last executing test programs: 13m28.396414017s ago: executing program 0 (id=4720): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, 0x0, &(0x7f0000000140)) 13m28.321285776s ago: executing program 0 (id=4721): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000019340)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 13m28.102514844s ago: executing program 0 (id=4725): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$OTPLOCK(r0, 0x800c4d10, 0x0) 13m27.780683863s ago: executing program 0 (id=4731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e5b74000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 13m27.445263204s ago: executing program 0 (id=4737): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xd}, 0x50) 13m21.833974682s ago: executing program 0 (id=4774): r0 = syz_open_dev$vbi(&(0x7f0000000480), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x9f, 0x0, '\x00', {0x0, @reserved}}) 13m21.080353245s ago: executing program 32 (id=4774): r0 = syz_open_dev$vbi(&(0x7f0000000480), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x9f, 0x0, '\x00', {0x0, @reserved}}) 2m38.161928207s ago: executing program 1 (id=12496): syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file0\x00', 0x10001, &(0x7f0000003140)=ANY=[], 0x3, 0xa76, &(0x7f00000000c0)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=") open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x30) 2m37.216654018s ago: executing program 1 (id=12503): creat(&(0x7f00000002c0)='./file0\x00', 0x1) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='virtiofs\x00', 0x200000, 0x0) 2m36.886373232s ago: executing program 1 (id=12507): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9), 0x10) 2m36.496298908s ago: executing program 1 (id=12509): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000840)=ANY=[@ANYBLOB='keep_last_dots,errors=continue,errors=remount-ro,allow_utime=00000000000000000141077,discard,dmask=00000000000000000000003,iocharset=cp864,utf8,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c6d61736b3d5e4d41595f415050454e442c64656e636f6e746578743d73797361646d5f752c736d61636b66736465663d212c6673636f6e746578743d73746166665f752c736d61636b6673726f6f743d2e212d8f2c2b2c736d61636b6673726f6f743d646d61736b2c6f626a5f747970653df12124215d293a27242c636f6e746578743d73746166665f752c00"], 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2m35.59426649s ago: executing program 1 (id=12513): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) 2m34.5025972s ago: executing program 1 (id=12517): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x2, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 2m33.57592184s ago: executing program 33 (id=12517): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x2, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 4.556749397s ago: executing program 5 (id=13716): add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 4.176860344s ago: executing program 5 (id=13720): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x1f, 0xffffffff, 0x9, 0x5, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x0, 0x1, 0x200080, 0x80000006, 0xffffffbb, 0x2000000b, 0x5, 0x7fffffff, 0xffffffff, 0xcaa1, 0x17f, 0x200008, 0x8, 0xf39e, 0xffffffff, 0x8, 0xa6b3, 0xffffffff, 0xfffffff8]}) 4.052375444s ago: executing program 2 (id=13721): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0xe61c) 3.813380504s ago: executing program 5 (id=13723): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000500)=[{0x1000, 0x1, 0x22, &(0x7f0000000100)="39d7b9869f88db624111cf89ae08a2150fecb3b21af437eff81a810ec583528b5626"}, {0x9, 0x4000, 0x0, 0x0}], 0x2}) 3.568729906s ago: executing program 6 (id=13726): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e04, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x10003}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 2.936804371s ago: executing program 2 (id=13729): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1000000, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2.608118676s ago: executing program 2 (id=13731): r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 2.490810309s ago: executing program 6 (id=13734): io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.392440003s ago: executing program 2 (id=13735): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)) 2.309710898s ago: executing program 3 (id=13737): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9ea}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x0) 2.22483011s ago: executing program 5 (id=13738): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c09, &(0x7f0000008cc0)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB, @ANYBLOB="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", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.128713762s ago: executing program 6 (id=13739): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001480)=""/71, 0x47) 2.091010615s ago: executing program 2 (id=13741): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 2.002367863s ago: executing program 3 (id=13742): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 1.816868844s ago: executing program 6 (id=13743): syz_mount_image$jfs(&(0x7f0000000340), &(0x7f0000000040)='./file1\x00', 0x3210846, &(0x7f0000000ac0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c646973636172643d3078303030303030303030303030303030342c696f636861727365743d69736f383835392d392c646973636172642c696f636861727365743d6d6163726f6d616e2c6572726f72733d72656d6f756e742d726f2c71756f74612c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c75737271756f74612c006ff298bdf09f85ee9642cda8"], 0x24, 0x62d7, &(0x7f0000021240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/50, 0x32) 1.816383574s ago: executing program 4 (id=13744): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r0, &(0x7f0000000100)=0x100000000, 0x12) 1.683324449s ago: executing program 3 (id=13745): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000f80)=""/64, 0x40}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2}, 0xfff}], 0x1, 0x40000142, 0x0) 1.639814543s ago: executing program 4 (id=13746): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x800800, &(0x7f0000000a40)={[{@nls={'nls', 0x3d, 'iso8859-2'}}, {@nobarrier}, {@part={'part', 0x3d, 0x3}}, {@part={'part', 0x3d, 0x9}}]}, 0x1, 0x609, &(0x7f00000023c0)="$eJzs3U9vHGcdB/DvbGwnG0TitklbEAgrOYAakXi9beoDEgEh5EOFKnHppQcrcRIrG7eyt8itEHL4e+UdtAg5Z04cEIdIcOYlYIlDD0hckW9GMztrb5ytY8dO1qafj/Ts8zzzzDzzzC8zz+7MxtoAX1pz72X8UYrMXXlntaxvrLc7G+vt+/1yktNJGslYL0uxlBTjyY30Ur5WLqy7K75oP+9/+vbs562HD3q1sV4aryqNvbbbn7U6ZSrJqTo/qv5uHrK/0wPlMmCX+4GDUdt6wtpBNj/kdQscB0X1vrl1fvfyyeRskjP997F6dmi8+BEerQPNcgAAAHBCnd/MZlZzbtTjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJOk9/v/ZValRr88laL/+/8T9bLU5RPt0agHAAAAAAAAAABH4Fub2cxqzvXrW0X1nf+lqnKhei3yUVaykOVczWrm0003y2klmRzoaGJ1vttdbj225VeGbjkzdMuZZz+G/574/4UAAAAAAAAAAIf2y8ztfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHQZGc6mVVutAvT6YxluRMkolyvbXkr/3ySfZo1AMAAACAF+D8ZjazmnP9+lZR3fO/Wt33n8lHWUo3i+mmk4Xcqp4F9O76Gxvr7c7Gevt+mZ7s9wf/OdAwqh7Te/YwfM/T1RoXq/Y/TiRz+XF+miuZyrtZzmJ+lvl0s5Cp/KgqzafIZP30YrI/zuHjvfFY7d2njfX1aiTN3M5iNbaruZkP0smtNKpjqNbZe48PyugU36/tM0a36rw8ot/X+Yu3NmTZZBWR8e2ITNexL6Px0t6ROOB5sntPrTS2n0FdeA4xP1vnZax/O7KYD7M7EjMDZ9+re0ciufSvb/75bmfp3t3bK1eOzyE9o92RaA9E4rUvVSQm6mj0ZtH+bFl6+mx5qdr2XBbzk3yQW1nIW5nNW5nJm3kz05nN9YG4Xnz6tXYnyUGutcvfqQvNJL+r8yS/OnxcDquM60sDcR1vZHumm6zaBue+nSi9fPQz0tjX60KjDk3jCI/zcHZHojUQiVf2jsQftsrXlc7SveW78x/uc3/frvPysv3NMZqbm9X58nL5j1XVHz87yrZXhra1qrYL222NJ9ou/vOrddvTrtSJ+jPckz3NVG2vDW1rV22vD7QN+5QDwLF39o2zE81/N//R/Kz56+bd5jtnfnh69vQ3JjL+97G/nPpT42Hje8Ub+Sy/2Ln/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt3Kx5/cm+90FpYVFE5sYaw+m4/LeP4fCiOemIDn7lr3/ofXVj7+5LuL9+fvLNxZWGq3W9dnZq/Pzly/dnuxszDdex31MIHnYOdNf9QjAQAAAAAAAAAAAPbrRfw5waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjZ5t7L+KMUaU1fnS7rG+vtTpn65Z01x5I0khQ/T4q/JTfSS5kc6K74ov28/+nbs5+3Hj7Y6Wusv35jr+32Z61OmUpyqs6Pqr+bh+6v2D7CMmCX+4GDUftfAAAA//9GJQ5X") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000d00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f98a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000140)) 1.472763011s ago: executing program 3 (id=13747): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0xc03e) 1.371715022s ago: executing program 4 (id=13748): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) 1.185954205s ago: executing program 4 (id=13749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xa7cb901a56d21315, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) 968.534501ms ago: executing program 4 (id=13750): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1000004, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 946.610934ms ago: executing program 3 (id=13751): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000580)={[{@nomblk_io_submit}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@dax_never}, {@bsdgroups}, {@usrjquota, 0x22}, {@nodioread_nolock}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 773.441795ms ago: executing program 5 (id=13752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 484.703577ms ago: executing program 4 (id=13753): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3bdH6Q6O0SN02WXFVTgCvUL3FWegu267iyDCnkQhMiHExoTo+yR7MmPr5RnB4o1HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc0t9iMf318/OwaZz1ppl2ngYAAACosyoW0/KPcdUfpfF3aehj6mcRkUdEXe3ei1c7MXspTrHn/uJeDr8jygjb/zFIx5uI+JqOqw+n/hQAAADg5VrO5pOqWq9O43MnRJeqSZv87beW4mURUYz/tRQt354+PerWzeH5oe33ux8/9lzNjkutnNiKxktmbpRTbv22oh3WSz/322Z4p8mqJu8uHQAAoCu7lUCHVQgAAAAd+37uBDiP8q1nWoufFvAPqia9EHy90wMAAAAu0LGrngEAAIDnaPTg1bL+v4D9/97/t/8fAAAAPFm1/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntCoW0+VsPmkaZ72p8edLRN14jXaeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK48jpfnGa/GTLbR60zy7nkl+XRqfDs1fp0b/yRj3f0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADgX5/vrrSACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqAmVhQ5m7IBgRQgKFrf9D51bqUrYONxSJqQPIPrt5PYo4qGJfk89Hen5fW47f9zlRlK+fcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG389m6cF5uFSdypjt28d3W96G9N9YXr27eXi1bE2T9c/6u9Snz+vZzuZEvtJQIAAMDBkdf1fUQ/ejurRdBZKOv/Xn1OUfN/9+wkruv56bq/7uvav2i//nL3xQcDLUzGKS56bmM0PP73VLr5Hs5znj33r2d0yztfPnvJy29I572tF8a98n5m39y48U6/DA81kS0A8H8cq/sqqP8eKvpBm4kBcGB0q1a4U9X/+UK7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ob8VT9dxFhHL3d24cOve1fWyn9q/vn17uW6nr13bTq9ZXKIXEec2RsPjTU3kCXDp8pWP10aj4cXmg1cior3Rq+CDGc6JaDNDweMGnepnfbavOhoR7efcftDyLyYAAPadXtWKuv5Ob2e1OJYtRvz5/cP1/2tJHGn9P9Wn9f/dD0/fTMdK6/9BYzOcfyubFz5buXT5yhsbF9bOD88PP3nzxOCtwckzp06dWSmflax4YgIAAMDj6Vctrf87ixHjqfX/I0kcM9b/n387+DIdK1f/P9Luol/bmQAAABxszx/94/fsEcezfj++WNvcvDiYbLP71f6JybaFVP+zQ1VL6/98se2sAAAAgCaMt7KH1v/PJnHMuP7/zA8v/ZReM4+Iw9X6/7H1T0dnm5tOS+7PdFYT/06851MFAABgrh2uWrr+3yvf/+88eOWhExGvvzqJq48BnKn+z9/9+sd0rPT9/5PNTXEudZYm96PslyK6S21nBAAAwH72VNWKYv+33s7qRz8feb/v/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApv0VAAD//+NPQpo=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x40, 0x0, 0x8800004) 367.152033ms ago: executing program 6 (id=13754): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) unshare(0x2a020400) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000580)=0x1) 234.672386ms ago: executing program 5 (id=13755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 181.51621ms ago: executing program 6 (id=13756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd974001dcdf250100000004000180100002800c000180040001"], 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 114.465661ms ago: executing program 2 (id=13757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000000)=0x13) 0s ago: executing program 3 (id=13758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @local, 0x400}}, 0x0, 0x0, 0x9, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b015808abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) kernel console output (not intermixed with test programs): 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1277.370815][ T989] Please send a copy of this message to and [ 1277.887765][ T989] ums-karma 6-1:1.0: probe with driver ums-karma failed with error -5 [ 1277.904876][ T989] usb 6-1: USB disconnect, device number 30 [ 1278.478159][ T2688] loop6: detected capacity change from 0 to 512 [ 1278.616921][ T2688] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.12825: bad orphan inode 32 [ 1278.627306][ T2688] loop6: lost filesystem error report for type 5 error -117 [ 1278.627872][ T2688] ext4_test_bit(bit=31, block=18) = 0 [ 1278.644563][ T2688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1278.644702][ T2688] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.090065][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 1279.090473][ T32] audit: type=1800 audit(2000000368.956:587): pid=2688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12825" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1279.225252][ T2713] loop2: detected capacity change from 0 to 512 [ 1279.335920][ T1736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.378352][ T2713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.469392][ T2713] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.12832: Directory block failed checksum [ 1279.758200][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.993020][ T2738] m920x_read = error: -19 [ 1280.094951][ T2742] Timeout policy `syz1' can only be used by L3 protocol number 3095 [ 1280.406866][ T2755] loop2: detected capacity change from 0 to 1024 [ 1280.449446][ T2755] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1280.463163][ T2755] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1280.475765][ T2755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.586239][ T5636] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1280.610651][ T2755] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1280.781464][ T5636] usb 6-1: Using ep0 maxpacket: 32 [ 1280.783795][ T5636] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1280.785898][ T5636] usb 6-1: config index 0 descriptor too short (expected 347, got 91) [ 1280.785934][ T5636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.785997][ T5636] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 55, changing to 9 [ 1280.786033][ T5636] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1280.800684][ T5636] usb 6-1: Dual-Role OTG device on HNP port [ 1280.807211][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.807292][ T5636] usb 6-1: Product: syz [ 1280.807342][ T5636] usb 6-1: Manufacturer: syz [ 1280.807396][ T5636] usb 6-1: SerialNumber: syz [ 1280.872353][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.162385][ T5636] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1281.162532][ T5636] usb 6-1: MIDIStreaming interface descriptor not found [ 1281.449229][ T5636] usb 6-1: USB disconnect, device number 31 [ 1281.593160][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.721388][ T2786] sctp: [Deprecated]: syz.3.12852 (pid 2786) Use of int in max_burst socket option. [ 1281.721388][ T2786] Use struct sctp_assoc_value instead [ 1282.015274][T29020] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1282.181047][T29020] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1282.206150][T29020] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1282.206221][T29020] usb 3-1: config 0 has no interface number 0 [ 1282.206372][T29020] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1282.206444][T29020] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1282.206521][T29020] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 1282.206591][T29020] usb 3-1: config 0 interface 2 has no altsetting 0 [ 1282.233710][T29020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.233794][T29020] usb 3-1: Product: syz [ 