last executing test programs: 3m33.362426788s ago: executing program 1 (id=2): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)={[{@nodiscard}, {@jqfmt_vfsv0}, {@usrjquota}, {@background_gc_off}, {@noflush_merge}, {@nodiscard}, {@acl}, {@nocheckpoint_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x551a, &(0x7f0000007600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 3m31.061346536s ago: executing program 1 (id=27): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2) fanotify_init(0xf00, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 3m29.32845612s ago: executing program 1 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x9, 0x0, 0x0, 0x5, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x34243e699026756c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3m29.056479347s ago: executing program 32 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x9, 0x0, 0x0, 0x5, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x34243e699026756c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3m0.254340767s ago: executing program 5 (id=306): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) 3m0.020480523s ago: executing program 5 (id=309): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file1\x00', 0x0, &(0x7f00000022c0)=ANY=[], 0x4, 0x6de, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0x155adae9f4f0a7c9) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x50, 0xb, 0x5, 0x6, 0x7, 0x2, 0x3e, 0x7, 0x1f4, 0x40, 0x233, 0x7ff, 0x9b, 0x38, 0x1, 0xb5, 0x100, 0xfffc}, [{0x4, 0x3, 0x1000, 0x400000, 0x4, 0x3, 0x7, 0xfff}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m59.473243116s ago: executing program 5 (id=313): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m59.182634454s ago: executing program 5 (id=317): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x1, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) pwrite64(r0, &(0x7f0000000040)=':', 0x1, 0x3) 2m58.792253194s ago: executing program 5 (id=320): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5608, 0x0) 2m57.261287823s ago: executing program 5 (id=329): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m56.899306502s ago: executing program 33 (id=329): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m55.871281218s ago: executing program 0 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x24000840) 2m55.601135665s ago: executing program 0 (id=343): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) setuid(0xee01) ioctl$FS_IOC_SETFLAGS(r0, 0x40086e81, 0x0) 2m55.01200428s ago: executing program 0 (id=348): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x2010800, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x54f8, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7fffff, 0x2000001, 0xfffff}) 2m52.849106465s ago: executing program 0 (id=351): syz_mount_image$jfs(&(0x7f0000000a00), &(0x7f0000000080)='./bus\x00', 0xc001, &(0x7f0000001900)=ANY=[@ANYBLOB='discard=0x0000000000000004,usrquota,iocharset=ascii,errors=remount-ro,nointegrity,noquota,nodiscard\x00noquota,nointegresize,discard=0x000000000000043a,iocharset=macromanian,nointegridiscard,dont_appraise,defcontext=sysadm_u,subj_type={[,smackfsdef=nointeerity,func=CREDS_CLECK,audit,fowne2=\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61f7, &(0x7f0000002240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 2m51.298791924s ago: executing program 0 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000009c0)={0x2, 0x0, [{0xd, 0x19, 0x1, 0x8, 0x4}, {0x7, 0x9, 0x1ff, 0x7, 0x1}]}) 2m50.430790016s ago: executing program 0 (id=356): io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r0, 0x6, 0x0, 0x0, 0x0) io_destroy(r0) 2m50.098519624s ago: executing program 34 (id=356): io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r0, 0x6, 0x0, 0x0, 0x0) io_destroy(r0) 52.886583175s ago: executing program 2 (id=1372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) 52.484238255s ago: executing program 2 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 52.356107129s ago: executing program 2 (id=1382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10418}, {r1, 0x4208}], 0x2, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 48.829084628s ago: executing program 2 (id=1406): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000000)='./file0/file0\x00', 0x4) 48.74019429s ago: executing program 2 (id=1408): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 48.220722393s ago: executing program 2 (id=1412): r0 = inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x1010000, &(0x7f0000000340)=ANY=[], 0x88, 0x2bb, &(0x7f00000007c0)="$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") inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) getdents64(r1, 0x0, 0x0) 47.961559359s ago: executing program 35 (id=1412): r0 = inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x1010000, &(0x7f0000000340)=ANY=[], 0x88, 0x2bb, &(0x7f00000007c0)="$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") inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) getdents64(r1, 0x0, 0x0) 41.237185939s ago: executing program 7 (id=1461): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1}, 0x7}], 0x1, 0x20000020, 0x0) 40.8382542s ago: executing program 7 (id=1464): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file1\x00', 0x0, &(0x7f00000022c0)=ANY=[], 0x4, 0x6de, &(0x7f00000002c0)="$eJzs3cFvHFcdB/DvrNcbbyjBbZO2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYXABQQnJA79AwqSbz0gJO5B4cKl3Hr1sRISl4hDVA6LZnbW3rXXXtuN7QQ+n2g8b+a9efOb37yZ2bWz2gD/t66cTfN+ilw5+9q9cnltda6ztjp3rK7uJCnLjaTZm6W4lRQPkvmyvhiYMjDf4sOly298+nDts95Ss56q9hM7bTfCiLYr9ZSZur+ZkVtO7nYXK3V4eSbJ1Xo+rLXbvoYalkk7U8/hyHW3WNnL5nu5boEnTP/pVPSem1tMJ8eTTG28Dqg0Di/Cg7GnuxwAAAA8pT65fdQRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNOn/v7/op4a9TwzKfrf/9/qr6vLT6D5Xbe8f6BxAAAAAAAAAMDh+PqjPMq9nOgvd4vqb/6nq4WT+bybfCnv5m4Wcyfnci8LWc5y7uRCkumBjlr3FpaX71xY37I0esuLI7e8eFhHDAAAAAAAAAD/k36Z9sbf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ElQJBO9WTWdrOeZTqOZjbqsJP9I0jrqePegGLXy/uHHAQAAAF/I1D62+cqjPMq9nOgvd4vqPf8L1fvlqbybW1nOUpbTyWKu1e+hy3f9jbXVuc7a6tzNciqXh/v9/r/2FEar7mGiWhq155eqFu1cz1K15lyuVsFcS6O37zPJS/14BuIa8EEZU/G92i4ja9ZpLXf2++1+i/BY3C+Tv66xQ8v2RnDJekZm69ga+U9dvVpUv6hJNmdi7NlpDi1NV71Oru/pQhrrv/k5eQA5P17Py+P5zYHmfK/WM9FoVZm4WJ2nKsd5YedMJN/4y8dv3ujcevvG9btnn5xDGmNim/Wbx8Rc/zpM8uJTnYnmHtvPVpk4tb58JT/KT3I2M3k9d7KUn2Yhy1lMt65fqMdz+XN650zNDy29Pi6SVn1eeudsNzHN5IdVaSGnq21PZClFbudaFvNq9e9iLuTbuZRLuTxwhk9tG3d1bNVV39h81ffP9F9HBn/mm3WhvLv9duMuN7/TEW83Oh+X3r2/zOuzA3ntjfqH662eHbgOZgey9Fw/O5MjO9/PvbH51bpQ7uNXY54Th2u6zkR5AfWfEv3onu9lolk9i7aO8z90y+3SudXt3lh4Z5v+VzYtv1LPy2G1+rVxrZN8vJ+j2o9yvDyXqfpOMjw6yrrn1+8yA3XdjbHcqxt+4pbbnarqiqJ/pf44t6sBsPVKbdWv4bb2dLGqe3Fk3VxVV77San65H8vA663cTifXDiuJAOzR399cL07neKv9z/Yn7Y/av27faL829YNj3zn2ciuTf5v8bnN24pXGy8Wf81F+vvH+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L+7773/9kKns3hndKGxfdVQoZ3Na8b1vKlQ1F/os7etxhQm8nj62UdhKsnQmup7jg49jPbmMLYUur9IDj0//S8RHN3md2WhuWVEjSrMD63509YOP9hjhMXurosDLDQOedBOZPQAOMKbEnAozi/ffOf83ffe/9bSzYW3Ft9avDV56dLl2cuXXp07f32pszjb+3nUUQIHYeOhf9SRAAAAAAAAAAAAALs16oMBp58Z96GRXX3Gw/8sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6LK2fTvJ8iF2bPzZbLa6tznXLqlzdaNpM0Gknxs6R4kMynN2V6oLsif3yQ7oj9fLh0+Y1PH659ttFXs9c+adTz7e1cm2SlnjKTZKKeb6s1rrvh/q6O62+s4t/9YygT9nm3253/Qv3BY/LfAAAA//94gvPY") r0 = creat(&(0x7f0000000280)='./file0\x00', 0x155adae9f4f0a7c9) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x50, 0xb, 0x5, 0x6, 0x7, 0x2, 0x3e, 0x7, 0x1f4, 0x40, 0x233, 0x7ff, 0x9b, 0x38, 0x1, 0xb5, 0x100, 0xfffc}, [{0x4, 0x3, 0x1000, 0x400000, 0x4, 0x3, 0x7, 0xfff}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 40.185634166s ago: executing program 7 (id=1469): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 37.833059105s ago: executing program 7 (id=1478): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}]}, 0x1, 0x477, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) 37.039907115s ago: executing program 7 (id=1482): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x9c8a, 0x0, 0x17fffffffffffc}, 0x0, 0x0, 0x0) 34.294841505s ago: executing program 7 (id=1498): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.910653404s ago: executing program 36 (id=1498): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.453734993s ago: executing program 6 (id=1752): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xe) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) 3.305538476s ago: executing program 6 (id=1753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 3.288638597s ago: executing program 9 (id=1754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x74, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x4, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xf, 0x3}, @exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x6, 0x3, 0x1}, @window={0x3, 0x3, 0x8}, @sack={0x5, 0x1e, [0x3ff, 0x1, 0x9, 0x7f, 0x5, 0x8, 0x81]}, @window={0x3, 0x3, 0x9}, @eol, @exp_fastopen={0xfe, 0x6, 0xf989, "21b1"}]}}}}}}}, 0x0) 3.209020799s ago: executing program 6 (id=1756): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) 3.114257732s ago: executing program 9 (id=1758): syz_mount_image$xfs(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0xa00086, &(0x7f0000000200)={[{@quota}]}, 0x1, 0x9759, &(0x7f000000e040)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 2.333140251s ago: executing program 9 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x400, 0x8848, @void, @val, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x6, 0x83, 0x4, 0x6}}, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x681}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40) 2.116499257s ago: executing program 8 (id=1765): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x34000404) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x200, 0x1758}) 2.096679967s ago: executing program 4 (id=1766): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) 1.827227374s ago: executing program 3 (id=1769): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f1", 0x1b}, {&(0x7f0000000400)="e146badcd6aca239c46b952e", 0xc}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.707244267s ago: executing program 4 (id=1770): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0xffffff25}], 0x1, 0x0, 0x0, 0x804}}], 0x1, 0x4000004) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.649209189s ago: executing program 3 (id=1771): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 1.570891231s ago: executing program 8 (id=1772): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x1, 0xffff2d3a, 0xffffff01, 0x6, 0x4, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0xa, 0x101, 0xa, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x10000071, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x8, 0x0, 0x7, 0x5, 0x0, 0x8, 0xff, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x4, 0x6, 0x7, 0xff, 0x5, 0x9, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x3ff, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0x7, 0x2, 0x6, 0x7ff, 0xfffffffc, 0x2, 0x25b, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0x4, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.529568781s ago: executing program 9 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x9, 0x48, 0x5, 0x32ef}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.421122275s ago: executing program 9 (id=1774): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r2, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) 1.419541195s ago: executing program 8 (id=1784): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 1.370024126s ago: executing program 9 (id=1775): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/tty/ttyUSB0/device/vcc_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='3\b', 0x2) 1.328940577s ago: executing program 6 (id=1776): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000100)={[{@i_version}, {@grpquota}, {@oldalloc}, {@errors_remount}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.313975117s ago: executing program 8 (id=1777): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_abort}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000440)) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.053095133s ago: executing program 3 (id=1778): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) writev(r0, &(0x7f0000001740)=[{&(0x7f00000006c0)="f5fc64fb2d", 0x5}], 0x1) truncate(&(0x7f0000000940)='./file1\x00', 0x5a) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.011514045s ago: executing program 8 (id=1779): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) umount2(&(0x7f0000000040)='.\x00', 0x2) 976.348085ms ago: executing program 8 (id=1780): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f00000069c0)=ANY=[], 0x1, 0x5549, &(0x7f0000007c00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVXnUcEuQCseIlXEY8GKOrZjubU9Uew4ISsWLBEL/gkCiRVLfgML1uwQCxA7pCLPvUENjwoUx6bJ90mTM3N9febckZXozEQOwJk1n/36cylcC5dCCLMhhKshFPultBXWYnghhHA9hDDz2FZK438MnA8hXA4hXBsljzlL6aXPbw5vrP701i/ffHfh3JUvvv5+eqsGpu3FEEJ3O+7vdWPMWzE+SOO1YbuI3ZVhivGF7sN0nMe419wsMuzVDufVirjcivPz7d3+KG51avVRbLW3ivHtXjxhf9g6zFO84UFtpzhuNDeL2O7nRWwdxLr2D+LvtoP+IOZppHwfFenDYHAY43hzvxnXs/2wiPXeII3HvHmjuT+KwxTT6UI97zSKOjaPc6X/395u93b3s2Fzp9/Oe9lqpfpSpXq7XN3JG81Bc6Vc6zZur2QLrc5oWnnQrHXXWnne6jQr9by7mC206vVytZot3Glutmu9rFqtLFdulVcX097N7PV772edRrYwiq+2e7uDdqefbeU7WXzHYrZUWX55MbtRzd5d38g23rl7d33jvQ/vfHDvlfU3X0uT/lJWtrB0a2mpXL1VXqountj6L44+Mie5/tHf+v+0/k9S0WNcPxxL6Ukv3p9cHQBPEf0/MA0T7f/nwtj7/6D/Hwv9/5ld/6PkeBeQs+2J/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfZD3NfvlHszMfjK2n8mTT0XDouhRBmQgiP/sZsOH8k52zKM/cP8+f+VMO3pVBkGJ3jQtouhxDW0vbbsyd9FQAAAOD0+urj65/Fbj3+mJ92QUxSvGkzc/X+mPKVQghz8z+OIUtIN5vC88evKhp9vs+F/TFlK25gXRxTsnjL7dy4sv0rs0fCxcdCKYaZw5nnJ1oXAABwko52ApPtQgAAAJikT6ddANNRPGlN/4ufHvNdiCE9ELx05AgAAAB4CpWmXQAAAABw4or+3/f/AQAAwOkWv/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J2dO8hNG4gCAPptcKGltKjqvlfpDo7RI3TZZcVVOAK9Qi/AGeiuWWYXQYQ9RCGCEGJjkug9yR7Gtj5jhBd//DUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBO/4r55M/vb/26cVbrepq5GwAAAGCfZTGflB9GVX+Qjg/ToS+pn0VEHhH7cvdOvNuJ2UlxigPXFw/G8DeijLD5jl7aPkTE97TdfD73rwAAAABv12I6G1fZerUbXXpAtKmatMk//mgoXhYRxeh/Q9Hyze7rky5dH58f2vy/u/HrwNnstKGVE1tRu2Rmq5xy6zYV7bhOetzvmv69JquavL3hAAAAbdnNBFrMQgAAAGjZz0sPgLZdDWP71jPV4qcC/l7VpBeC73d6AAAAwCt0atUzAAAA8BINHj1b5v8XXf8vlRscWf/v07X1/wAAAODZqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKdlMZ8sprNx3TirdT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC37847CMAwGYXCTKK9O6AK+/y3Ngt26dTMDgo9/KwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xpHFQcA/Lszu1tbFWOUHCJiwYNebLqtrb16UIIH/wQhpNsa3fqjzcGWouTiTXLuRfQoIijx1v+h5xZ6qQehhxwqeFJQZnYmeVlbXC2Z2aafD7x535lM5n3fJIR8500CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAbfvN3TgvNnPjOKuO3bx3dbXob030heubtxeLVsSdB1z/i/1KfPa9mO50FtpLBAAAgMdHXtf3Ef3obS0XQTZX1v+9+pyi5v/m6XFc1/OTdX/d17V/0X7+6e7zOwPNjccpLnpubTQ8/s9Uuvk+znOWPfOvZ3TLO18+e8nLL0j2zsZz273yfna+unHjrX4ZHmoiWwDg/zhW91VQ/z5U9IM2EwPg4Mr27narVrhT1f/5XAt5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSsvxFP1nEnIha7u3Hh1r2rq2U/sX998/Zi3U5fu7aZXrO4RC8izq2Nhsebmsgj4NLlKx+ujEbDi80HL0VEe6NXwXtTnBPRZoaChw2y6nt9us86GhHt59xY8OevD/hQyz+YAAA4cHpVK+r6O72t5eJYZz7ir2/31v+vJHGk9f9En9b/d98/fTMdK63/B43NcPYtrV/4ZOnS5SuvrV1YOT88P/zo9RODNwYnz5w6dWapfFay5IkJAAAAD6dftbT+z+YjtifW/48kcUxZ/3/69eDzdKxc/X9fu4t+bWcCAADweHv26O+/de5zvNPvx2cr6+sXB+Ptzv6J8baFVP+zQ1VL6/98vu2sAAAAgCZsb3T2rP+fTeKYcv3/qe9e+CG9Zh4Rh6v1/2OrH4/ONjedlvwx1VlN/KXxvk8VAACAmXa4aun6f698/z/beeUhi4hXXx7H1b8BnKr+z9/+8vt0rPT9/5PNTXEmZQvj+1H2CxHdhbYzAgAA4CB7ompFsf9Lb2v5gx+PvNv3/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4OAAD//+BbRX8=") creat(&(0x7f0000000040)='./file1\x00', 0x8) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x40000020fffffffc) 831.868749ms ago: executing program 6 (id=1781): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {}, {@dioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@mblk_io_submit}]}, 0x3, 0x578, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 701.202213ms ago: executing program 4 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000050) 626.904884ms ago: executing program 3 (id=1783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 609.245305ms ago: executing program 4 (id=1785): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0xecb}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@grpid}, {@lazytime}, {@errors_continue}, {@noload}, {@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="0b031200e2ff02000200", 0xff02, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) 377.049981ms ago: executing program 3 (id=1786): mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0}, 0x18) 179.904356ms ago: executing program 6 (id=1787): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 171.713926ms ago: executing program 4 (id=1788): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x283, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x2000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, r2}}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000010) 59.697178ms ago: executing program 3 (id=1789): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0x15, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): or (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 203.557195][ T8071] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 203.680583][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.702599][ T5335] XFS (loop6): Unmounting Filesystem [ 203.727763][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.769040][ T4237] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.788399][ T8080] loop3: detected capacity change from 0 to 512 [ 203.795273][ T4237] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.795524][ T8082] loop7: detected capacity change from 0 to 128 [ 203.805321][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.822265][ T4237] usb 5-1: config 0 descriptor?? [ 203.871190][ T8080] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.1110: missing EA_INODE flag [ 203.894975][ T8080] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1110: error while reading EA inode 2 err=-117 [ 203.923836][ T8080] EXT4-fs (loop3): 1 orphan inode deleted [ 203.963157][ T8080] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 204.003762][ T5469] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 204.036488][ T5469] FAT-fs (loop7): Filesystem has been set read-only [ 204.153342][ T8090] loop2: detected capacity change from 0 to 512 [ 204.259309][ T8090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.339823][ T8090] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1117: invalid indirect mapped block 32768 (level 2) [ 204.339886][ T4237] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 204.375863][ T8090] EXT4-fs (loop2): Remounting filesystem read-only [ 204.400709][ T8090] EXT4-fs (loop2): 1 orphan inode deleted [ 204.423641][ T8090] EXT4-fs (loop2): 1 truncate cleaned up [ 204.440169][ T8090] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 204.499380][ T4237] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 204.630942][ T8090] EXT4-fs (loop2): shut down requested (1) [ 204.775806][ T6840] usb 5-1: USB disconnect, device number 9 [ 204.801776][ T8100] fido_id[8100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 205.059047][ T8114] loop6: detected capacity change from 0 to 128 [ 205.129607][ T8092] loop7: detected capacity change from 0 to 32768 [ 205.148409][ T8114] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 205.208471][ T8114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.361852][ T8092] XFS (loop7): Mounting V5 Filesystem [ 205.441523][ T8126] loop3: detected capacity change from 0 to 8192 [ 205.523389][ T8126] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 205.566133][ T8126] REISERFS (device loop3): using ordered data mode [ 205.607922][ T8126] reiserfs: using flush barriers [ 205.660410][ T8126] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.699784][ T8092] XFS (loop7): Ending clean mount [ 205.776285][ T8126] REISERFS (device loop3): checking transaction log (loop3) [ 205.851779][ T8126] REISERFS (device loop3): Using r5 hash to sort names [ 205.865550][ T5469] XFS (loop7): Unmounting Filesystem [ 205.871555][ T8140] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1130'. [ 205.941295][ T8126] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 206.034805][ T8126] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=522, len=2 - odd [ 206.922474][ T8162] input: syz0 as /devices/virtual/input/input15 [ 206.928524][ T8164] loop4: detected capacity change from 0 to 1024 [ 207.084103][ T8164] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,noquota,delalloc,journal_dev=0x0000000000000006,block_validity,,errors=continue. Quota mode: none. [ 207.230504][ T8164] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.272389][ T8164] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm syz.4.1143: lblock 8 mapped to illegal pblock 8 (length 8) [ 207.352489][ T8180] loop7: detected capacity change from 0 to 64 [ 207.368397][ T8164] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.1143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 207.387061][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.499786][ T8178] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.1143: lblock 0 mapped to illegal pblock 0 (length 6) [ 207.589004][ T8178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 207.650584][ T8178] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.650584][ T8178] [ 207.892712][ T154] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 207.971967][ T8185] loop6: detected capacity change from 0 to 32768 [ 207.992323][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 28 with error 28 [ 208.010464][ T154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 208.010464][ T154] [ 208.020153][ T154] EXT4-fs (loop4): Total free blocks count 0 [ 208.042785][ T8191] loop7: detected capacity change from 0 to 512 [ 208.054226][ T8185] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 208.062924][ T8185] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 208.081554][ T154] EXT4-fs (loop4): Free/Dirty block details [ 208.112185][ T154] EXT4-fs (loop4): free_blocks=0 [ 208.117485][ T154] EXT4-fs (loop4): dirty_blocks=32 [ 208.123145][ T154] EXT4-fs (loop4): Block reservation details [ 208.132466][ T154] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 208.231124][ T8191] EXT4-fs (loop7): 1 truncate cleaned up [ 208.236977][ T8191] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: none. [ 208.282572][ T8185] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 208.316510][ T2303] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 208.324223][ T2303] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 208.358182][ T8160] loop2: detected capacity change from 0 to 32768 [ 208.420415][ T8160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1141 (8160) [ 208.435745][ T8191] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.1154: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 208.542666][ T2303] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 218ms [ 208.571996][ T2303] gfs2: fsid=syz:syz.0: jid=0: Done [ 208.584605][ T8160] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 208.600434][ T8191] EXT4-fs (loop7): Remounting filesystem read-only [ 208.613073][ T8185] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 208.623643][ T8160] BTRFS info (device loop2): setting nodatasum [ 208.639164][ T8160] BTRFS info (device loop2): disabling tree log [ 208.703720][ T8160] BTRFS info (device loop2): max_inline at 0 [ 208.718063][ T8160] BTRFS info (device loop2): turning on sync discard [ 208.760653][ T8160] BTRFS info (device loop2): using free space tree [ 208.775701][ T8160] BTRFS info (device loop2): has skinny extents [ 209.000388][ T2303] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.040565][ T8160] BTRFS info (device loop2): enabling ssd optimizations [ 209.390716][ T2303] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.405574][ T8227] loop7: detected capacity change from 0 to 4096 [ 209.474229][ T2303] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 209.537982][ T8227] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 209.707579][ T2303] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 209.716979][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 209.740299][ T2303] usb 4-1: Product: syz [ 209.744625][ T2303] usb 4-1: Manufacturer: syz [ 209.810799][ T8201] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.819526][ T8236] loop4: detected capacity change from 0 to 512 [ 209.820831][ T8201] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.892112][ T2303] usb_debug 4-1:1.0: debug converter detected [ 209.900276][ T2303] usb 4-1: debug converter now attached to ttyUSB0 [ 209.975119][ T8236] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 210.106499][ T8236] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,jqfmt=vfsold,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 210.134500][ T8243] loop6: detected capacity change from 0 to 128 [ 210.193589][ T8236] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.240888][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.254672][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.264244][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.273624][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.283185][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.292473][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.301937][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.311501][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.320768][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.327355][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.336911][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.346587][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.353292][ T8246] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 210.355884][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.380495][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.385341][ T26] audit: type=1800 audit(1785903955.755:13): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1160" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 210.386646][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.416556][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.426142][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.432400][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.441707][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.451295][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.460596][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.469879][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.476074][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.485359][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.494808][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.504098][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.510296][ T8246] EXT4-fs (loop4): Remounting filesystem read-only [ 210.513768][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.530225][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.539521][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.545846][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.555314][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.564759][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.574132][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.583749][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.593093][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.602824][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.612216][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.621464][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.627741][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 210.801239][ T4230] usb 4-1: USB disconnect, device number 8 [ 210.840913][ T4230] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 210.849033][ T4230] usb_debug 4-1:1.0: device disconnected [ 210.903604][ T8261] loop7: detected capacity change from 0 to 256 [ 210.946400][ T8263] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1169'. [ 211.001504][ T8261] FAT-fs (loop7): Unrecognized mount option "shortnameGwinnt" or missing value [ 211.146838][ T8272] ALSA: mixer_oss: invalid OSS volume '' [ 211.293047][ T4234] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 211.299562][ T8261] loop7: detected capacity change from 0 to 4096 [ 211.432635][ T8261] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 211.489888][ T8261] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 211.546786][ T8261] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 211.567200][ T8261] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 211.586798][ T4234] usb 7-1: Using ep0 maxpacket: 16 [ 211.593977][ T8261] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 211.614314][ T8261] ntfs: volume version 3.1. [ 211.626615][ T8261] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 211.653012][ T8261] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 211.704842][ T8261] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 211.739842][ T8261] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 211.767194][ T4234] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.811217][ T4234] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.052991][ T4234] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 212.063771][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 212.085813][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.103907][ T4234] usb 7-1: Product: syz [ 212.108384][ T4234] usb 7-1: Manufacturer: syz [ 212.114191][ T4234] usb 7-1: SerialNumber: syz [ 212.122013][ T4234] usb 7-1: config 0 descriptor?? [ 212.239778][ T8306] set_capacity_and_notify: 1 callbacks suppressed [ 212.239795][ T8306] loop7: detected capacity change from 0 to 128 [ 212.365944][ T8306] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 212.399868][ T4234] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input16 [ 212.434049][ T8306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.730363][ T6840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.790483][ T4234] rc_core: IR keymap rc-imon-pad not found [ 212.796619][ T4234] Registered IR keymap rc-empty [ 212.830314][ T4234] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 212.860292][ T4234] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 212.954257][ T4234] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 212.988476][ T4234] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 213.033827][ T4234] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:6> initialized [ 213.100623][ T6840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.128466][ T6840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.175343][ T6840] usb 4-1: config 1 has no interface number 0 [ 213.199655][ T6840] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.218698][ T8330] loop7: detected capacity change from 0 to 4096 [ 213.233227][ T6840] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 213.294985][ T6840] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.316596][ T8330] NILFS (loop7): invalid segment: Checksum error in segment payload [ 213.340399][ T4237] usb 7-1: USB disconnect, device number 6 [ 213.343718][ T8330] NILFS (loop7): trying rollback from an earlier position [ 213.418641][ T8330] NILFS (loop7): recovery complete [ 213.448439][ T8331] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.485827][ T8321] loop2: detected capacity change from 0 to 32768 [ 213.540580][ T6840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.549767][ T6840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.602477][ T6840] usb 4-1: Product: syz [ 213.606703][ T6840] usb 4-1: Manufacturer: syz [ 213.612445][ T6840] usb 4-1: SerialNumber: syz [ 213.704887][ T8321] XFS (loop2): Mounting V5 Filesystem [ 213.930498][ T8321] XFS (loop2): Ending clean mount [ 213.998651][ T8321] XFS (loop2): Quotacheck needed: Please wait. [ 214.125411][ T8353] loop6: detected capacity change from 0 to 128 [ 214.131953][ T8321] XFS (loop2): Quotacheck: Done. [ 214.234344][ T8353] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 214.259246][ T8353] FAT-fs (loop6): Filesystem has been set read-only [ 214.329165][ T8357] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 