) failed [ 602.080508][T10299] FAT-fs (loop4): Directory bread(block 72) failed [ 602.152971][T10299] FAT-fs (loop4): Directory bread(block 73) failed [ 602.550232][T10299] syz.4.1809: attempt to access beyond end of device [ 602.550232][T10299] loop4: rw=8390659, sector=1224, nr_sectors = 544 limit=256 [ 602.874574][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 603.571689][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.578687][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.878735][ T5954] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 604.099131][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 604.157350][ T5954] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 604.166998][ T5954] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 604.176997][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 604.186480][ T5954] usb 4-1: config 1 has no interface number 0 [ 604.348470][ T5954] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.362390][ T5954] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 604.377109][ T5954] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 604.386546][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.643853][ T5954] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 604.721564][T10345] loop5: detected capacity change from 0 to 64 [ 604.741980][ T795] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 604.869560][ T5954] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 604.948974][ T795] usb 1-1: Using ep0 maxpacket: 16 [ 605.031204][ T795] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.043051][ T795] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.052772][ T795] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 605.062539][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.324066][ T795] usb 1-1: config 0 descriptor?? [ 605.366126][T10150] usb 4-1: USB disconnect, device number 5 [ 605.417237][T10150] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 605.916348][ T795] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 606.114034][ T795] usb 1-1: USB disconnect, device number 13 [ 606.880472][T10355] fido_id[10355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 609.555658][T10391] loop5: detected capacity change from 0 to 40427 [ 609.567208][T10391] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 609.578502][T10391] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 609.645847][T10391] F2FS-fs (loop5): invalid crc value [ 609.705993][T10391] F2FS-fs (loop5): Wrong journal entry on segno 262144 [ 609.719813][T10391] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 610.750716][T10409] loop4: detected capacity change from 0 to 512 [ 610.853877][T10413] loop3: detected capacity change from 0 to 512 [ 610.908530][T10413] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 610.993951][T10413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 611.099327][T10413] System zones: 1-12 [ 611.200016][T10413] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1852: corrupted in-inode xattr: e_value size too large [ 611.326659][T10413] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1852: couldn't read orphan inode 15 (err -117) [ 611.411730][T10413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.987339][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.930470][T10447] loop5: detected capacity change from 0 to 64 [ 613.596565][ T8687] hfs: node 4:3 still has 1 user(s)! [ 614.256291][T10463] loop5: detected capacity change from 0 to 2048 [ 614.487168][T10463] NILFS (loop5): ifile inode (checkpoint number=2) corrupted [ 614.529211][T10463] NILFS (loop5): error -5 while loading last checkpoint (checkpoint number=2) [ 615.184910][ T30] audit: type=1400 audit(1770636880.532:99): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F261417FAABCD pid=10462 comm="syz.5.1868" [ 615.688010][T10473] loop3: detected capacity change from 0 to 40427 [ 615.773787][T10473] F2FS-fs (loop3): invalid crc value [ 615.859844][T10473] F2FS-fs (loop3): Wrong journal entry on segno 1282 [ 615.867181][T10473] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 617.421354][ T795] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 617.513770][T10505] loop0: detected capacity change from 0 to 256 [ 617.672647][ T795] usb 6-1: Using ep0 maxpacket: 16 [ 617.731559][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.742934][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.753602][ T795] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 617.765736][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.803446][T10505] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 617.954098][ T795] usb 6-1: config 0 descriptor?? [ 617.993153][T10505] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 618.495353][ T795] hid (null): nested delimiters [ 618.553644][ T795] wacom 0003:056A:0084.000F: unknown main item tag 0x2 [ 618.561472][ T795] wacom 0003:056A:0084.000F: nested delimiters [ 618.567931][ T795] wacom 0003:056A:0084.000F: item 0 4 2 10 parsing failed [ 618.728616][ T795] wacom 0003:056A:0084.000F: parse failed [ 618.735296][ T795] wacom 0003:056A:0084.000F: probe with driver wacom failed with error -22 [ 618.874593][ T795] usb 6-1: USB disconnect, device number 4 [ 619.312452][T10523] mkiss: ax0: crc mode is auto. [ 620.285872][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'. [ 621.022422][T10537] loop0: detected capacity change from 0 to 1024 [ 621.506367][T10545] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1897'. [ 622.088776][ T1016] hfsplus: b-tree write err: -5, ino 4 [ 625.793015][T10581] loop5: detected capacity change from 0 to 128 [ 625.961156][T10581] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 626.002639][T10581] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 626.084908][T10585] loop4: detected capacity change from 0 to 16 [ 626.114679][T10585] erofs (device loop4): mounted with root inode @ nid 36. [ 626.340483][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'. [ 626.616626][ T8687] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 627.168825][ T5954] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 627.341861][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 627.371464][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.371650][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.371794][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 627.372023][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 627.372171][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.403358][ T5954] usb 5-1: config 0 descriptor?? [ 627.921488][ T5954] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 627.921690][ T5954] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 627.921863][ T5954] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 627.922046][ T5954] logitech 0003:046D:C293.0010: unknown main item tag 0x0 [ 627.952105][ T5954] logitech 0003:046D:C293.0010: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 627.952311][ T5954] logitech 0003:046D:C293.0010: no inputs found [ 628.117275][ T5954] usb 5-1: USB disconnect, device number 13 [ 628.766540][T10605] fido_id[10605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 629.843701][T10616] loop5: detected capacity change from 0 to 4096 [ 630.047873][T10627] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 630.896689][T10634] loop3: detected capacity change from 0 to 256 [ 631.788715][T10643] vxfs: unable to read disk superblock at 1 [ 631.789049][T10643] vxfs: unable to read disk superblock at 8 [ 631.789150][T10643] vxfs: can't find superblock. [ 632.343808][T10639] loop4: detected capacity change from 0 to 4096 [ 632.402157][T10639] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 632.434918][T10639] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 632.555000][T10650] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 632.657945][T10639] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 632.733239][T10639] Remounting filesystem read-only [ 633.221016][ T5784] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 634.346604][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 635.944435][T10671] loop5: detected capacity change from 0 to 32768 [ 635.955392][T10671] XFS (loop5): Invalid device [./file2], error=-15 [ 637.150066][T10683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1957'. [ 637.159819][T10683] netem: incorrect gi model size [ 637.164944][T10683] netem: change failed [ 637.356060][T10685] loop4: detected capacity change from 0 to 256 [ 638.084607][T10681] loop6: detected capacity change from 0 to 32768 [ 638.095297][T10681] xfs: Deprecated parameter 'noattr2' [ 638.101243][T10681] XFS: noattr2 mount option is deprecated. [ 638.149548][T10685] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 638.217933][T10681] XFS (loop6): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent. [ 638.307620][ T30] audit: type=1800 audit(1770636903.662:100): pid=10685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1958" name="file1" dev="loop4" ino=1048775 res=0 errno=0 [ 638.366719][T10681] XFS (loop6): please mount without quota. [ 638.673977][T10700] loop5: detected capacity change from 0 to 128 [ 638.804703][T10700] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 638.971162][T10700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.451321][T10708] loop4: detected capacity change from 0 to 128 [ 639.462012][T10704] loop3: detected capacity change from 0 to 2048 [ 639.541508][T10708] EXT4-fs: Ignoring removed nobh option [ 639.671907][T10704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.767714][T10708] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 639.833871][ T30] audit: type=1800 audit(1770636905.202:101): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1963" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 639.905405][T10708] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 640.542980][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 640.564394][ T13] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 640.682084][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 162 with error 28 [ 640.695067][ T13] EXT4-fs (loop3): This should not happen!! Data will be lost [ 640.695067][ T13] [ 640.716296][ T13] EXT4-fs (loop3): Total free blocks count 0 [ 640.725130][ T13] EXT4-fs (loop3): Free/Dirty block details [ 640.731418][ T13] EXT4-fs (loop3): free_blocks=2415919104 [ 640.737457][ T13] EXT4-fs (loop3): dirty_blocks=176 [ 640.749019][ T13] EXT4-fs (loop3): Block reservation details [ 640.755412][ T13] EXT4-fs (loop3): i_reserved_data_blocks=11 [ 640.992930][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.943250][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 644.954384][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 644.954578][ T5792] Tainted: [L]=SOFTLOCKUP [ 644.954635][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 644.954771][ T5792] Workqueue: hci2 hci_rx_work [ 644.954934][ T5792] Call Trace: [ 644.954989][ T5792] [ 644.955042][ T5792] __dump_stack+0x26/0x30 [ 644.955213][ T5792] dump_stack_lvl+0x14c/0x1c0 [ 644.955396][ T5792] dump_stack+0x1e/0x25 [ 644.955562][ T5792] sysfs_create_dir_ns+0x46c/0x540 [ 644.955750][ T5792] kobject_add_internal+0x1084/0x19b0 [ 644.955922][ T5792] kobject_add+0x2c1/0x410 [ 644.956150][ T5792] ? kmsan_get_metadata+0xf1/0x160 [ 644.956356][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 644.956588][ T5792] device_add+0xa70/0x1c00 [ 644.956783][ T5792] hci_conn_add_sysfs+0x159/0x2e0 [ 644.956995][ T5792] le_conn_complete_evt+0x1d0a/0x2250 [ 644.957216][ T5792] hci_le_conn_complete_evt+0x157/0x260 [ 644.957415][ T5792] hci_le_meta_evt+0x6eb/0x960 [ 644.957593][ T5792] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 644.957800][ T5792] hci_event_packet+0xce2/0x1e40 [ 644.957946][ T5792] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 644.958164][ T5792] hci_rx_work+0x8c3/0xfc0 [ 644.958320][ T5792] ? kmsan_get_metadata+0xf1/0x160 [ 644.958540][ T5792] ? __pfx_hci_rx_work+0x10/0x10 [ 644.958694][ T5792] process_scheduled_works+0xae7/0x1d60 [ 644.958966][ T5792] worker_thread+0x1741/0x1de0 [ 644.959218][ T5792] kthread+0xd5a/0xf00 [ 644.959360][ T5792] ? __pfx_worker_thread+0x10/0x10 [ 644.959603][ T5792] ? __pfx_kthread+0x10/0x10 [ 644.959757][ T5792] ret_from_fork+0x207/0x6f0 [ 644.959958][ T5792] ? __switch_to+0x521/0x750 [ 644.960132][ T5792] ? __pfx_kthread+0x10/0x10 [ 644.960280][ T5792] ret_from_fork_asm+0x1a/0x30 [ 644.960529][ T5792] [ 645.156092][ T5792] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 645.179014][ T5792] Bluetooth: hci2: failed to register connection device [ 646.947234][T10791] loop6: detected capacity change from 0 to 1024 [ 646.986314][T10791] EXT4-fs: inline encryption not supported [ 647.042196][T10793] loop0: detected capacity change from 0 to 1024 [ 647.101111][T10796] binder: 10794:10796 ioctl c00c620f 200000000100 returned -22 [ 647.230328][T10791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.793744][T10791] EXT4-fs: Ignoring removed orlov option [ 647.857029][T10791] EXT4-fs: can't change dax mount option while remounting [ 648.096934][ T10] hid-generic 0000:0000:0000.0011: item fetching failed at offset 0/1 [ 648.165705][ T10] hid-generic 0000:0000:0000.0011: probe with driver hid-generic failed with error -22 [ 648.389743][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.057690][T10809] bond1: option packets_per_slave: invalid value (1885433203) [ 649.071878][T10809] bond1: option packets_per_slave: allowed values 0 - 65535 [ 649.201204][T10809] bond1 (unregistering): Released all slaves [ 649.510930][ T5954] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 649.738483][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.750772][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.761085][ T5954] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 649.771464][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.948442][ T5844] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 649.985503][ T5954] usb 5-1: config 0 descriptor?? [ 650.109306][ T5844] usb 7-1: Using ep0 maxpacket: 8 [ 650.152628][ T5844] usb 7-1: too many configurations: 23, using maximum allowed: 8 [ 650.517456][ T5844] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 650.527177][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.540807][ T5844] usb 7-1: Product: syz [ 650.545215][ T5844] usb 7-1: Manufacturer: syz [ 650.551412][ T5844] usb 7-1: SerialNumber: syz [ 650.663813][ T5844] usb 7-1: config 0 descriptor?? [ 650.743161][ T10] usb 5-1: USB disconnect, device number 14 [ 651.051064][ T5844] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 651.131623][T10825] loop3: detected capacity change from 0 to 4096 [ 651.482535][ T5844] usb write operation failed. (-71) [ 651.561663][ T5844] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 651.635762][ T5844] dvbdev: DVB: registering new adapter (Terratec H7) [ 651.687920][ T5844] usb 7-1: media controller created [ 651.696007][ T5844] usb read operation failed. (-71) [ 651.727293][ T5844] usb write operation failed. (-71) [ 651.831665][ T5844] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 651.975637][ T5844] usb 7-1: USB disconnect, device number 2 [ 652.956131][T10842] loop0: detected capacity change from 0 to 1024 [ 653.697383][ T59] hfsplus: b-tree write err: -5, ino 4 [ 654.094110][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2031'. [ 654.187351][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 655.106274][T10871] loop3: detected capacity change from 0 to 128 [ 655.261355][T10871] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 655.286342][T10871] ext4 filesystem being mounted at /441/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 655.670895][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 655.773390][ T5954] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 656.018710][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.030440][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.041277][ T5954] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 656.053382][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.260144][ T5954] usb 6-1: config 0 descriptor?? [ 656.630587][T10881] loop6: detected capacity change from 0 to 4096 [ 656.741865][T10881] ntfs3(loop6): ino=0, mi_enum_attr [ 656.880536][ T5954] ryos 0003:1E7D:3138.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 656.949064][T10881] ntfs3(loop6): ino=0, mi_enum_attr [ 656.954762][T10881] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 657.065816][ T5954] usb 6-1: USB disconnect, device number 5 [ 658.300912][T10892] fido_id[10892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 659.164174][ T795] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 659.348806][ T795] usb 5-1: Using ep0 maxpacket: 8 [ 659.390794][ T795] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.410094][ T795] usb 5-1: config 0 interface 0 has no altsetting 0 [ 659.417252][ T795] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 659.426950][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.586148][ T795] usb 5-1: config 0 descriptor?? [ 660.054544][T10917] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2059'. [ 660.104067][ T795] smartjoyplus 0003:6666:8804.0014: invalid report_size 291922013 [ 660.112688][ T795] smartjoyplus 0003:6666:8804.0014: item 0 4 1 7 parsing failed [ 660.234082][ T795] smartjoyplus 0003:6666:8804.0014: parse failed [ 660.247176][ T795] smartjoyplus 0003:6666:8804.0014: probe with driver smartjoyplus failed with error -22 [ 660.312160][T10921] loop0: detected capacity change from 0 to 512 [ 660.406740][T10921] ext4: Bad value for 'resgid' [ 660.412048][T10921] ext4: Bad value for 'resgid' [ 660.439145][ T795] usb 5-1: USB disconnect, device number 15 [ 661.379527][T10927] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 662.466089][T10943] loop4: detected capacity change from 0 to 764 [ 662.665375][T10943] rock: directory entry would overflow storage [ 662.672149][T10943] rock: sig=0x4f50, size=4, remaining=3 [ 662.678358][T10943] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 664.417341][ T5797] Bluetooth: hci3: link tx timeout [ 664.423037][ T5797] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 664.590410][T10961] loop6: detected capacity change from 0 to 4096 [ 664.926060][T10972] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.975782][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.982916][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.748448][ T5954] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 665.985855][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.998746][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.049172][ T5954] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 666.059031][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.125052][ T5954] usb 1-1: config 0 descriptor?? [ 666.177115][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 666.238413][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 666.244789][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2091'. [ 666.342888][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 666.432875][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 666.457633][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 666.468782][T10981] dvb-usb: bulk message failed: -22 (2/0) [ 666.474884][T10981] dvb-usb: bulk message failed: -22 (4/0) [ 666.510815][ T5954] usb 1-1: media controller created [ 666.569649][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.688350][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 666.694976][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 666.822906][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 666.891920][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 666.899406][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 666.915253][ T5954] usb 1-1: USB disconnect, device number 14 [ 667.052773][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 668.874065][T11020] loop5: detected capacity change from 0 to 512 [ 669.081038][T11020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.182776][T11020] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.485804][T11030] loop6: detected capacity change from 0 to 512 [ 669.636447][T11030] EXT4-fs: Ignoring removed oldalloc option [ 669.756689][T11030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.946978][ T30] audit: type=1800 audit(1770636935.312:102): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2111" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 669.980648][ T8687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.731539][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.191468][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 671.379017][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 671.409061][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 671.421020][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.438943][ T10] usb 4-1: config 0 has no interface number 0 [ 671.496776][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 671.506552][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.517611][ T10] usb 4-1: Product: syz [ 671.525460][ T10] usb 4-1: Manufacturer: syz [ 671.535435][ T10] usb 4-1: SerialNumber: syz [ 671.614891][T11050] loop5: detected capacity change from 0 to 256 [ 671.663089][ T10] usb 4-1: config 0 descriptor?? [ 671.781969][ T10] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 671.982749][ T10] usb 4-1: USB disconnect, device number 6 [ 672.400258][T11053] loop0: detected capacity change from 0 to 1024 [ 672.733773][T11053] hfsplus: bad catalog entry type [ 673.299828][ T35] hfsplus: b-tree write err: -5, ino 4 [ 674.137692][T11070] loop6: detected capacity change from 0 to 2048 [ 674.261851][T11070] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 674.434647][T11076] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 674.815886][T11080] GUP no longer grows the stack in syz.4.2134 (11080): 200000005000-200000008000 (200000004000) [ 674.827648][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.4.2134 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 674.827842][T11080] Tainted: [L]=SOFTLOCKUP [ 674.827898][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 674.827991][T11080] Call Trace: [ 674.828044][T11080] [ 674.828106][T11080] __dump_stack+0x26/0x30 [ 674.828291][T11080] dump_stack_lvl+0x14c/0x1c0 [ 674.828476][T11080] dump_stack+0x1e/0x25 [ 674.828639][T11080] fixup_user_fault+0xcc0/0xde0 [ 674.828856][T11080] fault_in_user_writeable+0x99/0x1a0 [ 674.829079][T11080] futex_lock_pi+0x5a8/0x1530 [ 674.829247][T11080] ? futex_unqueue+0x22d/0x2c0 [ 674.829464][T11080] ? kmsan_get_metadata+0xf1/0x160 [ 674.829676][T11080] ? __se_sys_futex+0x5b8/0x740 [ 674.829820][T11080] ? __msan_warning+0x1b/0x30 [ 674.830015][T11080] ? __pfx_futex_wake_mark+0x10/0x10 [ 674.830246][T11080] do_futex+0x2e1/0x480 [ 674.830397][T11080] __se_sys_futex+0x5b8/0x740 [ 674.830548][T11080] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 