last executing test programs: 8m52.122178803s ago: executing program 32 (id=4505): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xfffffe8b, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000f14010000008000fedbdf250c004500", @ANYRESOCT=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 7m21.449662939s ago: executing program 33 (id=5809): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x8f, &(0x7f0000000080)={&(0x7f0000002700)=""/4108, 0x100c, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) 6m4.116870318s ago: executing program 34 (id=6908): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getdents64(r0, &(0x7f0000000000)=""/32, 0x20) 5m32.234665492s ago: executing program 35 (id=7238): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000940)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@fat=@nfs_stale_rw}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@nodots}, {@fat=@tz_utc}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000008c0)={{0x77359400}, {0x77359400}}) 5m27.477930865s ago: executing program 36 (id=7295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5m5.695298569s ago: executing program 37 (id=7503): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfcbf8, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) 4m24.957176194s ago: executing program 0 (id=7929): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 4m24.672808414s ago: executing program 0 (id=7934): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, 0x0, 0x0) 4m24.434429754s ago: executing program 0 (id=7936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)=0x36) 4m24.130514323s ago: executing program 0 (id=7940): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x6d, 0x1}, 'port1\x00', 0x41, 0x118860, 0x101, 0xaa, 0xd, 0x2d68, 0x10001, 0x0, 0x2, 0x6}) 4m23.865704188s ago: executing program 0 (id=7946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 4m23.53786402s ago: executing program 0 (id=7951): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 4m8.435873605s ago: executing program 38 (id=7951): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m38.941533372s ago: executing program 9 (id=9344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) 2m38.512837469s ago: executing program 9 (id=9351): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x68, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2c}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xf, @local, @remote}, "b2f6fc43e5721dcc"}}}}}, 0x0) 2m38.445798286s ago: executing program 1 (id=9352): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 2m38.280269515s ago: executing program 9 (id=9356): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000002940)=@phonet={0x23, 0x0, 0x4, 0xa}, 0x80, 0x0}, 0x0) 2m38.135788564s ago: executing program 1 (id=9358): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, 0x0) 2m37.982489045s ago: executing program 9 (id=9362): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8800, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '866'}}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}]}, 0x2c, 0x365, &(0x7f0000000340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) 2m37.921879198s ago: executing program 1 (id=9364): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300) 2m37.036711933s ago: executing program 9 (id=9379): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0xe4, 0x30, 0x51b, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x7}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe4}}, 0x0) 2m36.884462673s ago: executing program 1 (id=9381): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 2m36.67623424s ago: executing program 9 (id=9385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 2m36.544176677s ago: executing program 1 (id=9387): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2m36.128606511s ago: executing program 1 (id=9393): syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x1, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m35.565877562s ago: executing program 39 (id=9393): syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x1, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m21.229404072s ago: executing program 40 (id=9385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 51.972380212s ago: executing program 7 (id=10584): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) eventfd2(0x0, 0x0) 51.707733698s ago: executing program 7 (id=10586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000000)=0x1, 0x4) 51.467366323s ago: executing program 7 (id=10589): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) 51.140407823s ago: executing program 7 (id=10593): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1000002, &(0x7f0000000200)={[{@errors_remount}, {}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@gid}, {@discard_size={'discard', 0x3d, 0x426}}, {@grpquota}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x401}}]}, 0x1, 0x60b9, &(0x7f000000c400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000020240)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 49.250890996s ago: executing program 7 (id=10618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a300000000028000480240001800940"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 48.444058435s ago: executing program 7 (id=10625): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) 47.665158445s ago: executing program 41 (id=10625): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) 29.41114787s ago: executing program 4 (id=10800): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x51}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) 28.86527526s ago: executing program 4 (id=10807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)={0x40, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x2c, 0xe, 0x0, 0x1, [@nested={0x28, 0x7e, 0x0, 0x1, [@nested={0x8, 0xe9, 0x0, 0x1, [@nested={0x4, 0xdf}]}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x8, 0x11e, 0x0, 0x1, [@nested={0x4, 0x70}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) 28.651828017s ago: executing program 4 (id=10810): syz_mount_image$ocfs2(&(0x7f0000000600), &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4717, &(0x7f0000001600)="$eJzs222IHGcBB/Bn9k5zlybXe0mbpOnLJhE8tByXfqrWD/Gs2mjavGhbTZVz73K9nO7dnne7WjBIDYIoCEoQVHyhKpR+qQUx0C+1CAVfkFahVBStX0QKVfCDQRvoye7O5HZm9zqb26Sl7e8H7d48M88zs/vfeWaeeTaFWPXUwmpxYbVYWipWZu9fvaX4uUq5tjgXCq+S13r/dOdK5CT7186R933gI/fcEsIfjn3tQ2tra2uhbjh0dKDl7/P/Pj3b+pooZOrU2+3cWtMfa4+89PO3vNIWeU6EEHa0HVddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvRxCi7P3vvDcsTOH952ZevyxZy7MH91wwyiE75Z33zy/+OL+vtuef8dl2j0AALyiDx4/cvfRyQPhySgMnetvv1/fGb8m98d3vu1Tdz3cv75+je70vYqhAgAAQMb6+H84ernDfF0ys5ZMCT7xwIm7n4rW1xvYvr4duuvI7e+fPBDP/0Zt62+Ni/753r7GHGp23jc7/zuSqd95/nd9Pw9/9dlfLr1188efHF+y3+EQFSZSy4XCxEQIx6aay7uirYVyZbX6zvsrtaWTm9/vG0U6/+zs/fqEfrf5j2aq583/7/7E53822N/LOxgL2W9tfbnY/lWmg3T+G/flP/lS1FX+Y5l6efnf8fT287/a0ss7yO6RS5HOv3ki7mvdoNjsAOr5f7M/P/8dmfbz8v/+1LlHT2zi9z/1fmY4qh/rQKoHeDku3+AnTGSk828Gkeo64w9yo/P/f5n8r8m0n5f/nZV//O5vPVz/N+r/x6d6afPNI51/M4hiaov183+kkH/+X5tpPy//357687Of7Ola3Z5//fjHXf+7ks4/vhCnO8/GJ9lt/78z035e/rvG7ntoYRPH/eHB+DiHojDW8qvTc/VL2ND6fHVjSFNfvbyJnbwJpPNvfmqpU2eo+dI4/4fz+/9dmfbz8n9oz9ffc7qn3/927v8n9f9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mfv/+vJB+Xclnf/WtvXrz38KXY3/rsvUz3v+s2/0qUf+2sP4Pzm+ZL/J85/kOcR41Hz+Q2fp/K/acLtur/97MvXyzv9v/ef5p/f30v9HA54A9CCd/7ZmYYcBYLf5X59pPy//L9zz5Y//aRPjv8Yd30CSf8v4f0uz/Kj+vyvp/Lc3C1P/GOrBxv8b1/+oPff/ZvK/IdN+Xv4XDk30f+UyX//rxz/e4VE27dL5D224XT3/33dx/b8xUy8v/y/u/emLN/d0/x/CpLH+pqXzv3rD7Rrn/0B+/jdl6uXl/51v/PqJB9uLu0707d1uSEfp/JvX+tSHH9+bdzv+L2baz8v/R+Pnz+6/AuO/W3Ou/7qMpnT+zVnzS8k/O/7fm2k/L//vHfnBSv8VeP5zh/s/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATRmNX4dDVJhILRcKExMhjMXLu8LWaKZ0cnqmXJn9zGoIO+LyYhiN5suVmVJ5emGpcnJuulQuV2ZDuCZevyMMRKvlSnV6sbR87cW2BqNTc6WV6sxcqRpC2BmXXx+2J23NLFQXS8uNbZM6V0Wlz9Yq1dJEbXVuJey+WL4tKZ9fqdSWr7vY1tWFysryqdLS9MmFlXdPTk5Ohj0Xj3kkmnugOrdUbR5tc229TlJ3OGp5M43VN7Ts79OV2spSqdwov7GlTrkyWyq31LmpZX/VldrSbKk6N12uzCf7K7bUbXlvjdV743XjYST1/pK6WQfj19sPHf/o8cMH2tYXo3TeS7XFucntnb8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxxPXnbu74dQuhrLhVCCAeTP6L4v5Sz977w3LEzh/edmXr8sWcuzB/ttA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8nx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs3M9LFV0cB+Az43tfC6SUNkIuA0NEdCdhQb+IpPIa2bJN66BWCRkUBYYRLQuCIKhdVBC0Cir/gqiFy1bVphYtDEKoGJ3Jyx3l3hQavfM8MJwZZjzzhcGZO+czHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDjOL9rviNpr+zZurh09obQnu77P4QwHC2tf93fFrpCCN+/TZ0NK7SZrrr+343PjObPGv1ZOzj6+OZwtPb6s7/NztsZonigZnt3FMcDA2vvv1Xd638x2R+FEBddCIWYG3l2rhJCaCu6EArx6/Ps5eT+/l/RhVCI3k/3O5LrX2ni2HU8ntmgtu/90lNJf+NRPherl/prn/2N/sfdA1rL+9PXPsQuaum9Tt//o3TxPlgO06eOfXxZdBEUZnpm4njRNQAAAP/WhQb5f9i2tP7wahS6OvO5/4+6/L+7rv+V8/9lD3beGplqJoRY1Y7c2GSyPXhgPX1uZs0N6p3pu373bcV4T1nJ/8tN/l9uf5P/03qy/J9ykv+XwMLqu+T/JN7I/0vp6e1986+KLoLCyP8BAKB8jpwcm6gODiUv/1t+tufz+p60raZ5+qM7k31PasaN5Ieb29ETY4cODw6l1z0/ILg8/0O8uHch/d6jvs2M13130Wj+h+7nc7M32vNHVJv8fiOrLzuv+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3u3NPwyAYhWH0u62I2mhVNGHhJ8EHGhgRgBRmNKCDCQMwEAIKGMg5y73Js7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP96/yuvj+0hjptUakqeyya/8cT7OfuW+H5X32uHErAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//2KfMMw==") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) 25.629416332s ago: executing program 4 (id=10843): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) sigaltstack(0x0, 0x0) 24.652144475s ago: executing program 4 (id=10851): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) 24.098265618s ago: executing program 4 (id=10854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 8.92400626s ago: executing program 42 (id=10854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3.97353793s ago: executing program 5 (id=11086): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) 3.883714863s ago: executing program 2 (id=11087): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f0000000140)={0x5006000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.630075213s ago: executing program 5 (id=11091): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800c01, &(0x7f0000002480), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000ac0)={0x2, 0x6, @start={0x0, 0x1, "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", "f325926ad0eeae837436e2185bb11f5748eb77662df349f6bfa906f4a88f9c41b2e3009b3f98717bdf9f7c0942de8c7bb4b6b876d0b98e3fc0d989a6e36a96ac0fa6aff7b64f28b63fbbbbd3eed47d0efe3230ef5342f0d8e821d2c226ea9772706c166fbe2b814a9d023849539716204380cbf05829571383365162ad279f1e54c8dbdd0b79fff40527c1c5f903224bb166425054dd818437572d34a701d33a05c34d6aa3163bd60815609db71f64f0a758ba9e5d170b480053dfab62f4b6c5825342988432d424ab462301af5952cb7add151af1bf1bf390447d59ade72a46d177cbe1dc9abff44fecaaf1680d1c4909f2b850dc3a61062c813a78b830bbe8f5af759fec06aae879b0bc7483f43b588181ad08686df313fe2fff56c1541784b94898ea9a3bb9139f303581b302d1cc5094936c4caa759f874a864f396e785ce26d130658e73ded8aeab3bf23ad57b09816174426dac5db62352ce26efc3c575787611901067112efd8b1ab538ddd910ff8cfdb6d0a7f7ab63839094c98dc0ac0b51ebc4c5a47270999466c005932cc3dabacd00599c7da7f0a01cc60601c3830c16db6fd6dbb50d5d2997801dc1d8be70af9a9c5202524dee31fcd8567631d045ffbce7b9e078b4690b0433840af6a59b76855c55a47c252ea9b436c366cb998caab715c1c0d26e8aecad57415834fc64e9f0d4326771660d8d41b27a759b733749f3b0f1fd50d76a4f466eb0356e91ba90b6590fb1f5c80585364c188fba5375ad834ecb0bdcbdd087bd6a025515fa7b61bca7bbee840f946b497965f31ae51e6bc9e5b97cd1ef949849c7d02bfdc30bac919979139520f30e4df4dab924bd52a80e732d55e3a12454e88938e548543cfed8e0d4bfc31bcf5cc5a3befcf90750f940e74df865f1933427be8d91390c1792bef75db9a0801934029d696054173eda2621f2e5007953bddf0a1dd6e1b6b61b0c1f8ed46a372a895bf63994f8df7fe79b7d4466bc327162c73649b87a69dcf5053f8d3b28bc298f25d6ad75e0332349474cfc54e4de913af95478e821d20db1bff4edea1447e15e371d6474f881314b842247efc802bc1758b3a8b97000fed12fc531b67d6605550575ba2c8d83c5e418f98641fcaa2a45a03bd145376824d74caf307a34d0f5b6129bdca6c23d67397f8653bb2382ca3371ca5b2a93ba00a3699d8bc9dfa9f34c23dcc39eab58ba65ab61f4279b203cba567d4880414cd8333e95425e95c69119c0fddab130ecddbb988cac75e9c61f1777f5c0cbb2024097be0b9e97f0ea9a0827be96035f6fdd47f83d7b3c825f2b45263d72e469d578a31c93de509b33cc21e4ceddd35c6a2cc7bb2c76a00357b2353e84d402b5e86c6dae7c253c121fc611f780b41a5485bbb8b9dae3ffbbb250804f2b69da49caedf049a0e979fce57ebe00ff564c7b3de"}, [0x7f, 0x4, 0x5, 0x80, 0x4, 0x10000, 0xfffffffffffffff8, 0xd736, 0x0, 0x4, 0x6, 0x5c7, 0x2, 0x8000000000000000, 0x7, 0x4c9b, 0x2, 0x1, 0x7, 0x1, 0x7fffffff, 0x9, 0x100000001, 0x30e7, 0x4, 0x2, 0x5, 0x5, 0x400, 0x6, 0x1, 0x3, 0x7, 0xe, 0x400000, 0x9ca5, 0x4, 0x2, 0x2, 0x7ff, 0x6, 0x6, 0xfffffffffffffffe, 0x80, 0x0, 0xc, 0xa47e, 0xb, 0x9, 0x3, 0x2020000000000009, 0x4000000000, 0x42, 0x67, 0x800, 0xffffffffffff8001, 0xf91, 0x200000000000009, 0xffd, 0x8, 0x3, 0x8000000000000, 0x3, 0x8]}) 3.22682758s ago: executing program 2 (id=11095): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.903062119s ago: executing program 2 (id=11101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 2.633367551s ago: executing program 2 (id=11104): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e31"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.161018788s ago: executing program 3 (id=11109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}}, 0x0) 2.102848648s ago: executing program 6 (id=11110): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 1.867117369s ago: executing program 8 (id=11112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.710235842s ago: executing program 6 (id=11113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}}, 0x0) 1.559506406s ago: executing program 8 (id=11114): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100002f00010000000000fbdbdd2508"], 0x118}], 0x1}, 0x4008080) 1.542900291s ago: executing program 3 (id=11115): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x34324241, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) 1.300734438s ago: executing program 5 (id=11116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000014c0)=ANY=[@ANYBLOB="640000001400010027bd7000fedbdf257f000001000000000000000000000000e00000020000000000000000000000004e2200004e2000060200f22000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e00000000000a0010"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.264284753s ago: executing program 8 (id=11117): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x9, 0x103000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x8, 0x7, 0x4, 0x400, 0x5, {}, {0x3, 0xc, 0x6, 0x7, 0x6, 0x2, "22e1abf4"}, 0x1f4, 0x2, {0x0}, 0x40}) 1.249400734s ago: executing program 6 (id=11118): mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 1.160115975s ago: executing program 3 (id=11119): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 997.68151ms ago: executing program 8 (id=11120): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10000) 872.644024ms ago: executing program 6 (id=11121): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) 789.421979ms ago: executing program 8 (id=11122): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0xa0082, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock mo'], 0xc) 771.991831ms ago: executing program 3 (id=11123): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000180)="d0849e99c27f53", 0x7}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 643.271763ms ago: executing program 5 (id=11124): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 545.618243ms ago: executing program 3 (id=11125): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8}}) 467.241775ms ago: executing program 2 (id=11126): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 458.666251ms ago: executing program 6 (id=11127): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10) 418.098388ms ago: executing program 8 (id=11128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0xf0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1}, {0x4, 0x6, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 333.63526ms ago: executing program 5 (id=11129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 193.729509ms ago: executing program 3 (id=11130): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(>.', 0x0) 59.422301ms ago: executing program 2 (id=11131): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, 0x0) 58.123322ms ago: executing program 6 (id=11132): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210081000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 0s ago: executing program 5 (id=11133): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) kernel console output (not intermixed with test programs): f8' [ 965.415727][T29771] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 965.639401][T29787] loop4: detected capacity change from 0 to 512 [ 965.687751][T29787] EXT4-fs: Ignoring removed nobh option [ 965.746699][T29787] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 965.834828][T29787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 965.875636][T29787] EXT4-fs (loop4): orphan cleanup on readonly fs [ 965.939292][T29787] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.9763: attempt to clear invalid blocks 1024 len 1 [ 966.036091][T29787] EXT4-fs (loop4): Remounting filesystem read-only [ 966.086678][T29787] EXT4-fs (loop4): 1 truncate cleaned up [ 966.142284][T29787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 966.459695][T29063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 966.599455][T29811] loop5: detected capacity change from 0 to 4096 [ 966.664030][T29819] netlink: 'syz.6.9775': attribute type 15 has an invalid length. [ 966.737182][T29811] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 966.750736][ T8103] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 966.801018][T29811] ntfs3(loop5): Failed to load $Extend (-22). [ 966.819425][T29811] ntfs3(loop5): Failed to initialize $Extend. [ 966.960775][ T8103] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 