1282.233883][T29020] usb 3-1: Manufacturer: syz [ 1282.233927][T29020] usb 3-1: SerialNumber: syz [ 1282.287071][T29020] usb 3-1: config 0 descriptor?? [ 1282.306328][ T2779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1282.306861][ T2779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1282.359779][T29020] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1282.629485][ T2803] loop3: detected capacity change from 0 to 512 [ 1282.642754][ T2803] EXT4-fs: Ignoring removed bh option [ 1282.706037][ T2803] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1282.706092][ T2803] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1282.800842][ T2803] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.12859: Corrupt directory, running e2fsck is recommended [ 1282.821219][ T2803] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1282.831451][ T2803] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.12859: corrupted in-inode xattr: e_name out of bounds [ 1282.847050][ T2803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1282.853460][ T2803] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.12859: couldn't read orphan inode 15 (err -117) [ 1282.853549][ T2803] loop3: lost filesystem error report for type 5 error -117 [ 1282.863486][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 1282.863512][ C0] EXT4-fs (loop3): initial error at time 2000000372: ext4_iget_extra_inode:5210: inode 15 [ 1282.863549][ C0] EXT4-fs (loop3): last error at time 2000000372: ext4_orphan_get:1408 [ 1282.920400][ T2803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.364821][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.495411][ T5349] usb 3-1: USB disconnect, device number 20 [ 1283.520557][ T2820] netlink: 'syz.6.12862': attribute type 4 has an invalid length. [ 1283.529629][ T2821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12865'. [ 1283.529813][ T2821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12865'. [ 1283.961832][ T2840] loop5: detected capacity change from 0 to 64 [ 1284.007489][ T2840] syz.5.12870: attempt to access beyond end of device [ 1284.007489][ T2840] loop5: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 1284.274548][ T2848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1284.419890][ T2861] Bluetooth: MGMT ver 1.23 [ 1284.688253][ T2870] loop5: detected capacity change from 0 to 512 [ 1284.707004][ T2870] EXT4-fs: Ignoring removed nobh option [ 1284.732664][ T2870] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1284.739226][ T2870] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 1284.739528][ T2870] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.12877: inode has both inline data and extents flags [ 1284.739590][ T2870] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1284.744726][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1284.744780][ C1] EXT4-fs (loop5): initial error at time 2000000374: ext4_orphan_get:1403: inode 13 [ 1284.744869][ C1] EXT4-fs (loop5): last error at time 2000000374: ext4_orphan_get:1403: inode 13 [ 1284.774931][ T2870] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.12877: couldn't read orphan inode 13 (err -117) [ 1284.775016][ T2870] loop5: lost filesystem error report for type 5 error -117 [ 1284.830327][ T2870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.940054][ T2877] loop6: detected capacity change from 0 to 512 [ 1285.007123][ T2877] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1285.007209][ T2877] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1285.039296][ T2877] EXT4-fs (loop6): 1 truncate cleaned up [ 1285.087232][ T2877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.187247][ T2877] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 1285.224851][T16597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.441784][ T1736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.983214][ T2904] vlan2: entered allmulticast mode [ 1286.011814][T29020] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1286.187742][T29020] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1286.201614][T29020] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1286.201662][T29020] usb 7-1: config 0 has no interface number 0 [ 1286.228754][T29020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.236903][T29020] usb 7-1: Product: syz [ 1286.236926][T29020] usb 7-1: Manufacturer: syz [ 1286.236944][T29020] usb 7-1: SerialNumber: syz [ 1286.263522][T29020] usb 7-1: config 0 descriptor?? [ 1286.297560][T29020] usb 7-1: selecting invalid altsetting 1 [ 1286.313953][T29020] dvb_ttusb_budget: ttusb_init_controller: error [ 1286.320566][T29020] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1286.335396][ T2915] overlayfs: workdir and upperdir must be separate subtrees [ 1286.662421][T29020] DVB: Unable to find symbol stv0299_attach() [ 1286.919540][T29020] DVB: Unable to find symbol tda8083_attach() [ 1286.919576][T29020] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1286.955203][T29020] usb 7-1: USB disconnect, device number 2 [ 1287.182027][ T5636] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1287.356221][ T5636] usb 3-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=77.7d [ 1287.371315][ T5636] usb 3-1: config 49 has an invalid interface number: 167 but max is 1 [ 1287.371364][ T5636] usb 3-1: config 49 contains an unexpected descriptor of type 0x1, skipping [ 1287.371404][ T5636] usb 3-1: config 49 has an invalid interface descriptor of length 4, skipping [ 1287.371432][ T5636] usb 3-1: config 49 has an invalid descriptor of length 112, skipping remainder of the config [ 1287.371461][ T5636] usb 3-1: config 49 has 1 interface, different from the descriptor's value: 2 [ 1287.371490][ T5636] usb 3-1: config 49 has no interface number 0 [ 1287.371540][ T5636] usb 3-1: config 49 interface 167 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1287.371570][ T5636] usb 3-1: config 49 interface 167 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 1287.371600][ T5636] usb 3-1: config 49 interface 167 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1287.371635][ T5636] usb 3-1: config 49 interface 167 has no altsetting 0 [ 1287.491198][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.491251][ T5636] usb 3-1: Product: syz [ 1287.491286][ T5636] usb 3-1: Manufacturer: syz [ 1287.491308][ T5636] usb 3-1: SerialNumber: syz [ 1287.564614][ T2942] netlink: 'syz.6.12899': attribute type 21 has an invalid length. [ 1287.601492][ T2941] loop3: detected capacity change from 0 to 8 [ 1287.805165][ T5636] imon 3-1:49.167: unable to register, err -19 [ 1287.823114][ T5636] usb 3-1: USB disconnect, device number 21 [ 1287.919239][ T2948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12902'. [ 1287.919777][ T2948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12902'. [ 1288.402978][ T2965] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1288.682835][ T2974] netlink: 'syz.2.12911': attribute type 16 has an invalid length. [ 1288.682878][ T2974] netlink: 'syz.2.12911': attribute type 17 has an invalid length. [ 1288.683073][ T2974] lo: left allmulticast mode [ 1288.717286][ T2974] tunl0: left allmulticast mode [ 1288.726758][ T2974] gre0: left allmulticast mode [ 1288.761951][ T2974] gretap0: left allmulticast mode [ 1288.916487][ T2974] erspan0: left allmulticast mode [ 1288.957472][ T2974] ip_vti0: left allmulticast mode [ 1289.024771][ T2974] ip6_vti0: left allmulticast mode [ 1289.064791][ T2974] sit0: left allmulticast mode [ 1289.437994][ T2974] ip6tnl0: left allmulticast mode [ 1289.506169][ T2974] ip6gre0: left allmulticast mode [ 1289.550835][ T2974] syz_tun: left allmulticast mode [ 1289.593125][ T2974] ip6gretap0: left allmulticast mode [ 1289.616989][ T2974] vcan0: left allmulticast mode [ 1289.858854][ T2974] dummy0: left allmulticast mode [ 1289.918306][ T2974] nlmon0: left allmulticast mode [ 1289.927411][ T2974] batadv0: left promiscuous mode [ 1289.938055][ T2974] vxcan0: left allmulticast mode [ 1289.947896][ T2974] vxcan1: left allmulticast mode [ 1290.065676][ T2974] veth0: left allmulticast mode [ 1290.150801][ T2974] veth1: left allmulticast mode [ 1290.180078][ T2985] loop6: detected capacity change from 0 to 32768 [ 1290.315133][ T3004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12920'. [ 1290.334570][ T2974] wg0: left allmulticast mode [ 1290.590978][ T2974] wg1: left allmulticast mode [ 1290.619040][ T2974] wg2: left allmulticast mode [ 1290.632314][ T2974] veth0_to_bridge: left allmulticast mode [ 1290.675041][ T2974] (: left allmulticast mode [ 1290.710233][ T2974] veth1_to_bridge: left allmulticast mode [ 1290.736708][ T2974] bridge_slave_1: left allmulticast mode [ 1290.793678][ T2974] veth0_to_bond: left allmulticast mode [ 1290.825687][ T2974] bond_slave_0: left allmulticast mode [ 1290.845380][ T2974] veth1_to_bond: left allmulticast mode [ 1290.877269][ T2974] bond_slave_1: left allmulticast mode [ 1290.907148][ T2974] veth0_to_team: left allmulticast mode [ 1290.927357][ T2974] team_slave_0: left allmulticast mode [ 1290.937373][ T2974] veth1_to_team: left allmulticast mode [ 1290.950353][ T2974] team_slave_1: left allmulticast mode [ 1290.961564][ T2974] veth0_to_batadv: left allmulticast mode [ 1290.974757][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.982501][ T2974] batadv_slave_0: left allmulticast mode [ 1290.991651][ T2974] veth1_to_batadv: left allmulticast mode [ 1291.001173][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.009019][ T2974] batadv_slave_1: left allmulticast mode [ 1291.018324][ T2974] xfrm0: left allmulticast mode [ 1291.026521][ T2974] veth0_to_hsr: left allmulticast mode [ 1291.216945][ T2974] veth1_to_hsr: left allmulticast mode [ 1291.238552][ T2974] hsr0: left allmulticast mode [ 1291.244621][ T2974] hsr_slave_0: left allmulticast mode [ 1291.244674][ T2974] hsr_slave_1: left allmulticast mode [ 1291.264026][ T2974] veth1_virt_wifi: left allmulticast mode [ 1291.283279][ T2974] veth0_virt_wifi: left allmulticast mode [ 1291.367684][ T2974] virt_wifi0: left allmulticast mode [ 1291.387949][ T3000] loop5: detected capacity change from 0 to 32768 [ 1291.409093][ T3000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12921 (3000) [ 1291.535876][ T2974] vlan0: left promiscuous mode [ 1291.551887][ T2974] vlan1: left promiscuous mode [ 1291.554450][ T2974] vlan1: left allmulticast mode [ 1291.556996][ T3000] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1291.557028][ T3000] BTRFS info (device loop5): using sha256 checksum algorithm [ 1291.633859][ T2974] macvlan0: left allmulticast mode [ 1291.778825][ T3000] BTRFS info (device loop5): enabling ssd optimizations [ 1291.779028][ T3000] BTRFS info (device loop5): turning on async discard [ 1291.779225][ T3000] BTRFS info (device loop5): enabling free space tree [ 1291.851055][ T2974] veth1_vlan: left allmulticast mode [ 1291.867287][ T2974] macvlan1: left promiscuous mode [ 1291.868157][ T2974] macvlan1: left allmulticast mode [ 1291.986573][ T2974] ipvlan1: left allmulticast mode [ 1291.992037][ T2974] veth0_vlan: left allmulticast mode [ 1292.086961][ T2974] veth0_macvtap: left allmulticast mode [ 1292.094579][ T2974] macvtap0: left allmulticast mode [ 1292.194554][ T2974] veth1_macvtap: left allmulticast mode [ 1292.195390][ T2974] macsec0: left allmulticast mode [ 1292.296512][ T2974] geneve0: left allmulticast mode [ 1292.430984][ T2974] geneve1: left allmulticast mode [ 1292.464548][ T2974] netdevsim netdevsim2 : left allmulticast mode [ 1292.598035][ T2974] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1292.700847][ T2974] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 1292.730826][ T2974] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 1292.744003][ T2974] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 1292.751432][ T2974] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1292.759734][ T2974] bridge1: left allmulticast mode [ 1292.766483][ T2974] bond1: left allmulticast mode [ 1292.773120][ T2974] ip6gretap1: left allmulticast mode [ 1292.784834][ T2974] bridge2: left allmulticast mode [ 1292.785033][ T2974] sit1: left allmulticast mode [ 1292.785190][ T2974] ip6gre1: left allmulticast mode [ 1292.802169][ T2974] bridge3: left allmulticast mode [ 1292.809990][ T2974] mac80211_hwsim hwsim23 wlan3: left allmulticast mode [ 1292.820828][ T2974] ip6tnl2: left promiscuous mode [ 1292.836499][ T2974] bond2: left allmulticast mode [ 1292.842984][ T2974] bridge7: left promiscuous mode [ 1293.015997][ T2974] bridge0: left promiscuous mode [ 1293.029794][T16597] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1293.175695][ T2974] gretap1: left promiscuous mode [ 1293.176064][ T2974] gretap1: left allmulticast mode [ 1293.257802][ T2974] veth6: left allmulticast mode [ 1293.308606][ T1616] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.308933][ T1616] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.309035][ T1616] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.309145][ T1616] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.642536][ T3056] netlink: 'syz.6.12931': attribute type 2 has an invalid length. [ 1294.111215][ T3071] [U] [ 1294.914367][ T3089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12946'. [ 1295.984533][ T3112] netlink: 'syz.4.12955': attribute type 1 has an invalid length. [ 1295.995039][ T3112] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12955'. [ 1296.005495][ T3112] netlink: 'syz.4.12955': attribute type 1 has an invalid length. [ 1296.053354][ T5349] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1296.228209][ T5349] usb 3-1: Using ep0 maxpacket: 32 [ 1296.231107][ T5349] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1296.238036][ T5349] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 11 [ 1296.253096][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1296.253181][ T5349] usb 3-1: Product: syz [ 1296.253224][ T5349] usb 3-1: Manufacturer: syz [ 1296.253266][ T5349] usb 3-1: SerialNumber: syz [ 1296.278380][ T5349] usb 3-1: config 0 descriptor?? [ 1296.283492][ T3108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1296.529912][ T32] audit: type=1326 audit(2000000385.057:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.530503][ T32] audit: type=1326 audit(2000000385.057:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.530648][ T32] audit: type=1326 audit(2000000385.057:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.530776][ T32] audit: type=1326 audit(2000000385.066:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.538463][ T32] audit: type=1326 audit(2000000385.066:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.538632][ T32] audit: type=1326 audit(2000000385.066:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.538760][ T32] audit: type=1326 audit(2000000385.066:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.725609][ T32] audit: type=1326 audit(2000000385.066:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.726187][ T32] audit: type=1326 audit(2000000385.103:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3120 comm="syz.3.12958" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f301159e0d9 code=0x7ffc0000 [ 1296.864742][ T5636] usb 3-1: USB disconnect, device number 22 [ 1297.078234][ T3104] loop6: detected capacity change from 0 to 32768 [ 1297.150319][ T3104] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1297.150786][ T3104] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1297.235697][ T3104] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1297.254623][ T5747] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1297.254999][ T5747] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1297.379538][ T3138] Set syz1 is