last executing test programs: 4.845883204s ago: executing program 4 (id=2918): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "a250dc3791ef32ef36861ad00b154139b62c5506e637f35ad3ffd6875f13980f8b17a31a038497ec3315"}}}, 0x0) 2.820852013s ago: executing program 1 (id=2960): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280037800b00010069703676066900001800028014000500200100000000000000000000000000000c002b80080003000808"], 0x54}}, 0x0) 2.701275603s ago: executing program 3 (id=2962): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xc}]}}]}, 0x94}}, 0x0) 2.645209028s ago: executing program 1 (id=2963): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 2.588118173s ago: executing program 3 (id=2965): syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) 2.485274712s ago: executing program 3 (id=2967): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000a00)) write(r1, &(0x7f0000000140)="94", 0xfffffdef) 2.415103187s ago: executing program 1 (id=2968): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2.350808773s ago: executing program 1 (id=2970): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000140)={0x0, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 2.283758429s ago: executing program 1 (id=2971): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f00000002c0)=""/361, 0x169) timer_create(0xb, &(0x7f0000000080)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.083427615s ago: executing program 1 (id=2972): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "26e3d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.759171953s ago: executing program 4 (id=2974): unshare(0x2a020400) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000005a40), 0x402) write$nci(r0, &(0x7f00000003c0)=ANY=[], 0x5) ppoll(&(0x7f0000002380)=[{r0}], 0x1, &(0x7f0000002400)={0x0, 0x3938700}, 0x0, 0x0) 1.599527916s ago: executing program 4 (id=2976): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.526937282s ago: executing program 3 (id=2977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x5b4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x510, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x488, 0x6, [@m_tunnel_key={0x13c, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0x100, 0x0, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0xbc, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x41, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3"}, {0xc}, {0xc}}}, @m_connmark={0x14c, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xc5, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba79cd0c5b4b2b956f87fa20fc312fee715e452bf7e80d855069f92b"}, {0xc}, {0xc}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x5b4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.475960346s ago: executing program 3 (id=2978): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x9c) 1.449159299s ago: executing program 4 (id=2979): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r0, 0x504) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) 1.287134782s ago: executing program 2 (id=2980): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4, 0x4}]}, 0x18}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) 1.254896625s ago: executing program 4 (id=2981): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)={[{@discard_unit_segment}, {}, {@acl}, {@compress_cache}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0xfd, 0x5519, &(0x7f00000079c0)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWVYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeR7L9BAkZDixKT5/aTzc/fe6+ee14oiPXeWAzixlrJff67ExTgbEfMRcSGi2K+UW+FWCi9ExKWImHtsq5Tjfw6cjohzEXFxkjzlrJSnPr8yvnzjp7d++ea7M6fOf/H197NbNTBrL0ZEfyPtb/dTzDspPizHG+NuEfvXx2VMJ3qL6Xw/T+Pb7bUiw3Zjb16jiNc6aX6+sTWcxPVeozmJne56Mb4xSBccjjt7eYo3PGxsFset9loRu8O8iJ3ddN2d3fS/bXc4SnlaZb6PivQxGu3FNN7eaaf1bDwqYnMwKsdT3rzV3pnEcRnLy0Uz77WKOtYO8EH/z73dHWztZOP25rCbD7IbtfpLtfrNan0zb7VH7evVRr9183q23OlNplVH7Ub/VifPO712rZn3V7LlTrNZrdez5dvttW5jkNXrtWu1q9UbK+Xelez1e+9lvVa2PImvdgdbo25vmK3nm1l6x0q2Wrv28kp2uZ69c/d+dv/BnTt377/7we33771y983Xykn/KCtbXr26ulqtX62u1ldO0Po/KYue4vrhQCqzLgDg+NH/A7NwkP6//6g8fmL/v/kg4vD7/9D/T8Wx6n9Pev9/COuHA9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlGsbOUjs+X48+UQ8+Vx5WImIuI359gPk7vyzlf5ln4l/kLf6vh20oUGSbXOFNu5yLiVrn99uxhfwoAAADw9Prq40ufpW49vSzNuiCOUrppM3fhwynlW4yIhaUfp5RtbvLy/JSSFX/fp2JnStmKG1iLU0qWbrmdmla2/2R+X1h8LFRSmDvScgAAgCOxvxM42i4EAACAo/TprAtgNiqx9yhz71lw8c37vx4Int13BAAAABxDlVkXAAAAABy6ov/3+38AAADwdEu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BJyzDGigDRBATlQQxqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mz+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38yI3FQcA/CWZTG1VHFeZw4ooeNCLnU5ra2/iQVk8+CcIy3Za10790e7BliLuxZvsuRfRo4igrLf+Dz230Eu99TCHCuJxJJlkJm0XnRVM0t3PB17eNyHkfV8Cy37zsgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcm7izjJNr1ZHBfHbj+4vpH1dx7pMzd37q5mLYujOpN+Mrxc3Yn6zSUCAADA4ZGU9X0I4V66u5b1cS+v/9PynKzm//7ZWVzW84/W/WVf1v5Z++3X+y/OB+rNxskuen5zPDrxeCqd/2+W7fbcv57Rye98/u4lyR9I/MH2C5M0v5/Rt7duvdfNwyN1ZAsA/BfHy74Iyt+Hsn7YZGIAHBqdSuFd1v9Jr9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOow2Q5Pl3EUQljtLOLMnQfXN/bqb+7cXS3bmRs3dsLXi2tml0hDCOc3x6MTtc6m3a5cvXZxfTweXa4/eCWE0NTo7xTTv/jREieH0Mj92X/wVzvSaFsQFw+7Lfk8GUGDP5QAADiQ0qJldf29dHctOxathDD94eH6//VKHJas/+9/fOZ2daxq/T+sbYbtN9i69PngytVrb25eWr8wujD69K2Tw7eHp86ePn12kL8rGXhjAgAAwL5Np9PpfKdbtGr9H688vv5/rBKHJev/L74bflUdOFH/72mx6Nd0JgAAAIfb86/++Ue0x/Go2w1frm9tXR7OtvP9k7NtA6nu25GiVev/ZKXprAAAAIA6TLajh9b/z1XisOT6/zM/vvRz9ZpJCOFosf5/fOOz8bn6ptNqdfw5cdNzBAAAoFlHi1Zd/0/z7//j+ScPcQjhjddmcfFvAP+x/k+L+j95/5ufqmNVv/8/Vd8UWynuz+5H3vdD6PSbzggAAICD7KmiZcX+7+nu2ie/HPuw6/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9HQAA//8KWUCL") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setreuid(0xee01, 0xee01) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 1.230475217s ago: executing program 2 (id=2982): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r1) 1.113606367s ago: executing program 2 (id=2985): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 982.768348ms ago: executing program 2 (id=2988): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x3c}], 0x1}, 0x0) 917.115053ms ago: executing program 2 (id=2989): r0 = fanotify_init(0x0, 0x0) r1 = dup(r0) fanotify_mark(r0, 0x1, 0x1020, r1, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000680)=""/21, 0x15}], 0x1) 849.732869ms ago: executing program 0 (id=2990): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x4000}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000, 0x4}}]}]}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) 703.871941ms ago: executing program 0 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8}]}, 0x34}}, 0x0) 620.939408ms ago: executing program 0 (id=2992): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 580.860622ms ago: executing program 3 (id=2993): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c831, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 557.424334ms ago: executing program 4 (id=2994): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442a, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 482.46729ms ago: executing program 0 (id=2995): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000147000/0x3000)=nil, 0x6) 123.1897ms ago: executing program 0 (id=2996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create(0x6) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)) 56.157495ms ago: executing program 0 (id=2997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x1c) 0s ago: executing program 2 (id=2998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x5}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2086 (9416) [ 217.061696][ T9416] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.083663][ T9416] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 217.112151][ T9416] BTRFS info (device loop0): using free space tree [ 217.235765][ T9416] BTRFS info (device loop0): enabling ssd optimizations [ 217.262665][ T9416] BTRFS info (device loop0): Snapshot src from another FS [ 217.283034][ T3642] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.724557][ T9474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2099'. [ 217.869334][ T9481] loop3: detected capacity change from 0 to 8 [ 217.883927][ T9483] loop2: detected capacity change from 0 to 64 [ 217.902990][ T9481] SQUASHFS error: lzo decompression failed, data probably corrupt [ 217.908251][ T9464] loop1: detected capacity change from 0 to 40427 [ 217.912536][ T9481] SQUASHFS error: Failed to read block 0x4ec: -5 [ 217.924747][ T9481] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 217.932513][ T9464] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 217.944776][ T9481] SQUASHFS error: Unable to read inode 0x20087 [ 217.951253][ T9464] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 217.969687][ T9464] F2FS-fs (loop1): invalid crc value [ 218.022057][ T9464] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.059635][ T9464] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 218.068832][ T9464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.138167][ T9500] loop2: detected capacity change from 0 to 256 [ 218.146324][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.146392][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.177107][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.188071][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.206187][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.232057][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.234652][ T9500] 9pnet_virtio: no channels available for device [ 218.256198][ T3635] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 218.266900][ T9506] loop3: detected capacity change from 0 to 256 [ 218.333954][ T9506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 218.359833][ T9504] loop4: detected capacity change from 0 to 4096 [ 218.374497][ T9506] FAT-fs (loop3): Filesystem has been set read-only [ 218.381311][ T9504] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 218.394799][ T9506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 218.432171][ T9506] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 218.452252][ T27] audit: type=1800 audit(1729288601.138:110): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2117" name="file1" dev="loop3" ino=1048634 res=0 errno=0 [ 218.636012][ T9517] loop4: detected capacity change from 0 to 512 [ 218.662779][ T9517] EXT4-fs: Ignoring removed i_version option [ 218.668812][ T9517] EXT4-fs: Ignoring removed nobh option [ 218.712225][ T9517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.754647][ T9517] EXT4-fs (loop4): 1 truncate cleaned up [ 218.760338][ T9517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 218.873715][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 218.996682][ T9534] vivid-008: disconnect [ 219.033239][ T9533] vivid-008: reconnect [ 219.252117][ T3644] Bluetooth: hci4: command tx timeout [ 219.689636][ T9559] loop3: detected capacity change from 0 to 4096 [ 219.715572][ T9559] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 219.780298][ T9559] ntfs3: loop3: Failed to load $Extend. [ 219.982261][ T3914] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.173168][ T9592] loop2: detected capacity change from 0 to 1024 [ 220.232026][ T3914] usb 2-1: Using ep0 maxpacket: 16 [ 220.276846][ T7522] hfsplus: bad catalog entry type [ 220.372953][ T3914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.388828][ T3914] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.533877][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 220.602508][ T3914] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.617301][ T3914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.634366][ T3914] usb 2-1: Product: syz [ 220.643415][ T3914] usb 2-1: Manufacturer: syz [ 220.658501][ T3914] usb 2-1: SerialNumber: syz [ 220.671114][ T3914] r8152-cfgselector 2-1: config 0 descriptor?? [ 220.934254][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.953424][ T3914] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 220.992710][ T27] audit: type=1326 audit(1729288603.678:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88837dff9 code=0x7ffc0000 [ 221.054678][ T27] audit: type=1326 audit(1729288603.698:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff88837dff9 code=0x7ffc0000 [ 221.107086][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.125059][ T27] audit: type=1326 audit(1729288603.698:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88837dff9 code=0x7ffc0000 [ 221.149316][ T3692] usb 2-1: config 0 descriptor?? [ 221.155279][ T124] usb 2-1: USB disconnect, device number 13 [ 221.278680][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.402206][ T3914] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 221.414520][ T9610] loop4: detected capacity change from 0 to 32768 [ 221.425936][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.448217][ T9610] (syz.4.2162,9610,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.477247][ T9610] (syz.4.2162,9610,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.536329][ T9610] JBD2: Ignoring recovery information on journal [ 221.560778][ T9610] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 221.638131][ T9616] loop0: detected capacity change from 0 to 32768 [ 221.645988][ T9616] XFS: ikeep mount option is deprecated. [ 221.652214][ T9616] XFS: noikeep mount option is deprecated. [ 221.668440][ T3639] ocfs2: Unmounting device (7,4) on (node local) [ 221.751534][ T9616] XFS (loop0): Mounting V5 Filesystem [ 221.842376][ T3914] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.856763][ T9631] netlink: 'syz.1.2169': attribute type 32 has an invalid length. [ 221.865168][ T9631] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2169'. [ 221.865276][ T3914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.875152][ T9631] unsupported nla_type 8192 [ 221.913228][ T9616] XFS (loop0): Ending clean mount [ 221.921941][ T3914] usb 4-1: config 0 descriptor?? [ 221.937745][ T9616] XFS (loop0): Quotacheck needed: Please wait. [ 221.993127][ T3914] cp210x 4-1:0.0: cp210x converter detected [ 222.013354][ T9616] XFS (loop0): Quotacheck: Done. [ 222.111415][ T3642] XFS (loop0): Unmounting Filesystem [ 222.289145][ T3644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.307223][ T3644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.320557][ T3644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.330100][ T3644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.337722][ T3644] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.345227][ T3644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.422130][ T3914] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 222.485639][ T3914] usb 4-1: cp210x converter now attached to ttyUSB0 [ 222.592305][ T3715] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.623279][ T9642] chnl_net:caif_netlink_parms(): no