674.830753][T11080] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 674.830980][T11080] __x64_sys_futex+0x114/0x1a0 [ 674.831154][T11080] x64_sys_call+0x36eb/0x3e70 [ 674.831352][T11080] do_syscall_64+0xc9/0xf80 [ 674.831531][T11080] ? clear_bhb_loop+0x40/0x90 [ 674.831693][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.831855][T11080] RIP: 0033:0x7ff005f9af79 [ 674.831969][T11080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.832102][T11080] RSP: 002b:00007ff006e57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 674.832251][T11080] RAX: ffffffffffffffda RBX: 00007ff006215fa0 RCX: 00007ff005f9af79 [ 674.832361][T11080] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 674.832459][T11080] RBP: 00007ff0060316e0 R08: 0000000000000000 R09: 0000000000000000 [ 674.832552][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.832641][T11080] R13: 00007ff006216038 R14: 00007ff006215fa0 R15: 00007ffc4eb19378 [ 674.832784][T11080] [ 675.279615][ T5954] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 675.611236][ T5954] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 675.624614][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.634016][ T5954] usb 1-1: Product: syz [ 675.643178][ T5954] usb 1-1: Manufacturer: syz [ 675.648018][ T5954] usb 1-1: SerialNumber: syz [ 675.906230][ T5954] usb 1-1: config 0 descriptor?? [ 675.988365][ T5954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 676.120598][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 676.200831][ T5954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 676.264256][ T5954] usb 1-1: media controller created [ 676.479700][T11098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2139'. [ 676.506995][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.321240][ T5954] DVB: Unable to find symbol mt352_attach() [ 677.637747][T11110] loop3: detected capacity change from 0 to 256 [ 677.901735][ T5954] DVB: Unable to find symbol nxt6000_attach() [ 677.908037][ T5954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 677.989387][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 678.085696][ T5954] dvb-usb: schedule remote query interval to 1000 msecs. [ 678.093164][ T5954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 678.163644][ T5954] dvb-usb: bulk message failed: -22 (7/0) [ 678.210656][ T5954] dvb-usb: bulk message failed: -22 (7/0) [ 678.265629][T11110] FAT-fs (loop3): Directory bread(block 64) failed [ 678.293585][ T5954] usb 1-1: USB disconnect, device number 15 [ 678.337635][T11110] FAT-fs (loop3): Directory bread(block 65) failed [ 678.399268][T11110] FAT-fs (loop3): Directory bread(block 66) failed [ 678.406053][T11110] FAT-fs (loop3): Directory bread(block 67) failed [ 678.519069][T11110] FAT-fs (loop3): Directory bread(block 68) failed [ 678.526319][T11110] FAT-fs (loop3): Directory bread(block 69) failed [ 678.621821][T11110] FAT-fs (loop3): Directory bread(block 70) failed [ 678.668686][T11110] FAT-fs (loop3): Directory bread(block 71) failed [ 678.711673][T11110] FAT-fs (loop3): Directory bread(block 72) failed [ 678.788891][T11110] FAT-fs (loop3): Directory bread(block 73) failed [ 679.061838][ T5954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 679.344789][T11125] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 679.749686][T11125] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 679.794271][T11128] netlink: 'syz.0.2150': attribute type 28 has an invalid length. [ 681.808020][T11147] loop3: detected capacity change from 0 to 2048 [ 681.980174][T11147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 682.152097][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 683.131692][T11162] loop0: detected capacity change from 0 to 128 [ 683.253261][T11162] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 683.361753][T11162] hpfs: filesystem error: improperly stopped [ 683.368046][T11162] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 683.379313][T11162] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 683.393014][T11162] hpfs: You really don't want any checks? You are crazy... [ 683.523852][T11162] hpfs: hpfs_map_sector(): read error [ 683.531411][T11162] hpfs: code page support is disabled [ 683.594921][T11162] hpfs: hpfs_map_4sectors(): unaligned read [ 683.632084][T11162] hpfs: hpfs_map_4sectors(): unaligned read [ 683.641369][T11162] hpfs: filesystem error: unable to find root dir [ 684.267616][T11175] loop6: detected capacity change from 0 to 512 [ 684.436429][T11178] loop4: detected capacity change from 0 to 64 [ 684.489261][T11175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 684.663880][T11175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.684960][T11175] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.290963][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.525907][T11189] loop3: detected capacity change from 0 to 512 [ 686.585387][T11203] syz.5.2183: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 686.601665][T11203] CPU: 1 UID: 0 PID: 11203 Comm: syz.5.2183 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 686.601859][T11203] Tainted: [L]=SOFTLOCKUP [ 686.601915][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 686.602006][T11203] Call Trace: [ 686.602060][T11203] [ 686.602114][T11203] __dump_stack+0x26/0x30 [ 686.602301][T11203] dump_stack_lvl+0x14c/0x1c0 [ 686.602480][T11203] dump_stack+0x1e/0x25 [ 686.602641][T11203] warn_alloc+0x46f/0x6a0 [ 686.602851][T11203] ? kmsan_get_metadata+0xf1/0x160 [ 686.603085][T11203] __vmalloc_node_range_noprof+0x142/0x2d80 [ 686.603298][T11203] ? should_fail_ex+0x45/0x8c0 [ 686.603460][T11203] ? stack_depot_save_flags+0x35/0x790 [ 686.603627][T11203] ? kmsan_get_metadata+0xf1/0x160 [ 686.603844][T11203] ? kmsan_get_metadata+0xf1/0x160 [ 686.604056][T11203] ? kmsan_get_metadata+0xf1/0x160 [ 686.604276][T11203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 686.604504][T11203] ? __kmalloc_cache_noprof+0x977/0x1710 [ 686.604670][T11203] ? kmsan_get_metadata+0xf1/0x160 [ 686.604896][T11203] vmalloc_user_noprof+0xce/0x140 [ 686.605091][T11203] ? xskq_create+0x11d/0x290 [ 686.605299][T11203] xskq_create+0x11d/0x290 [ 686.605504][T11203] xsk_init_queue+0xff/0x1d0 [ 686.605698][T11203] xsk_setsockopt+0x7f6/0xfe0 [ 686.605902][T11203] ? __pfx_xsk_setsockopt+0x10/0x10 [ 686.606085][T11203] __sys_setsockopt+0x43e/0x580 [ 686.606327][T11203] __x64_sys_setsockopt+0xf4/0x1a0 [ 686.606563][T11203] x64_sys_call+0x28e3/0x3e70 [ 686.606760][T11203] do_syscall_64+0xc9/0xf80 [ 686.606930][T11203] ? clear_bhb_loop+0x40/0x90 [ 686.607092][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.607254][T11203] RIP: 0033:0x7f2132f9af79 [ 686.607373][T11203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.607508][T11203] RSP: 002b:00007f2133e82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.607650][T11203] RAX: ffffffffffffffda RBX: 00007f2133215fa0 RCX: 00007f2132f9af79 [ 686.607759][T11203] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 686.607850][T11203] RBP: 00007f21330316e0 R08: 0000000000000004 R09: 0000000000000000 [ 686.607946][T11203] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.608042][T11203] R13: 00007f2133216038 R14: 00007f2133215fa0 R15: 00007ffc5518cda8 [ 686.608186][T11203] [ 686.856524][T11203] Mem-Info: [ 686.861225][T11203] active_anon:7429 inactive_anon:0 isolated_anon:0 [ 686.861225][T11203] active_file:12678 inactive_file:40210 isolated_file:0 [ 686.861225][T11203] unevictable:768 dirty:247 writeback:0 [ 686.861225][T11203] slab_reclaimable:5335 slab_unreclaimable:55853 [ 686.861225][T11203] mapped:30413 shmem:1377 pagetables:1843 [ 686.861225][T11203] sec_pagetables:0 bounce:0 [ 686.861225][T11203] kernel_misc_reclaimable:0 [ 686.861225][T11203] free:324208 free_pcp:12011 free_cma:0 [ 686.912063][T11203] Node 0 active_anon:29648kB inactive_anon:0kB active_file:50664kB inactive_file:160620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121652kB dirty:984kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5472kB pagetables:6980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 686.945431][T11203] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 686.977202][T11203] Node 0 DMA free:4064kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 687.010536][T11203] lowmem_reserve[]: 0 928 1241 1241 1241 [ 687.016769][T11203] Node 0 DMA32 free:377276kB boost:0kB min:36872kB low:46088kB high:55304kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8976kB inactive_anon:0kB active_file:46148kB inactive_file:71628kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:951132kB mlocked:0kB bounce:0kB free_pcp:35344kB local_pcp:20464kB free_cma:0kB [ 687.051045][T11203] lowmem_reserve[]: 0 0 312 312 312 [ 687.056907][T11203] Node 0 Normal free:19240kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20704kB inactive_anon:0kB active_file:4516kB inactive_file:88992kB unevictable:1536kB writepending:724kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:12760kB local_pcp:7592kB free_cma:0kB [ 687.093507][T11203] lowmem_reserve[]: 0 0 0 0 0 [ 687.101832][T11203] Node 1 Normal free:896252kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:220kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:987120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.134273][T11203] lowmem_reserve[]: 0 0 0 0 0 [ 687.139669][T11203] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 4064kB [ 687.157161][T11203] Node 0 DMA32: 1685*4kB (UME) 1263*8kB (UM) 491*16kB (UM) 164*32kB (UME) 135*64kB (UME) 118*128kB (UM) 52*256kB (UM) 14*512kB (UM) 10*1024kB (UME) 7*2048kB (UM) 68*4096kB (UM) = 377276kB [ 687.178045][T11203] Node 0 Normal: 169*4kB (UM) 156*8kB (UM) 83*16kB (UME) 32*32kB (UME) 16*64kB (UME) 7*128kB (UME) 7*256kB (UM) 4*512kB (UM) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 19252kB [ 687.200925][T11203] Node 1 Normal: 3*4kB (ME) 6*8kB (UME) 18*16kB (UE) 13*32kB (UME) 14*64kB (UE) 11*128kB (UME) 7*256kB (UME) 3*512kB (UE) 1*1024kB (M) 2*2048kB (UM) 216*4096kB (ME) = 896252kB [ 687.221596][T11203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.231537][T11203] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 687.241322][T11203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.251670][T11203] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 687.261311][T11203] 54196 total pagecache pages [ 687.266225][T11203] 0 pages in swap cache [ 687.270724][T11203] Free swap = 124996kB [ 687.275058][T11203] Total swap = 124996kB [ 687.279756][T11203] 2097051 pages RAM [ 687.283736][T11203] 0 pages HighMem/MovableOnly [ 687.288784][T11203] 1531345 pages reserved [ 687.293209][T11203] 0 pages cma reserved [ 688.107169][T11211] loop4: detected capacity change from 0 to 1024 [ 688.201916][T11211] EXT4-fs: Ignoring removed bh option [ 688.290004][T11211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.662021][ T30] audit: type=1326 audit(1770636954.032:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.5.2189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2132f9af79 code=0x0 [ 688.902705][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.984299][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 691.340340][T11255] loop5: detected capacity change from 0 to 1024 [ 691.440729][T11257] sp0: Synchronizing with TNC [ 691.515349][T11256] [U] è [ 691.563750][T11255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.062651][ T8687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.343647][T11287] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 694.113905][T11295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2220'. [ 