last executing test programs: 8m36.31679859s ago: executing program 2 (id=5518): r0 = openat$comedi(0xffffff9c, &(0x7f0000000640)='/dev/comedi3\x00', 0x200, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 8m36.13442438s ago: executing program 2 (id=5521): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)) 8m35.951607308s ago: executing program 2 (id=5523): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000111411050000000000000000080005"], 0x18}}, 0x0) 8m35.747228402s ago: executing program 2 (id=5525): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x2a10812, &(0x7f0000000580)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESDEC, @ANYRES32, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m35.292504774s ago: executing program 2 (id=5532): r0 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000cc0)={0x1, 0x0, {0xfffff982, 0x8, 0x2005, 0x2, 0x7, 0x0, 0x2, 0x3}}) 8m34.598178858s ago: executing program 2 (id=5536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 8m33.916680109s ago: executing program 32 (id=5536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 5m25.575280045s ago: executing program 1 (id=8299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) 5m25.347281174s ago: executing program 1 (id=8301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x15, {0xe39, 0x3f, 0xd, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 5m25.189949347s ago: executing program 1 (id=8303): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) landlock_create_ruleset(&(0x7f0000000000)={0x8702, 0x1, 0x3}, 0x76, 0x0) 5m24.882521162s ago: executing program 1 (id=8310): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,umask=00000000000000000000002,keep_last_dots,errors=remount-ro,iocharset=koi8-u,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp874,discard,utf8,namecase=1,keep_last_dots,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c7574696d653d303030dd54273b3b444bfb30303030d33030303030303030303037353734352c6e616d65626173653d312c7569643dc90000000000", @ANYRESHEX, @ANYBLOB=',utf8,iocharset=iso8859-15,discard,\x00'], 0x1, 0x153a, &(0x7f0000000680)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 5m24.457000506s ago: executing program 1 (id=8317): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x15, 0x1, 0x2, "df7c0cc512ac490008a897961bcf0000000000000000000000002200", 0x34343452}) 5m23.972970997s ago: executing program 1 (id=8325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 5m23.527916567s ago: executing program 33 (id=8325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 3m18.083480417s ago: executing program 5 (id=10214): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d07, 0x0) 3m17.804907627s ago: executing program 5 (id=10215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000500000008000b400000000038000480340001800b00010074756e6e656c00002400028008000240000000090800014000000005000000000000000208000140000000000900010073797a30"], 0xd4}}, 0x0) 3m17.639081696s ago: executing program 5 (id=10216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 3m17.381413615s ago: executing program 5 (id=10219): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000400)={[{@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@errors_remount}, {}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x40000001}}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x808}}, {@zero_size_dir}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 3m17.025801907s ago: executing program 5 (id=10224): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8", 0x1}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}, 0x24002854) 3m16.548290785s ago: executing program 5 (id=10231): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 3m16.112454456s ago: executing program 34 (id=10231): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 44.612224052s ago: executing program 6 (id=12479): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040), 0xc) 44.434450118s ago: executing program 6 (id=12482): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000002380)) 44.23618115s ago: executing program 6 (id=12484): pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) tee(r1, r0, 0xb14a, 0x0) 43.98682038s ago: executing program 6 (id=12487): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x4ae}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@sys_tz}, {@errors_remount}, {}, {}, {@gid}, {@utf8}, {@sys_tz}, {@sys_tz}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 43.299402338s ago: executing program 6 (id=12495): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,quota,errors=remount-ro,integrity,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950\x00integrity,usrquota,errors=remount-ro,resize=0x0000000000000000,errors=continue,noquot[,resize=0x000008000000735e,rootcontext=unconfined_\x00\x00\x00'], 0x1, 0x616d, &(0x7f0000006600)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0bER09FbG2vr9aLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAChNVVVVJ33MP5M+33fb7hQAMBX59b9K8vJTX//6n2/9ZZb6o1ar1Wr1FOqmarx7zSIiNpq3qd8zOBwPACfMRnzcdhdokfyL1o+IJ9ruBDDTOm13gGOxtb2+2kn5dpqvB8u77flckH35b3QeXN8xaXqQ0XNMpvX42oxePDOhPwtT6sMsyfl3R/O/tts+TOsdd/7TMin/4e6lT8XJ+fdG8x9xevLvjs2/VDn//iPl35M/AAAAAADMsPz//0stH/+dO/qmHMonHf9dnlIfAAAAAAAAAOBxO+r4fw8Y/w8AAABmVv1Zvfabp/aWTfoutnr51U7EkyPrA4VJF8sstt0PAAAAAAAAAAAAAChJf/cc3qudiEFEPLm4WFVV/dM0Wj+qo97+pCt9+6FkbT/JAwDAro+eGrmWvxMxHxFX03f9DRYXF6tqfmGxWqwW5vL72eHcfLXQ+Fybp/WyueEh3hD3h1X9y+Ybt2s66PPyQe2jv6++r2HVO0THHpNB+mtOaG4pbABIdl+NtrwinTJV9fSkNx+wj/3/FFqKpbYfV8y+th+mAAAAwPGrqqrqpK/zPpOO+Xfb7hQAMBX59X/0uMCR6u6E9ojH8/vVarVarVZ/qrqpGu9es4iIjeZt6vcMhuMHgBNmIz5uuwu0SP5F60fEc213AphpnbY7wLHY2l5f7aR8O83XgzS+ez4XZF/+G52d2+Xbj5seZPQck2k9vjajF89M6M+zU+rDLMn5d0fzv7bbPkzrHXf+0zIp/+HOJXPlyfn3RvMfcXry747Nv1Q5//4j5d+TPwAAAAAAzLD8//9Ljv/mTQYAAAAAAACAE2dre301X/eaj/9/bsx6rv88nXL+nUfNfyHNy/9Ey/l3R/L/8sh6vcb8/Tf39v9/b6+v/v7Ovz6bp4fNfy7PdNIjq5MeEZ10T51+mh5l6x62OegN63sadLq9fjrnpxq8EzfiZqzFhX3rdtPfY699ZV973dPBvvaL+9r7D7Vf2tc+SN87UC3k9nOxGj+Jm/H2TnvdNnfA9s8f0F4d0J7z73n+L1LOv9/4qfNfTO2dkWnt/ofdh/b75nTc/bxx4/O/vHD8m3Ogzeg92LamevvOttCfnb/JE8P42e21W+fuXr9z59ZKpMm+pRcjTR6znP9g52du7/n/hd32/Lzf3F/vfzh85PxnxWb0J+b/QmO+3t6Xpty3NuT8h+kn5/92ah+//5/k/Cfv/y+30B8AAAAAAAAAAAAAAAD4JFVV7Vwi+kZEXE7X/7R1bSYAMF359b9K8nK1Wq1Wq9Wnr26qxnu9WUTEX5u3qd8z/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpi213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+cWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOPPx8743Ocmjf99Nh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5P98Y77zO/8zI8OsljP86OuZ9CXL+ZxuP5zr/L42s18y/+u3M5b9x2BU3o7sv//N33vvp+dvvf/DKjfeuv7v27tqPL62sXLh0+fKVK1fOv3Pj5tqF3X+Pp9czIOefx752HmhZcv45c/mXJef/hVTLvyw5/y+mWv5lyfnn93vyL0vOP3/2kX9Zcv4vpVr+Zcn5fyXV8i/L1vb6XJ3/y6mWf1ny/v/VVMu/LDn/V1It/7Lk/M+lWv5lyfmfT/Uh8vf18KdIzj8f4bL/lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdW4xcd30H8DN7sdcOIQZCcFIDm8QY42yy60t8oXUx4doApUBCoRds17s2C77htUugSDYNlEgYFVVUpA9tAaE2UlVhVTzQitI8VL08lfaBvlS0lZAaVQEFVKS2otlq5vz//52ZnZ3Z9Y7Xs+f/+Uj2b3fmzJwzZ87M7nft7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2d1vmPlMrSiK+p/GX1uK4gX1jzeNb2lc9tqbvYUAAADAav1f4+/nbksXHFnGjZqW+dtX/MPX5+fn54v3Df/u6Bfm59MV40UxurEoGtdF1/79/bXmZYLHi7HaUNPnQz1WP9zj+pEe14/2uH5Dj+s39rh+rMf1i3bAIpvKn8c07mx748Mt5S4tbi9GG9dt73Crx2sbh4biz3Iaao3bzI+eLGaL08VMMdWyfLlsrbH8N++ur+utRVzXUNO6ttWPkB9+4kTchlrYx9tb1rVwn9H3X1+M/+iHnzjxRxefvbPT7LkbWu6v3M6d99S381PhknJba8XGtE/idg41bee2Ds/JcMt21hq3q3/cvp3PLXM7hxc2c021P+djxVDj42839tNI84/10n7aFi7773uLoriysNntyyxaVzFUbG65ZGjh+Rkrj8j6fdQPpRcXIys6Tu9exnFan9PbW4/T9tdEfP7vDrcbWWIbmp+m739yw6LnfaXHaVR/1Eu9VtqPwX6/VgblGIzHxbcbD/qJjsfg9vD4P7Fj6WOw47HT4RhMj7vpGLyn1zE4tGG4sc3pSag1brNwDO5uWX64saZaYz6zo/sxOHnxzPnJuY99/P7ZM8dPzZyaObt39+6pvfv3Hzx4cPLk7OmZqfLv69zbg29zMZReA/eEfRdfA69uW7b5UJ3/cv9eh2NdXodb2pbt9+twpP3B1dbmBbn4mC5fG4/Ud/rY1aFiiddY4/nZtfrXYXrcTa/DkabXYcevKR1ehyPLeB3Wlzm/a3nfs4w0/em0DTfqa8GWpmOw/fuR9mOw39+PDMoxOBaOi3/ZtfTXgm1he5+YWOn3I8OLjsH0cMN7T/2S9P3+2MHG6HRc3lW/4pYNxaW5mQsPPHb84sULu4sw1sRLmo6V9uN1c9NjKhYdr0MrPl6PzL7iibs6XL4l7Kux++t/jS35XNWX2fdA9+eq8dWt8/5suXRPEUafrfX+7PTVvL4/U5bssj/ry3xqcvXfi6dc2vT+O7rE+2/M/c+X60t39fjw6Ej5+h1Oe2e05f249akaabx31Rrrfm5yee/Ho+HPWr8f397l/Xhr27L9fj8ebX9w8f241uunHavT/nyOhePk9FT39+P6Mlv3rPSYHOn6fnxvmLWw/18TkkLKRU3HzlLHbVrXyMhoeFwjcQ2tx+neluVHQzarr+upPdd3nO68t7yv4fToFqzVcTretmy/j9P0frXUcVrr9dO369P+fI6F4+L2vd2P0/oyT+9b/Xvnpvhh03vnhl7H4Ojwhvo2j6aDsHy/n98Uj8EHihPFueJ0Md24dkPjeKo11jXx4PKOwQ3hz1q/V27tcgzubFu238dg+jq21LFXG1n84Pug/fkcC8fFkw92Pwbry7zxQH+/d90ZLknLNH3v2v7ztaV+5nVX2266kT/zqm/nXx/o/rPZ+jKnD640Z3bfT/eFS27psJ/aX79Lvaami7XZT1vDdj57cOn9VN+e+jJfOLTM4+lIURSXP/JQ4+e94d9X/uzSd77e8u8unf5N5/JHHvrBrSf/ZiXbD8D693w5Npdf65r+ZWo5//4PAAAArAsx9w+Fmcj/AAAAUBkx98f/FZ7I/wAAAFAZMfePhJlkkv+3vvHZ2ecvF6mZPx/E69NueLhcLnZcp8Ln4/ML6pc/9NWZH//F5eWte6goip88/Bsdl9/6cNyu0njYzmtvar188Q0vL2v9xx5dWK65v/6lcP/x8Sz3MOhUwZ0qiuKbt32usZ7x919tzKcfPtaY777yxOP1ZZ47VH4eb//MS8rlfz+Uf4+cPN5y+2fCfvhemFNv67w/4u2+dvU12w68d2F98Xa1e17YeNhPfqC83/h7cj7/eLl83M9Lbf9ffvapr9WXf+xVnbf/8lDn7X8q3O9Xw/yfl5fLNz8H9c/j7T4dtj+uL97uga98q+P2X/tMufz5N5fLHQszrn9n+Hz7m5+dbd5fj9WOtzyu4i3lcnH9U9/57cb18f7i/bdv/9jRqy37o/34ePqfyvuZbFs+Xh7XE/152/rr99N8fMb1P/Vbx1r2c6/1X3v3My+v32/7+u9rW2647fbtv7HpDz79uY7ri9tz5E/PtzyeI+8Kr+Ow/ic/EI7HcP3/Xvtcy3qjY+9qff+Jy39py+WWxxO99Ufl+q+97lRj/sf4j3/vlhfc+sIrr6zvu6L49nvK++u1/lN/eK5l+798x67G8xGvjx399vUvJa7/wkcnzp6buzQ73bRXG7875+3l9mwc27S5vr23hffW9s+Pnrv4wZkL41PjU0UxXt1foXfdvhLmD8pxZaW33/VoeD7v+uI3N+/4x8/Gy//5kfLyq28rv269Oiz3+XD5lvL5m6+tcv1P3n1H4/Vde7r8vKXH3gfbtv/nwWUtGB5/+/cF8Xg//9IPNvZD/brG1434ul7l9n93uryfb4T9Oh9+M/M9dyysr3n5+LsRrr6nfL2vev+Ft7n4vP5xeL7f8b3y/uN2xcf73fB9zLe2tr7fxePjG5eH2u+/8Vs8roT3k+JKeX1cKu7vq8/d0XHz4u8hKa7c2fj8d9L93Lmih7mUuY/NTZ6ePXvpscmLM3MXJ+c+9vGjZ85dOnvxaON3eR79UK/bL7w/bW68P03P7N9XTG0qiuJcMbUGb1g3ZvvrHy1v+88/emL6wNSO6ZmTxy+dvPjo+ZkLp07MzZ2YmZ7bcfzkyZmP9rr97PTh3XsO7T2wZ+LU7PThg4cO7T00MXv2XH0zyo3qYf/UhyfOXjjauMnc4X2Hdj/44L6piTPnpmcOH5iamrjU6/aNr00T9Vv/+sSFmdPHL86emZmYm/34zOHdh/bv39PztwGeOX9ybnzywqWzk5fmZi5Mlo9l/GLj4vrXvl63p5rm/rX8frZdrfxFfMU779uffj9r3Vc/ueRdlYu0/QLRZ8Pvovn7F50/uJzPY+4fDTPJJP8DAABADmLu3xBmIv8DAABAZcTcvzHMRP4HAACAyoi5fyzMJJP8r/+v/7+8/n95vf5/Xv3/8x8pe6Xrvf8f+/P6/3m4yf3/Va9f/1//v3r9/+X359f79uv/6/+z2KD1/2Pu31QUWeZ/AAAAyEHM/ZvDTOR/AAAAqIyY+28JM5H/AQAAoDJi7n9BmEkm+V//f1n9/z29ClfV7/87/7/+f7E++//xydH/z8aK+/fvfaTlU/3/QP9f/1//X/9f/59VG13ympvV/4+5/9Ywk0zyPwAAAOQg5v4XhpnI/wAAAFAZMfffFmYi/wMAAEBlxNy/Jcwkk/yv/+/8//r/+v+V7v+v9vz/TRuj/78+OP9/d/r/PVx3/39M/3899v9H+7v9g93/77n5+v/cEIN2/v+Y+18UZpJJ/gcAAIAcxNz/4jAT+R8AAAAqI+b+l4SZyP8AAABQGTH33x5mkkn+1//X/x+s/v8X76/vef3/kv5/6ab2/7ue/7/8SP9/sOj/d6f/34Pz/+fV/+/z9g92/7/f5/8ffVP77fX/6WTQ+v8x9780zCST/A8AAAA5iLn/jjAT+R8AAAAqI+b+l4WZyP8AAABQGTH3bw0zyST/6//r/w9W/9/5//X/11P/v6T/P1j0/7vT/+9B/1//X/9/ef3/Dt/86v/TyaD1/2PuvzPMJJP8DwAAADmIuf+uMBP5HwAAACoj5v6fCjOR/wEAAKAyYu7fFmaSSf7X/9f/1//Pq/9/3wb9f/3/atP/707/vwf9f/1//f9lnv9/sZX0/zf2ujMqY9D6/zH3vzzMJJP8DwAAADmIuf8VYSbyPwAAAFRGzP2vDDOR/wEAAKAyYu4fDzPJJP/r/1er//8nf/XkKwv9f/3/HuuvaP8/Hgb6/5nT/+9O/78H/X/9f/3/Nen/k49B6//H3H93mEkm+R8AAAByEHP/PWEm8j8AAABURsz994aZyP8AAABQGTH3bw8zyST/6/9Xq/8f6f/r/3dbf0X7/4n+f970/ztoepHq//eg/6//n33/P373q/9Pfwxa/z/m/leFmWSS/wEAACAHMffvCDOR/wEAAKAyYu5/dZiJ/A8AAACVEXP/zjCTTPK//r/+v/6//r/+f+f16/+vT/r/3a20/79B/1//X/8/s/6/8//TXze//19+5xY/j7n/NWEmmeR/AAAAyEHM/bvCTOR/AAAAqIz4/zfL//cq/wMAAEAVxdw/EWaSSf7X/9f/z6n/X9P/1//X/688/f/unP+/B/1//X/9f/1/+urm9/9bP4+5//4wk0zyPwAAAOQg5v4HwkzkfwAAAKiMmPsnw0zkfwAAAKiMmPunwkwyyf/6//r/OfX/nf9f/1//v/r0/7vT/+9B/1//v2r9/6LQ/+emGrT+f8z9u8NMMsn/AAAAkIOY+/eEmcj/AAAAUBkx9+8NM5H/AQAAoDJi7t8XZpJJ/tf/1//X/9f/1//vvH79//VJ/787/f8e9P/1/6vW/3f+f26yQev/x9z/YJhJJvkfAAAAchBz//4wE/kfAAAAKiPm/gNhJiH/d/p/3QAAAMD6EnP/wTCTTP79X/+/Iv3/3/y7lnXr/+v/d1t/f/r/m/T/w9T/HywL/fvG8VqV/n/7y+K66f/3oP+v/6//r/9PXw1a/z/m/kNhJpnkfwAAAMhBzP2vDTOR/wEAAKAyYu7/6TAT+R8AAAAqI+b+nwkzyST/6/9XpP/fRv9f/7/b+p3/X/+/ypz/v7tK9f+H9P/1/wdr+/X/9f9Z7Mb3/+NHy+v/x9x/OMwkk/wPAAAAOYi5/2fDTOR/AAAAqIyY+18XZiL/AwAAQGXE3H8kzCST/K//r/+v/6//f2P6/68r2g1i/79+8Oj/V4v+f3eV6v87/7/+/4Btv/6//j+LDdr5/2Puf32YSSb5HwAAAHIQc/9DYSbyPwAAAFRGzP1vCDOR/wEAAKAyYu5/Y5hJJvlf/1//X/9f/9/5/zuvX/9/fdL/707/vwf9f/1//X/9f/pq0Pr/Mfe/Kcwkk/wPAAAAOYi5/81hJvI/AAAAVEbM/W8JM5H/AQAAoDJi7n9rmEkm+V//X/9f/1//X/+/8/qX2/8v/k3/f5Do/3en/9+D/r/+v/6//j99NWj9/5j7fy7MJJP8DwAAADmIuf/hMBP5HwAAACoj5v63hZnI/wAAAFAZMfe/Pcwkk/yv/6//r/+v/6//33n9zv+/Pun/d6f/34P+v/6//r/+P301aP3/mPvfEWaSSf4HAACAHMTc//NhJvI/AAAAVEbM/e8MM5H/AQAAoDJi7v+FMJNM8r/+v/7/YPX/5y83307/X/+/6Ff/v34j/f8s6P93p//fQ4f+/0b9f/1//X/9f67boPX/Y+5/V5hJJvkfAAAAchBz/7vDTOR/AAAAqIyY+98TZiL/AwAAQGXE3P9ImEkm+V//P8v+f3rIg9f/d/5//X/n/9f/Xx39/+70/3tw/n/9f/1//X/6atD6/zH3Pxpmkkn+BwAAgBzE3P/eMBP5HwAAACoj5v5fDDOR/wEAAKAyYu5/X5hJJvlf/z/L/v8An/+/av3/kZbjI6f+/1jT85mOS/1//f81oP/fnf5/D/r/+v+D3P8PR/OmJW6v/88gGrT+f8z97w8zyST/AwAAQA5i7v+lMBP5HwAAACojJv5fbvlM/gcAAIAqibn/V8JMMsn/+v/6//r/zv/v/P+d16//vz7p/3en/9+D/r/+/yD3/3vQ/2cQDVr/P+b+Xw0zWTL4/eC/lvEwAQAAgAESc/8Hwkwy+fd/AAAAyEHM/UfDTOR/AAAAqIyY+4+FmWSS//X/2/v/8Yyq+v/6//r/+v/6/+tR//r/L7u1KPT/9f/1//X/9f/1/1mNQev/x9x/PMwkk/wPAAAAOYi5/9fCTOR/AAAAqIyY+0+Emcj/AAAAUBkx90+HmWSS/29i/390MPv/zv9/vf3/n+j/6/8H+v+d6f+vDef/707/vwf9f/1//X/9f/pq0Pr/MffPhJlkkv8BAACgwtKPg2PuPxlmIv8DAABAZcTcfyrMRP4HAACAyoi5/4NhJpnkf+f/1/93/v+b0f8faVle/7+k/6//3w/6/93p//eg/6//r/+v/09fDVr/P+b+2TCTTPI/AAAA5CDm/g+Fmcj/AAAAUBkx9384zET+BwAAgMqIuf90mEkm+V//X/8/9/5/rSiuOP+//n+n9ev/r0/6/93p//eg/6//r/+v/09fDVr/P+b+M2EmmeR/AAAAyEHM/WfDTOR/AAAAqIz/Z+8+muy8qzyO3/HYCquZlzDrWc1yWJmXwJYdVawpksnBNjmDyTkYk3POYHLOOZuMyWCioUqUW+ccqdW3n6tw1fd5/ufz2ZyRypq+wm1P/UZ865+7/55xi/0PAAAAw8jdf6+4pcn+1//r/7v3/6udvP+//6/X/5+m/9f/b8OB/v7K9X/dYVH4of3///3/NXfT/+v/t9P/H68f6/+3atefX/+v/+egufX/ufvvHbc02f8AAADQQe7++8Qt9j8AAAAMI3f/feMW+x8AAACGkbv/mrilyf5v3f+fOPM5kv5f/7/3E537/5v1//r/ZfP+/zT9/wbe/9f/6//1/2zV3Pr/3P33i1ua7H8AAADoIHf//eMW+x8AAACGkbv/AXGL/Q8AAADDyN3/wLilyf5v3f97/1//H5bR/x/z/v85vx/9v/5/Hf3/NP3/Bvp//b/+X//PVs2t/8/d/6C4pcn+BwAAgA5y9z84brH/AQAAYBi5+x8St9j/AAAAMIzc/Q+NW5rsf/2//l//v5T+/4je/9f/6/8X7sbVmX8n6P8P0v9vsKH/X630/1POu59f/9tbzuc/hP5f/89Bc+v/c/c/LG6582p17GJ/kwAAAMCs5O5/eNzS5M//AQAAoIPc/dfGLfY/AAAADCN3/3VxS5P9r//X/+v/9f/6//VfX/+/TN7/n3bp/f///vc97t63//f+/zTv/2+7/7/jO0P/z7LNrf/P3X993NJk/wMAAEAHufsfEbfY/wAAADCM3P2PjFvsfwAAABhG7v5HxS1N9r/+f7T+/z/3/bqz+v+92kX/r//X/+v/R6f/n+b9/w32/jV3sn6o/9f/e/9f/8+lmVv/n7v/0XFLk/0PAAAAHeTuf0zcYv8DAADAMHL3PzZusf8BAABgGLn7Hxe3NNn/+v/R+v/9v877//r/dV9f/6//H5n+f5r+f4NR3v+/yO+aXffzl2rXn1//r//noLn1/7n7Hx+3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//X/y+j/8+voP/X/1/+/j/p/5dJ/z9N/7/BKP3/Rdp1P7/0z6//1/9z0Nz6/9z9T45bmux/AAAA6CB3/1PiFvsfAAAAhpG7/6lxi/0PAAAAw8jd/7S4pcn+1//r/5fR/3v/X//v/X/9//nR/0/T/2+g/9f/6//1/2zV3Pr/3P03xC1N9j8AAAB0kLv/6XGL/Q8AAADDyN3/jLjF/gcAAIBh5O5/ZtzSZP/r//X/+n/9v/5//dfX/y+T/n+a/n8D/b/+X/+v/2erZtT/n/WrTqyeFbc02f8AAADQQe7+Z8ct9j8AAAAMI3f/c+IW+x8AAACGkbv/uXFLk/2v/59N/7+X843V/59crVb6/1XT/v/kWX8/6/tS/6//PwL6/2kX3v/fetPp79zT9P/6/yn6f/2//p9zzaj/3/tx7v7nxS1N9j8AAAB0kLv/+XGL/Q8AAADDyN3/grjF/gcAAIBh5O5/YdzSZP/r/2fT/+8Zq//3/v+53x+d+n/v/x+k/z8a+v9p3v/fQP+v/9f/6//Zqrn1/7n7XxQ3Hbvqon+LAAAAwMzk7n9x3NLkz/8BAACgg9z9L4lb7H8AAABYqBsO/Ezu/pfGLU32v/5/u/3/sbN+Tv+v/z/3+0P/r//X/19++v9p+v8N9P/6f/2//p+tmlv/n7v/ZXFLk/0PAAAAHeTuvzFusf8BAABgGLn7Xx632P8AAAAwjNz9N8UtTfa//t/7//p//b/+f/3X1/8vk/5/mv5/A/2//n+3/f/xM/+j/p8xXED/f+rUqWsve/+fu/8VcUuT/Q8AAAAd5O5/Zdxi/wMAAMAwcve/Km6x/wEAAGAYuftfHbc02f/6/6b9f36rL6v/v2610v/r//X/+v9p+v9p+v8N9P/6f+//6//Zqrm9/5+7/zVxS5P9DwAAAB3k7n9t3GL/AwAAwDBy978ubrH/AQAAYBi5+18ftzTZ//r/pv2/9//1//r/o+7/b1/p/4/EIvr/k4d//bn3/9fr//X/E9r1/3e5074f6v/1/xw0t/4/d/8b4pYm+x8AAAA6yN3/xrjF/gcAAIBh5O5/U9xi/wMAAMAwcve/OW66ssn+1//r//X/+n/9//qvf8Tv/x9brVb6/y1YRP8/Ye79/3be/z/3n/Iz9P/6/yV/fv2//p+D5tb/5+5/S9zSZP8DAABAB7n73xq32P8AAAAwjNz9b4tb7H8AAAAYRu7+t8ctTfa//l//r//X/w/f/1+/iP7f+/9bov+fNo/+/3D6f/3/kj+//l//z/nbVf+fu/8dcUuT/Q8AAAAd5O5/Z9xi/wMAAMAwcve/K26x/wEAAGAYufvfHbc02f/6f/3/hfT/+Tn1/2P1/8dn1/+f2Pe/r8n7//r/LdH/T9P/b6D/1//r/2/Q/7NNc3v/P3f/e+KWJvsfAAAAOsjd/9649f+6tf8BAABgGLn73xe32P8AAAAwjNz9749bmux//b/+3/v/+v/h3//X/7ei/5+m/99A/6//1/97/5+tmlv/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMHL3fyhusf8BAABgGLn7b45bmux//b/+X/+v/9f/n/57qP8fg/5/2tH0/yf1//r/6uf/I/4p0P/r/zf9esY0t/4/d/+H45Ym+x8AAAA6yN3/kbjF/gcAAIBh5O7/aNxi/wMAAMAiXbnm53L3fyxuabL/9f/6f/2//l//v/7r6/+XaSf9f35T6P+9/x/69P//s+9HS3v//9z/+6X/1/+zfXPr/3P3fzxuabL/AQAAoIPc/Z+IW+x/AAAAGEbu/k/GLfY/AAAADCN3/6filib7X/+/jP4/vzP1//p//b/+X/8/zfv/0/T/G+j/d/p+/tI/v/5f/89Bc+v/c/d/Om5psv8BAACgg9z9n4lb7H8AAAAYRu7+z8Yt9j8AAAAMY2/3Z1zWcP/r/5fR/3v/X/+v/9f/6//Pj/5/mv5/A/2//l//r/9nq+bW/39u71edWH0+bmmy/wEAAKCD3P1fiFvsfwAAAJilw/+rAofL3f/FuMX+BwAAgGHk7v9S3NJk/+v/9f/L6P9PnTp1rf5f/7//93Om/79F/0/R/0/T/2+g/9f/6//1/2zV3Pr/3P1fjlua7H8AAADoIHf/V+IW+x8AAACGkbv/q3GL/Q8AAADDyN3/tbilyf7X/8+g/z+h//f+v/5/5f1//f+W6P+n6f83GLH/P3H+v/1d9/OXatefX/+v/+egufX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/z+6/v+O/+y6vP9/crX+8+v/9f/6f/3/5ab/n6b/32DE/v8C7LqfX/rn1//r/zlobv1/7v5vxy37h99VF/a7BAAAAOYkd/934pYmf/4PAAAAHeTu/27cYv8DAADAMHL3fy9uabL/9f8zeP9/wP7f+//rvz/0/7Pu/6/Q/49B/z9N/7+B/l//r//fUv+f3836/+7m1v/n7v9+3NJk/wMAAEAHuft/ELfY/wAAADCM3P0/jFvsfwAAABhG7v5b4paz9v+6tnsU+n/9v/5f/6//X//19f/LpP+fdr79//HVpfX/Sf+v/9f/d+3/vf/PaXPr/3P3/yhu8ef/AAAAsDhXHfLzuft/HLfY/wAAADCM3P0/iVvsfwAAABhG7v6fxi23XbGrj3Sk9P/6f/2//l//v/7r6/+XSf8/zfv/G+j/t9HPX63/H6P/X630/1y6ufX/uft/Frf4838AAAAYRu7+n8ct9j8AAAAMI3f/L+IW+x8AAACGkbv/l3FLk/2v/9f/X2L/v5dm6v9P0/+fpv9fT/9/NPT/0/T/G+j/vf+v//f+P1s1t/4/d/+tcUuT/Q8AAAAd5O7/Vdxi/wMAAMAwcvf/Om6x/wEAAGAYuft/E7c02f876//jP2r9/+L7f+//6//1//r/WdH/T9P/b6D/1//r//X/bNXc+v/c/b+NW5rsfwAAAOggd//v4hb7HwAAAIaRu//3cYv9DwAAAMPI3f+HuKXJ/vf+v/5f/6//1/+v//r6/2XS/0/T/69Xf6P0//p//b/+n62aW/+fu/+PcUuT/Q8AAAAd5O7/U9xi/wMAAMAwcvffFrfY/wAAADCM3P1/jlua7H/9v/5f/6//1/+v//r6/2XS/0/bZf9/1//a/GW9/7/z/j8/gv5f/6//Zyvm1v/n7v9L3NJk/wMAAEAHufv/GrfY/wAAADCM3P1/i1vsfwAAABhG7v6/xy1N9v+G/v94/YX6/0n6//2fX/+//vtD/6//1/9ffvr/ad7/30D/7/1//b/+n62aW/+fu/8fcUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/GbfY/wAAADCM3P3/ilua7H/v/y+p/79a/6//1//r//X/G+j/p+n/N9D/6//1//p/tmpu/X/u/n8HAAD//5KqTv8=") acct(&(0x7f00000017c0)='./file1\x00') 