last executing test programs: 5m2.518009108s ago: executing program 4 (id=3091): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000100)={[{@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@gid}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@utf8}]}, 0x25, 0x365, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvdpJsGtpfcvhB0dPqTRBpKoJ6SigVijloZfHfxcWmWrNrIYsL6SGbvSjFk+JF0JO3HvTYs3gQ8ebBqxakKl7sRQoNjuzu7OxsdqPJYWOLn88hfPN97zvvzcwjMwnJy2vt2Lg4G5du374V8/OlmFk5uxJ3SrEUxyKJvp2Y6P25yXkA4B53J03j97Tvn3t/uDCIPPsB4P7Ve/6/cXKYKB+i+NqJaUwJAJiyA37//9zE7JWpTQsAmKKx5//DI817fsw/k/9OAABw/3rh5VeeXV2LuFCpzEc03mtVW9V4eti+eikuRz3W43Qsxm5E/0Wh/7bQ/fjM+bVzpytdPy9FtVvRqkY02q1q/01hNYnLaT3KsRyLsZTVp3l90q1f7tVXImKn3Rs/GqVWdTYWsvF/WIj1OBOL8f+x+ojza+fOVLIDVBuD+nZEJ+YHJ9GdfxKL8d3rcSXqcTG6tcP5by9XKmfTtZH61vVyrx8AAAAAAAAAAAAAAAAAAAAAAEzDY5XcUr7/Tdpot969MNLhZtY/3x+n2v882x+o098fKC0Pdue5luzdH2h0f55WdSaO/WtnDQAAAAAAAAAAAAAAAAAAAPeW5tZc1Or19c3m1tWNYtAuZN7+5vOvjsegaSYrfSsZVkWWXN9szuZHHnQsHDmJfIg0L0+TkT5ZkEQMOu/Urt/IZ1zsU87HGivvBuWxplI2p1q9fvKhnz6ZVPVnN9jpZZIYuyyjQSkbv9DU+F83MR8Ru/tV7R+UJ9+LPPgjTdP9yrc/Hq+KUsRMHHoaBwi+vvXmA483Tz3Ry3yZbfrwyKOLL/740We/btTq0elfmXp9brO5m04+zoni3enOdbxPUlg/pew6lyashMlBZ5jpbDa3asn3v7304Aff7umcTF4/aTHzzv5jfbE3M9cPShFLg4vwd1OdnbD4u8GTo7fy6kbt1bv56j38jTv16UrtxvbNXw5aVfgiYaMOAAAAAAAAAAAAAAAAAAA4EoU/MD6Ep56f3owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN//9/IeiMZQ4S3G3HeFN5fbO57+DHj/RUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/srAAD//xu8baw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 5m2.007294896s ago: executing program 4 (id=3102): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100800009000005240600016a050003000d240f017a850000030084000206241a00001009058103100000000d0904010000020d00000904010102020d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m59.621517076s ago: executing program 4 (id=3163): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000011c0)={0x368ba8eca4aceaa8, 0x2, 0xfffffffffffffff5, 0x3ff}) 4m59.586135359s ago: executing program 4 (id=3166): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f00000000c0)={[{}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@dir_umask}]}, 0x2, 0x34e, &(0x7f0000002280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m59.428489171s ago: executing program 3 (id=3171): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0xd) 4m59.42045016s ago: executing program 4 (id=3173): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001f00)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x48, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}], "2e04b724bb7a910b72371f51721367e9a525d9427ea8869d9d7d731fe2197707cc8f0600f6a6d0441ef681310be1770e4fe025f33705f144130cbc81f5b6dec6"}}}}}, 0x0) 4m59.233714276s ago: executing program 3 (id=3178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, 0x0}, 0x20) 4m59.138974759s ago: executing program 3 (id=3182): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 4m59.085221989s ago: executing program 4 (id=3184): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m59.058809324s ago: executing program 3 (id=3185): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f00000000c0)={[{}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@dir_umask}]}, 0x2, 0x34e, &(0x7f0000002280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m58.935342702s ago: executing program 32 (id=3184): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m58.854448597s ago: executing program 3 (id=3192): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x20}, {0x0, 0x30}], 0x2, 0x0, 0x0, 0x900}, 0x0) 4m58.826266492s ago: executing program 2 (id=3194): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 4m58.642622849s ago: executing program 2 (id=3197): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'}) 4m58.463764097s ago: executing program 3 (id=3200): r0 = socket(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) 4m58.454840145s ago: executing program 2 (id=3202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x28a2f4bb9c7377d9, 0x0, 0x0, {}, [@NHA_ID={0x8, 0xb}]}, 0x20}}, 0x0) 4m58.364547769s ago: executing program 2 (id=3203): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f00000000c0)={[{}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@dir_umask}]}, 0x2, 0x34e, &(0x7f0000002280)="$eJzs3T1rFE8cB/Dv7MPd3j8h/zWJBKwkGrAKSSwUG4MEG9+AhQRjckLIGkEjmIAYrUXsBMHSzlr0LWgjvgGtUoiN2gQLV+a3z3ezl8vl4e647wc89nZndn5zM7M3kxAHRDSwrix8fXN+R/9TLgAbwCXAAuABDoCTmPAerG8056wW39rpkUKUUzVlWV6vm2LwEOfIv3MwnJ2joxKGYfhtz1S/jiUW6h6VH8E5VjTQnWSEe8ce2dHYbnqADYBcC6td7OIhRroZDhER9QBHvh2s+FtiOJ6/WxYwFc/D+/37vzC/2e1eHD0h/f63oveh0p/P/3JJr/dWN4L6SrSE061vJatE072MfSLMPu4Kop5lD+WmXLlSzCQWq3Z7NahPb8sNnuJyLJdsXF5XkFRElEVbiVJNGtamLbSqe+RnyfkhqYOr6zBXEv9YqxKNC+AP3/HSXNziJ9PZhrqqj+qzWlQ+XmElnf85odLNJC3lNwyVKP6ZkirqWiZhBvWZQi2z8E9IIafiEvD+bVbLWtnn6sHWsRRVsno0zt/9JM4XFfMN5fQoij9WiGo3W147yTUGOEpWDflcc2miP8Zc44WylO7NblCfXr4blHX6w2Vc0ann6rqaxA+8w0Ju/m/p1FMoH5mFUa4kZdwzWtbHkZRN7WggQ/POvkYmiavF8dpWnme4hYsYub+5tbYUBPV73T9IhkqH2U8fZjzVza2oI8bdUV+CPOHSNPD0gQvg0D6Ev2EYGi85OI4mcKWqF15nVd5aW1LxM+9gRegnZ8Ol+fLEAOYBxGeSJ0InpT9Oc1WzG+6Ry5eyfuvWljOFDukmB0lUcinpukfTOklRhUs2qm2NlFoHhV57tLYUdPQkoj6TNTombnQ7GOoGPV9Q0fovt16ZkaeOfvFbrH/c4ttaU4LcHWdLVkCj8vpfeyu49Lal88Sh5GCPNdeZc8DZhhItJCU+abytH8eJXvyt5P5/laEW8AU3+fN/IiIiIiIiIiIiIiIiIiIiIiIiIqJ+s9+/RujkzwmKJe4M4H+8QURERERERERERERERERERERERERERER0MLn9fwFbdoypmPb/bbVTk7CjHWK8A+//C/h2G/v/qu1+3ouMqCf8CwAA//9x31g6") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m58.118918205s ago: executing program 33 (id=3200): r0 = socket(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) 4m58.056730134s ago: executing program 2 (id=3207): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x60, 0x0}) 4m57.777538193s ago: executing program 2 (id=3209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x2c, 0x18, 0x909, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d962c902af4e2860"}, 0x6}}]}, 0x2c}}, 0x240440c8) 4m57.588330119s ago: executing program 34 (id=3209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x2c, 0x18, 0x909, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d962c902af4e2860"}, 0x6}}]}, 0x2c}}, 0x240440c8) 2.725934572s ago: executing program 5 (id=10756): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) 2.678539133s ago: executing program 5 (id=10757): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000000840)="$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") lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)=""/12, 0xc) 2.342476912s ago: executing program 5 (id=10766): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) 2.040921368s ago: executing program 5 (id=10774): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 1.993855989s ago: executing program 1 (id=10776): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20, 0x0, &(0x7f0000000200)=0xfffffffffffffce0) 1.821249488s ago: executing program 1 (id=10779): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 1.576972685s ago: executing program 5 (id=10784): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x1010006, &(0x7f0000000600)={[{@quota}, {@noquota}, {@discard_size={'discard', 0x3d, 0x2}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@noquota}, {@gid}, {@discard_size={'discard', 0x3d, 0x4}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61ff, &(0x7f000001b700)="$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") r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) getdents64(r0, &(0x7f0000000440)=""/233, 0xe9) 1.533456367s ago: executing program 6 (id=10785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x34, r1, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xfffffe8c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.428759388s ago: executing program 6 (id=10789): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {}, {@barrier}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 1.270253249s ago: executing program 6 (id=10792): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000007c0)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x0, 0x6, 0x6, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x5, 0xf7, 0xfffd, 0x7, 0x1, 0x5, 0x430d, 0x2}}, {0x8, 0x2, [0xc, 0x7]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10080}, 0x0) 1.039360768s ago: executing program 6 (id=10794): r0 = socket(0x840000000002, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="139d64877df793b8813fd00ea0fc6a3fb08c29e3de", 0x15}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}}}}], 0x18}}], 0x1, 0x4040000) 1.027682355s ago: executing program 0 (id=10795): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000540)={0x7, 0xc, 0x0, 0x253, 0x1, 0x18b}) 910.319464ms ago: executing program 6 (id=10797): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 895.592892ms ago: executing program 5 (id=10798): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 804.401455ms ago: executing program 0 (id=10799): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) 681.239413ms ago: executing program 6 (id=10800): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000000c0)) 680.999713ms ago: executing program 0 (id=10801): r0 = syz_io_uring_setup(0x9e, &(0x7f00000000c0)={0x0, 0xec25, 0x0, 0xfffffffd, 0x40000333}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x34, 0x2004, @fd=r0, 0x7, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 518.343234ms ago: executing program 0 (id=10804): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) fchmod(r0, 0x1) 385.445749ms ago: executing program 7 (id=10805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) 385.2005ms ago: executing program 0 (id=10806): r0 = syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x80000004, 0x800, 0xffffffff, 0x1a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x2e74, 0x0, 0x0, 0x0, 0x0) 352.602664ms ago: executing program 1 (id=10807): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) getdents(r0, 0xfffffffffffffffd, 0x58) 332.23097ms ago: executing program 7 (id=10808): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 277.20148ms ago: executing program 0 (id=10809): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_continue}, {@nodiscard}, {@uid}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@gid, 0x0}, {@errors_continue}, {@umask={'umask', 0x3d, 0xff}}, {@umask={'umask', 0x3d, 0x4}}, {@errors_continue}, {@nointegrity}, {@resize}, {@quota}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfsdef={'smackfsdef', 0x3d, 'resize'}}]}, 0x1, 0x6172, &(0x7f0000006340)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0bER09FbG2vr9aLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAChNVVVVJ33MP5M+33fb7hQAMBX59b9K8vJTX//6n2/9ZZb6o1ar1Wr1FOqmarx7zSIiNpq3qd8zOBwPACfMRnzcdhdokfyL1o+IJ9ruBDDTOm13gGOxtb2+2kn5dpqvB8u77flckH35b3QeXN8xaXqQ0XNMpvX42oxePDOhPwtT6sMsyfl3R/O/tts+TOsdd/7TMin/4e6lT8XJ+fdG8x9xevLvjs2/VDn//iPl35M/AAAAAADMsPz//0stH/+dO/qmHMonHf9dnlIfAAAAAAAAAOBxO+r4fw8Y/w8AAABmVv1Zvfabp/aWTfoutnr51U7EkyPrA4VJF8sstt0PAAAAAAAAAAAAAChJf/cc3qudiEFEPLm4WFVV/dM0Wj+qo97+pCt9+6FkbT/JAwDAro+eGrmWvxMxHxFX03f9DRYXF6tqfmGxWqwW5vL72eHcfLXQ+Fybp/WyueEh3hD3h1X9y+Ybt2s66PPyQe2jv6++r2HVO0THHpNB+mtOaG4pbABIdl+NtrwinTJV9fSkNx+wj/3/FFqKpbYfV8y+th+mAAAAwPGrqqrqpK/zPpOO+Xfb7hQAMBX59X/0uMCR6u6E9ojH8/vVarVarVZ/qrqpGu9es4iIjeZt6vcMhuMHgBNmIz5uuwu0SP5F60fEc213AphpnbY7wLHY2l5f7aR8O83XgzS+ez4XZF/+G52d2+Xbj5seZPQck2k9vjajF89M6M+zU+rDLMn5d0fzv7bbPkzrHXf+0zIp/+HOJXPlyfn3RvMfcXry747Nv1Q5//4j5d+TPwAAAAAAzLD8//9Ljv/mTQYAAAAAAACAE2dre301X/eaj/9/bsx6rv88nXL+nUfNfyHNy/9Ey/l3R/L/8sh6vcb8/Tf39v9/b6+v/v7Ovz6bp4fNfy7PdNIjq5MeEZ10T51+mh5l6x62OegN63sadLq9fjrnpxq8EzfiZqzFhX3rdtPfY699ZV973dPBvvaL+9r7D7Vf2tc+SN87UC3k9nOxGj+Jm/H2TnvdNnfA9s8f0F4d0J7z73n+L1LOv9/4qfNfTO2dkWnt/ofdh/b75nTc/bxx4/O/vHD8m3Ogzeg92LamevvOttCfnb/JE8P42e21W+fuXr9z59ZKpMm+pRcjTR6znP9g52du7/n/hd32/Lzf3F/vfzh85PxnxWb0J+b/QmO+3t6Xpty3NuT8h+kn5/92ah+//5/k/Cfv/y+30B8AAAAAAAAAAAAAAAD4JFVV7Vwi+kZEXE7X/7R1bSYAMF359b9K8nK1Wq1Wq9Wnr26qxnu9WUTEX5u3qd8z/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpi213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+cWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOPPx8743Ocmjf99Nh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5P98Y77zO/8zI8OsljP86OuZ9CXL+ZxuP5zr/L42s18y/+u3M5b9x2BU3o7sv//N33vvp+dvvf/DKjfeuv7v27tqPL62sXLh0+fKVK1fOv3Pj5tqF3X+Pp9czIOefx752HmhZcv45c/mXJef/hVTLvyw5/y+mWv5lyfnn93vyL0vOP3/2kX9Zcv4vpVr+Zcn5fyXV8i/L1vb6XJ3/y6mWf1ny/v/VVMu/LDn/V1It/7Lk/M+lWv5lyfmfT/Uh8vf18KdIzj8f4bL/lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdW4xcd30H8DN789ohxEAITmpgk5gQkiW7thNfaFNMuDZAKZBQ6AXH9a7Ngm947RIokk0DJRJGRRVV04e2gFAbqaqIKh5oRWkeql6eSvtAXyqqSkiNqoACKlJb0Ww1c/7/v2dmZ+fsesfr2fP/fCT7tztzZs6ZM2dm97v2dw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7tY3zn+2URRF80/rr+1F8YLmx1untrcue9213kIAAABgvf6v9fdzN6QLDq3iRm3L/N0r/vHrS0tLS8X7R393/ItLS+mKqaIY31IUreuip/79A432ZYLHisnGSNvnIxWrH624fqzi+vGK6ycqrt9Scf1kxfXLdsAyW8ufx7TubFfrw+3lLi1uLMZb1+3qcavHGltGRuLPcloardssjR8rFooTxXwx27F8uWyjtfw3b22u621FXNdI27p2No+QH37yaNyGRtjHuzrWdfk+o++/oZj60Q8/efSPzz17c69ZuRs67q/czjtva27np8Ml5bY2ii1pn8TtHGnbzp09npPRju1stG7X/Lh7O59b5XaOXt7MDdX9nE8WI62Pv93aT2PtP9ZL+2lnuOy/by+K4uLlze5eZtm6ipFiW8clI5efn8nyiGzeR/NQenExtqbj9NZVHKfNOber8zjtfk3E5//WcLuxFbah/Wn6/qcmlj3vaz1Oo+ajXum10n0MDvq1MizHYDwuvt160I/3PAZ3hcf/yTtWPgZ7Hjs9jsH0uNuOwduqjsGRidHWNqcnodG6zeVjcHfH8qOtNTVa85k7+h+DM+dOnplZ/PgnXrtw8sjx+ePzp/bu3j27d9++AwcOzBxbODE/W/59hXt7+G0rRtJr4Law7+Jr4NVdy7YfqktfHtzrcLLP63B717KDfh2OdT+4xsa8IJcf0+Vr46HmTp+8NFKs8BprPT93rf91mB532+twrO112PNrSo/X4dgqXofNZc7ctbrvWcba/vTahqv1tWB72zHY/f1I9zE46O9HhuUYnAzHxb/etfLXgp1hex+fXuv3I6PLjsH0cMN7T/OS9P3+5IHW6HVc3tK84rqJ4vzi/Nl7Hj1y7tzZ3UUYG+IlbcdK9/G6re0xFcuO15E1H6+HFl7x+C09Lt8e9tXka5t/Ta74XDWXufee/s9V66tb7/3ZcemeIowB2+j92eureXN/pizZZ382l/n0zPq/F0+5tO39d3yF99+Y+58v15fu6rHR8bHy9Tua9s54x/tx51M11nrvarTW/dzM6t6Px8OfjX4/vrHP+/GOrmUH/X483v3g4vtxo+qnHevT/XxOhuPkxGz/9+PmMjv2rPWYHOv7fnx7mI2w/18TkkLKRW3HzkrHbVrX2Nh4eFxjcQ2dx+nejuXHQzZrruvJPVd2nN55e3lfo+nRXbZRx+lU17KDPk7T+9VKx2mj6qdvV6b7+ZwMx8WNe/sfp81lnr53/e+dW+OHbe+dE1XH4PjoRHObx9NBWL7fL22Nx+A9xdHidHGimGtdO9E6nhqtdU3ft7pjcCL82ej3yh19jsE7u5Yd9DGYvo6tdOw1xpY/+AHofj4nw3HxxH39j8HmMm/aP9jvXe8Ml6Rl2r537f752ko/87qlazddzZ95Nbfzb/b3/9lsc5kTB9aaM/vvp7vDJdf12E/dr9+VXlNzxcbspx1hO589sPJ+am5Pc5kvHlzl8XSoKIoLH32g9fPe8O8rf37+O1/v+HeXXv+mc+GjD/zg+mN/u5btB2Dze74c28qvdW3/MrWaf/8HAAAANoWY+0fCTOR/AAAAqI2Y++P/Ck/kfwAAAKiNmPvHwkwyyf873vTswvMXitTMXwri9Wk3PFguFzuus+HzqaXLmpc/8NX5H//lhdWte6Qoip88+Bs9l9/xYNyu0lTYzqfe3Hn58hteKO+v4pcTPvLwhbTe9v76l8L9x8ez2sOgVwV3tiiKb97w+dZ6pj5wqTWffvCR1nzPxccfay7z3MHy83j7Z15SLv8HYfsPHTvScftnwn74Xpizb++9P+LtvnbpNTv3v+/y+uLtGre9sPWwn/hgeb/x9+R84bFy+bifV9r+v/rck19rLv/oq3pv/4WR3tv/ZLjfr4b5Py8vl29/Dpqfx9t9Jmx/XF+83T1f+VbP7X/qs+XyZ95SLvdImHH9d4bPd73l2YX2/fVo40jH4yreWi4X1z/7nd9uXR/vL95/9/ZPHr7UsT+6j4+n/7m8n5mu5ePlcT3RX3Stv3k/7cdnXP+Tv/VIx36uWv9T73nm5c377V7/3V3LjXbdvvs3Nv3hZz7fc31xew792ZmOx3Po3eF1HNb/xAfD8Riu/9+nPt+x3uiRd3e+/8Tlv7T9Qsfjid72o3L9T73+eGv+x9SPf/+6F1z/wouvbO67ovj2e8v7q1r/8T863bH9X77prtbzEa+PbzPd619JXP/Zj02fOr14fmGuba+2fnfOO8rt2TK5dVtze28I763dnx8+fe5D82enZqdmi2Kqvr9C74p9JcwflOPiWm9/18Ph+bzl97657Y5/+ly8/F8eKi+/9Pby69arw3JfCJdvL5+/pcY61//ErTe1Xt+Np8vPO3rsA7Bz138eWNWC4fF3f18Qj/czL/1Qaz80r2t93Yiv63Vu/3fnyvv5RtivS+E3M9920+X1tS8ffzfCpfeWr/d177/wNhef1z8Jz/c7v1fef9yu+Hi/G76P+daOzve7eHx848JI9/23fovHxfB+Ulwsr49Lxf196bmbem5e/D0kxcWbW5//Trqfm9f0MFey+PHFmRMLp84/OnNufvHczOLHP3H45Onzp84dbv0uz8Mfrrr95fenba33p7n5ffcWs1uLojhdzG7AG9bV2f7mR6vb/jMPH53bP3vH3PyxI+ePnXv4zPzZ40cXF4/Ozy3eceTYsfmPVd1+Ye7+3XsO7t2/Z/r4wtz9Bw4e3HtweuHU6eZmlBtVYd/sR6ZPnT3cusni/fce3H3ffffOTp88PTd///7Z2enzVbdvfW2abt7616fPzp84cm7h5Pz04sIn5u/ffXDfvj2Vvw3w5Jlji1MzZ8+fmjm/OH92pnwsU+daFze/9lXdnnpa/Lfy+9lujfIX8RXvuntf+v2sTV/91Ip3VS7S9QtEnw2/i+YfXnTmwGo+j7l/PMwkk/wPAAAAOYi5fyLMRP4HAACA2oi5f0uYifwPAAAAtRFz/2SYSSb5v7b9/wr6/2vt/5fX6//n1f8/89GyV7rZ+/+xP6//n4dr3P9f9/r1//X/69f/X31/frNvv/6//j/LDVv/P+b+rUWRZf4HAACAHMTcvy3MRP4HAACA2oi5/7owE/kfAAAAaiPm/heEmWSS//X/V9X/31NVuKp//9/5//X/i83Z/49Pjv5/Ntbcv3/fQx2f6v8H+v/6//r/+v/6/6zb+IrXXKv+f8z914eZZJL/AQAAIAcx978wzET+BwAAgNqIuf+GMBP5HwAAAGoj5v7tYSaZ5H/9f+f/1//X/691/3+95/9v2xj9/83B+f/70/+vcMX9/0n9/83Y/x8f7PYPd/+/cvP1/7kqhu38/zH3vyjMJJP8DwAAADmIuf/FYSbyPwAAANRGzP0vCTOR/wEAAKA2Yu6/Mcwkk/yv/6//r/+v/6//33v91ef/Lz/S/x8u+v/96f9XcP7/vPr/A97+4e7/D/r8/+Nv7r69/j+9DFv/P+b+l4aZZJL/AQAAIAcx998UZiL/AwAAQG3E3P+yMBP5HwAAAGoj5v4dYSaZ5H/9f/1//X/9f/3/3uuv7v+X9P+Hi/5/f/r/FfT/9f/1/1fX/+/xza/+P70MW/8/5v6bw0wyyf8AAACQg5j7bwkzkf8BAACgNmLu/6kwE/kfAAAAaiPm/p1hJpnkf/3/uvT/JzrWrf+v/7/S+u+e0P/X/683/f/+9P8r6P/r/+v/r/L8/8utpf+/perOqI1h6//H3P/yMJNM8j8AAADkIOb+V4SZyP8AAABQGzH3vzLMRP4HAACA2oi5fyrMJJP8r/9fl/5/6U//+olXFvr/+v8V669p/z8eBvr/mdP/70//v4L+v/6//v+G9P/Jx7D1/2PuvzXMJJP8DwAAADmIuf+2MBP5HwAAAGoj5v7bw0zkfwAAAKiNmPt3hZlkkv/1/+vV/4/0//X/+62/pv3/RP8/b/r/PbS9SPX/K+j/6/9n3/+P3/3q/zMYw9b/j7n/VWEmmeR/AAAAyEHM/XeEmcj/AAAAUBsx9786zET+BwAAgNqIuf/OMJNM8r/+v/6//r/+v/5/7/Xr/29O+v/9rbX/P6H/r/+v/59Z/9/5/xmsYev/x9z/mjCTTPI/AAAA5CDm/rvCTOR/AAAAqI34/zfL//cq/wMAAEAdxdw/HWaSSf7X/9f/z6n/39D/1/9fZ/+/+VVC/3+46f/35/z/FfT/9f/1//X/Gahh6//H3P/aMJNM8j8AAADkIOb+e8JM5H8AAACojZj7Z8JM5H8AAACojZj7Z8NMMsn/+v/6/zn1/53/X//f+f/rT/+/P/3/Cvr/+v916/8Xhf4/19Sw9f9j7t8dZpJJ/gcAAIAcxNy/J8xE/gcAAIDaiLl/b5iJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9/97r1//fnPT/+9P/r6D/r/9ft/6/8/9zjQ1b/z/m/vvCTDLJ/wAAAJCDmPv3hZnI/wAAAFAbMffvDzMJ+b/X/+sGAAAANpeY+w+EmWTy7//6/zXp///m33esW/9f/7/f+gfT/9+q/x+m/v9wqWn/v/tlccX0/yvo/+v/6//r/zNQw9b/j7n/YJhJJvkfAAAAchBz/+vCTOR/AAAAqI2Y+386zET+BwAAgNqIuf9nwkwyyf/6/zXp/3fR/9f/77d+5//X/6+zmvb/B6ZW/f8R/X/9/+Hafv1//X+Wu/r9//jR6vr/MfffH2aSSf4HAACAHMTc/7NhJvI/AAAA1EbM/a8PM5H/AQAAoDZi7j8UZpJJ/tf/1//X/9f/vzr9/9cX3Yax/988ePT/60X/v79a9f+d/1//f8i2X/9f/5/lhu38/zH3vyHMJJP8DwAAADmIuf+BMBP5HwAAAGoj5v43hpnI/wAAAFAbMfe/Kcwkk/yv/6//r/+v/+/8/73Xr/+/Oen/96f/X0H/X/9f/1//n4Eatv5/zP1vDjPJJP8DAABADmLuf0uYifwPAAAAtRFz/1vDTOR/AAAAqI2Y+98WZpJJ/tf/1//X/9f/1//vvX79/81J/78//f8K+v/6//r/+v8M1LD1/2Pu/7kwk0zyPwAAAOQg5v4Hw0zkfwAAAKiNmPvfHmYi/wMAAEBtxNz/jjCTTPK//r/+v/6//r/+f+/16/9vTvr//en/V9D/1/8fuv5/8xr9fzavYev/x9z/zjCTTPI/AAAA5CDm/p8PM5H/AQAAoDZi7n9XmIn8DwAAALURc/8vhJlkkv/1//X/h6v/v3Sh/Xb6//r/xaD6/80b6f9nQf+/P/3/Cj36/1v0//X/nf9f/58rNmz9/5j73x1mkkn+BwAAgBzE3P+eMBP5HwAAAGoj5v73hpnI/wAAAFAbMfc/FGaSSf7X/8+y/58e8vD1/53/X//f+f/1/9dH/78//f8Kzv+v/6//r//PQA1b/z/m/ofDTDLJ/wAAAJCDmPvfF2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97w8zyST/6/9n2f8f4vP/163/P9ZxfOTU/59sez7Tcan/r/+/AfT/+9P/r6D/r/8/zP3/cDRvXeH2+v8Mo2Hr/8fc/4Ewk0zyPwAAAOQg5v5fCjOR/wEAAKA2Yu7/5TAT+R8AAABqI+b+XwkzyST/6//r/+v/O/+/8//3Xr/+/+ak/9+f/n8F/X/9/2Hu/1fQ/2cYDVv/P+b+Xw0zWTH4/eC/VvEwAQAAgCESc/8Hw0wy+fd/AAAAyEHM/YfDTOR/AAAAqI2Y+x8JM8kk/+v/d/f/4xlV9f/1//X/9f/1/zejwfX/X3Z9Uej/6//r/+v/6//r/7Mew9b/j7n/SJhJJvkfAAAAchBz/6+Fmcj/AAAAUBsx9x8NM5H/AQAAoDZi7p8LM8kk/1/D/v/4cPb/nf//Svv/P9H/1/8P9P970//fGM7/35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAACgxtKPg2PuPxZmIv8DAABAbcTcfzzMRP4HAACA2oi5/0NhJpnkf+f/1/93/v9r0f8f61he/7+k/6//Pwj6//3p/1fQ/9f/1//X/2eg1t//T++jA+n/x9y/EGaSSf4HAACAHMTc/+EwE/kfAAAAaiPm/o+Emcj/AAAAUBsx958IM8kk/+v/6//n3v9vFMVF5//X/++1fv3/zUn/vz/9/wr6//r/+v/6/wzU+vv/l2/S+nud/f+Y+0+GmWSS/wEAACAHMfefCjOR/wEAgP9n7z565DqvPA7XaCSG1cw3mFl75aUNGJA/grfeGfBacJJzoOScbTnnIOecc5JzzjnLOUc5ygZoqHnOIZtdvMVQ7Lr3Pc+zOUNCnC5KLQ3+Q/zwAsPI3X+PuMX+BwAAgGHk7r9n3NJk/+v/9f/d+//VTt7/3//X6/9P0f/r/7fhQH9/5fq/7lxR+Dn7/9vf4dq76f/1//r/Sfp//b/+n7PNrf/P3X+vuKXJ/gcAAIAOcvffO26x/wEAAGAYufvvE7fY/wAAADCM3P3Xxi1N9r/+X/+v/9f/7+v/b9L/6/+Xzfv/0/T/G+j/9f/6f/0/WzW3/j93/33jlib7HwAAADrI3X+/uMX+BwAAgGHk7r9/3GL/AwAAwDBy9z8gbmmy//X/+n/9/1L6/yPe/z/r96P/1/+vo/+fpv/fQP+v/9f/6//Zqrn1/7n7Hxi3NNn/AAAA0EHu/gfFLfY/AAAADCN3/4PjFvsfAAAAhpG7/yFxS5P9r//X/+v/l9L/H9L7//p//f/C3bg6/d8E/f9B+v8NNvT/q5X+f8p59/Prf3vL+fznoP/X/3PQ3Pr/3P0PjVvuvFodudjfJAAAADArufsfFrc0+fN/AAAA6CB3/4m4xf4HAACAYeTuvy5uabL/9f/6f/2//l//v/7r6/+Xyfv/0y69/7/d/15z9779v/f/p3n/f9v9/23fGfp/lm1u/X/u/uvjlib7HwAAADrI3f/wuMX+BwAAgGHk7n9E3GL/AwAAwDBy9z8ybmmy//X/o/X//73v153R/+/VLvp//b/+X/8/Ov3/NO//b7D3n7nj9UP9v/7f+//6fy7N3Pr/3P2Pilua7H8AAADoIHf/o+MW+x8AAACGkbv/MXGL/Q8AAADDyN3/2Lilyf7X/4/W/+//dd7/1/+v+/r6f/3/yPT/0/T/G4zy/v9Fftfsup+/VLv+/Pp//T8Hza3/z93/uLilyf4HAACADnL3Pz5usf8BAABgGLn7nxC32P8AAAAwjNz9T4xbmux//b/+fxn9f34F/b/+//L3/0n/v0z6/2n6/w1G6f8v0q77+aV/fv2//p+D5tb/5+5/UtzSZP8DAABAB7n7nxy32P8AAAAwjNz9T4lb7H8AAAAYRu7+p8YtTfa//l//v4z+3/v/+n/v/+v/z4/+f5r+fwP9v/5f/6//Z6vm1v/n7r8hbmmy/wEAAKCD3P1Pi1vsfwAAABhG7v6nxy32PwAAAAwjd/8z4pYm+1//r//X/+v/9f/rv/6+/v//9P9Lof+fpv/fQP+v/9f/6//Zqhn1/2f8qmOrZ8YtTfY/AAAAdJC7/1lxi/0PAAAAw8jd/+y4xf4HAACAYeTuf07c0mT/6/9n0//v5Xxj9f/HV6uV/n/VtP8/fsY/z/q+XHL/7/3/xdD/T9P/b6D/1//r//X/bNWM+v+9H+fuf27c0mT/AwAAQAe5+58Xt9j/AAAAMIzc/c+PW+x/AAAAGEbu/hfELU32v/5/Nv3/nrH6f+//n/390an/H+79f/3/Yuj/p+n/N9D/6//1//p/tmpu/X/u/hfGTUeuuujfIgAAADAzuftfFLc0+fN/AAAA6CB3/4vjFvsfAAAAFuqGAz+Tu/8lcUuT/a//327/f+SMn9P/6//P/v7Q/+v/9f+Xn/4/HVn7s/r/DfT/+n/9v/6frZpb/5+7/6VxS5P9DwAAAB3k7r8xbrH/AQAAYBi5+18Wt9j/AAAAMIzc/S+PW5rsf/2/9//1//p//f/6r6//Xyb9/zT9/wb6f/3/bvv/o6f/R/0/Y7iA/v/kyZMnLnv/n7v/FXFLk/0PAAAAHeTuf2XcYv8DAADAMHL3vypusf8BAABgGLn7Xx23NNn/+v+m/X9+qy+r/79utdL/6//1//r/afr/afr/DfT/+n/v/+v/2aq5vf+fu/81cUuT/Q8AAAAd5O5/bdxi/wMAAMAwcve/Lm6x/wEAAGAYuftfH7c02f/6/6b9v/f/9f/6/8Pu/29d6f8PxSL6/+Pn/vpz7/+v1//r/ye06//vcsd9P9T/6/85aG79f+7+N8QtTfY/AAAAdJC7/41xi/0PAAAAw8jd/6a4xf4HAACAYeTuf3PcdGWT/a//1//r//X/+v/1X/+Q3/8/slqt9P9bsIj+f8Lc+//tvP9/9r/lp+n/9f9L/vz6f/0/B82t/8/d/5a4pcn+BwAAgA5y9781brH/AQAAYBi5+98Wt9j/AAAAMIzc/W+PW5rsf/2//l//r/8fvv+/fhH9v/f/t0T/P20e/f+56f/1/0v+/Pp//T/nb1f9f+7+d8QtTfY/AAAAdJC7/51xi/0PAAAAw8jd/664xf4HAACAYeTuf3fc0mT/6//1/xfS/+fn1P+P1f8fnV3/f2zf/74m7//r/7dE/z9N/7+B/l//r/+/Qf/PNs3t/f/c/e+JW5rsfwAAAOggd/9749b/69b+BwAAgGHk7n9f3GL/AwAAwDBy978/bmmy//X/+n/v/+v/h3//X//fiv5/mv5/A/2//l//7/1/tmpu/X/u/g/ELU32PwAAAHSQu/+DcYv9DwAAAMPI3f+huMX+BwAAgGHk7r8pbmmy//X/+n/9v/5f/3/qn6H+fwz6/2mH0/8f1//r/6uf/6/4t0D/r//f9OsZ09z6/9z9H45bmux/AAAA6CB3/0fiFvsfAAAAhpG7/6Nxi/0PAAAAi3Tlmp/L3f+xuKXJ/tf/6//1//p//f/6r6//X6ad9P/5TaH/9/5/6NP///++Hy3t/f+z/++X/l//z/bNrf/P3f/xuKXJ/gcAAIAOcvd/Im6x/wEAAGAYufs/GbfY/wAAADCM3P2filua7H/9v/5f/6//1/+v//r6/2Xy/v80/f8G+v+dvp+/9M+v/9f/c9Dc+v/c/Z+OW5rsfwAAAOggd/9n4hb7HwAAAIaRu/+zcYv9DwAAAMPY2/0ZlzXc//p//b/+X/+v/1//9fX/y6T/n6b/3+BQ+v8Td6of6/+3atefX/+v/+egufX/n9v7VcdWn49bmux/AAAA6CB3/xfiFvsfAAAAhpG7/4txi/0PAAAAw8jd/6W4pcn+1//r/5fR/588efKE/l//v//3c7r/v1n/T9H/T9P/b+D9f/2//l//z1bNrf/P3f/luKXJ/gcAAIAOcvd/JW6x/wEAAGAYufu/GrfY/wAAADCM3P1fi1ua7H/9/wz6/2P6f+//6/9X3v/X/2+J/n+a/n+DEfv/Y+f/2991P3+pdv359f/6fw6aW/+fu//rcUuT/Q8AAAAd5O7/Rtxi/wMAAMAwcvd/M26x/wEAAGAYufu/Fbc02f/6/8Pr/2/7e9fl/f/jq/WfX/+v/9f/6/8vN/3/NP3/BiP2/xdg1/380j+//l//z0Fz6/9z9387btk//K66sN8lAAAAMCe5+78TtzT5838AAADoIHf/d+MW+x8AAACGkbv/e3FLk/2v/5/B+/8D9v/e/1///aH/n3X/f4X+fwz6/2n6/w30//p//f+W+v/8btb/dze3/j93//fjlib7HwAAADrI3f+DuMX+BwAAgGHk7v9h3GL/AwAAwDBy998ct5yx/9e13aPQ/+v/9f/6f/3/+q+v/18m/f+08+3/j64urf9P+n/9v/6/a//v/X9OmVv/n7v/R3GLP/8HAACAxbnqHD+fu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3HLLFbv6SIdK/6//1//r//X/67++/n+Z9P/TvP+/gf5/G/381fr/Mfr/1Ur/z6WbW/+fu/9ncYs//wcAAIBh5O7/edxi/wMAAMAwcvf/Im6x/wEAAGAYuft/Gbc02f/6f/3/Jfb/e2mm/v8U/f8p+v/19P+HQ/8/Tf+/gf7f+//6f+//s1Vz6/9z9/8qbmmy/wEAAKCD3P2/jlvsfwAAABhG7v7fxC32PwAAAAwjd/9v45Ym+39n/X/8rdb/L77/9/6//l//r/+fFf3/NP3/Bvp//b/+X//PVs2t/8/d/7u4pcn+BwAAgA5y9/8+brH/AQAAYBi5+/8Qt9j/AAAAMIzc/X+MW5rsf+//6//1//p//f/6r6//Xyb9/zT9/3r1D2rm/f9x/f+sP7/+X//PQXPr/3P3/yluabL/AQAAoIPc/X+OW+x/AAAAGEbu/lviFvsfAAAAhpG7/y9xS5P9r//X/+v/9f/6//VfX/+/TPr/abvs/+/6P5u/rPf/d/7+f34E/b/+X//PVsyt/8/d/9e4pcn+BwAAgA5y9/8tbrH/AQAAYBi5+/8et9j/AAAAMIzc/f+IW5rs/w39/9H6C/X/k/T/+z+//n/998e2+v9r9P979P/6/3X0/9O8/7+B/t/7//p//T9bNbf+P3f/P+OWJvsfAAAAOsjdf2vcYv8DAADAMHL3/ytusf8BAABgGLn7/x23NNn/3v9fUv9/tf5f/+/9f/2//n8D/f80/f8G+n/9v/5f/89Wza3/z93/nwAAAP//i0xSuQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40100, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 268.125358ms ago: executing program 7 (id=10810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x36}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) 249.245055ms ago: executing program 1 (id=10811): r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x9, 0x0, 0xfcff, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 145.367537ms ago: executing program 7 (id=10812): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 124.142133ms ago: executing program 1 (id=10813): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@gettaction={0xc0, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x98, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}]}, 0xc0}}, 0x0) 117.939322ms ago: executing program 7 (id=10814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x65}]}, 0x1c}}, 0x8080) 8.160272ms ago: executing program 7 (id=10815): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 1 (id=10816): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): rying to free block not in datazone [ 416.939325][T24207] Trying to free block not in datazone [ 416.961939][T24207] Trying to free block not in datazone [ 416.977700][T24207] Trying to free block not in datazone [ 416.989291][T24207] Trying to free block not in datazone [ 416.996160][T24207] Trying to free block not in datazone [ 417.010275][T24207] Trying to free block not in datazone [ 417.015745][T24207] Trying to free block not in datazone [ 417.050354][ T6506] usb 8-1: Using ep0 maxpacket: 16 [ 417.054035][T24207] Trying to free block not in datazone [ 417.080237][T24207] Trying to free block not in datazone [ 417.085727][T24207] Trying to free block not in datazone [ 417.119529][T24207] Trying to free block not in datazone [ 417.136404][T24207] Trying to free block not in datazone [ 417.173743][T24207] Trying to free block not in datazone [ 417.179247][T24207] Trying to free block not in datazone [ 417.220498][ T6506] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 417.227635][T24039] usb 2-1: USB disconnect, device number 45 [ 417.234671][T24207] Trying to free block not in datazone [ 417.240126][T24207] Trying to free block not in datazone [ 417.240724][ T6506] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.246676][T24207] Trying to free block not in datazone [ 417.274687][T24207] Trying to free block not in datazone [ 417.301288][T24207] Trying to free block not in datazone [ 417.311792][ T6506] usb 8-1: config 0 has no interface number 0 [ 417.340278][T24207] Trying to free block not in datazone [ 417.350403][T24207] Trying to free block not in datazone [ 417.360827][T24207] Trying to free block not in datazone [ 417.370508][T24207] Trying to free block not in datazone [ 417.375975][T24207] Trying to free block not in datazone [ 417.414554][T24207] Trying to free block not in datazone [ 417.425599][T24207] Trying to free block not in datazone [ 417.456137][T24207] Trying to free block not in datazone [ 417.467206][T24207] Trying to free block not in datazone [ 417.472810][T24207] Trying to free block not in datazone [ 417.532657][ T6506] usb 8-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 417.549808][T24207] Trying to free block not in datazone [ 417.552285][ T6506] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.573068][T24207] Trying to free block not in datazone [ 417.578546][T24207] Trying to free block not in datazone [ 417.588861][T24207] Trying to free block not in datazone [ 417.592159][ T6506] usb 8-1: Product: syz [ 417.595427][T24234] netlink: 'syz.5.9055': attribute type 1 has an invalid length. [ 417.600211][ T6506] usb 8-1: Manufacturer: syz [ 417.611355][T24207] Trying to free block not in datazone [ 417.616891][T24207] Trying to free block not in datazone [ 417.625677][T24207] Trying to free block not in datazone [ 417.630223][ T6506] usb 8-1: SerialNumber: syz [ 417.633270][T24207] Trying to free block not in datazone [ 417.644627][T24234] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.9055'. [ 417.647348][ T6506] usb 8-1: config 0 descriptor?? [ 417.665015][T24207] Trying to free block not in datazone [ 417.671735][T24207] Trying to free block not in datazone [ 417.677189][T24207] Trying to free block not in datazone [ 417.687050][T24234] netlink: 'syz.5.9055': attribute type 1 has an invalid length. [ 417.696039][T24207] Trying to free block not in datazone [ 417.706532][T24207] Trying to free block not in datazone [ 417.720032][T24207] Trying to free block not in datazone [ 417.732244][ T6506] usb 8-1: Found UVC 0.00 device syz (046c:14e8) [ 417.738618][ T6506] usb 8-1: No valid video chain found. [ 417.744286][T24207] Trying to free block not in datazone [ 417.749750][T24207] Trying to free block not in datazone [ 417.815467][T24207] Trying to free block not in datazone [ 417.847094][T24207] Trying to free block not in datazone [ 417.858284][T24207] Trying to free block not in datazone [ 