967.006977][ T8103] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.060322][ T8103] usb 8-1: Product: syz [ 967.064543][ T8103] usb 8-1: Manufacturer: syz [ 967.092534][ T8103] usb 8-1: SerialNumber: syz [ 967.144569][ T8103] usb 8-1: config 0 descriptor?? [ 967.393151][ T8103] usb 8-1: Firmware version (0.0) predates our first public release. [ 967.439962][ T8103] usb 8-1: Please update to version 0.2 or newer [ 967.565846][T29855] xt_l2tp: missing protocol rule (udp|l2tpip) [ 967.611769][ T8103] usb 8-1: USB disconnect, device number 18 [ 969.206838][T29864] loop2: detected capacity change from 0 to 32768 [ 969.267378][T29864] JBD2: Ignoring recovery information on journal [ 969.384846][T29922] Cannot find del_set index 286 as target [ 969.462964][T29864] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 969.546845][T29927] netlink: 'syz.6.9818': attribute type 1 has an invalid length. [ 969.611846][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9818'. [ 969.621582][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 969.621602][ T31] audit: type=1800 audit(969.652:4381): pid=29864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9792" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 969.966750][T29944] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 969.983073][ T5827] ocfs2: Unmounting device (7,2) on (node local) [ 970.025968][T29944] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 970.054070][T29944] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 970.066056][T29945] loop3: detected capacity change from 0 to 512 [ 970.120557][ T8103] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 970.138993][T29945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 970.160673][ T31] audit: type=1326 audit(970.192:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9218f749 code=0x7ffc0000 [ 970.210453][T29945] System zones: 1-12 [ 970.215269][T29945] EXT4-fs (loop3): orphan cleanup on readonly fs [ 970.246043][T29945] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9826: invalid indirect mapped block 8 (level 2) [ 970.256513][ T31] audit: type=1326 audit(970.192:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e92191667 code=0x7ffc0000 [ 970.308077][ T8103] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 970.325087][T29945] EXT4-fs (loop3): 1 truncate cleaned up [ 970.335800][ T8103] usb 5-1: config 95 has no interface number 0 [ 970.369004][ T8103] usb 5-1: config 95 interface 1 has no altsetting 0 [ 970.369227][T29945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 970.395324][ T31] audit: type=1326 audit(970.192:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7e921915dc code=0x7ffc0000 [ 970.442858][ T8103] usb 5-1: string descriptor 0 read error: -22 [ 970.450648][ T8103] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 970.471008][ T8103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.482321][ T31] audit: type=1326 audit(970.192:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e92191514 code=0x7ffc0000 [ 970.568045][ T31] audit: type=1326 audit(970.192:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e92191514 code=0x7ffc0000 [ 970.634625][ T31] audit: type=1326 audit(970.212:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7e9218e3aa code=0x7ffc0000 [ 970.699069][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.778272][ T31] audit: type=1326 audit(970.212:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9218f749 code=0x7ffc0000 [ 970.944789][ T31] audit: type=1326 audit(970.212:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.2.9825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9218f749 code=0x7ffc0000 [ 970.996144][ T8103] usb 5-1: USB disconnect, device number 100 [ 971.267300][T29923] loop5: detected capacity change from 0 to 32768 [ 971.368628][T29923] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9817 (29923) [ 971.474312][T29923] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 971.536392][T29923] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 971.805721][T29923] BTRFS info (device loop5): allowing degraded mounts [ 971.860400][T29923] BTRFS info (device loop5): enabling free space tree [ 971.898516][T29923] BTRFS info (device loop5): enabling auto defrag [ 972.121094][T28665] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 972.386676][T30018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9849'. [ 972.800375][T22584] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 972.903041][T29968] loop2: detected capacity change from 0 to 40427 [ 972.956988][T29968] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 973.000876][T22584] usb 5-1: Using ep0 maxpacket: 8 [ 973.004242][T29968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 973.017232][T22584] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.055435][T29968] F2FS-fs (loop2): invalid crc value [ 973.113640][T22584] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 973.174221][T22584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.232263][T22584] usb 5-1: Product: syz [ 973.260850][T22584] usb 5-1: Manufacturer: syz [ 973.266170][T22584] usb 5-1: SerialNumber: syz [ 973.352570][T22584] usb 5-1: config 0 descriptor?? [ 973.402377][T22584] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 973.473344][T22584] usb 5-1: selecting invalid altsetting 1 [ 973.518947][ T31] audit: type=1326 audit(973.542:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30047 comm="syz.3.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ee98f749 code=0x7ffc0000 [ 973.866803][ T9041] usb 5-1: USB disconnect, device number 101 [ 973.956920][T30062] netlink: 'syz.5.9865': attribute type 16 has an invalid length. [ 974.000982][T30062] netlink: 'syz.5.9865': attribute type 17 has an invalid length. [ 974.020390][T30062] netlink: 'syz.5.9865': attribute type 27 has an invalid length. [ 974.034834][T30065] netlink: 'syz.6.9866': attribute type 30 has an invalid length. [ 974.934405][T30089] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.012118][T30089] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.295969][T30104] netlink: 'syz.6.9881': attribute type 3 has an invalid length. [ 975.324048][T30104] netlink: 46 bytes leftover after parsing attributes in process `syz.6.9881'. [ 975.447046][T30116] loop4: detected capacity change from 0 to 256 [ 975.520470][T30105] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 975.605143][T30105] bond2 (unregistering): Released all slaves [ 975.653483][T30116] FAT-fs (loop4): Directory bread(block 64) failed [ 975.660060][T30116] FAT-fs (loop4): Directory bread(block 65) failed [ 975.708684][T30116] FAT-fs (loop4): Directory bread(block 66) failed [ 975.750012][T30116] FAT-fs (loop4): Directory bread(block 67) failed [ 975.788510][T30116] FAT-fs (loop4): Directory bread(block 68) failed [ 975.850425][T30116] FAT-fs (loop4): Directory bread(block 69) failed [ 975.895970][T30116] FAT-fs (loop4): Directory bread(block 70) failed [ 975.926281][T30116] FAT-fs (loop4): Directory bread(block 71) failed [ 975.985621][T30116] FAT-fs (loop4): Directory bread(block 72) failed [ 976.008258][T30116] FAT-fs (loop4): Directory bread(block 73) failed [ 976.090326][ T789] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 976.280460][ T789] usb 8-1: Using ep0 maxpacket: 32 [ 976.311942][ T789] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.373111][ T789] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 976.422219][ T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.462815][ T789] usb 8-1: Product: syz [ 976.467036][ T789] usb 8-1: Manufacturer: syz [ 976.498304][ T789] usb 8-1: SerialNumber: syz [ 976.563120][ T789] usb 8-1: config 0 descriptor?? [ 976.582927][ T789] usb 8-1: bad CDC descriptors [ 976.588701][ T789] usb 8-1: unsupported MDLM descriptors [ 976.597756][T30153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9900'. [ 976.769450][T30161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9904'. [ 976.780432][T30163] openvswitch: netlink: IP tunnel dst address not specified [ 976.856935][ T789] usb 8-1: USB disconnect, device number 19 [ 977.039477][T30168] [U]  [ 977.142913][T30175] loop5: detected capacity change from 0 to 256 [ 977.250863][T30175] FAT-fs (loop5): Directory bread(block 64) failed [ 977.293124][T30175] FAT-fs (loop5): Directory bread(block 65) failed [ 977.346089][T30175] FAT-fs (loop5): Directory bread(block 66) failed [ 977.381314][T30175] FAT-fs (loop5): Directory bread(block 67) failed [ 977.387982][T30175] FAT-fs (loop5): Directory bread(block 68) failed [ 977.490554][T30175] FAT-fs (loop5): Directory bread(block 69) failed [ 977.497229][T30175] FAT-fs (loop5): Directory bread(block 70) failed [ 977.556343][T30175] FAT-fs (loop5): Directory bread(block 71) failed [ 977.583501][T30175] FAT-fs (loop5): Directory bread(block 72) failed [ 977.610780][T30175] FAT-fs (loop5): Directory bread(block 73) failed [ 977.663499][T30191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9917'. [ 977.796903][T30197] loop6: detected capacity change from 0 to 64 [ 977.958169][T30200] netlink: 'syz.4.9920': attribute type 1 has an invalid length. [ 977.983367][T30202] Cannot find map_set index 135 as target [ 978.737665][T30219] loop5: detected capacity change from 0 to 8192 [ 978.876142][T30219] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 978.925526][T30184] loop2: detected capacity change from 0 to 32768 [ 978.940400][T30219] FAT-fs (loop5): Filesystem has been set read-only [ 978.947153][T30219] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 978.990767][T30219] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 979.036219][T30184] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 979.238649][T30184] XFS (loop2): Ending clean mount [ 979.303434][T30184] XFS (loop2): Quotacheck needed: Please wait. [ 979.440824][T30184] XFS (loop2): Quotacheck: Done. [ 979.871025][ T5827] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 980.475278][T30228] loop6: detected capacity change from 0 to 32768 [ 980.513893][T30228] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9930 (30228) [ 980.516111][T30268] vivid-000: ================= START STATUS ================= [ 980.586786][T30268] vivid-000: Generate PTS: true [ 980.597890][T30228] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 980.614626][T30268] vivid-000: Generate SCR: true [ 980.631770][T30268] tpg source WxH: 1280x720 (Luma) [ 980.659714][T30228] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 980.667893][T30268] tpg field: 1 [ 980.695755][T30268] tpg crop: (0,0)/64x64 [ 980.715217][T30268] tpg compose: (0,0)/16x16 [ 980.747621][T30268] tpg colorspace: 1 [ 980.767851][T30268] tpg transfer function: 4/4 [ 980.785528][T30268] tpg quantization: 0/1 [ 980.809622][T30268] tpg RGB range: 0/1 [ 980.838978][T30268] vivid-000: ================== END STATUS ================== [ 980.892632][T30228] BTRFS info (device loop6): enabling ssd optimizations [ 980.899631][T30228] BTRFS info (device loop6): turning on async discard [ 980.962663][T30228] BTRFS info (device loop6): enabling free space tree [ 980.963732][T30292] tmpfs: Bad value for 'mpol' [ 981.357872][T23683] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 982.039945][T30333] vlan0: entered promiscuous mode [ 982.330004][T30343] loop4: detected capacity change from 0 to 8 [ 982.440011][T30343] SQUASHFS error: Failed to read block 0x2fc: -5 [ 982.500894][T30343] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 982.508262][T30343] SQUASHFS error: Unable to read directory block [247:26] [ 982.601378][T30354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9972'. [ 983.407771][T30387] loop7: detected capacity change from 0 to 128 [ 983.426261][T30382] bond1: entered allmulticast mode [ 983.476328][T30390] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 983.488461][T30382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 983.965486][T30412] netlink: 'syz.5.9996': attribute type 5 has an invalid length. [ 984.371122][T30428] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 984.412568][T30428] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 984.470648][T30428] overlayfs: missing 'lowerdir' [ 984.585544][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10007'. [ 984.622460][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 984.622481][ T31] audit: type=1326 audit(984.652:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30437 comm="syz.5.10008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650818f749 code=0x7ffc0000 [ 984.731419][ T5966] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 984.748024][ T31] audit: type=1326 audit(984.652:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30437 comm="syz.5.10008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650818f749 code=0x7ffc0000 [ 984.890396][ T31] audit: type=1326 audit(984.652:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30437 comm="syz.5.10008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f650818f749 code=0x7ffc0000 [ 984.944050][ T5966] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 984.970350][ T5966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.029776][ T31] audit: type=1326 audit(984.652:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30437 comm="syz.5.10008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650818f749 code=0x7ffc0000 [ 985.056686][ T5966] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 985.082054][T30455] loop6: detected capacity change from 0 to 8 [ 985.094453][T30456] netlink: 'syz.2.10015': attribute type 2 has an invalid length. [ 985.099901][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.127043][ T31] audit: type=1326 audit(984.652:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30437 comm="syz.5.10008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650818f749 code=0x7ffc0000 [ 985.167415][ T5966] usb 4-1: Product: syz [ 985.211027][ T5966] usb 4-1: Manufacturer: syz [ 985.237788][ T5966] usb 4-1: SerialNumber: syz [ 985.288111][ T5966] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input60 [ 985.336329][T30450] loop7: detected capacity change from 0 to 4096 [ 985.494688][ T5966] bcm5974 4-1:1.0: could not read from device [ 985.558274][ T5180] bcm5974 4-1:1.0: could not read from device [ 985.647985][ T5966] input: failed to attach handler mousedev to device input60, error: -5 [ 985.756768][ T5180] bcm5974 4-1:1.0: could not read from device [ 985.776843][ T5966] usb 4-1: USB disconnect, device number 100 [ 985.946168][ T31] audit: type=1326 audit(985.972:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.7.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 986.028381][ T31] audit: type=1326 audit(985.972:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.7.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 986.153550][ T31] audit: type=1326 audit(985.972:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.7.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 986.265747][ T31] audit: type=1326 audit(985.972:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.7.10025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 986.308754][T30495] loop7: detected capacity change from 0 to 8 [ 986.336556][T30495] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 986.360383][ T9041] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 986.386992][T30495] cramfs: Error -5 while decompressing! [ 986.387149][ T6358] udevd[6358]: incorrect cramfs checksum on /dev/loop7 [ 986.403838][T30495] cramfs: ffffffff999ed2e8(26)->ffff88808b16f000(4096) [ 986.450366][T30495] cramfs: Error -3 while decompressing! [ 986.470459][T30495] cramfs: ffffffff999ed302(26)->ffff88804d69c000(4096) [ 986.531402][T30495] cramfs: Error -3 while decompressing! [ 986.539800][ T6024] udevd[6024]: incorrect cramfs checksum on /dev/loop7 [ 986.569708][T30495] cramfs: ffffffff999ed31c(16)->ffff8880757e0000(4096) [ 986.577106][ T9041] usb 5-1: Using ep0 maxpacket: 8 [ 986.604182][ T9041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.636510][T30495] cramfs: Error -5 while decompressing! [ 986.660803][ T9041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 986.669739][ T9041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 986.692328][T30495] cramfs: ffffffff999ed2e8(26)->ffff88808b16f000(4096) [ 986.715528][T30508] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10036'. [ 986.730505][ T9041] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 986.761953][ T9041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.819999][ T9041] hub 5-1:1.0: bad descriptor, ignoring hub [ 986.851233][ T9041] hub 5-1:1.0: probe with driver hub failed with error -5 [ 986.879292][ T9041] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 986.981236][ T31] audit: type=1326 audit(987.012:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30516 comm="syz.6.