params data found [ 222.688843][ T3914] usb 4-1: USB disconnect, device number 11 [ 222.700747][ T3914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.721212][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.724752][ T3914] cp210x 4-1:0.0: device disconnected [ 222.728913][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.743453][ T9642] device bridge_slave_0 entered promiscuous mode [ 222.816774][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.821086][ T9647] loop0: detected capacity change from 0 to 32768 [ 222.824251][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.839921][ T9642] device bridge_slave_1 entered promiscuous mode [ 222.840404][ T9647] XFS (loop0): Mounting V5 Filesystem [ 222.852039][ T3715] usb 5-1: Using ep0 maxpacket: 16 [ 222.927631][ T9647] XFS (loop0): Ending clean mount [ 222.982751][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.997406][ T3715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.014249][ T3715] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 223.040671][ T3715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.061827][ T3715] usb 5-1: config 0 descriptor?? [ 223.080812][ T3642] XFS (loop0): Unmounting Filesystem [ 223.094132][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.108297][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.219577][ T9642] team0: Port device team_slave_0 added [ 223.244748][ T9] device hsr_slave_0 left promiscuous mode [ 223.259413][ T9] device hsr_slave_1 left promiscuous mode [ 223.268257][ T9] device bridge_slave_1 left promiscuous mode [ 223.282203][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.290747][ T9] device bridge_slave_0 left promiscuous mode [ 223.314754][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.328031][ T9662] loop1: detected capacity change from 0 to 32768 [ 223.353096][ T34] bond0: (slave bond_slave_0): link status down for interface, disabling it in 4 ms [ 223.363252][ T34] bond0: (slave bond_slave_1): link status down for interface, disabling it in 4 ms [ 223.391007][ T9] device veth1_macvtap left promiscuous mode [ 223.401642][ T9] device veth0_macvtap left promiscuous mode [ 223.407841][ T46] bond0: (slave bond_slave_0): link status down for interface, disabling it in 4 ms [ 223.427555][ T46] bond0: (slave bond_slave_1): link status down for interface, disabling it in 4 ms [ 223.427810][ T9] device veth1_vlan left promiscuous mode [ 223.449358][ T9] device veth0_vlan left promiscuous mode [ 223.706188][ T9678] loop1: detected capacity change from 0 to 1024 [ 223.762978][ T3715] razer 0003:1532:011B.0010: failed to enable macro keys: -71 [ 223.776485][ T9678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 223.821387][ T3715] razer 0003:1532:011B.0010: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.4-1/input0 [ 223.844144][ T3715] usb 5-1: USB disconnect, device number 15 [ 223.881824][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 224.240904][ T9] team0 (unregistering): Port device team_slave_1 removed [ 224.305210][ T9] team0 (unregistering): Port device team_slave_0 removed [ 224.351410][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.402799][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.444511][ T3652] Bluetooth: hci4: command tx timeout [ 224.889522][ T9] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 224.898198][ T9] bond0 (unregistering): Released all slaves [ 224.990929][ T9642] team0: Port device team_slave_1 added [ 225.080342][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.109411][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.156788][ T9642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.193225][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.200405][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.261878][ T9703] loop4: detected capacity change from 0 to 128 [ 225.268332][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.359245][ T9642] device hsr_slave_0 entered promiscuous mode [ 225.366999][ T9642] device hsr_slave_1 entered promiscuous mode [ 225.373892][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.384559][ T9642] Cannot create hsr debugfs directory [ 225.567768][ T9717] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2199'. [ 225.703825][ T9724] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.713560][ T9724] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.722335][ T9724] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.731087][ T9724] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.974670][ T27] audit: type=1400 audit(1729288608.648:114): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 226.135225][ T9748] Cannot find set identified by id 0 to match [ 226.253447][ T9642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.263683][ T9642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.280143][ T9642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.324498][ T9642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.514491][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.529819][ T3652] Bluetooth: hci4: command tx timeout [ 226.560710][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.570266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.616086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.663679][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.692806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.715511][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.722658][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.742766][ T9768] "syz.1.2221" (9768) uses obsolete ecb(arc4) skcipher [ 226.749563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.768771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.788763][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.795907][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.820629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.863637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.883485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.894357][ T9772] loop1: detected capacity change from 0 to 512 [ 226.908339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.931798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.947341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.962965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.963601][ T9772] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2224: casefold flag without casefold feature [ 226.972289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.993516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.002341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.014273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.043474][ T9772] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2224: couldn't read orphan inode 15 (err -117) [ 227.049998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.066918][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.075245][ T9772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.112065][ T4096] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.137795][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 227.155823][ T9764] loop4: detected capacity change from 0 to 32768 [ 227.209239][ T9764] XFS (loop4): Mounting V5 Filesystem [ 227.305279][ T9764] XFS (loop4): Ending clean mount [ 227.338420][ T9764] XFS (loop4): Quotacheck needed: Please wait. [ 227.374918][ T9797] loop0: detected capacity change from 0 to 256 [ 227.405568][ T9764] XFS (loop4): Quotacheck: Done. [ 227.452442][ T9764] XFS (loop4): User initiated shutdown received. [ 227.458973][ T9764] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 227.473171][ T4096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.493267][ T4096] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.506383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.514317][ T9764] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 227.523118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.534280][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.543552][ T4096] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.554326][ T4096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.574605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.583266][ T3639] XFS (loop4): Unmounting Filesystem [ 227.584224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.589982][ T4096] usb 4-1: config 0 descriptor?? [ 227.632550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.642030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.668160][ T9642] device veth0_vlan entered promiscuous mode [ 227.684432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.695614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.758523][ T9642] device veth1_vlan entered promiscuous mode [ 227.785938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.806989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.823918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.833136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.859170][ T9642] device veth0_macvtap entered promiscuous mode [ 227.874603][ T9642] device veth1_macvtap entered promiscuous mode [ 227.914684][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.926366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.926462][ T9795] loop1: detected capacity change from 0 to 32768 [ 227.936131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.950639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.959544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.967945][ T9795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2229 (9795) [ 227.974938][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.999532][ T9795] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.010410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.020883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.029697][ T9795] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 228.041444][ T9642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.052225][ T9795] BTRFS info (device loop1): using free space tree [ 228.065293][ T9642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.077464][ T9642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.104595][ T9642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.120238][ T9814] ALSA: mixer_oss: invalid OSS volume 'Ñ' [ 228.145224][ T4096] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 228.171109][ T4096] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 228.183721][ T4096] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 228.191170][ T4096] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 228.198822][ T9795] BTRFS info (device loop1): enabling ssd optimizations [ 228.208746][ T4096] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 228.217155][ T4096] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 228.274776][ T4096] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 228.313932][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.349086][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.349745][ T124] usb 4-1: USB disconnect, device number 12 [ 228.360357][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.373268][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.393257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.408217][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.526259][ T3635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.602376][ T3652] Bluetooth: hci4: command tx timeout [ 228.762529][ T9833] loop0: detected capacity change from 0 to 32768 [ 228.836274][ T9833] XFS (loop0): Mounting V5 Filesystem [ 228.856054][ T3914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 228.919281][ T9833] XFS (loop0): Ending clean mount [ 228.939072][ T9833] XFS (loop0): Quotacheck needed: Please wait. [ 229.012672][ T9833] XFS (loop0): Quotacheck: Done. [ 229.033555][ T27] audit: type=1800 audit(1729288611.718:115): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2238" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 229.071140][ T27] audit: type=1800 audit(1729288611.738:116): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2238" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 229.091589][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.113651][ T3642] XFS (loop0): Unmounting Filesystem [ 229.304702][ T3914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.326682][ T3914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.351015][ T3914] usb 3-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 229.370118][ T3914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.389289][ T3914] usb 3-1: config 0 descriptor?? [ 229.706933][ T9877] loop3: detected capacity change from 0 to 256 [ 229.718876][ T9877] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 229.888744][ T9888] loop1: detected capacity change from 0 to 128 [ 229.889705][ T3914] wacom 0003:056A:037E.0012: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 229.940747][ T9888] FAT-fs (loop1): error, corrupted directory (invalid i_start) [ 229.950637][ T9888] FAT-fs (loop1): Filesystem has been set read-only [ 230.089731][ T3914] usb 3-1: USB disconnect, device number 7 [ 230.222965][ T9911] loop3: detected capacity change from 0 to 16 [ 230.229963][ T9911] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 230.406892][ T9918] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 230.416099][ T9918] netlink: 'syz.4.2273': attribute type 2 has an invalid length. [ 230.436321][ T9918] netlink: 16074 bytes leftover after parsing attributes in process `syz.4.2273'. [ 230.682161][ T3652] Bluetooth: hci4: command tx timeout [ 230.863795][ T9943] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 230.972256][ T4088] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 231.017287][ T9951] input: syz0 as /devices/virtual/input/input27 [ 231.222119][ T4088] usb 1-1: Using ep0 maxpacket: 32 [ 231.245461][ T9938] loop4: detected capacity change from 0 to 32768 [ 231.252968][ T9938] XFS: ikeep mount option is deprecated. [ 231.262073][ T9938] XFS: noikeep mount option is deprecated. [ 231.297936][ T9938] XFS (loop4): Mounting V5 Filesystem [ 231.353388][ T9968] loop3: detected capacity change from 0 to 8 [ 231.360357][ T9968] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 231.368265][ T9938] XFS (loop4): Ending clean mount [ 231.376769][ T9938] XFS (loop4): Quotacheck needed: Please wait. [ 231.390293][ T9968] cramfs: Error -3 while decompressing! [ 231.397417][ T9968] cramfs: ffffffff974c4518(42)->ffff888074018000(4096) [ 231.437921][ T9938] XFS (loop4): Quotacheck: Done. [ 231.498888][ T3639] XFS (loop4): Unmounting Filesystem [ 231.505257][ T4088] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 231.519146][ T4088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.539849][ T4088] usb 1-1: Product: syz [ 231.550000][ T4088] usb 1-1: Manufacturer: syz [ 231.556367][ T9974] loop2: detected capacity change from 0 to 256 [ 231.560332][ T4088] usb 1-1: SerialNumber: syz [ 231.574747][ T4088] usb 1-1: config 0 descriptor?? [ 231.581286][ T9974] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 231.592903][ T9976] kAFS: unparsable volume name [ 231.700661][ T9982] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2297'. [ 231.710472][ T9982] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2297'. [ 231.721545][ T9982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2297'. [ 231.885336][ T9987] loop1: detected capacity change from 0 to 4096 [ 232.141409][ T9984] loop2: detected capacity change from 0 to 40427 [ 232.151393][ T9984] F2FS-fs (loop2): invalid crc value [ 232.172832][ T9984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 232.247541][ T9984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 232.312321][ T4088] (unnamed net_device) (uninitialized): Assigned a random MAC address: d6:84:45:70:29:e6 [ 232.341190][ T4088] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 232.349816][ T4088] usb 1-1: USB disconnect, device number 12 [ 232.503597][T10006] loop2: detected capacity change from 0 to 8 [ 232.712444][ T3914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.882109][ T2989] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 232.972101][ T3914] usb 4-1: Using ep0 maxpacket: 32 [ 233.092721][ T3914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.103130][ T3914] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.242318][ T2989] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 233.251386][ T2989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.285476][ T2989] usb 3-1: config 0 descriptor?? [ 233.293525][ T3914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.307406][ T3914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.315669][T10035] loop0: detected capacity change from 0 to 32768 [ 233.323702][ T2989] cp210x 3-1:0.0: cp210x converter detected [ 233.324620][ T3914] usb 4-1: Product: syz [ 233.335477][ T3914] usb 4-1: Manufacturer: syz [ 233.340370][ T3914] usb 4-1: SerialNumber: syz [ 233.359892][T10035] XFS (loop0): Mounting V5 Filesystem [ 233.413815][T10035] XFS (loop0): Ending clean mount [ 233.420774][T10035] XFS (loop0): Quotacheck needed: Please wait. [ 233.421556][T10050] omfs: Invalid superblock (0) [ 233.461088][T10035] XFS (loop0): Quotacheck: Done. [ 233.488010][ T3642] XFS (loop0): Unmounting Filesystem [ 233.615755][ T3914] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 233.762257][ T2989] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 233.819050][ T3914] usb 4-1: USB disconnect, device number 13 [ 233.825450][ T2989] usb 3-1: cp210x converter now attached to ttyUSB0 [ 233.835295][ T3914] usblp0: removed [ 233.997050][T10052] loop1: detected capacity change from 0 to 40427 [ 234.008702][T10052] F2FS-fs (loop1): invalid crc value [ 234.027926][ T2989] usb 3-1: USB disconnect, device number 8 [ 234.042629][T10052] F2FS-fs (loop1): Found nat_bits in checkpoint [ 234.049823][ T2989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.074849][ T2989] cp210x 3-1:0.0: device disconnected [ 234.128145][T10052] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 234.135736][T10052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 234.184353][ T3635] syz-executor: attempt to access beyond end of device [ 234.184353][ T3635] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.263657][T10067] netlink: 'syz.4.2328': attribute type 21 has an invalid length. [ 234.272295][T10067] netlink: 'syz.4.2328': attribute type 6 has an invalid length. [ 234.280232][T10067] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2328'. [ 234.557982][T10079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2334'. [ 234.592273][T10079] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 234.808358][T10086] loop1: detected capacity change from 0 to 8192 [ 234.850606][T10102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.910777][ T27] audit: type=1800 audit(1729288617.588:117): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2337" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 235.047981][ T27] audit: type=1800 audit(1729288617.728:118): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2337" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 235.134451][T10115] loop4: detected capacity change from 0 to 512 [ 235.174442][T10115] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #17: comm syz.4.2348: iget: bogus i_mode (0) [ 235.187392][T10115] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2348: couldn't read orphan inode 17 (err -117) [ 235.199587][T10119] device wireguard0 entered promiscuous mode [ 235.200833][T10115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.216403][ T4088] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.237811][T10115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2348: bg 0: block 7: invalid block bitmap [ 235.370216][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 235.602224][ T4088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 235.619996][ T4088] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 235.642400][T10134] loop3: detected capacity change from 0 to 1024 [ 235.650812][ T4088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 235.660737][ T4088] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 235.661152][T10113] loop2: detected capacity change from 0 to 40427 [ 235.725703][T10113] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 235.743439][T10113] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 235.752334][ T4088] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 235.761403][ T4088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.781137][ T4088] usb 1-1: SerialNumber: syz [ 235.786404][T10113] F2FS-fs (loop2): invalid crc value [ 235.798824][T10139] loop3: detected capacity change from 0 to 512 [ 235.807639][ T4088] usb 1-1: config 0 descriptor?? [ 235.825963][T10113] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 235.842343][T10106] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.868051][T10113] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 235.882308][ T4088] port100 1-1:0.0: NFC: Could not get supported command types [ 235.975039][T10113] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 235.982705][T10113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.070539][ T3653] usb 1-1: USB disconnect, device number 13 [ 236.169020][T10152] loop3: detected capacity change from 0 to 512 [ 236.182417][T10137] loop4: detected capacity change from 0 to 32768 [ 236.190133][T10152] EXT4-fs (loop3): filesystem is read-only [ 236.198047][T10152] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 236.217977][T10137] XFS (loop4): Mounting V5 Filesystem [ 236.224790][T10152] EXT4-fs (loop3): filesystem is read-only [ 236.230628][T10152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 236.238810][T10152] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2362: bg 0: block 64: padding at end of block bitmap is not set [ 236.262645][T10152] EXT4-fs (loop3): Remounting filesystem read-only [ 236.269757][T10152] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 236.314115][T10152] EXT4-fs (loop3): Remounting filesystem read-only [ 236.321923][T10137] XFS (loop4): Ending clean mount [ 236.329275][T10137] XFS (loop4): Quotacheck needed: Please wait. [ 236.338942][T10152] EXT4-fs (loop3): 1 orphan inode deleted [ 236.366360][T10152] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.395271][T10137] XFS (loop4): Quotacheck: Done. [ 236.434886][T10152] sp0: Synchronizing with TNC [ 236.554001][ T3639] XFS (loop4): Unmounting Filesystem [ 236.559861][ T3646] EXT4-fs (loop3): unmounting filesystem. [ 236.650629][T10167] netlink: 'syz.3.2363': attribute type 19 has an invalid length. [ 236.879498][T10178] netlink: 'syz.0.2372': attribute type 7 has an invalid length. [ 237.127876][T10193] lo speed is unknown, defaulting to 1000 [ 237.161930][T10193] lo speed is unknown, defaulting to 1000 [ 237.179299][T10193] lo speed is unknown, defaulting to 1000 [ 237.198118][T10193] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 237.216274][T10193] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 237.267663][T10193] lo speed is unknown, defaulting to 1000 [ 237.276319][T10193] lo speed is unknown, defaulting to 1000 [ 237.285840][T10193] lo speed is unknown, defaulting to 1000 [ 237.292871][T10193] lo speed is unknown, defaulting to 1000 [ 237.300145][T10193] lo speed is unknown, defaulting to 1000 [ 237.323444][ T2989] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 237.351724][T10186] loop4: detected capacity change from 0 to 32768 [ 237.368193][T10186] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 237.435189][T10202] input: syz0 as /devices/virtual/input/input28 [ 237.459274][ T3639] ocfs2: Unmounting device (7,4) on (node local) [ 237.693696][ T2989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.729732][ T2989] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 237.767702][ T2989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.808970][ T2989] usb 3-1: config 0 descriptor?? [ 237.838987][ T3644] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 238.060977][T10210] loop1: detected capacity change from 0 to 32768 [ 238.099658][T10210] XFS (loop1): Mounting V5 Filesystem [ 238.178056][T10210] XFS (loop1): Ending clean mount [ 238.198571][T10238] loop0: detected capacity change from 0 to 1024 [ 238.205937][T10210] XFS (loop1): Quotacheck needed: Please wait. [ 238.234415][T10238] hfsplus: extend alloc file! (8192,512,16777719) [ 238.289268][T10210] XFS (loop1): Quotacheck: Done. [ 238.304221][ T2989] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 238.329283][ T2989] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0013/input/input29 [ 238.446358][ T2989] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 238.520128][ T3635] XFS (loop1): Unmounting Filesystem [ 238.645466][T10254] can0: slcan on ttyS3. [ 238.712571][T10254] can0 (unregistered): slcan off ttyS3. [ 238.935303][T10263] loop0: detected capacity change from 0 to 4096 [ 238.957678][T10256] loop3: detected capacity change from 0 to 32768 [ 238.977750][T10256] XFS (loop3): Mounting V5 Filesystem [ 239.038161][T10256] XFS (loop3): Ending clean mount [ 239.045093][T10256] XFS (loop3): Quotacheck needed: Please wait. [ 239.080164][T10256] XFS (loop3): Quotacheck: Done. [ 239.105844][ T27] audit: type=1800 audit(1729288621.788:119): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2403" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 239.126378][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.135917][ T27] audit: type=1800 audit(1729288621.788:120): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2403" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 239.136334][ T3646] XFS (loop3): Unmounting Filesystem [ 239.338999][ T3914] usb 3-1: USB disconnect, device number 9 [ 239.352412][ C1] keytouch 0003:0926:3333.0013: usb_submit_urb(ctrl) failed: -19 [ 239.610527][T10292] input: syz1 as /devices/virtual/input/input30 [ 240.124755][T10314] loop3: detected capacity change from 0 to 4096 [ 240.145616][T10314] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 240.564225][T10330] loop3: detected capacity change from 0 to 512 [ 240.621524][T10330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.661240][T10330] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.762825][T10338] loop4: detected capacity change from 0 to 4096 [ 240.844218][ T3646] EXT4-fs (loop3): unmounting filesystem. [ 241.683923][T10378] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 241.727587][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.735097][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.801433][T10362] loop3: detected capacity change from 0 to 32768 [ 241.833227][T10362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2440 (10362) [ 241.864667][T10362] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.895818][T10362] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 241.903518][T10356] loop4: detected capacity change from 0 to 40427 [ 241.913311][T10362] BTRFS info (device loop3): setting nodatacow, compression disabled [ 241.931383][T10356] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 241.931656][T10362] BTRFS info (device loop3): turning on flush-on-commit [ 241.941508][T10356] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 241.954888][T10362] BTRFS info (device loop3): enabling auto defrag [ 241.969795][T10356] F2FS-fs (loop4): invalid crc value [ 241.988928][T10362] BTRFS info (device loop3): max_inline at 0 [ 242.005968][T10362] BTRFS info (device loop3): using free space tree [ 242.014961][T10356] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.084827][T10356] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.093354][T10356] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.156823][T10362] BTRFS info (device loop3): enabling ssd optimizations [ 242.220924][T10362] BTRFS error (device loop3): target device is invalid! [ 242.294703][ T3646] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.493219][T10425] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 243.026061][T10446] loop0: detected capacity change from 0 to 16 [ 243.055091][T10446] erofs: (device loop0): mounted with root inode @ nid 36. [ 243.089411][T10446] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 243.090123][T10444] loop2: detected capacity change from 0 to 4096 [ 243.128160][T10444] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 243.147324][T10446] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 243.185072][T10446] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 243.302401][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'. [ 243.694716][T10467] loop2: detected capacity change from 0 to 4096 [ 243.712743][T10467] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 243.727509][T10440] loop3: detected capacity change from 0 to 40427 [ 243.743953][T10440] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 243.757843][T10440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.789012][T10467] ntfs3: loop2: failed to convert "c46c" to iso8859-6 [ 243.800863][T10467] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 243.817985][T10440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.892352][T10440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 243.899437][T10440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.958695][ T27] audit: type=1804 audit(1729288626.638:121): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2465" name="/newroot/499/bus/file0" dev="loop3" ino=10 res=1 errno=0 [ 243.980399][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.510547][T10481] loop4: detected capacity change from 0 to 32768 [ 244.536857][T10473] loop0: detected capacity change from 0 to 32768 [ 