694.321507][T11280] loop0: detected capacity change from 0 to 8192 [ 694.496942][T11280] syz.0.2214: attempt to access beyond end of device [ 694.496942][T11280] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 694.511671][T11280] buffer_io_error: 14 callbacks suppressed [ 694.511751][T11280] Buffer I/O error on dev loop0, logical block 57847, async page read [ 694.632320][T11280] syz.0.2214: attempt to access beyond end of device [ 694.632320][T11280] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 694.649567][T11280] Buffer I/O error on dev loop0, logical block 57847, async page read [ 694.725614][T11303] tipc: Enabling of bearer rejected, failed to enable media [ 694.760550][ T30] audit: type=1800 audit(1770636960.132:104): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2214" name="file2" dev="loop0" ino=1048781 res=0 errno=0 [ 694.948503][T11306] loop3: detected capacity change from 0 to 16 [ 695.032476][T11306] erofs (device loop3): mounted with root inode @ nid 36. [ 695.107593][T11307] IPv6: sit1: Disabled Multicast RS [ 695.163098][T11307] sit1: entered allmulticast mode [ 695.216491][ T30] audit: type=1800 audit(1770636960.572:105): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2225" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 695.730844][T11313] loop5: detected capacity change from 0 to 128 [ 695.787735][T11313] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 695.917046][T11313] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 696.624976][ T59] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 697.124529][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2233'. [ 698.291850][ T795] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 698.471587][ T795] usb 7-1: No LPM exit latency info found, disabling LPM. [ 698.524015][ T795] usb 7-1: config 0 has no interfaces? [ 698.596555][ T795] usb 7-1: string descriptor 0 read error: -22 [ 698.611741][ T795] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.624167][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.728666][ T795] usb 7-1: config 0 descriptor?? [ 698.997271][ T795] usb 7-1: USB disconnect, device number 3 [ 699.268729][T11349] loop3: detected capacity change from 0 to 16 [ 699.359580][T11349] erofs (device loop3): mounted with root inode @ nid 36. [ 699.614530][T11351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2247'. [ 700.135005][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2251'. [ 700.144334][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2251'. [ 700.936939][T11368] loop4: detected capacity change from 0 to 16 [ 700.969158][T11364] loop5: detected capacity change from 0 to 1024 [ 701.019348][T11368] erofs (device loop4): mounted with root inode @ nid 36. [ 701.144783][T11368] erofs (device loop4): bogus dirent @ nid 36 [ 702.887455][T11385] loop3: detected capacity change from 0 to 2048 [ 702.995967][T11385] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 703.004199][T11385] UDF-fs: Scanning with blocksize 512 failed [ 703.048709][ T5954] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 703.241552][T11385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.318995][ T5954] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 703.407926][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.419585][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.429779][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 703.581796][ T5954] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 703.591874][ T5954] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 703.601004][ T5954] usb 5-1: Manufacturer: syz [ 703.707377][ T5954] usb 5-1: config 0 descriptor?? [ 704.360414][ T5954] appleir 0003:05AC:8243.0015: item fetching failed at offset 0/1 [ 704.421174][ T5954] appleir 0003:05AC:8243.0015: parse failed [ 704.427890][ T5954] appleir 0003:05AC:8243.0015: probe with driver appleir failed with error -22 [ 704.535884][ T5954] usb 5-1: USB disconnect, device number 16 [ 705.283726][T11412] [U] ÿ [ 705.833273][T11420] loop6: detected capacity change from 0 to 16 [ 705.923290][T11421] loop4: detected capacity change from 0 to 256 [ 705.934006][T11420] erofs (device loop6): mounted with root inode @ nid 36. [ 705.944854][T11419] loop3: detected capacity change from 0 to 512 [ 705.981454][T11421] exfat: Deprecated parameter 'utf8' [ 705.987215][T11421] exfat: Deprecated parameter 'namecase' [ 706.047961][ T30] audit: type=1800 audit(1770636971.412:106): pid=11420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2280" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 706.053958][T11420] syz.6.2280: attempt to access beyond end of device [ 706.053958][T11420] loop6: rw=34816, sector=34359738360, nr_sectors = 1152 limit=16 [ 706.104726][T11421] exfat: Deprecated parameter 'namecase' [ 706.117437][T11421] exfat: Deprecated parameter 'utf8' [ 706.177167][T11419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.234417][T11419] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 706.311044][T11421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 706.396415][T11421] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 706.435507][T11419] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.2278: directory missing '.' [ 706.570123][T11419] EXT4-fs (loop3): Remounting filesystem read-only [ 707.102050][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.192461][T11431] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 707.270014][T11432] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 708.296936][T11436] loop3: detected capacity change from 0 to 4096 [ 708.439602][T11436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.693019][T11436] EXT4-fs: Cannot change journaled quota options when quota turned on [ 709.141538][T11451] loop6: detected capacity change from 0 to 1024 [ 709.239110][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.855547][ T13] hfsplus: b-tree write err: -5, ino 4 [ 710.005476][T11461] loop3: detected capacity change from 0 to 512 [ 710.086023][T11460] loop0: detected capacity change from 0 to 1024 [ 710.113850][T11461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 710.176505][T11464] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 710.207903][T11461] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.2297: corrupted xattr entries [ 710.326108][T11461] EXT4-fs (loop3): Remounting filesystem read-only [ 710.366495][T11461] EXT4-fs (loop3): 1 truncate cleaned up [ 710.433753][T11461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.699757][ T13] hfsplus: b-tree write err: -5, ino 4 [ 710.801921][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2303'. [ 711.033347][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.729576][ T5954] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 713.004712][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.015061][ T5954] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 713.024538][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.175686][ T5954] usb 4-1: config 0 descriptor?? [ 713.899203][ T5954] usb 4-1: USB disconnect, device number 7 [ 717.433426][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2336'. [ 717.445996][T11548] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2336'. [ 718.079607][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 718.089805][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 718.099158][T11560] netlink: 'syz.3.2341': attribute type 11 has an invalid length. [ 718.109964][T11560] netlink: 'syz.3.2341': attribute type 13 has an invalid length. [ 718.546567][T11566] loop5: detected capacity change from 0 to 512 [ 718.803388][T11566] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2343: error while reading EA inode 32 err=-116 [ 719.004354][T11566] EXT4-fs (loop5): Remounting filesystem read-only [ 719.059536][T11566] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 719.182915][T11566] EXT4-fs (loop5): 1 orphan inode deleted [ 719.197351][T11562] loop6: detected capacity change from 0 to 32768 [ 719.217100][T11566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.224097][T11562] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2342 (11562) [ 719.267474][T11562] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 719.278330][T11562] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 719.578910][T11562] BTRFS info (device loop6): rebuilding free space tree [ 719.616617][T11562] BTRFS info (device loop6): disabling free space tree [ 719.629641][T11562] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 719.639978][T11562] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 719.686882][T11562] BTRFS info (device loop6): enabling ssd optimizations [ 719.697335][T11562] BTRFS info (device loop6): turning on sync discard [ 719.704719][T11562] BTRFS info (device loop6): force clearing of disk cache [ 719.714813][T11562] BTRFS info (device loop6): enabling auto defrag [ 719.724734][T11562] BTRFS info (device loop6): max_inline set to 0 [ 719.845471][ T8687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.863696][ T9844] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 720.056279][T11588] loop3: detected capacity change from 0 to 256 [ 720.490449][ T795] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 720.686724][T11594] loop4: detected capacity change from 0 to 512 [ 720.718714][ T795] usb 6-1: Using ep0 maxpacket: 32 [ 720.788956][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.805984][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.816326][ T795] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 720.825933][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.966898][ T795] usb 6-1: config 0 descriptor?? [ 721.047667][T11594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.197796][T11594] ext4 filesystem being mounted at /474/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.626963][ T795] savu 0003:1E7D:2D5A.0017: bogus close delimiter [ 721.636940][ T795] savu 0003:1E7D:2D5A.0017: item 0 4 2 10 parsing failed [ 721.766633][ T795] savu 0003:1E7D:2D5A.0017: parse failed [ 721.773384][ T795] savu 0003:1E7D:2D5A.0017: probe with driver savu failed with error -22 [ 721.922649][ T795] usb 6-1: USB disconnect, device number 6 [ 723.724738][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.757441][T11614] loop0: detected capacity change from 0 to 1024 [ 724.061353][T11612] loop6: detected capacity change from 0 to 32768 [ 724.136136][T11612] (syz.6.2350,11612,1):ocfs2_find_entry:1104 ERROR: status = -117 [ 724.144920][T11612] (syz.6.2350,11612,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 724.154501][T11612] (syz.6.2350,11612,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 724.154697][T11612] (syz.6.2350,11612,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 724.180504][T11612] (syz.6.2350,11612,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 724.189591][T11612] (syz.6.2350,11612,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 725.200171][ T35] hfsplus: b-tree write err: -5, ino 4 [ 725.814108][T11630] loop0: detected capacity change from 0 to 128 [ 725.944634][T11630] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 725.960171][T11630] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.335563][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2369'. [ 726.422119][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.428922][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.573751][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.864108][T11642] loop5: detected capacity change from 0 to 512 [ 727.095593][T11642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.137185][T11642] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.593846][ T5844] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 727.833632][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.848780][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.860019][ T5844] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 727.869615][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.001478][ T8687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.076371][ T5844] usb 1-1: config 0 descriptor?? [ 728.516868][T11660] loop6: detected capacity change from 0 to 512 [ 728.635340][ T5844] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 728.808356][ T5844] hid-corsair-void 0003:1B1C:1B29.