214.340498][ T5298] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 214.524224][ T4193] XFS (loop2): Unmounting Filesystem [ 214.541339][ T6840] cdc_ncm 4-1:1.1: bind() failure [ 214.550322][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 214.695945][ T8363] loop6: detected capacity change from 0 to 256 [ 214.716559][ T5298] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.763096][ T5298] usb 8-1: config 0 has no interfaces? [ 214.768659][ T5298] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.790674][ T8363] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.808895][ T8363] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 214.818019][ T5298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.820267][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 214.830044][ T6840] usb 4-1: USB disconnect, device number 9 [ 214.860744][ T8363] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 214.874297][ T5298] usb 8-1: config 0 descriptor?? [ 214.970744][ T1108] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 214.978894][ T1108] usb 5-1: config 0 has no interface number 0 [ 215.137007][ T8351] loop7: detected capacity change from 0 to 256 [ 215.202008][ T8351] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.220409][ T1108] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 215.243918][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.284212][ T1108] usb 5-1: Product: syz [ 215.285142][ T8351] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.288440][ T1108] usb 5-1: Manufacturer: syz [ 215.288467][ T1108] usb 5-1: SerialNumber: syz [ 215.317161][ T1108] usb 5-1: config 0 descriptor?? [ 215.372558][ T1108] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 215.422744][ T5298] usb 8-1: USB disconnect, device number 5 [ 215.502107][ T8377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.568364][ T8381] loop3: detected capacity change from 0 to 128 [ 215.598831][ T1108] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 215.611386][ T8379] loop6: detected capacity change from 0 to 2048 [ 215.633484][ T1108] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 215.665067][ T8384] CIFS: Attempting to mount \\127.0.0.1\share [ 215.671782][ T8384] CIFS: VFS: No username specified [ 215.719162][ T8379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.781302][ T8381] attempt to access beyond end of device [ 215.781302][ T8381] loop3: rw=2049, want=140, limit=128 [ 215.792174][ T8386] input: syz0 as /devices/virtual/input/input18 [ 216.015799][ T8356] loop4: detected capacity change from 0 to 256 [ 216.087643][ T8387] attempt to access beyond end of device [ 216.087643][ T8387] loop3: rw=2049, want=250, limit=128 [ 216.142334][ T4237] usb 5-1: USB disconnect, device number 10 [ 216.160327][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 216.175377][ T4237] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 216.195339][ T4237] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 216.238705][ T4237] quatech2 5-1:0.51: device disconnected [ 216.318247][ T8398] loop2: detected capacity change from 0 to 512 [ 216.440385][ T8398] EXT4-fs (loop2): 1 truncate cleaned up [ 216.455630][ T8398] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: none. [ 216.625396][ T8398] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1224: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 216.739972][ T8398] EXT4-fs (loop2): Remounting filesystem read-only [ 216.748989][ T8410] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 216.821507][ T8410] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.853360][ T8410] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz.7.1228: invalid size [ 216.877101][ T8410] EXT4-fs (loop7): Remounting filesystem read-only [ 217.040385][ T5298] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.440615][ T5298] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.532930][ T5298] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 217.699983][ T8446] set_capacity_and_notify: 1 callbacks suppressed [ 217.700010][ T8446] loop2: detected capacity change from 0 to 512 [ 217.730562][ T5298] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 217.750568][ T5298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.779276][ T5298] usb 4-1: Product: syz [ 217.793914][ T5298] usb 4-1: Manufacturer: syz [ 217.819025][ T5298] usb 4-1: SerialNumber: syz [ 217.906487][ T8446] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 218.002132][ T8446] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1242: corrupted inode contents [ 218.035283][ T8446] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.1242: mark_inode_dirty error [ 218.098941][ T5298] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 218.099248][ T8446] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1242: corrupted inode contents [ 218.159789][ T8461] loop4: detected capacity change from 0 to 1024 [ 218.179255][ T8446] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.1242: mark_inode_dirty error [ 218.240129][ T8446] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1242: corrupted inode contents [ 218.256462][ T8446] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 218.269636][ T8446] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.1242: corrupted inode contents [ 218.296558][ T8461] hfsplus: xattr searching failed [ 218.303345][ T8446] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.1242: mark_inode_dirty error [ 218.310454][ T5298] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 218.343973][ T8446] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 218.381688][ T5298] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 218.384796][ T8446] EXT4-fs (loop2): 1 truncate cleaned up [ 218.419758][ T8446] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.440024][ T4249] hfsplus: bad catalog file entry [ 218.458945][ T4249] hfsplus: b-tree write err: -5, ino 3 [ 218.468084][ T8446] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.638803][ T8446] __quota_error: 6 callbacks suppressed [ 218.638822][ T8446] Quota error (device loop2): write_blk: dquota write failed [ 218.680944][ T8446] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 218.705669][ T8446] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1242: Failed to acquire dquot type 1 [ 218.750803][ T5298] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 218.828429][ T5298] usb 4-1: USB disconnect, device number 10 [ 219.138742][ T4698] udevd[4698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.546846][ T8489] loop3: detected capacity change from 0 to 64 [ 220.136113][ T7589] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 220.146291][ T7589] CPU: 0 PID: 7589 Comm: kworker/u5:12 Not tainted syzkaller #0 [ 220.153962][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.164053][ T7589] Workqueue: hci4 hci_rx_work [ 220.168837][ T7589] Call Trace: [ 220.172144][ T7589] [ 220.175097][ T7589] dump_stack_lvl+0x188/0x250 [ 220.179810][ T7589] ? show_regs_print_info+0x20/0x20 [ 220.185134][ T7589] ? load_image+0x410/0x410 [ 220.189693][ T7589] sysfs_create_dir_ns+0x26a/0x290 [ 220.194844][ T7589] ? sysfs_warn_dup+0xa0/0xa0 [ 220.199578][ T7589] ? kthread+0x42e/0x520 [ 220.203859][ T7589] ? do_raw_spin_unlock+0x11d/0x230 [ 220.209095][ T7589] kobject_add_internal+0x5ba/0xcd0 [ 220.214337][ T7589] kobject_add+0x160/0x230 [ 220.218795][ T7589] ? kobject_init+0x1c0/0x1c0 [ 220.223513][ T7589] ? __raw_spin_lock_init+0x41/0x100 [ 220.228846][ T7589] ? klist_children_get+0x50/0x50 [ 220.233994][ T7589] ? get_device_parent+0x121/0x3e0 [ 220.239153][ T7589] device_add+0x470/0x1050 [ 220.243693][ T7589] ? device_initialize+0x2a5/0x4d0 [ 220.248842][ T7589] hci_conn_add_sysfs+0xd1/0x1e0 [ 220.253907][ T7589] le_conn_complete_evt+0xc2e/0x14d0 [ 220.259256][ T7589] ? cs_le_create_conn+0x5e0/0x5e0 [ 220.264426][ T7589] ? __mutex_trylock_common+0x15c/0x260 [ 220.270016][ T7589] hci_le_meta_evt+0x285/0x3ca0 [ 220.274926][ T7589] ? hci_event_packet+0x363/0x1310 [ 220.280083][ T7589] ? __lock_acquire+0x7b50/0x7b50 [ 220.285162][ T7589] ? hci_remote_host_features_evt+0x240/0x240 [ 220.291275][ T7589] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 220.297039][ T7589] ? mark_lock+0x94/0x320 [ 220.301445][ T7589] ? mutex_unlock+0x10/0x10 [ 220.305982][ T7589] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 220.312086][ T7589] ? lock_chain_count+0x20/0x20 [ 220.316978][ T7589] ? __rwlock_init+0x140/0x140 [ 220.321783][ T7589] hci_event_packet+0xe0b/0x1310 [ 220.326770][ T7589] ? _raw_spin_unlock+0x40/0x40 [ 220.331651][ T7589] ? rcu_lock_release+0x20/0x20 [ 220.336551][ T7589] ? hci_send_to_monitor+0x9c/0x4a0 [ 220.341789][ T7589] hci_rx_work+0x255/0xa10 [ 220.347537][ T7589] process_one_work+0x867/0xff0 [ 220.352456][ T7589] ? worker_detach_from_pool+0x240/0x240 [ 220.358211][ T7589] ? lockdep_hardirqs_off+0x70/0x100 [ 220.363579][ T7589] ? _raw_spin_lock_irq+0xb7/0xf0 [ 220.368634][ T7589] ? _raw_spin_lock_irqsave+0x100/0x100 [ 220.374212][ T7589] ? wq_worker_running+0x97/0x170 [ 220.379279][ T7589] worker_thread+0xad7/0x12a0 [ 220.384017][ T7589] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 220.389956][ T7589] kthread+0x42e/0x520 [ 220.394066][ T7589] ? rcu_lock_release+0x20/0x20 [ 220.398949][ T7589] ? kthread_blkcg+0xd0/0xd0 [ 220.403579][ T7589] ret_from_fork+0x1f/0x30 [ 220.408044][ T7589] [ 220.419306][ T7589] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.434033][ T7589] Bluetooth: hci4: failed to register connection device [ 220.893668][ T8531] loop3: detected capacity change from 0 to 256 [ 220.937051][ T8531] FAT-fs (loop3): Unrecognized mount option "shortnameGwinnt" or missing value [ 221.179738][ T8537] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 221.205569][ T8531] loop3: detected capacity change from 0 to 4096 [ 221.258750][ T8535] loop7: detected capacity change from 0 to 4096 [ 221.375389][ T8531] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 221.438228][ T8539] netlink: 'syz.6.1280': attribute type 11 has an invalid length. [ 221.446546][ T8531] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 221.530318][ T8535] ntfs3: loop7: ino=21, "file1" fallocate(0x20) is not supported [ 221.538377][ T8531] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 221.580386][ T8531] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 221.634333][ T8531] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 221.641222][ T8517] loop2: detected capacity change from 0 to 32768 [ 221.711987][ T8531] ntfs: volume version 3.1. [ 221.773420][ T8531] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 221.792462][ T8517] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 221.817560][ T8517] JBD2: Ignoring recovery information on journal [ 221.833390][ T8531] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 221.912377][ T8531] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 221.981996][ T8517] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 222.114310][ T8555] netlink: 'syz.4.1288': attribute type 8 has an invalid length. [ 222.179427][ T8555] netlink: 'syz.4.1288': attribute type 4 has an invalid length. [ 222.238296][ T8555] netlink: 'syz.4.1288': attribute type 7 has an invalid length. [ 222.288388][ T8555] netlink: 197844 bytes leftover after parsing attributes in process `syz.4.1288'. [ 222.446743][ T8564] loop6: detected capacity change from 0 to 512 [ 222.615001][ T8564] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 222.649299][ T8567] loop4: detected capacity change from 0 to 4096 [ 222.742051][ T8564] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,jqfmt=vfsold,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 222.782618][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 222.789282][ T8567] NILFS (loop4): invalid segment: Checksum error in segment payload [ 222.858013][ T8567] NILFS (loop4): trying rollback from an earlier position [ 222.860482][ T8564] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.997863][ T8567] NILFS (loop4): recovery complete [ 223.029980][ T8575] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.171692][ T8564] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 223.211034][ T8564] EXT4-fs (loop6): Remounting filesystem read-only [ 223.218175][ T8578] loop3: detected capacity change from 0 to 1024 [ 223.258593][ T8549] loop7: detected capacity change from 0 to 32768 [ 223.331298][ T8549] gfs2: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 223.442829][ T8578] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 223.505059][ T8578] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.650152][ T8578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1295: bg 0: block 112: padding at end of block bitmap is not set [ 223.663271][ T8590] input: syz1 as /devices/virtual/input/input19 [ 223.719539][ T8578] EXT4-fs (loop3): Remounting filesystem read-only [ 223.771095][ T8586] loop6: detected capacity change from 0 to 4096 [ 224.049705][ T8586] ntfs3: loop6: ino=21, "file1" fallocate(0x20) is not supported [ 224.309063][ T8596] loop3: detected capacity change from 0 to 4096 [ 224.370246][ T8596] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 224.479500][ T8596] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 224.922035][ T8588] loop4: detected capacity change from 0 to 32768 [ 224.983532][ T8588] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1297 (8588) [ 225.119497][ T8588] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 225.149331][ T8588] BTRFS info (device loop4): setting nodatasum [ 225.155029][ T8593] loop7: detected capacity change from 0 to 32768 [ 225.200397][ T8588] BTRFS info (device loop4): disabling tree log [ 225.206742][ T8588] BTRFS info (device loop4): max_inline at 0 [ 225.252445][ T8588] BTRFS info (device loop4): turning on sync discard [ 225.259292][ T8588] BTRFS info (device loop4): using free space tree [ 225.330525][ T8588] BTRFS info (device loop4): has skinny extents [ 225.370728][ T8618] loop2: detected capacity change from 0 to 512 [ 225.482161][ T8593] XFS (loop7): Mounting V5 Filesystem [ 225.560420][ T8618] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 225.579591][ T8621] loop3: detected capacity change from 0 to 4096 [ 225.581705][ T8593] XFS (loop7): Ending clean mount [ 225.592016][ T8618] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 225.600121][ T8618] System zones: 0-1, 15-15, 18-18, 34-34 [ 225.620984][ T8618] EXT4-fs (loop2): orphan cleanup on readonly fs [ 225.627771][ T8618] __quota_error: 7 callbacks suppressed [ 225.627790][ T8618] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 225.644398][ T8618] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.659510][ T8618] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 225.671027][ T8618] EXT4-fs (loop2): 1 truncate cleaned up [ 225.730863][ T8618] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.748933][ T8621] NILFS (loop3): invalid segment: Checksum error in segment payload [ 225.751897][ T8593] XFS (loop7): User initiated shutdown received. [ 225.780580][ T8593] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 225.797987][ T8593] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 225.806678][ T8588] BTRFS info (device loop4): enabling ssd optimizations [ 225.818190][ T8621] NILFS (loop3): trying rollback from an earlier position [ 225.826460][ T8618] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 225.872150][ T8618] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 225.885482][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1311'. [ 225.919582][ T8621] NILFS (loop3): recovery complete [ 225.930109][ T8618] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 225.950491][ T8651] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.054045][ T5469] XFS (loop7): Unmounting Filesystem [ 226.599027][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 226.635785][ T8662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1317'. [ 226.694352][ T8660] loop6: detected capacity change from 0 to 4096 [ 226.723182][ T8244] Bluetooth: hci4: command 0x0406 tx timeout [ 226.830404][ T8660] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 226.914047][ T8666] loop2: detected capacity change from 0 to 512 [ 227.028071][ T26] audit: type=1800 audit(1785903972.395:14): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1315" name="file2" dev="loop6" ino=31 res=0 errno=0 [ 227.194900][ T8666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.278400][ T8666] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.366557][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 228.397938][ T8727] loop3: detected capacity change from 0 to 24 [ 228.424284][ T8719] loop6: detected capacity change from 0 to 4096 [ 228.431501][ T8727] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 228.452485][ T8727] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 228.665220][ T8719] ntfs3: loop6: MFT: r=1b, expect seq=1 instead of 0! [ 228.862948][ T8733] loop3: detected capacity change from 0 to 128 [ 228.957916][ T8733] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.022710][ T8733] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.154879][ T8743] loop4: detected capacity change from 0 to 512 [ 229.163033][ T8737] loop7: detected capacity change from 0 to 512 [ 229.163755][ T4249] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.205398][ T8743] EXT4-fs (loop4): Ignoring removed nobh option [ 229.225019][ T8737] EXT4-fs (loop7): Test dummy encryption mode enabled [ 229.250393][ T8737] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 229.291765][ T8743] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 229.299615][ T8743] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 229.303775][ T8737] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.1350: bad orphan inode 131083 [ 229.326416][ T8743] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #13: comm syz.4.1352: inode has both inline data and extents flags [ 229.340866][ T8737] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 229.360673][ T8743] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1352: couldn't read orphan inode 13 (err -117) [ 229.453142][ T8743] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 229.523589][ T8743] EXT4-fs (loop4): shut down requested (2) [ 229.691359][ T8737] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 229.755740][ T8759] loop4: detected capacity change from 0 to 128 [ 229.780130][ T8761] comedi comedi0: no devices specified [ 229.857247][ T8759] EXT4-fs (loop4): Ignoring removed orlov option [ 229.878195][ T8763] input: syz0 as /devices/virtual/input/input20 [ 229.915971][ T8759] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 229.932032][ T8759] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.103872][ T8771] loop7: detected capacity change from 0 to 1024 [ 230.194674][ T8771] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 230.341409][ T8771] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.7.1358: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 230.401390][ T8771] EXT4-fs (loop7): Remounting filesystem read-only [ 230.416095][ T8771] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1808: Corrupt filesystem [ 230.453212][ T8771] EXT4-fs (loop7): Remounting filesystem read-only [ 230.558200][ T8782] loop3: detected capacity change from 0 to 2048 [ 230.654090][ T8782] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.708235][ T8782] NILFS (loop3): mounting unchecked fs [ 230.720266][ T4692] udevd[4692]: incorrect nilfs2 checksum on /dev/loop3 [ 230.800411][ T8782] NILFS (loop3): recovery complete [ 230.821329][ T8788] overlayfs: failed to verify origin (/syz7, ino=195, err=-116) [ 230.829602][ T8788] overlayfs: failed to verify upper root origin [ 230.858082][ T8790] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.865404][ T8793] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1365'. [ 232.210719][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 232.424025][ T8858] Bluetooth: hci0: load_link_keys: too big key_count value 16384 [ 233.128350][ T8848] loop3: detected capacity change from 0 to 32768 [ 233.270892][ T8848] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 233.673363][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 233.919996][ T8892] loop7: detected capacity change from 0 to 2048 [ 234.078091][ T8892] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.156694][ T8900] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.159765][ T4698] udevd[4698]: incorrect nilfs2 checksum on /dev/loop7 [ 234.708316][ T8912] loop7: detected capacity change from 0 to 2048 [ 234.754637][ T8915] loop4: detected capacity change from 0 to 1024 [ 234.790285][ T6840] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.792385][ T8912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.030445][ T6840] usb 4-1: Using ep0 maxpacket: 8 [ 235.046944][ T154] hfsplus: b-tree write err: -5, ino 25 [ 235.059883][ T154] hfsplus: b-tree write err: -5, ino 4 [ 235.101135][ T154] hfsplus: b-tree write err: -5, ino 2 [ 235.151269][ T6840] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 235.181136][ T6840] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.205529][ T6840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.233767][ T6840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.285570][ T6840] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.351839][ T6840] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.391995][ T6840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.595443][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 235.700393][ T6840] usb 4-1: usb_control_msg returned -32 [ 235.706248][ T6840] usbtmc 4-1:16.0: can't read capabilities [ 235.885467][ T8885] loop6: detected capacity change from 0 to 40427 [ 235.958568][ T8885] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 236.016213][ T8885] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 236.125346][ T8885] F2FS-fs (loop6): invalid crc value [ 236.248646][ T8885] F2FS-fs (loop6): Found nat_bits in checkpoint [ 236.344888][ T4231] usb 4-1: USB disconnect, device number 11 [ 237.010031][ T8953] loop7: detected capacity change from 0 to 4096 [ 237.108468][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 237.124439][ T8956] loop3: detected capacity change from 0 to 2048 [ 237.269495][ T8956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.416089][ T8966] loop4: detected capacity change from 0 to 1024 [ 237.438445][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.445773][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.454837][ T8944] device bridge_slave_0 entered promiscuous mode [ 237.468595][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.499706][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.591036][ T8944] device bridge_slave_1 entered promiscuous mode [ 237.634000][ T8966] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.701399][ T8966] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.778839][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.798810][ T8966] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.1422: Freeing blocks not in datazone - block = 0, count = 16 [ 237.825386][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.949142][ T8944] team0: Port device team_slave_0 added [ 237.977006][ T8965] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1422: bg 0: block 112: padding at end of block bitmap is not set [ 238.019657][ T8965] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 238.021890][ T8944] team0: Port device team_slave_1 added [ 238.082936][ T8965] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.082936][ T8965] [ 238.098688][ T8965] EXT4-fs (loop4): Total free blocks count 0 [ 238.107132][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.140360][ T8965] EXT4-fs (loop4): Free/Dirty block details [ 238.156579][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.183683][ T8965] EXT4-fs (loop4): free_blocks=0 [ 238.188785][ T8965] EXT4-fs (loop4): dirty_blocks=16 [ 238.225382][ T8965] EXT4-fs (loop4): Block reservation details [ 238.240384][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.270256][ T8965] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 238.300560][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.307555][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.382106][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.541667][ T8944] device hsr_slave_0 entered promiscuous mode [ 238.574064][ T8944] device hsr_slave_1 entered promiscuous mode [ 238.598784][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.628394][ T8944] Cannot create hsr debugfs directory [ 238.665027][ T8990] loop4: detected capacity change from 0 to 64 [ 238.680531][ T6905] Bluetooth: hci2: command 0x0409 tx timeout [ 238.941246][ T8994] netlink: 'syz.3.1432': attribute type 4 has an invalid length. [ 239.165581][ T8244] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 239.237290][ T8244] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.241535][ T8944] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 239.268525][ T9002] loop7: detected capacity change from 0 to 2048 [ 239.329972][ T8944] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 239.361369][ T9002] UDF-fs: error (device loop7): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 239.367918][ T8944] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 239.400581][ T9002] UDF-fs: warning (device loop7): udf_fill_super: No partition found (2) [ 239.444550][ T8944] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 239.663429][ T8979] loop6: detected capacity change from 0 to 32768 [ 239.789407][ T8979] XFS (loop6): Mounting V5 Filesystem [ 239.790813][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.861738][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.897958][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.955147][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.965120][ T8979] XFS (loop6): Ending clean mount [ 240.005052][ T8979] XFS (loop6): Quotacheck needed: Please wait. [ 240.027686][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.050959][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.085215][ T9014] loop7: detected capacity change from 0 to 8192 [ 240.098299][ T9017] loop4: detected capacity change from 0 to 1024 [ 240.102262][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.112113][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.145674][ T8979] XFS (loop6): Quotacheck: Done. [ 240.171473][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.207317][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.283291][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.328148][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.335328][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.388816][ T1235] hfsplus: b-tree write err: -5, ino 25 [ 240.401572][ T1235] hfsplus: b-tree write err: -5, ino 4 [ 240.420664][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.442162][ T1235] hfsplus: b-tree write err: -5, ino 2 [ 240.471228][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.528810][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.593928][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.655977][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.671060][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.708389][ T8944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.744909][ T8944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.770413][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 240.812542][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.831177][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.866946][ T5335] XFS (loop6): Unmounting Filesystem [ 240.888249][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.924525][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.951354][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.989795][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.479030][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.553079][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.577931][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.628338][ T9041] loop7: detected capacity change from 0 to 128 [ 241.662821][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 241.777973][ T9041] attempt to access beyond end of device [ 241.777973][ T9041] loop7: rw=2049, want=140, limit=128 [ 241.981525][ T9041] attempt to access beyond end of device [ 241.981525][ T9041] loop7: rw=2049, want=250, limit=128 [ 242.310055][ T9062] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 242.366530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.383517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.424465][ T8944] device veth0_vlan entered promiscuous mode [ 242.431624][ T9062] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 242.468488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.486034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.502958][ T9068] loop7: detected capacity change from 0 to 64 [ 242.511591][ T9062] overlayfs: conflicting lowerdir path [ 242.533833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.556478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.558471][ T9068] MINIX-fs: mounting file system with errors, running fsck is recommended [ 242.613543][ T8944] device veth1_vlan entered promiscuous mode [ 242.736664][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.780850][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.833819][ T8944] device veth0_macvtap entered promiscuous mode [ 242.844069][ T9072] loop4: detected capacity change from 0 to 4096 [ 242.874008][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 242.898003][ T8944] device veth1_macvtap entered promiscuous mode [ 242.971218][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.040583][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.044213][ T9072] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 243.078218][ T9086] loop6: detected capacity change from 0 to 128 [ 243.092486][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.106118][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.116578][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.127789][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.153799][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.164964][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.178173][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.205472][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.239014][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.314929][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.338223][ T9086] attempt to access beyond end of device [ 243.338223][ T9086] loop6: rw=2049, want=140, limit=128 [ 243.340293][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.388949][ T9089] loop7: detected capacity change from 0 to 1024 [ 243.425205][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.456460][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.467970][ T9086] attempt to access beyond end of device [ 243.467970][ T9086] loop6: rw=2049, want=250, limit=128 [ 243.493701][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.509388][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.526315][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.540470][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.558395][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.608009][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.617242][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.626331][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.635799][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.654116][ T8944] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.688140][ T9093] loop3: detected capacity change from 0 to 128 [ 243.709693][ T8944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.719111][ T8944] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.725286][ T9093] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 243.729617][ T8944] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.746898][ T9089] hfsplus: xattr searching failed [ 243.784170][ T9089] hfsplus: xattr searching failed [ 243.804479][ T9089] hfsplus: xattr searching failed [ 243.832321][ T9093] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 243.887570][ T9093] FAT-fs (loop3): Filesystem has been set read-only [ 243.918345][ T9093] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 244.218537][ T9097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.227830][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.239445][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.280421][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.348970][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.372026][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.440535][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.481601][ T4230] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 244.761909][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1473'. [ 244.816769][ T9110] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.836126][ T4230] usb 8-1: not running at top speed; connect to a high speed hub [ 244.920872][ T6901] Bluetooth: hci2: command 0x0419 tx timeout [ 244.930515][ T4230] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.955402][ T4230] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 245.003469][ T4230] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 245.150574][ T4230] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 245.190468][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.200607][ T4230] usb 8-1: Product: syz [ 245.204913][ T4230] usb 8-1: Manufacturer: syz [ 245.282603][ T4230] sisusb 8-1:1.0: Invalid USB2VGA device [ 245.300292][ T4230] sisusb: probe of 8-1:1.0 failed with error -22 [ 245.304509][ T9103] set_capacity_and_notify: 2 callbacks suppressed [ 245.304526][ T9103] loop3: detected capacity change from 0 to 32768 [ 245.447905][ T9107] loop8: detected capacity change from 0 to 32768 [ 245.526993][ T9103] UFO tlock:0xffffc900025a2048 [ 245.638199][ T9107] XFS (loop8): Mounting V5 Filesystem [ 245.689732][ T6902] usb 8-1: USB disconnect, device number 6 [ 245.801375][ T9107] XFS (loop8): Ending clean mount [ 245.944065][ T8944] XFS (loop8): Unmounting Filesystem [ 245.952809][ T9129] loop6: detected capacity change from 0 to 4096 [ 246.338389][ T9134] loop7: detected capacity change from 0 to 512 [ 246.404041][ T9134] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 246.460594][ T473] ntfs3: loop6: ntfs3_write_inode r=5 failed, -22. [ 246.491409][ T5335] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 246.500670][ T9134] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1478: inode has both inline data and extents flags [ 246.538202][ T5335] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 246.700452][ T9134] EXT4-fs (loop7): Remounting filesystem read-only [ 246.707086][ T9134] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1478: couldn't read orphan inode 15 (err -117) [ 246.804953][ T9134] EXT4-fs (loop7): Remounting filesystem read-only [ 246.860651][ T9134] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,. Quota mode: none. [ 246.984236][ T9134] overlayfs: failed to create directory ./bus/work (errno: 117); mounting read-only [ 246.991507][ T9132] loop3: detected capacity change from 0 to 32768 [ 247.015945][ T9143] loop6: detected capacity change from 0 to 1024 [ 247.071770][ T5469] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /209/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 247.161315][ T9084] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 247.267151][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.285701][ T9132] XFS (loop3): Mounting V5 Filesystem [ 247.295465][ T9143] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000006,nodioread_nolock,,errors=continue. Quota mode: none. [ 247.330503][ T5469] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /209/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 247.341611][ T9084] EXT4-fs (loop7): Remounting filesystem read-only [ 247.358537][ T9143] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.369811][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.378414][ T5469] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 247.404548][ T9143] EXT4-fs (loop6): shut down requested (2) [ 247.432751][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.439729][ T5469] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /209/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 247.454090][ T9132] XFS (loop3): Ending clean mount [ 247.487384][ T9132] XFS (loop3): Quotacheck needed: Please wait. [ 247.520814][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.527451][ T5469] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /209/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 247.598902][ T9132] XFS (loop3): Quotacheck: Done. [ 247.698559][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.715292][ T5469] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 247.771214][ T9137] loop4: detected capacity change from 0 to 32768 [ 247.811396][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.818351][ T5469] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /209/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 247.852836][ T9137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1480 (9137) [ 247.879090][ T9157] loop6: detected capacity change from 0 to 256 [ 247.911227][ T9137] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 247.942651][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 247.949903][ T9137] BTRFS info (device loop4): metadata ratio 127 [ 247.980308][ T5469] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /209/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 248.001993][ T9137] BTRFS info (device loop4): setting nodatasum [ 248.020254][ T9137] BTRFS info (device loop4): disabling tree log [ 248.040996][ T9137] BTRFS info (device loop4): turning off barriers [ 248.047518][ T9137] BTRFS info (device loop4): max_inline at 33 [ 248.084008][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 248.108471][ T9137] BTRFS info (device loop4): using free space tree [ 248.118273][ T5469] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 248.130383][ T9141] loop8: detected capacity change from 0 to 32768 [ 248.150617][ T9137] BTRFS info (device loop4): has skinny extents [ 248.207975][ T5469] EXT4-fs (loop7): Remounting filesystem read-only [ 248.325181][ T9141] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 248.410549][ T9141] JBD2: Ignoring recovery information on journal [ 248.498657][ T4192] XFS (loop3): Unmounting Filesystem [ 248.556973][ T9141] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 248.994432][ T8944] ocfs2: Unmounting device (7,8) on (node local) [ 249.630642][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1494'. [ 249.896839][ T9208] loop8: detected capacity change from 0 to 128 [ 249.998373][ T9207] using random self ethernet address [ 250.010377][ T9207] using random host ethernet address [ 250.045775][ T9208] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 250.151263][ T26] audit: type=1800 audit(1785903995.525:15): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1499" name="ifname" dev="configfs" ino=49739 res=0 errno=0 [ 250.163089][ T9208] hpfs: filesystem error: improperly stopped [ 250.238410][ T9208] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 250.257744][ T9208] hpfs: You really don't want any checks? You are crazy... [ 250.271048][ T9208] hpfs: hpfs_map_sector(): read error [ 250.276596][ T9208] hpfs: code page support is disabled [ 250.341613][ T9208] hpfs: hpfs_map_4sectors(): unaligned read [ 250.362457][ T9208] hpfs: hpfs_map_4sectors(): unaligned read [ 250.405946][ T9208] hpfs: filesystem error: unable to find root dir [ 250.550375][ T9214] set_capacity_and_notify: 1 callbacks suppressed [ 250.550393][ T9214] loop3: detected capacity change from 0 to 1024 [ 250.996903][ T9232] loop6: detected capacity change from 0 to 8 [ 251.069227][ T9] hfsplus: b-tree write err: -5, ino 25 [ 251.078043][ T9] hfsplus: b-tree write err: -5, ino 4 [ 251.130381][ T9] hfsplus: b-tree write err: -5, ino 2 [ 251.239389][ T9] hfsplus: b-tree write err: -5, ino 26 [ 251.415342][ T9249] loop6: detected capacity change from 0 to 4096 [ 251.418331][ T9244] type: 2297912225 invalid [ 251.433870][ T9220] chnl_net:caif_netlink_parms(): no params data found [ 251.476680][ T9249] EXT4-fs (loop6): Test dummy encryption mode enabled [ 251.500487][ T9249] EXT4-fs (loop6): inline encryption not supported [ 251.518696][ T9249] EXT4-fs (loop6): Ignoring removed oldalloc option [ 251.556729][ T9249] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 251.575093][ T9249] System zones: 0-5 [ 251.586902][ T9249] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000006,noinit_itable,nombcache,minixdf,nodioread_nolock,errors=remount-ro,oldalloc,nolazytime,max_dir_size_kb=0x0000000000000001,. Quota mode: writeback. [ 251.656864][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.664310][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.673225][ T9220] device bridge_slave_0 entered promiscuous mode [ 251.689486][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.711668][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.734654][ T9220] device bridge_slave_1 entered promiscuous mode [ 251.847827][ T9220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.873932][ T9220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.938403][ T9220] team0: Port device team_slave_0 added [ 251.956787][ T9261] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 251.967060][ T9220] team0: Port device team_slave_1 added [ 252.040827][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.078473][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.164531][ T9220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.212977][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.234652][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.314109][ T9220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.472057][ T9220] device hsr_slave_0 entered promiscuous mode [ 252.503517][ T9220] device hsr_slave_1 entered promiscuous mode [ 252.519288][ T9220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.526655][ T9286] loop6: detected capacity change from 0 to 256 [ 252.546084][ T9220] Cannot create hsr debugfs directory [ 252.702017][ T9286] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 252.840467][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 253.093870][ T9220] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 253.127617][ T9298] loop8: detected capacity change from 0 to 4096 [ 253.147414][ T9220] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 253.163029][ T9220] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 253.208978][ T9220] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 253.544486][ T9220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.665653][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.692847][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.722082][ T9220] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.790661][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.821707][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.841376][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.848540][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.861514][ T9295] loop4: detected capacity change from 0 to 32768 [ 253.888080][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.943022][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.992599][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.993675][ T26] audit: type=1800 audit(1785903999.365:16): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1527" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 254.023534][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.030695][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.105266][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.143638][ T9295] read_mapping_page failed! [ 254.165967][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.180104][ T9295] ERROR: (device loop4): txCommit: [ 254.180104][ T9295] [ 254.195017][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.217062][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.311715][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.340059][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.384205][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.442214][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.521266][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.541289][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.561725][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.604754][ T9220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.920605][ T6902] Bluetooth: hci3: command 0x041b tx timeout [ 254.957983][ T9309] loop6: detected capacity change from 0 to 40427 [ 254.996211][ T9314] loop3: detected capacity change from 0 to 32768 [ 255.048509][ T9309] F2FS-fs (loop6): invalid crc value [ 255.102821][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.127800][ T9314] JBD2: Ignoring recovery information on journal [ 255.128242][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.150054][ T9309] F2FS-fs (loop6): Found nat_bits in checkpoint [ 255.152351][ T9220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.171979][ T4268] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 255.229615][ T9314] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 255.391623][ T9309] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 255.440375][ T4268] usb 5-1: Using ep0 maxpacket: 16 [ 255.445762][ T9309] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 255.466820][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 255.574850][ T4268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.606478][ T4268] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.670695][ T4268] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 255.710244][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.722731][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.729228][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.751893][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.757676][ T4268] usb 5-1: config 0 descriptor?? [ 255.766568][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.830527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.846767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.898353][ T9220] device veth0_vlan entered promiscuous mode [ 255.912057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.931050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.956805][ T9342] loop3: detected capacity change from 0 to 256 [ 255.976854][ T9220] device veth1_vlan entered promiscuous mode [ 256.011084][ T9342] exfat: Deprecated parameter 'utf8' [ 256.034562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.038493][ T9342] exfat: Deprecated parameter 'namecase' [ 256.064548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.125183][ T9220] device veth0_macvtap entered promiscuous mode [ 256.155423][ T9220] device veth1_macvtap entered promiscuous mode [ 256.162688][ T9342] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 256.225974][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.244382][ T9323] udc-core: couldn't find an available UDC or it's busy [ 256.266706][ T9323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 256.284952][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.322270][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.342709][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.353946][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.380373][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.388894][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.419808][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.427529][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.440316][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.447675][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.461120][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.471760][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.472770][ T9336] loop8: detected capacity change from 0 to 40427 [ 256.479100][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.479128][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.502310][ T9344] sd 0:0:1:0: PR