42.46916348s ago: executing program 6 (id=12506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 41.92127766s ago: executing program 35 (id=12506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.729574416s ago: executing program 8 (id=12994): r0 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000840)=[{0x9, 0x0, 0x0, 0x0}, {0x4, 0x2601, 0x1, &(0x7f0000000480)="ef"}], 0x2}) 2.694016384s ago: executing program 3 (id=12995): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 2.57265355s ago: executing program 0 (id=12997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdd0e}]}, 0x38}}, 0x0) 2.530122113s ago: executing program 8 (id=12998): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 2.401118675s ago: executing program 4 (id=13000): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x890c, 0x0) 2.218687994s ago: executing program 4 (id=13002): timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_delete(r0) 2.164714083s ago: executing program 0 (id=13003): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 2.057035877s ago: executing program 4 (id=13005): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") lstat(&(0x7f0000000700)='./file2\x00', 0x0) 1.966738457s ago: executing program 8 (id=13007): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002c000f012bbd7000ffdbdf25057c00000c000180fd8c0800", @ANYRES32=0x0, @ANYBLOB="08000380040004"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.708080426s ago: executing program 8 (id=13008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 1.619431617s ago: executing program 0 (id=13010): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x1, 0xff, 0x41564e57, 0x8, 0xfffffffe, 0x39a, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}) 1.555569913s ago: executing program 8 (id=13011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416940807034d2f87e5890c6aab845013f2325f1a39014403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c) 1.37033778s ago: executing program 0 (id=13012): r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1}, 0x40000010) 1.24109205s ago: executing program 0 (id=13014): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x20081, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000002c0)={0x8, 0x5}) 1.218546356s ago: executing program 4 (id=13015): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8dffff"}) 1.206371824s ago: executing program 8 (id=13016): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000280)='./bus\x00', 0x90c40, 0x0, 0x4, 0x0, &(0x7f0000000000)) 1.097610727s ago: executing program 7 (id=13017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0x80001}, 0x1c) 1.013302172s ago: executing program 0 (id=13018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 948.472789ms ago: executing program 7 (id=13019): r0 = syz_open_dev$media(&(0x7f0000000040), 0xa, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[{}]}) 912.271365ms ago: executing program 4 (id=13020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc5) 816.180509ms ago: executing program 4 (id=13021): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="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") 772.119011ms ago: executing program 7 (id=13022): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) inotify_rm_watch(r0, 0x0) 768.387166ms ago: executing program 3 (id=13023): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000001180)={0x2d, 0x20, 0x1f, 0x40}, 0xc, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x408c1}, 0x200c0841) 605.578807ms ago: executing program 3 (id=13024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x90, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}]}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) 551.814925ms ago: executing program 7 (id=13025): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450) 381.403851ms ago: executing program 3 (id=13026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) setns(r0, 0x24020000) 363.590777ms ago: executing program 7 (id=13027): r0 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000080)=[{0x4, 0x1, 0xfffffffffffffcbb, 0x0}, {0x38, 0x200, 0x45, &(0x7f0000000000)="4d68adfa46c32272645d4c393aff87921678d5f5f5cca9347e854404b055cce6788db99bfda9b41ab73982153ad37100202b4016e7ea2300ea7e2b182bd41de51e883b860f"}], 0x2}) 216.028833ms ago: executing program 3 (id=13028): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 170.717151ms ago: executing program 7 (id=13029): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 0s ago: executing program 3 (id=13030): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) getresuid(&(0x7f0000000980), &(0x7f0000001bc0), &(0x7f0000000100)) kernel console output (not intermixed with test programs): 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1026.145760][ T9] usb 5-1: config 8 interface 0 has no altsetting 0 [ 1026.175145][ T9] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1026.185076][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.214420][ T9] usb 5-1: Product: syz [ 1026.225059][ T9] usb 5-1: Manufacturer: syz [ 1026.236537][ T337] xt_NFQUEUE: number of total queues is 0 [ 1026.246943][ T9] usb 5-1: SerialNumber: syz [ 1026.267862][ T300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1026.523564][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1026.542152][ T9] usb 5-1: selecting invalid altsetting 0 [ 1026.667429][ T323] loop6: detected capacity change from 0 to 32768 [ 1026.717824][ T9] usb 5-1: USB disconnect, device number 9 [ 1026.760133][ T323] jfs filesystem being mounted at /602/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1026.916619][ T9843] udevd[9843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.160785][ T402] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1027.428284][ T29] rc_core: IR keymap rc-snapstream-firefly not found [ 1027.435043][ T29] Registered IR keymap rc-empty [ 1027.497047][ T29] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1027.536899][ T29] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input65 [ 1027.650966][ T29] input: syz syz mouse as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input66 [ 1027.772005][ T29] usb 8-1: USB disconnect, device number 4 [ 1027.777970][ C1] ati_remote 8-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1028.602368][ T425] loop0: detected capacity change from 0 to 32768 [ 1028.678802][ T425] jfs filesystem being mounted at /2286/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1028.840174][ T499] loop3: detected capacity change from 0 to 764 [ 1028.847884][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1028.870738][ T499] rock: directory entry would overflow storage [ 1028.881917][ T499] rock: sig=0x5245, size=8, remaining=5 [ 1029.042688][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.063908][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1029.096659][ T30] audit: type=1326 audit(3917644609.812:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=509 comm="syz.6.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1029.120343][ T29] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1029.158298][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1029.165649][ T30] audit: type=1326 audit(3917644609.831:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=509 comm="syz.6.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1029.213658][ T29] usb 8-1: SerialNumber: syz [ 1029.258905][ T30] audit: type=1326 audit(3917644609.831:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=509 comm="syz.6.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1029.347258][ T30] audit: type=1326 audit(3917644609.831:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=509 comm="syz.6.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1029.459617][ T30] audit: type=1326 audit(3917644609.831:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=509 comm="syz.6.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1029.544493][ T29] usb 8-1: 0:2 : does not exist [ 1029.708999][ T29] usb 8-1: USB disconnect, device number 5 [ 1029.818473][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.002993][ T574] loop6: detected capacity change from 0 to 256 [ 1030.014583][ T578] loop4: detected capacity change from 0 to 512 [ 1030.046768][ T574] exfat: Deprecated parameter 'namecase' [ 1030.064515][ T574] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1030.082526][ T574] exfat filesystem being mounted at /615/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 1030.082580][ T578] EXT4-fs (loop4): 1 truncate cleaned up [ 1030.104131][ T578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.378197][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.474201][ T603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11548'. [ 1030.717197][ T620] loop7: detected capacity change from 0 to 1024 [ 1030.784206][ T626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11556'. [ 1031.045533][ T633] bond5: Removing last arp target with arp_interval on [ 1031.056033][ T77] hfsplus: b-tree write err: -5, ino 8 [ 1031.592918][ T713] JFS: charset not found [ 1031.875776][ T735] loop0: detected capacity change from 0 to 256 [ 1031.914130][ T735] exfat: Deprecated parameter 'utf8' [ 1031.931945][ T735] exfat filesystem being mounted at /2296/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1031.953221][ T741] loop6: detected capacity change from 0 to 256 [ 1031.987109][ T735] exFAT-fs (loop0): error, data size is invalid(34359738378) [ 1031.989708][ T741] exfat: Deprecated parameter 'namecase' [ 1032.018474][ T735] exFAT-fs (loop0): Filesystem has been set read-only [ 1032.023839][ T741] exfat: Deprecated parameter 'namecase' [ 1032.065273][ T741] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1032.118652][ T741] exfat filesystem being mounted at /626/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1032.628148][ T784] loop3: detected capacity change from 0 to 128 [ 1032.691696][ T784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1032.734781][ T784] ext4 filesystem being mounted at /2360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.936590][ T5822] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.075725][ T819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11605'. [ 1033.272432][ T834] loop0: detected capacity change from 0 to 8 [ 1033.311320][ T834] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1033.324526][ T5965] udevd[5965]: incorrect cramfs checksum on /dev/loop0 [ 1033.393799][ T834] cramfs: Error -3 while decompressing! [ 1033.428293][ T834] cramfs: ffffffff9a39fae8(26)->ffff88806aadc000(4096) [ 1033.449204][ T834] cramfs: bad data blocksize 3489655184 [ 1033.471741][ T847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11612'. [ 1033.480849][ T834] cramfs: Error -3 while decompressing! [ 1033.490792][ T834] cramfs: ffffffff9a39fae8(26)->ffff88806aadc000(4096) [ 1033.499185][ T847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11612'. [ 1033.571521][ T30] audit: type=1326 audit(2000000000.498:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=850 comm="syz.7.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1033.660905][ T30] audit: type=1326 audit(2000000000.498:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=850 comm="syz.7.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1033.768233][ T30] audit: type=1326 audit(2000000000.516:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=850 comm="syz.7.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1033.797243][ T30] audit: type=1326 audit(2000000000.516:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=850 comm="syz.7.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1033.933115][ T875] netlink: 'syz.0.11620': attribute type 1 has an invalid length. [ 1033.959669][ T875] netlink: 228 bytes leftover after parsing attributes in process `syz.0.11620'. [ 1034.017719][ T875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11620'. [ 1034.136253][ T890] loop7: detected capacity change from 0 to 128 [ 1034.288994][ T900] loop0: detected capacity change from 0 to 512 [ 1034.403778][ T900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1034.506928][ T900] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1034.551433][ T900] EXT4-fs (loop0): 1 truncate cleaned up [ 1034.560365][ T900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.560992][ T930] loop7: detected capacity change from 0 to 64 [ 1034.638979][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.219022][ T978] loop3: detected capacity change from 0 to 1024 [ 1035.410488][ T77] hfsplus: b-tree write err: -5, ino 4 [ 1035.598930][ T997] binder: 993:997 ioctl c018620c 200000000240 returned -22 [ 1035.763775][ T998] loop3: detected capacity change from 0 to 4096 [ 1035.828631][ T967] loop7: detected capacity change from 0 to 32768 [ 1035.923678][ T967] find_entry called with index >= next_index [ 1035.930675][ T967] find_entry called with index >= next_index [ 1035.952861][ T1012] usb usb8: usbfs: process 1012 (syz.0.11653) did not claim interface 0 before use [ 1035.997360][ T967] find_entry called with index >= next_index [ 1036.233998][ T973] loop4: detected capacity change from 0 to 32768 [ 1036.297724][ T973] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.370119][ T1051] tmpfs: Bad value for 'mpol' [ 1036.457943][ T973] XFS (loop4): Ending clean mount [ 1036.503830][ T973] XFS (loop4): Quotacheck needed: Please wait. [ 1036.583101][ T5875] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1036.654113][ T973] XFS (loop4): Quotacheck: Done. [ 1036.681137][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1036.701787][ T29] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1036.774778][ T5824] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.785448][ T5875] usb 8-1: Using ep0 maxpacket: 8 [ 1036.797415][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1036.814521][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1036.824668][ T5875] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1036.846666][ T5875] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 1036.860533][ T5875] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1036.877500][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.888037][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1036.903775][ T29] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1036.913179][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1036.913213][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.913233][ T9] usb 4-1: Product: syz [ 1036.913249][ T9] usb 4-1: Manufacturer: syz [ 1036.913266][ T9] usb 4-1: SerialNumber: syz [ 1036.916748][ T9] usb 4-1: config 0 descriptor?? [ 1036.929431][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.934345][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.962602][ T29] usb 1-1: config 0 descriptor?? [ 1037.066171][ T5875] usb 8-1: config 0 descriptor?? [ 1037.082387][ T1039] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1037.264761][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 1037.289163][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1037.472432][ T29] Bluetooth: Can't get state to change to load configuration err [ 1037.516535][ T29] Bluetooth: Loading sysconfig file failed [ 1037.522514][ T29] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 1037.533980][ T5882] usb 4-1: USB disconnect, device number 7 [ 1037.588987][ T29] usb 1-1: USB disconnect, device number 106 [ 1037.596407][ T1132] PKCS7: Unknown OID: [4] 0.0 [ 1037.618906][T29590] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1037.634783][ T1132] PKCS7: Only support pkcs7_signedData type [ 1037.645425][ T5957] usb 8-1: USB disconnect, device number 6 [ 1038.042178][ T1171] bond2: option primary_reselect: invalid value (13) [ 1038.052301][ T1171] bond2 (unregistering): Released all slaves [ 1038.810777][ T1286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11693'. [ 1038.810875][ T1290] Unsupported ieee802154 address type: 0 [ 1039.215534][ T1311] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1039.311921][ T1317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1039.785312][ T1284] loop3: detected capacity change from 0 to 32768 [ 1039.829368][ T1284] BTRFS info: device /dev/loop3 (7:3) using temp-fsid c5bf627d-48c9-47c9-ba4f-55a0de7ecbe6 [ 1039.873440][ T1355] netlink: 'syz.4.11715': attribute type 1 has an invalid length. [ 1039.876060][ T1284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11692 (1284) [ 1039.964167][ T1284] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1039.992354][ T1284] BTRFS info (device loop3): using crc32c checksum algorithm [ 1040.204648][ T1284] BTRFS info (device loop3): turning off barriers [ 1040.251896][ T1284] BTRFS info (device loop3): enabling free space tree [ 1040.255365][ T1391] netlink: 'syz.7.11721': attribute type 21 has an invalid length. [ 1040.290520][ T1284] BTRFS info (device loop3): use zstd compression, level 3 [ 1040.298499][ T1391] netlink: 'syz.7.11721': attribute type 20 has an invalid length. [ 1040.646163][ T5822] BTRFS info (device loop3): last unmount of filesystem c5bf627d-48c9-47c9-ba4f-55a0de7ecbe6 [ 1040.683822][ T1413] netlink: 'syz.4.11729': attribute type 1 has an invalid length. [ 1040.719910][ T1413] netlink: 'syz.4.11729': attribute type 2 has an invalid length. [ 1040.745023][ T1413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11729'. [ 1041.518808][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1041.731019][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1041.755827][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1041.783525][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1041.816138][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1041.870870][ T1476] tc_dump_action: action bad kind [ 1041.881217][ T29] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1041.890417][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.975294][ T29] usb 8-1: config 0 descriptor?? [ 1042.180852][ T30] audit: type=1326 audit(2000000008.436:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1492 comm="syz.4.