417.878321][T24207] Trying to free block not in datazone [ 417.900459][T24207] Trying to free block not in datazone [ 417.905931][T24207] Trying to free block not in datazone [ 417.918844][T24240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9058'. [ 417.955950][T24207] Trying to free block not in datazone [ 417.979691][T24039] usb 8-1: USB disconnect, device number 30 [ 417.986093][T24207] Trying to free block not in datazone [ 418.006148][T24207] Trying to free block not in datazone [ 418.020472][T24207] Trying to free block not in datazone [ 418.025946][T24207] Trying to free block not in datazone [ 418.080123][T24207] Trying to free block not in datazone [ 418.087110][T24207] Trying to free block not in datazone [ 418.098314][T24207] Trying to free block not in datazone [ 418.104486][T24207] Trying to free block not in datazone [ 418.110058][T24207] Trying to free block not in datazone [ 418.124411][T24207] Trying to free block not in datazone [ 418.129881][T24207] Trying to free block not in datazone [ 418.136561][T24207] Trying to free block not in datazone [ 418.155503][T24248] kernel profiling enabled (shift: 18) [ 418.165884][T24207] Trying to free block not in datazone [ 418.174762][T24207] Trying to free block not in datazone [ 418.186571][T24207] Trying to free block not in datazone [ 418.208370][T24207] Trying to free block not in datazone [ 418.223132][T24207] Trying to free block not in datazone [ 418.253618][T24207] Trying to free block not in datazone [ 418.259091][T24207] Trying to free block not in datazone [ 418.279040][T24207] Trying to free block not in datazone [ 418.285871][T24207] Trying to free block not in datazone [ 418.292216][T24207] Trying to free block not in datazone [ 418.297747][T24207] Trying to free block not in datazone [ 418.303809][T24207] Trying to free block not in datazone [ 418.334228][T24207] Trying to free block not in datazone [ 418.341950][T24207] Trying to free block not in datazone [ 418.357648][T24207] Trying to free block not in datazone [ 418.381579][T24254] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 418.399856][T24207] Trying to free block not in datazone [ 418.409988][T24207] Trying to free block not in datazone [ 418.437853][T24207] Trying to free block not in datazone [ 418.450972][T24207] Trying to free block not in datazone [ 418.456921][T24207] Trying to free block not in datazone [ 418.501642][T24258] netlink: 'syz.5.9067': attribute type 9 has an invalid length. [ 418.509478][T24207] Trying to free block not in datazone [ 418.550182][T24258] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.9067'. [ 418.550830][T24207] Trying to free block not in datazone [ 418.609134][T24207] Trying to free block not in datazone [ 418.641520][T24207] Trying to free block not in datazone [ 418.659727][T24207] Trying to free block not in datazone [ 418.673540][T24207] Trying to free block not in datazone [ 418.714222][T24207] Trying to free block not in datazone [ 418.719704][T24207] Trying to free block not in datazone [ 418.745603][T24207] Trying to free block not in datazone [ 418.790325][T24207] Trying to free block not in datazone [ 418.795897][T24207] Trying to free block not in datazone [ 418.816904][T24207] Trying to free block not in datazone [ 418.836735][T24207] Trying to free block not in datazone [ 418.861810][T24207] Trying to free block not in datazone [ 418.872924][T24207] Trying to free block not in datazone [ 418.883915][T24207] Trying to free block not in datazone [ 418.897537][T24207] Trying to free block not in datazone [ 418.946335][T24207] Trying to free block not in datazone [ 418.960727][T24207] Trying to free block not in datazone [ 418.980627][T24207] Trying to free block not in datazone [ 419.000901][T24207] Trying to free block not in datazone [ 419.006368][T24207] Trying to free block not in datazone [ 419.049225][T24207] Trying to free block not in datazone [ 419.072661][T24293] loop5: detected capacity change from 0 to 256 [ 419.079337][T24207] Trying to free block not in datazone [ 419.097140][T24207] Trying to free block not in datazone [ 419.108458][T24207] Trying to free block not in datazone [ 419.115958][T24207] Trying to free block not in datazone [ 419.122359][T24207] Trying to free block not in datazone [ 419.130744][T24207] Trying to free block not in datazone [ 419.141424][T24207] Trying to free block not in datazone [ 419.160886][T24207] Trying to free block not in datazone [ 419.184931][T24293] FAT-fs (loop5): Directory bread(block 64) failed [ 419.200291][T24293] FAT-fs (loop5): Directory bread(block 65) failed [ 419.206908][T24293] FAT-fs (loop5): Directory bread(block 66) failed [ 419.218476][T24207] Trying to free block not in datazone [ 419.228339][T24207] Trying to free block not in datazone [ 419.246006][T24207] Trying to free block not in datazone [ 419.256118][T24293] FAT-fs (loop5): Directory bread(block 67) failed [ 419.270887][T24207] Trying to free block not in datazone [ 419.285641][T24293] FAT-fs (loop5): Directory bread(block 68) failed [ 419.300789][T24207] Trying to free block not in datazone [ 419.306440][T24207] Trying to free block not in datazone [ 419.323123][T24293] FAT-fs (loop5): Directory bread(block 69) failed [ 419.331970][T24207] Trying to free block not in datazone [ 419.337432][T24207] Trying to free block not in datazone [ 419.350317][T24293] FAT-fs (loop5): Directory bread(block 70) failed [ 419.356864][T24293] FAT-fs (loop5): Directory bread(block 71) failed [ 419.367296][T24207] Trying to free block not in datazone [ 419.373387][T24207] Trying to free block not in datazone [ 419.379288][T24293] FAT-fs (loop5): Directory bread(block 72) failed [ 419.386120][T24207] Trying to free block not in datazone [ 419.391768][T24207] Trying to free block not in datazone [ 419.405432][T24293] FAT-fs (loop5): Directory bread(block 73) failed [ 419.410257][T24207] Trying to free block not in datazone [ 419.430106][T24207] Trying to free block not in datazone [ 419.474755][T24207] Trying to free block not in datazone [ 419.491604][T24207] Trying to free block not in datazone [ 419.497513][T24207] Trying to free block not in datazone [ 419.551895][T24207] Trying to free block not in datazone [ 419.589331][T24315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.599501][T24207] Trying to free block not in datazone [ 419.624434][T24207] Trying to free block not in datazone [ 419.630003][T24207] Trying to free block not in datazone [ 419.636685][T24207] Trying to free block not in datazone [ 419.646708][T24207] Trying to free block not in datazone [ 419.653439][T24207] Trying to free block not in datazone [ 419.658904][T24207] Trying to free block not in datazone [ 419.674330][T24207] Trying to free block not in datazone [ 419.679800][T24207] Trying to free block not in datazone [ 419.686490][T24207] Trying to free block not in datazone [ 419.696128][T24207] Trying to free block not in datazone [ 419.701738][T24207] Trying to free block not in datazone [ 419.707192][T24207] Trying to free block not in datazone [ 419.727509][T24207] Trying to free block not in datazone [ 419.740285][T24207] Trying to free block not in datazone [ 419.745763][T24207] Trying to free block not in datazone [ 419.795989][T24207] Trying to free block not in datazone [ 419.816324][T24207] Trying to free block not in datazone [ 419.844792][T24207] Trying to free block not in datazone [ 419.860711][T24207] Trying to free block not in datazone [ 419.890051][T24207] Trying to free block not in datazone [ 419.910403][T24207] Trying to free block not in datazone [ 419.933210][T24207] Trying to free block not in datazone [ 419.954640][T24207] Trying to free block not in datazone [ 419.970314][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.989028][T24207] Trying to free block not in datazone [ 420.008345][T24207] Trying to free block not in datazone [ 420.028403][T24207] Trying to free block not in datazone [ 420.049890][T24207] Trying to free block not in datazone [ 420.064613][T24350] loop5: detected capacity change from 0 to 512 [ 420.082410][T24207] Trying to free block not in datazone [ 420.087959][T24207] Trying to free block not in datazone [ 420.110507][T24207] Trying to free block not in datazone [ 420.130304][T24207] Trying to free block not in datazone [ 420.135917][T24207] Trying to free block not in datazone [ 420.151726][T24207] Trying to free block not in datazone [ 420.168825][T24207] Trying to free block not in datazone [ 420.176372][T24350] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 420.223520][T24350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 420.231812][T24207] Trying to free block not in datazone [ 420.270323][T24207] Trying to free block not in datazone [ 420.286087][T24350] System zones: 0-1, 15-15, 18-18, 34-34 [ 420.294552][T24207] Trying to free block not in datazone [ 420.301415][T24350] EXT4-fs (loop5): orphan cleanup on readonly fs [ 420.313616][T24363] netlink: 'syz.6.9118': attribute type 32 has an invalid length. [ 420.322253][T24207] Trying to free block not in datazone [ 420.328212][T24350] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 420.338026][T24207] Trying to free block not in datazone [ 420.348009][T24207] Trying to free block not in datazone [ 420.354322][T24350] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 420.370337][T24207] Trying to free block not in datazone [ 420.380489][T24207] Trying to free block not in datazone [ 420.407203][T24350] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 420.414043][T24207] Trying to free block not in datazone [ 420.420031][T24350] EXT4-fs (loop5): 1 truncate cleaned up [ 420.428655][T24207] Trying to free block not in datazone [ 420.436478][T24207] Trying to free block not in datazone [ 420.442328][T24207] Trying to free block not in datazone [ 420.443769][T24350] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 420.459725][T24207] Trying to free block not in datazone [ 420.459736][T24207] Trying to free block not in datazone [ 420.459743][T24207] Trying to free block not in datazone [ 420.500354][ T6511] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 420.505186][T24207] Trying to free block not in datazone [ 420.519169][T24350] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 420.560349][T24207] Trying to free block not in datazone [ 420.560362][T24207] Trying to free block not in datazone [ 420.560369][T24207] Trying to free block not in datazone [ 420.560376][T24207] Trying to free block not in datazone [ 420.560383][T24207] Trying to free block not in datazone [ 420.560390][T24207] Trying to free block not in datazone [ 420.560396][T24207] Trying to free block not in datazone [ 420.560403][T24207] Trying to free block not in datazone [ 420.560410][T24207] Trying to free block not in datazone [ 420.560416][T24207] Trying to free block not in datazone [ 420.560423][T24207] Trying to free block not in datazone [ 420.560430][T24207] Trying to free block not in datazone [ 420.560436][T24207] Trying to free block not in datazone [ 420.560443][T24207] Trying to free block not in datazone [ 420.560449][T24207] Trying to free block not in datazone [ 420.560456][T24207] Trying to free block not in datazone [ 420.560463][T24207] Trying to free block not in datazone [ 420.560470][T24207] Trying to free block not in datazone [ 420.560477][T24207] Trying to free block not in datazone [ 420.560484][T24207] Trying to free block not in datazone [ 420.560490][T24207] Trying to free block not in datazone [ 420.560498][T24207] Trying to free block not in datazone [ 420.560505][T24207] Trying to free block not in datazone [ 420.560513][T24207] Trying to free block not in datazone [ 420.560521][T24207] Trying to free block not in datazone [ 420.560528][T24207] Trying to free block not in datazone [ 420.560536][T24207] Trying to free block not in datazone [ 420.560544][T24207] Trying to free block not in datazone [ 420.560551][T24207] Trying to free block not in datazone [ 420.560565][T24207] Trying to free block not in datazone [ 420.560573][T24207] Trying to free block not in datazone [ 420.560580][T24207] Trying to free block not in datazone [ 420.560588][T24207] Trying to free block not in datazone [ 420.560596][T24207] Trying to free block not in datazone [ 420.560603][T24207] Trying to free block not in datazone [ 420.560611][T24207] Trying to free block not in datazone [ 420.560618][T24207] Trying to free block not in datazone [ 420.560626][T24207] Trying to free block not in datazone [ 420.560634][T24207] Trying to free block not in datazone [ 420.560641][T24207] Trying to free block not in datazone [ 420.560649][T24207] Trying to free block not in datazone [ 420.560657][T24207] Trying to free block not in datazone [ 420.560664][T24207] Trying to free block not in datazone [ 420.560672][T24207] Trying to free block not in datazone [ 420.560680][T24207] Trying to free block not in datazone [ 420.560688][T24207] Trying to free block not in datazone [ 420.560696][T24207] Trying to free block not in datazone [ 420.564911][T24207] Trying to free block not in datazone [ 420.635438][T24369] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.919326][T24354] loop7: detected capacity change from 0 to 40427 [ 420.970209][T24354] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 421.001618][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.002334][T24354] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 421.018463][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.037209][T24354] F2FS-fs (loop7): invalid crc value [ 421.044303][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.057648][T24383] loop5: detected capacity change from 0 to 2048 [ 421.063322][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.080460][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.086056][T24354] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 421.090338][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.124564][T24383] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 421.136210][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.143978][ T6511] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 421.147278][T24383] NILFS (loop5): mounting unchecked fs [ 421.160953][ T6511] usb 2-1: config 0 has no interface number 0 [ 421.171284][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.175620][T24383] NILFS (loop5): recovery complete [ 421.188702][ T6511] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 421.200958][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.204886][T24354] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 421.208699][ T6511] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 421.225448][T24391] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.230252][T24354] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 421.237284][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.253835][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.261416][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.269343][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.271238][T24394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9130'. [ 421.276827][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.293612][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.301291][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.308835][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.317745][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.329594][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.349915][T24354] fscrypt (loop7, inode 3): Error -61 getting encryption context [ 421.356457][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.373138][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.387305][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.396983][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.408677][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.420089][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.430302][ T6511] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 421.439354][ T6511] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 421.452881][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.462496][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.469893][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.480565][ T6511] usb 2-1: Product: syz [ 421.485004][ T6511] usb 2-1: Manufacturer: syz [ 421.489957][ T6511] usb 2-1: SerialNumber: syz [ 421.501172][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.508588][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.516812][T24400] loop5: detected capacity change from 0 to 4096 [ 421.521036][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.531565][ T6511] usb 2-1: config 0 descriptor?? [ 421.541883][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.549358][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.560327][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.567730][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.577528][ T6511] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 421.589323][ T6511] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 421.604955][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.613611][ T6511] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 421.623750][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.631243][T24400] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 421.633369][T24410] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.644942][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.655744][T24400] NILFS (loop5): mounting fs with errors [ 421.659537][ T6511] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 421.678873][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.687335][ T6511] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 421.706151][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.718449][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.726181][ T6511] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 421.741033][ T6511] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 421.749387][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.762998][ T6511] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 421.773434][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.783884][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.792628][ T6511] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 421.800492][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.808403][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.816104][ T6511] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 421.826562][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.834137][ T6511] usb 2-1: USB disconnect, device number 46 [ 421.842072][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.849464][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.857261][ T6511] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 421.867810][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.875650][ T6511] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 421.886817][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.894844][ T6511] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 421.904315][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.913506][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.921447][ T6511] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 421.931387][ T6511] keyspan 2-1:0.107: device disconnected [ 421.937643][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.945881][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.953344][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.960793][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.968168][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.975641][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.983073][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.990503][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.997871][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.005432][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.012852][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.020277][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.027655][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.035051][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.042458][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.049837][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.057411][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.064838][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.072263][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.079637][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.087338][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.094759][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.102358][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.109740][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.117164][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.124574][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.132012][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.139388][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.146816][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.154613][ T6506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.177204][ T6506] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 422.642518][T24450] netlink: 'syz.1.9157': attribute type 19 has an invalid length. [ 422.676068][T24450] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9157'. [ 422.996386][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9168'. [ 423.031773][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9168'. [ 423.058989][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9168'. [ 423.107854][T24475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.176096][T24483] netlink: 'syz.7.9171': attribute type 21 has an invalid length. [ 423.190336][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9171'. [ 423.371364][T24488] fido_id[24488]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 423.600488][T24517] netlink: 'syz.6.9187': attribute type 6 has an invalid length. [ 423.607006][T24513] loop5: detected capacity change from 0 to 1024 [ 423.608890][T24517] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9187'. [ 423.710355][ T6506] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 423.841771][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9195'. [ 423.970227][ T6506] usb 8-1: Using ep0 maxpacket: 16 [ 424.280546][ T6506] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 424.298905][ T6506] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.308267][ T6506] usb 8-1: Product: syz [ 424.318274][ T6506] usb 8-1: Manufacturer: syz [ 424.323172][ T6506] usb 8-1: SerialNumber: syz [ 424.355318][ T6506] usb 8-1: config 0 descriptor?? [ 424.436191][T24527] loop0: detected capacity change from 0 to 32768 [ 424.443936][ T6506] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 424.523570][T24527] JBD2: Ignoring recovery information on journal [ 424.561118][T24583] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9215'. [ 424.575533][T24583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9215'. [ 424.589148][T24583] netlink: 'syz.5.9215': attribute type 8 has an invalid length. [ 424.685850][ T4228] usb 8-1: USB disconnect, device number 31 [ 424.719920][T24527] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 424.778940][T24527] (syz.0.9193,24527,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 424.814407][T24527] (syz.0.9193,24527,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 424.828548][T24527] (syz.0.9193,24527,1):ocfs2_mknod:502 ERROR: status = -117 [ 424.836203][T24527] (syz.0.9193,24527,1):ocfs2_mkdir:659 ERROR: status = -117 [ 424.897836][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 425.513580][T24637] loop0: detected capacity change from 0 to 1764 [ 425.596134][T24637] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 425.631339][T24647] tc_dump_action: action bad kind [ 426.195799][T24682] overlayfs: missing 'lowerdir' [ 426.227345][T24683] Restarting kernel threads ... done. [ 426.320553][T24689] Cannot find del_set index 49151 as target [ 426.360552][T24692] __nla_validate_parse: 3 callbacks suppressed [ 426.365792][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9269'. [ 426.548184][T24702] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9272'. [ 426.612490][T24708] netlink: 'syz.7.9274': attribute type 3 has an invalid length. [ 426.729810][T24714] xt_bpf: check failed: parse error [ 426.747387][T24716] libceph: resolve '4.' (ret=-3): failed [ 426.764635][T24711] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 426.790404][T24039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 426.930977][T24726] netlink: 'syz.1.9284': attribute type 10 has an invalid length. [ 426.966430][T24726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9284'. [ 427.411561][T24039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 427.450311][ T4228] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 427.552454][T24765] netlink: 'syz.0.9303': attribute type 12 has an invalid length. [ 427.792517][T24781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9310'. [ 427.805116][T24781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9310'. [ 427.865845][ T4228] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 427.901106][ T4228] usb 7-1: config 2 interface 0 has no altsetting 0 [ 428.115819][ T4228] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 428.130539][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.157870][ T4228] usb 7-1: Product: syz [ 428.168230][ T4228] usb 7-1: Manufacturer: syz [ 428.173457][ T4228] usb 7-1: SerialNumber: syz [ 428.202142][T24807] netlink: 'syz.1.9323': attribute type 10 has an invalid length. [ 428.219731][T24807] team0: Device ipvlan1 failed to register rx_handler [ 428.225218][ T6511] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 428.236156][T24809] loop7: detected capacity change from 0 to 512 [ 428.241288][ T4228] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 428.270238][ T4228] usb 7-1: selecting invalid altsetting 0 [ 428.283005][ T4228] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 428.474068][T24039] usb 7-1: USB disconnect, device number 28 [ 428.486728][T24817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9328'. [ 428.730314][ T6511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 428.739994][ T6511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 428.769360][T24834] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9337'. [ 428.809424][T24834] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9337'. [ 428.918512][T24841] (syz.7.9340,24841,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 428.923469][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9341'. [ 428.937434][ T6511] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 428.946782][ T6511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.948623][T24841] (syz.7.9340,24841,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 428.960571][ T6511] usb 1-1: Product: syz [ 428.972680][ T6511] usb 1-1: Manufacturer: syz [ 428.981777][ T6511] usb 1-1: SerialNumber: syz [ 428.997748][ T6511] usb 1-1: config 0 descriptor?? [ 429.062950][ T6511] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 429.401453][T24869] kAFS: unable to lookup cell '/,' [ 429.527546][ T6511] usb 1-1: USB disconnect, device number 47 [ 429.636564][T24888] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9364'. [ 430.212440][T24930] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 430.353061][T24940] overlayfs: missing 'lowerdir' [ 430.496983][T24924] infiniband syz2: set down [ 430.500063][T24946] IPv6: sit3: Disabled Multicast RS [ 430.515583][T24924] infiniband syz2: added bond_slave_1 [ 430.677733][T24924] RDS/IB: syz2: added [ 430.718065][T24924] smc: adding ib device syz2 with port count 1 [ 430.775449][T24924] smc: ib device syz2 port 1 has pnetid [ 430.851585][T24918] loop5: detected capacity change from 0 to 32768 [ 430.944348][T24918] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 430.960284][T24918] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 431.089250][T24918] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 431.105847][T24979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.190225][ T6511] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.299027][T24918] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 431.345992][T24918] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 431.371896][T24918] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 431.371896][T24918] inode = 12 2341 [ 431.371896][T24918] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 431.396917][T24918] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 431.406137][T24918] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 431.430541][T24918] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 431.439937][T24918] gfs2: fsid=syz:syz.s: File system withdrawn [ 431.476987][T24918] CPU: 0 PID: 24918 Comm: syz.5.9378 Not tainted syzkaller #0 [ 431.484483][T24918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.494553][T24918] Call Trace: [ 431.497832][T24918] [ 431.500762][T24918] dump_stack_lvl+0x188/0x250 [ 431.505442][T24918] ? kobject_uevent_env+0x371/0x890 [ 431.510650][T24918] ? show_regs_print_info+0x20/0x20 [ 431.515854][T24918] ? load_image+0x400/0x400 [ 431.520359][T24918] ? kobject_uevent_env+0x371/0x890 [ 431.525573][T24918] gfs2_withdraw+0x1149/0x1490 [ 431.530357][T24918] ? gfs2_lm+0x240/0x240 [ 431.534605][T24918] ? load_image+0x400/0x400 [ 431.539112][T24918] ? gfs2_consist_inode_i+0xc0/0xe0 [ 431.544316][T24918] gfs2_dirent_scan+0x525/0x650 [ 431.549170][T24918] ? gfs2_dirent_search+0x7f0/0x7f0 [ 431.554371][T24918] gfs2_dirent_search+0x2e9/0x7f0 [ 431.559399][T24918] ? gfs2_dirent_search+0x7f0/0x7f0 [ 431.564597][T24918] ? gfs2_permission+0x40a/0x4e0 [ 431.569539][T24918] ? gfs2_dir_search+0x220/0x220 [ 431.574477][T24918] ? gfs2_lookupi+0x600/0x600 [ 431.579160][T24918] ? gfs2_glock_nq+0xcb0/0x1550 [ 431.584019][T24918] gfs2_dir_search+0x49/0x220 [ 431.588699][T24918] gfs2_lookupi+0x46c/0x600 [ 431.593221][T24918] ? gfs2_lookup_simple+0x100/0x100 [ 431.598426][T24918] ? gfs2_lookupi+0x40e/0x600 [ 431.602764][T24991] __nla_validate_parse: 3 callbacks suppressed [ 431.602778][T24991] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9413'. [ 431.603102][T24918] ? __d_lookup_rcu+0x68a/0x760 [ 431.622983][T24918] ? __lock_acquire+0x7d10/0x7d10 [ 431.628022][T24918] __gfs2_lookup+0xa9/0x290 [ 431.632533][T24918] ? gfs2_atomic_open+0x210/0x210 [ 431.637561][T24918] ? d_alloc_parallel+0x1222/0x1330 [ 431.642773][T24918] gfs2_atomic_open+0x8e/0x210 [ 431.647539][T24918] ? gfs2_rename2+0x1ef0/0x1ef0 [ 431.652390][T24918] path_openat+0xe8c/0x2fa0 [ 431.656909][T24918] ? slab_post_alloc_hook+0x4c/0x380 [ 431.662201][T24918] ? do_filp_open+0x410/0x410 [ 431.666899][T24918] do_filp_open+0x1e2/0x410 [ 431.671412][T24918] ? vfs_tmpfile+0x300/0x300 [ 431.676023][T24918] ? _raw_spin_unlock+0x24/0x40 [ 431.680874][T24918] ? alloc_fd+0x598/0x630 [ 431.685209][T24918] do_sys_openat2+0x150/0x4b0 [ 431.689886][T24918] ? __lock_acquire+0x7d10/0x7d10 [ 431.694915][T24918] ? do_sys_open+0xe0/0xe0 [ 431.699334][T24918] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 431.705319][T24918] ? lock_chain_count+0x20/0x20 [ 431.710169][T24918] ? vtime_user_exit+0x2c8/0x3e0 [ 431.715106][T24918] __x64_sys_openat+0x135/0x160 [ 431.719961][T24918] do_syscall_64+0x4c/0xa0 [ 431.724376][T24918] ? clear_bhb_loop+0x30/0x80 [ 431.729054][T24918] ? clear_bhb_loop+0x30/0x80 [ 431.733741][T24918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.739643][T24918] RIP: 0033:0x7fdac1b4f799 [ 431.744056][T24918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.763667][T24918] RSP: 002b:00007fdabfda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.772092][T24918] RAX: ffffffffffffffda RBX: 00007fdac1dc8fa0 RCX: 00007fdac1b4f799 [ 431.780069][T24918] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 431.788042][T24918] RBP: 00007fdac1be5bd9 R08: 0000000000000000 R09: 0000000000000000 [ 431.796015][T24918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.803984][T24918] R13: 00007fdac1dc9038 R14: 00007fdac1dc8fa0 R15: 00007ffc8fb62cf8 [ 431.811972][T24918] [ 431.950409][ T6511] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 431.966226][ T6511] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.014494][T24994] loop0: detected capacity change from 0 to 4096 [ 432.057689][T24994] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 432.062654][T25005] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 432.150490][T24994] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 432.172710][ T6511] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 432.192052][ T6511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.210793][T24994] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 432.217984][ T6511] usb 2-1: Product: syz [ 432.229167][T24994] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 432.259131][ T6511] usb 2-1: Manufacturer: syz [ 432.270645][ T6511] usb 2-1: SerialNumber: syz [ 432.293487][T25010] netlink: 'syz.7.9422': attribute type 10 has an invalid length. [ 432.311446][T24994] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 432.314791][T25010] team0: Device ipvlan1 failed to register rx_handler [ 432.335176][ T6511] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input51 [ 432.360261][T24994] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 432.450666][T24994] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 432.459424][T24994] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 432.492084][T24994] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 432.501760][T25019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.503240][T24994] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 432.542246][ T3545] bcm5974 2-1:1.0: could not read from device [ 432.546070][T24994] ntfs: volume version 3.1. [ 432.556236][ T6511] usb 2-1: USB disconnect, device number 47 [ 432.580300][ T3545] bcm5974 2-1:1.0: could not read from device [ 432.652517][T25021] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.882200][T25034] device bond3 entered promiscuous mode [ 432.888089][T25034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.942209][T25039] netlink: 'syz.0.9435': attribute type 10 has an invalid length. [ 432.950610][T25039] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 433.029898][T25044] loop7: detected capacity change from 0 to 2048 [ 433.036476][ T6511] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 433.059112][T25046] ipt_REJECT: TCP_RESET invalid for non-tcp [ 433.110417][T25044] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=26504, location=26504 [ 433.139738][T25044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.268552][T25060] loop0: detected capacity change from 0 to 512 [ 433.427821][T25060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 433.448945][T25060] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.9446: corrupted xattr block 32 [ 433.461987][ T6511] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 433.473636][ T6511] usb 7-1: config 8 has no interface number 0 [ 433.479745][ T6511] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 433.490998][ T6511] usb 7-1: config 8 interface 177 has no altsetting 0 [ 433.497788][ T6511] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 433.506991][ T6511] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.550475][T25026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 433.608618][T25086] device vlan0 entered promiscuous mode [ 433.634453][T25090] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 433.735189][T25095] netlink: 'syz.5.9461': attribute type 1 has an invalid length. [ 433.810342][ T6511] usb 7-1: string descriptor 0 read error: -71 [ 433.833577][T25103] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 433.842762][ C0] ir_toy 7-1:8.177: out urb status: -71 [ 433.950329][T25111] comedi comedi1: pcmda12: I/O port conflict (0x1,16) [ 434.112470][T25123] netlink: 'syz.5.9475': attribute type 4 has an invalid length. [ 434.124603][T25123] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9475'. [ 434.152068][T25123] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.170087][T25125] net veth1_virt_wifi : renamed from virt_wifi0 [ 434.235921][T25129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9478'. [ 434.340364][ T6511] ir_toy 7-1:8.177: could not write reset command: -110 [ 434.370235][ C0] ir_toy 7-1:8.177: failed to resubmit urb: -1 [ 434.376701][ T6511] ir_toy: probe of 7-1:8.177 failed with error -110 [ 434.404682][ T6511] usb 7-1: USB disconnect, device number 29 [ 434.479727][T25115] loop0: detected capacity change from 0 to 32768 [ 434.597702][T25115] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 434.640261][T25115] BTRFS info (device loop0): using free space tree [ 434.664186][T25115] BTRFS info (device loop0): has skinny extents [ 434.677172][T25155] loop5: detected capacity change from 0 to 128 [ 434.768626][T25173] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9495'. [ 434.833587][T25155] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.898811][T25155] EXT4-fs warning (device loop5): verify_group_input:165: Last group not full [ 434.986637][T25115] BTRFS info (device loop0): enabling ssd optimizations [ 434.991052][T25192] loop7: detected capacity change from 0 to 4096 [ 435.045338][T25192] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 435.177257][T25201] netlink: 'syz.5.9502': attribute type 5 has an invalid length. [ 435.219657][T25192] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 435.250271][T24039] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 435.336552][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.550371][T24039] usb 2-1: Using ep0 maxpacket: 16 [ 435.670313][T24039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.689951][T25205] loop5: detected capacity change from 0 to 32768 [ 435.696563][T24039] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 435.716167][T25211] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 435.725548][T24039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.736800][T25205] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.9507 (25205) [ 435.756967][T24039] usb 2-1: config 0 descriptor?? [ 435.771636][T25205] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 435.795983][T25205] BTRFS info (device loop5): turning off barriers [ 435.805003][T24039] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 435.814612][T25205] BTRFS info (device loop5): enabling ssd optimizations [ 435.822038][T25205] BTRFS info (device loop5): using spread ssd allocation scheme [ 435.829745][T25205] BTRFS info (device loop5): enabling auto defrag [ 435.836890][T25205] BTRFS info (device loop5): not using ssd optimizations [ 435.858083][T25205] BTRFS info (device loop5): not using spread ssd allocation scheme [ 435.870374][ T6511] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 435.872846][T25205] BTRFS info (device loop5): ignoring data csums [ 435.884910][T25205] BTRFS info (device loop5): force zlib compression, level 3 [ 435.897003][T25205] BTRFS info (device loop5): enabling ssd optimizations [ 435.905209][T25205] BTRFS info (device loop5): using spread ssd allocation scheme [ 435.919505][T25205] BTRFS info (device loop5): using free space tree [ 435.932050][T25205] BTRFS info (device loop5): has skinny extents [ 435.978608][T25205] BTRFS error (device loop5): ignoredatacsums must be used with ro mount option [ 436.103548][T24039] usbhid 2-1:0.0: can't add hid device: -71 [ 436.109616][T24039] usbhid: probe of 2-1:0.0 failed with error -71 [ 436.121319][ T4228] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 436.128639][ T4568] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by udevd (4568) [ 436.151430][ T6511] usb 7-1: Using ep0 maxpacket: 8 [ 436.155724][T24039] usb 2-1: USB disconnect, device number 48 [ 436.340395][ T6511] usb 7-1: unable to get BOS descriptor or descriptor too short [ 436.371637][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 436.410764][ T6500] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 436.436786][T25245] loop5: detected capacity change from 0 to 1024 [ 436.440489][ T6511] usb 7-1: config 4 interface 0 has no altsetting 0 [ 436.492519][ T310] hfsplus: b-tree write err: -5, ino 25 [ 436.498459][ T310] hfsplus: b-tree write err: -5, ino 4 [ 436.508627][ T310] hfsplus: b-tree write err: -5, ino 2 [ 436.510532][ T4228] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 436.530304][ T4228] usb 1-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 436.541208][ T4228] usb 1-1: config 0 has no interface number 0 [ 436.690323][ T6500] usb 8-1: Using ep0 maxpacket: 16 [ 436.730705][ T4228] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 436.730736][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.730758][ T4228] usb 1-1: Product: syz [ 436.730774][ T4228] usb 1-1: Manufacturer: syz [ 436.730790][ T4228] usb 1-1: SerialNumber: syz [ 436.732815][ T4228] usb 1-1: config 0 descriptor?? [ 436.753966][ T6511] usb 7-1: string descriptor 0 read error: -22 [ 436.754027][ T6511] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 436.754053][ T6511] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 436.812617][ T6511] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 436.813546][ T6500] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 436.813585][ T6500] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 436.813606][ T6500] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 436.813628][ T6500] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 436.813648][ T6500] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 436.813669][ T6500] usb 8-1: config 1 interface 0 has no altsetting 0 [ 436.813695][ T6500] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 436.813718][ T6500] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.816973][ T6511] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.817187][ T6511] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 436.817226][ T6511] usb 7-1: media controller created [ 436.837704][ T6511] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.854581][ T6500] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 436.978333][ T4228] usb 1-1: USB disconnect, device number 48 [ 437.075250][ T6500] scsi host1: usb-storage 8-1:1.0 [ 