last executing test programs: 2m53.319698476s ago: executing program 4 (id=18): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x12080000) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, 0x0, 0x0, 0x0) 2m53.081275288s ago: executing program 4 (id=21): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2800810, &(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=0x0], 0x3, 0x171, &(0x7f0000000100)="$eJzs2zGLE0EUB/C3l0RPba4WiwUbq6BWloqcIC4oyhZaKZw2d3LgNatV8JPY+uEEueoKYeQcTTRsMBDXDcnv1+SFPxPehJ0dZmFfXnt7eHB88ub4yWnsFkUM70YZZ0XsxU4MIpsEALBJzlKKr2n062tKqd9+AIDu5f0/pXRxEpc+2f8BYBv8df+/01NjAEBnnP8BYPs8e/7i0b2q2n9alrsRXyZN3dT5M+cPHlb7N8sf9majTpumHkzzWzkv/8xHcflnfrs1vxA3ruf8PLv/uJrLr8RB99MHAACArTAup1rP9+PxojxXvz0fmJ3fz4fWw7g6/H/zAACWd/L+w+Gro6PX7za8GK1HG4rWYmel6/BbSmkuKpYY/vFzXgLr8if806KIiNV+p+87E9C12aLvuxMAAAAAAAAAAAAAAGCRbt9GGvQ9PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj1PQAA//9kAUaX") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff", 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2m52.694672499s ago: executing program 4 (id=24): r0 = timerfd_create(0x7, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000027c0)=[{r1, 0x1040}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.374191445s ago: executing program 4 (id=27): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 2m51.797664945s ago: executing program 4 (id=32): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x6088, &(0x7f0000000340)={0x0, 0x6273, 0x8, 0x0, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x6, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 2m50.837335736s ago: executing program 4 (id=37): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@type={'type', 0x3d, "e6c0539c"}}]}, 0x1, 0x5e6, &(0x7f0000001940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) mknodat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x6) rename(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 2m50.216415268s ago: executing program 32 (id=37): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@type={'type', 0x3d, "e6c0539c"}}]}, 0x1, 0x5e6, &(0x7f0000001940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) mknodat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x6) rename(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 9.061242286s ago: executing program 2 (id=1303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.722538103s ago: executing program 0 (id=1346): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0xfffffffc}) setrlimit(0x40000000000008, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4.571943671s ago: executing program 0 (id=1348): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfb, 0x2, 0x7fff7ffc}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.551012074s ago: executing program 0 (id=1355): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) 3.233302461s ago: executing program 2 (id=1359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.006833463s ago: executing program 0 (id=1363): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x1, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 2.899111419s ago: executing program 5 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.749810816s ago: executing program 5 (id=1366): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x4160}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0x80000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0xb7a}, {0x0, 0x3, 0x7}, {}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x3}]}]}}}]}, 0x11c}}, 0x0) 2.719855998s ago: executing program 3 (id=1367): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) pread64(r0, &(0x7f0000000580)=""/245, 0xf5, 0x200000000005) 2.630345133s ago: executing program 3 (id=1368): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000008c0)={r2, 0x81, 0x6, 0x1}, 0x10) 2.524164048s ago: executing program 5 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.523778218s ago: executing program 1 (id=1370): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.456155092s ago: executing program 5 (id=1371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x4, 0x701, 0x2, 0x40000006, 0x0, 0x7, 0x9}, 0x0, 0x0, 0x0) 2.396078424s ago: executing program 3 (id=1372): syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x4}) 2.240988833s ago: executing program 5 (id=1373): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x1, 0x4}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) 2.238767823s ago: executing program 2 (id=1374): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x3000000, &(0x7f0000000180)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "851aa049"}}, {}, {@part={'part', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x6}}, {@force}, {}, {@nls={'nls', 0x3d, 'cp861'}}]}, 0x44, 0x70b, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000064c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2052, 0x0, 0xfc, 0x0, &(0x7f00000064c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0xa8) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.068900592s ago: executing program 5 (id=1375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 1.975666937s ago: executing program 2 (id=1376): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.829755764s ago: executing program 3 (id=1377): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x14c, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x401}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.652069094s ago: executing program 1 (id=1378): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto(r0, 0x0, 0x3f, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) 1.590061057s ago: executing program 3 (id=1379): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1010008, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000a80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknod(&(0x7f0000000100)='./file1\x00', 0x1, 0x0) 1.416133216s ago: executing program 1 (id=1380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 1.252101744s ago: executing program 0 (id=1381): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xb000000d}) 1.219908796s ago: executing program 2 (id=1382): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000300)={0x0, 0x17, 0x49, "fada9f037c5e111d9e702d4b5f8e0f21a5980a37acfa1a6c6b25c794b4164d9bbb2627ce275cc881c1108a912e31d0429efb45f800e00d4d94617aee7656ac12a4d1d3fad5f2d55789"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.14101744s ago: executing program 1 (id=1383): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x84, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 929.562911ms ago: executing program 0 (id=1384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001080)={0x0, 0xfffffe00}, &(0x7f00000010c0)=0x8) 802.188228ms ago: executing program 1 (id=1385): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 569.4861ms ago: executing program 3 (id=1386): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$eJzs3M1rI2UYAPAn7Xa7X65FPHjbgUVoYRM23Q/0VnUXP7BLWfXgSdMkDdlNMqVJ09qTB4/iwf9EFDx59G/w4NmbeFC8CUpmJrpdFVybtN3294PJM/PmnWeeN5TCMxMSwKm1kPz6cykux/mImI2ISxHZfqnYMit5eCEirkTEzCNbqRj/c+BsRFyIiMtxbnx6qXjr82vDq7d+euuXb76bP3Pxi6+/P5IFA8fCixHR3cz3d7p5TFt5fFCM14btLHZvDouYv9F9WBynedxprmcZdmrjebUs3mjl89PN7f4obnRq9VFstTey8c1efsH+sDXOk53woLaVHTea61ls99Mstvbyunb38v+Xe/1BnqdR5PsoSx+DwTjm483dZr6ezYdZrPcGxXieN200d0dxWMTiclFPO42sjvWDfNLH29vt3vZuMmxu9dtpL7lVqb5Uqd4uV7fSRnPQvFmudRu3byaLrc5oWnnQrHVXWmna6jQr9bS7lCy26vVytZos3mmut2u9pFqt3KhcL99aKvauJa/fey/pNJLFUXy13dsetDv9ZCPdSvIzlpLlyo2Xl5Kr1eSd1bVk7f7du6tr735w5/17r6y++Vox6W9lJYvL15eXy9Xr5eXq0ila/ydF0RNcPxxI6cmmz0+rDoCnyBT7/4iFPKf+H3jc9Pr/rfsR0+//Q/8/EU9V/3va+/8prB8O5An7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATo4f5r58I9tZyI8vFuPPFEPPFceliJiJiN//wWyc3Zdztsgz9y/z5x6r4dtSZBlG15gvtgsRsVJsvz077U8BAAAATq6vPr7yWd6t5y8LR10Qhym/aTNz6cMJ5StFxNzCjxPKNjN6eX5CybK/7zOxO6Fs2Q2scxNKlt9yOzOpbP/J7L5w7pFQysPMoZYDAAAciv2dwOF2IQAAABymT4+6AI5GKcaPMsfPgrNv3v/1QPD8viMAAADgKM3/v9NKk64DAAAAOHay/t/v/wEAAMDJlv/+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO3eUozQQxwH435YKikZifDTxKPoGx/AIPvpoOICX4Ah4BS/AGfDNIxjY0OmSZcNudtNp2d18X9IO0ww/Zgg8zEwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp7/1evH75+dfXXN2+27yjAYAAAA4Z1uvF82LWapP2+fv2kcf2noREWVEnJu7V/HqJLOKiE8RUd/Rvr7Vhz8RTcLhM8bt9SYivrbX//d9fwsAAADwcm2Wq3marafb7NIdYkhp0aZ8+y1TXhER9exfprTykPcxU1jz+x7Fj0xpzQLWJFNYWnIb5Up7kObvfly1m9woilSU978/29gBAIABVSfFsLMQAAAAhvT9cPty6V7QXfW45kVcb2UetwLHqWi3916f1AAAAIBnqLh0BwAAAIDeNfP/vs7/mzr/DwAAAJ6EdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdrW68VmuZp3zdntu8kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J/fDIhhKIqjd2Yy/75V9r/YuqS6hCrnEH7yJDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABu5H/EY50zXo0tyUjybLx7PZN8Omp8O2r8+mCuD8e8cCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2bmf1ziqOADgb2Z2tmlVXKPkEBELHvRi021t7U08KMGDf4IQ0m2N3fqjzcGWIuTiTXLuRfQoIijx1v+h5xZ6qbcecqjguTK/kpc04KpkZtP9fODN+84wmfd9sxDynTdZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYY/v93TgrNoMqTutj9x7fWi36+/v6wp3NB4tFK+KkzaSPhtfinWQh2plrPxkAAABmQ9bU9yGEh/nWctGng7L+z5tzipr/hxequKnn99f9Td/U/kX7/bdHr+wMNKjGKS56aW08Ov10Kr3Dm+V0e/Efz+iVd7589pKVH0j60cbL23l5P5Pv7t79oF+Gx9rIFgD4L041fR00fw8V/bDLxACYGb2o8G7q/2zQbU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbdjeCM81cRJCWOztxoX7j2+tHtTf2Xyw2LTzt29vxtcsLpGHEC6tjUenw1yLs5lu12/cvLIyHo+utR+8HkLoavT36ulf+WSCk0M4pDROdnTnZyxI6w97WvI5GkGHv5QAAHgm5XUr6vqH+dZycSyZD+HJj3vr/zejOExY/z/69Py9eKy4/h+2NsPpt7R+9cul6zduvr12deXy6PLo83fODN8dnr1w7tyFpfJZSbXtOk0AAACOsH7d4vo/nX96/f9EFIcJ6/+vvh9+E4+Vqf8PtLvo13UmAAAAs+2lk3/9mRxwPOn3w9cr6+vXhtV2Z/9Mte0g1X/tWN3i+j+b7zorAAAAoA3bG8me9f+LURwmXP9//qdXf4mvmYUQjtfr/6dWvxhfbG86U+1//Idw6E34413PEQAAgHY92fciw/G6xev/efn+f7pzZhpCeOuNKq6/BnCi+j/78Nuf47Hi9//PHvI8p126UN2Psl8IobfQdUYAAAA8y+bKNijr/z/yreXPfj3xcd/7/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABt+zsAAP//RP895g==") io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='i', 0xa3a, 0xa00}]) 568.73052ms ago: executing program 1 (id=1387): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x2141, 0x59) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 0s ago: executing program 2 (id=1388): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB='utf8,gid=', @ANYRESDEC=r0, @ANYBLOB=',iocharset=maccyrillic,discard,discard,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x153f, &(0x7f0000006200)="$eJzs3AucTtX6OPDnWWvtMSTeJrkMa61n8yaXZZIklyS5JEmSJLklJE1yJCExhCQNSUguQxJDSC4Tk8b9fr8kJEmTJCG5Jev/meSjTp3/uXVyfmee7+ezP7Oed+9n7bXf592z195z+brr0FpNaldvRETwb8ELX5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9ezthf6z7Uy/3CNjlxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2aZpha7iJfsu/Pw/O+Pr//+QzDJjP19T5ppuADH/aArXP3vj+v/PCv6Rjbj+2RvXP7uKvdwDYP8F+PzPDnL8zTVc/+yN689Ydna5nz9f7gUi/2XvwZGcFwrzZx0/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2JzjtL1EAcLF9ucfFGGOMMcYYY4yxP47PcblHwBhjjDHGGGOMsf88BAESFAQQAzkgFnJCLhAAcCXkgbwQgasgDq6GfHAN5IcCUBAKQTwUhiKgwYAFghCKQjGIwrVQHK6DElASSkFpcFAGEuB6KAs3QDm4EcrDTVABboaKUAkqQxW4BarCrVANboPqcDvUgJpQC2rDHVAH7oS6cBfUg7uhPtwDDeBeaAj3QSO4HxrDA9AEHoSm8BA0g+bQAlpCq38p/1noCc9BL+gNSdAH+sLz0A/6wwB4AQbCizAIXoLB8DIkwxAYCq/AMHgVhsNrMAJGwih4HUbDGzAGxsI4GA8pMAEmwpswCd6CyfA2TIGpkArTYDq8AzNgJsyCd2E2vAdzYC7Mg/mQBu/DAlgI6fABLIIPIQMWwxJYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgK22A77ICPYCd8DLtgN+yBT2AvfPpP5p/6q/xuCAgoUKBChTEYg7EYi7kwF+bG3JgH82AEIxiHcZgP82F+zI8FsSDGYzwWwSJo0CAhYVEsilGMYnEsjiWwBJbCUujQYQImYFm8ActhOSyP5bECVsCKWAkrYRWsglWxKlbDalgdq2MNrIG1sBbegXdgn4tPpLA+1r/4eAobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AETMRE7YkfshJ2wM3bGLtgFu2JX7IbdsXvmszkAn8PnsDfWEH2wL/bFfpicYwC+gC/gizgIX8KX8GVMxiE4FF/BV/BVHI4ncQSOxFE4CquKN3AMjkUS4zEFU3AiTsRJOAmzBvo2TsVUnIbTcTrOwJk4E9/F2fgevodzcS7OxzRMwwW4ENMxHRfhKczAxbgEl+IyXI7LcCWuwpW4BtfiGlyP63EjbsTNuBm34lbcjtvxI1QA+DHuxt2YjHtxL+7Dfbgf9+MBPICZmIkH8SAewkN4GA/jETyCR/EYHsdjeAJP4Ek8hafxNJ7Fs3gOn47/svFHJVcng8iihBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQT+UR+kV8UFAVFvIgXRUQRYYQRJMIYABBRERXFRXFRQpQQpUQp4YQTCSJBlBVlRTlRTpQXN4kK4mZRUVQSbV0VUUVUFe1cNXGbqC6qixqipqglaovaoo6oI+qKuqKeqCfqi/qigbhXNBR9cADeL7Iq00QMwaZiKDYTzYX8+YPSWgzHNqKtaCceFSNxBHYQrV2ieEJ0FGOwk/iLGItPiS5iPHYVz4huorvoIZ4VPUUb10v0FpOxj+grpmI/0V8MEC+IGVhTvIuzc9YSL4tkMUQMFa+I+fiqGC5eEyPESDFKvC5GizfEGDFWjBPjRYqYICaKN8Uk8ZaYLN4WU8RUkSqmieniHTFDzBSzxLtitnhPzBFzxTwxX6SJ98UCsVCkiw/EIvGhyBCLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDvGR2Ck+FrvEbrFHfCL2ik/FPvGZ2C8+FwfEFyJTfCkOiq/EIfG1OCy+EUfEt+KoOCaOi+/ECfG9OClOidPijDgrfhDnxI/ivPACJEohpVQykDEyh4yVOWUueYXMLYOf392rZJy8WuaT18j8soAsKAvJeFlYFpFaGmklyVAWlcVkVF4ri8vrZAlZUpaSpaWTZWSCvF6WlTfIcvJGWV7eJCvIm2VFWUlWllXkLbKqvFVC5MI+asiaspasLe+QSXCnrJt10su7ZX15j2wg75UN5X2ykbxfNpYPyCbyQdlUPiSbyeayhWwpW8mHZWv5iGwj28p28lHZXj4mO8jHZaJ8QnaU/uePyFOyi3xadpXPyG6yu+whf5TnpZe9ZG8JfUD2lc/LfrK/HBCbtd8X5SD5khwsX5bJcogcKl+Rw+Srcrh8TY6QI+Uo+bocLd+QY+RYOU6Olylygpwo35ST5FtysnxbTpFTZaqcJgfIgT/1NEvKv5v/5u/kD/5p7xvlJrlZbpFb5Ta5Xe6QH8mdcqfcJXfJPXKP3Cv3yn1yn9wv98sD8oDMlJnyoDwoD8lD8rA8LI/II/KoPCbPyO/kCfm9PClPyVPyjDwrz8pzP78HoFAJJZVSgYpROVSsyqlyqStUbnWlyqPyqoi6SsWpq1U+dY3KrwqogqqQileFVRGllVFWkQpVUVVMRdW1+PMHRpVSpZVTZVSCuv6fyVfF1XWqhCr5q/yL40v6G+NrpVqp1qq1aqPaqHaqnWqv2qsOqoNKVImqo+qoOqlOqrPqrLqoLqqr6qq6qW6qh+qheqqeqpfqpZJUkuqrnlf9VH81QL2gBqoX1SA1SA1Wg1WySlZD1VA1TA1Tw9VwNUKNUKPUKDVajVZj1Bg1To1TKSpFTVQT1SQ1SU1Wk9UUNUWlqlQ1XU1XM9QMNUvNUrPVbDVHzVHz1DyVptLUArVApat0tUgtUhlqsVqslqqlarlarlaqlWq1Wq3WqrVqvVqvMtQmtUltUVvUNrVN7VA71E61U+1Su9QetUftVXvVPrVP7Vf71QF1QGWqTHVQHVSH1CF1WB1WR9QRdVQdVcfVcXVCnVAn1Ul1Wp1WZ9VZdU6dU+fV+axpXyACEahABTFBTBAbxAa5glxB7iB3kCfIE0SCSBAXxAX5gmuC/EGBoGBQKIgPCgdFAh2YwAbi56JHg2uD4sF1QYmgZFAqKB24oEyQEFwflA1uCMoFNwblg5uCCsHNQcWgUlA5qBLcElQNbg2qBbcF1YPbgxpBzaBWUDu4I6gT3BnUDe4K6gV3B/WDe4IGwb1Bw+C+oFFwf9A4eCBoEjwYNA0eCpoFzYMWQcug1R/av/cnCzzieuneOkn30X3187qf7q8H6Bf0QP2iHqRf0oP1yzpZD9FD9St6mH5VD9ev6RF6pB6lX9ej9Rt6jB6rx+nxOkVP0BP1m3qSfktP1m/rKXqqTtXT9HT9jp6hZ+pZ+l09W7+n5+i5ep6er9P0+3qBXqjT9Qd6kf5QZ+jFeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h/5I79Qf6116t96jP9F79ad6n/5M79ef6wP6C52pv9QH9Vf6kP5aH9bf6CP6W31UH9PH9Xf6hP5en9Sn9Gl9Rp/VP+hz+kd9XvusyX3W5d0oo0yMiTGxJtbkMrlMbpPb5DF5TMRETJyJM/lMPpPf5DcFTUETb+JNEVPEZCFDpqgpaqImaoqb4qaEKWFKmVLGGWcSTIIpa8qacqacKW/KmwqmgqloKprKprK5xdxibjW3mtvMbeZ2c7upaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpZpqZFqaFaWVamdamtWlj2ph2pp1pb9qbDqaDSTSJpqPpaDqZTqaz6Wy6mC6mq+lquplupofpYXqanqaX6WWSTJLpa/qafqafGWAGmIFmoBlkBpnBZrBJNslmqBlqhplhZrgZbkaYkWZU1jXLvGHGmLFmnBlvUkyKmWgmmklmkplsJpspZopJNalmupluZpgZZpaZZWab2WaOmWPmmXkmzaSZBWaBSTfpZpFZZDJMhllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSaTHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02Bn6+X3sTanDaXvcLmtlfaPDav/eu4oC1k421hW8Rqm98W+FVsrLUlbElbypa2zpaxCfb638QVbSVb2Vaxt9iq9lZb7TdxHXunrWvvsvXs3ba2veNCnDX7tXfb+vYe28A+aBsiAtjmtrFtaZvYB21T+5BtZpvbFralbW8fsx3s4zbRPmE72id/Ey+wC+0qu9qusWvtLrvbnrZn7CH7tT1rf7C9bG870L5oB9mX7GD7sk22Q34Tj7Kv29H2DTvGjrXj7PjfxFPsVJtqp9np9h07w878TZxm37ezbbqdY+faeXb+T3HWmNLtB3aR/dBm2ACW2KV2mV1uV9iVF8fq89r1doPdaHfaj+0Wu9Vus9vtjosTYbvb7rGf2L32U3vQfmX328/tAXvYZtovf4qzju+w/cYesd/ao/aYPW6/syfs9+pidtaxf2d/tOett0BIQJIUBRRDOSiWclIuuoJy05WUh/JShK6iOLqa8tE1lJ8KUEEqRPFUmIqQJkOWiEIqSsUoStfSxeGVotLkqAwl0PVUlm6gcnQjlaebqALdTBWpElWmKnQLVaVbqRrdRtXpdqpBNakW1aY7qA7dSXXpLqpHd1N9uoca0L3UkO6jRnQ/NaYHqAk9SE3pIWpGzakFtaRW9DC1pkeoDbWldvQotafHqAM9Ton0BHWkJ6kT/YU601PUhZ6mrvQMdaPu1IOepZ70HPWi3pREfagvPU/9qD8NoBdoIL1Ig+glGkwvUzINoaH0Cg2jV2k4vUYjaCSNotdpNL1BY2gsjaPxlEITaCK9SZPoLZpMb9MUmkqpNI2m0zs0g2bSLHqXZtN7NIfm0jyaT2n0Pi2ghZROH9Ai+pAyaDEtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO+oh20se0i3bTHvqE9tKntI8+o/30OR2gLyiTvqSD9BUdoq/pMH3je9O3dJSO0XH6jk7Q93SSTtFpOkNn6Qc6Rz/SefIEIYYilKEKgzAmzBHGhjnDXOEVYe7wyjBPmDeMhFeFceHVYb7wmjB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbDa8Pi4XVhibBkWCosHbqwTJgQXh+WDW8Iy4U3huXDm8IK4c1hxbBS+ODdVcJbwqrhrWG18Lawenh7WCOsGdYKa4d3hHXCO8O64V1hvfDusFx4T9ggvDdsGN4XNgrvDxuHD4RNwgfDpuFDYbOwedgibBm2Ch8OW4ePhG3CtmG78NGwffhY2CF8PEwMnwg7hk/+tP6ehX97fVLYJ+wbPh8+H3p/l5wXnR9Ni74fXRBdGE2PfhBdFP0wmhFdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vnYOcOiEk065wMW4HC7W5XS53BUut7vS5XF5XcRd5eLc1S6fu8bldwVcQVfIxbvCrojTzjjryIWuqCvmou5aV9xd50q4kq6UK+2cK+MSXEvXyrVyrd0jro1r69q5R92j7jH3mHvcPe6ecB3dk66T+4vr7J5yXdzT7mn3jOvmurse7lnX003Ic+GcTHJ9XV/Xz/VzA9wAN9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3BSX6lLddDfdzXAzXNWZF/Yyx81x89w8l+bS3AKXNWdMd4vcIpfhMtwSt8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/dCp26v2+f2uf1uvzvgvnCZ7kt30H3lDrmv3WH3jTvivnVH3TF33H3nTrjv3Ul3yp12Z9xZ94M753505513KZEJkYmRNyOTIm9FJkfejkyJTI2kRqZFpkfeicyIzIzMirwbmR15LzInMjcyLzI/khZ5P7IgsjCSHvkgsijyYSQjsjiyJLI0siyyPOJ94S2hL+qL+ai/1hf31/kSvqQv5Ut758v4BH+9L+tv8OX8jb68v8lX8Df7ir6Sr+wf8s18c9/Ct/St/MO+tX/Et/FtfTv/qG/vH/Md/OM+0T/hO/onfSf/F9/ZP+W7+Kd9V/+M7+a7+x7+Wd/TP+d7+d4+yffxff3zvp/v7wf4F/xA/6If5F/yg/3LPtkP8UP9K36Yf9UP96/5EX6kHxXzuh998RYZxvsUP8FP9G/6Sf4tP9m/7af4qT7VT/PT/Tt+hp/pZ/l3/Wz/np/j5/p5fr5P8+/7BX6hT/cf+EX+Q5/hF198qOxX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/E7/sd/ld/s9/hO/13/q9/nP/H7/uT/gv/CZ/kt/0H/lD/mv/WH/jT/iv/VH/TF/3H/nT/jv/Ul/yp/2Z/xZ/4M/53/05/+Jv1nDf3RDxhhjjLH/QRMuNcWv11yYJfX5nRzxi437AsCVWwtl/nJ91oxyXf4L7f4ivn0EAJ7o3fX+i0uNGklJSQD+p0mb90GxuQAXfxKUJQYuxYuhHTwGidAWyv7u+PuL7mfp9/v/SYaEIHoTQK5f5MTCpfhS/58BYNLv9P/wo6MWVAhPx/1/+p8LUKLYpZyccCleDO1+er7SFsr9jfEXaP13xp/z8xSANr/IyQ2X4kvjT4BH4ElI/NWWjDHGGGOMMcbYBf1F5c4X7z8v/sbnX9/fZt2fx6tLOTngUvz37s9/ncUYY4wxxhhjjLHL4anuPR5/ODGxbed/vlHtX8r6hxtN4T/V8y8bC8/8x3fxf6XhPcDFVxQA/JsdAmQ15J95FJv/lH0l/3zq/PWqZWd8AP8dpfwjGpf5GxNjjDHGGGPsD3dp0v/r19XlGhBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYN/Rn/TuxyHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2uf2/AAAA///3YARK") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x3fffffff}}, 