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c318f749 code=0x7ffc0000 [ 987.203968][ T9041] usb 5-1: USB disconnect, device number 102 [ 987.261749][T30525] netlink: 'syz.5.10042': attribute type 1 has an invalid length. [ 987.818132][T30551] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10053'. [ 987.857183][T30552] netlink: zone id is out of range [ 987.875465][T30552] netlink: zone id is out of range [ 987.900326][T30552] netlink: zone id is out of range [ 987.928059][T30552] netlink: zone id is out of range [ 987.948745][T30552] netlink: zone id is out of range [ 987.975784][T30552] netlink: zone id is out of range [ 988.019194][T30552] netlink: zone id is out of range [ 988.041713][T30552] netlink: zone id is out of range [ 988.072560][T30552] netlink: zone id is out of range [ 988.112293][T30552] netlink: zone id is out of range [ 988.484344][T30578] loop3: detected capacity change from 0 to 512 [ 988.534455][T30578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 988.641786][T30578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.684124][T30591] loop4: detected capacity change from 0 to 1024 [ 988.889117][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.690780][T30622] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10080'. [ 989.740351][ T5912] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 989.950932][ T5912] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 989.983986][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.035125][ T5912] usb 8-1: Product: syz [ 990.051899][ T5912] usb 8-1: Manufacturer: syz [ 990.066767][ T5912] usb 8-1: SerialNumber: syz [ 990.086582][ T5912] usb 8-1: config 0 descriptor?? [ 990.095126][T30636] loop4: detected capacity change from 0 to 1024 [ 990.124519][ T5912] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 990.192074][T30636] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 990.275789][T30636] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 990.306026][T30636] EXT4-fs (loop4): orphan cleanup on readonly fs [ 990.350121][T30636] __quota_error: 4 callbacks suppressed [ 990.350140][T30636] Quota error (device loop4): v2_read_file_info: Block with free entry 1283 out of range (1, 6). [ 990.440857][T30636] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 990.518867][T30636] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 990.538726][ T5912] gspca_sunplus: reg_w_riv err -71 [ 990.558834][T30636] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.10085: Freeing blocks not in datazone - block = 0, count = 4096 [ 990.561795][ T5912] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 990.647376][ T5912] usb 8-1: USB disconnect, device number 20 [ 990.681688][T30636] EXT4-fs (loop4): 1 orphan inode deleted [ 990.712133][T30636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 990.856863][T30636] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.10085: iget: bad extended attribute block 6 [ 991.052667][T29063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.379251][T30683] loop7: detected capacity change from 0 to 512 [ 991.441356][T30683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 991.506845][T30683] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 991.575691][T30683] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 991.605494][T30683] EXT4-fs (loop7): orphan cleanup on readonly fs [ 991.613695][T30683] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 991.623399][T30683] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 991.683792][T30683] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 991.703946][T30683] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10104: bg 0: block 40: padding at end of block bitmap is not set [ 991.780214][T30683] EXT4-fs (loop7): Remounting filesystem read-only [ 991.799679][T30683] EXT4-fs (loop7): 1 truncate cleaned up [ 991.843052][T30683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 991.900533][ T9] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 992.042871][T30699] loop5: detected capacity change from 0 to 4096 [ 992.058081][T19550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.078935][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 992.147053][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.183525][ T9] usb 3-1: config 0 descriptor?? [ 992.204606][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.256520][T30713] sctp: [Deprecated]: syz.6.10116 (pid 30713) Use of int in max_burst socket option. [ 992.256520][T30713] Use struct sctp_assoc_value instead [ 992.273224][ T9] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 992.329209][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 992.378795][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 992.402717][T30716] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10115'. [ 992.451699][ T9] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 992.511541][ T9] usb 3-1: media controller created [ 992.517153][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 992.531713][ T9] dvb-usb: MAC address reading failed. [ 992.592794][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.669540][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 992.741015][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 992.758841][ T9] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 992.793920][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 992.875480][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 992.916791][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 992.978300][ T9] usb 3-1: USB disconnect, device number 108 [ 993.213057][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 993.290076][T30741] loop6: detected capacity change from 0 to 16 [ 993.312623][T30741] erofs (device loop6): mounted with root inode @ nid 36. [ 993.902980][T30710] loop4: detected capacity change from 0 to 32768 [ 993.961626][T30710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10114 (30710) [ 994.048852][T30710] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 994.057724][T30765] loop6: detected capacity change from 0 to 736 [ 994.103397][T30710] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 994.492751][T30710] BTRFS info (device loop4): enabling ssd optimizations [ 994.561527][T30710] BTRFS info (device loop4): turning on async discard [ 994.598702][T30710] BTRFS info (device loop4): enabling free space tree [ 994.719976][T30710] BTRFS error: failed to open device for path ™…WÃvóa›Šffff88804eff0000(4096) [ 996.879135][T30853] cramfs: Error -3 while decompressing! [ 996.985276][T30853] cramfs: ffffffff999f1302(26)->ffff88808ef53000(4096) [ 997.060470][T30853] cramfs: Error -3 while decompressing! [ 997.094823][T30853] cramfs: ffffffff999f131c(16)->ffff88808d0fb000(4096) [ 997.121218][T30870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10163'. [ 997.133859][T30853] cramfs: Error -3 while decompressing! [ 997.162997][T30853] cramfs: ffffffff999f12e8(26)->ffff88804eff0000(4096) [ 997.185413][T30762] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 997.212527][T30872] veth1_to_bond: entered promiscuous mode [ 997.254048][T30872] net_ratelimit: 3 callbacks suppressed [ 997.254075][T30872] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 997.334843][T30877] netlink: 420 bytes leftover after parsing attributes in process `syz.4.10165'. [ 997.398689][T30877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10165'. [ 997.474062][T30877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10165'. [ 997.526497][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10165'. [ 998.005601][T30894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10172'. [ 998.430618][T30909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 998.816694][T30922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10185'. [ 999.156987][T30924] loop5: detected capacity change from 0 to 4096 [ 999.203452][T30936] loop7: detected capacity change from 0 to 256 [ 999.263924][T30938] netlink: 'syz.2.10191': attribute type 4 has an invalid length. [ 999.286392][T30936] nfs4: Unknown parameter 'fscontext' [ 999.292486][T30924] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 999.369452][T30924] ntfs3(loop5): Failed to load $Extend (-22). [ 999.420397][T30924] ntfs3(loop5): Failed to initialize $Extend. [ 999.505112][T30942] loop4: detected capacity change from 0 to 1024 [ 999.589799][T30942] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1000.021386][T30958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10199'. [ 1000.254824][T30911] loop6: detected capacity change from 0 to 40427 [ 1000.315495][T30911] F2FS-fs: heap/no_heap options were deprecated [ 1000.329813][T30911] F2FS-fs: heap/no_heap options were deprecated [ 1000.356588][T30911] F2FS-fs (loop6): Image doesn't support compression [ 1000.390817][T30911] F2FS-fs (loop6): invalid crc value [ 1000.647749][T30980] loop3: detected capacity change from 0 to 64 [ 1000.786086][T30911] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1000.842364][T30911] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1000.871967][T30987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10213'. [ 1001.086099][T30992] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10215'. [ 1001.137064][T23683] syz-executor: attempt to access beyond end of device [ 1001.137064][T23683] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1001.164720][T30992] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10215'. [ 1001.179025][T23683] CPU: 1 UID: 0 PID: 23683 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1001.179059][T23683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1001.179075][T23683] Call Trace: [ 1001.179085][T23683] [ 1001.179096][T23683] dump_stack_lvl+0xe8/0x150 [ 1001.179140][T23683] f2fs_handle_critical_error+0x37c/0x540 [ 1001.179182][T23683] f2fs_write_end_io+0x886/0xb60 [ 1001.179241][T23683] __submit_merged_bio+0x256/0x660 [ 1001.179280][T23683] __submit_merged_write_cond+0x269/0x530 [ 1001.179320][T23683] f2fs_write_data_pages+0x2756/0x3290 [ 1001.179352][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179381][T23683] ? __lock_acquire+0x6b6/0x2cf0 [ 1001.179449][T23683] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1001.179481][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179530][T23683] ? is_bpf_text_address+0x26/0x2b0 [ 1001.179607][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179646][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179682][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179727][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179756][T23683] ? __lock_acquire+0x6b6/0x2cf0 [ 1001.179792][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179820][T23683] ? __lock_acquire+0x6b6/0x2cf0 [ 1001.179856][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.179894][T23683] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1001.179930][T23683] do_writepages+0x32e/0x550 [ 1001.179968][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180000][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180034][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180062][T23683] ? do_raw_spin_unlock+0x122/0x240 [ 1001.180105][T23683] filemap_fdatawrite+0x199/0x240 [ 1001.180140][T23683] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1001.180232][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180265][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180300][T23683] ? do_raw_spin_unlock+0x122/0x240 [ 1001.180342][T23683] f2fs_sync_dirty_inodes+0x30f/0x810 [ 1001.180400][T23683] f2fs_write_checkpoint+0x935/0x2430 [ 1001.180436][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180461][T23683] ? stack_depot_save_flags+0x33/0x810 [ 1001.180525][T23683] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1001.180618][T23683] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1001.180660][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.180688][T23683] ? kfree+0x1c0/0x660 [ 1001.180740][T23683] kill_f2fs_super+0x2d2/0x6c0 [ 1001.180786][T23683] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1001.180855][T23683] deactivate_locked_super+0xbc/0x130 [ 1001.180896][T23683] cleanup_mnt+0x425/0x4c0 [ 1001.180934][T23683] ? _raw_spin_unlock_irq+0x23/0x50 [ 1001.180966][T23683] task_work_run+0x1d4/0x260 [ 1001.181007][T23683] ? __pfx_task_work_run+0x10/0x10 [ 1001.181044][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.181086][T23683] exit_to_user_mode_loop+0xef/0x4e0 [ 1001.181112][T23683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.181140][T23683] ? rcu_is_watching+0x15/0xb0 [ 1001.181177][T23683] do_syscall_64+0x2c1/0xf80 [ 1001.181206][T23683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.181231][T23683] ? trace_irq_disable+0x37/0x100 [ 1001.181271][T23683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.181296][T23683] RIP: 0033:0x7f43c3190a77 [ 1001.181319][T23683] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1001.181340][T23683] RSP: 002b:00007fff75d1dbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1001.181367][T23683] RAX: 0000000000000000 RBX: 00007f43c3213d7d RCX: 00007f43c3190a77 [ 1001.181385][T23683] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff75d1dc80 [ 1001.181402][T23683] RBP: 00007fff75d1dc80 R08: 0000000000000000 R09: 0000000000000000 [ 1001.181418][T23683] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff75d1ed10 [ 1001.181436][T23683] R13: 00007f43c3213d7d R14: 00000000000f4646 R15: 00007fff75d1ed50 [ 1001.181480][T23683] [ 1001.629443][T23683] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1001.760384][T30970] loop5: detected capacity change from 0 to 32768 [ 1001.859837][T30970] UFO tlock:0xffffc9000295a090 [ 1002.160705][T31018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10226'. [ 1003.098307][T31046] loop3: detected capacity change from 0 to 512 [ 1003.201556][T31046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.467039][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.531187][ T9041] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1003.617789][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10247'. [ 1003.720633][ T9041] usb 7-1: Using ep0 maxpacket: 32 [ 1003.730476][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10248'. [ 1003.751220][ T9041] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1003.790402][ T9041] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.832413][ T9041] usb 7-1: config 0 has no interface number 0 [ 1003.855406][T31080] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10251'. [ 1003.867541][ T9041] usb 7-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1003.900134][T31080] 0·: renamed from hsr_slave_1 (while UP) [ 1003.912957][ T9041] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1003.930327][ T9041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.938362][ T9041] usb 7-1: Product: syz [ 1003.946475][T31080] 0·: entered allmulticast mode [ 1003.967392][T31080] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1003.984439][ T9041] usb 7-1: Manufacturer: syz [ 1003.989047][ T9041] usb 7-1: SerialNumber: syz [ 1004.035026][ T9041] usb 7-1: config 0 descriptor?? [ 1004.250066][T31093] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.10257'. [ 1004.369943][ T9041] usb 7-1: USB disconnect, device number 14 [ 1004.499016][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.740715][T31112] netlink: 'syz.7.10265': attribute type 16 has an invalid length. [ 1004.773316][T31112] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.10265'. [ 1005.010706][T31117] 9p: Could not find request transport: äÞ&~ܘfE.ýÓ±&%¼<ßïvê:¾)糑L4$RYmÆ”)ÂèŠ0{ÕøZX [ 1005.194343][T31095] loop2: detected capacity change from 0 to 32768 [ 1005.206680][T31095] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10258 (31095) [ 1005.235877][T31095] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.249542][T31095] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1005.320562][ T5963] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1005.328662][ T5830] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1005.428336][T31095] BTRFS info (device loop2): enabling ssd optimizations [ 1005.445207][T31095] BTRFS info (device loop2): turning on async discard [ 1005.464975][T31095] BTRFS info (device loop2): enabling free space tree [ 1005.494237][ T5963] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1005.505735][ T5830] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1005.515730][ T5963] usb 8-1: config 0 has no interface number 0 [ 1005.530749][ T5830] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1005.563019][ T5963] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1005.620688][ T5830] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1005.632865][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.648162][ T5963] usb 8-1: Product: syz [ 1005.662685][ T5830] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1005.680685][ T5963] usb 8-1: Manufacturer: syz [ 1005.697274][ T5963] usb 8-1: SerialNumber: syz [ 1005.710906][ T5827] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.713110][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1005.755631][ T5963] usb 8-1: config 0 descriptor?? [ 1005.756571][T31153] netlink: 1104 bytes leftover after parsing attributes in process `syz.4.10277'. [ 1005.786348][ T5830] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1005.798103][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.828364][ T5830] usb 4-1: Product: syz [ 1005.840799][ T5830] usb 4-1: Manufacturer: syz [ 1005.861645][ T5830] usb 4-1: SerialNumber: syz [ 1005.888561][ T5830] usb 4-1: config 0 descriptor?? [ 1006.005725][ T5963] uvcvideo 8-1:0.64: Found Unit with invalid ID 0 [ 1006.055109][ T5963] uvcvideo 8-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1006.092637][ T5963] uvcvideo 8-1:0.64: No valid video chain found. [ 1006.155722][ T5963] usb 8-1: USB disconnect, device number 21 [ 1006.171085][ T5830] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62 [ 1006.209250][ T5180] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1006.359425][ T5830] usb 4-1: USB disconnect, device number 101 [ 1006.376076][ T5180] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1006.744085][T31174] loop2: detected capacity change from 0 to 2048 [ 1006.792182][T31174] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2361, location=2361 [ 1006.855376][T31174] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1006.949546][T31174] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1006.981585][T31174] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 2016: 0x5c != 0x1b [ 1007.053433][T31174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.114406][T31188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10293'. [ 1007.151270][T31184] loop6: detected capacity change from 0 to 1024 [ 1007.313029][ T994] hfsplus: b-tree write err: -5, ino 4 [ 1007.560796][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1007.865977][T31202] loop2: detected capacity