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b29] on usb-dummy_hcd.0-1/input0 [ 728.938647][ T24] hid-corsair-void 0003:1B1C:1B29.0018: failed to request battery (reason: -71) [ 728.948565][ T5954] hid-corsair-void 0003:1B1C:1B29.0018: failed to request firmware (reason: -71) [ 728.964034][ T5844] usb 1-1: USB disconnect, device number 16 [ 729.411626][T11670] loop6: detected capacity change from 0 to 64 [ 730.024957][T11666] loop4: detected capacity change from 0 to 4096 [ 730.105930][T11666] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 730.341886][T11677] loop0: detected capacity change from 0 to 64 [ 730.573505][T11681] loop6: detected capacity change from 0 to 256 [ 730.631285][T11681] exfat: Deprecated parameter 'namecase' [ 730.693676][T11673] fido_id[11673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 730.915755][T11681] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 731.536944][T11688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 731.543778][T11688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.552061][T11688] vhci_hcd vhci_hcd.0: Device attached [ 731.644897][T11690] vhci_hcd: connection closed [ 731.645799][ T58] vhci_hcd vhci_hcd.0: stop threads [ 731.662316][ T58] vhci_hcd vhci_hcd.0: release socket [ 731.668007][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 732.336692][T11695] loop5: detected capacity change from 0 to 128 [ 732.822608][T11699] loop3: detected capacity change from 0 to 1024 [ 733.077312][T11699] hfsplus: bad catalog entry type [ 733.595238][ T5904] hfsplus: b-tree write err: -5, ino 4 [ 737.585055][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2421'. [ 738.198447][T11761] loop3: detected capacity change from 0 to 256 [ 738.274383][T11761] exfat: Deprecated parameter 'utf8' [ 738.398852][T11761] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 738.634598][T11759] loop0: detected capacity change from 0 to 4096 [ 738.718808][T11759] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 738.799450][T11759] ntfs3(loop0): It is recommended to use chkdsk. [ 739.292791][T11773] xt_hashlimit: max too large, truncated to 1048576 [ 743.086254][T11823] loop5: detected capacity change from 0 to 512 [ 743.401821][T11823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.449360][T11823] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.797704][T11833] loop0: detected capacity change from 0 to 1024 [ 744.059049][T11827] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 744.172294][ T8687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.281517][T11837] loop3: detected capacity change from 0 to 1024 [ 744.385995][T10069] hfsplus: b-tree write err: -5, ino 4 [ 744.482167][T11837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.748600][T11844] loop6: detected capacity change from 0 to 128 [ 744.801994][T11844] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 744.884482][T11844] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 745.165117][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.715452][ T35] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 745.847013][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 746.101973][T11858] loop3: detected capacity change from 0 to 128 [ 746.197732][T11858] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 746.241818][T11858] hpfs: filesystem error: improperly stopped [ 746.248637][T11858] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 746.256621][T11858] hpfs: You really don't want any checks? You are crazy... [ 746.306881][ T795] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 746.337073][T11858] hpfs: hpfs_map_sector(): read error [ 746.343081][T11858] hpfs: code page support is disabled [ 746.416727][T11858] hpfs: hpfs_map_4sectors(): unaligned read [ 746.499396][T11858] hpfs: hpfs_map_4sectors(): unaligned read [ 746.505511][T11858] hpfs: filesystem error: unable to find root dir [ 746.589699][T11858] hpfs: hpfs_map_4sectors(): unaligned read [ 746.606716][ T795] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 746.616491][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.630468][ T795] usb 5-1: Product: syz [ 746.634878][ T795] usb 5-1: Manufacturer: syz [ 746.642858][ T795] usb 5-1: SerialNumber: syz [ 746.737524][ T795] usb 5-1: config 0 descriptor?? [ 747.094025][ T795] usb 5-1: USB disconnect, device number 17 [ 747.644455][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.308688][T11878] loop5: detected capacity change from 0 to 256 [ 748.513030][ T795] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 748.646210][T11878] FAT-fs (loop5): Directory bread(block 64) failed [ 748.655782][T11884] comedi comedi3: 8255: I/O port conflict (0xffffffff80000000,4) [ 748.684184][T11878] FAT-fs (loop5): Directory bread(block 65) failed [ 748.711773][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 748.726166][ T795] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.750054][ T795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.757078][ T795] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 748.759498][T11878] FAT-fs (loop5): Directory bread(block 66) failed [ 748.770827][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.846237][T11878] FAT-fs (loop5): Directory bread(block 67) failed [ 748.919232][ T795] usb 4-1: config 0 descriptor?? [ 748.924622][T11878] FAT-fs (loop5): Directory bread(block 68) failed [ 748.970633][T11878] FAT-fs (loop5): Directory bread(block 69) failed [ 749.034113][T11878] FAT-fs (loop5): Directory bread(block 70) failed [ 749.098970][T11878] FAT-fs (loop5): Directory bread(block 71) failed [ 749.149230][T11878] FAT-fs (loop5): Directory bread(block 72) failed [ 749.188895][T11878] FAT-fs (loop5): Directory bread(block 73) failed [ 749.434962][ T795] koneplus 0003:1E7D:2E22.0019: item fetching failed at offset 0/3 [ 749.506591][ T795] koneplus 0003:1E7D:2E22.0019: parse failed [ 749.515969][ T795] koneplus 0003:1E7D:2E22.0019: probe with driver koneplus failed with error -22 [ 749.669685][ T795] usb 4-1: USB disconnect, device number 8 [ 750.673301][T11896] loop5: detected capacity change from 0 to 1764 [ 750.971373][T11896] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 751.057258][T11896] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 752.000316][ T5844] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 752.232708][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.243369][ T5844] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 752.252997][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.507153][ T5844] usb 4-1: config 0 descriptor?? [ 752.636414][T11906] loop6: detected capacity change from 0 to 32768 [ 752.706900][T11906] (syz.6.2488,11906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 752.736053][T11906] (syz.6.2488,11906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 752.887636][T11906] (syz.6.2488,11906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 752.914190][T11906] (syz.6.2488,11906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 752.970402][T11906] JBD2: Ignoring recovery information on journal [ 753.152968][T11906] (syz.6.2488,11906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 753.177396][T11906] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 753.228911][ T5844] smartjoyplus 0003:0925:8866.001A: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 753.245892][ T5844] smartjoyplus 0003:0925:8866.001A: Force feedback for SmartJoy PLUS PS2/USB adapter [ 753.394997][ T5844] usb 4-1: USB disconnect, device number 9 [ 753.634170][ T9844] ocfs2: Unmounting device (7,6) on (node local) [ 753.841428][T11924] loop0: detected capacity change from 0 to 128 [ 753.996325][T11924] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 754.005102][T11924] FAT-fs (loop0): Filesystem has been set read-only [ 754.090861][T11924] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 754.966278][T11934] loop3: detected capacity change from 0 to 1024 [ 755.725800][T11941] loop6: detected capacity change from 0 to 1024 [ 755.894074][T11935] fido_id[11935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 757.034774][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2511'. [ 757.884479][T11962] loop5: detected capacity change from 0 to 8 [ 758.175920][ T795] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 758.417235][ T795] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 758.426136][ T795] usb 7-1: config 0 has no interface number 0 [ 758.433559][ T795] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.451235][ T795] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 758.462893][ T795] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 758.482064][ T795] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 758.497655][ T795] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 758.512039][ T795] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 758.528410][ T795] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 758.537898][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.761349][ T795] usb 7-1: config 0 descriptor?? [ 758.815324][T11963] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 758.825757][T11963] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 758.903279][ T795] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 759.086751][T11968] loop3: detected capacity change from 0 to 1764 [ 759.143904][T11970] loop4: detected capacity change from 0 to 1024 [ 759.244399][ T795] usb 7-1: USB disconnect, device number 4 [ 759.366632][ T795] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 759.472921][T11973] syz.4.2518: attempt to access beyond end of device [ 759.472921][T11973] loop4: rw=8388608, sector=393738, nr_sectors = 2 limit=1024 [ 760.386715][T11975] loop0: detected capacity change from 0 to 4096 [ 760.459935][ T5844] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 760.635800][T11975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.732072][ T5844] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 760.778419][ T5844] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 760.789909][ T5844] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.800280][ T5844] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 760.814047][ T5844] usb 6-1: config 0 interface 0 has no altsetting 0 [ 760.823624][ T5844] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 760.833894][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.994039][ T5844] usb 6-1: config 0 descriptor?? [ 761.474997][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.672091][ T795] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 761.765236][ T5844] usb 6-1: string descriptor 0 read error: -71 [ 761.826310][ T5844] uclogic 0003:5543:0081.001B: failed retrieving string descriptor #200: -71 [ 761.836255][ T5844] uclogic 0003:5543:0081.001B: failed retrieving pen parameters: -71 [ 761.849906][ T5844] uclogic 0003:5543:0081.001B: failed probing pen v2 parameters: -71 [ 761.860347][ T5844] uclogic 0003:5543:0081.001B: failed probing parameters: -71 [ 761.869094][ T5844] uclogic 0003:5543:0081.001B: probe with driver uclogic failed with error -71 [ 761.969014][ T795] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.983747][ T795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.994127][ T795] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 762.003679][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.186625][ T5844] usb 6-1: USB disconnect, device number 7 [ 762.208016][ T795] usb 4-1: config 0 descriptor?? [ 762.242968][T11993] loop0: detected capacity change from 0 to 256 [ 762.517775][T11993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 762.855623][ T795] kye 0003:0458:5019.