0x100) kernel console output (not intermixed with test programs): 32] BTRFS info (device loop2): enabling auto defrag [ 132.950549][ T5332] BTRFS info (device loop2): max_inline at 4096 [ 133.005700][ T5332] BTRFS info (device loop2): using free space tree [ 133.055573][ T5365] device veth0 entered promiscuous mode [ 133.091113][ T5364] device veth0 left promiscuous mode [ 133.504441][ T5395] loop0: detected capacity change from 0 to 512 [ 133.564114][ T5332] BTRFS info (device loop2): enabling ssd optimizations [ 133.600838][ T5395] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.636315][ T5395] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.853111][ T5395] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 133.902456][ T5412] loop3: detected capacity change from 0 to 1024 [ 133.934941][ T5395] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 133.992431][ T5395] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.306: Failed to acquire dquot type 0 [ 134.044320][ T5412] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.309: lblock 2 mapped to illegal pblock 2 (length 1) [ 134.086253][ T5412] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 134.133881][ T5412] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.309: lblock 0 mapped to illegal pblock 48 (length 1) [ 134.212983][ T5412] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 134.280153][ T5417] loop5: detected capacity change from 0 to 256 [ 134.290240][ T5412] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.309: Failed to acquire dquot type 0 [ 134.355555][ T5412] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 134.366772][ T4268] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.375601][ T5417] exfat: Deprecated parameter 'utf8' [ 134.405808][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 134.439834][ T5412] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.309: mark_inode_dirty error [ 134.576338][ T5417] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 134.596138][ T5412] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 134.657440][ T5412] EXT4-fs (loop3): 1 orphan inode deleted [ 134.663271][ T5412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.826883][ T4651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (4651) [ 134.991645][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 135.034251][ T11] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.090071][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 135.147914][ T5434] capability: warning: `syz.1.316' uses deprecated v2 capabilities in a way that may be insecure [ 135.158670][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 135.233636][ T4281] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 135.266044][ T4281] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 135.305691][ T4281] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 135.315179][ T5440] loop0: detected capacity change from 0 to 512 [ 135.375434][ T5440] EXT4-fs: Ignoring removed nobh option [ 135.423903][ T5440] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.483914][ T5440] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.562365][ T5445] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 135.590347][ T5440] EXT4-fs (loop0): 1 truncate cleaned up [ 135.613989][ T4350] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.653931][ T5440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.821597][ T4350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.851453][ T4350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.883045][ T4350] usb 6-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 135.911303][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.951287][ T4350] usb 6-1: config 0 descriptor?? [ 136.382236][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 136.411712][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.436000][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.459734][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.494026][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.509649][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.523478][ T5449] loop1: detected capacity change from 0 to 32768 [ 136.531828][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.539938][ T4350] hid-generic 0003:0B05:1AFE.0002: ignoring exceeding usage max [ 136.559035][ T5449] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 136.581176][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x5 [ 136.599885][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.621044][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.645687][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.661282][ T4350] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 136.683976][ T4350] hid-generic 0003:0B05:1AFE.0002: unexpected long global item [ 136.692440][ T4350] hid-generic: probe of 0003:0B05:1AFE.0002 failed with error -22 [ 136.744502][ T4350] usb 6-1: USB disconnect, device number 3 [ 136.950693][ T5470] loop0: detected capacity change from 0 to 512 [ 136.983555][ T5470] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.323: corrupted in-inode xattr [ 137.006939][ T5468] loop3: detected capacity change from 0 to 4096 [ 137.038735][ T5470] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.323: couldn't read orphan inode 15 (err -117) [ 137.193959][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.202887][ T5478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.256540][ T4651] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 137.418222][ T26] audit: type=1800 audit(1776501076.641:8): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.325" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 137.548234][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 137.610566][ T5486] netlink: 'syz.5.330': attribute type 10 has an invalid length. [ 139.743924][ T4312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.938494][ T4312] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 139.969619][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.024098][ T4312] usb 1-1: Product: syz [ 140.040826][ T4312] usb 1-1: Manufacturer: syz [ 140.059913][ T4312] usb 1-1: SerialNumber: syz [ 140.347227][ T4312] rtl8150 1-1:1.0: couldn't reset the device [ 140.359405][ T4312] rtl8150: probe of 1-1:1.0 failed with error -5 [ 140.401942][ T4312] usb 1-1: USB disconnect, device number 5 [ 141.246491][ T5577] loop3: detected capacity change from 0 to 4096 [ 141.373030][ T5581] loop0: detected capacity change from 0 to 1024 [ 141.479912][ T5558] loop1: detected capacity change from 0 to 32768 [ 141.644128][ T5558] XFS (loop1): Mounting V5 Filesystem [ 141.796463][ T5562] loop2: detected capacity change from 0 to 32768 [ 141.905419][ T5558] XFS (loop1): Ending clean mount [ 141.979474][ T5558] XFS (loop1): Quotacheck needed: Please wait. [ 142.062096][ T5558] XFS (loop1): Quotacheck: Done. [ 142.107558][ T4281] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 142.136733][ T4281] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 142.299213][ T4269] XFS (loop1): Unmounting Filesystem [ 143.068137][ T5629] loop5: detected capacity change from 0 to 512 [ 143.160661][ T5629] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 143.177575][ T4315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.254911][ T5629] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 143.380543][ T4315] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.412447][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.439919][ T4315] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.463057][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.513089][ T4315] usb 3-1: Product: syz [ 143.529259][ T4315] usb 3-1: Manufacturer: syz [ 143.543883][ T4315] usb 3-1: SerialNumber: syz [ 143.565499][ T4315] usb 3-1: config 0 descriptor?? [ 143.583223][ T5641] netlink: 128 bytes leftover after parsing attributes in process `syz.3.377'. [ 143.601991][ T4315] usb 3-1: selecting invalid altsetting 0 [ 143.621737][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 143.881173][ T4315] usb 3-1: USB disconnect, device number 5 [ 144.068004][ T5627] loop1: detected capacity change from 0 to 32768 [ 144.155665][ T5627] ERROR: (device loop1): diAllocAG: numfree > numinos [ 144.155665][ T5627] [ 144.168559][ T5627] ERROR: (device loop1): remounting filesystem as read-only [ 144.176862][ T5627] ialloc: diAlloc returned -5! [ 144.193461][ T5627] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 144.193461][ T5627] [ 144.326155][ T5651] loop3: detected capacity change from 0 to 4096 [ 144.341642][ T5651] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 144.361282][ T5655] vcan0: tx address claim with dest, not broadcast [ 144.972830][ T5666] loop5: detected capacity change from 0 to 1982 [ 145.045953][ T5666] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.078865][ T5666] NILFS (loop5): total number of segment blocks 1008 exceeds device size (991 blocks) [ 146.056547][ T5696] loop5: detected capacity change from 0 to 512 [ 146.074903][ T5680] loop0: detected capacity change from 0 to 40427 [ 146.094577][ T5696] EXT4-fs: Ignoring removed orlov option [ 146.119635][ T5680] F2FS-fs (loop0): invalid crc value [ 146.140314][ T5696] EXT4-fs (loop5): Test dummy encryption mode enabled [ 146.171077][ T5680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.196015][ T5685] syz.1.395 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.204207][ T5696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.275889][ T5696] EXT4-fs (loop5): 1 truncate cleaned up [ 146.281646][ T5696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 146.464444][ T5680] F2FS-fs (loop0): Start checkpoint disabled! [ 146.509697][ T5680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 146.619288][ T5706] loop2: detected capacity change from 0 to 2048 [ 146.810712][ T5712] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.950993][ T5712] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 146.999962][ T5712] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 147.077909][ T5712] Remounting filesystem read-only [ 147.165707][ T4268] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 147.371296][ T5696] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 147.395006][ T11] kworker/u4:1: attempt to access beyond end of device [ 147.395006][ T11] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 147.584838][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 147.747775][ T5735] loop5: detected capacity change from 0 to 64 [ 147.802400][ T5735] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 149.240858][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 149.306700][ T5755] loop0: detected capacity change from 0 to 32768 [ 149.362270][ T5755] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 149.714285][ T5772] TCP: TCP_TX_DELAY enabled [ 149.727452][ T5756] loop5: detected capacity change from 0 to 40427 [ 149.759111][ T4433] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 149.798439][ T5756] F2FS-fs (loop5): invalid crc value [ 149.854958][ T5756] F2FS-fs (loop5): Found nat_bits in checkpoint [ 150.054015][ T5756] F2FS-fs (loop5): Start checkpoint disabled! [ 150.103850][ T5756] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 150.172736][ T4275] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 150.182998][ T4275] CPU: 1 PID: 4275 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 150.190610][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.200713][ T4275] Workqueue: hci2 hci_rx_work [ 150.205499][ T4275] Call Trace: [ 150.208819][ T4275] [ 150.211793][ T4275] dump_stack_lvl+0x188/0x24e [ 150.216538][ T4275] ? show_regs_print_info+0x12/0x12 [ 150.221814][ T4275] ? load_image+0x400/0x400 [ 150.226384][ T4275] sysfs_create_dir_ns+0x26a/0x290 [ 150.231575][ T4275] ? sysfs_warn_dup+0xa0/0xa0 [ 150.236333][ T4275] ? do_raw_spin_unlock+0x11d/0x230 [ 150.241597][ T4275] kobject_add_internal+0x61c/0xcc0 [ 150.246858][ T4275] kobject_add+0x160/0x230 [ 150.251342][ T4275] ? kobject_init+0x1d0/0x1d0 [ 150.256083][ T4275] ? klist_children_get+0x50/0x50 [ 150.261158][ T4275] ? get_device_parent+0x121/0x3f0 [ 150.266305][ T4275] device_add+0x483/0xfb0 [ 150.270671][ T4275] ? kmem_cache_free+0xf7/0x290 [ 150.275575][ T4275] hci_conn_add_sysfs+0xd1/0x1e0 [ 150.280551][ T4275] le_conn_complete_evt+0x1062/0x1670 [ 150.285969][ T4275] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 150.292247][ T4275] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 150.297926][ T4275] ? skb_pull_data+0xf7/0x200 [ 150.302632][ T4275] hci_le_enh_conn_complete_evt+0x185/0x460 [ 150.308567][ T4275] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 150.315025][ T4275] ? hci_remote_host_features_evt+0x270/0x270 [ 150.321129][ T4275] hci_event_packet+0x7b9/0x1280 [ 150.326111][ T4275] ? bis_list+0x280/0x280 [ 150.330484][ T4275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 150.336418][ T4275] ? kcov_remote_start+0x4c7/0x7e0 [ 150.341600][ T4275] ? patch_conexant_auto+0x1260/0x1650 [ 150.347113][ T4275] ? hci_send_to_monitor+0x9c/0x4a0 [ 150.352346][ T4275] hci_rx_work+0x3eb/0xd40 [ 150.356828][ T4275] ? _raw_spin_unlock+0x40/0x40 [ 150.361723][ T4275] ? process_one_work+0x7b0/0x1160 [ 150.366866][ T4275] process_one_work+0x8a2/0x1160 [ 150.371845][ T4275] ? worker_detach_from_pool+0x240/0x240 [ 150.377513][ T4275] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.382566][ T4275] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.388146][ T4275] ? kthread_data+0x4b/0xc0 [ 150.392696][ T4275] worker_thread+0xaa2/0x1270 [ 150.397436][ T4275] kthread+0x29d/0x330 [ 150.401548][ T4275] ? worker_clr_flags+0x1a0/0x1a0 [ 150.406607][ T4275] ? kthread_blkcg+0xd0/0xd0 [ 150.411221][ T4275] ret_from_fork+0x1f/0x30 [ 150.415679][ T4275] [ 150.420527][ T4275] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.433878][ T4275] Bluetooth: hci2: failed to register connection device [ 150.483871][ T4312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.546569][ T5766] loop1: detected capacity change from 0 to 32768 [ 150.625055][ T5766] XFS (loop1): Mounting V5 Filesystem [ 150.674642][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 150.682928][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.713867][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.734019][ T4312] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.772540][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.812728][ T4312] usb 4-1: config 0 descriptor?? [ 150.826098][ T4312] hub 4-1:0.0: USB hub found [ 150.850503][ T5766] XFS (loop1): Ending clean mount [ 151.030490][ T4312] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 151.089103][ T5796] loop0: detected capacity change from 0 to 512 [ 151.107664][ T4269] XFS (loop1): Unmounting Filesystem [ 151.249482][ T5796] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 151.313284][ T1328] kworker/u4:5: attempt to access beyond end of device [ 151.313284][ T1328] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 151.347538][ T5796] FAT-fs (loop0): Filesystem has been set read-only [ 151.375362][ T5797] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 151.448717][ T4312] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 151.484742][ T4312] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 151.783516][ T5794] loop2: detected capacity change from 0 to 32768 [ 151.814044][ T4312] usb 4-1: USB disconnect, device number 5 [ 151.857671][ T26] audit: type=1800 audit(1776501091.081:9): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 152.765315][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 152.784359][ T5821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.445'. [ 153.061011][ T5828] loop5: detected capacity change from 0 to 2048 [ 153.143522][ T5832] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.232578][ T5832] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 153.263894][ T5832] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 153.305928][ T5832] Remounting filesystem read-only [ 153.406020][ T4461] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 153.599496][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.641132][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.666031][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.694380][ T5843] loop2: detected capacity change from 0 to 256 [ 153.703170][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.755723][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.807056][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.844299][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.886088][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.892113][ T5824] loop0: detected capacity change from 0 to 32768 [ 153.914020][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.963901][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.979145][ T5824] [ 153.979145][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.979145][ T5824] [ 153.995187][ T5841] device batadv_slave_0 entered promiscuous mode [ 154.034130][ T5841] batman_adv: batadv0: Adding interface: macsec1 [ 154.064255][ T5841] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.118803][ T5824] ERROR: (device loop0): diWrite: ixpxd invalid [ 154.118803][ T5824] [ 154.150808][ T5841] batman_adv: batadv0: Interface activated: macsec1 [ 154.207254][ T5824] ERROR: (device loop0): remounting filesystem as read-only [ 154.227858][ T5824] ERROR: (device loop0): txCommit: [ 154.227858][ T5824] [ 154.440644][ T5850] loop5: detected capacity change from 0 to 64 [ 154.882968][ T5861] loop0: detected capacity change from 0 to 512 [ 155.080324][ T5861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.301930][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 155.800786][ T4275] block nbd0: Receive control failed (result -32) [ 156.422324][ T5869] loop2: detected capacity change from 0 to 32768 [ 156.537320][ T5869] XFS (loop2): Mounting V5 Filesystem [ 156.550108][ T5901] loop0: detected capacity change from 0 to 1024 [ 156.557630][ T5901] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.566608][ T5901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.593950][ T5901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.643081][ T5907] netlink: 384 bytes leftover after parsing attributes in process `syz.5.478'. [ 156.686154][ T5869] XFS (loop2): Ending clean mount [ 156.970607][ T4268] XFS (loop2): Unmounting Filesystem [ 156.978941][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 157.140988][ T5916] loop0: detected capacity change from 0 to 4096 [ 157.159610][ T5916] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.183608][ T5916] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.222643][ T5916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.401400][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 157.679808][ T5919] loop1: detected capacity change from 0 to 32768 [ 157.763152][ T5919] read_mapping_page failed! [ 157.776778][ T5919] ERROR: (device loop1): txCommit: [ 157.776778][ T5919] [ 157.897108][ T5930] program syz.0.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.055619][ T5917] loop5: detected capacity change from 0 to 32768 [ 158.197966][ T5932] loop0: detected capacity change from 0 to 4096 [ 158.679054][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.759251][ T4276] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 158.765040][ T5940] loop3: detected capacity change from 0 to 512 [ 158.771999][ T4276] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 158.838917][ T5940] EXT4-fs (loop3): 1 truncate cleaned up [ 158.851295][ T5940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.876936][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 158.885785][ T22] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 158.894537][ T22] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 158.903202][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 158.912842][ T22] usb 2-1: config 1 has no interface number 0 [ 158.919635][ T22] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.931762][ T22] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 158.945478][ T22] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 158.955266][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.963400][ T5940] EXT4-fs warning (device loop3): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 158.981484][ T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 159.121507][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 159.187149][ T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 159.548677][ T26] audit: type=1326 audit(1776501098.771:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.5.496" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe48919c819 code=0x0 [ 159.630323][ T22] usb 2-1: USB disconnect, device number 3 [ 159.640555][ T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 159.810527][ T5944] loop0: detected capacity change from 0 to 32768 [ 159.888688][ T5944] XFS (loop0): Mounting V5 Filesystem [ 159.922543][ T5957] loop2: detected capacity change from 0 to 8192 [ 159.991394][ T5957] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.042212][ T5957] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 160.052892][ T5957] REISERFS (device loop2): using ordered data mode [ 160.061666][ T5957] reiserfs: using flush barriers [ 160.067465][ T5944] XFS (loop0): Ending clean mount [ 160.143913][ T5957] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.173452][ T5957] REISERFS (device loop2): checking transaction log (loop2) [ 160.254915][ T5957] REISERFS (device loop2): Using r5 hash to sort names [ 160.297061][ T5957] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 160.361175][ T5975] loop1: detected capacity change from 0 to 256 [ 160.370734][ T5957] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 160.397496][ T4276] XFS (loop0): Unmounting Filesystem [ 160.414809][ T5975] exfat: Deprecated parameter 'namecase' [ 160.420619][ T5975] exfat: Deprecated parameter 'namecase' [ 160.503408][ T5975] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 161.310945][ T5984] loop2: detected capacity change from 0 to 4096 [ 161.356761][ T5984] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 161.382810][ T5984] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 161.399936][ T5973] loop3: detected capacity change from 0 to 40427 [ 161.437269][ T5973] F2FS-fs (loop3): invalid crc value [ 161.453678][ T5973] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.543968][ T128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.562969][ T5973] F2FS-fs (loop3): Start checkpoint disabled! [ 161.574909][ T4433] udevd[4433]: incorrect ext4 checksum on /dev/loop2 [ 161.592087][ T5973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 161.734074][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 161.742129][ T128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.767701][ T128] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 161.795777][ T128] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 161.815310][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.838275][ T128] usb 1-1: Product: syz [ 161.847133][ T128] usb 1-1: Manufacturer: syz [ 161.857671][ T128] usb 1-1: SerialNumber: syz [ 161.875439][ T4316] kernel read not supported for file /dsp1 (pid: 4316 comm: kworker/0:6) [ 161.974413][ T1328] kworker/u4:5: attempt to access beyond end of device [ 161.974413][ T1328] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.115960][ T128] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 162.137717][ T128] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 162.531527][ T128] usb 1-1: 2:1 : can't get Cluster Descriptor [ 162.562707][ T6006] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 162.844365][ T22] usb 1-1: USB disconnect, device number 6 [ 162.882671][ T6012] netlink: 27 bytes leftover after parsing attributes in process `syz.3.517'. [ 163.030413][ T6018] loop1: detected capacity change from 0 to 16 [ 163.053556][ T6018] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 163.287215][ T6025] Bluetooth: MGMT ver 1.22 [ 163.573051][ T6037] binder: 6036:6037 ioctl 400c620e 200000000200 returned -22 [ 163.772798][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.532'. [ 164.048161][ T6026] loop5: detected capacity change from 0 to 32768 [ 164.152532][ T6026] XFS (loop5): Mounting V5 Filesystem [ 164.233181][ T6026] XFS (loop5): Ending clean mount [ 164.240664][ T6026] XFS (loop5): Quotacheck needed: Please wait. [ 164.346007][ T6026] XFS (loop5): Quotacheck: Done. [ 164.412218][ T6065] loop3: detected capacity change from 0 to 4096 [ 164.614924][ T4461] XFS (loop5): Unmounting Filesystem [ 165.173859][ T4350] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.374237][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 165.382061][ T4350] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 165.396981][ T4350] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 165.410587][ T4350] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 165.425085][ T4350] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 165.440926][ T4350] usb 3-1: config 250 has no interface number 0 [ 165.448355][ T4350] usb 3-1: config 250 interface 228 has no altsetting 0 [ 165.469504][ T4350] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 165.479745][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 165.489122][ T4350] usb 3-1: Product: syz [ 165.493505][ T4350] usb 3-1: SerialNumber: syz [ 165.504340][ T4350] hub 3-1:250.228: bad descriptor, ignoring hub [ 165.512868][ T4350] hub: probe of 3-1:250.228 failed with error -5 [ 165.858291][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 166.038458][ T4350] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 166.063154][ T6106] loop1: detected capacity change from 0 to 4096 [ 166.141109][ T6106] ntfs: volume version 3.1. [ 166.539430][ T6117] loop0: detected capacity change from 0 to 256 [ 166.794336][ T4350] usb 3-1: USB disconnect, device number 6 [ 166.872314][ T6123] loop5: detected capacity change from 0 to 256 [ 167.204651][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 167.233619][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 167.244628][ T4350] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.295386][ T6133] loop3: detected capacity change from 0 to 64 [ 167.456006][ T4350] usb 6-1: Using ep0 maxpacket: 32 [ 167.467318][ T4350] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.520989][ T4350] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.574911][ T4350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 167.581640][ T4350] usb 6-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 167.623867][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.661678][ T4350] usb 6-1: config 0 descriptor?? [ 167.804775][ T6129] loop1: detected capacity change from 0 to 32768 [ 167.957502][ T6129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.981482][ T6152] loop0: detected capacity change from 0 to 128 [ 168.067576][ T6152] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 168.103967][ T6152] FAT-fs (loop0): Filesystem has been set read-only [ 168.117086][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x0 [ 168.135132][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x0 [ 168.150774][ T6152] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 168.154980][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x0 [ 168.206185][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x0 [ 168.213684][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x0 [ 168.251954][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x0 [ 168.282371][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x6 [ 168.292500][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x3 [ 168.322948][ T4350] wacom 0003:056A:00C6.0004: unknown main item tag 0x7 [ 168.376488][ T4350] wacom 0003:056A:00C6.0004: hidraw0: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.5-1/input0 [ 168.395639][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 168.409206][ T4350] usb 6-1: USB disconnect, device number 4 [ 168.604709][ T6162] fido_id[6162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 168.897850][ T6168] nbd1: detected capacity change from 0 to 549764202496 [ 168.916237][ T4275] block nbd1: Receive control failed (result -32) [ 168.958766][ T53] block nbd1: Dead connection, failed to find a fallback [ 168.966452][ T53] block nbd1: shutting down sockets [ 168.972141][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.982469][ T53] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.000249][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.009400][ T53] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.024628][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.033929][ T53] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.052578][ T1359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.061793][ T1359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.069924][ T1359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.079156][ T1359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.094146][ T1359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.103359][ T1359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.112050][ T1359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.122454][ T1359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.134108][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.143227][ T53] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.151410][ T4433] ldm_validate_partition_table(): Disk read failed. [ 169.184210][ T1359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.193426][ T1359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.221374][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.230606][ T53] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.239062][ T4433] Dev nbd1: unable to read RDB block 0 [ 169.308891][ T4433] nbd1: unable to read partition table [ 169.345128][ T4433] ldm_validate_partition_table(): Disk read failed. [ 169.394195][ T4433] Dev nbd1: unable to read RDB block 0 [ 169.413041][ T4433] nbd1: unable to read partition table [ 169.970969][ T6201] sctp: [Deprecated]: syz.0.596 (pid 6201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.970969][ T6201] Use struct sctp_sack_info instead [ 170.281637][ T6207] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 170.304554][ T6207] netlink: 'syz.0.600': attribute type 2 has an invalid length. [ 170.371145][ T6208] loop3: detected capacity change from 0 to 4096 [ 170.379874][ T26] audit: type=1326 audit(1776501109.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.1.