244.546786][T10473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2482 (10473) [ 244.547767][T10495] sg_write: process 1079 (syz.3.2486) changed security contexts after opening file descriptor, this is not allowed. [ 244.581214][T10481] XFS (loop4): Mounting V5 Filesystem [ 244.598910][T10473] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.647097][T10473] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 244.678665][T10481] XFS (loop4): Ending clean mount [ 244.696590][T10473] BTRFS info (device loop0): using free space tree [ 244.709397][T10481] XFS (loop4): Quotacheck needed: Please wait. [ 244.717179][T10504] loop3: detected capacity change from 0 to 512 [ 244.767960][T10504] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #17: comm syz.3.2490: iget: bogus i_mode (0) [ 244.778646][T10481] XFS (loop4): Quotacheck: Done. [ 244.780564][T10504] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2490: couldn't read orphan inode 17 (err -117) [ 244.800963][T10504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 244.834273][T10504] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2490: bg 0: block 7: invalid block bitmap [ 244.860773][ T3639] XFS (loop4): Unmounting Filesystem [ 244.882272][T10473] BTRFS info (device loop0): enabling ssd optimizations [ 244.906485][ T3646] EXT4-fs (loop3): unmounting filesystem. [ 244.984415][ T3642] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.001726][T10500] loop1: detected capacity change from 0 to 40427 [ 245.090213][T10500] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.151200][T10500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 245.219164][ T3635] syz-executor: attempt to access beyond end of device [ 245.219164][ T3635] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.253437][ T4272] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.636212][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.657674][ T4272] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.677181][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.694466][ T4272] usb 4-1: config 0 descriptor?? [ 245.738779][ T27] audit: type=1326 audit(1729288628.418:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 245.784593][ T27] audit: type=1326 audit(1729288628.448:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 245.857559][ T27] audit: type=1326 audit(1729288628.448:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 245.902012][ T27] audit: type=1326 audit(1729288628.448:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 245.947936][ T27] audit: type=1326 audit(1729288628.448:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 245.981022][T10548] trusted_key: encrypted_key: keyword 'u{d‚ate' not recognized [ 245.999549][ T27] audit: type=1326 audit(1729288628.448:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 246.045487][ T27] audit: type=1326 audit(1729288628.448:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 246.093125][ T27] audit: type=1326 audit(1729288628.448:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 246.157033][ T27] audit: type=1326 audit(1729288628.448:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.2.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7febc637dff9 code=0x7ffc0000 [ 246.195464][T10544] loop1: detected capacity change from 0 to 32768 [ 246.214802][ T4272] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 246.235043][ T4272] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input31 [ 246.375664][ T4272] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 246.554387][T10567] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.565734][T10567] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.574717][T10567] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.583962][T10567] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.674325][T10572] netlink: 'syz.1.2511': attribute type 25 has an invalid length. [ 246.686816][T10569] loop0: detected capacity change from 0 to 8192 [ 246.696188][T10572] netlink: 'syz.1.2511': attribute type 8 has an invalid length. [ 246.733970][T10573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.793940][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2513'. [ 246.812193][T10576] loop4: detected capacity change from 0 to 2048 [ 246.854676][T10576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.935286][T10585] overlayfs: upper fs is r/o, try multi-lower layers mount [ 246.987675][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 247.097370][T10594] program syz.1.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.213785][T10600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2523'. [ 247.231015][ T3685] usb 4-1: USB disconnect, device number 14 [ 247.237372][T10603] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2525'. [ 247.246555][ C1] keytouch 0003:0926:3333.0014: usb_submit_urb(ctrl) failed: -19 [ 247.313572][T10604] loop1: detected capacity change from 0 to 1024 [ 247.336632][T10604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.570459][T10596] loop0: detected capacity change from 0 to 32768 [ 247.588542][T10596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2517 (10596) [ 247.628787][T10596] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.643493][T10596] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 247.657205][T10596] BTRFS info (device loop0): using free space tree [ 247.821849][T10643] loop3: detected capacity change from 0 to 128 [ 247.840584][T10596] BTRFS info (device loop0): enabling ssd optimizations [ 247.853567][T10643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.902553][T10643] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.964984][ T3642] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.965183][T10650] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2537'. [ 247.999986][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 248.055530][ T3646] EXT4-fs (loop3): unmounting filesystem. [ 248.372118][ T3684] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 248.494004][T10622] loop4: detected capacity change from 0 to 40427 [ 248.523414][T10622] F2FS-fs (loop4): invalid crc value [ 248.564805][T10622] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.580330][T10652] loop2: detected capacity change from 0 to 32768 [ 248.626600][T10652] XFS (loop2): Mounting V5 Filesystem [ 248.627167][T10622] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 248.646668][T10622] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 248.702075][ T3917] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 248.707265][T10652] XFS (loop2): Ending clean mount [ 248.754819][ T3639] syz-executor: attempt to access beyond end of device [ 248.754819][ T3639] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.792312][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.822137][ T3684] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.851630][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.862572][ T3684] usb 2-1: config 0 descriptor?? [ 248.876254][ T9642] XFS (loop2): Unmounting Filesystem [ 248.961111][T10663] loop3: detected capacity change from 0 to 40427 [ 248.968785][T10663] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 248.976931][ T3917] usb 1-1: Using ep0 maxpacket: 16 [ 248.985725][T10663] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.999027][T10663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.044536][T10663] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 249.051613][T10663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.073590][T10663] syz.3.2542: attempt to access beyond end of device [ 249.073590][T10663] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 249.127359][ T9] kworker/u4:0: attempt to access beyond end of device [ 249.127359][ T9] loop3: rw=1, sector=45216, nr_sectors = 8 limit=40427 [ 249.143839][ T3917] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.152284][ T3917] usb 1-1: config 0 has no interface number 0 [ 249.159726][ T3917] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.172773][ T3646] syz-executor: attempt to access beyond end of device [ 249.172773][ T3646] loop3: rw=2051, sector=45096, nr_sectors = 120 limit=40427 [ 249.176628][ T3917] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.188262][ T3646] F2FS-fs (loop3): Issue discard(5637, 5637, 15) failed, ret: -5 [ 249.333623][ T3684] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 249.349926][ T3917] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.360146][ T3917] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.368906][ T3917] usb 1-1: Product: syz [ 249.373215][ T3917] usb 1-1: SerialNumber: syz [ 249.379944][ T3684] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0015/input/input32 [ 249.392667][ T3917] usb 1-1: config 0 descriptor?? [ 249.443838][ T3917] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 249.452141][ T3917] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input33 [ 249.469801][ T3684] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 249.622119][ T3681] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.712494][ T3684] usb 1-1: USB disconnect, device number 14 [ 249.722348][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 249.731410][ T3684] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 249.862122][ T3681] usb 4-1: Using ep0 maxpacket: 16 [ 250.063327][ T3681] usb 4-1: config 0 has no interfaces? [ 250.139618][T10692] loop4: detected capacity change from 0 to 256 [ 250.148503][T10692] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.178429][T10692] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.188000][T10692] FAT-fs (loop4): Filesystem has been set read-only [ 250.222207][ T3681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.231298][ T3681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.239745][ T3681] usb 4-1: Product: syz [ 250.244034][ T3681] usb 4-1: Manufacturer: syz [ 250.248653][ T3681] usb 4-1: SerialNumber: syz [ 250.258393][ T3681] usb 4-1: config 0 descriptor?? [ 250.412063][ T3681] usb 2-1: USB disconnect, device number 14 [ 250.422759][ C0] keytouch 0003:0926:3333.0015: usb_submit_urb(ctrl) failed: -19 [ 250.438936][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.518046][ T4272] usb 4-1: USB disconnect, device number 15 [ 250.627146][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.711477][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.806893][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.901538][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.914691][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.925178][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.947313][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.955046][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.964696][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.071489][T10715] loop1: detected capacity change from 0 to 128 [ 251.131778][T10709] lo speed is unknown, defaulting to 1000 [ 251.548335][T10717] loop3: detected capacity change from 0 to 32768 [ 251.705602][T10726] loop1: detected capacity change from 0 to 4096 [ 251.733118][T10726] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 251.748542][T10709] chnl_net:caif_netlink_parms(): no params data found [ 251.966227][T10719] loop0: detected capacity change from 0 to 32768 [ 252.074627][T10719] XFS (loop0): Mounting V5 Filesystem [ 252.106136][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.130279][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.166882][T10719] XFS (loop0): Ending clean mount [ 252.183564][T10709] device bridge_slave_0 entered promiscuous mode [ 252.193172][T10719] XFS (loop0): Quotacheck needed: Please wait. [ 252.272643][T10719] XFS (loop0): Quotacheck: Done. [ 252.289344][T10729] loop4: detected capacity change from 0 to 40427 [ 252.296270][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.308733][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.328106][T10709] device bridge_slave_1 entered promiscuous mode [ 252.345448][T10729] F2FS-fs (loop4): Found nat_bits in checkpoint [ 252.484702][T10729] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.517283][T10729] syz.4.2568: attempt to access beyond end of device [ 252.517283][T10729] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 252.607521][ T3642] XFS (loop0): Unmounting Filesystem [ 252.617554][ T3639] syz-executor: attempt to access beyond end of device [ 252.617554][ T3639] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 252.661228][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.708415][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.905959][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2576'. [ 252.961505][T10709] team0: Port device team_slave_0 added [ 253.002576][ T3644] Bluetooth: hci4: command tx timeout [ 253.014996][ T34] device hsr_slave_0 left promiscuous mode [ 253.024532][ T34] device hsr_slave_1 left promiscuous mode [ 253.061808][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.070907][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.079740][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.088211][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.096089][ T34] device bridge_slave_1 left promiscuous mode [ 253.102528][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.110936][ T34] device bridge_slave_0 left promiscuous mode [ 253.117325][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.149940][ T34] device veth1_macvtap left promiscuous mode [ 253.156226][ T34] device veth0_macvtap left promiscuous mode [ 253.162606][ T34] device veth1_vlan left promiscuous mode [ 253.168476][ T34] device veth0_vlan left promiscuous mode [ 253.232169][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 253.322218][ T4272] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 253.623502][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.634058][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.685535][ T34] team0 (unregistering): Port device team_slave_1 removed [ 253.692225][ T4272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.716615][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 253.726320][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.727844][ T4272] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.734359][ T7] usb 4-1: SerialNumber: syz [ 253.748173][ T4272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.767521][ T4272] usb 1-1: config 0 descriptor?? [ 253.775556][ T34] team0 (unregistering): Port device team_slave_0 removed [ 253.823257][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.871539][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.028414][ T7] usb 4-1: 0:2 : does not exist [ 254.136177][ T7] usb 4-1: USB disconnect, device number 16 [ 254.148992][T10777] loop1: detected capacity change from 0 to 256 [ 254.168766][T10777] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 254.255283][ T4272] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 