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1042.233174][ T29] hdpvr 8-1:0.0: firmware version 0x1e dated [ 1042.286993][ T30] audit: type=1326 audit(2000000008.436:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1492 comm="syz.4.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1042.381696][ T30] audit: type=1326 audit(2000000008.463:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1492 comm="syz.4.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1042.406083][ T30] audit: type=1326 audit(2000000008.463:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1492 comm="syz.4.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1042.463730][ T29] hdpvr 8-1:0.0: device init failed [ 1042.496207][ T29] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1042.504339][ T30] audit: type=1326 audit(2000000008.463:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1492 comm="syz.4.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1042.519903][ T29] usb 8-1: USB disconnect, device number 7 [ 1042.762785][ T1516] loop4: detected capacity change from 0 to 4096 [ 1043.521976][ T1577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11778'. [ 1043.713498][ T1589] loop4: detected capacity change from 0 to 256 [ 1043.720800][ T1589] exfat: Deprecated parameter 'namecase' [ 1043.753365][ T1589] exfat: Deprecated parameter 'namecase' [ 1043.775596][ T1589] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1043.947970][ T1594] loop6: detected capacity change from 0 to 4096 [ 1043.964127][ T1594] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1044.097617][ T1594] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1044.287313][ T1622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.530728][ T1640] netlink: 328 bytes leftover after parsing attributes in process `syz.6.11795'. [ 1044.911499][ T1663] loop7: detected capacity change from 0 to 1764 [ 1045.263060][ T1688] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11812'. [ 1045.676298][ T1712] dlm: non-version read from control device 90 [ 1045.814831][T29967] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1045.967455][ T1727] loop7: detected capacity change from 0 to 512 [ 1046.001814][T29967] usb 1-1: Using ep0 maxpacket: 16 [ 1046.038314][T29967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1046.061179][ T1667] loop6: detected capacity change from 0 to 40427 [ 1046.062325][T29967] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1046.079847][ T1727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.111603][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1046.172311][ T1667] F2FS-fs (loop6): invalid crc value [ 1046.192458][T29967] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1046.246002][ T1727] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.253792][T29967] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1046.320640][T29967] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1046.324831][ T1727] Quota error (device loop7): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 1046.363814][T29967] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1046.364905][ T1727] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1046.374794][T29967] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1046.400530][ T1727] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.11824: Failed to acquire dquot type 0 [ 1046.438559][T29967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.451444][ T1667] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1046.468701][T29967] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1046.497484][ T1667] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1046.502256][ T1750] loop3: detected capacity change from 0 to 4096 [ 1046.526835][ T1750] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1046.546549][ T30] audit: type=1326 audit(2000000012.469:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.4.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1046.599139][ T30] audit: type=1326 audit(2000000012.497:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.4.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1046.623746][ T30] audit: type=1326 audit(2000000012.497:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.4.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1046.673602][T29582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.694671][T29967] scsi host1: usb-storage 1-1:1.0 [ 1046.832790][ T1774] netlink: 'syz.4.11832': attribute type 10 has an invalid length. [ 1046.840845][ T1774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11832'. [ 1046.887343][ T1774] ipvlan1: entered promiscuous mode [ 1046.892624][ T1774] ipvlan1: entered allmulticast mode [ 1046.926474][ T5882] usb 1-1: USB disconnect, device number 107 [ 1046.934675][ T1774] bridge0: port 3(ipvlan1) entered blocking state [ 1046.973641][ T1774] bridge0: port 3(ipvlan1) entered disabled state [ 1046.998353][ T1774] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1048.847143][ T5882] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1048.911821][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1049.026576][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 1049.039872][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.083916][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.098854][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1049.106850][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 1049.117122][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.140138][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1049.144641][ T5882] usb 8-1: config 0 descriptor?? [ 1049.160251][ T5875] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1049.161378][ T5882] hub 8-1:0.0: USB hub found [ 1049.174808][ T5875] usb 4-1: config 1 has no interface number 1 [ 1049.182346][ T5875] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1049.211294][ T5875] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 61, changing to 7 [ 1049.235884][ T5875] usb 4-1: string descriptor 0 read error: -22 [ 1049.245752][ T5875] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.269534][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.295969][ T5875] usb 4-1: 2:1 : sample bitwidth 64 in over sample bytes 5 [ 1049.310983][ T5875] usb 4-1: 2:1 : unsupported sample bitwidth 64 in 5 bytes [ 1049.377655][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1049.381946][ T5882] hub 8-1:0.0: 29 ports detected [ 1049.394177][ T5882] hub 8-1:0.0: insufficient power available to use all downstream ports [ 1049.561922][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1049.591721][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.607121][ T5882] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1049.614192][ T5882] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1049.638862][ T9] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1049.641174][ T5882] usbhid 8-1:0.0: can't add hid device: -71 [ 1049.670446][ T9] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1049.673393][ T5882] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1049.683407][ T9] usb 7-1: Product: syz [ 1049.702655][ T9] usb 7-1: Manufacturer: syz [ 1049.707487][ T9] usb 7-1: SerialNumber: syz [ 1049.724986][ T9] usb 7-1: config 0 descriptor?? [ 1049.729222][ T5882] usb 8-1: USB disconnect, device number 8 [ 1049.753951][ T9] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1049.822690][ T9] usb 4-1: USB disconnect, device number 8 [ 1049.941119][ T5957] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1049.993399][ T13] usb 7-1: Failed to submit usb control message: -71 [ 1050.001027][ T5882] usb 7-1: USB disconnect, device number 17 [ 1050.003840][ T13] usb 7-1: unable to send the bmi data to the device: -71 [ 1050.014606][ T13] usb 7-1: unable to get target info from device [ 1050.021331][ T13] usb 7-1: could not get target info (-71) [ 1050.028638][ T13] usb 7-1: could not probe fw (-71) [ 1050.138196][ T5957] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1050.147991][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.165379][ T5957] usb 1-1: config 0 descriptor?? [ 1050.184197][ T5957] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1050.377862][ T2026] loop7: detected capacity change from 0 to 256 [ 1050.444311][ T2026] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1050.601278][ T2035] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1050.697864][ T5957] gspca_spca508: reg_read err -71 [ 1050.698669][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1050.698685][ T30] audit: type=1326 audit(2000000016.300:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2044 comm="syz.6.11896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1050.719447][ T5957] gspca_spca508: reg_read err -71 [ 1050.738674][ T30] audit: type=1326 audit(2000000016.300:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2044 comm="syz.6.11896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1050.763871][ T30] audit: type=1326 audit(2000000016.337:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2044 comm="syz.6.11896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1050.786797][ T30] audit: type=1326 audit(2000000016.337:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2044 comm="syz.6.11896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1050.797145][ T5957] gspca_spca508: reg_read err -71 [ 1050.843960][ T30] audit: type=1326 audit(2000000016.337:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2044 comm="syz.6.11896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239aeb9 code=0x7ffc0000 [ 1050.867418][ T5957] gspca_spca508: reg_read err -71 [ 1050.874694][ T5957] gspca_spca508: reg write: error -71 [ 1050.880395][ T5957] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 1050.903201][ T5957] usb 1-1: USB disconnect, device number 108 [ 1051.003070][ T2063] netlink: 'syz.4.11898': attribute type 21 has an invalid length. [ 1051.038452][ T2063] netlink: 'syz.4.11898': attribute type 1 has an invalid length. [ 1051.076393][ T2063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11898'. [ 1051.165704][ T2060] loop7: detected capacity change from 0 to 4096 [ 1051.205809][ T2060] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1051.228701][ T2075] loop6: detected capacity change from 0 to 16 [ 1051.229258][ T2060] ntfs3(loop7): Failed to load $Extend (-22). [ 1051.256049][ T2075] erofs (device loop6): mounted with root inode @ nid 36. [ 1051.259818][ T2060] ntfs3(loop7): Failed to initialize $Extend. [ 1051.308864][ T2075] erofs (device loop6): inconsistent algorithmtype 1 for nid 89 [ 1051.316587][ T2075] erofs (device loop6): readahead error at folio 1 @ nid 89 [ 1051.365798][ T2075] erofs (device loop6): inconsistent algorithmtype 1 for nid 89 [ 1051.449253][ T2075] erofs (device loop6): inconsistent algorithmtype 1 for nid 89 [ 1051.472732][ T2075] erofs (device loop6): read error -117 @ 1 of nid 89 [ 1051.550880][ T30] audit: type=1800 audit(2000000017.066:324): pid=2075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.11901" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1052.015177][ T2108] loop4: detected capacity change from 0 to 4096 [ 1052.081995][ T2108] ntfs3(loop4): ino=3, Correct links count -> 2. [ 1052.253836][ T2123] loop0: detected capacity change from 0 to 4096 [ 1052.500430][ T2123] ntfs3(loop0): ino=5, "/" indx_read_ra [ 1052.506148][ T2123] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1052.693884][ T9] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1052.944292][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1052.969971][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1053.002531][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.013306][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1053.035260][ T9] usb 7-1: string descriptor 0 read error: -22 [ 1053.042582][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1053.075881][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.120166][ T9] usb 7-1: 0:2 : does not exist [ 1053.286503][ T2201] loop3: detected capacity change from 0 to 128 [ 1053.342494][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1053.402438][ T9] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1053.417745][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1053.429800][ T2211] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 1053.449159][ T9] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 1053.582455][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1053.638736][ T9] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1053.769018][ T9] usb 7-1: USB disconnect, device number 18 [ 1054.279658][ T2271] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11954'. [ 1054.303926][ T30] audit: type=1326 audit(2000000019.623:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.11955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1054.385432][ T30] audit: type=1326 audit(2000000019.623:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.11955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1054.424042][ T30] audit: type=1326 audit(2000000019.623:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.11955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1054.500141][ T30] audit: type=1326 audit(2000000019.623:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.11955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1054.845652][ T2236] loop3: detected capacity change from 0 to 32768 [ 1054.908365][ T2236] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1055.018095][ T2236] XFS (loop3): Ending clean mount [ 1055.194463][ T5822] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1055.580504][ T2348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11975'. [ 1055.640078][ T2351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11976'. [ 1055.821888][ T2357] loop0: detected capacity change from 0 to 512 [ 1055.934455][ T2357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.959593][ T2357] ext4 filesystem being mounted at /2376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.090816][ T2357] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.0.11978: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1056.157575][ T2357] EXT4-fs (loop0): Remounting filesystem read-only [ 1056.198869][ T2340] loop7: detected capacity change from 0 to 32768 [ 1056.227584][ T2340] read_mapping_page failed! [ 1056.299237][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.184519][ T2436] loop3: detected capacity change from 0 to 4096 [ 1057.195755][ T2430] loop7: detected capacity change from 0 to 8192 [ 1057.253776][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.310493][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.358961][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.406564][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.443102][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.511504][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.523496][ T2383] loop4: detected capacity change from 0 to 32768 [ 1057.543122][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.608840][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.680770][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.741688][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.750374][ T2430] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1057.812501][ T2470] netlink: 'syz.0.12003': attribute type 1 has an invalid length. [ 1057.842439][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1057.842456][ T30] audit: type=1800 audit(2000000022.881:330): pid=2430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11994" name="file2" dev="loop7" ino=1048768 res=0 errno=0 [ 1058.320351][ T2502] loop3: detected capacity change from 0 to 2048 [ 1058.335343][ T2510] binder: 2509:2510 ioctl 40046210 0 returned -14 [ 1058.348447][ T2502] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1058.413754][ T2502] syz.3.12014: attempt to access