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4f3f9c819 code=0x0 [ 170.457861][ T6208] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 170.503864][ T6208] ntfs3: loop3: Failed to load $Extend. [ 170.806891][ T4275] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 170.815994][ T4275] Bluetooth: hci1: Injecting HCI hardware error event [ 170.825911][ T4274] Bluetooth: hci1: hardware error 0x00 [ 170.849461][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 170.881809][ T6226] netlink: 116 bytes leftover after parsing attributes in process `syz.2.608'. [ 170.905999][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 170.915373][ T6224] netlink: 'syz.0.607': attribute type 18 has an invalid length. [ 171.623882][ T4312] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 171.825692][ T4312] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 171.849604][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.916574][ T4312] usb 6-1: config 0 descriptor?? [ 171.969135][ T4312] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 172.130616][ T4312] gp8psk: usb in 128 operation failed. [ 172.259236][ T6257] loop3: detected capacity change from 0 to 1024 [ 172.353237][ T4312] gp8psk: FW Version = 168.172.30 (0xa8ac1e) Build 2166/109/231 [ 172.457058][ T6266] loop1: detected capacity change from 0 to 512 [ 172.542024][ T6266] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.627: corrupted in-inode xattr [ 172.555686][ T4312] gp8psk: usb in 149 operation failed. [ 172.561229][ T4312] gp8psk: failed to get FPGA version [ 172.578548][ T6266] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.627: couldn't read orphan inode 15 (err -117) [ 172.585764][ T4312] gp8psk: usb in 138 operation failed. [ 172.609247][ T4312] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 172.611686][ T4319] hfsplus: b-tree write err: -5, ino 25 [ 172.620704][ T4312] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 172.640593][ T4312] usb 6-1: USB disconnect, device number 5 [ 172.665438][ T6266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.688192][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 172.699166][ T4319] hfsplus: b-tree write err: -5, ino 2 [ 172.715824][ T4319] hfsplus: b-tree write err: -5, ino 17 [ 172.830874][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 172.963944][ T4274] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 173.088671][ T6284] loop3: detected capacity change from 0 to 512 [ 173.390721][ T6290] netlink: 92 bytes leftover after parsing attributes in process `syz.0.638'. [ 173.496701][ T6296] loop0: detected capacity change from 0 to 512 [ 173.540490][ T6296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.557306][ T6296] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.652167][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 173.704195][ T33] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.730742][ T6304] loop0: detected capacity change from 0 to 512 [ 173.747528][ T6304] EXT4-fs: Ignoring removed nobh option [ 173.761716][ T6304] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.786280][ T6304] EXT4-fs (loop0): 1 truncate cleaned up [ 173.792016][ T6304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.884383][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 173.892108][ T33] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.903914][ T4316] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.917328][ T33] usb 4-1: config 0 has no interface number 0 [ 173.923591][ T33] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.955617][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 173.976040][ T33] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.008983][ T33] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 174.032754][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.079418][ T33] usb 4-1: config 0 descriptor?? [ 174.123918][ T4316] usb 6-1: Using ep0 maxpacket: 16 [ 174.133300][ T4316] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.163310][ T4316] usb 6-1: config 0 has no interface number 0 [ 174.173451][ T4316] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.223861][ T4316] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.262541][ T4316] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.292342][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.316454][ T4316] usb 6-1: Product: syz [ 174.320790][ T4316] usb 6-1: SerialNumber: syz [ 174.337833][ T4316] usb 6-1: config 0 descriptor?? [ 174.369793][ T4316] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 174.389584][ T6313] loop1: detected capacity change from 0 to 2048 [ 174.390816][ T4316] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input11 [ 174.457236][ T6313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.624638][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.634583][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.641810][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.662113][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.669484][ T4316] usb 6-1: USB disconnect, device number 6 [ 174.679853][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.686869][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 174.703605][ T4316] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 174.742773][ T6312] UDF-fs: error (device loop1): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 174.748294][ T33] uclogic 0003:28BD:0094.0005: pen parameters not found [ 174.780427][ T33] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 174.824723][ T33] usb 4-1: USB disconnect, device number 6 [ 174.992717][ T6311] loop0: detected capacity change from 0 to 32768 [ 175.041029][ T6311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 175.167676][ T6316] loop1: detected capacity change from 0 to 4096 [ 175.301416][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 175.324863][ T6316] overlayfs: upper fs does not support tmpfile. [ 175.427484][ T6316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.464655][ T6316] overlayfs: conflicting lowerdir path [ 175.829352][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 175.918118][ T6332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.937955][ T6332] bond0: (slave bond1): Enslaving as an active interface with an up link [ 176.045232][ T6338] loop3: detected capacity change from 0 to 128 [ 176.052704][ T6338] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.068495][ T6338] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.287741][ T6348] loop2: detected capacity change from 0 to 256 [ 176.469163][ T6351] loop0: detected capacity change from 0 to 128 [ 176.575457][ T6351] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 176.643360][ T6356] __sock_release: fasync list not empty! [ 176.892162][ T4276] sysv_free_block: trying to free block not in datazone [ 176.941529][ T4276] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 177.657697][ T6392] input: syz0 as /devices/virtual/input/input12 [ 178.402224][ T6389] loop1: detected capacity change from 0 to 32768 [ 178.420637][ T6412] program syz.0.689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.672962][ T6397] loop5: detected capacity change from 0 to 32768 [ 178.689739][ T6397] XFS: ikeep mount option is deprecated. [ 178.793119][ T6397] XFS (loop5): Mounting V5 Filesystem [ 178.915161][ T6397] XFS (loop5): Ending clean mount [ 179.107468][ T4461] XFS (loop5): Unmounting Filesystem [ 179.429514][ T6445] loop3: detected capacity change from 0 to 256 [ 179.773813][ T128] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.825139][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.982336][ T6457] loop0: detected capacity change from 0 to 1024 [ 179.989187][ T128] usb 4-1: Using ep0 maxpacket: 32 [ 180.013938][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 180.021214][ T22] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.033909][ T22] usb 3-1: config 0 has no interface number 0 [ 180.046593][ T22] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.065064][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.079957][ T6457] EXT4-fs: Ignoring removed orlov option [ 180.084262][ T22] usb 3-1: Product: syz [ 180.089866][ T22] usb 3-1: Manufacturer: syz [ 180.091234][ T128] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.108952][ T22] usb 3-1: SerialNumber: syz [ 180.110826][ T128] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.130052][ T128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.137411][ T22] usb 3-1: config 0 descriptor?? [ 180.146240][ T128] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 180.161161][ T22] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.172662][ T6457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.177968][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.231069][ T128] usb 4-1: config 0 descriptor?? [ 180.369763][ T22] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.384900][ T22] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.504600][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 180.699057][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 180.726676][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 180.757089][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 180.787537][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 180.791147][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.802702][ T22] usb 3-1: USB disconnect, device number 7 [ 180.808264][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 180.827179][ T22] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.838705][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x0 [ 180.863799][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x6 [ 180.882153][ T22] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.913691][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x3 [ 180.921028][ T128] wacom 0003:056A:00C6.0006: unknown main item tag 0x7 [ 180.928638][ T22] quatech2 3-1:0.51: device disconnected [ 180.989166][ T128] wacom 0003:056A:00C6.0006: hidraw0: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.3-1/input0 [ 181.039890][ T128] usb 4-1: USB disconnect, device number 7 [ 181.242363][ T6469] fido_id[6469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 181.330162][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.711'. [ 181.478006][ T6463] loop1: detected capacity change from 0 to 32768 [ 182.131243][ T6495] loop2: detected capacity change from 0 to 16 [ 182.167721][ T6495] erofs: (device loop2): mounted with root inode @ nid 36. [ 182.591969][ T6508] loop2: detected capacity change from 0 to 256 [ 182.621416][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 183.197575][ T6524] loop5: detected capacity change from 0 to 4096 [ 183.224912][ T6524] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 183.253839][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.450685][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.463465][ T22] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 183.515338][ T22] usb 3-1: string descriptor 0 read error: -22 [ 183.548274][ T22] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 183.578071][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.612870][ T6522] loop0: detected capacity change from 0 to 32768 [ 183.679529][ T6522] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 183.679529][ T6522] [ 183.716469][ T6522] ERROR: (device loop0): remounting filesystem as read-only [ 183.726493][ T6522] xtLookup: xtSearch returned -5 [ 183.731746][ T6522] free_index: error reading directory table [ 183.893169][ T22] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 183.923604][ T6535] device batadv_slave_1 entered promiscuous mode [ 183.967761][ T6533] device batadv_slave_1 left promiscuous mode [ 184.127774][ T22] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 184.360382][ T22] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 184.373103][ T22] usb 3-1: USB disconnect, device number 8 [ 184.466584][ T6537] loop0: detected capacity change from 0 to 32768 [ 184.491156][ T6537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.739 (6537) [ 184.529821][ T6537] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.545758][ T6537] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 184.557562][ T6537] BTRFS info (device loop0): using free space tree [ 184.588311][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.673136][ T6537] BTRFS info (device loop0): enabling ssd optimizations [ 184.970206][ T4276] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.230971][ T6574] loop1: detected capacity change from 0 to 1024 [ 185.268961][ T6574] EXT4-fs: Ignoring removed orlov option [ 185.349993][ T6574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.402395][ T6580] loop5: detected capacity change from 0 to 1024 [ 185.445743][ T6580] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 185.504120][ T6580] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 185.512921][ T6580] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.565680][ T6580] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.749: Inode bitmap for bg 0 marked uninitialized [ 185.646716][ T6580] EXT4-fs (loop5): Remounting filesystem read-only [ 185.659623][ T6580] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.707186][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 185.747934][ T6580] EXT4-fs (loop5): shut down requested (2) [ 185.822100][ T6587] loop3: detected capacity change from 0 to 64 [ 185.922389][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 186.085793][ T6591] loop0: detected capacity change from 0 to 1024 [ 186.221546][ T6591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.244005][ T6591] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.538543][ T46] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 186.581013][ T46] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 186.604208][ T46] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.604208][ T46] [ 186.647249][ T46] EXT4-fs (loop0): Total free blocks count 0 [ 186.653314][ T46] EXT4-fs (loop0): Free/Dirty block details [ 186.684617][ T46] EXT4-fs (loop0): free_blocks=0 [ 186.689703][ T46] EXT4-fs (loop0): dirty_blocks=16 [ 186.713981][ T46] EXT4-fs (loop0): Block reservation details [ 186.720056][ T46] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 186.790924][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 187.275443][ T6626] loop1: detected capacity change from 0 to 1024 [ 187.339435][ T6606] loop2: detected capacity change from 0 to 40427 [ 187.393426][ T6606] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 187.429832][ T6606] F2FS-fs (loop2): invalid crc value [ 187.468039][ T6625] hfsplus: invalid extended attribute record [ 187.495282][ T6606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.639679][ T6606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.647644][ T9] hfsplus: b-tree write err: -5, ino 25 [ 187.679762][ T9] hfsplus: b-tree write err: -5, ino 4 [ 187.699933][ T9] hfsplus: b-tree write err: -5, ino 2 [ 187.787551][ T6622] loop0: detected capacity change from 0 to 32768 [ 187.898398][ T6622] JBD2: Ignoring recovery information on journal [ 188.035516][ T4268] syz-executor: attempt to access beyond end of device [ 188.035516][ T4268] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 188.126272][ T6622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 188.459852][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 189.310745][ T6666] loop1: detected capacity change from 0 to 2048 [ 189.394322][ T6666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.438217][ T6648] loop5: detected capacity change from 0 to 32768 [ 189.503963][ T6648] JBD2: Ignoring recovery information on journal [ 189.602141][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 189.648387][ T6648] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 189.894335][ T6677] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 189.924056][ T4461] ocfs2: Unmounting device (7,5) on (node local) [ 190.071896][ T6681] loop3: detected capacity change from 0 to 512 [ 190.185838][ T6685] loop2: detected capacity change from 0 to 4096 [ 190.212896][ T6685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.277455][ T6681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.309664][ T6685] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.330997][ T6685] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 190.339410][ T6681] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.372451][ T6685] System zones: 0-5 [ 190.414018][ T6685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.532498][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 191.086862][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 191.144968][ T6708] vxcan1: tx address claim with dest, not broadcast [ 191.273865][ T5340] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.455944][ T5340] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.494274][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.535645][ T5340] usb 