command failed: 2 [ 256.507556][ T9344] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 256.507558][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.507578][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.530499][ T9336] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 256.539831][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x5 [ 256.553751][ T9344] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 256.558583][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.572935][ T4268] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 256.580496][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.591206][ T4268] prodikeys 0003:041E:2801.000C: unexpected long global item [ 256.597326][ T9336] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 256.599001][ T4268] prodikeys 0003:041E:2801.000C: hid parse failed [ 256.616503][ T9220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.629498][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.650744][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.665152][ T4268] prodikeys: probe of 0003:041E:2801.000C failed with error -22 [ 256.718354][ T9336] F2FS-fs (loop8): invalid crc value [ 256.725236][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.744194][ T4268] usb 5-1: USB disconnect, device number 11 [ 256.751687][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.774995][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.775273][ T9336] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 256.799756][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.828114][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.860272][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.891435][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.922720][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.959775][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.000914][ T6904] Bluetooth: hci3: command 0x040f tx timeout [ 257.023591][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.030868][ T9336] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 257.034026][ T9220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.049136][ T9336] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 257.051553][ T9220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.089687][ T9220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.108299][ T9352] device syzkaller1 entered promiscuous mode [ 257.130456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.132069][ T9336] fscrypt (loop8, inode 3): Error -61 getting encryption context [ 257.139203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.228795][ T9220] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.248270][ T9220] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.267707][ T9220] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.320236][ T9220] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.762410][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.801518][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.830096][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1550'. [ 257.857129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.956525][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.981737][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.044047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.163655][ T9362] loop6: detected capacity change from 0 to 131072 [ 258.183446][ T6897] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.312391][ T9362] F2FS-fs (loop6): Found nat_bits in checkpoint [ 258.366682][ T9362] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 258.400088][ T9362] F2FS-fs (loop6): inode (7) has corrupted xattr [ 258.470304][ T6897] usb 4-1: Using ep0 maxpacket: 16 [ 258.611748][ T6897] usb 4-1: config 253 has an invalid interface number: 184 but max is 0 [ 258.649788][ T6897] usb 4-1: config 253 has no interface number 0 [ 258.666520][ T6897] usb 4-1: config 253 interface 184 has no altsetting 0 [ 258.880701][ T6897] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 258.890461][ T6897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.898503][ T6897] usb 4-1: Product: syz [ 258.940413][ T6897] usb 4-1: Manufacturer: syz [ 258.945093][ T6897] usb 4-1: SerialNumber: syz [ 258.975741][ T9364] loop4: detected capacity change from 0 to 40427 [ 259.015589][ T6897] go7007: probe of 4-1:253.184 failed with error -12 [ 259.034274][ T9364] F2FS-fs (loop4): invalid crc value [ 259.118457][ T6904] Bluetooth: hci3: command 0x0419 tx timeout [ 259.138814][ T9364] F2FS-fs (loop4): Found nat_bits in checkpoint [ 259.218802][ T6904] usb 4-1: USB disconnect, device number 12 [ 259.323910][ T9364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.351584][ T9400] loop9: detected capacity change from 0 to 16 [ 259.396577][ T9400] erofs: (device loop9): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 259.610913][ T9364] attempt to access beyond end of device [ 259.610913][ T9364] loop4: rw=2049, want=55224, limit=40427 [ 259.712088][ T9364] attempt to access beyond end of device [ 259.712088][ T9364] loop4: rw=0, want=55224, limit=40427 [ 259.825948][ T9407] loop9: detected capacity change from 0 to 64 [ 259.871580][ T9408] fuse: Invalid user_id [ 260.031925][ T26] audit: type=1800 audit(1785904005.405:17): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1563" name="file1" dev="loop9" ino=21 res=0 errno=0 [ 260.189008][ T9412] loop3: detected capacity change from 0 to 2048 [ 260.198395][ T9416] loop8: detected capacity change from 0 to 128 [ 260.262535][ T9220] hfs: node 4:3 still has 1 user(s)! [ 260.268172][ T9412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.370294][ T9416] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 260.542567][ T9416] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.553711][ T9416] ext2 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.919370][ T9439] loop3: detected capacity change from 0 to 2048 [ 261.076432][ T4230] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 261.086100][ T9439] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 261.126501][ T9439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.128379][ T9442] loop8: detected capacity change from 0 to 512 [ 261.193295][ T9442] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 261.235895][ T9424] loop6: detected capacity change from 0 to 32768 [ 261.251937][ T9442] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.1577: bad orphan inode 131083 [ 261.301543][ T9442] EXT4-fs (loop8): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 261.335316][ T26] audit: type=1800 audit(1785904006.705:18): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1571" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 261.353270][ T9424] read_mapping_page failed! [ 261.368162][ T9442] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #2: block 13: comm syz.8.1577: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 261.379511][ T9424] ERROR: (device loop6): txCommit: [ 261.379511][ T9424] [ 261.420643][ T4230] usb 10-1: not running at top speed; connect to a high speed hub [ 261.493394][ T9445] loop3: detected capacity change from 0 to 256 [ 261.520535][ T4230] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.543322][ T4230] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 261.576629][ T4230] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 261.621107][ T9445] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 261.710452][ T4230] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 261.719645][ T4230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 261.758163][ T9449] device batadv_slave_1 entered promiscuous mode [ 261.770499][ T4230] usb 10-1: Product: syz [ 261.774916][ T4230] usb 10-1: Manufacturer: syz [ 261.790903][ T9448] device batadv_slave_1 left promiscuous mode [ 261.840570][ T9451] loop4: detected capacity change from 0 to 512 [ 261.872618][ T4230] sisusb 10-1:1.0: Invalid USB2VGA device [ 261.878416][ T4230] sisusb: probe of 10-1:1.0 failed with error -22 [ 261.935286][ T9451] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1581: corrupted in-inode xattr [ 261.950305][ T6904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 262.071901][ T9451] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1581: couldn't read orphan inode 15 (err -117) [ 262.090793][ T9451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.202061][ T6897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.275331][ T6904] usb 9-1: Using ep0 maxpacket: 32 [ 262.601170][ T6904] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 262.610416][ T26] audit: type=1800 audit(1785904007.975:19): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1593" name="p_mute_present" dev="configfs" ino=52253 res=0 errno=0 [ 262.633043][ T6904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.641377][ T6904] usb 9-1: Product: syz [ 262.645568][ T6904] usb 9-1: Manufacturer: syz [ 262.660269][ T6904] usb 9-1: SerialNumber: syz [ 262.671435][ T6904] usb 9-1: config 0 descriptor?? [ 262.750548][ T6897] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 262.759739][ T6897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.794696][ T6897] usb 4-1: Product: syz [ 262.798928][ T6897] usb 4-1: Manufacturer: syz [ 262.814971][ T6897] usb 4-1: SerialNumber: syz [ 262.851085][ T9473] loop6: detected capacity change from 0 to 32768 [ 262.913192][ T9473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1590 (9473) [ 262.956838][ T6904] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 002 [ 262.997900][ T9473] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 263.031096][ T9473] BTRFS info (device loop6): enabling auto defrag [ 263.037595][ T9473] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 263.108640][ T9473] BTRFS info (device loop6): use zstd compression, level 3 [ 263.120356][ T6897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 263.124551][ T9473] BTRFS info (device loop6): turning on async discard [ 263.150267][ T9473] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 263.193891][ T6897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 263.229417][ T9473] BTRFS info (device loop6): trying to use backup root at mount time [ 263.243596][ T9473] BTRFS info (device loop6): enabling ssd optimizations [ 263.251444][ T9473] BTRFS info (device loop6): using spread ssd allocation scheme [ 263.259237][ T9473] BTRFS info (device loop6): setting nodatacow, compression disabled [ 263.271676][ T6902] usb 9-1: USB disconnect, device number 2 [ 263.280535][ T9447] i2c i2c-1: failure writing data [ 263.282915][ T9473] BTRFS info (device loop6): using free space tree [ 263.299065][ T9473] BTRFS info (device loop6): has skinny extents [ 263.388628][ T4406] BTRFS warning (device loop6): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 263.404449][ T9473] BTRFS warning (device loop6): failed to read root (objectid=2): -5 [ 263.413906][ T9] BTRFS warning (device loop6): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 263.432788][ T9473] BTRFS warning (device loop6): couldn't read tree root [ 263.449139][ T9473] BTRFS error (device loop6): parent transid verify failed on 5255168 wanted 5 found 7 [ 263.459410][ T9473] BTRFS warning (device loop6): couldn't read tree root [ 263.488273][ T9473] BTRFS info (device loop6): clearing free space tree [ 263.504201][ T9473] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.518398][ T9473] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.556835][ T1325] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 263.573230][ T9473] BTRFS info (device loop6): creating free space tree [ 263.589496][ T9473] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.599770][ T9473] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.730963][ T6897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 263.749666][ T6897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 263.806229][ T6897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 263.837035][ T6897] lan78xx: probe of 4-1:1.0 failed with error -71 [ 263.936805][ T6897] usb 4-1: USB disconnect, device number 13 [ 263.959875][ T9519] vivid-006: disconnect [ 263.968986][ T9518] vivid-006: reconnect [ 264.067006][ T6902] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 264.087557][ T6902] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.110477][ T1325] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 264.141103][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.158664][ T1325] usb 5-1: Product: syz [ 264.170254][ T1325] usb 5-1: Manufacturer: syz [ 264.180465][ T1325] usb 5-1: SerialNumber: syz [ 264.200020][ T1325] usb 5-1: config 0 descriptor?? [ 264.255939][ T1325] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 264.700647][ T1325] sonixb 5-1:0.0: Error writing register 01: -71 [ 264.707187][ T1325] sonixb: probe of 5-1:0.0 failed with error -71 [ 264.744582][ T1325] usb 5-1: USB disconnect, device number 12 [ 264.938927][ T9535] loop6: detected capacity change from 0 to 1024 [ 264.987592][ T9535] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 265.067633][ T6902] usb 10-1: USB disconnect, device number 2 [ 265.082164][ T9535] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 265.293225][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1613'. [ 265.460335][ T1108] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 265.475410][ T9563] loop3: detected capacity change from 0 to 8 [ 265.571251][ T9563] SQUASHFS error: zlib decompression failed, data probably corrupt [ 265.589866][ T9566] loop6: detected capacity change from 0 to 512 [ 265.630302][ T9563] SQUASHFS error: Failed to read block 0x9b: -5 [ 265.639237][ T9563] SQUASHFS error: Unable to read metadata cache entry [99] [ 265.656173][ T9563] SQUASHFS error: Unable to read inode 0x127 [ 265.713867][ T9566] EXT4-fs (loop6): Ignoring removed bh option [ 265.739812][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 265.740404][ T1108] usb 9-1: Using ep0 maxpacket: 8 [ 265.807788][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 265.836291][ T9566] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1621: corrupted in-inode xattr [ 265.901867][ T9566] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1621: couldn't read orphan inode 15 (err -117) [ 265.905668][ T9558] loop9: detected capacity change from 0 to 32768 [ 265.920852][ T1108] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 265.929066][ T1108] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.951247][ T9566] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 265.986177][ T1108] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.996419][ T1108] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.007273][ T1108] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.087216][ T9582] loop3: detected capacity change from 0 to 128 [ 266.110262][ T1108] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.150256][ T9582] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.200558][ T1108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.252889][ T9582] FAT-fs (loop3): error, parent dir link count too low (2) [ 266.269735][ T9582] FAT-fs (loop3): Filesystem has been set read-only [ 266.338970][ T9558] XFS (loop9): Mounting V5 Filesystem [ 266.358922][ T4192] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.510545][ T1108] usb 9-1: usb_control_msg returned -32 [ 266.520658][ T1108] usbtmc 9-1:16.0: can't read capabilities [ 266.643660][ T9599] loop6: detected capacity change from 0 to 64 [ 266.686827][ T9558] XFS (loop9): Ending clean mount [ 266.742679][ T9601] loop4: detected capacity change from 0 to 64 [ 266.773735][ T26] audit: type=1800 audit(1785904012.145:20): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1631" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 266.858735][ T5335] hfs: node 4:3 still has 1 user(s)! [ 266.865386][ T9558] XFS (loop9): Quotacheck needed: Please wait. [ 266.920441][ T9604] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 266.998865][ T1325] usb 9-1: USB disconnect, device number 3 [ 267.010522][ T9558] XFS (loop9): Quotacheck: Done. [ 267.041167][ T9608] attempt to access beyond end of device [ 267.041167][ T9608] loop4: rw=2049, want=162, limit=64 [ 267.076638][ T9608] buffer_io_error: 65 callbacks suppressed [ 267.076658][ T9608] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 267.113738][ T9608] attempt to access beyond end of device [ 267.113738][ T9608] loop4: rw=2049, want=163, limit=64 [ 267.143798][ T9608] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 267.176546][ T9608] attempt to access beyond end of device [ 267.176546][ T9608] loop4: rw=2049, want=164, limit=64 [ 267.222428][ T9608] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 267.266523][ T9608] attempt to access beyond end of device [ 267.266523][ T9608] loop4: rw=2049, want=168, limit=64 [ 267.316764][ T9608] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 267.332657][ T9220] XFS (loop9): Unmounting Filesystem [ 267.354574][ T9616] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1639'. [ 267.371822][ T9608] attempt to access beyond end of device [ 267.371822][ T9608] loop4: rw=2049, want=170, limit=64 [ 267.395118][ T9608] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 267.418734][ T9608] attempt to access beyond end of device [ 267.418734][ T9608] loop4: rw=2049, want=172, limit=64 [ 267.470022][ T9608] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 267.502087][ T9608] attempt to access beyond end of device [ 267.502087][ T9608] loop4: rw=2049, want=173, limit=64 [ 267.534788][ T9608] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 267.685820][ T9625] udc-core: couldn't find an available UDC or it's busy [ 268.212577][ T9639] loop8: detected capacity change from 0 to 256 [ 268.353155][ T9644] device veth0 entered promiscuous mode [ 268.379542][ T9643] device veth0 left promiscuous mode [ 268.786140][ T9652] loop3: detected capacity change from 0 to 32768 [ 268.814535][ T9657] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1654'. [ 268.839135][ T9652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1653 (9652) [ 268.903904][ T9652] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 268.913255][ T9652] BTRFS info (device loop3): setting nodatacow, compression disabled [ 268.921698][ T9652] BTRFS info (device loop3): setting datasum, datacow enabled [ 268.929242][ T9652] BTRFS info (device loop3): force clearing of disk cache [ 268.936473][ T9652] BTRFS info (device loop3): enabling ssd optimizations [ 268.943521][ T9652] BTRFS info (device loop3): using spread ssd allocation scheme [ 268.951310][ T9652] BTRFS info (device loop3): turning on sync discard [ 268.958311][ T9652] BTRFS info (device loop3): turning off barriers [ 268.964955][ T9652] BTRFS info (device loop3): setting nodatacow, compression disabled [ 268.973575][ T9652] BTRFS info (device loop3): not using ssd optimizations [ 268.980694][ T9652] BTRFS info (device loop3): not using spread ssd allocation scheme [ 268.988791][ T9652] BTRFS info (device loop3): using free space tree [ 268.995421][ T9652] BTRFS info (device loop3): has skinny extents [ 269.104336][ T9652] BTRFS info (device loop3): clearing free space tree [ 269.111467][ T9652] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.121850][ T9652] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.179086][ T9652] BTRFS info (device loop3): creating free space tree [ 269.186944][ T9652] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.196640][ T9652] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.300358][ T4229] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 269.364690][ T9652] BTRFS info (device loop3): scrub: started on devid 1 [ 269.381175][ T9652] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 269.540740][ T4229] usb 7-1: Using ep0 maxpacket: 8 [ 269.598822][ T9699] loop4: detected capacity change from 0 to 164 [ 269.670714][ T4229] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 269.712551][ T4229] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 269.770262][ T4229] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.797844][ T9701] loop9: detected capacity change from 0 to 2048 [ 269.825538][ T4229] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.882591][ T4229] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.914358][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.153484][ T9701] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 270.210506][ T4229] usb 7-1: GET_CAPABILITIES returned 0 [ 270.216190][ T4229] usbtmc 7-1:16.0: can't read capabilities [ 270.233522][ T9701] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 270.288847][ T9701] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 270.310390][ T4231] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 270.327749][ T9701] EXT4-fs (loop9): This should not happen!! Data will be lost [ 270.327749][ T9701] [ 270.339699][ T9701] EXT4-fs (loop9): Total free blocks count 0 [ 270.347551][ T9701] EXT4-fs (loop9): Free/Dirty block details [ 270.354237][ T9701] EXT4-fs (loop9): free_blocks=2415919504 [ 270.360934][ T9701] EXT4-fs (loop9): dirty_blocks=16 [ 270.366275][ T9701] EXT4-fs (loop9): Block reservation details [ 270.372943][ T9701] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 270.387660][ T9714] loop3: detected capacity change from 0 to 1024 [ 270.415919][ T9717] loop4: detected capacity change from 0 to 512 [ 270.418125][ T5298] usb 7-1: USB disconnect, device number 7 [ 270.428837][ T9712] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 270.429016][ T9715] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 270.464250][ T9714] EXT4-fs (loop3): Ignoring removed bh option [ 270.480557][ T9714] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.518816][ T9717] EXT4-fs (loop4): Ignoring removed orlov option [ 270.555410][ T9714] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none. [ 270.558200][ T9717] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 270.619163][ T9717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 270.710481][ T4231] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.712470][ T9717] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1672: corrupted in-inode xattr [ 270.722055][ T9722] loop9: detected capacity change from 0 to 64 [ 270.738809][ T4231] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.782999][ T9717] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1672: couldn't read orphan inode 15 (err -117) [ 270.797109][ T9717] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 270.870586][ T4231] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 270.917542][ T4231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 270.941374][ T4231] usb 9-1: Product: syz [ 270.945692][ T4231] usb 9-1: Manufacturer: syz [ 270.974939][ T9717] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.1672: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 271.009904][ T9220] hfs: node 4:3 still has 1 user(s)! [ 271.061674][ T4231] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected [ 271.074981][ T9726] loop6: detected capacity change from 0 to 256 [ 271.098172][ T4231] usb 9-1: iuu_phoenix converter now attached to ttyUSB0 [ 271.232330][ T9731] device macvtap1 entered promiscuous mode [ 271.247833][ T9731] device veth0_to_team entered promiscuous mode [ 271.350830][ T9731] team0: Device macvtap1 failed to register rx_handler [ 271.383740][ T9708] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 3 is not a unsigned long [ 271.420785][ T9731] device veth0_to_team left promiscuous mode [ 271.433076][ T4231] usb 9-1: USB disconnect, device number 4 [ 271.453999][ T4231] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 271.481685][ T4231] iuu_phoenix 9-1:1.0: device disconnected [ 271.756615][ T9741] input: syz0 as /devices/virtual/input/input21 [ 271.932717][ T9735] loop4: detected capacity change from 0 to 32768 [ 272.073804][ T9735] XFS (loop4): Mounting V5 Filesystem [ 272.194871][ T9735] XFS (loop4): Ending clean mount [ 272.217536][ T9735] XFS (loop4): Quotacheck needed: Please wait. [ 272.250406][ T4230] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.414324][ T9735] XFS (loop4): Quotacheck: Done. [ 272.490488][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 272.604809][ T4187] XFS (loop4): Unmounting Filesystem [ 272.611085][ T4230] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.627509][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.652258][ T4230] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 272.679704][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.754875][ T4230] usb 4-1: config 0 descriptor?? [ 272.904664][ T9761] loop9: detected capacity change from 0 to 40427 [ 272.953900][ T9761] F2FS-fs (loop9): invalid crc value [ 272.992440][ T9761] F2FS-fs (loop9): Found nat_bits in checkpoint [ 273.149255][ T9761] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 273.219803][ T9743] raw-gadget.0 gadget: fail, usb_ep_set_halt returned -11 [ 273.330419][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 273.336790][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 273.368585][ T4230] usb 4-1: USB disconnect, device number 14 [ 273.382273][ T9761] attempt to access beyond end of device [ 273.382273][ T9761] loop9: rw=2049, want=55224, limit=40427 [ 273.445578][ T9761] attempt to access beyond end of device [ 273.445578][ T9761] loop9: rw=0, want=55224, limit=40427 [ 273.932547][ T9783] loop3: detected capacity change from 0 to 1024 [ 274.065318][ T4230] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 274.162365][ T9783] hfsplus: xattr searching failed [ 274.251492][ T4406] hfsplus: b-tree write err: -5, ino 3 [ 274.259728][ T4192] hfsplus: node 4:3 still has 1 user(s)! [ 274.450566][ T4230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 274.461163][ T4230] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 274.481585][ T4230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 274.502337][ T4230] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 274.560332][ T4230] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 274.603117][ T4230] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.651324][ T4230] usb 9-1: config 0 descriptor?? [ 274.651370][ T9793] loop3: detected capacity change from 0 to 1024 [ 274.778696][ T9793] EXT4-fs (loop3): Ignoring removed orlov option [ 274.807819][ T9793] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 274.833144][ T9793] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.920750][ T4230] hdpvr 9-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 274.920750][ T4230] †Ã›‘êpY [ 274.940720][ T9786] loop6: detected capacity change from 0 to 32768 [ 274.978222][ T9793] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,dioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 275.060136][ T9786] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 275.140615][ T4230] hdpvr 9-1:0.0: device init failed [ 275.146793][ T4230] hdpvr: probe of 9-1:0.0 failed with error -12 [ 275.181545][ T4230] usb 9-1: USB disconnect, device number 5 [ 275.367827][ T5335] ocfs2: Unmounting device (7,6) on (node local) [ 275.838742][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 276.125062][ T9844] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1714'. [ 276.191501][ T9843] device tunl0 entered promiscuous mode [ 276.222740][ T9843] netlink: 'syz.9.1716': attribute type 4 has an invalid length. [ 276.253169][ T9843] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1716'. [ 276.343152][ T9851] loop4: detected capacity change from 0 to 16 [ 276.364503][ T9849] loop8: detected capacity change from 0 to 2048 [ 276.447283][ T9854] loop9: detected capacity change from 0 to 128 [ 276.448048][ T4698] udevd[4698]: incorrect erofs checksum on /dev/loop4 [ 276.473901][ T9851] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x7cda66ab, 0x7bbbea8c expected [ 276.529102][ T9849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.565960][ T9854] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 276.616663][ T9849] overlayfs: upper fs needs to support d_type. [ 276.711528][ T9849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 276.762627][ T9819] loop3: detected capacity change from 0 to 40427 [ 276.766097][ T9849] overlayfs: failed to set xattr on upper [ 276.809925][ T9854] FAT-fs (loop9): error, corrupted directory (invalid i_start) [ 276.853554][ T9819] F2FS-fs (loop3): invalid crc value [ 276.876043][ T9854] FAT-fs (loop9): Filesystem has been set read-only [ 276.883831][ T9849] overlayfs: ...falling back to index=off,metacopy=off. [ 276.907081][ T9819] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.956408][ T9861] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 276.977249][ T9220] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 277.009792][ T9849] overlayfs: conflicting lowerdir path [ 277.056087][ T9819] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 277.071831][ T9819] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 277.373382][ T4192] attempt to access beyond end of device [ 277.373382][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 277.625729][ T9874] loop6: detected capacity change from 0 to 1024 [ 277.706084][ T9874] EXT4-fs (loop6): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2 [ 278.012405][ T9881] loop8: detected capacity change from 0 to 512 [ 278.187891][ T9881] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 278.224568][ T9866] loop9: detected capacity change from 0 to 32768 [ 278.270397][ T9881] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.311936][ T9866] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 scanned by syz.9.1722 (9866) [ 278.341295][ T9890] loop6: detected capacity change from 0 to 256 [ 278.395888][ T9866] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 278.437245][ T9866] BTRFS info (device loop9): using free space tree [ 278.465227][ T9890] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 278.488037][ T9866] BTRFS info (device loop9): has skinny extents [ 278.730380][ T6896] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 278.900402][ T9866] BTRFS info (device loop9): enabling ssd optimizations [ 279.010275][ T6896] usb 4-1: Using ep0 maxpacket: 16 [ 279.036577][ T9928] loop8: detected capacity change from 0 to 64 [ 279.069454][ T9930] loop6: detected capacity change from 0 to 64 [ 279.194083][ T6896] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 279.215511][ T6896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.258646][ T6896] usb 4-1: config 0 descriptor?? [ 279.271163][ T9932] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 279.332354][ T6896] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 279.727288][ T9934] attempt to access beyond end of device [ 279.727288][ T9934] loop8: rw=2049, want=162, limit=64 [ 279.750757][ T9934] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 279.759513][ T9934] attempt to access beyond end of device [ 279.759513][ T9934] loop8: rw=2049, want=163, limit=64 [ 279.772032][ T9934] Buffer I/O error on dev loop8, logical block 162, lost async page write [ 279.784468][ T9934] attempt to access beyond end of device [ 279.784468][ T9934] loop8: rw=2049, want=164, limit=64 [ 279.799760][ T9934] Buffer I/O error on dev loop8, logical block 163, lost async page write [ 279.829901][ T9941] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.861173][ T9934] attempt to access beyond end of device [ 279.861173][ T9934] loop8: rw=2049, want=168, limit=64 [ 279.899476][ T9939] loop9: detected capacity change from 0 to 4096 [ 279.906110][ T9934] Buffer I/O error on dev loop8, logical block 167, lost async page write [ 279.931616][ T9934] attempt to access beyond end of device [ 279.931616][ T9934] loop8: rw=2049, want=170, limit=64 [ 279.976072][ T9939] NILFS (loop9): invalid segment: Checksum error in segment payload [ 279.984856][ T9934] Buffer I/O error on dev loop8, logical block 169, lost async page write [ 280.000383][ T9939] NILFS (loop9): trying rollback from an earlier position [ 280.022083][ T9934] attempt to access beyond end of device [ 280.022083][ T9934] loop8: rw=2049, want=172, limit=64 [ 280.076613][ T9939] NILFS (loop9): recovery complete [ 280.081505][ T9934] Buffer I/O error on dev loop8, logical block 171, lost async page write [ 280.107195][ T9947] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.121317][ T9946] 