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 762.955970][ T795] kye 0003:0458:5019.001C: unknown main item tag 0x0 [ 762.969707][ T795] kye 0003:0458:5019.001C: unknown main item tag 0x0 [ 762.976772][ T795] kye 0003:0458:5019.001C: unknown main item tag 0x0 [ 763.204948][ T795] kye 0003:0458:5019.001C: hidraw0: USB HID v0.05 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 763.221051][ T795] kye 0003:0458:5019.001C: tablet-enabling feature report not found [ 763.232441][ T795] kye 0003:0458:5019.001C: tablet enabling failed [ 763.521766][ T795] usb 4-1: USB disconnect, device number 10 [ 764.164605][T12000] fido_id[12000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 764.617497][T12015] loop6: detected capacity change from 0 to 1024 [ 764.770834][T12015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 764.896756][T12015] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.135574][T12015] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2537: bg 0: block 112: padding at end of block bitmap is not set [ 765.199836][T12023] vivid-006: disconnect [ 765.235224][T12022] vivid-006: reconnect [ 765.676973][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 765.694082][T12019] loop5: detected capacity change from 0 to 4096 [ 765.972088][T12027] loop4: detected capacity change from 0 to 2048 [ 766.067481][T12019] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 766.153699][T12019] ntfs3(loop5): Failed to load $Extend (-22). [ 766.180547][T12019] ntfs3(loop5): Failed to initialize $Extend. [ 766.215262][T12027] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 766.239977][T12027] System zones: 0-7 [ 766.299449][T12027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.426215][T12027] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.2542: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 766.535929][T12027] EXT4-fs (loop4): Remounting filesystem read-only [ 767.022124][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.492656][T12053] macvtap1: entered promiscuous mode [ 768.506119][T12053] macvtap1: entered allmulticast mode [ 768.516648][T12055] loop6: detected capacity change from 0 to 256 [ 768.524064][T12053] veth1_vlan: entered allmulticast mode [ 768.681521][T12053] veth1_vlan: left allmulticast mode [ 768.789465][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 768.804161][T12055] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 769.085518][ T30] audit: type=1800 audit(1770637034.452:107): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2555" name="file1" dev="loop6" ino=1048808 res=0 errno=0 [ 769.764858][T12066] loop4: detected capacity change from 0 to 764 [ 769.795994][T12068] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 771.304995][T12085] loop5: detected capacity change from 0 to 64 [ 772.010991][T12083] loop3: detected capacity change from 0 to 32768 [ 772.103984][T12083] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 772.443002][T12083] XFS (loop3): Ending clean mount [ 772.472693][T12083] XFS (loop3): Quotacheck needed: Please wait. [ 772.518735][ T13] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xaf/0x2c0, xfs_bnobt block 0x4 [ 772.530444][ T13] XFS (loop3): Unmount and run xfs_repair [ 772.536376][ T13] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 772.544222][ T13] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 772.553601][ T13] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 772.563884][ T13] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 772.573219][ T13] 00000030: 00 00 00 00 9f 6b f4 9e 00 00 00 07 00 00 00 01 .....k.......... [ 772.582482][ T13] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 772.592358][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 772.605600][ T13] 00000060: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 772.615876][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 772.625636][ T13] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x4 len 4 error 74 [ 772.863143][T12083] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 773.002418][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 773.114043][ T5782] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 773.699355][T12108] vlan2: entered allmulticast mode [ 773.705014][T12108] team0: entered allmulticast mode [ 773.710608][T12108] team_slave_0: entered allmulticast mode [ 773.716535][T12108] team_slave_1: entered allmulticast mode [ 773.872323][T12113] loop4: detected capacity change from 0 to 256 [ 774.986865][T12117] loop6: detected capacity change from 0 to 2048 [ 775.244107][T12117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.325838][T12124] loop4: detected capacity change from 0 to 256 [ 775.401737][T12124] exfat: Deprecated parameter 'namecase' [ 775.407762][T12124] exfat: Deprecated parameter 'namecase' [ 775.549837][T12117] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 775.648728][T12124] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 776.276693][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.926384][T12136] pim6reg: entered allmulticast mode [ 777.042013][T12141] loop0: detected capacity change from 0 to 128 [ 777.068666][T12141] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 777.196861][T12141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.302192][T12141] overlayfs: upper fs needs to support d_type. [ 777.302778][T12141] overlayfs: upper fs does not support tmpfile. [ 778.275188][T12152] netlink: 'syz.0.2595': attribute type 3 has an invalid length. [ 778.275285][T12152] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2595'. [ 778.950742][T12160] loop0: detected capacity change from 0 to 256 [ 779.048672][T12160] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 779.123004][ T30] audit: type=1800 audit(1770637044.462:108): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2599" name="file1" dev="loop0" ino=1048810 res=0 errno=0 [ 780.215844][T12164] loop6: detected capacity change from 0 to 32768 [ 780.231083][T12164] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: 1 clusters [ 780.231234][T12164] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 780.231303][T12164] OCFS2: File system is now read-only. [ 780.231365][T12164] (syz.6.2601,12164,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 780.231743][T12164] (syz.6.2601,12164,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 780.232579][T12164] (syz.6.2601,12164,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 780.232722][T12164] (syz.6.2601,12164,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs? [ 780.232865][T12164] (syz.6.2601,12164,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 780.233020][T12164] (syz.6.2601,12164,1):ocfs2_initialize_super:2198 ERROR: status = -30 [ 780.233597][T12164] (syz.6.2601,12164,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 780.838206][T12170] ceph: Unexpected value for 'acl' [ 780.960949][T12172] vlan2: entered allmulticast mode [ 780.961057][T12172] team0: entered allmulticast mode [ 780.961147][T12172] team_slave_0: entered allmulticast mode [ 780.961241][T12172] team_slave_1: entered allmulticast mode [ 781.075861][T12171] loop4: detected capacity change from 0 to 1024 [ 781.194943][T12171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.807631][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.720736][T12188] loop0: detected capacity change from 0 to 512 [ 782.883597][T12188] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2611: bg 0: block 5: invalid block bitmap [ 782.941996][T12188] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 782.973704][T12188] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2611: invalid indirect mapped block 3 (level 2) [ 782.975697][T12188] EXT4-fs (loop0): 1 orphan inode deleted [ 782.975810][T12188] EXT4-fs (loop0): 1 truncate cleaned up [ 782.977971][T12188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.499206][T12194] loop4: detected capacity change from 0 to 512 [ 783.545756][T12194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 783.689742][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.752206][T12194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.752658][T12194] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.880115][T12201] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.2614: failed to insert inode 16: doubly allocated? [ 784.263456][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.344377][T12203] loop0: detected capacity change from 0 to 256 [ 784.814228][T12203] FAT-fs (loop0): Directory bread(block 64) failed [ 784.814366][T12203] FAT-fs (loop0): Directory bread(block 65) failed [ 784.814613][T12203] FAT-fs (loop0): Directory bread(block 66) failed [ 784.814728][T12203] FAT-fs (loop0): Directory bread(block 67) failed [ 784.815012][T12203] FAT-fs (loop0): Directory bread(block 68) failed [ 784.815147][T12203] FAT-fs (loop0): Directory bread(block 69) failed [ 784.815414][T12203] FAT-fs (loop0): Directory bread(block 70) failed [ 784.815529][T12203] FAT-fs (loop0): Directory bread(block 71) failed [ 784.815781][T12203] FAT-fs (loop0): Directory bread(block 72) failed [ 784.815893][T12203] FAT-fs (loop0): Directory bread(block 73) failed [ 787.280165][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 787.563414][T12233] loop4: detected capacity change from 0 to 512 [ 787.581770][T12233] EXT4-fs: Ignoring removed orlov option [ 787.582073][T12233] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.695990][T12233] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 787.706037][T12233] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2630: attempt to clear invalid blocks 2 len 1 [ 787.716800][T12233] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 787.725846][T12233] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2630: invalid indirect mapped block 1819239214 (level 0) [ 787.740068][T12233] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2630: invalid indirect mapped block 1819239214 (level 1) [ 787.794082][T12233] EXT4-fs (loop4): 1 truncate cleaned up [ 787.796442][T12233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.875756][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.876040][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.938010][T12233] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 788.176414][T12240] loop3: detected capacity change from 0 to 256 [ 788.522668][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.550977][T12250] loop0: detected capacity change from 0 to 1024 [ 789.976785][T12254] loop4: detected capacity change from 0 to 512 [ 790.173115][ T35] hfsplus: b-tree write err: -5, ino 4 [ 