1-1: config 0 descriptor?? [ 191.559842][ T5340] cp210x 1-1:0.0: cp210x converter detected [ 191.806337][ T6727] loop2: detected capacity change from 0 to 2048 [ 191.881283][ T6727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.935891][ T6725] loop5: detected capacity change from 0 to 8192 [ 191.973683][ T5340] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 192.002145][ T26] audit: type=1800 audit(1776501131.221:12): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.803" name="file1" dev="loop5" ino=1048617 res=0 errno=0 [ 192.024908][ T5340] usb 1-1: cp210x converter now attached to ttyUSB0 [ 192.219434][ T4315] usb 1-1: USB disconnect, device number 7 [ 192.243659][ T4315] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.289216][ T4315] cp210x 1-1:0.0: device disconnected [ 193.176098][ T4274] Bluetooth: hci3: link tx timeout [ 193.182175][ T4274] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.204454][ T4274] Bluetooth: hci3: link tx timeout [ 193.209659][ T4274] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.217478][ T4274] Bluetooth: hci3: link tx timeout [ 193.222740][ T4274] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.230594][ T4274] Bluetooth: hci3: link tx timeout [ 193.235836][ T4274] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.272548][ T6764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 193.520612][ T6772] loop3: detected capacity change from 0 to 64 [ 193.713484][ T6741] loop2: detected capacity change from 0 to 40427 [ 193.751692][ T6741] F2FS-fs (loop2): invalid crc value [ 193.791213][ T6741] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.935510][ T6741] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 193.964233][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'. [ 193.979780][ T6741] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 194.024328][ T6741] F2FS-fs (loop2): Start checkpoint disabled! [ 194.050165][ T6741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 194.133917][ T5340] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.193161][ T6785] loop5: detected capacity change from 0 to 4096 [ 194.210270][ T6785] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 194.250702][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257195][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287355][ T6790] loop1: detected capacity change from 0 to 2048 [ 194.336085][ T5340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.349324][ T6790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.368403][ T5340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.415636][ T5340] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 194.443915][ T5340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.475350][ T5340] usb 4-1: config 0 descriptor?? [ 194.483327][ T6785] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 194.567416][ T6785] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 194.833017][ T4461] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 194.873118][ T4461] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 194.896132][ T5340] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 194.903195][ T5340] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 194.946501][ T5340] lenovo 0003:17EF:6047.0007: item fetching failed at offset 2/5 [ 194.986659][ T5340] lenovo 0003:17EF:6047.0007: hid_parse failed [ 194.992921][ T5340] lenovo: probe of 0003:17EF:6047.0007 failed with error -22 [ 195.018857][ T6802] program syz.0.839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.117619][ T5340] usb 4-1: USB disconnect, device number 8 [ 195.204298][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 195.267940][ T6811] loop0: detected capacity change from 0 to 1024 [ 195.278335][ T6811] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 195.349587][ T6811] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #32: comm syz.0.841: iget: special inode unallocated [ 195.393881][ T6811] EXT4-fs (loop0): no journal found [ 195.434134][ T6811] EXT4-fs (loop0): can't get journal size [ 195.475289][ T6811] EXT4-fs (loop0): filesystem is read-only [ 195.503844][ T6811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.577541][ T6823] loop1: detected capacity change from 0 to 512 [ 195.670674][ T6823] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 195.815039][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 195.843121][ T6829] loop2: detected capacity change from 0 to 128 [ 196.443598][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 196.478615][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 196.937312][ T6831] loop0: detected capacity change from 0 to 32768 [ 197.033862][ T33] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.068329][ T6831] XFS (loop0): Mounting V5 Filesystem [ 197.166905][ T6831] XFS (loop0): Ending clean mount [ 197.186039][ T6831] XFS (loop0): Quotacheck needed: Please wait. [ 197.214336][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 197.222313][ T33] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 197.289080][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.328919][ T33] usb 4-1: config 0 descriptor?? [ 197.386503][ T6831] XFS (loop0): Quotacheck: Done. [ 197.477490][ T4276] XFS (loop0): Unmounting Filesystem [ 197.558159][ T33] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 197.592399][ T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.650520][ T33] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 197.689044][ T33] usb 4-1: media controller created [ 197.790403][ T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.884373][ T33] az6027: usb out operation failed. (-71) [ 197.916620][ T33] az6027: usb out operation failed. (-71) [ 197.932413][ T33] stb0899_attach: Driver disabled by Kconfig [ 197.948910][ T33] az6027: no front-end attached [ 197.948910][ T33] [ 197.987284][ T33] az6027: usb out operation failed. (-71) [ 198.003326][ T33] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 198.027221][ T33] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 198.067686][ T33] dvb-usb: schedule remote query interval to 400 msecs. [ 198.093046][ T33] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 198.125133][ T33] usb 4-1: USB disconnect, device number 9 [ 198.225103][ T33] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 198.371428][ T6876] loop0: detected capacity change from 0 to 128 [ 198.494642][ T6876] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.555637][ T6876] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.587585][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.633028][ T6882] loop1: detected capacity change from 0 to 512 [ 198.809024][ T6882] EXT4-fs (loop1): 1 orphan inode deleted [ 198.825062][ T4322] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 198.875890][ T6882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.887035][ T4322] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 198.919067][ T6882] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.969365][ T4322] EXT4-fs (loop1): Remounting filesystem read-only [ 199.148356][ T26] audit: type=1326 audit(1776501138.371:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 199.185309][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 199.239669][ T26] audit: type=1326 audit(1776501138.371:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 199.264308][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 199.359286][ T26] audit: type=1326 audit(1776501138.371:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 199.440872][ T6877] loop5: detected capacity change from 0 to 32768 [ 199.483043][ T26] audit: type=1326 audit(1776501138.371:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 199.627700][ T6877] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 199.680597][ T6877] XFS (loop5): Mounting V5 Filesystem [ 199.837368][ T6877] XFS (loop5): Ending clean mount [ 199.902761][ T6877] XFS (loop5): Quotacheck needed: Please wait. [ 200.043564][ T6877] XFS (loop5): Quotacheck: Done. [ 200.181711][ T6924] loop1: detected capacity change from 0 to 256 [ 200.251369][ T4461] XFS (loop5): Unmounting Filesystem [ 200.301849][ T6924] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.360505][ T6927] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.706798][ T6930] loop2: detected capacity change from 0 to 4096 [ 200.732729][ T6930] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 200.870593][ T6930] ntfs3: loop2: failed to convert "c46c" to iso8859-15 [ 201.035297][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 201.204005][ T4315] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.372484][ T6943] loop1: detected capacity change from 0 to 8192 [ 201.408351][ T4315] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.414881][ T6943] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 201.437138][ T4315] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 201.446497][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 201.446799][ T6943] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 201.452976][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 201.471534][ T6943] REISERFS (device loop1): using ordered data mode [ 201.479439][ T6943] reiserfs: using flush barriers [ 201.486793][ T6943] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.504082][ T6943] REISERFS (device loop1): checking transaction log (loop1) [ 201.530822][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.579521][ T4315] usb 6-1: Product: syz [ 201.604320][ T4315] usb 6-1: Manufacturer: syz [ 201.608996][ T4315] usb 6-1: SerialNumber: syz [ 201.741840][ T6943] REISERFS (device loop1): Using r5 hash to sort names [ 201.774651][ T6943] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 201.930381][ T5340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 202.123845][ T5340] usb 1-1: Using ep0 maxpacket: 8 [ 202.130997][ T5340] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 202.160919][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.191974][ T5340] pvrusb2: Hardware description: Terratec Grabster AV400 [ 202.213809][ T5340] pvrusb2: ********** [ 202.217868][ T5340] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 202.253768][ T5340] pvrusb2: Important functionality might not be entirely working. [ 202.261667][ T5340] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 202.323799][ T5340] pvrusb2: ********** [ 202.397615][ T2310] pvrusb2: Invalid write control endpoint [ 202.404596][ T6946] loop3: detected capacity change from 0 to 40427 [ 202.414069][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.445805][ T6946] F2FS-fs (loop3): invalid crc value [ 202.473635][ T6946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.493232][ T4315] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 202.624392][ T4315] usb 6-1: USB disconnect, device number 7 [ 202.633518][ T5340] usb 1-1: USB disconnect, device number 8 [ 202.646098][ T22] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.682860][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.738975][ T6946] F2FS-fs (loop3): Start checkpoint disabled! [ 202.744438][ T2310] pvrusb2: Invalid write control endpoint [ 202.757708][ T22] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 202.770040][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 202.789063][ T6946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 202.799142][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 202.800789][ T22] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 202.826996][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 202.835058][ T22] usb 3-1: Manufacturer: syz [ 202.849373][ T22] usb 3-1: config 0 descriptor?? [ 202.873377][ T2310] pvrusb2: Device being rendered inoperable [ 202.899848][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 202.930197][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 202.954534][ T2310] pvrusb2: Attached sub-driver cx25840 [ 202.968167][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 202.983375][ T6946] syz.3.891: attempt to access beyond end of device [ 202.983375][ T6946] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 203.002621][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.033929][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 203.124052][ T22] rc_core: IR keymap rc-hauppauge not found [ 203.130024][ T22] Registered IR keymap rc-empty [ 203.167538][ T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 203.219495][ T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 203.286778][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 203.334246][ T22] usb 3-1: USB disconnect, device number 9 [ 203.412374][ T9] kworker/u4:0: attempt to access beyond end of device [ 203.412374][ T9] loop3: rw=1, sector=53256, nr_sectors = 8 limit=40427 [ 203.452506][ T9] kworker/u4:0: attempt to access beyond end of device [ 203.452506][ T9] loop3: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 203.479127][ T9] kworker/u4:0: attempt to access beyond end of device [ 203.479127][ T9] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 203.990356][ T6988] loop0: detected capacity change from 0 to 4096 [ 204.034923][ T6988] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 204.210658][ T6988] ntfs: volume version 3.1. [ 204.219073][ T6998] loop5: detected capacity change from 0 to 128 [ 204.317727][ T6988] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 204.427189][ T6988] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 204.669341][ T7008] loop1: detected capacity change from 0 to 128 [ 205.100120][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 205.109861][ T4312] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.303791][ T4312] usb 3-1: Using ep0 maxpacket: 32 [ 205.311737][ T4312] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 205.350942][ T4312] usb 3-1: config 0 has no interface number 0 [ 205.373829][ T4312] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 205.406325][ T4312] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 205.436254][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.463860][ T4312] usb 3-1: Product: syz [ 205.473843][ T4312] usb 3-1: Manufacturer: syz [ 205.488868][ T4312] usb 3-1: SerialNumber: syz [ 205.506206][ T4312] usb 3-1: config 0 descriptor?? [ 205.528829][ T7013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.587031][ T7027] loop5: detected capacity change from 0 to 8192 [ 205.703471][ T7039] syzkaller0: tun_chr_ioctl cmd 21731 [ 205.753175][ T7013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.193176][ T4312] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 206.225805][ T4312] asix: probe of 3-1:0.188 failed with error -71 [ 206.268202][ T4312] usb 3-1: USB disconnect, device number 10 [ 206.578716][ T7062] vivid-007: disconnect [ 206.588659][ T7060] vivid-007: reconnect [ 207.030982][ T7073] program syz.3.