beyond end of device [ 1058.413754][ T2502] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1058.413840][ T2515] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1058.439109][T29967] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1058.513953][ T2519] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.547600][ T2502] syz.3.12014: attempt to access beyond end of device [ 1058.547600][ T2502] loop3: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 1058.621990][ T2502] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 1058.645094][T29967] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.662161][T29967] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1058.703686][T29967] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.746127][T29967] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1058.755632][T29967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.776274][T29967] usb 7-1: Product: syz [ 1058.784059][T29967] usb 7-1: Manufacturer: syz [ 1058.788799][T29967] usb 7-1: SerialNumber: syz [ 1058.825865][T29967] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1058.841969][T29967] cdc_ncm 7-1:1.0: bind() failure [ 1059.099472][ T5875] usb 7-1: USB disconnect, device number 19 [ 1059.225947][T29967] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1059.400265][T29967] usb 4-1: Using ep0 maxpacket: 32 [ 1059.412755][T29967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1059.452019][T29967] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1059.468466][T29967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.488682][T29967] usb 4-1: Product: syz [ 1059.488768][ T2593] loop7: detected capacity change from 0 to 1764 [ 1059.492907][T29967] usb 4-1: Manufacturer: syz [ 1059.492925][T29967] usb 4-1: SerialNumber: syz [ 1059.519517][T29967] usb 4-1: config 0 descriptor?? [ 1059.546907][ T2551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1059.569095][T29967] hub 4-1:0.0: bad descriptor, ignoring hub [ 1059.587095][ T2593] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1059.597839][ T2605] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12030'. [ 1059.612429][T29967] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1059.626232][T29967] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 1059.943673][T29967] usb 4-1: USB disconnect, device number 9 [ 1059.946355][ T2626] loop7: detected capacity change from 0 to 4096 [ 1059.949607][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1060.092127][ T2642] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1060.095554][ T2625] loop6: detected capacity change from 0 to 4096 [ 1060.141841][ T2626] NILFS error (device loop7): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 1060.202583][ T2626] Remounting filesystem read-only [ 1060.270399][ T2625] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1060.296498][ T2625] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1060.505967][ T12] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 1060.552119][T25227] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1060.580228][T25227] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1060.587246][T25227] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1060.619685][ T12] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 1060.869092][ T2699] netlink: 'syz.7.12048': attribute type 4 has an invalid length. [ 1061.159636][ T30] audit: type=1326 audit(2000000025.954:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.240119][ T30] audit: type=1326 audit(2000000025.954:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.353204][ T30] audit: type=1326 audit(2000000025.954:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.379011][ T2733] bridge3: entered promiscuous mode [ 1061.421670][ T30] audit: type=1326 audit(2000000025.954:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.518928][ T30] audit: type=1326 audit(2000000025.954:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.592136][ T2755] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1061.598179][ T30] audit: type=1326 audit(2000000025.964:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.678683][ T30] audit: type=1326 audit(2000000025.964:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.757425][ T30] audit: type=1326 audit(2000000025.964:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1061.848970][ T30] audit: type=1326 audit(2000000025.964:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2723 comm="syz.4.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1062.291590][ T2815] netlink: 400 bytes leftover after parsing attributes in process `syz.7.12079'. [ 1062.370728][ T2820] netlink: 'syz.6.12081': attribute type 8 has an invalid length. [ 1063.283339][ T2887] loop4: detected capacity change from 0 to 512 [ 1063.309050][ T2887] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1063.362700][ T2887] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1063.413509][ T2887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856e01c, mo2=0002] [ 1063.501497][ T2887] System zones: 0-2, 18-18, 34-34 [ 1063.565936][ T2887] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.12099: iget: bad i_size value: 360287970189639680 [ 1063.609157][ T2908] loop7: detected capacity change from 0 to 128 [ 1063.624690][ T2887] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1063.635397][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1063.651123][ C1] EXT4-fs (loop4): initial error at time 2000000028: ext4_orphan_get:1391: inode 15 [ 1063.660763][ C1] EXT4-fs (loop4): last error at time 2000000028: ext4_orphan_get:1391: inode 15 [ 1063.672263][ T2887] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.12099: couldn't read orphan inode 15 (err -117) [ 1063.699139][ T2887] loop4: lost filesystem error report for type 5 error -117 [ 1063.717536][ T2887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.756020][ T2908] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1063.770101][ T2908] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.850619][ T2853] loop6: detected capacity change from 0 to 32768 [ 1063.900532][ T2853] JBD2: Ignoring recovery information on journal [ 1063.914688][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.952347][T29582] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1064.021874][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1064.062676][ T2853] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1064.111843][ T2940] loop4: detected capacity change from 0 to 164 [ 1064.211616][T29967] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1064.250650][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1064.258947][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1064.258965][ T30] audit: type=1800 audit(2000000028.816:346): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12088" name="file0" dev="loop6" ino=17056 res=0 errno=0 [ 1064.291923][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1064.317965][ T9] usb 4-1: config 0 has no interface number 0 [ 1064.324306][ T9] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.366312][ T9] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1064.393374][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1064.410499][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.431745][ T9] usb 4-1: Product: syz [ 1064.436973][ T2947] loop4: detected capacity change from 0 to 512 [ 1064.442782][T29967] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1064.457344][ T9] usb 4-1: Manufacturer: syz [ 1064.462362][T29967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.473212][T25227] ocfs2: Unmounting device (7,6) on (node local) [ 1064.474605][ T9] usb 4-1: SerialNumber: syz [ 1064.509432][T29967] usb 1-1: config 0 descriptor?? [ 1064.516289][ T9] usb 4-1: config 0 descriptor?? [ 1064.559496][T29967] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1064.566294][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1064.775899][ T9] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 1064.783360][ T9] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 1064.969894][T29967] gspca_sn9c2028: read1 error -71 [ 1064.983828][T29967] gspca_sn9c2028: read1 error -71 [ 1065.003722][ T30] audit: type=1326 audit(2000000029.508:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.021331][ T5957] usb 4-1: USB disconnect, device number 10 [ 1065.026454][T29967] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1065.048106][ T2985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12113'. [ 1065.082736][ T30] audit: type=1326 audit(2000000029.508:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.105545][T29967] usb 1-1: USB disconnect, device number 109 [ 1065.167110][ T30] audit: type=1326 audit(2000000029.508:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.226087][ T30] audit: type=1326 audit(2000000029.508:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.239766][ T2998] netlink: 'syz.6.12119': attribute type 7 has an invalid length. [ 1065.249941][ T30] audit: type=1326 audit(2000000029.508:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.278966][ T2998] netlink: 'syz.6.12119': attribute type 8 has an invalid length. [ 1065.291813][ T30] audit: type=1326 audit(2000000029.508:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.321095][ T30] audit: type=1326 audit(2000000029.508:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.378994][ T30] audit: type=1326 audit(2000000029.508:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2979 comm="syz.4.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1065.917620][ T3033] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1065.953070][ T3039] xt_TCPMSS: Only works on TCP SYN packets [ 1065.974867][ T3033] bond0: (slave gre0): Error -95 calling set_mac_address [ 1066.164849][ T3051] netlink: 216 bytes leftover after parsing attributes in process `syz.7.12138'. [ 1066.481607][ T3066] comedi comedi0: adq12b: I/O port conflict (0xffffffffffffffff,16) [ 1066.770083][ T3029] loop3: detected capacity change from 0 to 32768 [ 1066.807654][ T3029] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1066.939218][ T3029] XFS (loop3): Ending clean mount [ 1066.963166][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12149'. [ 1067.027756][ T3029] XFS (loop3): Quotacheck needed: Please wait. [ 1067.146609][ T3029] XFS (loop3): Quotacheck: Done. [ 1067.463647][ T5822] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1068.120929][T29967] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1068.246959][ T3104] loop6: detected capacity change from 0 to 32768 [ 1068.254131][ T3142] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1068.273973][ T3104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.12151 (3104) [ 1068.297567][T29967] usb 8-1: too many configurations: 68, using maximum allowed: 8 [ 1068.330055][T29967] usb 8-1: config index 0 descriptor too short (expected 72, got 56) [ 1068.341111][ T3104] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.348289][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1068.389745][ T3104] BTRFS info (device loop6): using sha256 checksum algorithm [ 1068.397164][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1068.458513][T29967] usb 8-1: config index 1 descriptor too short (expected 72, got 56) [ 1068.466767][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1068.551577][ T3169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.575335][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1068.608618][ T3104] BTRFS info (device loop6): enabling ssd optimizations [ 1068.631970][T29967] usb 8-1: config index 2 descriptor too short (expected 72, got 56) [ 1068.643251][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1068.651779][ T3104] BTRFS info (device loop6): turning on async discard [ 1068.663159][ T3104] BTRFS info (device loop6): enabling free space tree [ 1068.675743][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1068.730027][T29967] usb 8-1: config index 3 descriptor too short (expected 72, got 56) [ 1068.752231][ T3182] loop4: detected capacity change from 0 to 512 [ 1068.763763][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1068.791787][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1068.846748][T29967] usb 8-1: config index 4 descriptor too short (expected 72, got 56) [ 1068.855711][ T3182] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.12169: inode has both inline data and extents flags [ 1068.908615][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1068.920668][ T3182] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1068.922478][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1068.938430][ C1] EXT4-fs (loop4): initial error at time 2000000033: ext4_orphan_get:1391: inode 15 [ 1068.939174][ T3182] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.12169: couldn't read orphan inode 15 (err -117) [ 1068.948099][ C1] EXT4-fs (loop4): last error at time 2000000033: ext4_orphan_get:1391: inode 15 [ 1068.975105][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1069.011882][T25227] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1069.041915][ T3182] loop4: lost filesystem error report for type 5 error -117 [ 1069.045599][ T3182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.065697][T29967] usb 8-1: config index 5 descriptor too short (expected 72, got 56) [ 1069.095972][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1069.121941][ T3187] loop3: detected capacity change from 0 to 4096 [ 1069.150779][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1069.179663][T29967] usb 8-1: config index 6 descriptor too short (expected 72, got 56) [ 1069.215262][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1069.265522][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1069.300898][T29967] usb 8-1: config index 7 descriptor too short (expected 72, got 56) [ 1069.311504][ T3187] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 1069.330525][T29967] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1069.352060][T29967] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1069.375738][ T3200] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12172'. [ 1069.419334][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.435158][T29967] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1069.444559][ T3200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.460108][T29967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.479816][T29967] usb 8-1: Product: syz [ 1069.485604][T29967] usb 8-1: Manufacturer: syz [ 1069.534935][T29967] usb 8-1: SerialNumber: syz [ 1069.577174][T29967] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1069.635410][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1069.841121][ T3223] netlink: 'syz.6.12178': attribute type 29 has an invalid length. [ 1070.182764][ T3238] cgroup: none used incorrectly [ 1070.275570][ T5957] usb 8-1: USB disconnect, device number 9 [ 1070.438214][ T3250] loop6: detected capacity change from 0 to 128 [ 1070.480995][ T3250] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1070.512056][ T3250] ext4 filesystem being mounted at /749/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.512279][ T3259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12188'. [ 1070.557892][ T3264] program syz.4.12190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.653111][T25227] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1070.765277][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1070.772406][ T9] ath9k_htc: Failed to initialize the device [ 1070.802197][ T3275] loop4: detected capacity change from 0 to 1024 [ 1070.806821][ T3276] loop3: detected capacity change from 0 to 512 [ 1070.831262][ T5957] usb 8-1: ath9k_htc: USB layer deinitialized [ 1070.936528][ T3275] hfsplus: invalid length 789 has been corrected to 255 [ 1070.946823][ T3276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.998397][ T3276] ext4 filesystem being mounted at /2467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.067505][ T3276] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1071.125648][ T3276] Quota error (device loop3): write_blk: dquota write failed [ 1071.169914][ T3276] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1071.169987][ T3305] netlink: 512 bytes leftover after parsing attributes in process `syz.4.12199'. [ 1071.201474][ T5964] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1071.209831][ T3276] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.12193: Failed to acquire dquot type 0 [ 1071.378412][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.398552][ T5964] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 1071.414102][ T5964] usb 7-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1071.470496][ T5964] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.492472][ T5964] usb 7-1: config 8 has no interface number 0 [ 1071.498663][ T5964] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1071.531484][ T5964] usb 7-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1071.547115][ T5964] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid maxpacket 4987, setting to 64 [ 1071.559790][ T5964] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1071.571745][ T5964] usb 7-1: config 8 interface 80 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 