790.314597][T12254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.409395][T12254] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.295926][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.419992][T12269] loop3: detected capacity change from 0 to 32768 [ 792.437788][T12269] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__Š°"_½z#²˱1Ä [ 792.482605][T12269] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 792.497974][T12269] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1801)... [ 792.523526][T12269] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no journals! [ 794.014188][T12284] loop4: detected capacity change from 0 to 32768 [ 794.034124][T12284] (syz.4.2650,12284,1):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0 [ 794.042990][T12284] (syz.4.2650,12284,1):ocfs2_verify_volume:2331 ERROR: status = -22 [ 794.051518][T12284] (syz.4.2650,12284,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 794.060549][T12284] (syz.4.2650,12284,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 794.362532][T12288] hub 8-0:1.0: USB hub found [ 794.412311][T12288] hub 8-0:1.0: 1 port detected [ 794.711228][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2655'. [ 795.144746][T12294] loop6: detected capacity change from 0 to 1024 [ 795.315771][T12294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.861296][T12303] loop3: detected capacity change from 0 to 2048 [ 795.947227][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.972110][T12303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 796.005780][T12309] loop5: detected capacity change from 0 to 65 [ 796.023748][T12309] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 796.031453][T12309] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 796.820303][T12312] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2665'. [ 797.129020][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 798.800981][T12333] loop3: detected capacity change from 0 to 1024 [ 798.955957][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 799.569449][ T1134] hfsplus: b-tree write err: -5, ino 4 [ 800.201769][T12353] loop4: detected capacity change from 0 to 64 [ 801.200881][T12358] loop3: detected capacity change from 0 to 4096 [ 801.341617][T12367] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 801.712772][T12369] netlink: 'syz.5.2688': attribute type 5 has an invalid length. [ 802.994507][T12385] loop0: detected capacity change from 0 to 256 [ 804.288330][T12402] loop6: detected capacity change from 0 to 512 [ 804.530824][T12402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.562124][T12402] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.706742][T12402] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:335: inode #15: comm syz.6.2703: verity file corrupted; can't find descriptor [ 804.803772][T12402] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 805.203701][T12414] loop4: detected capacity change from 0 to 8 [ 805.284773][T12414] SQUASHFS error: zlib decompression failed, data probably corrupt [ 805.296367][T12414] SQUASHFS error: Failed to read block 0x9b: -5 [ 805.305643][T12414] SQUASHFS error: Unable to read metadata cache entry [99] [ 805.313359][T12414] SQUASHFS error: Unable to read inode 0x127 [ 805.451652][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.461561][T12418] loop3: detected capacity change from 0 to 512 [ 805.594057][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2708'. [ 805.689893][T12418] EXT4-fs (loop3): 1 truncate cleaned up [ 805.765995][T12418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.118692][T12424] loop6: detected capacity change from 0 to 256 [ 806.239707][T12424] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 806.433764][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.520551][ T5844] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 806.738417][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 806.778873][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.790463][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.803820][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 806.818250][ T5844] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 806.827569][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.991291][ T5844] usb 1-1: config 0 descriptor?? [ 807.005533][T12432] loop5: detected capacity change from 0 to 256 [ 807.047649][T12432] exfat: Deprecated parameter 'namecase' [ 807.102286][T12438] loop4: detected capacity change from 0 to 1024 [ 807.127856][T12432] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 807.176152][T12438] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 807.276669][T12438] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.2716: lblock 2 mapped to illegal pblock 2 (length 1) [ 807.370521][T12432] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 807.393613][T12438] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 807.404943][T12438] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.2716: lblock 0 mapped to illegal pblock 48 (length 1) [ 807.485488][T12438] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 807.495390][T12438] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2716: Failed to acquire dquot type 0 [ 807.549616][T12438] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 807.567355][ T5844] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.001D/input/input14 [ 807.621481][T12438] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.2716: mark_inode_dirty error [ 807.675358][T12438] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 807.714970][T12438] EXT4-fs (loop4): 1 orphan inode deleted [ 807.739938][ T1016] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 807.781151][ T5844] appleir 0003:05AC:8241.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 807.851186][T12438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.876494][ T1016] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 807.886944][ T1016] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 807.956352][ T5844] usb 1-1: USB disconnect, device number 17 [ 807.991951][T12438] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.2716: Invalid inode table block 1 in block_group 0 [ 808.051477][T12438] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 808.502473][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.819691][ T5784] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 808.937382][ T5784] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 809.106812][ T5784] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 809.191366][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 809.392309][T12447] loop6: detected capacity change from 0 to 32768 [ 809.407025][T12447] (syz.6.2719,12447,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xd57e6c51. Applying ECC. [ 809.421043][T12447] (syz.6.2719,12447,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc2d589a7, computed 0xf59bda01 [ 809.434067][T12447] (syz.6.2719,12447,1):ocfs2_validate_inode_block:1441 ERROR: Checksum failed for dinode 17 [ 809.444576][T12447] (syz.6.2719,12447,1):ocfs2_read_locked_inode:599 ERROR: status = -5 [ 809.453429][T12447] (syz.6.2719,12447,1):ocfs2_init_global_system_inodes:444 ERROR: status = -5 [ 809.466340][T12447] (syz.6.2719,12447,1):ocfs2_init_global_system_inodes:476 ERROR: status = -5 [ 809.475604][T12447] (syz.6.2719,12447,1):ocfs2_initialize_super:2198 ERROR: status = -5 [ 809.484605][T12447] (syz.6.2719,12447,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 810.321959][T12455] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.2721'. [ 811.257081][T12453] loop3: detected capacity change from 0 to 4096 [ 811.597542][T12466] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 812.007016][T12459] fido_id[12459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 812.776172][T12474] loop0: detected capacity change from 0 to 64 [ 813.877774][T12485] loop0: detected capacity change from 0 to 256 [ 813.986695][T12485] exfat: Deprecated parameter 'namecase' [ 814.024961][T12485] exfat: Deprecated parameter 'namecase' [ 814.246282][T12485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 814.294878][T12491] CUSE: info not properly terminated [ 815.363903][T12501] loop5: detected capacity change from 0 to 128 [ 815.492852][T12501] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 815.582143][T12501] hpfs: filesystem error: improperly stopped [ 815.588850][T12501] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 815.596988][T12501] hpfs: You really don't want any checks? You are crazy... [ 815.679392][T12501] hpfs: hpfs_map_sector(): read error [ 815.685104][T12501] hpfs: code page support is disabled [ 815.791378][T12501] hpfs: hpfs_map_4sectors(): unaligned read [ 815.828712][T12501] hpfs: hpfs_map_4sectors(): unaligned read [ 815.834953][T12501] hpfs: filesystem error: unable to find root dir [ 816.758192][T12517] netlink: 'syz.5.2751': attribute type 10 has an invalid length. [ 817.573653][T12532] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2756'. [ 817.633828][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2756'. [ 818.608305][ T30] audit: type=1326 audit(1770637083.972:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12539 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 818.731535][ T30] audit: type=1326 audit(1770637084.042:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12539 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 818.756116][ T30] audit: type=1326 audit(1770637084.042:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12539 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 819.021558][ T30] audit: type=1326 audit(1770637084.312:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12539 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 819.045502][ T30] audit: type=1326 audit(1770637084.312:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff005f5b84e code=0x7ffc0000 [ 819.068688][ T30] audit: type=1326 audit(1770637084.322:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12539 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 819.326934][ T30] audit: type=1326 audit(1770637084.472:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff005f9af79 code=0x7ffc0000 [ 819.970147][ T5844] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 820.230833][ T5844] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.241343][ T5844] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 820.254908][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0 [ 820.264132][ T5844] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 820.273628][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.777731][T12550] loop5: detected capacity change from 0 to 32768 [ 820.788329][T12550] BTRFS warning: excessive commit interval 2147483648, use with care [ 820.814240][T12550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2766 (12550) [ 820.837947][ T5844] usb 1-1: config 0 descriptor?? [ 820.891333][T12550] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 820.904707][T12550] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 820.913856][T12550] BTRFS error (device loop5): nologreplay must be used with ro mount option [ 820.925956][T12550] BTRFS error (device loop5): cannot disable free-space-tree [ 820.941350][T12550] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 820.963071][T12550] BTRFS error (device loop5): open_ctree failed: -22 [ 821.326124][T12557] loop3: detected capacity change from 0 to 4096 [ 821.394666][T12557] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 