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.534117][ T4315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 207.583142][ T7093] loop3: detected capacity change from 0 to 128 [ 207.702520][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.958'. [ 207.740569][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.772100][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.791667][ T4315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 207.805428][ T4315] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 207.820953][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.845577][ T4315] usb 2-1: config 0 descriptor?? [ 208.019749][ T7103] Bluetooth: hci0: load_link_keys: expected 6403 bytes, got 7 bytes [ 208.039342][ T7069] loop2: detected capacity change from 0 to 40427 [ 208.057404][ T7069] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 208.087285][ T7069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 208.151699][ T7069] F2FS-fs (loop2): Found nat_bits in checkpoint [ 208.205240][ T7109] loop3: detected capacity change from 0 to 512 [ 208.232937][ T7109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.243874][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 208.251677][ T7110] loop5: detected capacity change from 0 to 1024 [ 208.269393][ T7110] EXT4-fs: Ignoring removed orlov option [ 208.304902][ T7069] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 208.315714][ T4315] kovaplus 0003:1E7D:2D50.0008: item fetching failed at offset 4/5 [ 208.320865][ T7109] EXT4-fs (loop3): 1 truncate cleaned up [ 208.325900][ T4315] kovaplus 0003:1E7D:2D50.0008: parse failed [ 208.336010][ T4315] kovaplus: probe of 0003:1E7D:2D50.0008 failed with error -22 [ 208.339882][ T7109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.353943][ T7069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.427896][ T7110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 208.459117][ T7110] System zones: 0-1, 3-12 [ 208.465178][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 208.483929][ T22] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 208.492311][ T7110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.504051][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.512108][ T22] usb 1-1: Product: syz [ 208.554971][ T22] usb 1-1: Manufacturer: syz [ 208.569843][ T22] usb 1-1: SerialNumber: syz [ 208.585288][ T22] usb 1-1: config 0 descriptor?? [ 208.596186][ T33] usb 2-1: USB disconnect, device number 4 [ 208.750050][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 208.757212][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 208.812912][ T22] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 009 [ 209.019982][ T7101] i2c i2c-1: adapter quirk: no zero length (addr 0x07ff, size 0, read) [ 209.056913][ T4315] usb 1-1: USB disconnect, device number 9 [ 209.401976][ T7135] loop1: detected capacity change from 0 to 2048 [ 209.475702][ T7133] loop5: detected capacity change from 0 to 4096 [ 209.484842][ T7135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.525633][ T7133] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 209.900700][ T1328] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 209.923955][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 209.969463][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 209.975686][ T1328] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 209.999592][ T1328] EXT4-fs (loop1): This should not happen!! Data will be lost [ 209.999592][ T1328] [ 210.063838][ T1328] EXT4-fs (loop1): Total free blocks count 0 [ 210.069975][ T1328] EXT4-fs (loop1): Free/Dirty block details [ 210.109531][ T1328] EXT4-fs (loop1): free_blocks=2415919504 [ 210.133926][ T1328] EXT4-fs (loop1): dirty_blocks=48 [ 210.139125][ T1328] EXT4-fs (loop1): Block reservation details [ 210.200893][ T1328] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 210.235925][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 211.022593][ T7173] loop3: detected capacity change from 0 to 1024 [ 211.033984][ T7174] loop1: detected capacity change from 0 to 1024 [ 211.063389][ T7173] EXT4-fs: inline encryption not supported [ 211.122407][ T7174] hfsplus: bad catalog entry type [ 211.170318][ T7173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.234038][ T7173] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.266017][ T7173] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.990: bg 0: block 112: padding at end of block bitmap is not set [ 211.316431][ T4322] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:7: lblock 3 mapped to illegal pblock 3 (length 3) [ 211.352993][ T7156] loop0: detected capacity change from 0 to 32768 [ 211.388124][ T4322] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 211.410112][ T4322] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.410112][ T4322] [ 211.427303][ T4322] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 2) [ 211.448585][ T7156] XFS (loop0): Mounting V5 Filesystem [ 211.454531][ T11] hfsplus: b-tree write err: -5, ino 25 [ 211.460378][ T11] hfsplus: b-tree write err: -5, ino 4 [ 211.468465][ T4322] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 211.469516][ T11] hfsplus: b-tree write err: -5, ino 2 [ 211.487298][ T11] hfsplus: b-tree write err: -5, ino 26 [ 211.523403][ T4322] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.523403][ T4322] [ 211.537671][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 211.647664][ T7156] XFS (loop0): Ending clean mount [ 211.684007][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 211.692134][ T7156] XFS (loop0): Quotacheck needed: Please wait. [ 211.779403][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 211.800247][ T7196] loop3: detected capacity change from 0 to 512 [ 211.836451][ T7156] XFS (loop0): Quotacheck: Done. [ 211.932826][ T7196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.942241][ T7196] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.206868][ T4276] XFS (loop0): Unmounting Filesystem [ 212.236783][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 212.658926][ T7219] loop3: detected capacity change from 0 to 256 [ 212.705204][ T7219] exfat: Deprecated parameter 'utf8' [ 212.710597][ T7219] exfat: Deprecated parameter 'utf8' [ 212.758449][ T7219] exfat: Deprecated parameter 'namecase' [ 212.778082][ T7219] exfat: Deprecated parameter 'utf8' [ 212.850960][ T7219] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 213.045329][ T7225] program syz.1.1009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.315883][ T7227] loop2: detected capacity change from 0 to 32768 [ 213.325260][ T7227] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1010 (7227) [ 213.352127][ T7227] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 213.362528][ T7227] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.372351][ T7227] BTRFS info (device loop2): force zlib compression, level 3 [ 213.379882][ T7227] BTRFS info (device loop2): force clearing of disk cache [ 213.387500][ T7227] BTRFS info (device loop2): setting nodatasum [ 213.394166][ T7227] BTRFS info (device loop2): allowing degraded mounts [ 213.401005][ T7227] BTRFS info (device loop2): enabling disk space caching [ 213.408234][ T7227] BTRFS info (device loop2): disk space caching is enabled [ 213.664805][ T7217] loop5: detected capacity change from 0 to 32768 [ 213.688264][ T7217] (syz.5.1005,7217,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 213.748381][ T7217] (syz.5.1005,7217,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 213.767254][ T7240] loop1: detected capacity change from 0 to 4096 [ 213.883986][ T7227] BTRFS info (device loop2): rebuilding free space tree [ 213.900588][ T7217] JBD2: Ignoring recovery information on journal [ 213.940763][ T7227] BTRFS info (device loop2): disabling free space tree [ 213.948718][ T7227] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.959113][ T7227] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.057729][ T7227] BTRFS info (device loop2): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3 [ 214.071090][ T7227] BTRFS info (device loop2): balance: ended with status: 0 [ 214.144824][ T7217] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 214.268314][ T4269] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 214.301125][ T4268] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 214.307948][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 214.851401][ T7269] loop0: detected capacity change from 0 to 1024 [ 214.909023][ T4461] ocfs2: Unmounting device (7,5) on (node local) [ 214.927578][ T7270] can0: slcan on ptm0. [ 215.122692][ T26] audit: type=1800 audit(1776501410.341:17): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1022" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=2 res=0 errno=0 [ 215.270490][ T7267] can0 (unregistered): slcan off ptm0. [ 215.326595][ T7279] netem: incorrect ge model size [ 215.332340][ T7279] netem: change failed [ 216.227727][ T7310] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 216.510106][ T7317] loop5: detected capacity change from 0 to 256 [ 216.588455][ T7317] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 216.640484][ T7322] process 'syz.1.1036' launched './file1' with NULL argv: empty string added [ 216.710901][ T7325] netlink: 888 bytes leftover after parsing attributes in process `syz.2.1037'. [ 216.947358][ T128] hid-generic 0003:0004:FFFF0001.0009: unknown main item tag 0x0 [ 217.048748][ T7331] loop2: detected capacity change from 0 to 512 [ 217.097304][ T128] hid-generic 0003:0004:FFFF0001.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 217.193337][ T7331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 217.239766][ T7331] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.318394][ T7344] trusted_key: encrypted_key: keyword 'upda÷e' not recognized [ 217.560278][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 217.611913][ T7341] fido_id[7341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.791934][ T7353] loop2: detected capacity change from 0 to 128 [ 217.854258][ T7353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.864232][ T7353] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.973962][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 218.046506][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 218.121300][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 218.179294][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 218.190323][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.244730][ T4316] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.312422][ T4316] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.338576][ T4316] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.364085][ T4316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.370775][ T4316] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 218.415004][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.463528][ T4316] usb 2-1: config 0 descriptor?? [ 218.550082][ T26] audit: type=1326 audit(1776501413.771:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.632839][ T26] audit: type=1326 audit(1776501413.771:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.693120][ T26] audit: type=1326 audit(1776501413.801:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.723844][ T26] audit: type=1326 audit(1776501413.801:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.786110][ T26] audit: type=1326 audit(1776501413.801:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.839540][ T26] audit: type=1326 audit(1776501413.801:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.874167][ T7347] loop0: detected capacity change from 0 to 32768 [ 218.890634][ T4316] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x7 [ 218.907675][ T4316] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x2 [ 218.916633][ T26] audit: type=1326 audit(1776501413.801:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.948029][ T26] audit: type=1326 audit(1776501413.801:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0cb9c819 code=0x7ffc0000 [ 218.979767][ T4316] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 219.039569][ T7347] XFS (loop0): Mounting V5 Filesystem [ 219.112405][ T4316] corsair-cpro: probe of 0003:1B1C:0C10.000A failed with error -38 [ 219.157511][ T4316] usb 2-1: USB disconnect, device number 5 [ 219.209338][ T7347] XFS (loop0): Ending clean mount [ 219.349139][ T4276] XFS (loop0): Unmounting Filesystem [ 219.523387][ T7396] fido_id[7396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 219.732876][ T7403] loop3: detected capacity change from 0 to 8 [ 219.755692][ T7403] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 219.834573][ T4651] udevd[4651]: incorrect cramfs checksum on /dev/loop3 [ 220.199076][ T7395] loop2: detected capacity change from 0 to 40427 [ 220.235272][ T7395] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 220.289239][ T7395] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 220.426764][ T7395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 220.623815][ T7395] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 220.630964][ T7395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 220.804403][ T26] audit: type=1800 audit(1776501416.011:26): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 220.869349][ T7404] loop5: detected capacity change from 0 to 32768 [ 220.909063][ T7404] XFS: ikeep mount option is deprecated. [ 221.022610][ T7404] XFS (loop5): Mounting V5 Filesystem [ 221.113911][ T7404] XFS (loop5): Ending clean mount [ 221.437442][ T4461] XFS (loop5): Unmounting Filesystem [ 221.480714][ T7429] loop1: detected capacity change from 0 to 40427 [ 221.512059][ T7429] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 221.537810][ T7429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 221.572890][ T7429] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 221.633844][ T7429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.798258][ T7429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 221.805569][ T7429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.892460][ T7429] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 221.892937][ T7429] F2FS-fs (loop1): Should run fsck to repair first. [ 222.723888][ T4316] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 222.929130][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 222.936949][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.972691][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.999402][ T4316] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 223.022055][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.042953][ T4316] usb 4-1: config 0 descriptor?? [ 223.371173][ T7483] loop5: detected capacity change from 0 to 512 [ 223.413902][ T125] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 223.441658][ T7483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 223.464411][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 223.470039][ T4316] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 223.520646][ T4316] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 223.539266][ T4316] konepure 0003:1E7D:2DB4.000B: collection stack underflow [ 223.547956][ T4316] konepure 0003:1E7D:2DB4.000B: item 0 0 0 12 parsing failed [ 223.556399][ T4316] konepure 0003:1E7D:2DB4.000B: parse failed [ 223.562557][ T4316] konepure: probe of 0003:1E7D:2DB4.000B failed with error -22 [ 223.603833][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 223.610901][ T125] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.630981][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.673852][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.707099][ T125] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.723501][ T125] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.737581][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.752262][ T4315] usb 4-1: USB disconnect, device number 10 [ 223.776121][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 223.960089][ T125] usb 3-1: GET_CAPABILITIES returned 0 [ 223.966326][ T125] usbtmc 3-1:16.0: can't read capabilities [ 224.206408][ T4315] usb 3-1: USB disconnect, device number 11 [ 224.807061][ T7497] loop0: detected capacity change from 0 to 40427 [ 224.831150][ T7497] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 224.873133][ T7497] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 224.942405][ T7497] F2FS-fs (loop0): Unrecognized mount option "flush_QVºe" or missing value [ 225.084288][ T7522] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.109789][ T7518] loop2: detected capacity change from 0 to 4096 [ 225.162695][ T7518] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 225.262464][ T7504] loop5: detected capacity change from 0 to 32768 [ 225.340066][ T7518] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 225.406182][ T7518] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 225.421752][ T7504] XFS (loop5): Mounting V5 Filesystem [ 225.463988][ T4315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 225.589280][ T7504] XFS (loop5): Ending clean mount [ 225.609610][ T7504] XFS (loop5): Quotacheck needed: Please wait. [ 225.653902][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 225.661090][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.684511][ T4315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.699392][ T4268] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 225.713564][ T4268] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 225.725037][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.781329][ T4315] usb 2-1: config 0 descriptor?? [ 225.880232][ T7504] XFS (loop5): Quotacheck: Done. [ 226.029239][ T4315] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 226.155078][ T4461] XFS (loop5): Unmounting Filesystem [ 