1071.586394][ T5964] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1071.597482][ T3327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12203'. [ 1071.641671][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.665975][ T3288] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1071.675434][ T5964] usb 7-1: NFC: intf ffff88807cfdb000 id ffffffff8f1cb520 [ 1071.736621][ T5964] nfcmrvl 7-1:8.80: NFC: registered with nci successfully [ 1071.920385][ T5957] usb 7-1: USB disconnect, device number 20 [ 1071.931592][ T5957] usb 7-1: NFC: intf ffff88807cfdb000 [ 1072.388224][ T3401] loop7: detected capacity change from 0 to 256 [ 1072.519639][ T3401] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabee868b, utbl_chksum : 0xe619d30d) [ 1072.813524][ T3430] xt_ecn: cannot match TCP bits for non-tcp packets [ 1072.816168][ T30] audit: type=1326 audit(2000000036.716:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3425 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2cf9aeb9 code=0x7ffc0000 [ 1072.923083][ T30] audit: type=1326 audit(2000000036.716:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3425 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2cf9aeb9 code=0x7ffc0000 [ 1072.971311][ T30] audit: type=1326 audit(2000000036.744:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3425 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6b2cf9aeb9 code=0x7ffc0000 [ 1072.995125][ T3436] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1073.001803][ T30] audit: type=1326 audit(2000000036.772:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3425 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2cf9aeb9 code=0x7ffc0000 [ 1073.085958][ T3439] loop7: detected capacity change from 0 to 1024 [ 1073.129933][ T30] audit: type=1326 audit(2000000036.772:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3425 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2cf9aeb9 code=0x7ffc0000 [ 1073.219510][ T30] audit: type=1326 audit(2000000036.800:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b2cf5b78e code=0x7ffc0000 [ 1073.262652][ T30] audit: type=1326 audit(2000000036.947:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.0.12228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6b2cf9aeb9 code=0x7ffc0000 [ 1073.467566][ T3463] loop6: detected capacity change from 0 to 1024 [ 1073.625160][ T3463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.722602][ T3463] EXT4-fs error (device loop6): ext4_lookup:1785: comm syz.6.12240: inode #12: comm syz.6.12240: iget: illegal inode # [ 1073.776071][ T3463] EXT4-fs (loop6): Remounting filesystem read-only [ 1073.908725][T25227] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.944098][ T3495] loop7: detected capacity change from 0 to 1024 [ 1074.044632][ T3495] syz.7.12248: attempt to access beyond end of device [ 1074.044632][ T3495] loop7: rw=8388608, sector=33030148, nr_sectors = 2 limit=1024 [ 1074.064181][ T3507] x_tables: duplicate underflow at hook 4 [ 1074.090893][ T3508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.105507][ T3495] Buffer I/O error on dev loop7, logical block 16515074, async page read [ 1074.155844][ T3495] hfsplus: unable to mark blocks free: error -5 [ 1074.185988][ T3495] hfsplus: can't free extent: start 134, count 1 [ 1074.291288][ T155] hfsplus: b-tree write err: -5, ino 4 [ 1074.358862][ T3522] netlink: 'syz.3.12256': attribute type 16 has an invalid length. [ 1074.393890][ T3522] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12256'. [ 1074.900280][ T3558] loop0: detected capacity change from 0 to 512 [ 1074.934779][ T3558] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1074.973626][ T3549] loop3: detected capacity change from 0 to 4096 [ 1075.000621][ T3558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1075.008983][ T3558] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1075.029643][ T3549] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1075.029709][ T3558] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.12267: iget: bad i_size value: 12154761577498 [ 1075.052226][ T3558] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1075.053102][ T3558] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.12267: couldn't read orphan inode 13 (err -117) [ 1075.062452][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1075.062478][ C1] EXT4-fs (loop0): initial error at time 2000000038: ext4_orphan_get:1391: inode 13 [ 1075.062513][ C1] EXT4-fs (loop0): last error at time 2000000038: ext4_orphan_get:1391: inode 13 [ 1075.102396][ T3558] loop0: lost filesystem error report for type 5 error -117 [ 1075.174488][ T3558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1075.252217][ T3577] dlm: no locking on control device [ 1075.362997][ T3558] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.12267: dx entry: limit 65535 != root limit 120 [ 1075.414956][ T3558] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.12267: Corrupt directory, running e2fsck is recommended [ 1075.532056][ T5957] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1075.554127][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.708205][ T5957] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1075.736143][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.778261][ T5957] usb 5-1: config 0 descriptor?? [ 1075.857552][ T5957] cp210x 5-1:0.0: cp210x converter detected [ 1076.054158][T29590] Bluetooth: hci4: command 0x0406 tx timeout [ 1076.289168][ T5957] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1076.302634][ T5957] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1076.336453][ T5957] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1076.409565][ T5957] usb 5-1: USB disconnect, device number 10 [ 1076.446896][ T5957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1076.487127][ T5957] cp210x 5-1:0.0: device disconnected [ 1076.730844][ T3653] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1076.755942][ T3604] loop0: detected capacity change from 0 to 32768 [ 1076.807247][ T3604] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1077.007229][ T3631] loop6: detected capacity change from 0 to 32768 [ 1077.018195][ T3631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.12289 (3631) [ 1077.079358][ T3604] XFS (loop0): Ending clean mount [ 1077.105262][ T3604] XFS (loop0): Quotacheck needed: Please wait. [ 1077.117101][ T3678] netlink: 84 bytes leftover after parsing attributes in process `syz.7.12297'. [ 1077.186561][ T3631] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1077.235387][ T3684] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1077.266559][ T3631] BTRFS info (device loop6): using sha256 checksum algorithm [ 1077.268467][ T3684] /dev/nullb0: Can't open blockdev [ 1077.274178][ T3631] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1077.309561][ T3604] XFS (loop0): Quotacheck: Done. [ 1077.522859][ T3631] BTRFS info (device loop6): rebuilding free space tree [ 1077.589544][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1077.634174][ T3631] BTRFS info (device loop6): disabling free space tree [ 1077.641202][ T3631] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1077.694058][ T3631] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1077.742984][ T3631] BTRFS info (device loop6): checking UUID tree [ 1077.775095][ T3631] BTRFS info (device loop6): setting nodatasum [ 1077.781542][ T3631] BTRFS info (device loop6): setting nodatacow [ 1077.816597][ T3631] BTRFS info (device loop6): enabling ssd optimizations [ 1077.846050][ T3631] BTRFS info (device loop6): enabling disk space caching [ 1077.882604][ T3631] BTRFS info (device loop6): force clearing of disk cache [ 1077.904365][ T3631] BTRFS info (device loop6): enabling auto defrag [ 1078.104405][ T30] audit: type=1326 audit(2000000041.599:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3735 comm="syz.3.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b399aeb9 code=0x7ffc0000 [ 1078.137681][ T3736] netlink: 2 bytes leftover after parsing attributes in process `syz.7.12308'. [ 1078.198245][ T5964] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1078.198550][ T30] audit: type=1326 audit(2000000041.618:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3735 comm="syz.3.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b399aeb9 code=0x7ffc0000 [ 1078.297820][T25227] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1078.324673][ T30] audit: type=1326 audit(2000000041.636:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3735 comm="syz.3.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f55b399aeb9 code=0x7ffc0000 [ 1078.399263][ T30] audit: type=1326 audit(2000000041.636:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3735 comm="syz.3.12309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b399aeb9 code=0x7ffc0000 [ 1078.437726][ T5964] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1078.460015][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.511899][ T5964] usb 5-1: Product: syz [ 1078.532312][ T5964] usb 5-1: Manufacturer: syz [ 1078.561404][ T5964] usb 5-1: SerialNumber: syz [ 1078.595405][ T5964] usb 5-1: config 0 descriptor?? [ 1078.635274][ T5964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1079.111193][ T5964] gspca_sunplus: reg_r err -71 [ 1079.116764][ T5964] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1079.186144][ T5964] usb 5-1: USB disconnect, device number 11 [ 1079.267456][ T3790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.395379][ T3802] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 3802 comm: syz.7.12326) [ 1079.604087][ T3814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12330'. [ 1079.804345][ T3828] netlink: 'syz.7.12334': attribute type 1 has an invalid length. [ 1080.111411][ T3851] loop6: detected capacity change from 0 to 128 [ 1080.230680][ T3851] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1080.354912][ T155] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1081.615170][ T3952] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12376'. [ 1081.625394][ T3953] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12375'. [ 1081.690815][ T3953] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12375'. [ 1082.477063][ T3944] loop3: detected capacity change from 0 to 32768 [ 1082.559359][ T3944] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1082.648065][ T3969] loop6: detected capacity change from 0 to 32768 [ 1082.715171][ T3969] JBD2: Ignoring recovery information on journal [ 1082.735598][ T3944] XFS (loop3): Ending clean mount [ 1082.762952][ T3977] loop0: detected capacity change from 0 to 32768 [ 1082.803220][ T3977] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1082.822256][ T3969] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1082.884694][ T5822] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1082.931248][ T1138] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1082.963707][ T5957] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1082.980437][ T3977] XFS (loop0): Ending clean mount [ 1082.987429][T25227] ocfs2: Unmounting device (7,6) on (node local) [ 1083.116339][ T1138] usb 5-1: Using ep0 maxpacket: 16 [ 1083.137852][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1083.152362][ T5957] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.181330][ T1138] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1083.203394][ T5957] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.212566][ T1138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.224058][ T5957] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1083.233387][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1083.245565][ T1138] usb 5-1: Product: syz [ 1083.249790][ T1138] usb 5-1: Manufacturer: syz [ 1083.260383][ T5957] usb 8-1: SerialNumber: syz [ 1083.276722][ T1138] usb 5-1: SerialNumber: syz [ 1083.320130][ T1138] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1083.342976][ T1138] r8152-cfgselector 5-1: config 0 descriptor?? [ 1083.531191][ T5957] usb 8-1: 0:2 : does not exist [ 1083.553710][ T5957] usb 8-1: unit 5 not found! [ 1083.708624][ T5957] usb 8-1: USB disconnect, device number 10 [ 1083.782319][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.822023][ T1138] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 1083.965400][ T4079] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1084.061948][ T4085] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1084.369963][ T4097] block device autoloading is deprecated and will be removed. [ 1084.567726][ T9] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1084.678152][ T4128] loop0: detected capacity change from 0 to 8 [ 1084.683851][ T4129] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1084.706022][ T4121] loop6: detected capacity change from 0 to 4096 [ 1084.707036][ T4129] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1084.721251][ T4128] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1084.730853][ T4121] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1084.747460][ T4128] cramfs: Error -3 while decompressing! [ 1084.754969][ T4128] cramfs: ffffffff9a39fae8(26)->ffff88806add6000(4096) [ 1084.771985][ T4128] cramfs: Error -3 while decompressing! [ 1084.782375][ T5959] udevd[5959]: incorrect cramfs checksum on /dev/loop0 [ 1084.783001][ T9] usb 8-1: config 0 has an invalid interface number: 207 but max is 0 [ 1084.805803][ T4128] cramfs: ffffffff9a39fb02(26)->ffff88808af9c000(4096) [ 1084.822946][ T9] usb 8-1: config 0 has no interface number 0 [ 1084.829735][ T4128] cramfs: Error -3 while decompressing! [ 1084.845043][ T9] usb 8-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1084.858499][ T4128] cramfs: ffffffff9a39fae8(26)->ffff88806add6000(4096) [ 1084.878678][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.884487][ T5959] udevd[5959]: incorrect cramfs checksum on /dev/loop0 [ 1084.896415][ T9] usb 8-1: Product: syz [ 1084.918894][ T9] usb 8-1: Manufacturer: syz [ 1084.924973][ T9] usb 8-1: SerialNumber: syz [ 1084.958174][ T9] usb 8-1: config 0 descriptor?? [ 1085.013415][ T9] qmi_wwan 8-1:0.207: bogus CDC Union: master=0, slave=1 [ 1085.188469][ T9] qmi_wwan 8-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1085.256127][ T4154] loop0: detected capacity change from 0 to 64 [ 1085.284627][ T4155] netlink: 260 bytes leftover after parsing attributes in process `syz.6.12419'. [ 1085.422745][ T1138] usb 8-1: USB disconnect, device number 11 [ 1085.724549][ T4188] loop0: detected capacity change from 0 to 2048 [ 1085.754993][ T4188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1085.804264][ T4192] delete_channel: no stack [ 1085.810983][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12429'. [ 1086.172315][ T4217] netlink: 798 bytes leftover after parsing attributes in process `syz.0.12436'. [ 1086.196895][ T4219] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1086.406282][ T4236] netlink: 'syz.7.12441': attribute type 1 has an invalid length. [ 1086.785672][ T4264] netlink: 'syz.7.12451': attribute type 1 has an invalid length. [ 1086.814668][ T4255] loop3: detected capacity change from 0 to 4096 [ 1086.824379][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12451'. [ 1086.846668][ T4268] loop4: detected capacity change from 0 to 1024 [ 1086.922067][ T4277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1087.272608][ T4284] loop7: detected capacity change from 0 to 136 [ 1087.303216][ T4284] Symlink component flag not implemented [ 1087.330210][ T4284] syz.7.12453: attempt to access beyond end of device [ 1087.330210][ T4284] loop7: rw=8912896, sector=136, nr_sectors = 4 limit=136 [ 1087.377354][ T4284] syz.7.12453: attempt to access beyond end of device [ 1087.377354][ T4284] loop7: rw=8388608, sector=136, nr_sectors = 4 limit=136 [ 1087.470773][ T30] audit: type=1800 audit(2000000050.238:366): pid=4284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.12453" name="file1" dev="loop7" ino=1546 res=0 errno=0 [ 1087.626286][ T4310] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1087.909016][ T4323] IPv6: sit1: Disabled Multicast RS [ 1087.938690][ T4323] sit1: entered allmulticast mode [ 1088.016832][ T4263] loop0: detected capacity change from 0 to 32768 [ 1088.047598][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12450 (4263) [ 1088.117091][ T4263] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1088.182303][ T4263] BTRFS info (device loop0): using sha256 checksum algorithm [ 1088.198476][T29967] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1088.331211][ T4263] BTRFS info (device loop0): enabling ssd optimizations [ 1088.391606][T29967] usb 4-1: Using ep0 maxpacket: 32 [ 1088.399164][T29967] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1088.411229][ T4263] BTRFS info (device loop0): turning on async discard [ 1088.419333][T29967] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1088.445754][T29967] usb 4-1: config 7 has no interface number 0 [ 1088.452074][T29967] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1088.474551][T29967] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1088.486239][ T4263] BTRFS info (device loop0): enabling free space tree [ 1088.507495][T29967] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1088.548389][T29967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.596833][T29967] usb 