821.475536][T12557] ntfs3(loop3): ino=3, mi_enum_attr [ 821.485534][ T5844] uclogic 0003:5543:0781.001E: item fetching failed at offset 4/5 [ 821.535995][ T5844] uclogic 0003:5543:0781.001E: parse failed [ 821.547509][ T5844] uclogic 0003:5543:0781.001E: probe with driver uclogic failed with error -22 [ 821.639658][ T5844] usb 1-1: USB disconnect, device number 18 [ 823.124148][ T30] audit: type=1326 audit(1770637088.492:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="syz.3.2776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240df9af79 code=0x0 [ 824.215631][T12591] loop6: detected capacity change from 0 to 512 [ 824.434283][T12591] EXT4-fs error (device loop6): __ext4_iget:5426: inode #11: block 1: comm syz.6.2782: invalid block [ 824.519753][T12591] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2782: couldn't read orphan inode 11 (err -117) [ 824.660537][T12591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.301371][ T9844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.715373][T12604] netlink: 'syz.0.2788': attribute type 3 has an invalid length. [ 826.985072][T12625] loop3: detected capacity change from 0 to 64 [ 827.555751][ T1134] kworker/u8:7: attempt to access beyond end of device [ 827.555751][ T1134] loop3: rw=8388609, sector=65, nr_sectors = 1 limit=64 [ 827.579512][ T1134] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 827.759976][ T1134] kworker/u8:7: attempt to access beyond end of device [ 827.759976][ T1134] loop3: rw=8388609, sector=66, nr_sectors = 1 limit=64 [ 827.775306][ T1134] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 827.901411][ T1134] kworker/u8:7: attempt to access beyond end of device [ 827.901411][ T1134] loop3: rw=8388609, sector=67, nr_sectors = 1 limit=64 [ 827.918946][ T1134] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 828.011914][ T1134] kworker/u8:7: attempt to access beyond end of device [ 828.011914][ T1134] loop3: rw=8388609, sector=68, nr_sectors = 1 limit=64 [ 828.029120][ T1134] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 828.142171][ T1134] kworker/u8:7: attempt to access beyond end of device [ 828.142171][ T1134] loop3: rw=8388609, sector=72, nr_sectors = 1 limit=64 [ 828.161971][ T1134] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 828.204334][ T1134] kworker/u8:7: attempt to access beyond end of device [ 828.204334][ T1134] loop3: rw=8388609, sector=73, nr_sectors = 1 limit=64 [ 828.224541][ T1134] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 828.324552][ T1134] kworker/u8:7: attempt to access beyond end of device [ 828.324552][ T1134] loop3: rw=8388609, sector=76, nr_sectors = 1 limit=64 [ 828.344490][ T1134] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 828.422596][ T1134] kworker/u8:7: attempt to access beyond end of device [ 828.422596][ T1134] loop3: rw=8388609, sector=77, nr_sectors = 1 limit=64 [ 828.442572][ T1134] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 828.549295][ T1134] kworker/u8:7: attempt to access beyond end of device [ 828.549295][ T1134] loop3: rw=1, sector=78, nr_sectors = 28 limit=64 [ 828.622877][ T5782] INFO: The task syz-executor:5782 has been waiting for writeback completion for more than 1 seconds. [ 828.623034][ T5782] INFO: The task syz-executor:5782 has been waiting for writeback completion for more than 1 seconds. [ 828.670072][ T5782] INFO: The task syz-executor:5782 has been waiting for writeback completion for more than 1 seconds. [ 828.838671][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 829.112925][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 829.127603][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 829.138155][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.236072][ T24] usb 5-1: config 0 descriptor?? [ 829.821184][ T24] hid-picolcd 0003:04D8:C002.001F: collection stack underflow [ 829.829346][ T24] hid-picolcd 0003:04D8:C002.001F: item 0 1 0 12 parsing failed [ 830.023071][ T24] hid-picolcd 0003:04D8:C002.001F: device report parse failed [ 830.033193][ T24] hid-picolcd 0003:04D8:C002.001F: probe with driver hid-picolcd failed with error -22 [ 830.148890][ T24] usb 5-1: USB disconnect, device number 18 [ 830.706960][T12660] netlink: 'syz.6.2814': attribute type 3 has an invalid length. [ 831.248326][T10969] Bluetooth: hci3: command 0x0406 tx timeout [ 831.871865][T12675] tipc: Started in network mode [ 831.877047][T12675] tipc: Node identity e0000001, cluster identity 4711 [ 831.887372][T12675] tipc: Enabling of bearer rejected, failed to enable media [ 832.031543][T12677] loop3: detected capacity change from 0 to 16 [ 832.104068][T12677] erofs (device loop3): mounted with root inode @ nid 36. [ 832.413845][T12682] loop4: detected capacity change from 0 to 512 [ 832.521755][T12682] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 832.634438][T12682] EXT4-fs (loop4): 1 truncate cleaned up [ 832.747138][T12682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.992119][ T30] audit: type=1800 audit(1770637098.362:117): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2824" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 833.502413][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.608974][T12708] loop0: detected capacity change from 0 to 128 [ 838.109318][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 838.308790][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 838.410066][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 838.419567][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.427811][ T24] usb 4-1: Product: syz [ 838.432387][ T24] usb 4-1: Manufacturer: syz [ 838.440336][ T24] usb 4-1: SerialNumber: syz [ 838.551744][ T35] ===================================================== [ 838.561115][ T35] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 838.570219][ T35] n_tty_receive_buf_standard+0xe7b/0xc820 [ 838.576575][ T35] n_tty_receive_buf_common+0x1a59/0x2610 [ 838.582945][ T35] n_tty_receive_buf2+0x4c/0x60 [ 838.588467][ T35] tty_ldisc_receive_buf+0xc6/0x2c0 [ 838.594320][ T35] tty_port_default_receive_buf+0xd7/0x1a0 [ 838.600872][ T35] flush_to_ldisc+0x43e/0xe40 [ 838.611864][ T35] process_scheduled_works+0xae7/0x1d60 [ 838.617859][ T35] worker_thread+0x1741/0x1de0 [ 838.623611][ T35] kthread+0xd5a/0xf00 [ 838.628126][ T35] ret_from_fork+0x207/0x6f0 [ 838.633112][ T35] ret_from_fork_asm+0x1a/0x30 [ 838.638650][ T35] [ 838.641211][ T35] Uninit was stored to memory at: [ 838.650021][ T35] n_tty_receive_buf_standard+0xe74/0xc820 [ 838.656716][ T35] n_tty_receive_buf_common+0x1a59/0x2610 [ 838.667098][ T35] n_tty_receive_buf2+0x4c/0x60 [ 838.672848][ T35] tty_ldisc_receive_buf+0xc6/0x2c0 [ 838.678768][ T35] tty_port_default_receive_buf+0xd7/0x1a0 [ 838.685039][ T35] flush_to_ldisc+0x43e/0xe40 [ 838.693715][ T35] process_scheduled_works+0xae7/0x1d60 [ 838.700514][ T35] worker_thread+0x1741/0x1de0 [ 838.705853][ T35] kthread+0xd5a/0xf00 [ 838.710661][ T35] ret_from_fork+0x207/0x6f0 [ 838.716158][ T35] ret_from_fork_asm+0x1a/0x30 [ 838.721802][ T35] [ 838.724279][ T35] Uninit was created at: [ 838.729283][ T35] __kmalloc_noprof+0xae9/0x1bf0 [ 838.734602][ T35] __tty_buffer_request_room+0x3d4/0x7a0 [ 838.740819][ T35] __tty_insert_flip_string_flags+0x157/0x6e0 [ 838.750477][ T35] uart_insert_char+0x368/0x930 [ 838.755572][ T35] serial8250_read_char+0x1ba/0x670 [ 838.762840][ T35] serial8250_handle_irq+0x930/0x1110 [ 838.768567][ T35] serial8250_default_handle_irq+0x116/0x370 [ 838.774950][ T35] serial8250_interrupt+0xcb/0x420 [ 838.780553][ T35] __handle_irq_event_percpu+0x118/0xed0 [ 838.786430][ T35] handle_irq_event+0xe0/0x2a0 [ 838.791526][ T35] handle_edge_irq+0x2a9/0xb30 [ 838.796802][ T35] __common_interrupt+0x9d/0x180 [ 838.802359][ T35] common_interrupt+0x94/0xb0 [ 838.807266][ T35] asm_common_interrupt+0x2b/0x40 [ 838.812860][ T35] [ 838.815492][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 838.827410][ T35] Tainted: [L]=SOFTLOCKUP [ 838.832042][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 838.842426][ T35] Workqueue: events_unbound flush_to_ldisc [ 838.850832][ T35] ===================================================== [ 838.857903][ T35] Disabling lock debugging due to kernel taint [ 838.865235][ T35] Kernel panic - not syncing: kmsan.panic set ... [ 838.871851][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 838.883399][ T35] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 838.889129][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 838.899353][ T35] Workqueue: events_unbound flush_to_ldisc [ 838.905416][ T35] Call Trace: [ 838.908828][ T35] [ 838.911887][ T35] __dump_stack+0x26/0x30 [ 838.916430][ T35] dump_stack_lvl+0x50/0x1c0 [ 838.921236][ T35] ? dump_stack+0x12/0x25 [ 838.925820][ T35] dump_stack+0x1e/0x25 [ 838.930215][ T35] vpanic+0x435/0xd40 [ 838.934449][ T35] panic+0x15d/0x160 [ 838.938613][ T35] kmsan_report+0x31a/0x320 [ 838.943473][ T35] ? ktime_get_mono_fast_ns+0x54b/0x590 [ 838.949369][ T35] ? __msan_warning+0x1b/0x30 [ 838.954292][ T35] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 838.960534][ T35] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 838.966687][ T35] ? n_tty_receive_buf2+0x4c/0x60 [ 838.971955][ T35] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 838.977564][ T35] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 838.983779][ T35] ? flush_to_ldisc+0x43e/0xe40 [ 838.988842][ T35] ? process_scheduled_works+0xae7/0x1d60 [ 838.994827][ T35] ? worker_thread+0x1741/0x1de0 [ 839.000008][ T35] ? kthread+0xd5a/0xf00 [ 839.004426][ T35] ? ret_from_fork+0x207/0x6f0 [ 839.009428][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 839.014609][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 839.019893][ T35] ? rpm_suspend+0xa4/0x2640 [ 839.024716][ T35] ? kmsan_get_metadata+0x146/0x160 [ 839.030235][ T35] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 839.036916][ T35] ? kmsan_get_metadata+0x146/0x160 [ 839.042778][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.048882][ T35] ? n_tty_receive_char+0x1223/0x14f0 [ 839.054904][ T35] ? __wake_up+0x29d/0x2f0 [ 839.059563][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 839.064948][ T35] __msan_warning+0x1b/0x30 [ 839.069711][ T35] n_tty_receive_buf_standard+0xe7b/0xc820 [ 839.075920][ T35] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 839.082268][ T35] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 839.088872][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 839.094264][ T35] ? advisor_target_scan_time_store+0x100/0x180 [ 839.100803][ T35] n_tty_receive_buf_common+0x1a59/0x2610 [ 839.106779][ T35] ? finish_task_switch+0x141/0x8b0 [ 839.112594][ T35] n_tty_receive_buf2+0x4c/0x60 [ 839.117928][ T35] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 839.124002][ T35] tty_ldisc_receive_buf+0xc6/0x2c0 [ 839.129704][ T35] tty_port_default_receive_buf+0xd7/0x1a0 [ 839.135795][ T35] flush_to_ldisc+0x43e/0xe40 [ 839.140727][ T35] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 839.147461][ T35] ? __pfx_flush_to_ldisc+0x10/0x10 [ 839.153078][ T35] process_scheduled_works+0xae7/0x1d60 [ 839.159081][ T35] worker_thread+0x1741/0x1de0 [ 839.164247][ T35] kthread+0xd5a/0xf00 [ 839.168506][ T35] ? __pfx_worker_thread+0x10/0x10 [ 839.173900][ T35] ? __pfx_kthread+0x10/0x10 [ 839.178702][ T35] ret_from_fork+0x207/0x6f0 [ 839.183547][ T35] ? __switch_to+0x521/0x750 [ 839.188441][ T35] ? __pfx_kthread+0x10/0x10 [ 839.193237][ T35] ret_from_fork_asm+0x1a/0x30 [ 839.198267][ T35] [ 839.202047][ T35] Kernel Offset: disabled [ 839.206462][ T35] Rebooting in 86400 seconds..