change from 0 to 4096 [ 1007.946031][T31202] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1008.036259][T31202] ntfs3(loop2): ino=0, mi_enum_attr [ 1008.070409][T31202] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1008.194672][T31202] ntfs3(loop2): volume is dirty and "force" flag is not set! [ 1008.297010][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10311'. [ 1009.520490][T31259] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10329'. [ 1009.569404][T31210] loop3: detected capacity change from 0 to 40427 [ 1010.009647][T31210] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1010.054465][T31210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1010.265076][T31238] loop6: detected capacity change from 0 to 32768 [ 1010.424434][T31243] loop7: detected capacity change from 0 to 32768 [ 1010.455118][T31243] xfs: Deprecated parameter 'noikeep' [ 1010.483822][T31243] XFS: noikeep mount option is deprecated. [ 1010.569431][T31113] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 1010.593354][T31243] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1010.757882][T31113] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1010.780351][T31113] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1010.788537][T31113] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1010.835806][T31243] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1010.910560][T31113] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1010.949904][T31113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 63, changing to 4 [ 1010.987117][T31243] XFS (loop7): Starting recovery (logdev: internal) [ 1011.024299][T31113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 43530, setting to 0 [ 1011.081685][T31113] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1011.110446][T31243] XFS (loop7): Ending recovery (logdev: internal) [ 1011.152333][T31243] XFS (loop7): AG 0: Corrupt finobt pointer at level 1 index 0. [ 1011.179470][T31113] usb 5-1: string descriptor 0 read error: -22 [ 1011.202211][T31243] XFS (loop7): Failed to initialize disk quotas, err -117. [ 1011.214668][T31261] loop5: detected capacity change from 0 to 32768 [ 1011.240149][T31113] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1011.283792][T31113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.318848][T31243] XFS (loop7): AG 0: Corrupt finobt pointer at level 1 index 0. [ 1011.331859][T31113] usb 5-1: config 0 descriptor?? [ 1011.341702][T31113] hub 5-1:0.0: bad descriptor, ignoring hub [ 1011.349436][T31113] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1011.358987][T31261] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1011.408777][T31304] 0·: left allmulticast mode [ 1011.455249][T19550] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1011.476089][T19550] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 1011.495652][T31261] XFS (loop5): Ending clean mount [ 1011.585917][T31261] XFS (loop5): Quotacheck needed: Please wait. [ 1011.597251][T31304] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1011.669685][T31304] wireguard0: left allmulticast mode [ 1011.715419][ T8103] usb 5-1: USB disconnect, device number 103 [ 1011.737448][T31304] bridge3: left allmulticast mode [ 1011.760091][T31304] bond1: left allmulticast mode [ 1011.774144][T31261] XFS (loop5): Quotacheck: Done. [ 1011.849129][T31322] loop3: detected capacity change from 0 to 512 [ 1012.066037][T28665] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1012.093605][T31322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.413781][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.734703][T31345] loop3: detected capacity change from 0 to 512 [ 1012.741303][T31346] netlink: 'syz.6.10348': attribute type 10 has an invalid length. [ 1012.785444][T31345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1012.798431][T31346] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1012.898013][T31346] bridge0: port 4(netdevsim0) entered blocking state [ 1012.933527][T31345] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.10347: corrupted xattr entries [ 1012.955678][T31346] bridge0: port 4(netdevsim0) entered disabled state [ 1012.996914][T31345] EXT4-fs (loop3): Remounting filesystem read-only [ 1013.019757][T31346] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1013.051578][T31345] EXT4-fs (loop3): 1 truncate cleaned up [ 1013.089776][T31345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.093823][T31346] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1013.211767][ T31] audit: type=1800 audit(1013.242:4408): pid=31345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10347" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1013.341062][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.679915][T31373] netlink: 666 bytes leftover after parsing attributes in process `syz.2.10359'. [ 1014.173875][T31397] netlink: 'syz.5.10370': attribute type 5 has an invalid length. [ 1014.218349][T31394] geneve2: entered promiscuous mode [ 1014.344234][T31390] loop6: detected capacity change from 0 to 4096 [ 1014.480467][T31405] netlink: 'syz.2.10375': attribute type 1 has an invalid length. [ 1014.502506][T31390] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1014.740832][T23683] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 1014.771269][T31416] loop7: detected capacity change from 0 to 256 [ 1014.844079][T31416] exfat: Deprecated parameter 'utf8' [ 1014.900390][T31416] exfat: Deprecated parameter 'namecase' [ 1014.967689][T31416] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1015.390176][T31435] loop4: detected capacity change from 0 to 64 [ 1015.393477][T31436] netlink: 116 bytes leftover after parsing attributes in process `syz.7.10389'. [ 1015.457180][T31436] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10389'. [ 1016.020993][ T9041] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1016.222284][ T9041] usb 6-1: Using ep0 maxpacket: 32 [ 1016.234452][ T9041] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1016.261912][T31429] loop3: detected capacity change from 0 to 32768 [ 1016.265093][ T9041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.318765][ T9041] usb 6-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 1016.336137][T31426] loop2: detected capacity change from 0 to 40427 [ 1016.347361][ T9041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.370272][ T9041] usb 6-1: Product: syz [ 1016.381254][T31426] F2FS-fs: heap/no_heap options were deprecated [ 1016.395029][ T9041] usb 6-1: Manufacturer: syz [ 1016.410058][ T9041] usb 6-1: SerialNumber: syz [ 1016.422102][T31426] F2FS-fs (loop2): invalid crc value [ 1016.427447][T31426] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 1016.468691][T31422] loop6: detected capacity change from 0 to 40427 [ 1016.498100][T31422] F2FS-fs: heap/no_heap options were deprecated [ 1016.549533][T31422] F2FS-fs (loop6): build fault injection rate: 19 [ 1016.584518][T31422] F2FS-fs (loop6): build fault injection type: 0x364 [ 1016.617442][T31422] F2FS-fs (loop6): invalid crc value [ 1016.699877][ T9041] usb 6-1: USB disconnect, device number 109 [ 1016.849055][T31426] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1016.907082][T31426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1017.007534][T31422] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1017.054774][T31422] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1017.128803][T31422] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xc1/0x7b0 [ 1017.857551][T31489] loop4: detected capacity change from 0 to 22 [ 1017.917233][T31489] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1017.963136][T31489] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1018.370707][T31505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10407'. [ 1018.382636][T31507] netlink: 'syz.7.10419': attribute type 1 has an invalid length. [ 1018.403632][T31507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.470999][T31511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10421'. [ 1018.604725][T31515] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1018.894035][T31525] loop4: detected capacity change from 0 to 8 [ 1019.183612][T31537] loop4: detected capacity change from 0 to 64 [ 1019.230426][T31113] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1019.435534][T31113] usb 7-1: Using ep0 maxpacket: 32 [ 1019.459045][T31113] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1019.510570][T31113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1019.555688][T31113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 1019.631840][T31113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1019.670345][T31113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1019.696855][T31113] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1019.725532][T31113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.751095][T31113] usb 7-1: Product: syz [ 1019.759285][T31513] loop5: detected capacity change from 0 to 32768 [ 1019.770591][T31113] usb 7-1: Manufacturer: syz [ 1019.775220][T31113] usb 7-1: SerialNumber: syz [ 1019.809153][T31113] usb 7-1: config 0 descriptor?? [ 1019.834986][T31558] loop2: detected capacity change from 0 to 512 [ 1019.847956][T31513] ERROR: (device loop5): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 1019.847956][T31513] [ 1019.867817][T31558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1019.903149][T31513] ERROR: (device loop5): remounting filesystem as read-only [ 1019.914925][T31558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 1019.915381][T31560] loop7: detected capacity change from 0 to 1024 [ 1019.934588][T31513] ERROR: (device loop5): jfs_unlink: [ 1019.934588][T31513] [ 1019.945751][T31560] EXT4-fs: inline encryption not supported [ 1019.952051][T31560] EXT4-fs: Ignoring removed i_version option [ 1019.960151][T31560] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1019.973454][T31558] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10443: invalid indirect mapped block 2683928664 (level 1) [ 1019.989059][T31558] EXT4-fs (loop2): Remounting filesystem read-only [ 1020.032394][T31558] EXT4-fs (loop2): 1 truncate cleaned up [ 1020.058647][T31558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.083038][T31560] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.10444: lblock 2 mapped to illegal pblock 2 (length 1) [ 1020.109756][T31560] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1020.133649][T31557] loop3: detected capacity change from 0 to 4096 [ 1020.142746][T28665] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 1020.142746][T28665] [ 1020.163899][T31560] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.10444: lblock 0 mapped to illegal pblock 48 (length 1) [ 1020.252509][T31557] ntfs3(loop3): Failed to load $Extend (-22). [ 1020.260757][T31560] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1020.284225][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.310882][T31113] input input64: Device does not respond to id packet M [ 1020.318244][T31558] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #2: comm syz.2.10443: directory missing '.' [ 1020.340469][T31557] ntfs3(loop3): Failed to initialize $Extend. [ 1020.361098][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.368273][T31113] input input64: Device does not respond to id packet P [ 1020.370540][T31560] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.10444: Failed to acquire dquot type 0 [ 1020.391395][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.428112][T31113] input input64: Device does not respond to id packet B [ 1020.436183][T31560] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1020.451836][T31557] ntfs3(loop3): ino=5, "/" indx_read [ 1020.474501][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.522232][T31113] input input64: Device does not respond to id packet N [ 1020.545886][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.554757][T31560] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.10444: mark_inode_dirty error [ 1020.568780][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.606947][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.632694][T31560] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1020.663091][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.669937][T31113] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1020.675625][T31560] EXT4-fs (loop7): 1 orphan inode deleted [ 1020.705738][ T60] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1020.733037][T31560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.751464][T31113] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input64 [ 1020.765725][T31573] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10450'. [ 1020.775657][ T60] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1020.827091][ T60] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 1020.921292][T31113] usb 7-1: USB disconnect, device number 15 [ 1020.963637][T31560] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.10444: Invalid inode table block 1 in block_group 0 [ 1021.078157][T31560] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1021.091506][T31579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10452'. [ 1021.157623][T31573] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1021.258892][T19550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.310401][ T1125] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1021.373811][ T1125] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1021.412192][ T1125] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 1021.491375][T19550] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1021.542536][T19550] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1021.573815][T31595] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 1021.597128][T19550] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1021.629310][T31595] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 1021.926185][T31606] netlink: 'syz.3.10465': attribute type 1 has an invalid length. [ 1022.071214][ T5911] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1022.264795][ T5911] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.319178][ T5911] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1022.348391][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1022.360184][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1022.371309][ T5911] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1022.389074][ T5911] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1022.398733][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1022.412602][ T5911] usb 8-1: Product: syz [ 1022.447562][ T5911] usb 8-1: Manufacturer: syz [ 1022.465326][ T5911] usb 8-1: SerialNumber: syz [ 1022.492625][ T5911] usb 8-1: config 0 descriptor?? [ 1022.686116][T31630] loop4: detected capacity change from 0 to 512 [ 1022.732756][ T5911] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1022.740446][ T5911] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1022.743902][T31630] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.10476: missing EA_INODE flag [ 1022.775830][T31633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10477'. [ 1022.787015][T31630] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.10476: error while reading EA inode 11 err=-117 [ 1022.826482][T31630] EXT4-fs (loop4): 1 orphan inode deleted [ 1022.833324][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10477'. [ 1022.875273][T31630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.912030][T31633] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1022.946446][ T5911] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1022.970853][ T5911] radio-si470x 8-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1023.015010][ T5911] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 1023.053534][ T5911] usb 8-1: USB disconnect, device number 22 [ 1023.177643][T29063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.606053][T31653] loop5: detected capacity change from 0 to 256 [ 1023.664551][T31653] exfat: Deprecated parameter 'namecase' [ 1023.706358][T31653] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1023.716840][T31657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.799137][T31653] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1024.275352][T31675] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1024.429460][T31678] loop6: detected capacity change from 0 to 16 [ 1024.447129][T31679] loop5: detected capacity change from 0 to 512 [ 1024.476520][T31678] erofs (device loop6): mounted with root inode @ nid 36. [ 1024.499676][T31679] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1024.528500][T31678] erofs (device loop6): read error -117 @ 0 of nid 36 [ 1024.550776][T31679] EXT4-fs (loop5): invalid journal inode [ 1024.556520][T31679] EXT4-fs (loop5): can't get journal size [ 1024.623137][T31679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1024.651230][T31686] netlink: 'syz.4.10504': attribute type 39 has an invalid length. [ 1024.660840][T31679] System zones: 1-12, 13-13 [ 1024.666762][T31679] EXT4-fs (loop5): 1 truncate cleaned up [ 1024.681485][T31679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.863314][T31682] netlink: set zone limit has 4 unknown bytes [ 1025.024350][T28665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.182267][T31700] loop6: detected capacity change from 0 to 256 [ 1025.280806][T31700] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1025.962843][T31733] loop2: detected capacity change from 0 to 128 [ 1026.013808][T31733] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 1026.160597][T31742] netlink: 'syz.3.10530': attribute type 61 has an invalid length. [ 1026.202657][T31742] netlink: 'syz.3.10530': attribute type 62 has an invalid length. [ 1026.326850][T31751] netlink: 100 bytes leftover after parsing attributes in process `syz.6.10535'. [ 1026.477839][T31756] loop3: detected capacity change from 0 to 512 [ 1026.516170][T31756] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1026.570369][T31756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1026.646123][T31756] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.10538: bad orphan inode 131083 [ 1026.663300][T31756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.808557][T31766] veth3: entered promiscuous mode [ 1026.815757][T31766] veth3: entered allmulticast mode [ 1026.891940][T31774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10546'. [ 1026.918004][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.241510][T31781] netlink: 'syz.5.10551': attribute type 89 has an invalid length. [ 1027.646198][T31795] loop4: detected capacity change from 0 to 2048 [ 1027.696840][T31795] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1027.780506][T31806] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.240807][T31818] loop5: detected capacity change from 0 to 1764 [ 1028.321396][T31113] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1028.525537][T31113] usb 4-1: Using ep0 maxpacket: 16 [ 1028.532087][T31831] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10572'. [ 1028.575194][T31113] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.81 [ 1028.611331][T31113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.623608][T31838] loop2: detected capacity change from 0 to 64 [ 1028.662063][T31113] usb 4-1: config 0 descriptor?? [ 1028.712690][T31113] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1028.744795][T31113] usb 4-1: Detected SIO [ 1028.790806][T31113] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1028.814934][T31842] loop5: detected capacity change from 0 to 8 [ 1028.862286][T31842] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1028.925205][T31842] cramfs: Error -3 while decompressing! [ 1028.934067][ T5830] usb 4-1: USB disconnect, device number 102 [ 1028.962944][T31842] cramfs: ffffffff999ed2e8(1306)->ffff888074707000(4096) [ 1028.990047][T31842] cramfs: bad data blocksize 3221485966 [ 1028.997544][T31846] loop2: detected capacity change from 0 to 256 [ 1029.005811][ T5830] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1029.029299][ T5891] udevd[5891]: incorrect cramfs checksum on /dev/loop5 [ 1029.044952][T31842] cramfs: Error -3 while decompressing! [ 1029.057597][ T5830] ftdi_sio 4-1:0.0: device disconnected [ 1029.077106][T31842] cramfs: ffffffff999ed2e8(1306)->ffff888074707000(4096) [ 1029.124464][T31846] FAT-fs (loop2): Directory bread(block 64) failed [ 1029.130014][ T31] audit: type=1800 audit(1029.152:4409): pid=31842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10578" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1029.149355][T31846] FAT-fs (loop2): Directory bread(block 65) failed [ 1029.180528][T31846] FAT-fs (loop2): Directory bread(block 66) failed [ 1029.199785][ T5891] udevd[5891]: incorrect cramfs checksum on /dev/loop5 [ 1029.223892][T31846] FAT-fs (loop2): Directory bread(block 67) failed [ 1029.262614][T31846] FAT-fs (loop2): Directory bread(block 68) failed [ 1029.310558][T31846] FAT-fs (loop2): Directory bread(block 69) failed [ 1029.317226][T31846] FAT-fs (loop2): Directory bread(block 70) failed [ 1029.406700][ T31] audit: type=1326 audit(1029.432:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1029.406854][T31853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10583'. [ 1029.446463][T31846] FAT-fs (loop2): Directory bread(block 71) failed [ 1029.486615][T31846] FAT-fs (loop2): Directory bread(block 72) failed [ 1029.508104][T31853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10583'. [ 1029.520457][T31846] FAT-fs (loop2): Directory bread(block 73) failed [ 1029.531337][ T31] audit: type=1326 audit(1029.472:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1029.550725][T31853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10583'. [ 1029.633397][ T31] audit: type=1326 audit(1029.472:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1029.750467][ T31] audit: type=1326 audit(1029.472:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1029.827212][T31862] loop5: detected capacity change from 0 to 2048 [ 1029.855077][ T31] audit: type=1326 audit(1029.472:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1029.925723][T31867] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1029.933718][T31865] loop4: detected capacity change from 0 to 64 [ 1029.957229][ T31] audit: type=1326 audit(1029.472:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1030.002636][T31862] NILFS (loop5): error -2 truncating bmap (ino=16) [ 1030.034280][T31865] minix_free_block (loop4:21): bit already cleared [ 1030.061431][T31865] Trying to free block not in datazone [ 1030.089378][ T31] audit: type=1326 audit(1029.482:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1030.205946][T31867] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 1030.220423][ T31] audit: type=1326 audit(1029.482:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb4a798f749 code=0x7ffc0000 [ 1030.255544][T31867] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 1030.348872][T31867] Remounting filesystem read-only [ 1030.392897][T28665] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1030.564224][T31836] loop6: detected capacity change from 0 to 32768 [ 1030.624755][T31836] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1030.633357][T31836] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1030.653239][T31836] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 1030.671312][T31113] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1030.679132][T31113] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1030.795247][T31113] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 1030.844437][T31113] gfs2: fsid=syz:syz.0: jid=0: Done [ 1030.849731][T31836] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1031.681340][T31113] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1031.750188][T31875] loop7: detected capacity change from 0 to 32768 [ 1031.863129][T31113] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1031.902596][T31113] usb 5-1: config 0 has no interface number 0 [ 1031.917961][T31113] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1031.943411][T31920] loop3: detected capacity change from 0 to 256 [ 1031.957352][T31113] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1032.017756][T31920] FAT-fs (loop3): Directory bread(block 64) failed [ 1032.026887][T31113] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 1032.045800][T19550] read_mapping_page failed! [ 1032.064113][T31920] FAT-fs (loop3): Directory bread(block 65) failed [ 1032.074190][T19550] ERROR: (device loop7): txCommit: [ 1032.074190][T19550] [ 1032.092448][T31113] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1032.100331][T31920] FAT-fs (loop3): Directory bread(block 66) failed [ 1032.119644][T19550] ERROR: (device loop7): remounting filesystem as read-only [ 1032.131363][T31920] FAT-fs (loop3): Directory bread(block 67) failed [ 1032.143053][T31113] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1032.180502][T31113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.188824][T31920] FAT-fs (loop3): Directory bread(block 68) failed [ 1032.209060][T31920] FAT-fs (loop3): Directory bread(block 69) failed [ 1032.217016][T31113] usb 5-1: Product: syz [ 1032.218491][T31925] vxcan3: entered promiscuous mode [ 1032.221898][T31113] usb 5-1: Manufacturer: syz [ 1032.231173][T31925] vxcan3: entered allmulticast mode [ 1032.250111][T31920] FAT-fs (loop3): Directory bread(block 70) failed [ 1032.292247][T31113] usb 5-1: SerialNumber: syz [ 1032.301039][T31920] FAT-fs (loop3): Directory bread(block 71) failed [ 1032.325434][T31113] usb 5-1: config 0 descriptor?? [ 1032.344725][T31920] FAT-fs (loop3): Directory bread(block 72) failed [ 1032.364292][T31905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1032.380169][T31920] FAT-fs (loop3): Directory bread(block 73) failed [ 1032.387129][T31905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1032.604311][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10622'. [ 1032.638000][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10622'. [ 1032.656141][ T113] ERROR: (device loop7): diFree: numfree > numinos [ 1032.656141][ T113] [ 1032.667584][T31113] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.863215][T31113] usb 5-1: USB disconnect, device number 104 [ 1032.987320][T19851] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.051432][ T7489] udevd[7489]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.323335][T19851] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.369531][T31927] loop6: detected capacity change from 0 to 32768 [ 1033.407889][T31927] ialloc: diAlloc returned -17! [ 1033.526440][T19851] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.824125][T19851] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.127885][T31957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1034.138994][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.147601][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.155912][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1034.164901][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1034.264033][T31939] loop2: detected capacity change from 0 to 32768 [ 1034.274955][T31959] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1034.417255][T31939] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1034.521597][T31113] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1034.547006][T31939] XFS (loop2): Ending clean mount [ 1034.579567][T31939] XFS (loop2): Quotacheck needed: Please wait. [ 1034.586102][T19851] bridge_slave_1: left allmulticast mode [ 1034.621699][T19851] bridge_slave_1: left promiscuous mode [ 1034.627573][T19851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.705021][T31113] usb 4-1: Using ep0 maxpacket: 8 [ 1034.746574][T31113] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1034.779293][T31939] XFS (loop2): Quotacheck: Done. [ 1034.785485][T19851] bridge_slave_0: left allmulticast mode [ 1034.797481][T31113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.818605][T31113] usb 4-1: Product: syz [ 1034.828126][T31113] usb 4-1: Manufacturer: syz [ 1034.843088][T31113] usb 4-1: SerialNumber: syz [ 1034.859612][T31985] tmpfs: Bad value for 'mpol' [ 1034.864590][T19851] bridge_slave_0: left promiscuous mode [ 1034.882700][T19851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.112758][ T5827] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1035.352896][T31113] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1035.408339][T31113] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 1035.459012][T31113] usb 4-1: USB disconnect, device number 103 [ 1035.878603][T32005] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10651'. [ 1036.148836][T32013] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10653'. [ 1036.207930][T16529] Bluetooth: hci0: command tx timeout [ 1036.669468][T32029] netlink: 10 bytes leftover after parsing attributes in process `syz.5.10660'. [ 1036.950005][T32035] loop5: detected capacity change from 0 to 512 [ 1036.976231][T32035] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1036.991338][T32035] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1037.009764][T32035] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1037.103549][T32035] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1037.122990][T32035] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.10664: inode has both inline data and extents flags [ 1037.140540][T32035] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.10664: couldn't read orphan inode 16 (err -117) [ 1037.161408][T32035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1037.168033][T32040] loop2: detected capacity change from 0 to 256 [ 1037.220755][T32035] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1037.238567][T32040] FAT-fs (loop2): Directory bread(block 64) failed [ 1037.246761][T32040] FAT-fs (loop2): Directory bread(block 65) failed [ 1037.254283][T32040] FAT-fs (loop2): Directory bread(block 66) failed [ 1037.261134][T32040] FAT-fs (loop2): Directory bread(block 67) failed [ 1037.268393][T32040] FAT-fs (loop2): Directory bread(block 68) failed [ 1037.279263][T32040] FAT-fs (loop2): Directory bread(block 69) failed [ 1037.288645][T32040] FAT-fs (loop2): Directory bread(block 70) failed [ 1037.298023][T32040] FAT-fs (loop2): Directory bread(block 71) failed [ 1037.304909][T32040] FAT-fs (loop2): Directory bread(block 72) failed [ 1037.323311][T32040] FAT-fs (loop2): Directory bread(block 73) failed [ 1037.342795][T28665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.521252][T19851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.545270][T19851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.582831][T19851] bond0 (unregistering): (slave team0): Releasing backup interface [ 1037.595686][T19851] bond0 (unregistering): Released all slaves [ 1037.708348][ T9041] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1037.850529][T32050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10670'. [ 1037.913137][ T9041] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 1037.921642][ T9041] usb 3-1: config 5 has no interface number 0 [ 1037.927797][ T9041] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1037.939991][ T9041] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 24242, setting to 64 [ 1037.970086][ T9041] usb 3-1: config 5 interface 123 has no altsetting 0 [ 1038.026788][ T9041] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1038.036120][ T9041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.048988][ T9041] usb 3-1: Product: syz [ 1038.055589][ T9041] usb 3-1: Manufacturer: syz [ 1038.060479][ T9041] usb 3-1: SerialNumber: syz [ 1038.085510][T32040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.092519][T19851] bond1 (unregistering): Released all slaves [ 1038.111216][T19851] bond2 (unregistering): Released all slaves [ 1038.299213][T16529] Bluetooth: hci0: command tx timeout [ 1038.318896][ T9041] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1038.335003][ T9041] usb 3-1: USB disconnect, device number 109 [ 1038.356145][T19851] bond3 (unregistering): Released all slaves [ 1038.398886][T32050] vlan0: left promiscuous mode [ 1038.438244][T32050] vlan0: entered allmulticast mode [ 1038.470164][T32050] veth0_vlan: entered allmulticast mode [ 1038.638587][T32053] openvswitch: netlink: Tunnel attr 183 out of range max 16 [ 1039.773722][T31955] lo speed is unknown, defaulting to 1000 [ 1039.828509][T32088] ALSA: mixer_oss: invalid OSS volume '' [ 1039.845532][T32091] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10684'. [ 1040.145955][T32101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10689'. [ 1040.184003][T32057] loop3: detected capacity change from 0 to 32768 [ 1040.208579][T32057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10673 (32057) [ 1040.268491][T32104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1040.291964][T32057] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.326148][T32101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1040.338861][T32057] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1040.360449][T16529] Bluetooth: hci0: command tx timeout [ 1040.575028][T32116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10691'. [ 1040.761675][T32057] BTRFS info (device loop3): enabling ssd optimizations [ 1040.811111][T32057] BTRFS info (device loop3): turning on async discard [ 1040.870868][T32057] BTRFS info (device loop3): enabling free space tree [ 1041.103723][T25431] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1041.322326][T32145] loop4: detected capacity change from 0 to 1024 [ 1041.383346][T32145] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1041.750725][T19851] hsr_slave_0: left promiscuous mode [ 1041.833841][T19851] hsr_slave_1: left promiscuous mode [ 1041.873018][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.913557][T19851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.978530][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.042541][T19851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.191711][T32169] usb usb1: usbfs: process 32169 (syz.6.10711) did not claim interface 0 before use [ 1042.445943][T16529] Bluetooth: hci0: command tx timeout [ 1042.461639][T19851] veth1_macvtap: left promiscuous mode [ 1042.490682][T19851] veth0_macvtap: left promiscuous mode [ 1042.504564][T19851] veth1_vlan: left promiscuous mode [ 1042.520091][T19851] veth0_vlan: left promiscuous mode [ 1042.533272][T32141] loop2: detected capacity change from 0 to 32768 [ 1042.571487][T32141] [ 1042.571487][T32141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1042.571487][T32141] [ 1042.809181][ T5827] [ 1042.809181][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1042.809181][ T5827] [ 1042.844395][ T5827] [ 1042.844395][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1042.844395][ T5827] [ 1043.270778][ T5830] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1043.313405][ T5963] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1043.430454][ T5830] usb 7-1: Using ep0 maxpacket: 8 [ 1043.440808][ T5830] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1043.449247][ T5830] usb 7-1: config 179 has no interface number 0 [ 1043.456225][ T5830] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1043.469709][ T5830] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1043.481758][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 1043.488170][ T5830] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1043.502563][ T5830] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1043.540125][ T5963] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1043.554140][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.562771][ T5830] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1043.576452][ T5963] usb 3-1: Product: syz [ 1043.581358][ T5963] usb 3-1: Manufacturer: syz [ 1043.587093][ T5830] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1043.594100][ T5963] usb 3-1: SerialNumber: syz [ 1043.600416][ T5830] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1043.609479][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.620031][ T5963] usb 3-1: config 0 descriptor?? [ 1043.635583][ T5963] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1043.677675][ T5830] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input65 [ 1043.875083][ T9041] usb 7-1: USB disconnect, device number 16 [ 1043.896801][T32195] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1044.039004][T32200] netlink: 'syz.4.10721': attribute type 9 has an invalid length. [ 1044.044684][ T5963] gspca_m5602: Failed to find a sensor [ 1044.072448][ T5963] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 1044.083107][ T5963] usb 3-1: USB disconnect, device number 110 [ 1044.222246][T19851] team0 (unregistering): Port device team_slave_1 removed [ 1044.297398][T19851] team0 (unregistering): Port device team_slave_0 removed [ 1044.308039][ T6042] smc: removing ib device syz! [ 1044.774580][T32214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1044.825933][T32216] netlink: zone id is out of range [ 1045.027450][T32216] netlink: set zone limit has 4 unknown bytes [ 1045.059126][T32220] loop2: detected capacity change from 0 to 8 [ 1045.088747][T32220] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1045.105928][T32220] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1045.183002][T16529] Bluetooth: hci0: command 0x0c1a tx timeout [ 1045.644894][T32233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1045.892647][T32212] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1046.221771][T31955] chnl_net:caif_netlink_parms(): no params data found [ 1046.236146][T32245] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1046.347040][T32243] loop4: detected capacity change from 0 to 1024 [ 1046.372043][T32243] EXT4-fs: inline encryption not supported [ 1046.440761][T32243] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 1046.544756][T32243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1046.586479][T32243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1046.651089][T32243] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.10741: Invalid inode table block 0 in block_group 0 [ 1046.754771][T32243] EXT4-fs (loop4): Remounting filesystem read-only [ 1046.783871][T32243] Quota error (device loop4): write_blk: dquota write failed [ 1046.814403][T32243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1046.845203][T32243] EXT4-fs (loop4): 1 truncate cleaned up [ 1046.952633][T32243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1047.273349][T32238] loop2: detected capacity change from 0 to 32768 [ 1047.297050][T32273] loop3: detected capacity change from 0 to 16 [ 1047.314985][T32238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10739 (32238) [ 1047.336887][T32273] erofs (device loop3): mounted with root inode @ nid 36. [ 1047.385144][T32238] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1047.397743][T29063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.438129][T32238] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1047.496404][T32238] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1047.562882][T32276] loop5: detected capacity change from 0 to 1024 [ 1047.635705][T32280] loop4: detected capacity change from 0 to 16 [ 1047.721488][T32280] erofs (device loop4): mounted with root inode @ nid 36. [ 1047.929725][T31955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.970745][T31955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.979466][T32238] BTRFS info (device loop2): rebuilding free space tree [ 1047.994089][T31955] bridge_slave_0: entered allmulticast mode [ 1048.041884][T32238] BTRFS info (device loop2): disabling free space tree [ 1048.048957][T32238] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1048.086322][T32238] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1048.106097][T31955] bridge_slave_0: entered promiscuous mode [ 1048.168868][T31955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.200520][T31955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.211594][T32238] BTRFS info (device loop2): enabling ssd optimizations [ 1048.218594][T32238] BTRFS info (device loop2): enabling disk space caching [ 1048.237241][T32302] netlink: 'syz.3.10757': attribute type 1 has an invalid length. [ 1048.240657][T31955] bridge_slave_1: entered allmulticast mode [ 1048.291818][T32238] BTRFS info (device loop2): force clearing of disk cache [ 1048.298618][T31955] bridge_slave_1: entered promiscuous mode [ 1048.328466][T32238] BTRFS info (device loop2): enabling auto defrag [ 1048.349445][T32238] BTRFS info (device loop2): max_inline set to 0 [ 1048.631042][T32313] openvswitch: netlink: IP tunnel dst address not specified [ 1048.772928][ T5827] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1048.889695][T31955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.963027][T31955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.054374][ T31] audit: type=1326 audit(1049.082:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.114078][ T31] audit: type=1326 audit(1049.082:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.183596][T32329] loop6: detected capacity change from 0 to 1024 [ 1049.210826][ T31] audit: type=1326 audit(1049.082:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.285550][ T31] audit: type=1326 audit(1049.082:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.411945][ T31] audit: type=1326 audit(1049.082:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.513962][ T31] audit: type=1326 audit(1049.082:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.531626][T32337] loop5: detected capacity change from 0 to 1024 [ 1049.537481][ T31] audit: type=1326 audit(1049.082:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.607265][T31955] team0: Port device team_slave_0 added [ 1049.630089][ T31] audit: type=1326 audit(1049.082:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32326 comm="syz.4.10768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117198f749 code=0x7ffc0000 [ 1049.758877][T31955] team0: Port device team_slave_1 added [ 1050.203217][T31955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.280525][T31955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.430481][T31955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.480894][T31955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.508723][T31955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.602472][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 1050.640367][T31955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.678720][T32367] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1051.040751][T32381] netlink: 'syz.2.10790': attribute type 1 has an invalid length. [ 1051.195466][T31955] hsr_slave_0: entered promiscuous mode [ 1051.258433][T31955] hsr_slave_1: entered promiscuous mode [ 1051.285918][T31955] debugfs: 'hsr0' already exists in 'hsr' [ 1051.306828][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10793'. [ 1051.320069][T31955] Cannot create hsr debugfs directory [ 1051.460588][T32389] loop2: detected capacity change from 0 to 736 [ 1051.529059][T32395] usb usb1: check_ctrlrecip: process 32395 (syz.3.10796) requesting ep 01 but needs 81 [ 1051.574245][T32395] usb usb1: usbfs: process 32395 (syz.3.10796) did not claim interface 0 before use [ 1051.591211][T32393] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10794'. [ 1051.715156][T32389] rock: directory entry would overflow storage [ 1051.750945][T32389] rock: sig=0x3b10, size=4, remaining=3 [ 1052.067660][T32405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10800'. [ 1052.127861][T32405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10800'. [ 1052.181039][T32409] binder: 32408:32409 ioctl c018620c 2000000000c0 returned -22 [ 1052.407284][T32407] loop5: detected capacity change from 0 to 4096 [ 1053.147656][T32434] netlink: 'syz.2.10815': attribute type 1 has an invalid length. [ 1053.358767][T32438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10817'. [ 1053.646874][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.725314][ T5830] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1053.907739][ T5830] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1053.950511][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.002226][ T5830] usb 3-1: config 0 has no interface number 0 [ 1054.025906][ T5830] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1054.082730][ T5830] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1054.131438][ T5830] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1054.162443][T32424] loop4: detected capacity change from 0 to 32768 [ 1054.180768][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.199883][ T5830] usb 3-1: Product: syz [ 1054.206200][T32424] (syz.4.10810,32424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1054.229632][ T5830] usb 3-1: Manufacturer: syz [ 1054.235430][ T5830] usb 3-1: SerialNumber: syz [ 1054.257949][T32424] (syz.4.10810,32424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1054.290710][ T5830] usb 3-1: config 0 descriptor?? [ 1054.418404][T32424] (syz.4.10810,32424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1054.490796][T32424] (syz.4.10810,32424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1054.569554][T32424] JBD2: Ignoring recovery information on journal [ 1054.713036][ T5830] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1054.759151][T32424] (syz.4.10810,32424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1054.811105][ T5830] usb 3-1: USB disconnect, device number 111 [ 1054.861991][T32424] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1054.910616][T32424] (syz.4.10810,32424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1054.994843][T32485] openvswitch: netlink: Key type 31 is not supported [ 1055.029566][T32424] (syz.4.10810,32424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1055.222460][T32424] (syz.4.10810,32424,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1055.288518][T32424] (syz.4.10810,32424,1):ocfs2_get_suballoc_slot_bit:2823 ERROR: read block 47244640256 failed -12 [ 1055.310918][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10837'. [ 1055.338678][T32424] (syz.4.10810,32424,1):ocfs2_get_suballoc_slot_bit:2855 ERROR: status = -12 [ 1055.372845][T32424] (syz.4.10810,32424,1):ocfs2_test_inode_bit:2937 ERROR: get alloc slot and bit failed -12 [ 1055.395828][T32424] (syz.4.10810,32424,1):ocfs2_test_inode_bit:2978 ERROR: status = -12 [ 1055.441387][T32424] (syz.4.10810,32424,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 1055.620147][T31955] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1055.729355][T31955] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1055.763450][T29063] ocfs2: Unmounting device (7,4) on (node local) [ 1055.895606][T31955] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1056.009450][T31955] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1056.525630][T31955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.637605][T31955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.710045][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.717278][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.745601][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.752861][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.790791][ T5984] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1056.963207][ T5984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.005580][ T5984] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1057.049497][ T5984] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1057.084174][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.166030][ T5984] usb 3-1: config 0 descriptor?? [ 1057.444963][T32508] loop3: detected capacity change from 0 to 32768 [ 1057.587016][T32508] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1057.666789][ T5984] usb 3-1: USB disconnect, device number 112 [ 1057.712862][T32508] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1057.793759][T32508] XFS (loop3): Starting recovery (logdev: internal) [ 1057.798590][T31955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.848281][T32570] netlink: 'syz.5.10859': attribute type 10 has an invalid length. [ 1057.899689][T32508] XFS (loop3): Ending recovery (logdev: internal) [ 1057.900498][T32570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.913907][T32570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.002727][T32570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.009975][T32570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.019780][T32570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.027032][T32570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.073656][T25431] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1058.102418][T32570] team0: Port device bridge0 added [ 1058.622929][T32594] netlink: zone id is out of range [ 1058.629294][T32594] netlink: zone id is out of range [ 1058.692231][T32596] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10866'. [ 1058.968765][T32605] loop2: detected capacity change from 0 to 64 [ 1059.123986][T32604] xt_CT: No such helper "snmp" [ 1059.154723][T31955] veth0_vlan: entered promiscuous mode [ 1059.204642][T31955] veth1_vlan: entered promiscuous mode [ 1059.365838][T31955] veth0_macvtap: entered promiscuous mode [ 1059.417073][T31955] veth1_macvtap: entered promiscuous mode [ 1059.538699][T31955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.626872][T31955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.710822][T10239] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.749258][T10239] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.765040][T32634] netlink: del zone limit has 4 unknown bytes [ 1059.783550][T10239] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.810082][T10239] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.899879][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1059.899900][ T31] audit: type=1326 audit(1059.922:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32636 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ee98f749 code=0x7ffc0000 [ 1059.945852][ T31] audit: type=1326 audit(1059.932:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32636 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ee98f749 code=0x7ffc0000 [ 1060.100060][ T31] audit: type=1326 audit(1059.942:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32636 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff4ee98f749 code=0x7ffc0000 [ 1060.231524][ T31] audit: type=1326 audit(1059.942:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32636 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ee98f749 code=0x7ffc0000 [ 1060.266061][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.309259][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.348839][ T31] audit: type=1326 audit(1059.942:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32636 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ee98f749 code=0x7ffc0000 [ 1060.430195][T32651] loop3: detected capacity change from 0 to 16 [ 1060.467648][T32651] erofs (device loop3): mounted with root inode @ nid 36. [ 1060.523597][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.523624][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.822954][T32664] loop8: detected capacity change from 0 to 16 [ 1060.917876][T32619] loop2: detected capacity change from 0 to 32768 [ 1060.941668][T32664] erofs (device loop8): mounted with root inode @ nid 36. [ 1060.999412][T32664] syz.8.10628: attempt to access beyond end of device [ 1060.999412][T32664] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1061.047483][T32664] erofs (device loop8): readahead error at folio 4 @ nid 89 [ 1061.091906][T32619] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1061.115841][T32664] syz.8.10628: attempt to access beyond end of device [ 1061.115841][T32664] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1061.145475][T32664] syz.8.10628: attempt to access beyond end of device [ 1061.145475][T32664] loop8: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1061.209707][T32664] erofs (device loop8): read error -5 @ 2 of nid 89 [ 1061.275143][ T31] audit: type=1800 audit(1061.302:4433): pid=32664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.10628" name="file3" dev="loop8" ino=89 res=0 errno=0 [ 1061.330704][T32676] loop3: detected capacity change from 0 to 4096 [ 1061.408076][T32676] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1061.420937][T32619] XFS (loop2): Ending clean mount [ 1061.527410][T32689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10893'. [ 1061.587419][ T5827] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1062.085912][T32703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10901'. [ 1062.477853][T32717] binder: BC_ATTEMPT_ACQUIRE not supported [ 1062.517682][T32717] binder: 32716:32717 ioctl c0306201 2000000001c0 returned -22 [ 1062.638373][T32723] loop3: detected capacity change from 0 to 256 [ 1062.729623][T32723] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1062.823006][T32723] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 1062.860647][T32723] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 1062.910588][T32719] loop6: detected capacity change from 0 to 8192 [ 1062.967105][T32719] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1063.039476][T32719] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1063.085067][T32738] delete_channel: no stack [ 1063.089982][T32719] FAT-fs (loop6): Filesystem has been set read-only [ 1063.337338][T32748] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10918'. [ 1063.411293][T32748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10918'. [ 1063.587948][T32751] bond2: option