226.294319][ T22] usb 2-1: USB disconnect, device number 6 [ 226.723994][ T4316] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.771664][ T7552] loop2: detected capacity change from 0 to 32768 [ 226.782524][ T7552] XFS: ikeep mount option is deprecated. [ 226.792501][ T7552] XFS (loop2): Mounting V5 Filesystem [ 226.828810][ T7552] XFS (loop2): Ending clean mount [ 226.933918][ T22] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.945410][ T4316] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 226.963932][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.991210][ T4316] usb 1-1: config 0 descriptor?? [ 227.034352][ T4316] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 227.070484][ T4268] XFS (loop2): Unmounting Filesystem [ 227.136363][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.151827][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.200535][ T22] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.221161][ T22] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 227.246869][ T22] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 227.267575][ T22] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.278948][ T22] usb 6-1: config 1 interface 1 has no altsetting 0 [ 227.290599][ T22] usb 6-1: string descriptor 0 read error: -22 [ 227.297694][ T22] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 227.321802][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.834625][ T7568] loop1: detected capacity change from 0 to 32768 [ 227.868518][ T4316] usb 1-1: USB disconnect, device number 10 [ 227.970969][ T7568] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 227.970969][ T7568] [ 228.067789][ T7577] loop3: detected capacity change from 0 to 4096 [ 228.152096][ T7577] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 228.189701][ T22] usb 6-1: 2:0: failed to get current value for ch 1 (-71) [ 228.204637][ T7577] ntfs3: loop3: Failed to load $Extend. [ 228.305462][ T22] usb 6-1: USB disconnect, device number 8 [ 229.233881][ T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 229.343854][ T33] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.401560][ T7617] loop1: detected capacity change from 0 to 2048 [ 229.423906][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 229.431518][ T22] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.457433][ T7617] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.472098][ T22] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.505490][ T22] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 229.524075][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 229.531620][ T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.571351][ T7620] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.592290][ T33] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.604021][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 229.611046][ T22] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 229.646130][ T33] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.686671][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.703775][ T33] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.733831][ T22] usb 6-1: config 0 descriptor?? [ 229.743803][ T33] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.789075][ T33] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 229.811641][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.846421][ T33] usb 3-1: config 0 descriptor?? [ 230.281441][ T33] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x7 [ 230.299577][ T33] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x2 [ 230.323944][ T33] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 230.375440][ T22] usb 6-1: USB disconnect, device number 9 [ 230.415395][ T33] corsair-cpro: probe of 0003:1B1C:0C10.000D failed with error -38 [ 230.507498][ T33] usb 3-1: USB disconnect, device number 12 [ 230.646019][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 231.013334][ T7658] loop3: detected capacity change from 0 to 128 [ 231.020860][ T7658] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.090951][ T7658] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.291284][ T7660] loop5: detected capacity change from 0 to 128 [ 231.333215][ T7645] loop1: detected capacity change from 0 to 32768 [ 231.384118][ T7660] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 231.540175][ T7645] XFS (loop1): Mounting V5 Filesystem [ 231.612856][ T7660] sysv_free_block: trying to free block not in datazone [ 231.739475][ T7645] XFS (loop1): Ending clean mount [ 231.759027][ T7645] XFS (loop1): Quotacheck needed: Please wait. [ 231.800841][ T7682] loop3: detected capacity change from 0 to 64 [ 231.824003][ T4461] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 231.906261][ T7645] XFS (loop1): Quotacheck: Done. [ 232.055839][ T7685] loop5: detected capacity change from 0 to 256 [ 232.209795][ T7685] FAT-fs (loop5): Directory bread(block 64) failed [ 232.216597][ T4269] XFS (loop1): Unmounting Filesystem [ 232.229134][ T7685] FAT-fs (loop5): Directory bread(block 65) failed [ 232.259226][ T7687] loop2: detected capacity change from 0 to 256 [ 232.274272][ T7685] FAT-fs (loop5): Directory bread(block 66) failed [ 232.281123][ T7685] FAT-fs (loop5): Directory bread(block 67) failed [ 232.296985][ T7685] FAT-fs (loop5): Directory bread(block 68) failed [ 232.303685][ T7685] FAT-fs (loop5): Directory bread(block 69) failed [ 232.354007][ T7685] FAT-fs (loop5): Directory bread(block 70) failed [ 232.402551][ T7685] FAT-fs (loop5): Directory bread(block 71) failed [ 232.424839][ T7689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1157'. [ 232.434303][ T7685] FAT-fs (loop5): Directory bread(block 72) failed [ 232.440903][ T7685] FAT-fs (loop5): Directory bread(block 73) failed [ 232.787252][ T7699] loop3: detected capacity change from 0 to 64 [ 232.941800][ T7699] syz.3.1162: attempt to access beyond end of device [ 232.941800][ T7699] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 232.997831][ T7699] buffer_io_error: 23 callbacks suppressed [ 232.997848][ T7699] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 233.721489][ T7731] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1174'. [ 234.257609][ T7273] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 234.327855][ T7721] loop2: detected capacity change from 0 to 32768 [ 234.468105][ T7273] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.497378][ T7273] usb 2-1: not running at top speed; connect to a high speed hub [ 234.518464][ T7273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.550558][ T7273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.592682][ T7273] usb 2-1: string descriptor 0 read error: -22 [ 234.627553][ T7273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.665237][ T7273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.699138][ T7273] usb 2-1: 0:2 : does not exist [ 234.704895][ T7732] loop0: detected capacity change from 0 to 40427 [ 234.729020][ T7748] loop5: detected capacity change from 0 to 256 [ 234.753878][ T7732] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 234.761697][ T7732] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 234.837690][ T7732] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.067970][ T7732] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 235.093840][ T7732] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.443348][ T26] audit: type=1800 audit(1776501430.661:27): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1175" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 235.551157][ T7273] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 235.576780][ T7753] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 235.596098][ T7753] ntfs3: loop2: Failed to load $Extend. [ 235.627809][ T7273] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 235.681223][ T7742] XFS (loop3): Mounting V5 Filesystem [ 235.695536][ T7273] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 235.787929][ T7742] XFS (loop3): Ending clean mount [ 235.909103][ T4281] XFS (loop3): Unmounting Filesystem [ 235.928039][ T7273] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 236.005171][ T7273] usb 2-1: USB disconnect, device number 7 [ 236.755827][ T7786] set_capacity_and_notify: 2 callbacks suppressed [ 236.755844][ T7786] loop5: detected capacity change from 0 to 16 [ 236.820972][ T7786] erofs: (device loop5): mounted with root inode @ nid 36. [ 236.963983][ T33] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.149249][ T7796] loop3: detected capacity change from 0 to 64 [ 237.163808][ T33] usb 1-1: Using ep0 maxpacket: 16 [ 237.173300][ T33] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 237.194173][ T7796] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 237.206072][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.226289][ T33] usb 1-1: Product: syz [ 237.232944][ T33] usb 1-1: Manufacturer: syz [ 237.249071][ T33] usb 1-1: SerialNumber: syz [ 237.416298][ T22] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 237.447046][ T7798] loop3: detected capacity change from 0 to 128 [ 237.483210][ T33] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 237.505595][ T33] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.535127][ T33] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 237.558206][ T33] usb 1-1: media controller created [ 237.612801][ T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.625578][ T22] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.654593][ T22] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.688734][ T22] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.718352][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.738398][ T7793] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 237.901233][ T33] zl10353_read_register: readreg error (reg=127, ret==-32) [ 237.922794][ T7790] loop1: detected capacity change from 0 to 40427 [ 238.005874][ T7790] F2FS-fs (loop1): invalid crc value [ 238.027798][ T33] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 238.037755][ T7790] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 238.066582][ T33] usb 1-1: USB disconnect, device number 11 [ 238.095823][ T22] usb 6-1: USB disconnect, device number 10 [ 238.318288][ T7790] F2FS-fs (loop1): recover fsync data on readonly fs [ 238.349731][ T7790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.612082][ T7807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1202'. [ 238.642303][ T7807] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1202'. [ 238.678594][ T7809] loop0: detected capacity change from 0 to 64 [ 238.991225][ T7813] loop3: detected capacity change from 0 to 8 [ 239.075606][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 239.154654][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 239.425984][ T7822] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 239.464942][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 239.504414][ T7825] loop3: detected capacity change from 0 to 512 [ 239.552397][ T7825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.580385][ T7825] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.638048][ T7825] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 239.668772][ T7825] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 239.683256][ T7825] EXT4-fs (loop3): 1 truncate cleaned up [ 239.714197][ T7825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.808143][ T7825] EXT4-fs (loop3): shut down requested (2) [ 239.907742][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 240.316550][ T7844] loop1: detected capacity change from 0 to 128 [ 240.388704][ T7844] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 240.443826][ T7844] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 240.592406][ T7844] sysv_count_free_inodes: unable to read inode table [ 240.724623][ T4269] sysv_free_block: trying to free block not in datazone [ 240.743020][ T7834] loop2: detected capacity change from 0 to 40427 [ 240.768178][ T4269] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 240.801438][ T7834] F2FS-fs (loop2): invalid crc value [ 240.848558][ T7834] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 240.980870][ T7859] loop1: detected capacity change from 0 to 128 [ 241.072424][ T7834] F2FS-fs (loop2): recover fsync data on readonly fs [ 241.102022][ T7834] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.110137][ T33] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 241.120432][ T7861] block nbd2: server does not support multiple connections per device. [ 241.171805][ T7861] block nbd2: shutting down sockets [ 241.306268][ T33] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.327158][ T33] usb 1-1: not running at top speed; connect to a high speed hub [ 241.365953][ T33] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.395549][ T33] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.432479][ T33] usb 1-1: string descriptor 0 read error: -22 [ 241.470357][ T33] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.496577][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.529793][ T33] usb 1-1: 0:2 : does not exist [ 241.745032][ T7870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.812384][ T7870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.884186][ T7870] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.036662][ T26] audit: type=1800 audit(1776501437.261:28): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1231" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 242.171246][ T7879] set_capacity_and_notify: 1 callbacks suppressed [ 242.171263][ T7879] loop2: detected capacity change from 0 to 256 [ 242.214866][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 242.277325][ T7879] FAT-fs (loop2): Directory bread(block 64) failed [ 242.303824][ T7879] FAT-fs (loop2): Directory bread(block 65) failed [ 242.331451][ T7879] FAT-fs (loop2): Directory bread(block 66) failed [ 242.345178][ T33] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 242.383153][ T7879] FAT-fs (loop2): Directory bread(block 67) failed [ 242.396005][ T33] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 242.436168][ T7879] FAT-fs (loop2): Directory bread(block 68) failed [ 242.443873][ T33] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 242.493923][ T7879] FAT-fs (loop2): Directory bread(block 69) failed [ 242.500623][ T7879] FAT-fs (loop2): Directory bread(block 70) failed [ 242.518125][ T33] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 242.537861][ T7879] FAT-fs (loop2): Directory bread(block 71) failed [ 242.558499][ T33] usb 1-1: USB disconnect, device number 12 [ 242.564490][ T7879] FAT-fs (loop2): Directory bread(block 72) failed [ 242.571349][ T7879] FAT-fs (loop2): Directory bread(block 73) failed [ 243.570737][ T7915] mmap: syz.1.1246 (7915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.936816][ T7933] loop5: detected capacity change from 0 to 128 [ 243.955283][ T7933] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.023264][ T7933] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.130186][ T7937] program syz.1.