full, maxelem 2 reached [ 1297.572143][ T5747] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 292ms [ 1297.573550][ T5747] gfs2: fsid=syz:syz.0: jid=0: Done [ 1297.587760][ T3104] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1297.875052][ T3104] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1297.946149][ T3156] loop2: detected capacity change from 0 to 2048 [ 1298.124238][ T3156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1298.562486][ T3162] loop5: detected capacity change from 0 to 2048 [ 1298.627709][ T3168] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1298.741469][ T5747] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1298.961267][ T5747] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1298.970248][ T5747] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1298.970423][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.980347][ T5747] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1298.980428][ T5747] usb 4-1: Manufacturer: syz [ 1299.015869][ T5747] usb 4-1: config 0 descriptor?? [ 1299.038860][ T1736] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 1299.059032][ T1736] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1299.071443][ T1736] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:1736 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 1299.083673][ T1736] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1299.092143][ T1736] CPU: 0 UID: 0 PID: 1736 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.092183][ T1736] Tainted: [L]=SOFTLOCKUP [ 1299.092192][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1299.092209][ T1736] Call Trace: [ 1299.092220][ T1736] [ 1299.092231][ T1736] dump_stack_lvl+0xe8/0x150 [ 1299.092274][ T1736] gfs2_withdraw+0xc3/0x1b0 [ 1299.092310][ T1736] inode_go_instantiate+0xbc1/0x12b0 [ 1299.092345][ T1736] ? queue_delayed_work_on+0x12f/0x1e0 [ 1299.092387][ T1736] ? preempt_schedule_common+0x7f/0xd0 [ 1299.092423][ T1736] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1299.092471][ T1736] gfs2_instantiate+0x168/0x220 [ 1299.092511][ T1736] gfs2_glock_wait+0x1d4/0x2a0 [ 1299.092537][ T1736] do_sync+0x49c/0xbb0 [ 1299.092564][ T1736] ? gfs2_quota_sync+0x353/0x450 [ 1299.092602][ T1736] ? __pfx_do_sync+0x10/0x10 [ 1299.092641][ T1736] ? gfs2_quota_sync+0x353/0x450 [ 1299.092674][ T1736] ? do_raw_spin_unlock+0xf5/0x200 [ 1299.092723][ T1736] gfs2_quota_sync+0x353/0x450 [ 1299.092761][ T1736] gfs2_sync_fs+0x4c/0xb0 [ 1299.092789][ T1736] sync_filesystem+0xf1/0x240 [ 1299.092832][ T1736] generic_shutdown_super+0x77/0x2d0 [ 1299.092877][ T1736] kill_block_super+0x44/0xa0 [ 1299.092914][ T1736] deactivate_locked_super+0xbc/0x110 [ 1299.092950][ T1736] cleanup_mnt+0x3d3/0x460 [ 1299.092991][ T1736] task_work_run+0x1d9/0x270 [ 1299.093021][ T1736] ? __pfx_task_work_run+0x10/0x10 [ 1299.093059][ T1736] exit_to_user_mode_loop+0x204/0x770 [ 1299.093085][ T1736] ? rcu_is_watching+0x16/0xb0 [ 1299.093120][ T1736] do_syscall_64+0x328/0x520 [ 1299.093167][ T1736] ? trace_irq_disable+0x3b/0x140 [ 1299.093191][ T1736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.093216][ T1736] ? clear_bhb_loop+0x70/0xc0 [ 1299.093247][ T1736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.093271][ T1736] RIP: 0033:0x7fb1ba19f317 [ 1299.093296][ T1736] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1299.093318][ T1736] RSP: 002b:00007fff9bd39ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1299.093344][ T1736] RAX: 0000000000000000 RBX: 00007fb1ba234474 RCX: 00007fb1ba19f317 [ 1299.093361][ T1736] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9bd3a0b0 [ 1299.093377][ T1736] RBP: 00007fff9bd3a0b0 R08: 00007fff9bd3b0b0 R09: 00000000ffffffff [ 1299.093394][ T1736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9bd3b140 [ 1299.093409][ T1736] R13: 00007fb1ba234474 R14: 000000000012c226 R15: 00007fff9bd3b180 [ 1299.093453][ T1736] [ 1299.109117][ T1736] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1299.607286][ T5747] rc_core: IR keymap rc-hauppauge not found [ 1299.607515][ T5747] Registered IR keymap rc-empty [ 1299.614671][ T5747] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1299.642952][ T5747] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 1299.955884][ T3186] loop5: detected capacity change from 0 to 4096 [ 1300.060655][ T5747] usb 4-1: USB disconnect, device number 18 [ 1300.141503][ T3191] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1300.212939][ T3193] tipc: Enabling of bearer rejected, failed to enable media [ 1301.053231][ T3231] loop2: detected capacity change from 0 to 64 [ 1301.151213][ T3235] netlink: 112 bytes leftover after parsing attributes in process `syz.5.13002'. [ 1301.441918][ T3237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13003'. [ 1301.593647][ T3242] netlink: Setting conntrack mark requires 'commit' flag. [ 1301.593923][ T3242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1301.999945][T29020] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1302.047569][T16231] Bluetooth: hci1: link tx timeout [ 1302.048553][T16231] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1302.161998][T29020] usb 4-1: Using ep0 maxpacket: 32 [ 1302.167886][T29020] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1302.179313][T29020] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1302.179376][T29020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.179423][T29020] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1302.179474][T29020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.284460][T29020] usb 4-1: config 0 descriptor?? [ 1302.450125][ T3243] loop5: detected capacity change from 0 to 32768 [ 1302.502631][ T3243] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13006 (3243) [ 1302.749200][ T3243] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1302.761095][ T3243] BTRFS info (device loop5): using crc32c checksum algorithm [ 1302.778940][ T3263] lo: Caught tx_queue_len zero misconfig [ 1302.907250][T29020] saitek 0003:06A3:0CFA.0001: unknown main item tag 0x1 [ 1303.181784][ T3243] BTRFS info (device loop5): enabling ssd optimizations [ 1303.181836][ T3243] BTRFS info (device loop5): turning on async discard [ 1303.181876][ T3243] BTRFS info (device loop5): enabling free space tree [ 1303.441707][T29020] saitek 0003:06A3:0CFA.0001: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.3-1/input0 [ 1303.471989][T16597] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1303.499613][T29020] usb 4-1: USB disconnect, device number 19 [ 1303.604383][ T5747] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1303.791403][ T5747] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1303.800153][ T5747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.800295][ T5747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1303.800358][ T5747] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1303.800422][ T5747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.800566][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.814273][ T3286] fido_id[3286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1303.959933][ T3291] netlink: 'syz.4.13021': attribute type 28 has an invalid length. [ 1304.309895][T16231] Bluetooth: hci1: command 0x0406 tx timeout [ 1304.539688][ T5747] gud 3-1:1.0: Failed to add properties (error=-71) [ 1304.539935][ T5747] gud 3-1:1.0: probe with driver gud failed with error -71 [ 1304.841491][ T1736] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 1304.842051][ T1736] CPU: 1 UID: 0 PID: 1736 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.842143][ T1736] Tainted: [L]=SOFTLOCKUP [ 1304.842166][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1304.842205][ T1736] Call Trace: [ 1304.842228][ T1736] [ 1304.842269][ T1736] dump_stack_lvl+0xe8/0x150 [ 1304.842373][ T1736] gfs2_assert_warn_i+0x18c/0x2c0 [ 1304.842486][ T1736] gfs2_make_fs_ro+0x30d/0x320 [ 1304.842559][ T1736] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 1304.842630][ T1736] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1304.842727][ T1736] ? flush_work+0xd/0x30 [ 1304.842813][ T1736] gfs2_put_super+0x235/0x870 [ 1304.842896][ T1736] ? __pfx_gfs2_put_super+0x10/0x10 [ 1304.842959][ T1736] generic_shutdown_super+0x13d/0x2d0 [ 1304.843050][ T1736] kill_block_super+0x44/0xa0 [ 1304.843144][ T1736] deactivate_locked_super+0xbc/0x110 [ 1304.843259][ T1736] cleanup_mnt+0x3d3/0x460 [ 1304.843361][ T1736] task_work_run+0x1d9/0x270 [ 1304.843433][ T1736] ? __pfx_task_work_run+0x10/0x10 [ 1304.843526][ T1736] exit_to_user_mode_loop+0x204/0x770 [ 1304.843591][ T1736] ? rcu_is_watching+0x16/0xb0 [ 1304.843674][ T1736] do_syscall_64+0x328/0x520 [ 1304.843750][ T1736] ? trace_irq_disable+0x3b/0x140 [ 1304.843810][ T1736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.843878][ T1736] ? clear_bhb_loop+0x70/0xc0 [ 1304.843951][ T1736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.844012][ T1736] RIP: 0033:0x7fb1ba19f317 [ 1304.844073][ T1736] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1304.844124][ T1736] RSP: 002b:00007fff9bd39ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1304.844187][ T1736] RAX: 0000000000000000 RBX: 00007fb1ba234474 RCX: 00007fb1ba19f317 [ 1304.844229][ T1736] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9bd3a0b0 [ 1304.844297][ T1736] RBP: 00007fff9bd3a0b0 R08: 00007fff9bd3b0b0 R09: 00000000ffffffff [ 1304.844338][ T1736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9bd3b140 [ 1304.844379][ T1736] R13: 00007fb1ba234474 R14: 000000000012c226 R15: 00007fff9bd3b180 [ 1304.844470][ T1736] [ 1305.127980][ T5747] usb 3-1: USB disconnect, device number 23 [ 1305.524703][ T3311] loop5: detected capacity change from 0 to 164 [ 1305.541648][ T3311] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1305.633066][ T3307] loop2: detected capacity change from 0 to 4096 [ 1305.656053][ T3307] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1305.752830][ T3307] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1306.286395][ T3321] loop6: detected capacity change from 0 to 512 [ 1306.311925][ T3321] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1306.401933][ T3321] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.13033: bad orphan inode 131072 [ 1306.401984][ T3321] loop6: lost filesystem error report for type 5 error -117 [ 1306.412816][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1306.412841][ C0] EXT4-fs (loop6): initial error at time 2000000394: ext4_orphan_get:1429 [ 1306.412869][ C0] EXT4-fs (loop6): last error at time 2000000394: ext4_orphan_get:1429 [ 1306.452975][ T3321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.185341][ T3321] overlayfs: upper fs needs to support d_type. [ 1307.327759][ T3321] overlayfs: failed index dir cleanup (-512) [ 1307.342563][ T3321] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1307.412565][ T1736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.074421][ T3343] loop2: detected capacity change from 0 to 4096 [ 1308.089776][ T3343] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1308.272653][ T3343] ntfs3(loop2): ino=19, mi_enum_attr [ 1308.272706][ T3343] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1308.363714][ T3332] loop3: detected capacity change from 0 to 32768 [ 1308.386229][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.446903][ T3343] ntfs3(loop2): failed to convert "c46c" to cp863 [ 1308.522540][ T3343] ntfs3(loop2): ino=20, mi_enum_attr [ 1308.540884][ T3332] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1308.777234][ T3331] loop5: detected capacity change from 0 to 32768 [ 1308.791381][ T3359] loop6: detected capacity change from 0 to 512 [ 1308.810683][ T3331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13037 (3331) [ 1308.842117][ T3331] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1308.842177][ T3331] BTRFS info (device loop5): using crc32c checksum algorithm [ 1308.903258][ T3359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.921731][ T3359] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.092419][ T3331] BTRFS info (device loop5): enabling ssd optimizations [ 1309.101766][ T3331] BTRFS info (device loop5): turning on flush-on-commit [ 1309.101828][ T3331] BTRFS info (device loop5): enabling free space tree [ 1309.101854][ T3331] BTRFS info (device loop5): enabling auto defrag [ 1309.101881][ T3331] BTRFS info (device loop5): use lzo compression, level 1 [ 1309.101907][ T3331] BTRFS info (device loop5): max_inline set to 4096 [ 1309.250991][ T3332] XFS (loop3): Ending clean mount [ 1309.362318][ T32] audit: type=1800 audit(2000000396.901:597): pid=3331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13037" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1309.486545][ T3359] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: block 32: comm syz.6.13043: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1309.591784][ T3400] loop2: detected capacity change from 0 to 512 [ 1309.616234][T16597] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1309.702029][ T3359] EXT4-fs error (device loop6): ext4_get_first_dir_block:3550: inode #12: comm syz.6.13043: directory missing '.' [ 1309.768696][ T5632] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1309.863110][ T1736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.037228][ T3400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.039607][ T3400] ext4 filesystem being mounted at /2561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1310.361310][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.439898][T29020] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1310.644068][T29020] usb 5-1: Using ep0 maxpacket: 8 [ 1310.654538][T29020] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 1310.668692][T29020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.668754][T29020] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1310.668850][T29020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.701442][T29020] usb 5-1: config 0 descriptor?? [ 1311.218764][T29020] hid (null): unknown global tag 0xa3 [ 1311.328276][ T3428] netlink: 'syz.3.13051': attribute type 16 has an invalid length. [ 1311.336454][ T3428] netlink: 'syz.3.13051': attribute type 17 has an invalid length. [ 1311.345705][ T3428] lo: left allmulticast mode [ 1311.351882][ T3428] tunl0: left allmulticast mode [ 1311.361216][ T3428] gre0: left promiscuous mode [ 1311.361597][ T3428] gre0: left allmulticast mode [ 1311.362566][ T3428] gretap0: left allmulticast mode [ 1311.363696][ T3428] erspan0: left allmulticast mode [ 1311.364812][ T3428] ip_vti0: left allmulticast mode [ 1311.365968][ T3428] ip6_vti0: left allmulticast mode [ 1311.367082][ T3428] sit0: left allmulticast mode [ 1311.410419][ T3428] ip6tnl0: left allmulticast mode [ 1311.411723][ T3428] ip6gre0: left allmulticast mode [ 1311.413148][ T3428] syz_tun: left allmulticast mode [ 1311.414316][ T3428] ip6gretap0: left allmulticast mode [ 1311.415582][ T3428] bridge0: left allmulticast mode [ 1311.416829][ T3428] vcan0: left allmulticast mode [ 1311.463135][T29020] usb 5-1: string descriptor 0 read error: -71 [ 1311.469893][T29020] uclogic 0003:5543:0047.0002: failed retrieving string descriptor #200: -71 [ 1311.470077][T29020] uclogic 0003:5543:0047.0002: failed retrieving pen parameters: -71 [ 1311.470105][T29020] uclogic 0003:5543:0047.0002: failed probing pen v2 parameters: -71 [ 1311.470202][T29020] uclogic 0003:5543:0047.0002: failed probing parameters: -71 [ 1311.470326][T29020] uclogic 0003:5543:0047.0002: probe with driver uclogic failed with error -71 [ 1311.525997][T29020] usb 5-1: USB disconnect, device number 39 [ 1311.549326][ T3428] dummy0: left allmulticast mode [ 1311.706222][ T3428] nlmon0: left