254.270968][ T4272] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input34 [ 254.344491][T10779] loop1: detected capacity change from 0 to 2048 [ 254.423919][ T4272] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 254.483065][T10779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.491625][T10779] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.621523][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 254.981768][T10781] loop4: detected capacity change from 0 to 32768 [ 255.023382][ T34] bond0 (unregistering): Released all slaves [ 255.049365][T10781] XFS (loop4): Mounting V5 Filesystem [ 255.082375][ T3644] Bluetooth: hci4: command tx timeout [ 255.133704][T10781] XFS (loop4): Ending clean mount [ 255.146296][T10709] team0: Port device team_slave_1 added [ 255.174940][T10781] XFS (loop4): Quotacheck needed: Please wait. [ 255.188974][T10792] netlink: 'syz.1.2588': attribute type 5 has an invalid length. [ 255.269796][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.293650][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.314854][T10781] XFS (loop4): Quotacheck: Done. [ 255.333962][ T2989] usb 1-1: USB disconnect, device number 15 [ 255.342356][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.352081][ C1] keytouch 0003:0926:3333.0016: usb_submit_urb(ctrl) failed: -19 [ 255.355255][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.367970][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.396767][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.480478][T10709] device hsr_slave_0 entered promiscuous mode [ 255.490137][T10709] device hsr_slave_1 entered promiscuous mode [ 255.497665][T10709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.508266][T10709] Cannot create hsr debugfs directory [ 255.563870][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.570653][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.613413][ T4390] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.696991][ T3639] XFS (loop4): Unmounting Filesystem [ 255.912274][ T4390] usb 4-1: Using ep0 maxpacket: 16 [ 256.050973][T10815] loop1: detected capacity change from 0 to 4096 [ 256.057965][ T4390] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 256.066554][ T4390] usb 4-1: config 0 has no interface number 0 [ 256.073787][ T4390] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.085530][ T4390] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.116247][T10815] ntfs: volume version 3.1. [ 256.127214][T10815] __ntfs_error: 4 callbacks suppressed [ 256.127232][T10815] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 256.172214][T10815] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 256.202287][T10815] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 256.222331][ T4390] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 256.231396][ T4390] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 256.244053][ T4390] usb 4-1: Product: syz [ 256.248353][ T4390] usb 4-1: SerialNumber: syz [ 256.272890][ T4390] usb 4-1: config 0 descriptor?? [ 256.313582][ T4390] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 256.321195][ T4390] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input35 [ 256.332562][T10815] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 256.358648][T10815] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 256.710872][T10709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.730756][T10709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.732679][ T2989] usb 4-1: USB disconnect, device number 17 [ 256.752020][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 256.759021][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 256.771495][ T2989] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 256.785791][T10709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.808674][T10709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.907518][T10821] loop4: detected capacity change from 0 to 40427 [ 256.930367][T10821] F2FS-fs (loop4): invalid crc value [ 256.956390][T10709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.972814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.981492][T10821] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.991385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.004849][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.022817][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.048701][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.072395][T10821] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 257.080243][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.087448][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.104434][T10821] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 257.113583][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.131549][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.150798][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.162493][ T3644] Bluetooth: hci4: command tx timeout [ 257.179248][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.186423][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.194914][ T3639] syz-executor: attempt to access beyond end of device [ 257.194914][ T3639] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.195283][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.230703][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.240395][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.254438][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.266645][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.292977][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.304992][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.335142][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.355788][T10709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.376869][T10709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.389771][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.400176][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.419423][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.707958][T10841] loop1: detected capacity change from 0 to 32768 [ 257.742709][T10841] XFS: ikeep mount option is deprecated. [ 257.749187][T10841] XFS: ikeep mount option is deprecated. [ 257.818731][T10841] XFS (loop1): Mounting V5 Filesystem [ 257.881703][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.893640][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.916751][T10867] loop4: detected capacity change from 0 to 128 [ 257.925086][T10867] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.929685][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.958898][T10867] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.965716][T10841] XFS (loop1): Ending clean mount [ 257.979063][T10841] XFS (loop1): Quotacheck needed: Please wait. [ 258.009976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.054342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.062145][T10852] loop3: detected capacity change from 0 to 32768 [ 258.075179][T10852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2611 (10852) [ 258.088325][ T46] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.094098][T10841] XFS (loop1): Quotacheck: Done. [ 258.122983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.134282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.142702][T10871] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 258.161312][T10852] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.173004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.183864][T10852] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 258.198238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.205687][T10852] BTRFS info (device loop3): using free space tree [ 258.223968][T10709] device veth0_vlan entered promiscuous mode [ 258.253329][T10709] device veth1_vlan entered promiscuous mode [ 258.295608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.307199][ T3635] XFS (loop1): Unmounting Filesystem [ 258.317363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.327454][T10892] netlink: 'syz.0.2617': attribute type 2 has an invalid length. [ 258.369014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.378390][T10897] netlink: 'syz.4.2619': attribute type 2 has an invalid length. [ 258.391042][T10852] BTRFS info (device loop3): enabling ssd optimizations [ 258.422125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.477079][T10709] device veth0_macvtap entered promiscuous mode [ 258.515732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.543096][T10709] device veth1_macvtap entered promiscuous mode [ 258.583747][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.591391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.619907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.645302][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.662896][ T3646] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.693128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.706625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.747695][T10709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.772960][T10709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.781700][T10709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.832035][T10709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.131732][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.154425][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.177092][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.201838][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.219715][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.242242][ T3644] Bluetooth: hci4: command tx timeout [ 259.249417][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.277418][T10919] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 259.464868][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 259.519394][T10937] loop0: detected capacity change from 0 to 1024 [ 259.647141][T10937] hfsplus: bad catalog entry type [ 259.783684][ T4396] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.200079][ T4396] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.210747][ T4396] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 260.234834][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.257881][ T4396] usb 4-1: config 0 descriptor?? [ 260.310814][ T4396] comedi comedi0: Wrong number of endpoints [ 260.317124][ T4396] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 260.348243][ T34] hfsplus: b-tree write err: -5, ino 4 [ 260.458094][T10958] bridge0: port 3(vlan2) entered blocking state [ 260.483085][T10962] loop2: detected capacity change from 0 to 64 [ 260.489588][T10958] bridge0: port 3(vlan2) entered disabled state [ 260.538308][ T3681] usb 4-1: USB disconnect, device number 18 [ 260.718727][T10972] loop4: detected capacity change from 0 to 64 [ 260.933820][T10976] loop4: detected capacity change from 0 to 256 [ 260.966466][T10976] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 260.975549][T10956] loop0: detected capacity change from 0 to 40427 [ 260.987297][T10956] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.996151][T10956] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 261.013251][T10956] F2FS-fs (loop0): invalid crc value [ 261.033951][T10956] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.097402][T10956] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 261.104829][T10956] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 261.163372][ T27] audit: type=1804 audit(1729288643.848:135): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2638" name="/newroot/547/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 261.629661][T10995] loop1: detected capacity change from 0 to 4096 [ 261.650666][T10995] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 261.671943][T10995] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 261.929525][T10991] loop4: detected capacity change from 0 to 32768 [ 261.981433][T10991] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 262.018088][T11011] loop1: detected capacity change from 0 to 8192 [ 262.055287][T11011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.068835][T11011] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 262.078177][T11011] REISERFS (device loop1): using ordered data mode [ 262.085922][ T3682] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 262.093593][T11011] reiserfs: using flush barriers [ 262.099874][T11011] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.117673][T11011] REISERFS (device loop1): checking transaction log (loop1) [ 262.123700][ T3639] ocfs2: Unmounting device (7,4) on (node local) [ 262.127519][T11011] REISERFS (device loop1): Using r5 hash to sort names [ 262.138482][T11011] REISERFS (device loop1): using 3.5.x disk format [ 262.156719][T11011] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 262.362621][ T3682] usb 3-1: Using ep0 maxpacket: 32 [ 262.385846][T11025] loop4: detected capacity change from 0 to 256 [ 262.401332][T11025] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 262.493197][ T3682] usb 3-1: config 0 has no interfaces? [ 262.624030][ T3682] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 262.633940][ T3682] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 262.642649][ T3682] usb 3-1: Product: syz [ 262.646916][ T3682] usb 3-1: Manufacturer: syz [ 262.672971][ T3682] usb 3-1: config 0 descriptor?? [ 262.801605][T11046] loop3: detected capacity change from 0 to 256 [ 262.815288][ T3681] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 262.873606][ T2989] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 262.919840][ T3682] usb 3-1: USB disconnect, device number 10 [ 263.122340][ T2989] usb 5-1: Using ep0 maxpacket: 16 [ 263.163005][T11047] loop1: detected capacity change from 0 to 40427 [ 263.170729][T11047] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 263.180807][T11047] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 263.189442][ T3681] usb 1-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 263.199521][T11058] netlink: 'syz.3.2685': attribute type 8 has an invalid length. [ 263.203130][ T3681] usb 1-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 263.218612][ T3681] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.231744][ T3681] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.243645][ T2989] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.258189][T11047] F2FS-fs (loop1): Found nat_bits in checkpoint [ 263.276994][ T3681] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 263.296422][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.328152][T11047] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 263.335483][T11047] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 263.360987][T11047] syz.1.2679: attempt to access beyond end of device [ 263.360987][T11047] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 263.413511][ T11] kworker/u4:1: attempt to access beyond end of device [ 263.413511][ T11] loop1: rw=1, sector=45216, nr_sectors = 8 limit=40427 [ 263.432894][ T2989] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 263.443151][ T2989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.443367][ T3635] syz-executor: attempt to access beyond end of device [ 263.443367][ T3635] loop1: rw=2051, sector=45096, nr_sectors = 120 limit=40427 [ 263.451297][ T2989] usb 5-1: Product: syz [ 263.451322][ T2989] usb 5-1: Manufacturer: syz [ 263.451337][ T2989] usb 5-1: SerialNumber: syz [ 263.481863][ T3635] F2FS-fs (loop1): Issue discard(5637, 5637, 15) failed, ret: -5 [ 263.494218][ T2989] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 263.543678][T11070] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 263.588131][T11072] loop2: detected capacity change from 0 to 128 [ 263.624121][T11072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.633049][T11072] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.689224][T11072] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 263.706919][ T2989] usb 5-1: USB disconnect, device number 16 [ 263.723450][T10709] EXT4-fs (loop2): unmounting filesystem. [ 263.795420][ T3681] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 263.812241][ T3681] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 263.819524][ T3681] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 263.829675][ T3681] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 263.843801][ T3681] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 263.853772][ T3681] uclogic 0003:5543:0042.0017: No inputs registered, leaving [ 263.863318][ T3681] uclogic 0003:5543:0042.0017: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 263.880494][T11084] netlink: 'syz.1.2695': attribute type 5 has an invalid length. [ 264.001054][ T2989] usb 1-1: USB disconnect, device number 16 [ 264.075724][T11100] (unnamed net_device) (uninitialized): (slave veth1_to_hsr): Device is not bonding slave [ 264.086071][T11100] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_to_hsr) [ 264.211771][T11106] loop1: detected capacity change from 0 to 2048 [ 264.227079][T11106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.248236][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 264.510439][T11126] Falling back ldisc for ptm0. [ 264.592147][ T3682] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 264.839947][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.989064][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.010247][ T3682] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.024833][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.060624][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.074071][ T3682] usb 5-1: config 0 descriptor?? [ 265.095593][T11138] loop0: detected capacity change from 0 to 512 [ 265.116280][T11138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 265.136602][T11138] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.187830][T11138] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 31: comm syz.0.2722: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 265.213613][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.252233][T11138] EXT4-fs (loop0): Remounting filesystem read-only [ 265.262353][T11138] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.2722: directory missing '..' [ 265.346809][T11142] mkiss: ax0: crc mode is auto. [ 265.354415][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.394714][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 265.443057][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.457796][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.467476][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.478719][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.487013][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 265.494995][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.560574][T11146] lo speed is unknown, defaulting to 1000 [ 265.574335][ T3682] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 265.586493][ T3682] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input36 [ 265.700190][ T3682] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 265.948295][T11146] chnl_net:caif_netlink_parms(): no params data found [ 265.987160][ T2989] kernel write not supported for file 1211/task/1212/clear_refs (pid: 2989 comm: kworker/1:2) [ 266.118211][T11146] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.135837][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.156697][T11146] device bridge_slave_0 entered promiscuous mode [ 266.207039][T11146] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.215501][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.230665][T11156] loop1: detected capacity change from 0 to 32768 [ 266.239655][T11146] device bridge_slave_1 entered promiscuous mode [ 266.299153][T11156] XFS (loop1): Mounting V5 Filesystem [ 266.302509][T11146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.327248][T11146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.439982][T11156] XFS (loop1): Ending clean mount [ 266.475353][T11156] XFS (loop1): Quotacheck needed: Please wait. [ 266.540998][T11146] team0: Port device team_slave_0 added [ 266.599957][T11156] XFS (loop1): Quotacheck: Done. [ 266.600975][T11146] team0: Port device team_slave_1 added [ 266.658207][ T3635] XFS (loop1): Unmounting Filesystem [ 266.671492][ T3682] usb 5-1: USB disconnect, device number 17 [ 266.677579][ C0] keytouch 0003:0926:3333.0018: usb_submit_urb(ctrl) failed: -19 [ 266.808647][T11189] loop0: detected capacity change from 0 to 128 [ 266.848392][T11146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.864168][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.890074][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.929113][T11146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.989813][T11146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.998068][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.023958][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.032298][T11146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.044113][T11193] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2739'. [ 267.057745][T11191] bridge0: port 3(vlan2) entered blocking state [ 267.067073][T11191] bridge0: port 3(vlan2) entered disabled state [ 267.114371][T11197] program syz.0.2741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.253277][ T46] device hsr_slave_0 left promiscuous mode [ 267.259750][ T46] device hsr_slave_1 left promiscuous mode [ 267.287232][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.297133][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.314408][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.326389][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.336729][T11201] loop3: detected capacity change from 0 to 4096 [ 267.343953][ T46] device bridge_slave_1 left promiscuous mode [ 267.351729][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.361884][T11201] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 267.383025][ T46] device bridge_slave_0 left promiscuous mode [ 267.392788][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.412473][T11201] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 267.473549][ T3682] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 267.486501][T11201] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 267.497461][ T46] device veth1_macvtap left promiscuous mode [ 267.509333][ T46] device veth0_macvtap left promiscuous mode [ 267.518295][ T46] device veth1_vlan left promiscuous mode [ 267.525378][ T46] device veth0_vlan left promiscuous mode [ 267.564719][ T3652] Bluetooth: hci4: command tx timeout [ 267.732548][ T3682] usb 1-1: Using ep0 maxpacket: 8 [ 267.864907][ T3682] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 267.874425][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.895950][ T3682] usb 1-1: config 0 descriptor?? [ 268.161454][ T46] team0 (unregistering): Port device team_slave_1 removed [ 268.213068][ T46] team0 (unregistering): Port device team_slave_0 removed [ 268.262561][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.311837][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.814937][ T3682] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 268.827002][ T46] bond0 (unregistering): Released all slaves [ 268.827336][ T3682] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 268.872912][ T3682] asix: probe of 1-1:0.0 failed with error -71 [ 268.881201][ T3682] usb 1-1: USB disconnect, device number 17 [ 268.933512][T11146] device hsr_slave_0 entered promiscuous mode [ 268.940340][T11146] device hsr_slave_1 entered promiscuous mode [ 268.947182][T11146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.954995][T11146] Cannot create hsr debugfs directory [ 269.215301][T11225] bridge0: port 3(vlan2) entered blocking state [ 269.222343][T11225] bridge0: port 3(vlan2) entered disabled state [ 269.332097][ T3653] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 269.533501][T11240] loop1: detected capacity change from 0 to 64 [ 269.642167][ T3652] Bluetooth: hci4: command tx timeout [ 269.692236][ T3653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.703569][ T3653] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.722070][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.743749][ T3653] usb 5-1: config 0 descriptor?? [ 269.960409][T11146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.989523][T11146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.004529][T11146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.015769][T11146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.146224][T11146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.161814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.182827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.195622][T11146] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.206591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.222677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.223746][ T3653] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 270.240037][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.244126][ T3653] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input37 [ 270.247152][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.270788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.282385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.291612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.300328][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.307467][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.326378][ T3653] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 270.328461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.342500][T11250] loop0: detected capacity change from 0 to 32768 [ 270.349050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.358317][T11250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2765 (11250) [ 270.372445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.384555][T11250] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.388512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.396135][T11250] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 270.403929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.420565][T11250] BTRFS info (device loop0): using free space tree [ 270.421386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.436217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.446029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.457160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.465621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.480539][T11146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.488682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.532609][T11250] BTRFS info (device loop0): enabling ssd optimizations [ 270.565511][ T27] audit: type=1800 audit(1729288653.248:136): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2765" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 270.567349][T11250] BTRFS error (device loop0): balance: invalid convert metadata profile raid0 [ 270.654720][ T3642] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.888210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.904660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.916884][T11283] loop1: detected capacity change from 0 to 1024 [ 270.949376][T11146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.996362][ T46] hfsplus: b-tree write err: -5, ino 4 [ 271.014586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.030903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.073978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.104217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.116110][T11146] device veth0_vlan entered promiscuous mode [ 271.127720][T11287] bridge0: port 3(vlan4) entered blocking state [ 271.134943][T11287] bridge0: port 3(vlan4) entered disabled state [ 271.147557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.156416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.170334][T11146] device veth1_vlan entered promiscuous mode [ 271.200911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.224741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.248224][T11146] device veth0_macvtap entered promiscuous mode [ 271.274528][T11146] device veth1_macvtap entered promiscuous mode [ 271.293997][ T3683] usb 5-1: USB disconnect, device number 18 [ 271.302029][ C1] keytouch 0003:0926:3333.0019: usb_submit_urb(ctrl) failed: -19 [ 271.346016][T11146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.365227][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.382794][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.405329][T11279] loop3: detected capacity change from 0 to 32768 [ 271.412371][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.426411][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.437900][T11279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2772 (11279) [ 271.454287][T11146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.464465][T11279] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.475707][T11279] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 271.488838][T11279] BTRFS info (device loop3): enabling auto defrag [ 271.495681][T11279] BTRFS info (device loop3): max_inline at 0 [ 271.501869][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.511385][T11279] BTRFS info (device loop3): enabling ssd optimizations [ 271.519388][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.529049][T11279] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 271.541064][T11146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.550976][T11290] mkiss: ax0: crc mode is auto. [ 271.551374][T11279] BTRFS info (device loop3): use lzo compression, level 0 [ 271.565135][T11146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.574565][T11279] BTRFS