437.148060][T25267] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9525'. [ 437.196652][T25271] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 437.239328][ T4228] usb 7-1: USB disconnect, device number 30 [ 437.256177][T25275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9529'. [ 437.287026][ T6500] usb 8-1: USB disconnect, device number 32 [ 437.708617][T25311] device bond3 entered promiscuous mode [ 437.714909][T25311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.778446][T25320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9551'. [ 437.957829][T25336] netlink: ct family unspecified [ 437.973163][T25336] openvswitch: netlink: Actions may not be safe on all matching packets [ 438.088563][T25344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9561'. [ 438.127854][T25344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9561'. [ 438.449792][T25370] ipt_ECN: cannot use operation on non-tcp rule [ 438.464114][T25372] xt_TCPMSS: Only works on TCP SYN packets [ 438.850122][T25405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9592'. [ 439.060358][T24039] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 439.100213][ T4228] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 439.203829][T25427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.233348][T24045] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 439.233680][T25427] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 439.256860][T25427] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 439.365341][ T4228] usb 2-1: Using ep0 maxpacket: 8 [ 439.430421][T24039] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 439.454191][T24039] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.480285][T24045] usb 6-1: Using ep0 maxpacket: 8 [ 439.500679][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.502314][T24039] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 439.521429][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9610'. [ 439.529403][T24039] usb 8-1: config 1 has no interface number 1 [ 439.530527][ T4228] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.537025][T24039] usb 8-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.568890][T24039] usb 8-1: config 1 interface 105 has no altsetting 0 [ 439.600467][T24045] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.601351][ T4228] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.623831][T24045] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 439.657191][T24045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.697289][T24045] usb 6-1: config 0 descriptor?? [ 439.716491][T25456] netlink: 'syz.6.9612': attribute type 32 has an invalid length. [ 439.736138][T24055] Bluetooth: hci4: command 0x0405 tx timeout [ 439.742510][T24039] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 439.755220][T24039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.774159][T24039] usb 8-1: Product: syz [ 439.780490][T24039] usb 8-1: Manufacturer: syz [ 439.790322][T24039] usb 8-1: SerialNumber: syz [ 439.812712][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.819044][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.870429][ T4228] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.879664][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.896710][ T4228] usb 2-1: Product: syz [ 439.901314][ T4228] usb 2-1: Manufacturer: syz [ 439.905920][ T4228] usb 2-1: SerialNumber: syz [ 439.961158][ T4228] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 439.990598][ T4228] cdc_ncm 2-1:1.0: bind() failure [ 440.016362][ T6500] usb 6-1: USB disconnect, device number 30 [ 440.050546][T24039] aqc111: probe of 8-1:1.105 failed with error -22 [ 440.180362][ T4228] cdc_mbim 2-1:1.1: CDC Union missing and no IAD found [ 440.187262][ T4228] cdc_mbim 2-1:1.1: bind() failure [ 440.258079][T25479] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 440.303886][T25481] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.356838][T24039] usb 8-1: USB disconnect, device number 33 [ 440.496197][ T4228] usb 2-1: USB disconnect, device number 49 [ 440.662702][T25497] loop0: detected capacity change from 0 to 2048 [ 440.750286][T25505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.168692][T25531] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 441.513755][T25556] openvswitch: netlink: Missing valid actions attribute. [ 441.529249][T25557] device batadv0 entered promiscuous mode [ 441.564451][T25556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.850337][T24039] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 441.965995][T25582] [U]  [ 442.150542][T25601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9670'. [ 442.179428][T25603] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 442.215720][T24039] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.235789][T24039] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.286630][T25611] netlink: 'syz.1.9675': attribute type 1 has an invalid length. [ 442.421591][T24039] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 442.443553][T25620] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 442.457755][T24039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.458883][T25623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9681'. [ 442.481372][T24039] usb 7-1: Product: syz [ 442.485552][T24039] usb 7-1: Manufacturer: syz [ 442.521320][T24039] usb 7-1: SerialNumber: syz [ 442.526834][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.546859][T24039] usb 7-1: config 0 descriptor?? [ 442.559701][T25627] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9683'. [ 442.579727][T25627] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 442.591840][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.605986][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.639587][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.660086][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.701930][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.738758][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9682'. [ 442.843771][T24039] usb 7-1: USB disconnect, device number 31 [ 442.897621][T25645] netlink: 'syz.0.9691': attribute type 2 has an invalid length. [ 442.997423][T25649] loop5: detected capacity change from 0 to 736 [ 443.019570][T25651] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 443.267068][T25664] loop0: detected capacity change from 0 to 128 [ 443.370228][T25664] hpfs: hpfs_map_4sectors(): unaligned read [ 443.376243][T25664] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 443.449417][T25664] hpfs: hpfs_map_sector(): read error [ 443.665028][T24039] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 443.873526][T25704] QAT: Device 7 not found [ 443.910243][T24039] usb 6-1: Using ep0 maxpacket: 8 [ 443.975737][T25713] netlink: 'syz.6.9725': attribute type 21 has an invalid length. [ 444.003446][T25713] IPv6: NLM_F_CREATE should be specified when creating new route [ 444.030520][T24039] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 444.038714][T24039] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.055920][T24039] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.065151][T24039] usb 6-1: config 1 has no interface number 0 [ 444.117737][T24039] usb 6-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.310417][T24039] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.320459][T24039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.328469][T24039] usb 6-1: Product: syz [ 444.368518][T24039] usb 6-1: Manufacturer: syz [ 444.384126][T24039] usb 6-1: SerialNumber: syz [ 444.451337][T24039] cdc_wdm 6-1:1.128: skipping garbage [ 444.456757][T24039] cdc_wdm 6-1:1.128: invalid descriptor buffer length [ 444.474242][T24039] cdc_wdm: probe of 6-1:1.128 failed with error -22 [ 444.655164][T24039] usb 6-1: USB disconnect, device number 31 [ 444.673672][T25762] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 444.739304][T25766] device batadv0 entered promiscuous mode [ 445.570329][T25828] loop5: detected capacity change from 0 to 256 [ 445.672011][T25828] FAT-fs (loop5): Directory bread(block 64) failed [ 445.678596][T25828] FAT-fs (loop5): Directory bread(block 65) failed [ 445.700455][T25828] FAT-fs (loop5): Directory bread(block 66) failed [ 445.707045][T25828] FAT-fs (loop5): Directory bread(block 67) failed [ 445.738617][T25828] FAT-fs (loop5): Directory bread(block 68) failed [ 445.751171][T25835] tmpfs: Bad value for 'mpol' [ 445.755761][T25828] FAT-fs (loop5): Directory bread(block 69) failed [ 445.774559][T25838] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.792529][T25828] FAT-fs (loop5): Directory bread(block 70) failed [ 445.799090][T25828] FAT-fs (loop5): Directory bread(block 71) failed [ 445.836600][T25828] FAT-fs (loop5): Directory bread(block 72) failed [ 445.849920][T25840] ALSA: mixer_oss: invalid OSS volume 'u' [ 445.858219][T25843] overlayfs: unrecognized mount option "fsname=\(([\," or missing value [ 445.867045][T25828] FAT-fs (loop5): Directory bread(block 73) failed [ 445.996789][T25849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 446.254981][T25809] loop0: detected capacity change from 0 to 32768 [ 446.313326][T25809] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 446.331924][T25809] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 446.426444][T25809] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 446.724458][T25809] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 446.731899][T24055] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 446.750650][T25891] netlink: 'syz.1.9812': attribute type 4 has an invalid length. [ 446.963540][T25809] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 447.018830][T25809] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 447.018830][T25809] inode = 12 2341 [ 447.018830][T25809] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 447.058304][T25809] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 447.067667][T25913] loop7: detected capacity change from 0 to 256 [ 447.078420][T25809] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 447.109481][T25809] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 447.156704][T25809] gfs2: fsid=syz:syz.s: File system withdrawn [ 447.167430][T24055] usb 6-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 447.187819][T24055] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 447.199528][T25809] CPU: 1 PID: 25809 Comm: syz.0.9773 Not tainted syzkaller #0 [ 447.207014][T25809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.217079][T25809] Call Trace: [ 447.220366][T25809] [ 447.223301][T25809] dump_stack_lvl+0x188/0x250 [ 447.227998][T25809] ? kobject_uevent_env+0x371/0x890 [ 447.233205][T25809] ? show_regs_print_info+0x20/0x20 [ 447.238418][T25809] ? load_image+0x400/0x400 [ 447.242933][T25809] ? kobject_uevent_env+0x371/0x890 [ 447.248154][T25809] gfs2_withdraw+0x1149/0x1490 [ 447.252937][T25809] ? gfs2_lm+0x240/0x240 [ 447.257184][T25809] ? load_image+0x400/0x400 [ 447.261683][T25809] ? gfs2_consist_inode_i+0xc0/0xe0 [ 447.266871][T25809] gfs2_dirent_scan+0x525/0x650 [ 447.271710][T25809] ? gfs2_dirent_search+0x7f0/0x7f0 [ 447.276896][T25809] gfs2_dirent_search+0x2e9/0x7f0 [ 447.281906][T25809] ? gfs2_dirent_search+0x7f0/0x7f0 [ 447.287087][T25809] ? gfs2_permission+0x40a/0x4e0 [ 447.292012][T25809] ? gfs2_dir_search+0x220/0x220 [ 447.296930][T25809] ? gfs2_lookupi+0x600/0x600 [ 447.301606][T25809] ? gfs2_glock_nq+0xcb0/0x1550 [ 447.306454][T25809] gfs2_dir_search+0x49/0x220 [ 447.311120][T25809] gfs2_lookupi+0x46c/0x600 [ 447.315616][T25809] ? gfs2_lookup_simple+0x100/0x100 [ 447.320814][T25809] ? gfs2_lookupi+0x40e/0x600 [ 447.325526][T25809] ? __d_lookup_rcu+0x68a/0x760 [ 447.330374][T25809] ? __lock_acquire+0x7d10/0x7d10 [ 447.335412][T25809] __gfs2_lookup+0xa9/0x290 [ 447.339920][T25809] ? gfs2_atomic_open+0x210/0x210 [ 447.344939][T25809] ? d_alloc_parallel+0x1222/0x1330 [ 447.350136][T25809] gfs2_atomic_open+0x8e/0x210 [ 447.354893][T25809] ? gfs2_rename2+0x1ef0/0x1ef0 [ 447.359736][T25809] path_openat+0xe8c/0x2fa0 [ 447.364244][T25809] ? slab_post_alloc_hook+0x4c/0x380 [ 447.369521][T25809] ? do_filp_open+0x410/0x410 [ 447.374196][T25809] do_filp_open+0x1e2/0x410 [ 447.378690][T25809] ? vfs_tmpfile+0x300/0x300 [ 447.383285][T25809] ? _raw_spin_unlock+0x24/0x40 [ 447.388119][T25809] ? alloc_fd+0x598/0x630 [ 447.392436][T25809] do_sys_openat2+0x150/0x4b0 [ 447.397096][T25809] ? __lock_acquire+0x7d10/0x7d10 [ 447.402115][T25809] ? do_sys_open+0xe0/0xe0 [ 447.406515][T25809] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 447.412486][T25809] ? lock_chain_count+0x20/0x20 [ 447.417324][T25809] ? vtime_user_exit+0x2c8/0x3e0 [ 447.422249][T25809] __x64_sys_openat+0x135/0x160 [ 447.427086][T25809] do_syscall_64+0x4c/0xa0 [ 447.431490][T25809] ? clear_bhb_loop+0x30/0x80 [ 447.436153][T25809] ? clear_bhb_loop+0x30/0x80 [ 447.440815][T25809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.446694][T25809] RIP: 0033:0x7f66a3aa0799 [ 447.451098][T25809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.470693][T25809] RSP: 002b:00007f66a1cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.479104][T25809] RAX: ffffffffffffffda RBX: 00007f66a3d19fa0 RCX: 00007f66a3aa0799 [ 447.487075][T25809] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 447.495035][T25809] RBP: 00007f66a3b36bd9 R08: 0000000000000000 R09: 0000000000000000 [ 447.502991][T25809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.510950][T25809] R13: 00007f66a3d1a038 R14: 00007f66a3d19fa0 R15: 00007ffd37e57358 [ 447.518918][T25809] [ 447.537474][T24055] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64 [ 447.567159][T24055] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.700452][T24055] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.730381][T24055] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.780242][T24055] usb 6-1: Manufacturer: syz [ 447.785979][T25934] loop7: detected capacity change from 0 to 8 [ 447.807208][T24055] usb 6-1: config 0 descriptor?? [ 447.939233][T25942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.074765][T24055] usb 6-1: USB disconnect, device number 32 [ 448.163494][T25959] SET target dimension over the limit! [ 448.231187][T25965] loop0: detected capacity change from 0 to 64 [ 448.451967][T25979] loop7: detected capacity change from 0 to 128 [ 448.537504][T25979] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.595801][T24039] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 448.980513][T24039] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 448.992427][T24039] usb 2-1: config 1 has no interface number 0 [ 449.011701][T24039] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 449.043225][T24039] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 1088, setting to 1024 [ 449.090311][T24039] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 449.123124][T24039] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 449.320637][T24039] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 449.350344][T24039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.358402][T24039] usb 2-1: Product: syz [ 449.393266][T24039] usb 2-1: Manufacturer: syz [ 449.397899][T24039] usb 2-1: SerialNumber: syz [ 449.460657][T25971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.496985][T25971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.514022][T26050] __nla_validate_parse: 19 callbacks suppressed [ 449.514046][T26050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9878'. [ 449.521295][T24039] usb 2-1: Error in usbnet_get_endpoints (-22) [ 449.698005][T26060] CIFS mount error: No usable UNC path provided in device string! [ 449.698005][T26060] [ 449.728954][T26061] syz.5.9883: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 449.742057][T24039] usb 2-1: USB disconnect, device number 50 [ 449.758795][T26061] CPU: 0 PID: 26061 Comm: syz.5.9883 Not tainted syzkaller #0 [ 449.766283][T26061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.776342][T26061] Call Trace: [ 449.779623][T26061] [ 449.782559][T26061] dump_stack_lvl+0x188/0x250 [ 449.787245][T26061] ? rcu_lock_release+0x5/0x20 [ 449.792015][T26061] ? show_regs_print_info+0x20/0x20 [ 449.797226][T26061] ? load_image+0x400/0x400 [ 449.801752][T26061] warn_alloc+0x243/0x320 [ 449.803507][T26060] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.806090][T26061] ? rcu_lock_release+0x20/0x20 [ 449.819710][T26061] ? zone_watermark_ok_safe+0x240/0x240 [ 449.825258][T26061] ? dvb_demux_do_ioctl+0x313/0x530 [ 449.830457][T26061] ? kfree+0xef/0x2a0 [ 449.834445][T26061] __vmalloc_node_range+0x2b1/0x8b0 [ 449.839637][T26061] ? mutex_lock_io_nested+0x60/0x60 [ 449.844827][T26061] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 449.850653][T26061] vmalloc+0x75/0x80 [ 449.854535][T26061] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 449.860329][T26061] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 449.865955][T26061] dvb_demux_do_ioctl+0x450/0x530 [ 449.870976][T26061] dvb_usercopy+0x191/0x2b0 [ 449.875464][T26061] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 449.880997][T26061] ? dvb_generic_ioctl+0xb0/0xb0 [ 449.885933][T26061] ? dvb_demux_poll+0x210/0x210 [ 449.890773][T26061] dvb_demux_ioctl+0x25/0x30 [ 449.895352][T26061] __se_sys_ioctl+0xfa/0x170 [ 449.899929][T26061] do_syscall_64+0x4c/0xa0 [ 449.904333][T26061] ? clear_bhb_loop+0x30/0x80 [ 449.908997][T26061] ? clear_bhb_loop+0x30/0x80 [ 449.913686][T26061] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.919584][T26061] RIP: 0033:0x7fdac1b4f799 [ 449.923999][T26061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.943595][T26061] RSP: 002b:00007fdabfda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.951999][T26061] RAX: ffffffffffffffda RBX: 00007fdac1dc8fa0 RCX: 00007fdac1b4f799 [ 449.959962][T26061] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 449.967919][T26061] RBP: 00007fdac1be5bd9 R08: 0000000000000000 R09: 0000000000000000 [ 449.975876][T26061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.983829][T26061] R13: 00007fdac1dc9038 R14: 00007fdac1dc8fa0 R15: 00007ffc8fb62cf8 [ 449.991802][T26061] [ 450.006385][T26061] Mem-Info: [ 450.009661][T26061] active_anon:63 inactive_anon:8160 isolated_anon:0 [ 450.009661][T26061] active_file:4549 inactive_file:11203 isolated_file:0 [ 450.009661][T26061] unevictable:768 dirty:306 writeback:0 [ 450.009661][T26061] slab_reclaimable:16832 slab_unreclaimable:102293 [ 450.009661][T26061] mapped:30477 shmem:1685 pagetables:891 bounce:0 [ 450.009661][T26061] kernel_misc_reclaimable:0 [ 450.009661][T26061] free:1405978 free_pcp:11039 free_cma:0 [ 450.118466][T26061] Node 0 active_anon:252kB inactive_anon:32100kB active_file:18196kB inactive_file:44680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121908kB dirty:1224kB writeback:0kB shmem:4664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12420kB pagetables:3564kB all_unreclaimable? no [ 450.187801][T26077] loop0: detected capacity change from 0 to 256 [ 450.194456][T26061] Node 1 active_anon:0kB inactive_anon:540kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 450.241183][T26077] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 450.266250][T26061] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.327490][T26061] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 450.334220][T26061] Node 0 DMA32 free:1688728kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:252kB inactive_anon:32100kB active_file:18196kB inactive_file:44680kB unevictable:1536kB writepending:1224kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:42776kB local_pcp:21572kB free_cma:0kB [ 450.364086][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.371654][T26061] lowmem_reserve[]: 0 0 0 0 0 [ 450.386961][T26061] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.487846][T26087] loop0: detected capacity change from 0 to 64 [ 450.503316][T26061] lowmem_reserve[]: 0 0 0 0 0 [ 450.508154][T26061] Node 1 Normal free:3920024kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:540kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1580kB local_pcp:1580kB free_cma:0kB [ 450.535760][T26090] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9896'. [ 450.559614][T26061] lowmem_reserve[]: 0 0 0 0 0 [ 450.559669][T26061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 450.559916][T26061] Node 0 DMA32: 265*4kB (UME) 177*8kB (UME) 321*16kB (UME) 620*32kB (UME) 415*64kB (UME) 130*128kB (UME) 71*256kB (ME) 46*512kB (UME) 24*1024kB (UME) 14*2048kB (UM) 372*4096kB (UM) = 1689340kB [ 450.560104][T26061] Node 0 Normal: 0*4kB 0*8kB [ 450.560803][T26090] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9896'. [ 450.565544][T26061] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 450.565640][T26061] Node 1 Normal: 146*4kB (UE) 34*8kB (UE) 34*16kB (UE) 193*32kB (UME) 86*64kB (UME) 25*128kB (UME) 7*256kB (U) 5*512kB (UE) 0*1024kB 2*2048kB (UM) 951*4096kB (M) = 3920024kB [ 450.565847][T26061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.565867][T26061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.565884][T26061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.565902][T26061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.565920][T26061] 17460 total pagecache pages [ 450.565933][T26061] 1 pages in swap cache [ 450.565942][T26061] Swap cache stats: add 126, delete 125, find 28/45 [ 450.565957][T26061] Free swap = 124472kB [ 450.565966][T26061] Total swap = 124996kB [ 450.565975][T26061] 2097051 pages RAM [ 450.565983][T26061] 0 pages HighMem/MovableOnly [ 450.565991][T26061] 411490 pages reserved [ 450.565999][T26061] 0 pages cma reserved [ 450.636165][T26087] Trying to free block not in datazone [ 450.696746][T26095] Process accounting resumed [ 450.836508][T26109] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9907'. [ 451.101170][T26123] Process accounting resumed [ 451.236524][T26138] loop0: detected capacity change from 0 to 64 [ 451.474924][T26152] Process accounting resumed [ 451.875041][T26185] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.010299][ T6500] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 452.260424][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9957'. [ 452.280573][ T6500] usb 6-1: Using ep0 maxpacket: 16 [ 452.289037][T26213] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 452.312111][T26168] loop7: detected capacity change from 0 to 32768 [ 452.467325][T26168] XFS (loop7): Mounting V5 Filesystem [ 452.473131][ T6500] usb 6-1: unable to get BOS descriptor or descriptor too short [ 452.591195][T26239] loop0: detected capacity change from 0 to 8 [ 452.600481][ T6500] usb 6-1: config 255 has an invalid interface number: 45 but max is 0 [ 452.617010][ T6500] usb 6-1: config 255 has no interface number 0 [ 452.623136][T26168] XFS (loop7): Ending clean mount [ 452.633867][ T6500] usb 6-1: config 255 interface 45 has no altsetting 0 [ 452.642864][T26168] XFS (loop7): Quotacheck needed: Please wait. [ 452.720877][T26239] SQUASHFS error: Unable to read directory block [1d0:0] [ 452.747298][T26168] XFS (loop7): Quotacheck: Done. [ 452.821897][ T6500] usb 6-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice= b.6c [ 452.835332][T11179] XFS (loop7): Unmounting Filesystem [ 452.861980][ T6500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.870010][ T6500] usb 6-1: Product: syz [ 452.899531][ T6500] usb 6-1: Manufacturer: syz [ 452.950277][ T6500] usb 6-1: SerialNumber: syz [ 453.184318][T26263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9981'. [ 453.210535][T26263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9981'. [ 453.330872][ T6500] ums-datafab 6-1:255.45: USB Mass Storage device detected [ 453.356470][T26269] loop0: detected capacity change from 0 to 1024 [ 453.381587][ T6500] usb 6-1: USB disconnect, device number 33 [ 453.503880][T26269] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 453.538850][T26269] System zones: 0-1, 3-36 [ 453.596162][T26269] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,max_batch_time=0x000000000000e5a6,debug,bsddf,nodiscard,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 453.701817][T26283] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 453.715229][T26285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9987'. [ 453.835399][T26290] tmpfs: Bad value for 'mpol' [ 454.481426][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10015'. [ 454.524392][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10015'. [ 455.050364][ T6500] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 455.097370][T26393] netlink: 'syz.0.10040': attribute type 2 has an invalid length. [ 455.116771][T26393] netlink: 'syz.0.10040': attribute type 3 has an invalid length. [ 455.173052][T26397] netlink: 'syz.7.10041': attribute type 11 has an invalid length. [ 455.240392][ T6499] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 455.350250][ T6500] usb 6-1: Using ep0 maxpacket: 32 [ 455.508674][ T6500] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.530319][ T6499] usb 2-1: Using ep0 maxpacket: 8 [ 455.626743][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 455.626759][ T25] audit: type=1400 audit(455.598:15): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=26432 comm="syz.0.10059" [ 455.680794][ T6499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.712564][ T6499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.727474][ T6499] usb 2-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 455.750415][ T6500] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 455.763014][ T6499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.780690][ T6500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.788715][ T6500] usb 6-1: Product: syz [ 455.815329][ T6499] usb 2-1: config 0 descriptor?? [ 455.822120][T26446] device netdevsim0 left promiscuous mode [ 455.835034][ T6500] usb 6-1: Manufacturer: syz [ 455.846461][ T6500] usb 6-1: SerialNumber: syz [ 455.854506][ T6500] usb 6-1: config 0 descriptor?? [ 455.909375][ T6499] iowarrior 2-1:0.0: no interrupt-out endpoint found [ 455.917029][ T6500] usb 6-1: bad CDC descriptors [ 455.927013][T26451] loop0: detected capacity change from 0 to 1024 [ 455.933546][ T6500] usb 6-1: unsupported MDLM descriptors [ 456.008516][T26451] hfsplus: invalid length 789 has been corrected to 255 [ 456.120693][T24055] usb 6-1: USB disconnect, device number 34 [ 456.264310][T26473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 456.518234][T26494] trusted_key: encrypted_key: insufficient parameters specified [ 456.705854][T26506] loop7: detected capacity change from 0 to 256 [ 456.720965][T26508] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.728794][T26511] misc userio: Invalid payload size [ 456.756770][T26506] exfat: Deprecated parameter 'utf8' [ 456.772503][T26506] exfat: Deprecated parameter 'utf8' [ 456.792534][T26506] exfat: Deprecated parameter 'utf8' [ 456.832729][T26506] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 456.853147][T26515] netlink: 124 bytes leftover after parsing attributes in process `syz.0.10100'. [ 457.075169][T26530] netlink: 'syz.6.10107': attribute type 21 has an invalid length. [ 457.085367][T26530] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10107'. [ 457.095058][T26530] netlink: 'syz.6.10107': attribute type 4 has an invalid length. [ 457.103204][T26530] netlink: 'syz.6.10107': attribute type 5 has an invalid length. [ 457.116007][T26530] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10107'. [ 457.126007][T26532] netlink: 'syz.5.10108': attribute type 10 has an invalid length. [ 457.138535][T26532] team0: Device veth0_vlan failed to register rx_handler [ 457.262394][T24047] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 457.350411][ T6499] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 457.510275][T24047] usb 8-1: Using ep0 maxpacket: 32 [ 457.630326][T24047] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 457.638538][T24047] usb 8-1: config 0 has no interface number 0 [ 457.644688][T24047] usb 8-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 457.654847][T24047] usb 8-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 457.730474][ T6499] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 457.738691][ T6499] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 457.748901][ T6499] usb 1-1: config 8 has no interface number 0 [ 457.755021][ T6499] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 457.764900][ T6499] usb 