allmulticast mode [ 1311.706523][ T3428] batadv0: left promiscuous mode [ 1311.730691][ T3428] vxcan0: left allmulticast mode [ 1311.731253][ T3428] vxcan1: left allmulticast mode [ 1311.731664][ T3428] veth0: left allmulticast mode [ 1311.732049][ T3428] veth1: left allmulticast mode [ 1311.732460][ T3428] wg0: left allmulticast mode [ 1311.732857][ T3428] wg1: left allmulticast mode [ 1311.733252][ T3428] wg2: left allmulticast mode [ 1311.733643][ T3428] veth0_to_bridge: left allmulticast mode [ 1311.734388][ T3428] veth1_to_bridge: left allmulticast mode [ 1311.735068][ T3428] veth0_to_bond: left allmulticast mode [ 1311.735451][ T3428] veth1_to_bond: left allmulticast mode [ 1311.735909][ T3428] veth0_to_team: left allmulticast mode [ 1311.796512][ T3428] veth1_to_team: left allmulticast mode [ 1311.797287][ T3428] veth0_to_batadv: left allmulticast mode [ 1311.854479][ T3428] batadv_slave_0: left allmulticast mode [ 1311.854927][ T3428] veth1_to_batadv: left allmulticast mode [ 1311.855314][ T3428] batadv_slave_1: left allmulticast mode [ 1311.855822][ T3428] xfrm0: left allmulticast mode [ 1311.856342][ T3428] veth0_to_hsr: left allmulticast mode [ 1311.887680][ T3428] veth1_to_hsr: left allmulticast mode [ 1311.888480][ T3428] hsr0: left allmulticast mode [ 1311.888612][ T3428] hsr_slave_0: left allmulticast mode [ 1311.888657][ T3428] hsr_slave_1: left allmulticast mode [ 1311.889987][ T3428] veth1_virt_wifi: left allmulticast mode [ 1311.890436][ T3428] veth0_virt_wifi: left allmulticast mode [ 1311.890870][ T3428] virt_wifi0: left allmulticast mode [ 1311.891671][ T3428] vlan0: left allmulticast mode [ 1311.892102][ T3428] vlan1: left allmulticast mode [ 1311.941391][ T3428] macvlan1: left allmulticast mode [ 1311.941628][ T3428] ipvlan0: left allmulticast mode [ 1311.941816][ T3428] ipvlan1: left allmulticast mode [ 1311.941837][ T3428] veth0_vlan: left allmulticast mode [ 1311.942005][ T3428] geneve0: left allmulticast mode [ 1311.942171][ T3428] geneve1: left allmulticast mode [ 1311.942371][ T3428] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1311.942395][ T3428] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1311.942804][ T3428] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1311.951573][ T3428] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 1311.951974][ T3428] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1311.952511][ T3428] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1311.952803][ T3428] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1311.964290][ T3428] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 1311.982631][ T3428] bridge1: left allmulticast mode [ 1311.982803][ T3428] mac80211_hwsim hwsim13 wlan3: left allmulticast mode [ 1311.982969][ T3428] syztnl1: left allmulticast mode [ 1311.997726][ T3428] ip6erspan0: left allmulticast mode [ 1311.997903][ T3428] dummyz: left allmulticast mode [ 1311.998255][ T3428] bond1: left allmulticast mode [ 1311.998611][ T3428] geneve2: left allmulticast mode [ 1312.084826][ T3428] geneve3: left promiscuous mode [ 1312.094392][ T3428] geneve4: left promiscuous mode [ 1312.268229][ T3428] vlan2: left allmulticast mode [ 1312.268285][ T3428] bond0: left allmulticast mode [ 1312.268306][ T3428] bond_slave_0: left allmulticast mode [ 1312.268326][ T3428] bond_slave_1: left allmulticast mode [ 1312.305417][ T3428] team0: left allmulticast mode [ 1312.305454][ T3428] team_slave_0: left allmulticast mode [ 1312.305476][ T3428] team_slave_1: left allmulticast mode [ 1312.323316][ T1611] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.323400][ T1611] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.323461][ T1611] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.323506][ T1611] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.623285][ T3416] loop6: detected capacity change from 0 to 40427 [ 1312.670957][ T3416] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1312.671023][ T3416] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1312.677822][ T3416] F2FS-fs (loop6): build fault injection rate: 17008 [ 1312.677892][ T3416] F2FS-fs (loop6): build fault injection type: 0x6 [ 1312.704037][ T3416] F2FS-fs (loop6): invalid crc value [ 1312.870212][ T3450] loop2: detected capacity change from 0 to 1024 [ 1313.356586][ T3416] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1313.578813][ T3416] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1313.579511][ T3416] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1313.835673][ T3454] loop5: detected capacity change from 0 to 8192 [ 1314.215116][ T3473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13074'. [ 1315.066206][ T3492] loop2: detected capacity change from 0 to 256 [ 1315.077167][ T3492] exfat: Deprecated parameter 'namecase' [ 1315.077685][ T3492] exfat: Deprecated parameter 'namecase' [ 1315.224459][ T3492] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1315.669198][ T32] audit: type=1326 audit(2000000402.727:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3506 comm="syz.2.13086" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe6579e0d9 code=0x0 [ 1316.483047][T29020] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1316.678735][T29020] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1316.689420][T29020] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.689496][T29020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1316.689531][T29020] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1316.689565][T29020] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1316.741367][T29020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1316.741422][T29020] usb 5-1: Product: syz [ 1316.741462][T29020] usb 5-1: Manufacturer: syz [ 1316.778686][T29020] sisusb 5-1:1.0: Invalid USB2VGA device [ 1316.785737][T29020] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 1316.871994][ T3507] loop5: detected capacity change from 0 to 32768 [ 1316.937095][ T3507] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13085 (3507) [ 1317.193874][T29020] usb 5-1: USB disconnect, device number 40 [ 1317.296167][ T3542] netlink: 'syz.6.13094': attribute type 16 has an invalid length. [ 1317.296211][ T3542] netlink: 'syz.6.13094': attribute type 17 has an invalid length. [ 1317.402441][ T3507] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1317.413326][ T3507] BTRFS info (device loop5): using crc32c checksum algorithm [ 1317.626749][ T3507] BTRFS info (device loop5): enabling ssd optimizations [ 1317.626799][ T3507] BTRFS info (device loop5): turning on flush-on-commit [ 1317.626838][ T3507] BTRFS info (device loop5): enabling free space tree [ 1317.626862][ T3507] BTRFS info (device loop5): enabling auto defrag [ 1317.626886][ T3507] BTRFS info (device loop5): use lzo compression, level 1 [ 1317.626914][ T3507] BTRFS info (device loop5): max_inline set to 4096 [ 1317.678010][ T3544] loop2: detected capacity change from 0 to 2048 [ 1317.790918][ T3562] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1317.968182][T16597] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1318.189824][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.190514][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.516083][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.612611][ T3584] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1319.710443][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.728004][ T3581] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1319.739898][ T3581] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 1319.883658][ T5636] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1320.046751][ T5636] usb 6-1: Using ep0 maxpacket: 8 [ 1320.053252][ T5636] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1320.077396][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.077447][ T5636] usb 6-1: Product: syz [ 1320.077483][ T5636] usb 6-1: Manufacturer: syz [ 1320.077505][ T5636] usb 6-1: SerialNumber: syz [ 1320.116676][ T5636] usb 6-1: config 0 descriptor?? [ 1320.141803][ T5636] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1320.587105][ T5636] gspca_sonixj: reg_r err -32 [ 1320.587213][ T5636] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1320.616518][ T5636] usb 6-1: USB disconnect, device number 32 [ 1320.753125][ T1616] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.753219][ T1616] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.753282][ T1616] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.753329][ T1616] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.365098][ T3612] loop3: detected capacity change from 0 to 64 [ 1321.441944][ T3614] loop5: detected capacity change from 0 to 512 [ 1321.550447][ T3614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1321.567238][ T3614] ext4 filesystem being mounted at /1626/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.747340][ T5636] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1321.779565][T16597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1321.908567][ T5636] usb 3-1: Using ep0 maxpacket: 16 [ 1321.910831][ T5636] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1321.934274][ T5636] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.934366][ T5636] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.934450][ T5636] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.934530][ T5636] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1321.934631][ T5636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.982739][ T5636] usb 3-1: config 0 descriptor?? [ 1322.111121][ T3631] loop5: detected capacity change from 0 to 128 [ 1322.452188][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.456754][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.456852][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.456934][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.457057][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.463984][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.464087][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.464234][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.464326][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.464399][ T5636] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 1322.740697][ T5636] glorious 0003:258A:0033.0003: hidraw0: USB HID v0.04 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 1322.776294][ T5636] usb 3-1: USB disconnect, device number 24 [ 1322.958902][ T3641] fido_id[3641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1323.716213][ T3656] loop5: detected capacity change from 0 to 128 [ 1323.754700][ T3656] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1323.754851][ T3656] hpfs: filesystem error: improperly stopped [ 1323.754914][ T3656] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1323.754975][ T3656] hpfs: You really don't want any checks? You are crazy... [ 1323.760140][ T3656] hpfs: hpfs_map_sector(): read error [ 1323.760181][ T3656] hpfs: code page support is disabled [ 1323.778944][ T3656] hpfs: hpfs_map_4sectors(): unaligned read [ 1323.779159][ T3656] hpfs: hpfs_map_4sectors(): unaligned read [ 1323.779192][ T3656] hpfs: filesystem error: unable to find root dir [ 1323.839319][ T3660] loop2: detected capacity change from 0 to 512 [ 1323.849549][ T3660] EXT4-fs: Ignoring removed orlov option [ 1323.865980][ T3660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1323.915003][ T3660] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.13137: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 1323.932744][ T3660] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1323.934033][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1323.934070][ C1] EXT4-fs (loop2): initial error at time 2000000410: ext4_ext_check_inode:521: inode 16 [ 1323.934117][ C1] EXT4-fs (loop2): last error at time 2000000410: ext4_ext_check_inode:521: inode 16 [ 1323.965062][ T3660] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.13137: couldn't read orphan inode 16 (err -117) [ 1323.965148][ T3660] loop2: lost filesystem error report for type 5 error -117 [ 1323.970113][ T3660] EXT4-fs (loop2): 1 orphan inode deleted [ 1323.999154][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1324.312823][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.239791][ T3688] loop3: detected capacity change from 0 to 1024 [ 1325.298112][ T3688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1325.441121][ T5636] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1325.469627][ T1611] IPVS: starting estimator thread 0... [ 1325.570771][ T3690] IPVS: using max 30 ests per chain, 72000 per kthread [ 1325.623939][ T5636] usb 3-1: Using ep0 maxpacket: 8 [ 1325.632521][ T5636] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1325.660361][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.660418][ T5636] usb 3-1: Product: syz [ 1325.660452][ T5636] usb 3-1: Manufacturer: syz [ 1325.660532][ T5636] usb 3-1: SerialNumber: syz [ 1325.724878][ T5636] usb 3-1: config 0 descriptor?? [ 1325.755981][ T5636] gspca_main: se401-2.14.0 probing 047d:5003 [ 1326.000126][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.178179][T29020] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1326.243239][ T5636] gspca_se401: ExtraFeatures: 31 [ 1326.349758][T29020] usb 6-1: Using ep0 maxpacket: 16 [ 1326.356050][T29020] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1326.371028][T29020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.371085][T29020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.371163][T29020] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1326.371301][T29020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.463348][T29020] usb 6-1: config 0 descriptor?? [ 1326.526197][ T5636] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70 [ 1326.633630][ T5636] usb 3-1: USB disconnect, device number 25 [ 1327.024002][T29020] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1327.042994][T29020] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1327.131025][T29020] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1327.321376][T17097] usb 6-1: USB disconnect, device number 33 [ 1327.491338][ T3713] fido_id[3713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1327.983036][ T3712] loop6: detected capacity change from 0 to 32768 [ 1328.073173][ T3712] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1328.337354][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1328.533658][ T3736] loop2: detected capacity change from 0 to 256 [ 1328.623116][ T3736] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1328.921769][ T1736] ocfs2: Unmounting device (7,6) on (node local) [ 1329.553131][ T3750] loop5: detected capacity change from 0 to 32768 [ 1329.566631][ T3750] (syz.5.13176,3750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1329.582421][ T3750] (syz.5.13176,3750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1329.634460][ T3750] JBD2: Ignoring recovery information on journal [ 1329.680010][ T3750] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1329.717686][ T3750] (syz.5.13176,3750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4d558a87, computed 0x1734b5e7. Applying ECC. [ 1329.718405][ T3750] (syz.5.13176,3750,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4d558a87, computed 0x7466ecf [ 1329.718510][ T3750] (syz.5.13176,3750,1):ocfs2_read_virt_blocks:1037 ERROR: status = -5 [ 1329.718579][ T3750] (syz.5.13176,3750,1):ocfs2_read_quota_block:150 ERROR: status = -5 [ 1329.718634][ T3750] (syz.5.13176,3750,1):ocfs2_load_local_quota_bitmaps:269 ERROR: status = -5 [ 1329.718746][ T3750] (syz.5.13176,3750,1):ocfs2_local_read_info:761 ERROR: status = -5 [ 1329.720118][ T3750] (syz.5.13176,3750,1):ocfs2_enable_quotas:943 