arp_interval: invalid value (18446744073709551359) [ 1063.651633][T32751] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1063.669747][T32751] bond2 (unregistering): Released all slaves [ 1065.006588][ T337] loop8: detected capacity change from 0 to 64 [ 1065.133872][ T31] audit: type=1800 audit(1065.152:4434): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.10936" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1065.234471][ T342] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1065.363857][ T348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10939'. [ 1065.960382][ T5844] Bluetooth: hci7: command 0x0406 tx timeout [ 1066.183799][ T379] netlink: 'syz.6.10952': attribute type 10 has an invalid length. [ 1066.211862][ T379] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1066.263863][ T379] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1066.305465][ T379] bridge0: port 4(netdevsim0) entered disabled state [ 1066.324659][ T379] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1066.386207][ T381] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1066.551286][ T388] loop2: detected capacity change from 0 to 1024 [ 1066.592341][ T388] EXT4-fs: Ignoring removed orlov option [ 1066.596914][ T392] netlink: 'syz.3.10957': attribute type 3 has an invalid length. [ 1066.647351][ T392] netlink: 666 bytes leftover after parsing attributes in process `syz.3.10957'. [ 1066.669487][ T388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.799401][ T353] loop8: detected capacity change from 0 to 32768 [ 1066.830618][ T353] (syz.8.10942,353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1066.886212][ T353] (syz.8.10942,353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1066.912379][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.029700][ T353] JBD2: Ignoring recovery information on journal [ 1067.078967][ T407] xfrm0: entered promiscuous mode [ 1067.090309][ T407] xfrm0: entered allmulticast mode [ 1067.236199][ T353] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1067.410142][ T416] netlink: 'syz.3.10965': attribute type 1 has an invalid length. [ 1067.461179][ T395] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1067.601429][T31955] ocfs2: Unmounting device (7,8) on (node local) [ 1068.227013][ T445] loop3: detected capacity change from 0 to 512 [ 1068.289103][ T445] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1068.368988][ T445] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1068.407618][ T445] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10977: bg 0: block 248: padding at end of block bitmap is not set [ 1068.505706][ T445] Quota error (device loop3): write_blk: dquota write failed [ 1068.520842][ T445] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1068.556528][ T445] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10977: Failed to acquire dquot type 1 [ 1068.603003][ T445] EXT4-fs (loop3): 1 truncate cleaned up [ 1068.607327][ T462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.628373][ T445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1068.736089][ T445] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.10977: corrupted xattr block 19: overlapping e_value [ 1068.779793][ T31] audit: type=1800 audit(1068.802:4435): pid=445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10977" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1068.909049][T25431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1068.948265][T29965] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 1068.999808][T29965] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 1069.140359][T31113] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1069.327341][T31113] usb 9-1: Using ep0 maxpacket: 8 [ 1069.348753][T31113] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1069.359459][T31113] usb 9-1: config 0 has no interface number 0 [ 1069.368550][T31113] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1069.380575][T31113] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1069.420792][T31113] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1069.437117][ T488] loop6: detected capacity change from 0 to 16 [ 1069.487725][T31113] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1069.501943][ T488] erofs (device loop6): mounted with root inode @ nid 36. [ 1069.549737][T31113] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1069.585717][ T488] syz.6.10992: attempt to access beyond end of device [ 1069.585717][ T488] loop6: rw=8912896, sector=8, nr_sectors = 32 limit=16 [ 1069.604055][T31113] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1069.655067][T31113] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.697035][ T488] syz.6.10992: attempt to access beyond end of device [ 1069.697035][ T488] loop6: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 1069.716507][T31113] usb 9-1: config 0 descriptor?? [ 1069.756868][T31113] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1069.793975][ T488] syz.6.10992: attempt to access beyond end of device [ 1069.793975][ T488] loop6: rw=8388608, sector=16, nr_sectors = 8 limit=16 [ 1069.848241][ T31] audit: type=1800 audit(1069.872:4436): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10992" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1069.948146][ T502] loop3: detected capacity change from 0 to 1024 [ 1070.004484][ T475] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1070.047353][T31113] usb 9-1: USB disconnect, device number 3 [ 1070.104026][T31113] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1070.114675][ T508] netlink: 'syz.5.11000': attribute type 11 has an invalid length. [ 1070.175877][ T511] netlink: 11 bytes leftover after parsing attributes in process `syz.6.11001'. [ 1070.190396][ T508] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11000'. [ 1070.228602][ T3547] hfsplus: b-tree write err: -5, ino 4 [ 1070.747655][ T522] loop6: detected capacity change from 0 to 2048 [ 1070.876288][ T522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.005654][ T522] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1071.306592][T23683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.322138][ T506] loop2: detected capacity change from 0 to 32768 [ 1071.370038][ T506] btrfs: Deprecated parameter 'usebackuproot' [ 1071.410601][ T506] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1071.471664][ T506] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10999 (506) [ 1071.608848][ T506] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1071.660387][ T506] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 1071.712712][ T506] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1071.942965][ T576] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1072.122947][ T506] BTRFS info (device loop2): enabling ssd optimizations [ 1072.129961][ T506] BTRFS info (device loop2): using spread ssd allocation scheme [ 1072.170709][ T506] BTRFS info (device loop2): turning off barriers [ 1072.229256][ T506] BTRFS info (device loop2): turning on async discard [ 1072.292865][ T506] BTRFS info (device loop2): enabling disk space caching [ 1072.336793][ T506] BTRFS info (device loop2): force clearing of disk cache [ 1072.390433][ T506] BTRFS info (device loop2): enabling auto defrag [ 1072.428365][ T506] BTRFS info (device loop2): trying to use backup root at mount time [ 1072.515445][ T599] loop5: detected capacity change from 0 to 1024 [ 1072.563825][ T506] btrfs: Deprecated parameter 'usebackuproot' [ 1072.603282][ T506] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1072.661566][ T506] BTRFS info (device loop2 state M): rebuilding free space tree [ 1072.707316][ T599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1072.745436][ T506] BTRFS info (device loop2 state M): disabling free space tree [ 1072.772401][ T506] BTRFS info (device loop2 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1072.772993][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1072.800089][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1072.821709][ T506] BTRFS info (device loop2 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1072.835192][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1072.849154][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1072.869753][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1072.953804][ T506] BTRFS info (device loop2 state M): force clearing of disk cache [ 1073.000144][ T506] BTRFS info (device loop2 state M): trying to use backup root at mount time [ 1073.043977][ T603] loop8: detected capacity change from 0 to 4096 [ 1073.098770][ T603] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1073.118302][ T609] lo speed is unknown, defaulting to 1000 [ 1073.200935][ T603] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1073.210194][T28665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1073.255170][ T603] ntfs3(loop8): ino=19, mi_enum_attr [ 1073.336546][ T623] loop6: detected capacity change from 0 to 256 [ 1073.362240][ T5827] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1073.411796][ T623] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1073.586269][ T626] netlink: 1224 bytes leftover after parsing attributes in process `syz.5.11033'. [ 1074.177555][ T644] loop2: detected capacity change from 0 to 2048 [ 1074.231720][ T644] EXT4-fs: Ignoring removed i_version option [ 1074.290960][ T648] loop8: detected capacity change from 0 to 8 [ 1074.365963][ T648] SQUASHFS error: xz decompression failed, data probably corrupt [ 1074.426717][ T648] SQUASHFS error: Failed to read block 0x108: -5 [ 1074.472105][ T644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.493778][ T648] SQUASHFS error: Unable to read metadata cache entry [106] [ 1074.529557][ T648] SQUASHFS error: Unable to read inode 0x11f [ 1074.571762][ T657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.573169][ T609] chnl_net:caif_netlink_parms(): no params data found [ 1074.896624][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.002417][T16529] Bluetooth: hci8: command tx timeout [ 1075.303038][ T680] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1075.381421][ T609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.420456][ T609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.468163][ T609] bridge_slave_0: entered allmulticast mode [ 1075.492310][ T609] bridge_slave_0: entered promiscuous mode [ 1075.531190][ T609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.578801][ T609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.612215][ T609] bridge_slave_1: entered allmulticast mode [ 1075.628841][ T609] bridge_slave_1: entered promiscuous mode [ 1075.946943][ T609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.227779][ T716] loop8: detected capacity change from 0 to 64 [ 1076.242054][ T609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.618886][ T609] team0: Port device team_slave_0 added [ 1076.661677][ T609] team0: Port device team_slave_1 added [ 1076.845787][ T736] overlay: Bad value for 'workdir' [ 1076.949820][ T609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.000392][ T609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.080469][T16529] Bluetooth: hci8: command tx timeout [ 1077.150433][ T609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.231287][ T609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.281460][ T609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.410327][ T609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.793839][ T782] loop8: detected capacity change from 0 to 8 [ 1077.881944][ T782] SQUASHFS error: Failed to read block 0x6de: -5 [ 1077.902544][ T782] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1077.945035][ T609] hsr_slave_0: entered promiscuous mode [ 1077.945328][ T782] SQUASHFS error: Failed to read block 0x63a: -5 [ 1077.980073][ T609] hsr_slave_1: entered promiscuous mode [ 1078.005507][ T609] debugfs: 'hsr0' already exists in 'hsr' [ 1078.025150][ T609] Cannot create hsr debugfs directory [ 1078.060391][ T782] SQUASHFS error: Unable to read metadata cache entry [638] [ 1078.069379][ T782] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1078.470445][ T802] binder: 799:802 ioctl c018620b 0 returned -14 [ 1079.001384][T25795] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1079.038510][ T777] loop5: detected capacity change from 0 to 32768 [ 1079.090531][ T777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11091 (777) [ 1079.161248][T16529] Bluetooth: hci8: command tx timeout [ 1079.171346][T25795] usb 3-1: Using ep0 maxpacket: 8 [ 1079.196971][T25795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1079.261906][ T777] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1079.279833][T25795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1079.285825][ T777] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1079.357661][T25795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1079.435080][T25795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 1079.448182][ T609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.483375][T25795] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1079.527971][T25795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.558184][T25795] usb 3-1: config 0 descriptor?? [ 1079.574637][ T777] BTRFS info (device loop5): enabling ssd optimizations [ 1079.587729][ T811] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1079.614126][ T777] BTRFS info (device loop5): turning on async discard [ 1079.657911][ T777] BTRFS info (device loop5): enabling free space tree [ 1079.858481][ T855] netlink: 260 bytes leftover after parsing attributes in process `syz.8.11114'. [ 1079.933280][T28665] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1080.045508][ T609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.164079][ T5963] usb 3-1: USB disconnect, device number 113 [ 1080.174219][T16529] Bluetooth: hci9: Opcode 0x0c03 failed: -19 [ 1080.342806][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11116'. [ 1080.586067][ T609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.046036][ T890] Cannot find del_set index 4 as target [ 1081.162188][ T32] INFO: task syz.9.9385:28632 blocked for more than 143 seconds. [ 1081.200454][ T32] Not tainted syzkaller #0 [ 1081.240431][T16529] Bluetooth: hci8: command tx timeout [ 1081.242694][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1081.320497][ T32] task:syz.9.9385 state:D stack:26232 pid:28632 tgid:28630 ppid:22973 task_flags:0x400040 flags:0x00080002 [ 1081.346833][ T32] Call Trace: [ 1081.357275][ T32] [ 1081.370393][ T32] __schedule+0x149b/0x4fd0 [ 1081.381050][ T32] ? __pfx___schedule+0x10/0x10 [ 1081.389238][ T32] ? schedule+0x91/0x360 [ 1081.401180][ T32] schedule+0x165/0x360 [ 1081.405420][ T32] schedule_preempt_disabled+0x13/0x30 [ 1081.412108][ T32] __mutex_lock+0x7e6/0x1350 [ 1081.416781][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.422617][ T32] ? __mutex_lock+0x5bb/0x1350 [ 1081.427562][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 1081.433819][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1081.439085][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.444886][ T32] ? stack_trace_save+0x9c/0xe0 [ 1081.449879][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.456495][ T32] ? stack_depot_save_flags+0x33/0x810 [ 1081.463023][ T32] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 1081.469710][ T32] ? __alloc_skb+0x204/0x3a0 [ 1081.474703][ T32] ? netlink_dump+0x1b7/0xe90 [ 1081.479395][ T32] ? __netlink_dump_start+0x5cb/0x7e0 [ 1081.484938][ T32] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1081.490998][ T32] ? genl_rcv_msg+0x5da/0x790 [ 1081.495734][ T32] ? netlink_rcv_skb+0x208/0x470 [ 1081.501678][ T32] ? genl_rcv+0x28/0x40 [ 1081.505883][ T32] ? netlink_unicast+0x82f/0x9e0 [ 1081.512047][ T32] ? netlink_sendmsg+0x805/0xb30 [ 1081.517015][ T32] ? __sock_sendmsg+0x21c/0x270 [ 1081.522003][ T32] ? ____sys_sendmsg+0x505/0x820 [ 1081.526974][ T32] ? ___sys_sendmsg+0x21f/0x2a0 [ 1081.531911][ T32] ? __x64_sys_sendmsg+0x19b/0x260 [ 1081.537079][ T32] ? do_syscall_64+0xec/0xf80 [ 1081.541895][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.547988][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1081.554596][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.560312][ T32] ? rcu_is_watching+0x15/0xb0 [ 1081.565123][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.571979][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.577644][ T32] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 1081.584742][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.590661][ T32] ? __build_skb_around+0x22d/0x3c0 [ 1081.595892][ T32] genl_dumpit+0x10b/0x1b0 [ 1081.602279][ T32] netlink_dump+0x6e4/0xe90 [ 1081.607564][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 1081.612669][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.619839][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.625650][ T32] ? genl_start+0x499/0x6c0 [ 1081.630207][ T32] __netlink_dump_start+0x5cb/0x7e0 [ 1081.635533][ T32] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1081.642977][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1081.649238][ T32] ? genl_get_cmd+0x496/0x910 [ 1081.656249][ T32] ? __pfx_genl_start+0x10/0x10 [ 1081.661180][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 1081.666130][ T32] ? __pfx_genl_done+0x10/0x10 [ 1081.670973][ T32] ? __dev_queue_xmit+0x280/0x3100 [ 1081.676402][ T32] genl_rcv_msg+0x5da/0x790 [ 1081.680986][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.686060][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.691938][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1081.698463][ T32] ? __asan_memcpy+0x40/0x70 [ 1081.703193][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 1081.709456][ T32] ? __skb_clone+0x63/0x7a0 [ 1081.714918][ T32] netlink_rcv_skb+0x208/0x470 [ 