9pnet: p9_errstr2errno: server reported unknown error [ 280.136417][ T9934] attempt to access beyond end of device [ 280.136417][ T9934] loop8: rw=2049, want=173, limit=64 [ 280.199036][ T9934] Buffer I/O error on dev loop8, logical block 172, lost async page write [ 280.412370][ T4230] kernel read not supported for file /dsp (pid: 4230 comm: kworker/0:5) [ 280.434056][ T6896] gspca_sonixj: reg_w1 err -71 [ 280.446875][ T9955] device macvtap1 entered promiscuous mode [ 280.455966][ T9955] device veth0_to_team entered promiscuous mode [ 280.475521][ T9955] team0: Device macvtap1 failed to register rx_handler [ 280.480368][ T6896] sonixj: probe of 4-1:0.0 failed with error -71 [ 280.491099][ T9955] device veth0_to_team left promiscuous mode [ 280.507154][ T6896] usb 4-1: USB disconnect, device number 15 [ 280.787012][ T9953] loop4: detected capacity change from 0 to 32768 [ 280.935774][ T9953] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 281.210368][ T9937] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 281.305186][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 281.381687][ T9975] loop9: detected capacity change from 0 to 32768 [ 281.473934][ T9937] usb 7-1: Using ep0 maxpacket: 8 [ 281.521277][ T9975] XFS (loop9): Mounting V5 Filesystem [ 281.567587][ T9975] XFS (loop9): Ending clean mount [ 281.574730][ T9975] XFS (loop9): Quotacheck needed: Please wait. [ 281.600352][ T9937] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.613854][ T9937] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.626386][ T9937] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.644285][ T9937] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.668890][ T9937] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.678559][ T9937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.691084][ T9975] XFS (loop9): Quotacheck: Done. [ 281.741199][ T9220] XFS (loop9): Unmounting Filesystem [ 281.936068][ T9995] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1764'. [ 281.945630][ T9937] usb 7-1: GET_CAPABILITIES returned 0 [ 281.951672][ T9937] usbtmc 7-1:16.0: can't read capabilities [ 282.009944][ T9997] loop8: detected capacity change from 0 to 256 [ 282.187082][ T9937] usb 7-1: USB disconnect, device number 8 [ 282.196779][ T9997] FAT-fs (loop8): Directory bread(block 64) failed [ 282.223964][ T9997] FAT-fs (loop8): Directory bread(block 65) failed [ 282.244266][ T9997] FAT-fs (loop8): Directory bread(block 66) failed [ 282.264603][ T9997] FAT-fs (loop8): Directory bread(block 67) failed [ 282.295149][ T9997] FAT-fs (loop8): Directory bread(block 68) failed [ 282.323159][ T9997] FAT-fs (loop8): Directory bread(block 69) failed [ 282.352708][ T9997] FAT-fs (loop8): Directory bread(block 70) failed [ 282.400363][ T9997] FAT-fs (loop8): Directory bread(block 71) failed [ 282.418009][ T9997] FAT-fs (loop8): Directory bread(block 72) failed [ 282.463966][ T9997] FAT-fs (loop8): Directory bread(block 73) failed [ 282.804383][T10024] loop6: detected capacity change from 0 to 128 [ 282.839564][T10026] loop8: detected capacity change from 0 to 2048 [ 282.864430][T10024] EXT4-fs (loop6): Ignoring removed oldalloc option [ 282.893777][T10026] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 282.932137][T10024] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,grpquota,oldalloc,errors=remount-ro,. Quota mode: writeback. [ 282.950606][T10024] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.031938][T10030] loop3: detected capacity change from 0 to 64 [ 283.039028][ T4230] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 283.068873][T10024] EXT4-fs error (device loop6): dx_make_map:1328: inode #2: block 33: comm syz.6.1776: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 283.150779][T10024] EXT4-fs (loop6): Remounting filesystem read-only [ 283.172842][T10030] attempt to access beyond end of device [ 283.172842][T10030] loop3: rw=2049, want=162, limit=64 [ 283.184116][T10024] EXT4-fs error (device loop6) in do_split:2095: Corrupt filesystem [ 283.194316][T10030] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 283.203347][T10024] EXT4-fs (loop6): Remounting filesystem read-only [ 283.216851][T10030] attempt to access beyond end of device [ 283.216851][T10030] loop3: rw=2049, want=163, limit=64 [ 283.250512][T10030] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 283.273322][T10030] attempt to access beyond end of device [ 283.273322][T10030] loop3: rw=2049, want=164, limit=64 [ 283.358889][T10030] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 283.410613][ T4230] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.440923][ T4230] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.453976][T10038] loop6: detected capacity change from 0 to 1024 [ 283.529994][T10040] loop4: detected capacity change from 0 to 512 [ 283.561288][T10038] EXT4-fs (loop6): Ignoring removed orlov option [ 283.581527][T10038] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 283.588753][T10038] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.600494][ T4230] usb 10-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 283.616551][T10038] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,dioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 283.639030][ T4230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 283.668130][ T4230] usb 10-1: Product: syz [ 283.685599][T10040] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 283.755300][ T4230] usb 10-1: Manufacturer: syz [ 283.824045][T10034] loop8: detected capacity change from 0 to 40427 [ 283.863617][ T4230] iuu_phoenix 10-1:1.0: iuu_phoenix converter detected [ 283.910606][ T4230] usb 10-1: iuu_phoenix converter now attached to ttyUSB0 [ 283.959412][T10034] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 283.989932][T10034] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 284.057120][T10034] F2FS-fs (loop8): invalid crc value [ 284.143605][T10022] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 3 is not a unsigned long [ 284.191139][T10034] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 284.191651][ T6896] usb 10-1: USB disconnect, device number 3 [ 284.219180][T10056] ------------[ cut here ]------------ [ 284.236737][T10056] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 284.246493][ T6896] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 284.260141][T10056] WARNING: CPU: 0 PID: 10056 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 284.274899][T10056] Modules linked in: [ 284.278859][T10056] CPU: 0 PID: 10056 Comm: syz.4.1790 Not tainted syzkaller #0 [ 284.288614][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.297664][ T6896] iuu_phoenix 10-1:1.0: device disconnected [ 284.301360][T10056] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 284.314362][T10056] Code: 63 7a f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 41 39 8b 4c 89 e6 89 ea e8 65 6d 71 00 <0f> 0b e9 07 fd ff ff e8 39 40 35 f8 0f 0b e9 b1 fe ff ff e8 2d 40 [ 284.336322][ T4230] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 284.354680][T10056] RSP: 0018:ffffc90003357240 EFLAGS: 00010246 [ 284.361576][T10056] RAX: a69bd196401ad900 RBX: 0000000000400000 RCX: 0000000000080000 [ 284.369697][T10056] RDX: ffffc9000c5d9000 RSI: 000000000000491c RDI: 000000000000491d [ 284.399844][T10034] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 284.406802][T10056] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 284.408592][T10034] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 284.416220][T10056] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88805edc8000 [ 284.450564][T10056] R13: ffff88805edc9290 R14: ffff88802aa58e00 R15: ffff88805edca268 [ 284.458609][T10056] FS: 00007fb4609da6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 284.498463][T10056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.508635][T10056] CR2: 00007ff70b089000 CR3: 000000006f839000 CR4: 00000000003506e0 [ 284.519689][T10056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.531213][T10056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.539557][T10056] Call Trace: [ 284.550409][T10056] [ 284.558295][T10056] ? netif_carrier_on+0xa1/0x120 [ 284.567003][T10056] ieee80211_ocb_leave+0x27f/0x320 [ 284.574212][T10056] __cfg80211_leave_ocb+0x219/0x400 [ 284.579694][T10056] cfg80211_leave_ocb+0x53/0x70 [ 284.585255][T10056] cfg80211_change_iface+0x4ec/0xe10 [ 284.592693][T10056] nl80211_set_interface+0x5b8/0x810 [ 284.598192][T10056] ? nl80211_dump_interface+0x560/0x560 [ 284.604613][T10056] ? mutex_lock_nested+0x17/0x20 [ 284.609853][T10056] ? nl80211_pre_doit+0x27b/0x540 [ 284.615791][T10056] genl_rcv_msg+0xd0b/0xfa0 [ 284.621301][T10056] ? genl_bind+0x370/0x370 [ 284.626078][T10056] ? verify_lock_unused+0x140/0x140 [ 284.632194][T10056] ? verify_lock_unused+0x140/0x140 [ 284.637852][T10056] ? nl80211_dump_interface+0x560/0x560 [ 284.644029][T10056] netlink_rcv_skb+0x1e9/0x430 [ 284.649082][T10056] ? genl_bind+0x370/0x370 [ 284.654425][T10056] ? netlink_ack+0xb10/0xb10 [ 284.659410][T10056] ? down_read+0x1aa/0x2e0 [ 284.664460][T10056] genl_rcv+0x24/0x40 [ 284.668718][T10056] netlink_unicast+0x78f/0x940 [ 284.674948][T10056] netlink_sendmsg+0x8ba/0xbe0 [ 284.679973][T10056] ? netlink_getsockopt+0x570/0x570 [ 284.685943][T10056] ? aa_sock_msg_perm+0x94/0x150 [ 284.692118][T10056] ? apparmor_socket_sendmsg+0x88/0x230 [ 284.697884][T10056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 284.703391][T10056] ? security_socket_sendmsg+0x7c/0xa0 [ 284.710593][ T4230] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.722827][ T4230] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.744757][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.758321][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.760253][T10056] ? netlink_getsockopt+0x570/0x570 [ 284.782670][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 284.818657][T10056] ____sys_sendmsg+0x5be/0x8f0 [ 284.828077][T10056] ? __sys_sendmsg_sock+0x30/0x30 [ 284.850655][T10056] ? import_iovec+0x6f/0xa0 [ 284.855234][T10056] ___sys_sendmsg+0x236/0x2e0 [ 284.859952][T10056] ? __sys_sendmsg+0x290/0x290 [ 284.883085][T10056] ? sock_do_ioctl+0x29d/0x320 [ 284.887937][T10056] __se_sys_sendmsg+0x1b7/0x2a0 [ 284.910253][T10056] ? __x64_sys_sendmsg+0x80/0x80 [ 284.920479][T10056] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.922295][ T4230] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.926550][T10056] ? lockdep_hardirqs_on+0x94/0x140 [ 284.945609][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.954560][T10056] do_syscall_64+0x4c/0xa0 [ 284.954697][ T4230] usb 4-1: Product: syz [ 284.961758][T10056] ? clear_bhb_loop+0x30/0x80 [ 284.963881][ T4230] usb 4-1: Manufacturer: syz [ 284.970372][T10056] ? clear_bhb_loop+0x30/0x80 [ 284.982670][T10056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.999478][T10056] RIP: 0033:0x7fb462782019 [ 285.008462][T10056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.028002][ T4230] cdc_wdm 4-1:1.0: skipping garbage [ 285.029857][T10056] RSP: 002b:00007fb4609da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.040272][ T4230] cdc_wdm 4-1:1.0: skipping garbage [ 285.043546][T10056] RAX: ffffffffffffffda RBX: 00007fb462a09fa0 RCX: 00007fb462782019 [ 285.059459][T10056] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 285.064410][ T4230] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 285.073196][T10056] RBP: 00007fb46281900c R08: 0000000000000000 R09: 0000000000000000 [ 285.079472][ T4230] cdc_wdm 4-1:1.0: Unknown control protocol [ 285.090073][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.105731][T10056] R13: 00007fb462a0a038 R14: 00007fb462a09fa0 R15: 00007ffc40981818 [ 285.117857][T10056] [ 285.121674][T10056] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 285.128979][T10056] CPU: 1 PID: 10056 Comm: syz.4.1790 Not tainted syzkaller #0 [ 285.136679][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.146786][T10056] Call Trace: [ 285.150163][T10056] [ 285.153200][T10056] dump_stack_lvl+0x188/0x250 [ 285.157975][T10056] ? show_regs_print_info+0x20/0x20 [ 285.163173][T10056] ? load_image+0x410/0x410 [ 285.167694][T10056] panic+0x2f8/0x850 [ 285.171608][T10056] ? bpf_jit_dump+0xd0/0xd0 [ 285.176252][T10056] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 285.182776][T10056] __warn+0x248/0x2b0 [ 285.186856][T10056] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 285.193283][T10056] report_bug+0x1b9/0x2e0 [ 285.197719][T10056] handle_bug+0x3a/0x70 [ 285.201874][T10056] exc_invalid_op+0x16/0x40 [ 285.206371][T10056] asm_exc_invalid_op+0x16/0x20 [ 285.211229][T10056] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 285.218268][T10056] Code: 63 7a f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 41 39 8b 4c 89 e6 89 ea e8 65 6d 71 00 <0f> 0b e9 07 fd ff ff e8 39 40 35 f8 0f 0b e9 b1 fe ff ff e8 2d 40 [ 285.237882][T10056] RSP: 0018:ffffc90003357240 EFLAGS: 00010246 [ 285.243991][T10056] RAX: a69bd196401ad900 RBX: 0000000000400000 RCX: 0000000000080000 [ 285.252085][T10056] RDX: ffffc9000c5d9000 RSI: 000000000000491c RDI: 000000000000491d [ 285.260089][T10056] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 285.268090][T10056] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88805edc8000 [ 285.276096][T10056] R13: ffff88805edc9290 R14: ffff88802aa58e00 R15: ffff88805edca268 [ 285.284117][T10056] ? netif_carrier_on+0xa1/0x120 [ 285.289097][T10056] ieee80211_ocb_leave+0x27f/0x320 [ 285.294292][T10056] __cfg80211_leave_ocb+0x219/0x400 [ 285.299528][T10056] cfg80211_leave_ocb+0x53/0x70 [ 285.304426][T10056] cfg80211_change_iface+0x4ec/0xe10 [ 285.309727][T10056] nl80211_set_interface+0x5b8/0x810 [ 285.315031][T10056] ? nl80211_dump_interface+0x560/0x560 [ 285.320610][T10056] ? mutex_lock_nested+0x17/0x20 [ 285.325586][T10056] ? nl80211_pre_doit+0x27b/0x540 [ 285.330621][T10056] genl_rcv_msg+0xd0b/0xfa0 [ 285.335167][T10056] ? genl_bind+0x370/0x370 [ 285.339612][T10056] ? verify_lock_unused+0x140/0x140 [ 285.344810][T10056] ? verify_lock_unused+0x140/0x140 [ 285.350011][T10056] ? nl80211_dump_interface+0x560/0x560 [ 285.355577][T10056] netlink_rcv_skb+0x1e9/0x430 [ 285.360469][T10056] ? genl_bind+0x370/0x370 [ 285.365026][T10056] ? netlink_ack+0xb10/0xb10 [ 285.369656][T10056] ? down_read+0x1aa/0x2e0 [ 285.374187][T10056] genl_rcv+0x24/0x40 [ 285.378190][T10056] netlink_unicast+0x78f/0x940 [ 285.382975][T10056] netlink_sendmsg+0x8ba/0xbe0 [ 285.387868][T10056] ? netlink_getsockopt+0x570/0x570 [ 285.393082][T10056] ? aa_sock_msg_perm+0x94/0x150 [ 285.398047][T10056] ? apparmor_socket_sendmsg+0x88/0x230 [ 285.403603][T10056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 285.408910][T10056] ? security_socket_sendmsg+0x7c/0xa0 [ 285.414406][T10056] ? netlink_getsockopt+0x570/0x570 [ 285.419758][T10056] ____sys_sendmsg+0x5be/0x8f0 [ 285.424566][T10056] ? __sys_sendmsg_sock+0x30/0x30 [ 285.429600][T10056] ? import_iovec+0x6f/0xa0 [ 285.434145][T10056] ___sys_sendmsg+0x236/0x2e0 [ 285.438873][T10056] ? __sys_sendmsg+0x290/0x290 [ 285.443688][T10056] ? sock_do_ioctl+0x29d/0x320 [ 285.448494][T10056] __se_sys_sendmsg+0x1b7/0x2a0 [ 285.453353][T10056] ? __x64_sys_sendmsg+0x80/0x80 [ 285.458309][T10056] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 285.464299][T10056] ? lockdep_hardirqs_on+0x94/0x140 [ 285.469586][T10056] do_syscall_64+0x4c/0xa0 [ 285.474010][T10056] ? clear_bhb_loop+0x30/0x80 [ 285.478701][T10056] ? clear_bhb_loop+0x30/0x80 [ 285.483382][T10056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.489306][T10056] RIP: 0033:0x7fb462782019 [ 285.493727][T10056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.514174][T10056] RSP: 002b:00007fb4609da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.522635][T10056] RAX: ffffffffffffffda RBX: 00007fb462a09fa0 RCX: 00007fb462782019 [ 285.530642][T10056] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 285.538638][T10056] RBP: 00007fb46281900c R08: 0000000000000000 R09: 0000000000000000 [ 285.546714][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.554866][T10056] R13: 00007fb462a0a038 R14: 00007fb462a09fa0 R15: 00007ffc40981818 [ 285.562898][T10056] [ 285.566193][T10056] Kernel Offset: disabled [ 285.570842][T10056] Rebooting in 86400 seconds..