ERROR: status = -5 [ 1329.720262][ T3750] (syz.5.13176,3750,1):ocfs2_fill_super:1144 ERROR: status = -5 [ 1329.925434][ T3750] ocfs2: Unmounting device (7,5) on (node local) [ 1330.221390][ T3768] ip_tables: iptables: counters copy to user failed while replacing table [ 1330.803726][T17097] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1330.841445][ T3789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13194'. [ 1330.940713][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13196'. [ 1330.985663][T17097] usb 4-1: Using ep0 maxpacket: 8 [ 1330.991333][T17097] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1331.006316][T17097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.006408][T17097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.030300][T17097] usb 4-1: config 0 descriptor?? [ 1331.043975][T17097] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1331.177917][ T32] audit: type=1326 audit(2000000417.045:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.178437][ T32] audit: type=1326 audit(2000000417.045:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.232098][ T32] audit: type=1326 audit(2000000417.092:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.262265][ T32] audit: type=1326 audit(2000000417.101:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.262422][ T32] audit: type=1326 audit(2000000417.092:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.262512][ T32] audit: type=1326 audit(2000000417.101:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.278239][ T32] audit: type=1326 audit(2000000417.138:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.281249][ T32] audit: type=1326 audit(2000000417.110:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.281375][ T32] audit: type=1326 audit(2000000417.147:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.354038][ T32] audit: type=1326 audit(2000000417.202:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3794 comm="syz.4.13197" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1331.687777][ T3805] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1331.687809][ T3805] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1331.687972][ T3805] vhci_hcd vhci_hcd.0: Device attached [ 1331.755974][ T3808] vhci_hcd: cannot find the pending unlink 8 [ 1331.762353][ T3808] vhci_hcd: connection closed [ 1331.763320][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1331.763736][ T12] vhci_hcd vhci_hcd.5: release socket [ 1331.763807][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1331.890234][T17097] gspca_vc032x: reg_r err -71 [ 1331.890360][T17097] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1331.908917][T17097] usb 4-1: USB disconnect, device number 20 [ 1332.259018][ T3815] loop2: detected capacity change from 0 to 8 [ 1332.269537][ T3815] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1332.320540][ T6092] udevd[6092]: incorrect cramfs checksum on /dev/loop2 [ 1332.424174][ T6092] udevd[6092]: incorrect cramfs checksum on /dev/loop2 [ 1332.858010][ T3791] loop6: detected capacity change from 0 to 32768 [ 1333.049669][ T5636] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1333.125793][ T3826] ip_tables: iptables: counters copy to user failed while replacing table [ 1333.228791][ T5636] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1333.240712][ T5636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1333.240766][ T5636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.240811][ T5636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.276242][ T5636] usb 3-1: config 0 descriptor?? [ 1333.776734][ T5636] hid (null): unknown global tag 0xe [ 1333.803424][ T5636] aquacomputer_d5next 0003:0C70:F0B6.0005: unknown global tag 0xe [ 1333.813325][ T5636] aquacomputer_d5next 0003:0C70:F0B6.0005: item 0 0 1 14 parsing failed [ 1333.825210][ T5636] aquacomputer_d5next 0003:0C70:F0B6.0005: probe with driver aquacomputer_d5next failed with error -22 [ 1333.928063][ T3831] loop3: detected capacity change from 0 to 32768 [ 1334.047318][ T989] usb 3-1: USB disconnect, device number 26 [ 1335.221018][T17097] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1335.397756][T17097] usb 3-1: Using ep0 maxpacket: 8 [ 1335.411373][T17097] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1335.430202][T17097] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.430257][T17097] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1335.430293][T17097] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1335.430334][T17097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.475235][T17097] usb 3-1: config 0 descriptor?? [ 1335.977336][T17097] input: HID 046d:c50c as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C50C.0006/input/input71 [ 1336.145994][ T3866] loop3: detected capacity change from 0 to 32768 [ 1336.222013][ T3866] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1336.335458][ T3866] XFS (loop3): Ending clean mount [ 1336.398277][T17097] logitech 0003:046D:C50C.0006: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 1336.452712][T17097] usb 3-1: USB disconnect, device number 27 [ 1336.625861][ T6092] udevd[6092]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xcc, key code 108): Invalid argument [ 1336.626021][ T6092] udevd[6092]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xd4, key code 103): Invalid argument [ 1336.710050][ T3903] fido_id[3903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1336.767804][ T5632] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1336.792322][ T3902] netlink: Failed to add $ helper -22 [ 1336.792578][ T3902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.288372][ T3916] loop5: detected capacity change from 0 to 1024 [ 1337.725866][ T3920] loop6: detected capacity change from 0 to 8192 [ 1338.460260][ T3941] loop2: detected capacity change from 0 to 4096 [ 1338.573690][ T3941] ntfs3(loop2): Failed to load $Extend (-22). [ 1338.574647][ T3941] ntfs3(loop2): Failed to initialize $Extend. [ 1338.678153][ T3954] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13265'. [ 1339.339299][ T3976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13275'. [ 1339.723541][ T3990] loop2: detected capacity change from 0 to 512 [ 1339.820641][ T3997] netlink: 'syz.5.13286': attribute type 30 has an invalid length. [ 1339.893405][ T3998] loop6: detected capacity change from 0 to 256 [ 1339.916711][ T3998] exfat: Deprecated parameter 'namecase' [ 1340.106275][ T4006] bond3: invalid ARP target 0.0.0.0 specified for addition [ 1340.113979][ T4006] bond3: option arp_ip_target: invalid value (0) [ 1340.207346][ T4006] bond3 (unregistering): Released all slaves [ 1340.276858][ T3998] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 1340.559901][ T4009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1340.560005][ T4009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1340.845228][ T4009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1340.854785][ T4009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1341.230288][ T4021] sg_write: data in/out 352220/136 bytes for SCSI command 0x0-- guessing data in; [ 1341.230288][ T4021] program syz.5.13295 not setting count and/or reply_len properly [ 1341.395398][ T4009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1341.395482][ T4009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1341.736949][ T4030] loop5: detected capacity change from 0 to 512 [ 1341.758847][ T4030] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1341.776981][ T4031] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13300'. [ 1341.808878][ T4030] EXT4-fs (loop5): 1 truncate cleaned up [ 1341.822836][ T4030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.017546][T16597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.050822][ T4041] loop2: detected capacity change from 0 to 512 [ 1342.189968][ T4044] netlink: 'syz.4.13305': attribute type 62 has an invalid length. [ 1342.979839][ T4072] loop3: detected capacity change from 0 to 512 [ 1343.432320][ T4074] loop6: detected capacity change from 0 to 1764 [ 1343.625191][ T4076] loop3: detected capacity change from 0 to 128 [ 1343.660914][ T4076] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.675475][ T4076] ext4 filesystem being mounted at /2717/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.115052][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.182061][ T4085] loop2: detected capacity change from 0 to 256 [ 1344.183198][ T4085] exfat: Deprecated parameter 'utf8' [ 1344.183287][ T4085] exfat: Deprecated parameter 'namecase' [ 1344.183361][ T4085] exfat: Deprecated parameter 'namecase' [ 1344.264792][ T4085] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1345.035726][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 1345.036280][ T32] audit: type=1326 audit(2000000429.841:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4104 comm="syz.5.13334" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61db99e0d9 code=0x0 [ 1345.164310][ T4109] loop2: detected capacity change from 0 to 64 [ 1345.491353][ T4110] loop3: detected capacity change from 0 to 8192 [ 1345.499635][ T4110] msdos: Bad value for 'gid' [ 1345.499871][ T4110] msdos: Bad value for 'gid' [ 1345.520713][ T4110] debugfs: Bad value for 'gid' [ 1345.521188][ T4110] debugfs: Bad value for 'gid' [ 1346.169016][ T4133] program syz.3.13347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1346.679489][T29020] kernel read not supported for file /rfkill (pid: 29020 comm: kworker/0:0) [ 1347.088181][ T4156] loop3: detected capacity change from 0 to 256 [ 1347.162273][ T4156] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1347.642915][ T4165] loop2: detected capacity change from 0 to 8 [ 1347.678323][ T4167] loop3: detected capacity change from 0 to 8 [ 1347.795284][ T4171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.834325][ T4131] loop5: detected capacity change from 0 to 40427 [ 1347.852332][ T4131] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1347.859742][ T4131] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1347.897451][ T4131] F2FS-fs (loop5): invalid crc value [ 1348.010613][ T32] audit: type=1326 audit(2000000432.583:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.011154][ T32] audit: type=1326 audit(2000000432.583:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.077665][ T32] audit: type=1326 audit(2000000432.647:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.106822][ T32] audit: type=1326 audit(2000000432.675:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.141167][ T32] audit: type=1326 audit(2000000432.703:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.141713][ T32] audit: type=1326 audit(2000000432.703:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.141872][ T32] audit: type=1326 audit(2000000432.703:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.159447][ T32] audit: type=1326 audit(2000000432.712:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.159600][ T32] audit: type=1326 audit(2000000432.712:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.4.13369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df139e0d9 code=0x7ffc0000 [ 1348.416994][ T4186] loop3: detected capacity change from 0 to 256 [ 1348.426891][ T4186] exfat: Deprecated parameter 'utf8' [ 1348.512364][ T4186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1348.584639][ T4192] : renamed from bond_slave_0 [ 1348.675721][ T4131] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1348.755249][ T4131] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1348.755723][ T4131] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1348.861118][ T4173] f2fs_ckpt-7:5: attempt to access beyond end of device [ 1348.861118][ T4173] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1348.980832][ T4173] CPU: 1 UID: 0 PID: 4173 Comm: f2fs_ckpt-7:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.980879][ T4173] Tainted: [L]=SOFTLOCKUP [ 1348.980888][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.980902][ T4173] Call Trace: [ 1348.980912][ T4173] [ 1348.980923][ T4173] dump_stack_lvl+0xe8/0x150 [ 1348.980965][ T4173] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1348.980999][ T4173] f2fs_write_end_bio+0x1211/0x16e0 [ 1348.981034][ T4173] ? blkg_put+0x22/0x240 [ 1348.981077][ T4173] __submit_merged_bio+0x258/0x6a0 [ 1348.981103][ T4173] ? rcu_is_watching+0x16/0xb0 [ 1348.981136][ T4173] __submit_merged_write_cond+0x3c9/0x4e0 [ 1348.981172][ T4173] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1348.981222][ T4173] f2fs_write_data_pages+0x2a27/0x36f0 [ 1348.981252][ T4173] ? __lock_acquire+0x6df/0x2e50 [ 1348.981313][ T4173] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1348.981354][ T4173] ? arch_stack_walk+0x11b/0x150 [ 1348.981413][ T4173] ? add_lock_to_list+0xc7/0x100 [ 1348.981443][ T4173] ? lockdep_unlock+0x5c/0xd0 [ 1348.981474][ T4173] ? __lock_acquire+0x14b9/0x2e50 [ 1348.981526][ T4173] ? do_raw_spin_lock+0x12b/0x2f0 [ 1348.981570][ T4173] ? do_raw_spin_unlock+0xf5/0x200 [ 1348.981601][ T4173] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1348.981632][ T4173] do_writepages+0x338/0x560 [ 1348.981680][ T4173] ? do_raw_spin_unlock+0xf5/0x200 [ 1348.981716][ T4173] filemap_fdatawrite+0x1e9/0x2f0 [ 1348.981745][ T4173] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1348.981819][ T4173] ? do_raw_spin_unlock+0xf5/0x200 [ 1348.981865][ T4173] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1348.981915][ T4173] f2fs_write_checkpoint+0xa3d/0x2710 [ 1348.981984][ T4173] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1348.982055][ T4173] ? __pfx_down_write+0x10/0x10 [ 1348.982097][ T4173] ? rcu_is_watching+0x16/0xb0 [ 1348.982131][ T4173] __checkpoint_and_complete_reqs+0x135/0x480 [ 1348.982177][ T4173] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 1348.982230][ T4173] ? schedule+0x90/0x2b0 [ 1348.982268][ T4173] issue_checkpoint_thread+0xd5/0x270 [ 1348.982305][ T4173] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 1348.982339][ T4173] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1348.982373][ T4173] ? __kthread_parkme+0x71/0x1f0 [ 1348.982410][ T4173] ? __kthread_parkme+0x199/0x1f0 [ 1348.982449][ T4173] kthread+0x38b/0x480 [ 1348.982473][ T4173] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 1348.982505][ T4173] ? __pfx_kthread+0x10/0x10 [ 1348.982529][ T4173] ret_from_fork+0x514/0xb70 [ 1348.982556][ T4173] ? __pfx_ret_from_fork+0x10/0x10 [ 1348.982579][ T4173] ? __switch_to+0xc89/0x1420 [ 1348.982615][ T4173] ? __pfx_kthread+0x10/0x10 [ 1348.982640][ T4173] ret_from_fork_asm+0x1a/0x30 [ 1348.982693][ T4173] [ 1349.070225][ T4173] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1350.059163][ T4227] loop6: detected capacity change from 0 to 512 [ 1350.075376][ T4227] EXT4-fs: Ignoring removed oldalloc option [ 1350.075956][ T4227] EXT4-fs: Ignoring removed oldalloc option [ 1350.117628][ T4229] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13391'. [ 1350.156942][ T4227] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.13390: corrupted in-inode xattr: invalid ea_ino [ 1350.157614][ T4227] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1350.158169][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1350.158216][ C1] EXT4-fs (loop6): initial error at time 2000000434: ext4_iget_extra_inode:5210: inode 15 [ 1350.158308][ C1] EXT4-fs (loop6): last error at time 2000000434: ext4_iget_extra_inode:5210: inode 15 [ 1350.189537][ T4227] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.13390: couldn't read orphan inode 15 (err -117) [ 1350.189575][ T4227] loop6: lost filesystem error report for type 5 error -117 [ 1350.227896][ T4227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.400906][ T1736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.871305][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13401'. [ 1350.871803][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13401'. [ 1350.871888][ T4252] netlink: 'syz.6.13401': attribute type 12 has an invalid length. [ 1350.871924][ T4252] netlink: 'syz.6.13401': attribute type 14 has an invalid length. [ 1351.695661][ T4264] loop3: detected capacity change from 0 to 512 [ 1351.735981][ T4264] EXT4-fs (loop3): 1 truncate cleaned up [ 1351.763020][ T4264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.932152][ T4246] loop2: detected capacity change from 0 to 32768 [ 1352.041977][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.704022][T29020] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1352.780235][ T4282] loop6: detected capacity change from 0 to 64 [ 1352.804800][ T4282] hfs: unable to locate alternate MDB [ 1352.805261][ T4282] hfs: continuing without an alternate MDB [ 1352.856558][T17097] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1352.866192][ T989] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1352.877984][T29020] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1352.889683][T29020] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1352.889730][T29020] usb 4-1: config 0 has no interface number 0 [ 1352.889779][T29020] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.889814][T29020] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.889861][T29020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.937170][T29020] usb 4-1: config 0 descriptor?? [ 1353.018525][T17097] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1353.029210][T17097] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 1353.029293][T17097] usb 6-1: config 127 has no interface number 0 [ 1353.029344][T17097] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1353.060181][T17097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.068630][T17097] usb 6-1: Product: syz [ 1353.074973][T17097] usb 6-1: Manufacturer: syz [ 1353.075020][T17097] usb 6-1: SerialNumber: syz [ 1353.098470][ T4276] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1353.167192][ T989] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1353.366098][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 1353.366601][ T32] audit: type=1326 audit(2000000437.531:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.2.13417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe6579e0d9 code=0x0 [ 1353.439845][T29020] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 1353.483573][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.483947][ T989] usb 5-1: Product: syz [ 1353.484172][ T989] usb 5-1: Manufacturer: syz [ 1353.484378][ T989] usb 5-1: SerialNumber: syz [ 1353.496227][ T989] usb 5-1: config 0 descriptor?? [ 1353.513828][ T989] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 041 [ 1353.530114][T29020] hid_prodikeys: hid-prodikeys: failed to find output report [ 1353.530114][T29020] [ 1353.560311][ T4276] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1353.628081][T29020] usb 4-1: USB disconnect, device number 21 [ 1353.677515][ T4289] fido_id[4289]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:041E:2801.0007/report_descriptor': No such device [ 1353.790466][T17097] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1353.802230][T17097] asix 6-1:127.57: probe with driver asix failed with error -71 [ 1353.820510][T17097] usb 6-1: USB disconnect, device number 34 [ 1354.165209][ T989] i2c i2c-4: failure reading functionality [ 1354.177977][ T989] i2c i2c-4: connected i2c-tiny-usb device [ 1354.193135][ T989] usb 5-1: USB disconnect, device number 41 [ 1354.507515][ T4297] netlink: 'syz.5.13419': attribute type 16 has an invalid length. [ 1354.516180][ T4297] netlink: 'syz.5.13419': attribute type 17 has an invalid length. [ 1354.600031][ T4294] loop2: detected capacity change from 0 to 2048 [ 1354.667204][ T4294] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1354.701453][ T4300] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1354.715776][ T6092] udevd[6092]: incorrect nilfs2 checksum on /dev/loop2 [ 1354.745613][ T32] audit: type=1800 audit(2000000438.805:629): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13421" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1355.494742][ T4314] loop2: detected capacity change from 0 to 1024 [ 1355.509807][ T4314] EXT4-fs: Ignoring removed i_version option [ 1355.510245][ T4314] EXT4-fs: Ignoring removed orlov option [ 1355.542525][ T4297] bridge0: port 1(syz_tun) entered disabled state [ 1355.567951][ T4314] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1355.639830][ T4314] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1355.640207][ T4314] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1355.748884][ T4314] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.13429: Invalid inode table block 0 in block_group 0 [ 1355.748943][ T4314] loop2: lost filesystem error report for type 5 error -117 [ 1355.762215][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1355.762241][ C0] EXT4-fs (loop2): initial error at time 2000000439: __ext4_get_inode_loc:4916 [ 1355.762268][ C0] EXT4-fs (loop2): last error at time 2000000439: __ext4_get_inode_loc:4916 [ 1355.799757][ T4314] EXT4-fs (loop2): Remounting filesystem read-only [ 1355.799785][ T4314] Quota error (device loop2): write_blk: dquota write failed [ 1355.799897][ T4314] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1355.800032][ T4314] EXT4-fs (loop2): 1 truncate cleaned up [ 1355.903537][ T4314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1355.934882][ T4314] EXT4-fs: Cannot specify journal on remount [ 1356.037918][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.852738][ T4332] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1357.036883][ T4332] usb 3-1: Using ep0 maxpacket: 16 [ 1357.043801][ T4332] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1357.056438][ T4332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1357.056498][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.076950][ T4332] usb 3-1: config 0 descriptor?? [ 1357.535590][ T4332] hid_parser_main: 30 callbacks suppressed [ 1357.542561][ T4332] logitech 0003:046D:CA03.0008: unknown main item tag 0x2 [ 1357.550202][ T4332] logitech 0003:046D:CA03.0008: unknown main item tag 0x6 [ 1357.558468][ T4332] logitech 0003:046D:CA03.0008: ignoring exceeding usage max [ 1357.576281][ T4332] logitech 0003:046D:CA03.0008: hidraw0: USB HID vcc.5e Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 1357.576412][ T4332] logitech 0003:046D:CA03.0008: no inputs found [ 1357.650404][ T4297] vlan0: left promiscuous mode [ 1357.765458][ T4326] usb 3-1: USB disconnect, device number 28 [ 1358.033257][ T4297] geneve1: left promiscuous mode [ 1358.033468][ T4297] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1358.033512][ T4297] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1358.131528][ T4297] geneve2: left promiscuous mode [ 1358.131581][ T4297] geneve2: left allmulticast mode [ 1358.189560][ T4297] bridge3: left promiscuous mode [ 1358.307542][ T1611] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.316812][ T1611] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.316869][ T1611] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.316912][ T1611] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.371995][ T4336] tc_dump_action: action bad kind [ 1358.574605][ T4358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13439'. [ 1358.925788][ T4372] loop3: detected capacity change from 0 to 256 [ 1358.933097][ T4372] exfat: Deprecated parameter 'namecase' [ 1358.952153][ T4374] netlink: 'syz.2.13447': attribute type 5 has an invalid length. [ 1358.952220][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13447'. [ 1358.986704][ T5349] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1359.000814][ T4372] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1359.150218][ T5349] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1359.162877][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.190314][ T5349] usb 5-1: config 0 descriptor?? [ 1359.207764][ T5349] cp210x 5-1:0.0: cp210x converter detected [ 1359.219938][ T4379] ip6tnl0: Caught tx_queue_len zero misconfig [ 1359.654767][ T5349] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1359.862355][ T4326] usb 5-1: USB disconnect, device number 42 [ 1359.879891][ T4326] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1359.902944][ T4326] cp210x 5-1:0.0: device disconnected [ 1360.487326][ T4385] netlink: 'syz.4.13452': attribute type 16 has an invalid length. [ 1360.503772][ T4385] netlink: 'syz.4.13452': attribute type 17 has an invalid length. [ 1360.503970][ T4385] lo: left allmulticast mode [ 1360.544015][ T4385] tunl0: left allmulticast mode [ 1360.661738][ T4385] gretap0: left allmulticast mode [ 1360.720728][ T4385] erspan0: left allmulticast mode [ 1360.995319][ T4385] ip_vti0: left allmulticast mode [ 1361.043954][ T4385] ip6_vti0: left allmulticast mode [ 1361.086347][ T4385] sit0: left allmulticast mode [ 1361.160823][ T4385] ip6tnl0: left allmulticast mode [ 1361.258275][ T4385] ip6gre0: left allmulticast mode [ 1361.283661][ T4385] syz_tun: left allmulticast mode [ 1361.306863][ T4385] ip6gretap0: left allmulticast mode [ 1361.319846][ T4385] bridge0: port 2(hsr0) entered disabled state [ 1361.329394][ T4385] bridge0: left allmulticast mode [ 1361.376911][ T4385] vcan0: left allmulticast mode [ 1361.400056][ T4385] bond0: left allmulticast mode [ 1361.413496][ T4385] team0: left allmulticast mode [ 1361.434374][ T4385] : left allmulticast mode [ 1361.462199][ T4385] nlmon0: left allmulticast mode [ 1361.480264][ T4385] vxcan0: left allmulticast mode [ 1361.493608][ T4385] vxcan1: left allmulticast mode [ 1361.508759][ T4385] veth0: left allmulticast mode [ 1361.527871][ T4385] veth1: left allmulticast mode [ 1361.575445][ T4385] wg0: left allmulticast mode [ 1361.585512][ T4385] wg1: left allmulticast mode [ 1361.612660][ T4385] wg2: left allmulticast mode [ 1361.625567][ T4385] veth0_to_bridge: left allmulticast mode [ 1361.652605][ T4385] bridge_slave_0: left allmulticast mode [ 1361.673720][ T4385] veth1_to_bridge: left allmulticast mode [ 1361.700140][ T4385] bridge_slave_1: left allmulticast mode [ 1361.735308][ T4385] veth0_to_bond: left allmulticast mode [ 1361.768731][ T4385] bond_slave_0: left allmulticast mode [ 1361.791257][ T4385] veth1_to_bond: left allmulticast mode [ 1361.821925][ T4385] bond_slave_1: left allmulticast mode [ 1361.849638][ T4385] veth0_to_team: left allmulticast mode [ 1361.876386][ T4385] team_slave_0: left allmulticast mode [ 1361.909954][ T4385] veth1_to_team: left allmulticast mode [ 1361.937724][ T4385] team_slave_1: left allmulticast mode [ 1361.955222][ T4409] loop6: detected capacity change from 0 to 512 [ 1361.973617][ T4385] veth0_to_batadv: left allmulticast mode [ 1362.000458][ T4385] batadv_slave_0: left promiscuous mode [ 1362.028432][ T4385] veth1_to_batadv: left allmulticast mode [ 1362.056033][ T4385] batadv_slave_1: left allmulticast mode [ 1362.087690][ T4385] xfrm0: left allmulticast mode [ 1362.112343][ T4385] veth0_to_hsr: left allmulticast mode [ 1362.166010][ T4385] veth1_to_hsr: left allmulticast mode [ 1362.244453][ T4385] veth1_virt_wifi: left allmulticast mode [ 1362.272706][ T4385] veth0_virt_wifi: left allmulticast mode [ 1362.300148][ T4385] virt_wifi0: left allmulticast mode [ 1362.307515][ T4385] veth1_vlan: left allmulticast mode [ 1362.307883][ T4385] vlan0: left promiscuous mode [ 1362.308209][ T4385] vlan1: left allmulticast mode [ 1362.308406][ T4385] macvlan0: left allmulticast mode [ 1362.308573][ T4385] macvlan1: left allmulticast mode [ 1362.308730][ T4385] ipvlan0: left allmulticast mode [ 1362.341293][ T4385] ipvlan1: left allmulticast mode [ 1362.347692][ T4385] veth0_vlan: left allmulticast mode [ 1362.347942][ T4385] veth1_macvtap: left allmulticast mode [ 1362.348109][ T4385] veth0_macvtap: left allmulticast mode [ 1362.348276][ T4385] macsec0: left allmulticast mode [ 1362.348400][ T4385] geneve0: left allmulticast mode [ 1362.348567][ T4385] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1362.348900][ T4385] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 1362.349051][ T4385] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 1362.410153][ T4385] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1362.411049][ T4385] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 1362.412921][ T4385] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 1362.415463][ T4385] ip6gre1: left allmulticast mode [ 1362.434584][ T4385] bond1: left allmulticast mode [ 1362.436792][ T4385] bridge1: left allmulticast mode [ 1362.439300][ T4385] ip6tnl1: left allmulticast mode [ 1362.453260][ T4385] bridge2: left allmulticast mode [ 1362.457696][ T4385] mac80211_hwsim hwsim15 wlan2: left allmulticast mode [ 1362.467231][ T4385] mac80211_hwsim hwsim18 wlan3: left allmulticast mode [ 1362.472313][ T4385] sit1: left allmulticast mode [ 1362.481763][ T4385] gtp0: left allmulticast mode [ 1362.488061][ T4385] bond2: left promiscuous mode [ 1362.492974][ T4385] bond2: left allmulticast mode [ 1362.498813][ T4385] veth5: left promiscuous mode [ 1362.503708][ T4385] veth5: left allmulticast mode [ 1362.509114][ T4385] geneve3: left promiscuous mode [ 1362.514172][ T4385] geneve3: left allmulticast mode [ 1362.520303][ T4385] bridge7: left promiscuous mode [ 1363.404797][ T4411] loop6: detected capacity change from 0 to 40427 [ 1363.455269][ T4411] F2FS-fs (loop6): invalid crc value [ 1363.822043][ T4437] netlink: 'syz.4.13476': attribute type 16 has an invalid length. [ 1363.822089][ T4437] netlink: 'syz.4.13476': attribute type 17 has an invalid length. [ 1363.842570][ T4411] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1364.006924][ T4411] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1364.018367][ T4411] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1364.018432][ T4411] F2FS-fs (loop6): Start checkpoint disabled! [ 1364.473268][ T4411] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1364.484913][ T4411] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1364.559750][ T4445] loop2: detected capacity change from 0 to 128 [ 1364.571962][ T4428] loop3: detected capacity change from 0 to 32768 [ 1364.615756][ T4428] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1364.715416][ T4428] JBD2: Ignoring recovery information on journal [ 1365.037802][ T4451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13482'. [ 1365.074794][ T1615] kworker/u8:8: attempt to access beyond end of device [ 1365.074794][ T1615] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1365.074888][ T1615] CPU: 0 UID: 0 PID: 1615 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.074922][ T1615] Tainted: [L]=SOFTLOCKUP [ 1365.074932][ T1615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1365.074948][ T1615] Workqueue: writeback wb_workfn (flush-7:6) [ 1365.074999][ T1615] Call Trace: [ 1365.075008][ T1615] [ 1365.075018][ T1615] dump_stack_lvl+0xe8/0x150 [ 1365.075055][ T1615] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1365.075089][ T1615] f2fs_write_end_bio+0x1211/0x16e0 [ 1365.075123][ T1615] ? blkg_put+0x22/0x240 [ 1365.075176][ T1615] __submit_merged_bio+0x258/0x6a0 [ 1365.075203][ T1615] ? rcu_is_watching+0x16/0xb0 [ 1365.075236][ T1615] __submit_merged_write_cond+0x3c9/0x4e0 [ 1365.075273][ T1615] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1365.075326][ T1615] f2fs_write_data_pages+0x2a27/0x36f0 [ 1365.075396][ T1615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1365.075441][ T1615] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1365.075512][ T1615] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1365.075560][ T1615] ? __lock_acquire+0x6df/0x2e50 [ 1365.075600][ T1615] ? set_shrinker_bit+0x7c/0x350 [ 1365.075628][ T1615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1365.075660][ T1615] do_writepages+0x338/0x560 [ 1365.075698][ T1615] ? __lock_acquire+0x6df/0x2e50 [ 1365.075726][ T1615] ? reacquire_held_locks+0x117/0x1a0 [ 1365.075753][ T1615] ? writeback_sb_inodes+0x450/0x1b00 [ 1365.075788][ T1615] __writeback_single_inode+0x136/0x1220 [ 1365.075822][ T1615] ? do_raw_spin_unlock+0xf5/0x200 [ 1365.075860][ T1615] writeback_sb_inodes+0x9de/0x1b00 [ 1365.075887][ T1615] ? __lock_acquire+0x6df/0x2e50 [ 1365.075938][ T1615] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1365.076014][ T1615] ? rcu_is_watching+0x16/0xb0 [ 1365.076042][ T1615] ? queue_io+0x2d3/0x470 [ 1365.076075][ T1615] wb_writeback+0x41c/0xad0 [ 1365.076107][ T1615] ? queue_io+0x271/0x470 [ 1365.076143][ T1615] ? __pfx_wb_writeback+0x10/0x10 [ 1365.076177][ T1615] ? do_raw_spin_lock+0x12b/0x2f0 [ 1365.076230][ T1615] wb_workfn+0x431/0x10f0 [ 1365.076275][ T1615] ? __pfx_wb_workfn+0x10/0x10 [ 1365.076301][ T1615] ? rcu_is_watching+0x16/0xb0 [ 1365.076330][ T1615] ? trace_hrtimer_start+0x82/0x200 [ 1365.076371][ T1615] ? do_raw_spin_lock+0x12b/0x2f0 [ 1365.076413][ T1615] ? lock_acquire+0x115/0x350 [ 1365.076446][ T1615] ? rcu_is_watching+0x16/0xb0 [ 1365.076476][ T1615] ? process_scheduled_works+0x97a/0x1630 [ 1365.076507][ T1615] process_scheduled_works+0xc3d/0x1630 [ 1365.076574][ T1615] ? __pfx_process_scheduled_works+0x10/0x10 [ 1365.076612][ T1615] ? assign_work+0x3cf/0x5d0 [ 1365.076648][ T1615] worker_thread+0xa47/0xfb0 [ 1365.076710][ T1615] kthread+0x38b/0x480 [ 1365.076735][ T1615] ? __pfx_worker_thread+0x10/0x10 [ 1365.076782][ T1615] ? __pfx_kthread+0x10/0x10 [ 1365.076809][ T1615] ret_from_fork+0x514/0xb70 [ 1365.076836][ T1615] ? __pfx_ret_from_fork+0x10/0x10 [ 1365.076860][ T1615] ? __switch_to+0xc89/0x1420 [ 1365.076897][ T1615] ? __pfx_kthread+0x10/0x10 [ 1365.076923][ T1615] ret_from_fork_asm+0x1a/0x30 [ 1365.076979][ T1615] [ 1365.295002][ T1615] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1365.443317][T17097] loop6: lost filesystem error report for type 5 error -108 [ 1365.464208][ T4428] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1366.014774][ T5632] ocfs2: Unmounting device (7,3) on (node local) [ 1366.489655][ T4472] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13492'. [ 1366.672224][ T4479] loop5: detected capacity change from 0 to 1024 [ 1367.181550][ T4494] netlink: 'syz.5.13499': attribute type 30 has an invalid length. [ 1367.261715][ T5349] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1367.425329][ T5349] usb 3-1: Using ep0 maxpacket: 8 [ 1367.432639][ T5349] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1367.432788][ T5349] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1367.450518][ T5349] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1367.459349][ T5349] usb 3-1: string descriptor 0 read error: -22 [ 1367.459621][ T5349] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1367.528681][ T5349] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1367.563872][ T5349] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1367.564890][ T5349] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1367.582549][ T5349] usb 3-1: media controller created [ 1367.722942][ T5349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1367.845878][ T5349] zl10353_read_register: readreg error (reg=127, ret==0) [ 1368.114727][ T5349] usb 3-1: USB disconnect, device number 29 [ 1368.248740][T17097] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1368.280825][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13510'. [ 1368.424377][T17097] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1368.444046][T17097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.444095][T17097] usb 4-1: Product: syz [ 1368.444130][T17097] usb 4-1: Manufacturer: syz [ 1368.444152][T17097] usb 4-1: SerialNumber: syz [ 1368.472714][T17097] usb 4-1: config 0 descriptor?? [ 1368.494581][T17097] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1368.526642][T17097] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1368.537809][T17097] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1368.547335][T17097] usb 4-1: media controller created [ 1368.582415][T17097] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1368.691120][ T5278] netdevsim netdevsim3 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1368.704350][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1368.815243][T17097] DVB: Unable to find symbol mt352_attach() [ 1369.103976][T17097] DVB: Unable to find symbol nxt6000_attach() [ 1369.104012][T17097] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1369.152294][T17097] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 1369.174166][T17097] dvb-usb: schedule remote query interval to 1000 msecs. [ 1369.174206][T17097] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1369.174242][T17097] dvb-usb: bulk message failed: -22 (7/0) [ 1369.174263][T17097] dvb-usb: bulk message failed: -22 (7/0) [ 1369.225727][T17097] usb 4-1: USB disconnect, device number 22 [ 1369.423584][T17097] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1369.715156][ T4559] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[1736] was attempted by "\x22"[4559] [ 1370.285279][T17097] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1370.489622][T17097] usb 7-1: Using ep0 maxpacket: 32 [ 1370.495632][T17097] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1370.508809][T17097] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1370.508856][T17097] usb 7-1: config 0 has no interface number 0 [ 1370.527868][T17097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.527911][T17097] usb 7-1: Product: syz [ 1370.527944][T17097] usb 7-1: Manufacturer: syz [ 1370.527966][T17097] usb 7-1: SerialNumber: syz [ 1370.557295][T17097] usb 7-1: config 0 descriptor?? [ 1370.568105][T17097] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1370.706781][ T4586] loop2: detected capacity change from 0 to 128 [ 1370.760942][ T4586] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1370.761686][ T4586] hpfs: filesystem error: improperly stopped [ 1370.761734][ T4586] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1370.761777][ T4586] hpfs: You really don't want any checks? You are crazy... [ 1370.762618][ T4586] hpfs: hpfs_map_sector(): read error [ 1370.762651][ T4586] hpfs: code page support is disabled [ 1370.773151][ T4586] hpfs: hpfs_map_4sectors(): unaligned read [ 1370.773236][ T4586] hpfs: hpfs_map_4sectors(): unaligned read [ 1370.773248][ T4586] hpfs: filesystem error: unable to find root dir [ 1370.833840][ T4589] loop5: detected capacity change from 0 to 1024 [ 1370.870365][T17097] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1370.888504][T17097] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1371.097732][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 231 [ 1371.358324][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1371.368248][T17097] usb 7-1: USB disconnect, device number 3 [ 1371.476000][T17097] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1371.515430][T17097] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1371.540421][T17097] quatech2 7-1:0.51: device disconnected [ 1371.549932][ T4598] loop2: detected capacity change from 0 to 8 [ 1371.612061][ T4598] SQUASHFS error: Unable to read directory block [1d0:62] [ 1371.727321][ T4606] loop3: detected capacity change from 0 to 128 [ 1371.739941][ T4606] FAT-fs (loop3): Directory bread(block 1048) failed [ 1371.739998][ T4606] FAT-fs (loop3): Directory bread(block 1049) failed [ 1371.740412][ T4606] FAT-fs (loop3): Directory bread(block 1050) failed [ 1371.740448][ T4606] FAT-fs (loop3): Directory bread(block 1051) failed [ 1371.740478][ T4606] FAT-fs (loop3): Directory bread(block 1052) failed [ 1371.740509][ T4606] FAT-fs (loop3): Directory bread(block 1053) failed [ 1371.740540][ T4606] FAT-fs (loop3): Directory bread(block 1054) failed [ 1371.740570][ T4606] FAT-fs (loop3): Directory bread(block 1055) failed [ 1371.865419][ T4606] FAT-fs (loop3): Directory bread(block 1048) failed [ 1371.866027][ T4606] FAT-fs (loop3): Directory bread(block 1049) failed [ 1371.899147][ T5349] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1372.082153][ T5349] usb 5-1: Using ep0 maxpacket: 16 [ 1372.084650][ T5349] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1372.112508][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.114779][ T5349] usb 5-1: Product: syz [ 1372.120603][ T5349] usb 5-1: Manufacturer: syz [ 1372.120662][ T5349] usb 5-1: SerialNumber: syz [ 1372.172391][ T5349] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1372.172622][ T5349] r8152-cfgselector 5-1: config 0 descriptor?? [ 1372.278049][ T4621] loop3: detected capacity change from 0 to 128 [ 1372.303682][ T4621] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1372.304488][ T4621] hpfs: filesystem error: improperly stopped [ 1372.304538][ T4621] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1372.304581][ T4621] hpfs: You really don't want any checks? You are crazy... [ 1372.305430][ T4621] hpfs: hpfs_map_sector(): read error [ 1372.305465][ T4621] hpfs: code page support is disabled [ 1372.348272][ T4621] hpfs: hpfs_map_4sectors(): unaligned read [ 1372.348498][ T4621] hpfs: hpfs_map_4sectors(): unaligned read [ 1372.348530][ T4621] hpfs: filesystem error: unable to find root dir [ 1372.478008][ T4348] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1372.502105][ T4625] tipc: MTU too low for tipc bearer [ 1372.645924][ T4348] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1372.652288][ T4348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.652378][ T4348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.652444][ T4348] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1372.652573][ T4348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.704976][ T4348] usb 6-1: config 0 descriptor?? [ 1372.755914][ T5349] r8152-cfgselector 5-1: USB disconnect, device number 43 [ 1372.822365][ T4634] loop3: detected capacity change from 0 to 2048 [ 1372.833177][ T4634] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1372.891469][ T4634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1373.230721][ T4348] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0009/input/input73 [ 1373.515254][ T4348] creative-sb0540 0003:041E:3100.0009: input,hidraw0: USB HID v0.00 Joystick [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 1373.533345][ T4348] usb 6-1: USB disconnect, device number 35 [ 1373.920439][ T4662] loop2: detected capacity change from 0 to 256 [ 1373.968171][ T4659] fido_id[4659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1374.033852][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13575'. [ 1374.795751][ T4679] ipvlan2: entered allmulticast mode [ 1374.795795][ T4679] veth0_vlan: entered allmulticast mode [ 1374.881965][ T4684] loop3: detected capacity change from 0 to 164 [ 1374.933791][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1374.987652][ T4684] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1375.066665][ T4688] sg_write: data in/out 393183/48 bytes for SCSI command 0x0-- guessing data in; [ 1375.066665][ T4688] program syz.6.13587 not setting count and/or reply_len properly [ 1375.159209][ T32] audit: type=1800 audit(2000000457.648:630): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13586" name="bus" dev="tmpfs" ino=14279 res=0 errno=0 [ 1375.428400][ T4700] random: crng reseeded on system resumption [ 1375.828454][ T4716] netlink: 'syz.4.13599': attribute type 1 has an invalid length. [ 1375.861049][ T4716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13599'. [ 1375.861112][ T4716] netlink: 'syz.4.13599': attribute type 1 has an invalid length. [ 1375.861134][ T4716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13599'. [ 1375.861154][ T4716] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 1376.036572][T17097] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1376.080439][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13601'. [ 1376.208932][T17097] usb 3-1: Using ep0 maxpacket: 8 [ 1376.215498][T17097] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1376.226285][T17097] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1376.241405][T17097] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1376.241477][T17097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.260672][ T4322] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1376.276090][T17097] usb 3-1: config 0 descriptor?? [ 1376.429665][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 1376.451313][ T4322] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1376.518900][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1376.518963][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.541654][ T4322] usb 4-1: config 0 descriptor?? [ 1376.841136][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.849842][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.857509][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.865159][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.874222][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.882649][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.889971][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.890023][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.905299][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.905336][T17097] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1376.959686][T17097] uclogic 0003:5543:0004.000A: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 1377.001946][ T4322] hid (null): global environment stack underflow [ 1377.042234][ T5349] usb 3-1: USB disconnect, device number 30 [ 1377.055978][ T4322] nintendo 0003:057E:200E.000B: global environment stack underflow [ 1377.064232][ T4322] nintendo 0003:057E:200E.000B: item 0 0 1 11 parsing failed [ 1377.072897][ T4322] nintendo 0003:057E:200E.000B: HID parse failed [ 1377.109872][ T4322] nintendo 0003:057E:200E.000B: probe - fail = -22 [ 1377.110031][ T4322] nintendo 0003:057E:200E.000B: probe with driver nintendo failed with error -22 [ 1377.210315][ T4752] fido_id[4752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1377.234008][ T4322] usb 4-1: USB disconnect, device number 23 [ 1378.200364][ T4756] loop5: detected capacity change from 0 to 32768 [ 1378.360882][ T4771] Zero length message leads to an empty skb [ 1378.367302][ T1616] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.376305][ T1616] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.417635][ T1615] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.513852][ T4775] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 1379.296201][ T5349] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1379.337603][ T4763] loop2: detected capacity change from 0 to 32768 [ 1379.382115][ T4763] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1379.458578][ T5349] usb 5-1: Using ep0 maxpacket: 16 [ 1379.459432][ T5349] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1379.474491][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1379.474523][ T5349] usb 5-1: Product: syz [ 1379.474540][ T5349] usb 5-1: Manufacturer: syz [ 1379.474555][ T5349] usb 5-1: SerialNumber: syz [ 1379.495062][ T5349] usb 5-1: config 0 descriptor?? [ 1379.519330][ T5349] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1379.651109][ T4763] XFS (loop2): Ending clean mount [ 