info (device loop3): using free space tree [ 271.581202][T11146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.590228][T11146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.623779][T11285] loop1: detected capacity change from 0 to 32768 [ 271.694053][T11285] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 271.722409][ T3652] Bluetooth: hci4: command tx timeout [ 271.762852][T11311] loop0: detected capacity change from 0 to 128 [ 271.770960][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.781899][ T27] audit: type=1800 audit(1729288654.468:137): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2774" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 271.784043][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.811696][T11311] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 271.842086][T11311] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 271.870678][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.879832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.917391][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.925438][ T3646] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.932348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.014106][ T3635] ocfs2: Unmounting device (7,1) on (node local) [ 272.056315][T11311] sysv_count_free_inodes: unable to read inode table [ 272.105033][T11313] sysv_count_free_inodes: unable to read inode table [ 272.267458][ T3642] sysv_free_block: trying to free block not in datazone [ 272.293010][ T3642] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 272.565181][T11328] loop3: detected capacity change from 0 to 8192 [ 272.574690][T11328] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.588019][T11328] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 272.599193][T11328] REISERFS (device loop3): using ordered data mode [ 272.608053][T11328] reiserfs: using flush barriers [ 272.614673][T11328] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.631296][T11328] REISERFS (device loop3): checking transaction log (loop3) [ 272.639847][T11328] REISERFS (device loop3): Using r5 hash to sort names [ 272.651938][T11328] REISERFS (device loop3): using 3.5.x disk format [ 272.658987][T11328] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 272.763941][ T4984] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.885721][T11339] loop4: detected capacity change from 0 to 4096 [ 272.896160][T11339] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 273.132784][T11352] loop2: detected capacity change from 0 to 1024 [ 273.154839][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2788'. [ 273.172988][ T4984] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.187109][T11352] hfsplus: bad catalog entry type [ 273.202380][ T4984] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.259411][ T3679] hfsplus: b-tree write err: -5, ino 4 [ 273.313370][ T4984] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.342377][ T4984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.350464][ T4984] usb 2-1: SerialNumber: syz [ 273.558623][T11379] loop3: detected capacity change from 0 to 4096 [ 273.567773][T11379] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 273.598384][T11379] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 273.610981][T11379] ntfs3: loop3: Failed to load $Extend. [ 273.726265][ T4984] usb 2-1: 0:2 : does not exist [ 273.738881][T11388] device syz_tun entered promiscuous mode [ 273.759726][T11388] device macvlan2 entered promiscuous mode [ 273.784331][ T4984] usb 2-1: USB disconnect, device number 15 [ 273.803044][ T3644] Bluetooth: hci4: command tx timeout [ 273.888924][T11395] netlink: 911 bytes leftover after parsing attributes in process `syz.4.2812'. [ 273.912652][T11395] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 274.074176][T11408] ALSA: mixer_oss: invalid OSS volume '' [ 274.552985][T11401] loop3: detected capacity change from 0 to 32768 [ 274.601536][T11401] read_mapping_page failed! [ 274.765725][T11430] binder: 11429:11430 ioctl 400c620e 200003c0 returned -22 [ 275.033456][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 275.081040][T11440] loop1: detected capacity change from 0 to 1024 [ 275.106782][T11442] loop2: detected capacity change from 0 to 256 [ 275.194437][T11440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 275.224583][T11440] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.231062][T11428] loop4: detected capacity change from 0 to 32768 [ 275.316627][T11428] XFS (loop4): Mounting V5 Filesystem [ 275.350968][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 275.425135][T11428] XFS (loop4): Ending clean mount [ 275.453443][T11428] XFS (loop4): Quotacheck needed: Please wait. [ 275.509518][T11428] XFS (loop4): Quotacheck: Done. [ 275.592407][ T4272] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 275.617277][T11478] loop2: detected capacity change from 0 to 1024 [ 275.639128][ T3639] XFS (loop4): Unmounting Filesystem [ 275.640599][T11478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.002280][ T4272] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.044643][ T4272] usb 1-1: not running at top speed; connect to a high speed hub [ 276.139780][T11500] tap0: tun_chr_ioctl cmd 1074025673 [ 276.142465][ T4272] usb 1-1: config 1 has an invalid interface descriptor of length 4, skipping [ 276.162104][ T4272] usb 1-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 276.182076][ T4272] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 276.333442][T11503] loop4: detected capacity change from 0 to 128 [ 276.341546][T11503] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 276.352770][ T4272] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0301, bcdDevice= 0.40 [ 276.361836][ T4272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.374566][ T4272] usb 1-1: Product: syz [ 276.378873][ T4272] usb 1-1: Manufacturer: syz [ 276.385198][ T4272] usb 1-1: SerialNumber: syz [ 276.391725][T11503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.673507][ T4272] usb 1-1: USB disconnect, device number 18 [ 276.703236][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 276.732335][ T3683] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 276.998127][T11519] loop1: detected capacity change from 0 to 32768 [ 277.019756][T11519] [ 277.019756][T11519] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.019756][T11519] [ 277.056671][T11519] [ 277.056671][T11519] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.056671][T11519] [ 277.070976][T11519] [ 277.070976][T11519] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.070976][T11519] [ 277.086087][T11519] [ 277.086087][T11519] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.086087][T11519] [ 277.096859][T11519] [ 277.096859][T11519] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.096859][T11519] [ 277.116812][ T105] [ 277.116812][ T105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.116812][ T105] [ 277.129639][ T3683] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.181478][ T3683] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.201480][ T3683] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.214130][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.242971][T11509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 277.250640][ T3635] [ 277.250640][ T3635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.250640][ T3635] [ 277.273084][ T3635] [ 277.273084][ T3635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.273084][ T3635] [ 277.339864][T11536] loop3: detected capacity change from 0 to 128 [ 277.376961][ T27] audit: type=1800 audit(1729288660.058:138): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2871" name="file1" dev="loop3" ino=1048668 res=0 errno=0 [ 277.413761][T11536] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 277.424548][ T27] audit: type=1800 audit(1729288660.088:139): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2871" name="file1" dev="loop3" ino=1048668 res=0 errno=0 [ 277.448563][T11536] FAT-fs (loop3): Filesystem has been set read-only [ 277.461284][T11540] loop0: detected capacity change from 0 to 2048 [ 277.461719][T11536] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 277.494783][ T3683] usb 5-1: USB disconnect, device number 19 [ 277.528405][T11543] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.591338][ T27] audit: type=1804 audit(1729288660.278:140): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2873" name="/newroot/590/file0/file2" dev="loop0" ino=16 res=1 errno=0 [ 277.624607][T11540] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 277.647949][T11540] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 277.689613][T11540] Remounting filesystem read-only [ 277.755860][ T3642] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 277.766780][ T3642] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 277.774386][ T3642] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 277.798845][ T3642] NILFS (loop0): discard dirty block: blocknr=24, size=1024 [ 277.806612][ T3642] NILFS (loop0): discard dirty block: blocknr=25, size=1024 [ 277.834201][ T3642] NILFS (loop0): discard dirty block: blocknr=26, size=1024 [ 277.841704][ T3642] NILFS (loop0): discard dirty page: offset=4096, ino=16 [ 277.863884][ T3642] NILFS (loop0): discard dirty block: blocknr=27, size=1024 [ 277.871335][ T3642] NILFS (loop0): discard dirty block: blocknr=28, size=1024 [ 277.892985][ T3642] NILFS (loop0): discard dirty block: blocknr=29, size=1024 [ 277.900425][ T3642] NILFS (loop0): discard dirty block: blocknr=30, size=1024 [ 277.919893][ T3642] NILFS (loop0): discard dirty page: offset=8192, ino=16 [ 277.927210][ T3642] NILFS (loop0): discard dirty block: blocknr=31, size=1024 [ 277.947289][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 277.969623][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 277.978838][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.004574][ T3642] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 278.011669][ T3642] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 278.019541][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.053874][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.063261][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.086629][ T3642] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 278.108092][ T3642] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 278.116265][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.126445][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.149616][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.159695][ T3642] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 278.193223][ T3642] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 278.211342][ T3642] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 278.220843][ T3642] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 278.229442][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.547498][T11582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2887'. [ 278.553437][ T3683] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 278.799464][T11586] loop2: detected capacity change from 0 to 32768 [ 278.807252][T11586] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2889 (11586) [ 278.820080][ T3683] usb 1-1: Using ep0 maxpacket: 8 [ 278.827460][T11586] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 278.838205][T11586] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 278.847516][T11586] BTRFS info (device loop2): enabling auto defrag [ 278.854239][T11586] BTRFS info (device loop2): max_inline at 0 [ 278.860248][T11586] BTRFS info (device loop2): enabling ssd optimizations [ 278.867643][T11586] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 278.877082][T11586] BTRFS info (device loop2): use lzo compression, level 0 [ 278.884841][T11586] BTRFS info (device loop2): using free space tree [ 278.892402][ T3680] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 278.935729][T11602] loop3: detected capacity change from 0 to 256 [ 278.942620][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.956077][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.987868][T11602] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 279.000584][T11602] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 279.122953][ T3683] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 279.130978][T11146] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.137709][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.150769][ T3683] usb 1-1: Product: syz [ 279.155373][ T3683] usb 1-1: Manufacturer: syz [ 279.160593][ T3683] usb 1-1: SerialNumber: syz [ 279.162256][ T3680] usb 2-1: Using ep0 maxpacket: 8 [ 279.317373][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 279.329037][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 279.340386][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.350347][ T3680] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.362039][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 279.371882][ T3680] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 279.381822][ T3680] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 279.391134][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.413079][ T3680] usb 2-1: config 0 descriptor?? [ 279.439134][T11588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.473195][ T3652] Bluetooth: hci5: urb ffff888027cc8800 submission failed (90) [ 279.637675][T11633] loop2: detected capacity change from 0 to 64 [ 279.680652][ T124] usb 2-1: USB disconnect, device number 16 [ 279.800427][T11639] loop2: detected capacity change from 0 to 1024 [ 279.802076][T10913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 279.807799][T11639] EXT4-fs: Ignoring removed nobh option [ 279.820145][T11639] EXT4-fs: Ignoring removed orlov option [ 279.835713][T11639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.852784][ T3683] hid (null): report_id 2668810406 is invalid [ 279.861076][ T3683] asus 0003:0B05:19B6.001A: report_id 2668810406 is invalid [ 279.870451][ T3683] asus 0003:0B05:19B6.001A: item 0 4 1 8 parsing failed [ 279.878946][ T3683] asus 0003:0B05:19B6.001A: Asus hid parse failed: -22 [ 279.882937][T11146] EXT4-fs (loop2): unmounting filesystem. [ 279.886427][ T3683] asus: probe of 0003:0B05:19B6.001A failed with error -22 [ 280.084833][T11651] loop2: detected capacity change from 0 to 512 [ 280.087217][ T4272] usb 1-1: USB disconnect, device number 19 [ 280.093449][T11651] EXT4-fs: Ignoring removed nobh option [ 280.105023][T11651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.122331][T11651] EXT4-fs (loop2): 1 truncate cleaned up [ 280.128094][T11651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.180729][T11146] EXT4-fs (loop2): unmounting filesystem. [ 