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.322522][ T7944] loop1: detected capacity change from 0 to 16 [ 244.343365][ T7944] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 245.106841][ T7957] device gretap0 entered promiscuous mode [ 245.120024][ T7957] device vlan2 entered promiscuous mode [ 245.329178][ T7950] loop5: detected capacity change from 0 to 32768 [ 245.367604][ T33] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.420176][ T7950] XFS (loop5): Mounting V5 Filesystem [ 245.553905][ T33] usb 2-1: Using ep0 maxpacket: 32 [ 245.565688][ T7950] XFS (loop5): Ending clean mount [ 245.573342][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.594939][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.609161][ T7950] XFS (loop5): Quotacheck needed: Please wait. [ 245.625843][ T33] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.647149][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.674994][ T33] usb 2-1: config 0 descriptor?? [ 245.707524][ T33] hub 2-1:0.0: USB hub found [ 245.782691][ T7950] XFS (loop5): Quotacheck: Done. [ 245.916380][ T33] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 245.959158][ T4461] XFS (loop5): Unmounting Filesystem [ 246.163591][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 246.326150][ T33] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1 [ 246.345936][ T33] hid-generic: probe of 0003:046D:C31C.000E failed with error -22 [ 246.674093][ T33] usb 2-1: USB disconnect, device number 8 [ 247.329046][ T8005] loop0: detected capacity change from 0 to 256 [ 247.378861][ T8005] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 247.884893][ T8017] loop2: detected capacity change from 0 to 512 [ 247.966355][ T8017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.100869][ T8017] EXT4-fs (loop2): 1 truncate cleaned up [ 248.158012][ T8017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.176539][ T8022] loop1: detected capacity change from 0 to 1024 [ 248.236452][ T8022] EXT4-fs: Ignoring removed orlov option [ 248.318025][ T8022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.570557][ T7934] Set syz1 is full, maxelem 65536 reached [ 248.690390][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 248.792716][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 248.873857][ T33] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 248.984089][ T8038] loop1: detected capacity change from 0 to 1024 [ 249.051900][ T8038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.063973][ T33] usb 6-1: Using ep0 maxpacket: 32 [ 249.071721][ T33] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 249.094575][ T8038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.112959][ T33] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 249.131413][ T8038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.145205][ T33] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 249.243893][ T33] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 249.319928][ T33] usb 6-1: config 0 interface 0 has no altsetting 0 [ 249.353439][ T33] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.381377][ T33] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.397948][ T33] usb 6-1: Product: syz [ 249.402389][ T33] usb 6-1: Manufacturer: syz [ 249.408758][ T33] usb 6-1: SerialNumber: syz [ 249.436201][ T33] usb 6-1: config 0 descriptor?? [ 249.452655][ T33] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.508249][ T33] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 249.553049][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 249.751136][ T8058] loop1: detected capacity change from 0 to 512 [ 249.808128][ T4315] usb 6-1: USB disconnect, device number 11 [ 249.814429][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 249.825117][ T4315] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 249.872634][ T8058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.903921][ T8058] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.062695][ T8058] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.1301: iget: bad i_size value: 2533274857506816 [ 250.233024][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 251.313800][ T4315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 251.343538][ T8104] loop0: detected capacity change from 0 to 512 [ 251.401951][ T8107] device syz_tun entered promiscuous mode [ 251.425121][ T8107] device macvtap1 entered promiscuous mode [ 251.475639][ T8107] device syz_tun left promiscuous mode [ 251.481397][ T8104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.520082][ T8104] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.539970][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 251.560553][ T4315] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 251.580762][ T8104] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.1320: iget: bad i_size value: 2533274857506816 [ 251.641432][ T4315] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 251.664153][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.689031][ T4315] usb 4-1: Product: syz [ 251.709749][ T4315] usb 4-1: Manufacturer: syz [ 251.714693][ T4315] usb 4-1: SerialNumber: syz [ 251.750352][ T4315] r8152-cfgselector 4-1: config 0 descriptor?? [ 251.790852][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 252.029014][ T4315] r8152-cfgselector 4-1: Unknown version 0x0000 [ 252.038505][ T4315] r8152-cfgselector 4-1: Unknown version 0x0000 [ 252.051871][ T4315] r8152-cfgselector 4-1: bad CDC descriptors [ 252.062138][ T4315] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 252.273555][ T7273] usb 4-1: USB disconnect, device number 11 [ 252.440512][ T8131] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 252.704316][ T8138] loop5: detected capacity change from 0 to 512 [ 252.729397][ T8138] EXT4-fs (loop5): Test dummy encryption mode enabled [ 252.766974][ T8138] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.834348][ T8138] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1332: bad orphan inode 131083 [ 252.975070][ T8138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 253.198331][ T4461] EXT4-fs (loop5): unmounting filesystem. [ 253.640188][ T8158] loop0: detected capacity change from 0 to 4096 [ 253.782434][ T8158] ntfs3: loop0: ino=5, "/" attr_set_size [ 253.796805][ T8158] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 254.101004][ T8170] loop1: detected capacity change from 0 to 512 [ 254.133348][ T8170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.202495][ T8170] EXT4-fs (loop1): 1 truncate cleaned up [ 254.256383][ T8170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.533004][ T8176] tmpfs: Bad value for 'gid' [ 254.690186][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 254.995436][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 255.325815][ T8056] Set syz1 is full, maxelem 65536 reached [ 255.660310][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1361'. [ 255.686776][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693211][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.943244][ T8214] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1366'. [ 255.984175][ T7273] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 256.184788][ T7273] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 256.220627][ T7273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.246070][ T7273] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 256.267590][ T7273] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 256.286133][ T7273] usb 1-1: Manufacturer: syz [ 256.298132][ T7273] usb 1-1: config 0 descriptor?? [ 256.500434][ T8231] loop2: detected capacity change from 0 to 1024 [ 256.564798][ T8231] hfsplus: bad catalog entry type [ 256.574309][ T7273] rc_core: IR keymap rc-hauppauge not found [ 256.580506][ T7273] Registered IR keymap rc-empty [ 256.619127][ T7273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 256.668924][ T7273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 256.680566][ T4322] hfsplus: b-tree write err: -5, ino 25 [ 256.694238][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 256.699846][ T4322] hfsplus: b-tree write err: -5, ino 2 [ 256.719887][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 256.751732][ T7273] usb 1-1: USB disconnect, device number 13 [ 256.756419][ T4315] kernel read not supported for file /dsp1 (pid: 4315 comm: kworker/1:6) [ 256.758342][ T4322] hfsplus: b-tree write err: -5, ino 26 [ 256.932526][ T8238] loop2: detected capacity change from 0 to 512 [ 257.030541][ T8238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 257.047597][ T8238] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.178480][ T8244] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 257.273992][ T8246] loop3: detected capacity change from 0 to 256 [ 257.396574][ T8246] FAT-fs (loop3): Directory bread(block 64) failed [ 257.403193][ T8246] FAT-fs (loop3): Directory bread(block 65) failed [ 257.449429][ T8246] FAT-fs (loop3): Directory bread(block 66) failed [ 257.475433][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.489994][ T8246] FAT-fs (loop3): Directory bread(block 67) failed [ 257.548075][ T8246] FAT-fs (loop3): Directory bread(block 68) failed [ 257.555253][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.584376][ T8246] FAT-fs (loop3): Directory bread(block 69) failed [ 257.591065][ T8246] FAT-fs (loop3): Directory bread(block 70) failed [ 257.606742][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.608344][ T8246] FAT-fs (loop3): Directory bread(block 71) failed [ 257.669008][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.682668][ T8246] FAT-fs (loop3): Directory bread(block 72) failed [ 257.723507][ T8246] FAT-fs (loop3): Directory bread(block 73) failed [ 257.734599][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.768751][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.812790][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.881212][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.924487][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 257.960522][ T4268] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 258.532402][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 258.771219][ T1328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.804251][ T29] wlan1: Trigger new scan to find an IBSS to join [ 258.845833][ T11] ------------[ cut here ]------------ [ 258.852087][ T11] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 258.863636][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 258.873564][ T11] Modules linked in: [ 258.877559][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 258.885127][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.895289][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 258.901647][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 258.907976][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 b5 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 1b b7 a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 258.927699][ T11] RSP: 0018:ffffc90000107400 EFLAGS: 00010246 [ 258.933848][ T11] RAX: 4b2ff78bce1adf00 RBX: 000000000000000c RCX: ffff88813fec3b80 [ 258.941871][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 258.949942][ T11] RBP: 0000000000000084 R08: ffffc90000107087 R09: 1ffff92000020e10 [ 258.958023][ T11] R10: dffffc0000000000 R11: fffff52000020e11 R12: 0000000000000020 [ 258.966094][ T11] R13: dffffc0000000000 R14: ffff8880792fb358 R15: ffff88823bc2af28 [ 258.974156][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 258.983148][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.989843][ T11] CR2: 00007f32ae5e92f8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 258.997906][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.006001][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.014055][ T11] Call Trace: [ 259.017390][ T11] [ 259.020382][ T11] rate_control_send_low+0x194/0x790 [ 259.025786][ T11] rate_control_get_rate+0x207/0x5c0 [ 259.031136][ T11] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 259.036894][ T11] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 259.042938][ T11] ? ieee80211_queue_skb+0xc2/0x21c0 [ 259.048352][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 259.053895][ T11] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 259.059951][ T11] ? sta_info_get+0x289/0x2a0 [ 259.064743][ T11] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 259.070627][ T11] ieee80211_tx+0x2d4/0x460 [ 259.075246][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 259.080694][ T11] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 259.086263][ T11] ? __bpf_trace_tasklet+0x10/0x10 [ 259.091436][ T11] ? ieee80211_xmit+0x30c/0x3f0 [ 259.096404][ T11] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 259.102451][ T11] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 259.108397][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 259.114831][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 259.121070][ T11] ieee80211_scan_work+0x4d3/0x1bc0 [ 259.126390][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 259.131467][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 259.137124][ T11] cfg80211_wiphy_work+0x221/0x260 [ 259.142307][ T11] ? process_one_work+0x7b0/0x1160 [ 259.147526][ T11] process_one_work+0x8a2/0x1160 [ 259.152544][ T11] ? worker_detach_from_pool+0x240/0x240 [ 259.158300][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 259.163424][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 259.169084][ T11] ? kthread_data+0x4b/0xc0 [ 259.173775][ T11] worker_thread+0xaa2/0x1270 [ 259.178555][ T11] kthread+0x29d/0x330 [ 259.182699][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 259.187844][ T11] ? kthread_blkcg+0xd0/0xd0 [ 259.192503][ T11] ret_from_fork+0x1f/0x30 [ 259.197057][ T11] [ 259.200124][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.207521][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 259.214935][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.225122][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 259.231421][ T11] Call Trace: [ 259.234739][ T11] [ 259.237706][ T11] dump_stack_lvl+0x188/0x24e [ 259.242432][ T11] ? memcpy+0x3c/0x60 [ 259.246541][ T11] ? show_regs_print_info+0x12/0x12 [ 259.251800][ T11] ? load_image+0x400/0x400 [ 259.256362][ T11] panic+0x2e5/0x730 [ 259.260314][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 259.264870][ T11] ? ret_from_fork+0x1f/0x30 [ 259.269525][ T11] __warn+0x2f8/0x4f0 [ 259.273548][ T11] ? __rate_control_send_low+0x635/0x880 [ 259.279228][ T11] ? __rate_control_send_low+0x635/0x880 [ 259.284916][ T11] report_bug+0x2ba/0x4f0 [ 259.289302][ T11] ? __rate_control_send_low+0x635/0x880 [ 259.294988][ T11] handle_bug+0x3a/0x70 [ 259.299195][ T11] exc_invalid_op+0x16/0x40 [ 259.303745][ T11] asm_exc_invalid_op+0x16/0x20 [ 259.308641][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 259.314944][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 b5 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 1b b7 a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 259.334597][ T11] RSP: 0018:ffffc90000107400 EFLAGS: 00010246 [ 259.340708][ T11] RAX: 4b2ff78bce1adf00 RBX: 000000000000000c RCX: ffff88813fec3b80 [ 259.348716][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 259.356729][ T11] RBP: 0000000000000084 R08: ffffc90000107087 R09: 1ffff92000020e10 [ 259.364750][ T11] R10: dffffc0000000000 R11: fffff52000020e11 R12: 0000000000000020 [ 259.372763][ T11] R13: dffffc0000000000 R14: ffff8880792fb358 R15: ffff88823bc2af28 [ 259.380825][ T11] rate_control_send_low+0x194/0x790 [ 259.386273][ T11] rate_control_get_rate+0x207/0x5c0 [ 259.391610][ T11] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 259.397337][ T11] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 259.403377][ T11] ? ieee80211_queue_skb+0xc2/0x21c0 [ 259.408706][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 259.414207][ T11] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 259.420233][ T11] ? sta_info_get+0x289/0x2a0 [ 259.424979][ T11] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 259.430842][ T11] ieee80211_tx+0x2d4/0x460 [ 259.435427][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 259.440865][ T11] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 259.446407][ T11] ? __bpf_trace_tasklet+0x10/0x10 [ 259.451574][ T11] ? ieee80211_xmit+0x30c/0x3f0 [ 259.456576][ T11] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 259.462599][ T11] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 259.468459][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 259.474835][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 259.481064][ T11] ieee80211_scan_work+0x4d3/0x1bc0 [ 259.486324][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 259.491389][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 259.496985][ T11] cfg80211_wiphy_work+0x221/0x260 [ 259.502161][ T11] ? process_one_work+0x7b0/0x1160 [ 259.507326][ T11] process_one_work+0x8a2/0x1160 [ 259.512345][ T11] ? worker_detach_from_pool+0x240/0x240 [ 259.518027][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 259.523097][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 259.528681][ T11] ? kthread_data+0x4b/0xc0 [ 259.533219][ T11] worker_thread+0xaa2/0x1270 [ 259.537950][ T11] kthread+0x29d/0x330 [ 259.542044][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 259.547094][ T11] ? kthread_blkcg+0xd0/0xd0 [ 259.551710][ T11] ret_from_fork+0x1f/0x30 [ 259.556180][ T11] [ 259.559800][ T11] Kernel Offset: disabled [ 259.564291][ T11] Rebooting in 86400 seconds..