1379.751625][ T4763] XFS (loop2): Quotacheck needed: Please wait. [ 1379.766617][ T5349] usb 5-1: USB disconnect, device number 44 [ 1380.075492][ T4763] XFS (loop2): Quotacheck: Done. [ 1380.195155][ T5634] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1380.418759][ T4830] loop3: detected capacity change from 0 to 128 [ 1380.454570][ T4830] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1380.456334][ T4830] hpfs: filesystem error: improperly stopped [ 1380.456556][ T4830] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1380.456611][ T4830] hpfs: You really don't want any checks? You are crazy... [ 1380.457816][ T4830] hpfs: hpfs_map_sector(): read error [ 1380.498227][ T4830] hpfs: code page support is disabled [ 1380.596677][ T4830] hpfs: hpfs_map_4sectors(): unaligned read [ 1380.597393][ T4830] hpfs: hpfs_map_4sectors(): unaligned read [ 1380.597420][ T4830] hpfs: filesystem error: unable to find root dir [ 1380.841047][ T4838] bond0: option arp_interval: invalid value (18446744073709551615) [ 1380.841100][ T4838] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1381.165945][ T4846] loop6: detected capacity change from 0 to 1024 [ 1381.182790][ T4846] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1381.214929][ T4846] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.13655: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1381.215006][ T4846] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1381.236257][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1381.236288][ C0] EXT4-fs (loop6): initial error at time 2000000463: ext4_ext_check_inode:521: inode 11 [ 1381.236324][ C0] EXT4-fs (loop6): last error at time 2000000463: ext4_ext_check_inode:521: inode 11 [ 1381.279927][ T4846] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.13655: couldn't read orphan inode 11 (err -117) [ 1381.279966][ T4846] loop6: lost filesystem error report for type 5 error -117 [ 1381.297657][ T4846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.533957][ T1736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.704399][ T4860] loop2: detected capacity change from 0 to 512 [ 1381.764429][ T4860] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 1: comm syz.2.13647: invalid block [ 1381.764489][ T4860] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1381.776046][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1381.776073][ C0] EXT4-fs (loop2): initial error at time 2000000463: __ext4_iget:5592: inode 11: block 1 [ 1381.776116][ C0] EXT4-fs (loop2): last error at time 2000000463: __ext4_iget:5592: inode 11: block 1 [ 1381.817369][ T4860] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.13647: couldn't read orphan inode 11 (err -117) [ 1381.817614][ T4860] loop2: lost filesystem error report for type 5 error -117 [ 1381.837042][ T4860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1382.103332][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.785838][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13673'. [ 1382.975257][ T4892] macsec1: entered promiscuous mode [ 1382.975303][ T4892] veth1_to_hsr: entered promiscuous mode [ 1382.987097][ T4892] macsec1: entered allmulticast mode [ 1382.987136][ T4892] veth1_to_hsr: entered allmulticast mode [ 1383.764948][ T4914] overlayfs: missing 'lowerdir' [ 1383.892131][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13685'. [ 1383.901477][ T4879] kexec: Could not allocate control_code_buffer [ 1384.992014][ T4958] loop3: detected capacity change from 0 to 512 [ 1385.047592][ T4958] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1385.061562][ T4958] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.13703: invalid indirect mapped block 2683928664 (level 1) [ 1385.062044][ T4958] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1385.069809][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1385.069871][ C1] EXT4-fs (loop3): initial error at time 2000000466: ext4_free_branches:1023: inode 13 [ 1385.069981][ C1] EXT4-fs (loop3): last error at time 2000000466: ext4_free_branches:1023: inode 13 [ 1385.115078][ T4958] EXT4-fs (loop3): 1 truncate cleaned up [ 1385.126516][ T4963] loop2: detected capacity change from 0 to 64 [ 1385.134506][ T4958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.274507][ T4963] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 1385.376854][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.057189][ T4941] loop6: detected capacity change from 0 to 32768 [ 1386.108006][ T4941] XFS (loop6): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1386.452548][ T4941] XFS (loop6): Ending clean mount [ 1386.499246][ T4941] XFS (loop6): Quotacheck needed: Please wait. [ 1386.503195][ T5004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13718'. [ 1386.863544][ T4941] XFS (loop6): Quotacheck: Done. [ 1387.051929][ T1736] XFS (loop6): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1387.136480][ T5019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13725'. [ 1387.145946][ T5019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13725'. [ 1387.204105][ T4322] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1387.409776][ T4322] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1387.420558][ T4322] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1387.428744][ T4322] usb 6-1: config 0 has no interface number 0 [ 1387.445476][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.454286][ T4322] usb 6-1: Product: syz [ 1387.458844][ T4322] usb 6-1: Manufacturer: syz [ 1387.463892][ T4322] usb 6-1: SerialNumber: syz [ 1387.472386][ T4322] usb 6-1: config 0 descriptor?? [ 1387.482218][ T4322] usb 6-1: selecting invalid altsetting 1 [ 1387.490464][ T4322] dvb_ttusb_budget: ttusb_init_controller: error [ 1387.502104][ T4322] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1387.581911][ T4322] DVB: Unable to find symbol stv0299_attach() [ 1387.807318][ T4322] DVB: Unable to find symbol tda8083_attach() [ 1387.807355][ T4322] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1387.854243][ T4322] usb 6-1: USB disconnect, device number 36 [ 1388.405650][ T5044] ALSA: mixer_oss: invalid OSS volume '' [ 1388.605319][ T5049] loop6: detected capacity change from 0 to 128 [ 1389.656657][ T5050] loop5: detected capacity change from 0 to 32768 [ 1389.716341][ T5050] non-latin1 character 0x3ff found in JFS file name [ 1389.717092][ T5050] mount with iocharset=utf8 to access [ 1389.775286][ T5054] loop2: detected capacity change from 0 to 40427 [ 1389.785485][ T5054] F2FS-fs (loop2): invalid crc value [ 1389.929694][ T5054] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1389.975510][ T5077] loop3: detected capacity change from 0 to 512 [ 1389.991507][ T5077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1389.991743][ T5077] EXT4-fs: Ignoring removed nobh option [ 1389.991987][ T5077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1389.992196][ T5077] EXT4-fs: Ignoring removed bh option [ 1390.032203][ T5054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1390.074497][ T5077] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1390.095917][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1390.095963][ C1] EXT4-fs (loop3): initial error at time 2000000471: ext4_mb_generate_buddy:1317 [ 1390.095993][ C1] EXT4-fs (loop3): last error at time 2000000471: ext4_mb_generate_buddy:1317 [ 1390.187653][ T5060] loop6: detected capacity change from 0 to 32768 [ 1390.267027][ T5077] EXT4-fs (loop3): 1 orphan inode deleted [ 1390.319994][ T5077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1390.479976][ T5077] EXT4-fs: can't change dax mount option while remounting [ 1390.591037][ T5634] syz-executor: attempt to access beyond end of device [ 1390.591037][ T5634] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1390.644416][ T5088] netlink: 'syz.6.13756': attribute type 1 has an invalid length. [ 1390.675762][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.675808][ T5634] Tainted: [L]=SOFTLOCKUP [ 1390.675819][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1390.675836][ T5634] Call Trace: [ 1390.675846][ T5634] [ 1390.675860][ T5634] dump_stack_lvl+0xe8/0x150 [ 1390.675907][ T5634] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1390.675946][ T5634] f2fs_write_end_bio+0x1211/0x16e0 [ 1390.675986][ T5634] ? blkg_put+0x22/0x240 [ 1390.676036][ T5634] __submit_merged_bio+0x258/0x6a0 [ 1390.676065][ T5634] ? rcu_is_watching+0x16/0xb0 [ 1390.676103][ T5634] __submit_merged_write_cond+0x3c9/0x4e0 [ 1390.676146][ T5634] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1390.676207][ T5634] f2fs_write_data_pages+0x2a27/0x36f0 [ 1390.676250][ T5634] ? __lock_acquire+0x6df/0x2e50 [ 1390.676321][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1390.676355][ T5634] ? is_bpf_text_address+0x26/0x2b0 [ 1390.676402][ T5634] ? arch_stack_walk+0xfb/0x150 [ 1390.676469][ T5634] ? add_lock_to_list+0xc7/0x100 [ 1390.676504][ T5634] ? lockdep_unlock+0x5c/0xd0 [ 1390.676541][ T5634] ? __lock_acquire+0x14b9/0x2e50 [ 1390.676601][ T5634] ? do_raw_spin_lock+0x12b/0x2f0 [ 1390.676652][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 1390.676690][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1390.676726][ T5634] do_writepages+0x338/0x560 [ 1390.676781][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 1390.676821][ T5634] filemap_fdatawrite+0x1e9/0x2f0 [ 1390.676852][ T5634] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1390.676929][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 1390.676972][ T5634] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1390.677029][ T5634] f2fs_write_checkpoint+0xa3d/0x2710 [ 1390.677082][ T5634] ? __lock_acquire+0x6df/0x2e50 [ 1390.677149][ T5634] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1390.677242][ T5634] ? try_to_wake_up+0x8b6/0x14d0 [ 1390.677293][ T5634] kill_f2fs_super+0x2dd/0x700 [ 1390.677341][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1390.677393][ T5634] ? call_rcu+0x64d/0x8b0 [ 1390.677426][ T5634] ? lockdep_hardirqs_on+0x7b/0x110 [ 1390.677479][ T5634] deactivate_locked_super+0xbc/0x110 [ 1390.677520][ T5634] cleanup_mnt+0x3d3/0x460 [ 1390.677567][ T5634] task_work_run+0x1d9/0x270 [ 1390.677600][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 1390.677642][ ** replaying previous printk message ** [ 1390.677642][ T5634] exit_to_user_mode_loop+0x204/0x770 [ 1390.677671][ T5634] ? rcu_is_watching+0x16/0xb0 [ 1390.677710][ T5634] do_syscall_64+0x328/0x520 [ 1390.677744][ T5634] ? trace_irq_disable+0x3b/0x140 [ 1390.677770][ T5634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.677799][ T5634] ? clear_bhb_loop+0x70/0xc0 [ 1390.677832][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.677859][ T5634] RIP: 0033:0x7fbe6579f317 [ 1390.677885][ T5634] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1390.677909][ T5634] RSP: 002b:00007fffe7fcdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1390.677939][ T5634] RAX: 0000000000000000 RBX: 00007fbe65834474 RCX: 00007fbe6579f317 [ 1390.677957][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe7fce070 [ 1390.677975][ T5634] RBP: 00007fffe7fce070 R08: 00007fffe7fcf070 R09: 00000000ffffffff [ 1390.677994][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe7fcf100 [ 1390.678011][ T5634] R13: 00007fbe65834474 R14: 0000000000140e8d R15: 00007fffe7fcf140 [ 1390.678053][ T5634] [ 1390.798579][ T5634] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1390.909187][ T5634] [ 1390.934584][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.046728][ T5634] ============================= [ 1391.051890][ T5634] WARNING: suspicious RCU usage [ 1391.056971][ T5634] syzkaller #0 Tainted: G L [ 1391.063123][ T5634] ----------------------------- [ 1391.068061][ T5634] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 1391.077047][ T5634] [ 1391.077047][ T5634] other info that might help us debug this: [ 1391.077047][ T5634] [ 1391.087487][ T5634] [ 1391.087487][ T5634] rcu_scheduler_active = 2, debug_locks = 1 [ 1391.095783][ T5634] locks held by syz-executor/5634: 2, last CPU#1: [ 1391.102712][ T5634] #0: ffff88807741c0e8 (&type->s_umount_key#102){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1391.113122][ T5634] #1: ffff88808ca0c8c8 (&im->ino_lock){+.+.}-{3:3}, at: f2fs_remove_ino_entry+0x18d/0x3f0 [ 1391.123510][ T5634] [ 1391.123510][ T5634] stack backtrace: [ 1391.129652][ T5634] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.140812][ T5634] Tainted: [L]=SOFTLOCKUP [ 1391.145164][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1391.155256][ T5634] Call Trace: [ 1391.158570][ T5634] [ 1391.161627][ T5634] dump_stack_lvl+0xe8/0x150 [ 1391.166266][ T5634] lockdep_rcu_suspicious+0x140/0x1d0 [ 1391.171722][ T5634] f2fs_remove_ino_entry+0x3ae/0x3f0 [ 1391.177070][ T5634] f2fs_evict_inode+0x83d/0x21f0 [ 1391.182130][ T5634] ? add_lock_to_list+0xc7/0x100 [ 1391.187134][ T5634] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 1391.192561][ T5634] ? do_raw_spin_lock+0x12b/0x2f0 [ 1391.197673][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 1391.202835][ T5634] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 1391.208340][ T5634] evict+0x624/0xb50 [ 1391.212284][ T5634] ? __pfx_evict+0x10/0x10 [ 1391.216733][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 1391.221898][ T5634] ? _raw_spin_unlock+0x28/0x50 [ 1391.226784][ T5634] ? iput+0xb84/0xf00 [ 1391.230816][ T5634] f2fs_evict_inode+0x20f/0x21f0 [ 1391.236021][ T5634] ? inode_wait_for_writeback+0x16d/0x3b0 [ 1391.241792][ T5634] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 1391.247212][ T5634] ? do_raw_spin_lock+0x12b/0x2f0 [ 1391.252300][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 1391.257464][ T5634] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 1391.262888][ T5634] evict+0x624/0xb50 [ 1391.266870][ T5634] ? __pfx_evict+0x10/0x10 [ 1391.271320][ T5634] ? do_raw_spin_lock+0x12b/0x2f0 [ 1391.276407][ T5634] evict_inodes+0x7e3/0x870 [ 1391.280957][ T5634] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 1391.286976][ T5634] ? __pfx_evict_inodes+0x10/0x10 [ 1391.292078][ T5634] ? sync_filesystem+0x1f9/0x240 [ 1391.297069][ T5634] generic_shutdown_super+0xaa/0x2d0 [ 1391.302400][ T5634] kill_block_super+0x44/0xa0 [ 1391.307129][ T5634] kill_f2fs_super+0x3b3/0x700 [ 1391.311955][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1391.317298][ T5634] ? call_rcu+0x64d/0x8b0 [ 1391.321672][ T5634] ? lockdep_hardirqs_on+0x7b/0x110 [ 1391.326925][ T5634] deactivate_locked_super+0xbc/0x110 [ 1391.332328][ T5634] cleanup_mnt+0x3d3/0x460 [ 1391.336780][ T5634] task_work_run+0x1d9/0x270 [ 1391.341393][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 1391.346536][ T5634] exit_to_user_mode_loop+0x204/0x770 [ 1391.351932][ T5634] ? rcu_is_watching+0x16/0xb0 [ 1391.356765][ T5634] do_syscall_64+0x328/0x520 [ 1391.361386][ T5634] ? trace_irq_disable+0x3b/0x140 [ 1391.366429][ T5634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.372527][ T5634] ? clear_bhb_loop+0x70/0xc0 [ 1391.377225][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.383136][ T5634] RIP: 0033:0x7fbe6579f317 [ 1391.387574][ T5634] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1391.407200][ T5634] RSP: 002b:00007fffe7fcdfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1391.415635][ T5634] RAX: 0000000000000000 RBX: 00007fbe65834474 RCX: 00007fbe6579f317 [ 1391.423637][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe7fce070 [ 1391.431636][ T5634] RBP: 00007fffe7fce070 R08: 00007fffe7fcf070 R09: 00000000ffffffff [ 1391.439891][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe7fcf100 [ 1391.447895][ T5634] R13: 00007fbe65834474 R14: 0000000000140e8d R15: 00007fffe7fcf140 [ 1391.455905][ T5634]