280.201935][T10913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.242227][T10913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.262070][T10913] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 280.281391][T10913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.296993][T10913] usb 4-1: config 0 descriptor?? [ 280.394181][T11660] lo speed is unknown, defaulting to 1000 [ 280.463393][T11654] loop4: detected capacity change from 0 to 32768 [ 280.471097][T11654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2910 (11654) [ 280.515478][T11654] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.539622][T11654] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 280.555823][T11654] BTRFS info (device loop4): using free space tree [ 280.589050][T11654] BTRFS info (device loop4): enabling ssd optimizations [ 280.676366][T11685] loop2: detected capacity change from 0 to 2048 [ 280.698090][ T3639] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.712825][T11685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.814625][T10913] wacom 0003:056A:00D0.001B: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 280.837871][T10913] wacom 0003:056A:00D0.001B: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 280.850503][T10913] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.001B/input/input38 [ 280.961199][T11687] loop0: detected capacity change from 0 to 32768 [ 280.969212][T11687] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2917 (11687) [ 280.984164][T11687] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.998598][T11687] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 281.008525][T11687] BTRFS info (device loop0): using free space tree [ 281.019883][T10913] usb 4-1: USB disconnect, device number 19 [ 281.092512][T11687] BTRFS info (device loop0): enabling ssd optimizations [ 281.210121][ T3642] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.478995][T11718] loop1: detected capacity change from 0 to 128 [ 281.561814][T11720] loop2: detected capacity change from 0 to 256 [ 281.569092][T11720] exfat: Deprecated parameter 'namecase' [ 281.585419][T11720] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 281.603341][ T3715] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 281.849390][T11737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.985069][T11744] loop0: detected capacity change from 0 to 1024 [ 282.070078][ T3679] hfsplus: b-tree write err: -5, ino 4 [ 282.183477][ T3715] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 282.203920][ T3715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.223211][ T3715] usb 5-1: Product: syz [ 282.252772][ T3715] usb 5-1: Manufacturer: syz [ 282.263105][ T3715] usb 5-1: SerialNumber: syz [ 282.276652][ T3715] usb 5-1: config 0 descriptor?? [ 282.286274][T11765] loop2: detected capacity change from 0 to 1024 [ 282.296854][T11768] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2947'. [ 282.319985][T11770] loop1: detected capacity change from 0 to 64 [ 282.359334][T11770] syz.1.2948: attempt to access beyond end of device [ 282.359334][T11770] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 282.376722][T11770] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 282.553356][ T3715] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 282.739232][T11792] loop3: detected capacity change from 0 to 256 [ 282.776206][T11795] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 282.776635][T11792] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001003e, chksum : 0x00424b3e, utbl_chksum : 0xe619d30d) [ 282.794381][T11795] netlink: 'syz.1.2960': attribute type 2 has an invalid length. [ 282.813744][T11795] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 283.023414][ T3715] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 283.068700][T11815] loop0: detected capacity change from 0 to 136 [ 283.231109][ T3715] usb 5-1: USB disconnect, device number 20 [ 283.395403][T11809] loop2: detected capacity change from 0 to 32768 [ 283.406417][T11809] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.2964 (11809) [ 283.432073][T11809] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 283.449973][T11809] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 283.459591][T11809] BTRFS info (device loop2): disabling tree log [ 283.466765][T11809] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 283.477616][T11809] BTRFS info (device loop2): trying to use backup root at mount time [ 283.492191][T11809] BTRFS info (device loop2): setting nodatacow, compression disabled [ 283.500445][T11809] BTRFS info (device loop2): enabling ssd optimizations [ 283.507651][T11809] BTRFS info (device loop2): using spread ssd allocation scheme [ 283.515700][T11809] BTRFS info (device loop2): using free space tree [ 283.592062][T11821] loop0: detected capacity change from 0 to 40427 [ 283.599393][T11821] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 283.607274][T11821] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 283.617805][T11821] F2FS-fs (loop0): invalid crc value [ 283.642956][T11821] F2FS-fs (loop0): Found nat_bits in checkpoint [ 283.678993][T11146] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 283.696346][T11821] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 283.710088][T11821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 283.782056][ T3715] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 283.926082][ T75] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 283.957780][ T75] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 284.042093][ T3715] usb 2-1: Using ep0 maxpacket: 16 [ 284.137653][T11859] loop4: detected capacity change from 0 to 1024 [ 284.155669][T11859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.165080][ T3715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.182027][ T3715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.211327][ T3715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.242078][ T3715] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 284.260987][ T3715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.278606][ T3715] usb 2-1: config 0 descriptor?? [ 284.584339][T11880] loop0: detected capacity change from 0 to 1024 [ 284.630367][T11880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.699859][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 284.763957][ T3715] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0 [ 284.772370][ T3715] koneplus 0003:1E7D:2E22.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 284.794203][T11889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.797478][T11868] loop4: detected capacity change from 0 to 40427 [ 284.819763][T11868] F2FS-fs (loop4): invalid crc value [ 284.827317][T11868] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 284.874035][T11893] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 284.893776][T11868] F2FS-fs (loop4): Start checkpoint disabled! [ 284.912981][T11868] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 284.985368][ T75] kworker/u4:4: attempt to access beyond end of device [ 284.985368][ T75] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.195489][ T4091] usb 2-1: USB disconnect, device number 17 [ 285.470175][T11904] loop4: detected capacity change from 0 to 32768 [ 285.497049][T11904] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 285.525948][T11904] [ 285.528306][T11904] ====================================================== [ 285.535599][T11904] WARNING: possible circular locking dependency detected [ 285.542708][T11904] 6.1.113-syzkaller #0 Not tainted [ 285.547822][T11904] ------------------------------------------------------ [ 285.554851][T11904] syz.4.2994/11904 is trying to acquire lock: [ 285.560924][T11904] ffff8880597642c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xe96/0x1930 [ 285.573222][T11904] [ 285.573222][T11904] but task is already holding lock: [ 285.580586][T11904] ffff888059764e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 285.590072][T11904] [ 285.590072][T11904] which lock already depends on the new lock. [ 285.590072][T11904] [ 285.600468][T11904] [ 285.600468][T11904] the existing dependency chain (in reverse order) is: [ 285.609477][T11904] [ 285.609477][T11904] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 285.617281][T11904] lock_acquire+0x1f8/0x5a0 [ 285.622319][T11904] down_read+0xad/0xa30 [ 285.626988][T11904] ocfs2_init_acl+0x398/0x930 [ 285.632202][T11904] ocfs2_mknod+0x1f75/0x2e20 [ 285.637329][T11904] vfs_mknod+0x444/0x4d0 [ 285.642124][T11904] do_mknodat+0x3f8/0x5a0 [ 285.647004][T11904] __x64_sys_mknod+0x8a/0xa0 [ 285.652117][T11904] do_syscall_64+0x3b/0xb0 [ 285.657038][T11904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.663443][T11904] [ 285.663443][T11904] -> #1 (jbd2_handle){++++}-{0:0}: [ 285.670730][T11904] lock_acquire+0x1f8/0x5a0 [ 285.675755][T11904] jbd2_journal_lock_updates+0xa6/0x380 [ 285.681836][T11904] __ocfs2_flush_truncate_log+0x2ef/0x12a0 [ 285.688146][T11904] ocfs2_flush_truncate_log+0x4b/0x60 [ 285.694043][T11904] ocfs2_sync_fs+0x121/0x380 [ 285.699153][T11904] sync_filesystem+0x1bc/0x220 [ 285.704460][T11904] generic_shutdown_super+0x6b/0x340 [ 285.710268][T11904] kill_block_super+0x7a/0xe0 [ 285.715459][T11904] deactivate_locked_super+0xa0/0x110 [ 285.721368][T11904] cleanup_mnt+0x490/0x520 [ 285.726323][T11904] task_work_run+0x246/0x300 [ 285.731455][T11904] exit_to_user_mode_loop+0xde/0x100 [ 285.737347][T11904] exit_to_user_mode_prepare+0xb1/0x140 [ 285.743420][T11904] syscall_exit_to_user_mode+0x60/0x270 [ 285.749473][T11904] do_syscall_64+0x47/0xb0 [ 285.754391][T11904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.760791][T11904] [ 285.760791][T11904] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 285.771286][T11904] validate_chain+0x1661/0x5950 [ 285.776649][T11904] __lock_acquire+0x125b/0x1f80 [ 285.782021][T11904] lock_acquire+0x1f8/0x5a0 [ 285.787043][T11904] down_write+0x36/0x60 [ 285.791703][T11904] ocfs2_xattr_set+0xe96/0x1930 [ 285.797064][T11904] __vfs_setxattr+0x3e7/0x420 [ 285.802256][T11904] __vfs_setxattr_noperm+0x12a/0x5e0 [ 285.808067][T11904] vfs_setxattr+0x21d/0x420 [ 285.813083][T11904] setxattr+0x250/0x2b0 [ 285.817748][T11904] path_setxattr+0x1bc/0x2a0 [ 285.822866][T11904] __x64_sys_lsetxattr+0xb4/0xd0 [ 285.828311][T11904] do_syscall_64+0x3b/0xb0 [ 285.833240][T11904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.839663][T11904] [ 285.839663][T11904] other info that might help us debug this: [ 285.839663][T11904] [ 285.849875][T11904] Chain exists of: [ 285.849875][T11904] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 285.849875][T11904] [ 285.865605][T11904] Possible unsafe locking scenario: [ 285.865605][T11904] [ 285.873043][T11904] CPU0 CPU1 [ 285.878393][T11904] ---- ---- [ 285.883830][T11904] lock(&oi->ip_xattr_sem); [ 285.888405][T11904] lock(jbd2_handle); [ 285.894977][T11904] lock(&oi->ip_xattr_sem); [ 285.902073][T11904] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 285.909377][T11904] [ 285.909377][T11904] *** DEADLOCK *** [ 285.909377][T11904] [ 285.917515][T11904] 3 locks held by syz.4.2994/11904: [ 285.922691][T11904] #0: ffff88801be94460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 285.931914][T11904] #1: ffff888059765108 (&sb->s_type->i_mutex_key#40){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 285.942353][T11904] #2: ffff888059764e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 285.952261][T11904] [ 285.952261][T11904] stack backtrace: [ 285.958136][T11904] CPU: 0 PID: 11904 Comm: syz.4.2994 Not tainted 6.1.113-syzkaller #0 [ 285.966286][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.976339][T11904] Call Trace: [ 285.979606][T11904] [ 285.982531][T11904] dump_stack_lvl+0x1e3/0x2cb [ 285.987229][T11904] ? nf_tcp_handle_invalid+0x642/0x642 [ 285.992678][T11904] ? print_circular_bug+0x12b/0x1a0 [ 285.997860][T11904] check_noncircular+0x2fa/0x3b0 [ 286.002786][T11904] ? add_chain_block+0x850/0x850 [ 286.007710][T11904] ? lockdep_lock+0x11f/0x2a0 [ 286.012379][T11904] ? _find_first_zero_bit+0xd0/0x100 [ 286.017650][T11904] validate_chain+0x1661/0x5950 [ 286.022494][T11904] ? kernel_text_address+0x9f/0xd0 [ 286.027607][T11904] ? stack_trace_save+0x113/0x1c0 [ 286.032617][T11904] ? reacquire_held_locks+0x660/0x660 [ 286.037979][T11904] ? stack_trace_snprint+0xe0/0xe0 [ 286.043082][T11904] ? look_up_lock_class+0x77/0x140 [ 286.048176][T11904] ? register_lock_class+0x100/0x990 [ 286.053453][T11904] ? is_dynamic_key+0x260/0x260 [ 286.058293][T11904] ? mark_lock+0x9a/0x340 [ 286.062609][T11904] __lock_acquire+0x125b/0x1f80 [ 286.067459][T11904] lock_acquire+0x1f8/0x5a0 [ 286.071947][T11904] ? ocfs2_xattr_set+0xe96/0x1930 [ 286.076971][T11904] ? read_lock_is_recursive+0x10/0x10 [ 286.082327][T11904] ? __might_sleep+0xb0/0xb0 [ 286.086897][T11904] ? rwsem_write_trylock+0x166/0x210 [ 286.092167][T11904] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 286.097697][T11904] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 286.103231][T11904] ? ocfs2_xattr_ibody_find+0xc6/0x7c0 [ 286.108673][T11904] down_write+0x36/0x60 [ 286.112812][T11904] ? ocfs2_xattr_set+0xe96/0x1930 [ 286.117821][T11904] ocfs2_xattr_set+0xe96/0x1930 [ 286.122663][T11904] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 286.128551][T11904] ? aa_get_newest_label+0xfb/0x6e0 [ 286.133737][T11904] ? posix_xattr_acl+0xa5/0xd0 [ 286.138492][T11904] ? evm_protect_xattr+0x366/0xb10 [ 286.143611][T11904] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 286.149053][T11904] __vfs_setxattr+0x3e7/0x420 [ 286.153718][T11904] __vfs_setxattr_noperm+0x12a/0x5e0 [ 286.158988][T11904] vfs_setxattr+0x21d/0x420 [ 286.163511][T11904] ? xattr_permission+0x4f0/0x4f0 [ 286.168517][T11904] ? __might_fault+0xbd/0x110 [ 286.173184][T11904] setxattr+0x250/0x2b0 [ 286.177335][T11904] ? path_setxattr+0x2a0/0x2a0 [ 286.182098][T11904] ? __mnt_want_write+0x222/0x2a0 [ 286.187113][T11904] path_setxattr+0x1bc/0x2a0 [ 286.191689][T11904] ? simple_xattr_list_add+0xf0/0xf0 [ 286.196957][T11904] ? syscall_enter_from_user_mode+0x2e/0x230 [ 286.202926][T11904] __x64_sys_lsetxattr+0xb4/0xd0 [ 286.207882][T11904] do_syscall_64+0x3b/0xb0 [ 286.212282][T11904] ? clear_bhb_loop+0x45/0xa0 [ 286.216949][T11904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.222833][T11904] RIP: 0033:0x7ffb1677dff9 [ 286.227258][T11904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.247113][T11904] RSP: 002b:00007ffb175d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 286.255511][T11904] RAX: ffffffffffffffda RBX: 00007ffb16935f80 RCX: 00007ffb1677dff9 [ 286.263466][T11904] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000020000280 [ 286.271421][T11904] RBP: 00007ffb167f0296 R08: 0000000000000000 R09: 0000000000000000 [ 286.279377][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.287341][T11904] R13: 0000000000000000 R14: 00007ffb16935f80 R15: 00007ffc058c79d8 [ 286.295310][T11904] [ 286.356301][ T3639] ocfs2: Unmounting device (7,4) on (node local)