1081.723399][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1081.728461][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1081.733820][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.739514][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.745218][ T32] ? down_read+0x274/0x2e0 [ 1081.749662][ T32] ? genl_rcv+0xd/0x40 [ 1081.753833][ T32] genl_rcv+0x28/0x40 [ 1081.757836][ T32] netlink_unicast+0x82f/0x9e0 [ 1081.762727][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1081.768035][ T32] ? __alloc_skb+0x198/0x3a0 [ 1081.772751][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.778672][ T32] ? skb_put+0x11b/0x210 [ 1081.783004][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.788684][ T32] netlink_sendmsg+0x805/0xb30 [ 1081.793522][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.798846][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.810638][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1081.815748][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.823665][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.829574][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.835071][ T32] __sock_sendmsg+0x21c/0x270 [ 1081.839825][ T32] ____sys_sendmsg+0x505/0x820 [ 1081.844660][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.849995][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.855713][ T32] ? import_iovec+0x74/0xa0 [ 1081.860308][ T32] ___sys_sendmsg+0x21f/0x2a0 [ 1081.865051][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.870376][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.876036][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.882154][ T32] ? futex_wake+0x4b2/0x560 [ 1081.886747][ T32] ? __fget_files+0x2a/0x420 [ 1081.891652][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.897306][ T32] ? __fget_files+0x3a0/0x420 [ 1081.902339][ T32] __x64_sys_sendmsg+0x19b/0x260 [ 1081.907339][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.913828][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1081.919509][ T32] ? rcu_is_watching+0x15/0xb0 [ 1081.925471][ T32] do_syscall_64+0xec/0xf80 [ 1081.930009][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.936262][ T32] ? trace_irq_disable+0x37/0x100 [ 1081.942335][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.948279][ T32] RIP: 0033:0x7f8cb1d8f749 [ 1081.952866][ T32] RSP: 002b:00007f8cb2c2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.962552][ T32] RAX: ffffffffffffffda RBX: 00007f8cb1fe5fa0 RCX: 00007f8cb1d8f749 [ 1081.970871][ T32] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 1081.982590][ T32] RBP: 00007f8cb1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1081.990694][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.998686][ T32] R13: 00007f8cb1fe6038 R14: 00007f8cb1fe5fa0 R15: 00007fff1f3da1e8 [ 1082.006806][ T32] [ 1082.013870][ T32] [ 1082.013870][ T32] Showing all locks held in the system: [ 1082.035232][ T32] 1 lock held by rcu_exp_gp_kthr/18: [ 1082.041485][ T32] 1 lock held by khungtaskd/32: [ 1082.046633][ T32] #0: ffffffff8df41ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1082.066816][ T32] 3 locks held by kworker/u8:6/261: [ 1082.073486][ T32] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1082.085690][ T609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.099190][ T32] #1: ffffc90002ef7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1082.110363][ T32] #2: ffffffff8f312008 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1082.120131][ T32] 4 locks held by kworker/u8:13/3547: [ 1082.127234][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1082.137975][ T32] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1082.147024][ T32] #2: ffff88809d430788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 1082.157190][ T32] #3: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x4b3/0xf30 [ 1082.166309][ T32] 1 lock held by klogd/5184: [ 1082.172790][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1082.183847][ T32] 1 lock held by dhcpcd/5490: [ 1082.188878][ T32] #0: ffffffff8f312008 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x20f/0x330 [ 1082.198775][ T32] 2 locks held by getty/5580: [ 1082.203974][ T32] #0: ffff8880345ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1082.213856][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1082.224888][ T32] 2 locks held by syz.0.7951/24933: [ 1082.231474][ T32] #0: ffffffff8f379d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1082.239747][ T32] #1: ffffffff8e237c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 1082.250291][ T32] 3 locks held by syz.9.9385/28632: [ 1082.255549][ T32] #0: ffffffff8f379d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1082.263817][ T32] #1: ffff8880285916f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1082.274383][ T32] #2: ffffffff8e237c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 1082.286321][ T32] 2 locks held by syz.4.10854/32552: [ 1082.292058][ T32] #0: ffffffff8f379d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1082.300407][ T32] #1: ffffffff8e237c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 1082.310481][ T32] 8 locks held by syz-executor/609: [ 1082.315680][ T32] #0: ffff888030db8420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 1082.325652][ T32] #1: ffff88806b314c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1082.336796][ T32] #2: ffff88814336c788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1082.346936][ T32] #3: ffffffff8eb9f808 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1082.358076][ T32] #4: ffff88807ee3a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1082.369069][ T32] #5: ffff88807ee3b250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1082.379199][ T32] #6: ffffffff8f312008 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 1082.388221][ T32] #7: ffffffff8df47638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 1082.399874][ T32] 4 locks held by syz.5.11133/895: [ 1082.405088][ T32] #0: ffffffff99c86db8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1082.416111][ T32] #1: ffffffff8f0868f0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x341/0x5a0 [ 1082.426394][ T32] #2: ffff888053b89290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1082.437176][ T32] #3: ffffffff8f312008 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1082.455103][ T32] 1 lock held by syz.6.11132/900: [ 1082.460163][ T32] #0: ffffffff8f312008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1082.469995][ T900] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11132'. [ 1082.480132][ T895] lo speed is unknown, defaulting to 1000 [ 1082.486295][ T32] [ 1082.486308][ T32] ============================================= [ 1082.486308][ T32] [ 1082.486324][ T32] NMI backtrace for cpu 1 [ 1082.486341][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1082.486372][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.486394][ T32] Call Trace: [ 1082.486402][ T32] [ 1082.486412][ T32] dump_stack_lvl+0xe8/0x150 [ 1082.486444][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1082.486473][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.486498][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1082.486540][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1082.486579][ T32] sys_info+0x135/0x170 [ 1082.486611][ T32] watchdog+0xf95/0xfe0 [ 1082.486652][ T32] ? watchdog+0x20a/0xfe0 [ 1082.486692][ T32] kthread+0x711/0x8a0 [ 1082.486732][ T32] ? __pfx_watchdog+0x10/0x10 [ 1082.486768][ T32] ? __pfx_kthread+0x10/0x10 [ 1082.486800][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.486841][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.486867][ T32] ? __pfx_kthread+0x10/0x10 [ 1082.486903][ T32] ret_from_fork+0x510/0xa50 [ 1082.486933][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1082.486955][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.486985][ T32] ? __switch_to+0xc9e/0x1480 [ 1082.487029][ T32] ? __pfx_kthread+0x10/0x10 [ 1082.487066][ T32] ret_from_fork_asm+0x1a/0x30 [ 1082.487119][ T32] [ 1082.487129][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1082.513062][ T900] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1082.518012][ C0] NMI backtrace for cpu 0 [ 1082.518032][ C0] CPU: 0 UID: 0 PID: 900 Comm: syz.6.11132 Not tainted syzkaller #0 PREEMPT(full) [ 1082.518057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.518071][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1082.518102][ C0] Code: e8 ce a7 a6 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f ca 0c fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 25 db f5 fb cc 44 89 f9 80 e1 07 [ 1082.518120][ C0] RSP: 0018:ffffc900043fe630 EFLAGS: 00000002 [ 1082.518140][ C0] RAX: 1ffffffff3381c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1082.518155][ C0] RDX: 00000000000003fd RSI: 0000000000024a4b RDI: 0000000000024a4c [ 1082.518169][ C0] RBP: ffffffff99c0e550 R08: ffff8880223d0237 R09: 1ffff1100447a046 [ 1082.518186][ C0] R10: dffffc0000000000 R11: ffffffff851a6560 R12: dffffc0000000000 [ 1082.518203][ C0] R13: 0000000000000000 R14: ffffffff99c0e2c0 R15: 0000000000000000 [ 1082.518220][ C0] FS: 00007f43c40236c0(0000) GS:ffff888125e1b000(0000) knlGS:0000000000000000 [ 1082.518239][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1082.518255][ C0] CR2: 0000001b34421ff8 CR3: 000000005852e000 CR4: 0000000000350ef0 [ 1082.518272][ C0] Call Trace: [ 1082.518281][ C0] [ 1082.518293][ C0] wait_for_lsr+0x1a1/0x2f0 [ 1082.518329][ C0] serial8250_console_write+0x1301/0x1b60 [ 1082.518376][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1082.518401][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.518431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.518460][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.518487][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1082.518522][ C0] ? console_flush_all+0x11a/0xb00 [ 1082.518553][ C0] console_flush_all+0x713/0xb00 [ 1082.518587][ C0] ? console_flush_all+0x11a/0xb00 [ 1082.518623][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1082.518658][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.518683][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1082.518721][ C0] console_unlock+0xbb/0x190 [ 1082.518748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.518776][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1082.518803][ C0] ? vprintk_emit+0x280/0x550 [ 1082.518831][ C0] ? vprintk_emit+0x44b/0x550 [ 1082.518858][ C0] ? vprintk_emit+0x2c5/0x550 [ 1082.518883][ C0] ? vprintk_emit+0x2c5/0x550 [ 1082.518912][ C0] vprintk_emit+0x47b/0x550 [ 1082.518941][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1082.518967][ C0] ? __dev_notify_flags+0x1d9/0x2e0 [ 1082.519004][ C0] _printk+0xcf/0x120 [ 1082.519037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519067][ C0] ? __pfx__printk+0x10/0x10 [ 1082.519100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519125][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1082.519149][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519174][ C0] ? ___ratelimit+0x5a0/0x900 [ 1082.519201][ C0] do_setlink+0x378e/0x41c0 [ 1082.519241][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519267][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1082.519289][ C0] ? __pfx_do_setlink+0x10/0x10 [ 1082.519324][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519354][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519387][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1082.519421][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519446][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1082.519479][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519547][ C0] ? __mutex_lock+0x5bb/0x1350 [ 1082.519577][ C0] ? rtnl_newlink+0x8ec/0x1c90 [ 1082.519606][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1082.519640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519666][ C0] ? ns_capable+0x8a/0xf0 [ 1082.519689][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519718][ C0] rtnl_newlink+0x161c/0x1c90 [ 1082.519755][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1082.519779][ C0] ? do_syscall_64+0xec/0xf80 [ 1082.519804][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.519853][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1082.519875][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519901][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1082.519925][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519954][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.519979][ C0] ? kmem_cache_free+0x197/0x620 [ 1082.520002][ C0] ? nlmon_xmit+0xb0/0x100 [ 1082.520040][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520066][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1082.520090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520120][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1082.520148][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520173][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1082.520197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520226][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1082.520257][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520290][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520323][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1082.520348][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1082.520385][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1082.520411][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1082.520436][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 1082.520461][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520486][ C0] ? __asan_memcpy+0x40/0x70 [ 1082.520505][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1082.520528][ C0] ? __skb_clone+0x63/0x7a0 [ 1082.520565][ C0] netlink_rcv_skb+0x208/0x470 [ 1082.520598][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1082.520625][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1082.520664][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1082.520701][ C0] netlink_unicast+0x82f/0x9e0 [ 1082.520735][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1082.520762][ C0] ? __alloc_skb+0x198/0x3a0 [ 1082.520788][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520813][ C0] ? skb_put+0x11b/0x210 [ 1082.520838][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520867][ C0] netlink_sendmsg+0x805/0xb30 [ 1082.520906][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.520939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.520965][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1082.520997][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521022][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521048][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.521080][ C0] __sock_sendmsg+0x21c/0x270 [ 1082.521117][ C0] ____sys_sendmsg+0x505/0x820 [ 1082.521151][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1082.521185][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521210][ C0] ? import_iovec+0x74/0xa0 [ 1082.521242][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 1082.521273][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1082.521300][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521331][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521356][ C0] ? futex_wait+0x285/0x360 [ 1082.521411][ C0] ? __fget_files+0x2a/0x420 [ 1082.521438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521463][ C0] ? __fget_files+0x3a0/0x420 [ 1082.521499][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 1082.521530][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1082.521566][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.521591][ C0] ? rcu_is_watching+0x15/0xb0 [ 1082.521628][ C0] do_syscall_64+0xec/0xf80 [ 1082.521654][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.521676][ C0] ? trace_irq_disable+0x37/0x100 [ 1082.521709][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.521732][ C0] RIP: 0033:0x7f43c318f749 [ 1082.521752][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.521770][ C0] RSP: 002b:00007f43c4023038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.521793][ C0] RAX: ffffffffffffffda RBX: 00007f43c33e5fa0 RCX: 00007f43c318f749 [ 1082.521810][ C0] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1082.521824][ C0] RBP: 00007f43c3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1082.521838][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.521852][ C0] R13: 00007f43c33e6038 R14: 00007f43c33e5fa0 R15: 00007fff75d1e938 [ 1082.521883][ C0] [ 1082.533248][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1082.533273][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1082.533301][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.533318][ T32] Call Trace: [ 1082.533330][ T32] [ 1082.533342][ T32] vpanic+0x1e0/0x670 [ 1082.533381][ T32] panic+0xb9/0xc0 [ 1082.533412][ T32] ? __pfx_panic+0x10/0x10 [ 1082.533442][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.533475][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.533503][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1082.533533][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.533562][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1082.533606][ T32] watchdog+0xfdf/0xfe0 [ 1082.533653][ T32] ? watchdog+0x20a/0xfe0 [ 1082.533696][ T32] kthread+0x711/0x8a0 [ 1082.533733][ T32] ? __pfx_watchdog+0x10/0x10 [ 1082.533771][ T32] ? __pfx_kthread+0x10/0x10 [ 1082.533801][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.533835][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.533861][ T32] ? __pfx_kthread+0x10/0x10 [ 1082.533895][ T32] ret_from_fork+0x510/0xa50 [ 1082.533923][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1082.533945][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.533974][ T32] ? __switch_to+0xc9e/0x1480 [ 1082.534014][ T32] ? __pfx_kthread+0x10/0x10 [ 1082.534048][ T32] ret_from_fork_asm+0x1a/0x30 [ 1082.534102][ T32] [ 1082.534863][ T32] Kernel Offset: disabled