4-1: Product: syz [ 1088.612170][T29967] usb 4-1: Manufacturer: syz [ 1088.616826][T29967] usb 4-1: SerialNumber: syz [ 1088.884561][ T1138] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1088.892809][ T5827] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1088.926498][T29967] usb 4-1: Unknown endpoint type found, address 0x07 [ 1088.962939][T29967] usb 4-1: Unknown endpoint type found, address 0x03 [ 1088.996222][T29967] usb 4-1: Not enough endpoints found in device, aborting! [ 1089.098552][ T1138] usb 5-1: Using ep0 maxpacket: 8 [ 1089.128433][ T1138] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1089.136592][ T1138] usb 5-1: config 0 has no interface number 0 [ 1089.194380][ T1138] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1089.236705][ T1138] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1089.253316][ T5882] usb 4-1: USB disconnect, device number 11 [ 1089.307857][ T1138] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1089.354955][ T1138] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1089.404578][ T1138] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1089.443809][ T1138] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1089.477084][ T1138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.590919][ T1138] usb 5-1: config 0 descriptor?? [ 1089.678267][ T1138] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1089.777301][ T4436] syz.7.12483 (4436) used greatest stack depth: 18504 bytes left [ 1089.941667][ T4379] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1089.955094][ T5964] usb 5-1: USB disconnect, device number 13 [ 1090.066694][ T4459] loop6: detected capacity change from 0 to 256 [ 1090.084174][ T5964] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1090.140301][ T4460] loop3: detected capacity change from 0 to 512 [ 1090.163051][ T4459] exfat: Deprecated parameter 'utf8' [ 1090.228943][ T4459] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1090.302164][ T4460] EXT4-fs (loop3): 1 orphan inode deleted [ 1090.396946][ T4460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.499542][ T4465] loop7: detected capacity change from 0 to 4096 [ 1090.504078][ T4460] ext4 filesystem being mounted at /2527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.580507][ T4465] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1090.837780][ T4504] loop4: detected capacity change from 0 to 64 [ 1090.857882][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.053746][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12500'. [ 1091.387656][ T4535] ipt_ECN: cannot use operation on non-tcp rule [ 1091.731538][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.768879][ T4543] loop7: detected capacity change from 0 to 8192 [ 1091.816699][ T4543] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1091.877534][ T4543] ntfs3(loop7): ino=1a, mi_enum_attr [ 1091.887147][ T4543] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1091.948064][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.278566][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.317166][ T4568] tmpfs: Bad value for 'mpol' [ 1092.465851][T29590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1092.490821][T29590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1092.530555][T29590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1092.547819][T29590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1092.556101][T29590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1092.750740][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.935124][ T4575] lo speed is unknown, defaulting to 1000 [ 1092.953851][ T30] audit: type=1326 audit(2000000055.306:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.4.12524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1093.022842][ T30] audit: type=1326 audit(2000000055.324:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.4.12524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1093.127420][ T30] audit: type=1326 audit(2000000055.324:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.4.12524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1093.224772][ T30] audit: type=1326 audit(2000000055.324:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.4.12524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1093.278495][ T4573] loop0: detected capacity change from 0 to 32768 [ 1093.346291][ T4647] loop7: detected capacity change from 0 to 8 [ 1093.370533][ T4647] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1093.392893][ T4647] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1093.441063][T29967] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1093.635826][T29967] usb 4-1: Using ep0 maxpacket: 8 [ 1093.654723][T29967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.676228][ T4677] loop7: detected capacity change from 0 to 256 [ 1093.691953][T29967] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1093.712413][ T4677] exfat: Deprecated parameter 'namecase' [ 1093.722703][ T4677] exfat: Deprecated parameter 'utf8' [ 1093.737774][T29967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.740044][ T4677] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1093.826098][T29967] usb 4-1: config 0 descriptor?? [ 1093.883657][ T49] bridge_slave_1: left allmulticast mode [ 1093.921792][ T49] bridge_slave_1: left promiscuous mode [ 1093.943674][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.000353][ T49] bridge_slave_0: left allmulticast mode [ 1094.015537][ T49] bridge_slave_0: left promiscuous mode [ 1094.021496][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.119121][T29967] usb 4-1: USB disconnect, device number 12 [ 1094.148587][ T30] audit: type=1326 audit(2000000056.404:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.7.12535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1094.245554][ T30] audit: type=1326 audit(2000000056.404:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.7.12535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1094.292007][ T30] audit: type=1326 audit(2000000056.404:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.7.12535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1094.365449][ T30] audit: type=1326 audit(2000000056.404:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.7.12535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1094.417857][ T30] audit: type=1326 audit(2000000056.404:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.7.12535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1094.618139][ T4687] loop4: detected capacity change from 0 to 32768 [ 1094.639217][ T4687] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 1094.639217][ T4687] [ 1094.662670][ T4687] ERROR: (device loop4): remounting filesystem as read-only [ 1094.773781][ T5835] Bluetooth: hci1: command tx timeout [ 1094.859935][ T1138] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1095.037312][ T1138] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 1095.060286][ T1138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 53407, setting to 1024 [ 1095.087209][ T1138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1095.108362][ T1138] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1095.154888][ T1138] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1095.168350][ T1138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1095.199522][ T1138] usb 1-1: SerialNumber: syz [ 1095.230333][ T4720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1095.474799][ T1138] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1095.482036][ T1138] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1095.497949][ T1138] usb 1-1: USB disconnect, device number 110 [ 1095.712698][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.725989][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.738736][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 1095.749920][ T49] bond0 (unregistering): Released all slaves [ 1095.760857][ T49] bond1 (unregistering): Released all slaves [ 1095.912499][ T4575] chnl_net:caif_netlink_parms(): no params data found [ 1096.835453][ T4868] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1096.866767][ T49] hsr_slave_0: left promiscuous mode [ 1096.896630][ T49] hsr_slave_1: left promiscuous mode [ 1096.902916][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.984316][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.991796][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.027061][ T5835] Bluetooth: hci1: command tx timeout [ 1097.059401][ T49] veth1_macvtap: left promiscuous mode [ 1097.067402][ T49] veth0_macvtap: left promiscuous mode [ 1097.073204][ T49] veth1_vlan: left promiscuous mode [ 1097.078799][ T49] veth0_vlan: left promiscuous mode [ 1097.516853][ T4892] "syz.7.12565" (4892) uses obsolete ecb(arc4) skcipher [ 1097.819689][ T30] audit: type=1326 audit(2000000059.791:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.7.12568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1097.885623][ T4904] loop7: detected capacity change from 0 to 256 [ 1097.937357][ T4904] FAT-fs (loop7): Directory bread(block 64) failed [ 1097.956618][ T4904] FAT-fs (loop7): Directory bread(block 65) failed [ 1097.978487][ T4904] FAT-fs (loop7): Directory bread(block 66) failed [ 1097.989462][ T4904] FAT-fs (loop7): Directory bread(block 67) failed [ 1098.010377][ T4904] FAT-fs (loop7): Directory bread(block 68) failed [ 1098.019046][ T4904] FAT-fs (loop7): Directory bread(block 69) failed [ 1098.028221][ T4904] FAT-fs (loop7): Directory bread(block 70) failed [ 1098.035960][ T4904] FAT-fs (loop7): Directory bread(block 71) failed [ 1098.042701][ T4904] FAT-fs (loop7): Directory bread(block 72) failed [ 1098.049372][ T4904] FAT-fs (loop7): Directory bread(block 73) failed [ 1098.304373][ T4913] loop7: detected capacity change from 0 to 128 [ 1098.538367][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1098.622237][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1099.285617][ T5835] Bluetooth: hci1: command tx timeout [ 1099.388196][ T4855] ÿ: renamed from bond_slave_0 (while UP) [ 1099.459216][ T4870] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1099.597257][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.648117][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.675853][ T4575] bridge_slave_0: entered allmulticast mode [ 1099.705570][ T4575] bridge_slave_0: entered promiscuous mode [ 1099.771582][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.808268][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.837643][ T4575] bridge_slave_1: entered allmulticast mode [ 1099.861717][ T4575] bridge_slave_1: entered promiscuous mode [ 1099.917624][ T4960] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1100.070481][ T4575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.137925][ T4575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.320129][ T29] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1100.373029][ T4575] team0: Port device team_slave_0 added [ 1100.412288][ T4575] team0: Port device team_slave_1 added [ 1100.556759][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 1100.605074][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.625954][ T29] usb 1-1: config 0 has no interface number 0 [ 1100.639481][ T29] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1100.649669][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.667450][ T29] usb 1-1: Product: syz [ 1100.678743][ T29] usb 1-1: Manufacturer: syz [ 1100.688741][ T29] usb 1-1: SerialNumber: syz [ 1100.702358][ T4575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.709622][ T4575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.765719][ T29] usb 1-1: config 0 descriptor?? [ 1100.789490][ T29] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1100.813449][ T29] usb 1-1: selecting invalid altsetting 1 [ 1100.833879][ T29] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1100.848486][ T4575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.881974][ T29] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1100.920955][ T4575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.928835][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1100.929400][ T4575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.937168][ T29] usb 1-1: media controller created [ 1101.028329][ T4575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.104889][ T5064] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1101.113704][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1101.125123][ T4970] loop7: detected capacity change from 0 to 32768 [ 1101.203298][ T4970] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1101.265699][ T4575] hsr_slave_0: entered promiscuous mode [ 1101.283743][ T4575] hsr_slave_1: entered promiscuous mode [ 1101.472586][ T5108] team0: entered promiscuous mode [ 1101.503361][ T5108] team_slave_0: entered promiscuous mode [ 1101.505178][ T4970] XFS (loop7): Ending clean mount [ 1101.509736][ T5108] team_slave_1: entered promiscuous mode [ 1101.522345][ T5108] geneve0: entered promiscuous mode [ 1101.528654][ T29] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1101.540354][ T5835] Bluetooth: hci1: command tx timeout [ 1101.547332][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.575479][ T5108] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1101.596009][ T29] usb 1-1: USB disconnect, device number 111 [ 1101.685673][T29582] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1102.321708][ T5208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12602'. [ 1102.500860][ T5231] loop0: detected capacity change from 0 to 128 [ 1102.635724][ T5244] loop3: detected capacity change from 0 to 2048 [ 1102.655570][ T5246] loop7: detected capacity change from 0 to 256 [ 1102.749991][ T5253] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1102.825470][ T5244] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1102.885642][ T5244] Remounting filesystem read-only [ 1103.107664][ T5822] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1103.164264][ T4575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1103.266688][ T4575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1103.398981][ T4575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1103.473528][ T4575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1103.521156][ T5300] loop7: detected capacity change from 0 to 512 [ 1103.632259][ T5300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.695329][ T5300] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.798125][T29967] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1103.811318][ T4575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.853705][ T5300] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz.7.12617: directory missing '..' [ 1103.905356][ T4575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.934712][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.942029][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.991161][T29582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.014780][T29967] usb 4-1: Using ep0 maxpacket: 16 [ 1104.041335][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.044961][ T5330] loop4: detected capacity change from 0 to 64 [ 1104.048617][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.066644][T29967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.083414][T29967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.115404][T29967] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.135651][T29967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.138144][ T5330] MINIX-fs: bad superblock [ 1104.143786][T29967] usb 4-1: Product: syz [ 1104.227737][T29967] usb 4-1: Manufacturer: syz [ 1104.237453][T29967] usb 4-1: SerialNumber: syz [ 1104.483385][ T5349] loop0: detected capacity change from 0 to 1024 [ 1104.687627][T13984] hfsplus: b-tree write err: -5, ino 4 [ 1104.757820][T29967] usb 4-1: cannot find UAC_HEADER [ 1104.850917][ T5377] loop0: detected capacity change from 0 to 128 [ 1104.995113][T29967] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1105.068836][T29967] usb 4-1: USB disconnect, device number 13 [ 1105.202862][ T8816] udevd[8816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.255878][ T4575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.869943][ T5427] loop4: detected capacity change from 0 to 4096 [ 1105.911092][ T5439] loop3: detected capacity change from 0 to 64 [ 1105.940256][ T5427] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1105.950589][ T5439] hfs: unable to locate alternate MDB [ 1105.987321][ T5439] hfs: continuing without an alternate MDB [ 1106.092942][ T5427] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1106.165305][ T5427] ntfs3(loop4): ino=19, mi_enum_attr [ 1106.403001][ T4575] veth0_vlan: entered promiscuous mode [ 1106.473505][ T4575] veth1_vlan: entered promiscuous mode [ 1106.672952][ T4575] veth0_macvtap: entered promiscuous mode [ 1106.740564][ T4575] veth1_macvtap: entered promiscuous mode [ 1106.861674][ T4575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.920634][ T4575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.981097][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.005765][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.048329][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.058211][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.432815][ T5452] loop7: detected capacity change from 0 to 32768 [ 1107.513184][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.526031][ T5452] ERROR: (device loop7): dtSearch: DT_GETPAGE: dtree page corrupt [ 1107.526031][ T5452] [ 1107.560253][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.577113][ T5452] ERROR: (device loop7): remounting filesystem as read-only [ 1107.647455][ T5452] jfs_lookup: dtSearch returned -5 [ 1107.717727][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.747794][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.426032][ T5570] netlink: 232 bytes leftover after parsing attributes in process `syz.7.12672'. [ 1108.584953][ T5512] loop0: detected capacity change from 0 to 32768 [ 1108.631691][ T5512] BTRFS warning: excessive commit interval 2147483647, use with care [ 1108.667480][ T5512] BTRFS info: device /dev/loop0 (7:0) using temp-fsid f4ddc83d-270e-4248-bd97-ecccf7ddb2ff [ 1108.727677][ T5512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12658 (5512) [ 1108.780698][ T5965] udevd[5965]: incorrect btrfs checksum on /dev/loop0 [ 1108.839264][ T5512] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1108.885827][ T5512] BTRFS info (device loop0): using crc32c checksum algorithm [ 1108.913759][ T5512] BTRFS error (device loop0): superblock checksum mismatch [ 1108.970020][ T5512] BTRFS error (device loop0): open_ctree failed: -22 [ 1109.128525][ T5601] loop3: detected capacity change from 0 to 8 [ 1109.146297][ T5965] udevd[5965]: incorrect btrfs checksum on /dev/loop0 [ 1109.163154][ T5601] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1109.170093][ T5601] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1109.512312][ T5565] loop8: detected capacity change from 0 to 32768 [ 1109.642611][ T5565] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1109.803107][ T5565] XFS (loop8): Ending clean mount [ 1109.873237][ T5565] XFS (loop8): Quotacheck needed: Please wait. [ 1110.071409][ T5565] XFS (loop8): Quotacheck: Done. [ 1110.256339][ T4575] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1110.290253][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1110.505420][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1110.515276][ T9] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 1110.523591][ T9] usb 8-1: config 4 has no interface number 0 [ 1110.569931][ T9] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.622325][ T9] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.660801][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1110.691215][ T5701] loop0: detected capacity change from 0 to 1024 [ 1110.707471][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.749934][ T9] hub 8-1:4.128: USB hub found [ 1110.873281][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1110.988201][ T9] hub 8-1:4.128: 2 ports detected [ 1111.003839][ T9] hub 8-1:4.128: Using single TT (err -22) [ 1111.120536][ T5726] loop4: detected capacity change from 0 to 1024 [ 1111.211829][ T9] hub 8-1:4.128: hub_hub_status failed (err = -71) [ 1111.218436][ T9] hub 8-1:4.128: config failed, can't get hub status (err -71) [ 1111.280819][ T5738] loop8: detected capacity change from 0 to 764 [ 1111.299725][ T9] usb 8-1: USB disconnect, device number 12 [ 1111.673540][ T5764] loop8: detected capacity change from 0 to 1024 [ 1111.695480][ T5764] EXT4-fs: Ignoring removed nobh option [ 1111.719039][ T5764] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 1111.774386][ T5764] Non-string source [ 1112.014918][ T5788] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1112.633223][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.570012][ T5819] loop4: detected capacity change from 0 to 32768 [ 1113.706080][ T5819] 9p: Unknown access argument 18446744073709551615: -34 [ 1113.720528][ T5938] loop3: detected capacity change from 0 to 512 [ 1113.812226][ T5938] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1113.887059][ T5938] EXT4-fs (loop3): invalid journal inode [ 1113.893677][ T5938] EXT4-fs (loop3): can't get journal size [ 1114.029848][ T5938] EXT4-fs (loop3): 1 truncate cleaned up [ 1114.064320][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.405281][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.811718][ T6016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12774'. [ 1114.859644][ T5957] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1115.038457][ T5957] usb 8-1: Using ep0 maxpacket: 8 [ 1115.078808][ T5957] usb 8-1: config 0 has an invalid interface number: 78 but max is 0 [ 1115.086966][ T5957] usb 8-1: config 0 has no interface number 0 [ 1115.147070][ T5957] usb 8-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 1115.167745][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.207640][ T5957] usb 8-1: Product: syz [ 1115.211881][ T5957] usb 8-1: Manufacturer: syz [ 1115.230558][ T5957] usb 8-1: SerialNumber: syz [ 1115.275411][ T5957] usb 8-1: config 0 descriptor?? [ 1115.473149][ T6057] netlink: 'syz.4.12785': attribute type 21 has an invalid length. [ 1115.505007][ T6054] loop0: detected capacity change from 0 to 4096 [ 1115.519260][ T5957] usbhid 8-1:0.78: couldn't find an input interrupt endpoint [ 1115.548795][ T6054] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1115.556809][ T5957] usb 8-1: USB disconnect, device number 13 [ 1115.650678][ T6054] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1115.679678][ T6054] ntfs3(loop0): Failed to load $Extend (-2). [ 1115.691568][ T6054] ntfs3(loop0): Failed to initialize $Extend. [ 1115.701968][ T6073] netlink: 'syz.3.12787': attribute type 11 has an invalid length. [ 1115.754343][ T6073] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12787'. [ 1115.801180][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1115.801200][ T30] audit: type=1326 audit(2000000076.387:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.4.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1115.894414][ T30] audit: type=1326 audit(2000000076.433:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.4.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1115.964751][ T30] audit: type=1326 audit(2000000076.442:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.4.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1116.011640][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12791'. [ 1116.015676][ T30] audit: type=1326 audit(2000000076.442:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.4.12789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1116.119469][ T30] audit: type=1326 audit(2000000076.673:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.4.12794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x50000 [ 1116.233469][ T30] audit: type=1326 audit(2000000076.673:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.4.12794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x50000 [ 1116.281928][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12797'. [ 1116.330881][ T30] audit: type=1326 audit(2000000076.673:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.4.12794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x50000 [ 1116.359417][ T6107] netlink: 'syz.7.12798': attribute type 7 has an invalid length. [ 1116.391358][ T30] audit: type=1326 audit(2000000076.673:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.4.12794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x50000 [ 1116.407626][ T6107] netlink: 'syz.7.12798': attribute type 8 has an invalid length. [ 1116.417178][ T30] audit: type=1326 audit(2000000076.673:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.4.12794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x50000 [ 1116.487282][ T30] audit: type=1326 audit(2000000076.673:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.4.12794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x50000 [ 1117.839058][ T5957] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1117.942256][ T6144] loop7: detected capacity change from 0 to 32768 [ 1118.035856][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 1118.054989][ T13] read_mapping_page failed! [ 1118.062481][ T5957] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1118.085461][ T13] ERROR: (device loop7): txCommit: [ 1118.085461][ T13] [ 1118.095554][ T5957] usb 1-1: config 0 has no interface number 0 [ 1118.107561][ T5957] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1118.118069][ T13] jfs_write_inode: jfs_commit_inode failed! [ 1118.131189][ T5957] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1118.167109][ T5957] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1118.218377][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.226518][ T5957] usb 1-1: Product: syz [ 1118.258940][ T5957] usb 1-1: Manufacturer: syz [ 1118.269701][ T6195] loop3: detected capacity change from 0 to 1764 [ 1118.279408][ T5957] usb 1-1: SerialNumber: syz [ 1118.297383][ T5957] usb 1-1: config 0 descriptor?? [ 1118.316276][ T6167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1118.337568][ T6195] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1118.543294][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1118.574800][ T5957] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1118.598911][ T5957] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1118.647398][ T5957] usb 1-1: USB disconnect, device number 112 [ 1118.727784][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 1118.749867][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 40 [ 1118.760052][ T5875] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1118.775573][ T29] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1118.795154][ T29] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1118.818800][ T29] usb 9-1: Product: syz [ 1118.823729][ T29] usb 9-1: Manufacturer: syz [ 1118.836946][ T29] usb 9-1: SerialNumber: syz [ 1118.849702][ T29] usb 9-1: config 0 descriptor?? [ 1118.859145][ T6199] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1118.875192][ T29] hub 9-1:0.0: bad descriptor, ignoring hub [ 1118.882733][ T29] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1118.956521][ T5875] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.977309][ T5875] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1119.000750][ T5875] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1119.010854][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.046662][ T5875] usb 8-1: config 0 descriptor?? [ 1119.063550][ T5882] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1119.237827][ T29] usb 9-1: USB disconnect, device number 2 [ 1119.246933][ T5882] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 1119.270339][ T5882] usb 4-1: config 0 has no interface number 0 [ 1119.281238][ T5882] usb 4-1: config 0 interface 17 has no altsetting 0 [ 1119.299317][ T5875] usb 8-1: string descriptor 0 read error: -71 [ 1119.313104][ T5882] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 1119.344638][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.377700][ T5882] usb 4-1: Product: syz [ 1119.382084][ T5882] usb 4-1: Manufacturer: syz [ 1119.425746][ T5882] usb 4-1: SerialNumber: syz [ 1119.465471][ T5882] usb 4-1: config 0 descriptor?? [ 1119.488693][ T6266] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1119.503484][ T5882] esd_usb 4-1:0.17: sending version message failed [ 1119.521469][ T5875] usb 8-1: USB disconnect, device number 14 [ 1119.536391][ T5882] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -8 [ 1119.744794][T29967] usb 4-1: USB disconnect, device number 14 [ 1120.059592][ T6308] x_tables: duplicate entry at hook 3 [ 1120.242280][ T6310] loop7: detected capacity change from 0 to 4096 [ 1120.253596][ T6316] netlink: 456 bytes leftover after parsing attributes in process `syz.0.12839'. [ 1120.279391][ T6310] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1120.362542][ T6310] ntfs3(loop7): ino=19, mi_enum_attr [ 1120.379875][ T6310] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1120.440626][ T6310] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1120.839357][ T6289] loop4: detected capacity change from 0 to 32768 [ 1120.873553][ T6289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12834 (6289) [ 1120.953574][ T6289] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1121.009711][ T6289] BTRFS info (device loop4): using sha256 checksum algorithm [ 1121.268337][ T6289] BTRFS info (device loop4): enabling ssd optimizations [ 1121.331790][ T6289] BTRFS info (device loop4): turning on async discard [ 1121.371046][ T6289] BTRFS info (device loop4): enabling free space tree [ 1121.661976][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1121.987231][ T6330] loop0: detected capacity change from 0 to 32768 [ 1122.032175][ T6409] netlink: 'syz.3.12860': attribute type 21 has an invalid length. [ 1122.186853][ T6415] loop7: detected capacity change from 0 to 1024 [ 1122.203064][ T6330] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 1122.203064][ T6330] [ 1122.693253][ T6444] tmpfs: Bad value for 'mpol' [ 1122.987715][ T30] kauditd_printk_skb: 3507 callbacks suppressed [ 1122.987734][ T30] audit: type=1326 audit(2000000083.023:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.12870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1123.057747][ T6460] loop3: detected capacity change from 0 to 512 [ 1123.159805][ T30] audit: type=1326 audit(2000000083.070:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.12870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1123.240193][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.307649][ T6460] ext4 filesystem being mounted at /2620/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.324281][ T30] audit: type=1326 audit(2000000083.079:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.12870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1123.383619][ T6460] EXT4-fs error (device loop3): ext4_xattr_block_find:1879: inode #12: comm syz.3.12871: corrupted xattr block 6: invalid header [ 1123.430089][ T30] audit: type=1326 audit(2000000083.079:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.12870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1123.478330][ T30] audit: type=1326 audit(2000000083.079:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.12870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07b9aeb9 code=0x7ffc0000 [ 1123.560136][ T5831] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1123.581721][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.742683][ T5831] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1123.769229][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.843141][ T5831] usb 9-1: config 0 descriptor?? [ 1123.879554][ T5831] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1124.326635][ T5831] gp8psk: usb out operation failed. [ 1124.374510][ T5831] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1124.408388][ T5831] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1124.461933][ T5831] usb 9-1: USB disconnect, device number 3 [ 1124.836883][ T6558] loop0: detected capacity change from 0 to 256 [ 1124.871640][ T6558] exfat: Deprecated parameter 'namecase' [ 1124.931234][ T6558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1124.965234][ T6499] loop3: detected capacity change from 0 to 32768 [ 1125.123679][ T6499] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1125.251421][ T6582] loop4: detected capacity change from 0 to 8 [ 1125.263945][ T6499] JBD2: Ignoring recovery information on journal [ 1125.268373][ T6582] cramfs: Error -3 while decompressing! [ 1125.277333][ T6582] cramfs: ffffffff9a3a3ae8(26)->ffff88808596b000(4096) [ 1125.310912][ T6582] cramfs: Error -3 while decompressing! [ 1125.341362][ T5965] udevd[5965]: incorrect cramfs checksum on /dev/loop4 [ 1125.406811][ T6582] cramfs: ffffffff9a3a3b02(26)->ffff8880865a0000(4096) [ 1125.491382][ T6582] cramfs: Error -3 while decompressing! [ 1125.513156][ T6582] cramfs: ffffffff9a3a3b1c(16)->ffff88806af54000(4096) [ 1125.520891][ T6499] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1125.530247][ T5959] udevd[5959]: incorrect cramfs checksum on /dev/loop4 [ 1125.550195][ T6582] cramfs: Error -3 while decompressing! [ 1125.575329][ T6582] cramfs: ffffffff9a3a3ae8(26)->ffff88808596b000(4096) [ 1125.636436][ T5959] udevd[5959]: incorrect cramfs checksum on /dev/loop4 [ 1125.674558][ T6499] (syz.3.12877,6499,0):ocfs2_find_entry:1104 ERROR: status = -117 [ 1125.742716][ T6499] (syz.3.12877,6499,0):ocfs2_find_entry:1104 ERROR: status = -117 [ 1125.776771][ T6499] (syz.3.12877,6499,0):ocfs2_symlink:2081 ERROR: status = -117 [ 1125.792637][ T6635] netlink: 'syz.0.12901': attribute type 2 has an invalid length. [ 1125.800502][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12901'. [ 1125.891735][ T6640] netlink: 220 bytes leftover after parsing attributes in process `syz.8.12902'. [ 1126.071668][ T5822] ocfs2: Unmounting device (7,3) on (node local) [ 1126.093552][ T6645] loop7: detected capacity change from 0 to 4096 [ 1126.260841][ T6645] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1126.354824][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1126.371600][ T6645] ntfs3(loop7): Failed to load $Extend (-22). [ 1126.443387][ T6645] ntfs3(loop7): Failed to initialize $Extend. [ 1126.586674][ T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1126.611751][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.671037][ T9] usb 9-1: Product: syz [ 1126.675267][ T9] usb 9-1: Manufacturer: syz [ 1126.724938][ T9] usb 9-1: SerialNumber: syz [ 1126.741639][ T9] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1126.769474][ T5831] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1127.264679][ T5882] usb 9-1: USB disconnect, device number 4 [ 1127.549009][ T6732] loop4: detected capacity change from 0 to 2048 [ 1127.593261][ T6732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1127.795790][ T30] audit: type=1326 audit(2000000087.454:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.7.12931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1127.877475][ T6753] loop7: detected capacity change from 0 to 512 [ 1127.900900][ T30] audit: type=1326 audit(2000000087.491:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.7.12931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1127.927423][ T6753] EXT4-fs: Ignoring removed mblk_io_submit option [ 1127.938595][ T30] audit: type=1326 audit(2000000087.491:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.7.12931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1127.979922][ T6753] EXT4-fs: inline encryption not supported [ 1127.985893][ T6753] EXT4-fs: Ignoring removed mblk_io_submit option [ 1128.013668][ T5831] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1128.020774][ T5831] ath9k_htc: Failed to initialize the device [ 1128.065679][ T5882] usb 9-1: ath9k_htc: USB layer deinitialized [ 1128.092203][ T6753] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1128.096863][ T30] audit: type=1326 audit(2000000087.491:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.7.12931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1128.165777][ T6753] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1128.198199][ T30] audit: type=1326 audit(2000000087.491:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.7.12931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff72159aeb9 code=0x7ffc0000 [ 1128.233932][ T6753] EXT4-fs (loop7): 1 truncate cleaned up [ 1128.262035][ T6753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.378583][T29582] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.537518][ T6800] openvswitch: netlink: IP tunnel dst address not specified [ 1128.825241][T29967] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1129.001485][T29967] usb 8-1: Using ep0 maxpacket: 8 [ 1129.011533][T29967] usb 8-1: config 135 has an invalid interface number: 230 but max is 0 [ 1129.021696][T29967] usb 8-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.050094][T29967] usb 8-1: config 135 has no interface number 0 [ 1129.074229][T29967] usb 8-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1129.114738][T29967] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1129.136313][T29967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.158329][T29967] usb 8-1: Product: syz [ 1129.165152][T29967] usb 8-1: Manufacturer: syz [ 1129.178654][T29967] usb 8-1: SerialNumber: syz [ 1129.239714][T29967] uvcvideo 8-1:135.230: Found Unit with invalid ID 0 [ 1129.254719][T29967] uvcvideo 8-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 1129.275387][T29967] uvcvideo 8-1:135.230: No valid video chain found. [ 1129.495711][ T6864] xt_recent: Unsupported userspace flags (000000b1) [ 1129.512812][T29967] usb 8-1: USB disconnect, device number 15 [ 1129.954313][ T6893] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12971'. [ 1130.386551][ T6910] bridge2: entered allmulticast mode [ 1130.758807][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12984'. [ 1130.784432][ T6885] loop4: detected capacity change from 0 to 32768 [ 1130.891399][ T6944] netlink: 'syz.7.12987': attribute type 10 has an invalid length. [ 1130.939002][ T6944] netlink: 152 bytes leftover after parsing attributes in process `syz.7.12987'. [ 1131.555249][ T5882] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1131.739673][ T6981] loop8: detected capacity change from 0 to 8192 [ 1131.761259][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 1131.781558][ T5882] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1131.815146][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.823207][ T5882] usb 4-1: Product: syz [ 1131.902482][ T5882] usb 4-1: Manufacturer: syz [ 1131.907310][ T5882] usb 4-1: SerialNumber: syz [ 1131.950102][ T5882] usb 4-1: config 0 descriptor?? [ 1131.997261][ T7006] loop4: detected capacity change from 0 to 512 [ 1132.007257][ T5882] gspca_main: se401-2.14.0 probing 047d:5003 [ 1132.080280][ T7015] netlink: 'syz.8.13007': attribute type 1 has an invalid length. [ 1132.099199][ T7006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1132.163359][ T7006] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1132.172535][ T7006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1132.252475][ T7006] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1132.259034][ T7006] __quota_error: 16 callbacks suppressed [ 1132.259090][ T7006] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1132.354666][ T7006] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1132.369629][ T7006] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1132.377475][ T7006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13005: bg 0: block 40: padding at end of block bitmap is not set [ 1132.428351][ T7006] loop4: lost filesystem error report for type 5 error -117 [ 1132.428776][ T7006] EXT4-fs (loop4): Remounting filesystem read-only [ 1132.436192][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1132.436215][ C0] EXT4-fs (loop4): initial error at time 2000000091: ext4_validate_block_bitmap:441 [ 1132.436242][ C0] EXT4-fs (loop4): last error at time 2000000091: ext4_validate_block_bitmap:441 [ 1132.446568][ T5882] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1132.481139][ T7006] EXT4-fs (loop4): 1 truncate cleaned up [ 1132.489944][ T7006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1132.525764][ T5882] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1132.556736][ T5882] usb 4-1: USB disconnect, device number 15 [ 1132.677806][ T7042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.703023][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.537471][ T7046] loop8: detected capacity change from 0 to 32768 [ 1133.586688][ T7046] (syz.8.13016,7046,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1133.641897][ T7046] (syz.8.13016,7046,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1133.717079][ T7046] JBD2: Ignoring recovery information on journal [ 1133.918000][ T7046] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1134.016931][ T7046] [ 1134.019320][ T7046] ====================================================== [ 1134.026579][ T7046] WARNING: possible circular locking dependency detected [ 1134.033624][ T7046] syzkaller #0 Not tainted [ 1134.038150][ T7046] ------------------------------------------------------ [ 1134.045184][ T7046] syz.8.13016/7046 is trying to acquire lock: [ 1134.051265][ T7046] ffff8880573b89c0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1da/0x290 [ 1134.063934][ T7046] [ 1134.063934][ T7046] but task is already holding lock: [ 1134.071325][ T7046] ffff88803ce1e0e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700 [ 1134.081653][ T7046] [ 1134.081653][ T7046] which lock already depends on the new lock. [ 1134.081653][ T7046] [ 1134.092085][ T7046] [ 1134.092085][ T7046] the existing dependency chain (in reverse order) is: [ 1134.101137][ T7046] [ 1134.101137][ T7046] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 1134.109695][ T7046] down_read+0x47/0x2e0 [ 1134.114426][ T7046] ocfs2_start_trans+0x3ab/0x700 [ 1134.119926][ T7046] ocfs2_modify_bh+0xe3/0x4d0 [ 1134.125156][ T7046] ocfs2_local_read_info+0x1454/0x1810 [ 1134.131202][ T7046] dquot_load_quota_sb+0x791/0xbd0 [ 1134.136879][ T7046] dquot_load_quota_inode+0x2e1/0x5d0 [ 1134.142817][ T7046] ocfs2_enable_quotas+0x1c8/0x4a0 [ 1134.148575][ T7046] ocfs2_fill_super+0x5305/0x6900 [ 1134.154174][ T7046] get_tree_bdev_flags+0x431/0x4f0 [ 1134.159830][ T7046] vfs_get_tree+0x92/0x2a0 [ 1134.164869][ T7046] do_new_mount+0x341/0xd30 [ 1134.169905][ T7046] __se_sys_mount+0x31d/0x420 [ 1134.175128][ T7046] do_syscall_64+0x14d/0xf80 [ 1134.180266][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.186711][ T7046] [ 1134.186711][ T7046] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1134.194291][ T7046] ocfs2_start_trans+0x2ac/0x700 [ 1134.199763][ T7046] ocfs2_write_info+0x118/0x360 [ 1134.205154][ T7046] quota_setinfo+0x316/0x320 [ 1134.210274][ T7046] __se_sys_quotactl+0x2cd/0x9e0 [ 1134.215739][ T7046] do_syscall_64+0x14d/0xf80 [ 1134.220872][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.227305][ T7046] [ 1134.227305][ T7046] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 1134.236180][ T7046] down_write+0x96/0x200 [ 1134.240963][ T7046] ocfs2_lock_global_qf+0x201/0x290 [ 1134.246694][ T7046] ocfs2_write_info+0xd1/0x360 [ 1134.251994][ T7046] quota_setinfo+0x316/0x320 [ 1134.257196][ T7046] __se_sys_quotactl+0x2cd/0x9e0 [ 1134.262658][ T7046] do_syscall_64+0x14d/0xf80 [ 1134.267861][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.274274][ T7046] [ 1134.274274][ T7046] -> #0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 1134.284973][ T7046] __lock_acquire+0x15a5/0x2cf0 [ 1134.290353][ T7046] lock_acquire+0xf0/0x2e0 [ 1134.295382][ T7046] down_write+0x96/0x200 [ 1134.300151][ T7046] ocfs2_lock_global_qf+0x1da/0x290 [ 1134.305875][ T7046] ocfs2_acquire_dquot+0x3fa/0xb30 [ 1134.311513][ T7046] dqget+0x7b1/0xf10 [ 1134.315936][ T7046] __dquot_initialize+0x3ba/0xd30 [ 1134.321482][ T7046] ocfs2_get_init_inode+0x147/0x1c0 [ 1134.327248][ T7046] ocfs2_mknod+0xa67/0x2290 [ 1134.332278][ T7046] ocfs2_mkdir+0x181/0x490 [ 1134.337228][ T7046] vfs_mkdir+0x413/0x630 [ 1134.341992][ T7046] filename_mkdirat+0x285/0x510 [ 1134.347494][ T7046] __se_sys_mkdirat+0x35/0x150 [ 1134.352782][ T7046] do_syscall_64+0x14d/0xf80 [ 1134.357914][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.364336][ T7046] [ 1134.364336][ T7046] other info that might help us debug this: [ 1134.364336][ T7046] [ 1134.374648][ T7046] Chain exists of: [ 1134.374648][ T7046] &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> sb_internal#4 --> &journal->j_trans_barrier [ 1134.374648][ T7046] [ 1134.391518][ T7046] Possible unsafe locking scenario: [ 1134.391518][ T7046] [ 1134.398972][ T7046] CPU0 CPU1 [ 1134.404427][ T7046] ---- ---- [ 1134.409798][ T7046] rlock(&journal->j_trans_barrier); [ 1134.415263][ T7046] lock(sb_internal#4); [ 1134.422037][ T7046] lock(&journal->j_trans_barrier); [ 1134.429847][ T7046] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 1134.437145][ T7046] [ 1134.437145][ T7046] *** DEADLOCK *** [ 1134.437145][ T7046] [ 1134.445375][ T7046] 7 locks held by syz.8.13016/7046: [ 1134.450656][ T7046] #0: ffff888058054420 (sb_writers#35){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1134.459986][ T7046] #1: ffff8880573bc2c0 (&type->i_mutex_dir_key#26/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 1134.470793][ T7046] #2: ffff8880573d89c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 1134.484553][ T7046] #3: ffff8880a107b6a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x271/0xb30 [ 1134.494787][ T7046] #4: ffff888058054610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x3d5/0xb30 [ 1134.504632][ T7046] #5: ffff88803ce1e0e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700 [ 1134.515438][ T7046] #6: ffff8880352ca950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290 [ 1134.525286][ T7046] [ 1134.525286][ T7046] stack backtrace: [ 1134.531174][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.8.13016 Not tainted syzkaller #0 PREEMPT(full) [ 1134.531193][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.531203][ T7046] Call Trace: [ 1134.531210][ T7046] [ 1134.531216][ T7046] dump_stack_lvl+0xe8/0x150 [ 1134.531239][ T7046] print_circular_bug+0x2e1/0x300 [ 1134.531264][ T7046] check_noncircular+0x12e/0x150 [ 1134.531287][ T7046] __lock_acquire+0x15a5/0x2cf0 [ 1134.531314][ T7046] lock_acquire+0xf0/0x2e0 [ 1134.531331][ T7046] ? ocfs2_lock_global_qf+0x1da/0x290 [ 1134.531354][ T7046] down_write+0x96/0x200 [ 1134.531374][ T7046] ? ocfs2_lock_global_qf+0x1da/0x290 [ 1134.531393][ T7046] ? __pfx_down_write+0x10/0x10 [ 1134.531413][ T7046] ? do_raw_spin_unlock+0xf5/0x210 [ 1134.531429][ T7046] ocfs2_lock_global_qf+0x1da/0x290 [ 1134.531449][ T7046] ? __pfx_ocfs2_lock_global_qf+0x10/0x10 [ 1134.531469][ T7046] ? dqget+0x732/0xf10 [ 1134.531486][ T7046] ocfs2_acquire_dquot+0x3fa/0xb30 [ 1134.531510][ T7046] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 1134.531533][ T7046] dqget+0x7b1/0xf10 [ 1134.531551][ T7046] __dquot_initialize+0x3ba/0xd30 [ 1134.531573][ T7046] ? __pfx___dquot_initialize+0x10/0x10 [ 1134.531588][ T7046] ? do_raw_spin_unlock+0xf5/0x210 [ 1134.531602][ T7046] ? from_vfsgid+0x72/0xa0 [ 1134.531618][ T7046] ? inode_init_owner+0x1ed/0x390 [ 1134.531635][ T7046] ocfs2_get_init_inode+0x147/0x1c0 [ 1134.531652][ T7046] ? __pfx_ocfs2_get_init_inode+0x10/0x10 [ 1134.531672][ T7046] ocfs2_mknod+0xa67/0x2290 [ 1134.531688][ T7046] ? kasan_save_track+0x4f/0x80 [ 1134.531703][ T7046] ? kfree+0x1c1/0x630 [ 1134.531722][ T7046] ? tomoyo_path_number_perm+0x501/0x630 [ 1134.531750][ T7046] ? __pfx_ocfs2_mknod+0x10/0x10 [ 1134.531768][ T7046] ? do_raw_spin_unlock+0xf5/0x210 [ 1134.531784][ T7046] ? _raw_spin_unlock+0x28/0x50 [ 1134.531799][ T7046] ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0 [ 1134.531821][ T7046] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.531841][ T7046] ? kasan_quarantine_put+0xbb/0x1f0 [ 1134.531865][ T7046] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.531887][ T7046] ? do_raw_spin_unlock+0xf5/0x210 [ 1134.531904][ T7046] ? do_raw_spin_lock+0x12b/0x2f0 [ 1134.531922][ T7046] ? do_raw_spin_unlock+0xf5/0x210 [ 1134.531938][ T7046] ? put_pid+0xe9/0x130 [ 1134.531961][ T7046] ocfs2_mkdir+0x181/0x490 [ 1134.531978][ T7046] ? __pfx_from_kgid+0x10/0x10 [ 1134.532000][ T7046] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 1134.532018][ T7046] ? inode_permission+0x346/0x5f0 [ 1134.532037][ T7046] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1134.532053][ T7046] vfs_mkdir+0x413/0x630 [ 1134.532072][ T7046] filename_mkdirat+0x285/0x510 [ 1134.532090][ T7046] ? __pfx_filename_mkdirat+0x10/0x10 [ 1134.532107][ T7046] ? do_getname+0x151/0x250 [ 1134.532125][ T7046] __se_sys_mkdirat+0x35/0x150 [ 1134.532142][ T7046] do_syscall_64+0x14d/0xf80 [ 1134.532160][ T7046] ? trace_irq_disable+0x3b/0x150 [ 1134.532181][ T7046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.532197][ T7046] ? clear_bhb_loop+0x40/0x90 [ 1134.532213][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.532228][ T7046] RIP: 0033:0x7f0f33b99d97 [ 1134.532243][ T7046] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.532257][ T7046] RSP: 002b:00007f0f349f8e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1134.532274][ T7046] RAX: ffffffffffffffda RBX: 00007f0f349f8ee0 RCX: 00007f0f33b99d97 [ 1134.532285][ T7046] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 1134.532295][ T7046] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 1134.532305][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000280 [ 1134.532315][ T7046] R13: 00007f0f349f8ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1134.532331][ T7046] [ 1134.606834][ T7069] loop4: detected capacity change from 0 to 32768 [ 1134.663464][ T7046] (syz.8.13016,7046,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba. Applying ECC. [ 1134.789491][ T7069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13021 (7069) [ 1134.795056][ T7046] (syz.8.13016,7046,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba [ 1134.957994][ T7046] (syz.8.13016,7046,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1134.964368][ T7069] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1134.967580][ T7046] (syz.8.13016,7046,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1134.993426][ T7046] Quota error (device loop8): find_block_dqentry: Can't read quota tree block 6 [ 1134.993785][ T7069] BTRFS info (device loop4): using sha256 checksum algorithm [ 1135.019071][ T7046] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1135.033186][ T7046] (syz.8.13016,7046,1):ocfs2_acquire_dquot:895 ERROR: status = -5 [ 1135.042084][ T7046] (syz.8.13016,7046,1):ocfs2_mknod:318 ERROR: status = -5 [ 1135.050457][ T7046] (syz.8.13016,7046,1):ocfs2_mknod:506 ERROR: status = -5 [ 1135.058624][ T7046] (syz.8.13016,7046,1):ocfs2_mkdir:662 ERROR: status = -5 [ 1135.089397][ T7069] BTRFS info (device loop4): enabling ssd optimizations [ 1135.097602][ T7069] BTRFS info (device loop4): turning on async discard [ 1135.104978][ T7069] BTRFS info (device loop4): enabling free space tree [ 1135.136891][ T7069] BTRFS error (device loop4): unable to set label with more than 255 bytes [ 1135.166694][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1135.200881][ T4575] ocfs2: Unmounting device (7,8) on (node local)