1-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.777880][ T6499] usb 1-1: config 8 interface 177 has no altsetting 0 [ 457.784711][ T6499] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 457.793784][ T6499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.830409][T24047] usb 8-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 457.839469][T24047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.842070][ T6499] ir_toy 1-1:8.177: required endpoints not found [ 457.848131][T24047] usb 8-1: Product: syz [ 457.858298][T24047] usb 8-1: Manufacturer: syz [ 457.866618][T24047] usb 8-1: SerialNumber: syz [ 457.873253][T24047] usb 8-1: config 0 descriptor?? [ 457.890608][T26523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 457.897644][T26523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 457.974244][T24047] usb 2-1: USB disconnect, device number 51 [ 458.058163][T24055] usb 1-1: USB disconnect, device number 49 [ 458.196302][T24039] usb 8-1: USB disconnect, device number 34 [ 458.749209][T26601] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 458.981512][T26608] loop7: detected capacity change from 0 to 4096 [ 459.038111][T26608] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 459.183481][T26632] loop0: detected capacity change from 0 to 1024 [ 459.320232][T26647] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 459.413715][T26632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 459.604041][T26664] netlink: 'syz.6.10171': attribute type 8 has an invalid length. [ 459.820295][T26679] kcapi: manufacturer command 4294967295 unknown. [ 460.249124][T26709] libceph: resolve '0' (ret=-3): failed [ 460.368727][T26714] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10196'. [ 461.040973][T26758] loop5: detected capacity change from 0 to 64 [ 461.140279][ T6500] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 461.250367][T24047] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 461.313972][T26776] syz.7.10224: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 461.338334][T26776] CPU: 1 PID: 26776 Comm: syz.7.10224 Not tainted syzkaller #0 [ 461.345927][T26776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.355998][T26776] Call Trace: [ 461.359289][T26776] [ 461.362230][T26776] dump_stack_lvl+0x188/0x250 [ 461.366928][T26776] ? rcu_lock_release+0x5/0x20 [ 461.371710][T26776] ? show_regs_print_info+0x20/0x20 [ 461.376939][T26776] ? load_image+0x400/0x400 [ 461.381478][T26776] warn_alloc+0x243/0x320 [ 461.385838][T26776] ? rcu_lock_release+0x20/0x20 [ 461.390721][T26776] ? zone_watermark_ok_safe+0x240/0x240 [ 461.396293][T26776] ? dvb_demux_do_ioctl+0x313/0x530 [ 461.401608][T26776] ? kfree+0xef/0x2a0 [ 461.405622][T26776] __vmalloc_node_range+0x2b1/0x8b0 [ 461.410843][T26776] ? mutex_lock_io_nested+0x60/0x60 [ 461.416076][T26776] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 461.421911][T26776] vmalloc+0x75/0x80 [ 461.425831][T26776] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 461.431661][T26776] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 461.437324][T26776] dvb_demux_do_ioctl+0x450/0x530 [ 461.442386][T26776] dvb_usercopy+0x191/0x2b0 [ 461.446922][T26776] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 461.452494][T26776] ? dvb_generic_ioctl+0xb0/0xb0 [ 461.457479][T26776] ? dvb_demux_poll+0x210/0x210 [ 461.462364][T26776] dvb_demux_ioctl+0x25/0x30 [ 461.466985][T26776] __se_sys_ioctl+0xfa/0x170 [ 461.471601][T26776] do_syscall_64+0x4c/0xa0 [ 461.476042][T26776] ? clear_bhb_loop+0x30/0x80 [ 461.480740][T26776] ? clear_bhb_loop+0x30/0x80 [ 461.485446][T26776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 461.491366][T26776] RIP: 0033:0x7fe18b127799 [ 461.495820][T26776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.500424][ T6500] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 461.515442][T26776] RSP: 002b:00007fe189381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.515473][T26776] RAX: ffffffffffffffda RBX: 00007fe18b3a0fa0 RCX: 00007fe18b127799 [ 461.515487][T26776] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 461.515500][T26776] RBP: 00007fe18b1bdbd9 R08: 0000000000000000 R09: 0000000000000000 [ 461.515512][T26776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.515523][T26776] R13: 00007fe18b3a1038 R14: 00007fe18b3a0fa0 R15: 00007ffd4961a458 [ 461.515551][T26776] [ 461.546478][T26776] Mem-Info: [ 461.585767][T26776] active_anon:68 inactive_anon:8104 isolated_anon:0 [ 461.585767][T26776] active_file:4553 inactive_file:11203 isolated_file:0 [ 461.585767][T26776] unevictable:768 dirty:459 writeback:0 [ 461.585767][T26776] slab_reclaimable:16824 slab_unreclaimable:102421 [ 461.585767][T26776] mapped:30472 shmem:1731 pagetables:893 bounce:0 [ 461.585767][T26776] kernel_misc_reclaimable:0 [ 461.585767][T26776] free:1407814 free_pcp:9085 free_cma:0 [ 461.596510][T26792] netlink: 'syz.1.10232': attribute type 10 has an invalid length. [ 461.634111][T26776] Node 0 active_anon:272kB inactive_anon:31976kB active_file:18212kB inactive_file:44680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121888kB dirty:1836kB writeback:0kB shmem:4848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:3672kB all_unreclaimable? no [ 461.638205][ T6500] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 461.666771][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.673727][T26776] Node 1 active_anon:0kB inactive_anon:540kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 461.679105][T26792] device veth0_vlan left promiscuous mode [ 461.695361][T26776] Node 0 [ 461.712752][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.713299][ T6500] usb 7-1: config 8 has no interface number 0 [ 461.728932][T26776] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.760565][T26792] device veth0_vlan entered promiscuous mode [ 461.766664][ T6500] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 461.772420][T26776] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 461.783783][T24047] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 461.784735][T26792] team0: Device veth0_vlan failed to register rx_handler [ 461.797482][T26776] Node 0 DMA32 free:1695620kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:288kB inactive_anon:32004kB active_file:18212kB inactive_file:44684kB unevictable:1536kB writepending:1840kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:34964kB local_pcp:13784kB free_cma:0kB [ 461.806892][ T6500] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 461.828797][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.836068][T26776] lowmem_reserve[]: 0 0 0 0 0 [ 461.863645][ T6500] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 461.883787][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 461.888133][ T6500] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 461.899790][T26776] Node 0 [ 461.908772][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 461.928223][T26776] Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.960498][T26776] lowmem_reserve[]: 0 0 0 0 0 [ 461.960744][ T6500] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 461.965369][T26776] Node 1 Normal free:3920024kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:540kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1580kB local_pcp:0kB free_cma:0kB [ 461.993228][ T6500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.034863][T26776] lowmem_reserve[]: 0 0 0 0 0 [ 462.040505][T26776] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.060905][T26776] Node 0 DMA32: 1865*4kB (UME) 494*8kB (UME) 360*16kB (UME) 532*32kB (UME) 416*64kB (UME) 130*128kB (UME) 71*256kB (ME) 46*512kB (UME) 24*1024kB (UME) 14*2048kB (UM) 372*4096kB (UM) = 1696148kB [ 462.069870][T26802] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 462.087432][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 462.101148][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 462.123441][T26776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.131183][ T6500] usb 7-1: NFC: intf ffff88807a5be000 id ffffffff8cb52680 [ 462.137841][T26776] Node 1 Normal: 146*4kB (UE) 34*8kB (UE) 34*16kB (UE) 193*32kB (UME) 86*64kB (UME) 25*128kB (UME) 7*256kB (U) 5*512kB (UE) 0*1024kB 2*2048kB (UM) 951*4096kB (M) = 3920024kB [ 462.165772][T26776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.175995][T26804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10239'. [ 462.203240][T26804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.230545][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 462.249527][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 462.261042][T26776] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.273336][T26776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.289428][T26776] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.304864][T26810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10242'. [ 462.315299][T26776] 17392 total pagecache pages [ 462.328456][T26810] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 462.329975][T26776] 1 pages in swap cache [ 462.360493][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 462.375779][T26776] Swap cache stats: add 126, delete 125, find 28/45 [ 462.387967][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 462.420506][T26776] Free swap = 124472kB [ 462.424696][T26776] Total swap = 124996kB [ 462.429232][T26776] 2097051 pages RAM [ 462.461349][T24055] usb 7-1: USB disconnect, device number 32 [ 462.485446][T26776] 0 pages HighMem/MovableOnly [ 462.498398][T26776] 411490 pages reserved [ 462.510073][T26776] 0 pages cma reserved [ 462.511216][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 462.538293][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 462.597670][T26826] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10250'. [ 462.660587][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 462.697256][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 462.831100][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 462.852506][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 462.945210][T26856] IPVS: length: 218 != 24 [ 462.993551][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 463.035478][T24047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 463.280498][T24047] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 463.289865][T24047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 463.298320][T26880] netlink: 'syz.5.10276': attribute type 41 has an invalid length. [ 463.329592][T24047] usb 1-1: Product: syz [ 463.344445][T24047] usb 1-1: Manufacturer: syz [ 463.349254][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10280'. [ 463.377876][T24047] usb 1-1: SerialNumber: syz [ 463.399225][T24047] usb 1-1: config 0 descriptor?? [ 463.440936][T24047] hub 1-1:0.0: Invalid hub with more than one config or interface [ 463.448800][T24047] hub: probe of 1-1:0.0 failed with error -22 [ 463.475371][T24047] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54 [ 463.679680][T26902] loop7: detected capacity change from 0 to 164 [ 463.770304][ T6500] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 463.798578][T24055] usb 1-1: USB disconnect, device number 50 [ 464.031298][ T6500] usb 6-1: Using ep0 maxpacket: 8 [ 464.158234][ T6500] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 464.170375][ T6500] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.200604][ T6500] usb 6-1: config 0 has no interface number 0 [ 464.222037][ T6500] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 464.255561][ T6500] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 464.266995][ T6500] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.286428][ T6500] usb 6-1: config 0 interface 52 has no altsetting 0 [ 464.299593][T26918] SET target dimension over the limit! [ 464.410718][ T6500] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 464.419840][ T6500] usb 6-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 464.480659][ T6500] usb 6-1: Product: syz [ 464.484862][ T6500] usb 6-1: SerialNumber: syz [ 464.503436][ T6500] usb 6-1: config 0 descriptor?? [ 464.713745][T26940] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 464.773948][ T6500] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 464.793880][ T6500] synaptics_usb: probe of 6-1:0.52 failed with error -5 [ 464.955368][T26954] netlink: 'syz.6.10308': attribute type 10 has an invalid length. [ 464.983385][T26954] team0: Port device virt_wifi0 added [ 465.046493][ T6499] usb 6-1: USB disconnect, device number 35 [ 465.361100][T26978] loop7: detected capacity change from 0 to 1024 [ 465.406948][T26983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10321'. [ 465.445448][ T9] hfsplus: b-tree write err: -5, ino 25 [ 465.461146][ T9] hfsplus: b-tree write err: -5, ino 4 [ 465.479637][ T9] hfsplus: b-tree write err: -5, ino 2 [ 465.569793][T26990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10324'. [ 465.665343][T26990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10324'. [ 465.909267][T27016] netlink: 'syz.0.10336': attribute type 1 has an invalid length. [ 465.925075][T27018] loop7: detected capacity change from 0 to 1024 [ 466.060329][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 466.077590][ T8338] hfsplus: b-tree write err: -5, ino 25 [ 466.083993][ T8338] hfsplus: b-tree write err: -5, ino 4 [ 466.089565][ T8338] hfsplus: b-tree write err: -5, ino 2 [ 466.097249][T27030] kAFS: unparsable volume name [ 466.520785][T27066] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10360'. [ 466.765990][T27082] loop5: detected capacity change from 0 to 1024 [ 466.859622][T27082] EXT4-fs (loop5): Ignoring removed nobh option [ 466.932947][T27082] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.10369: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 466.962671][T27082] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.10369: couldn't read orphan inode 11 (err -117) [ 466.982670][T27082] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 467.100753][T24055] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 467.247562][T27111] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10383'. [ 467.258482][T27111] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10383'. [ 467.275168][T27111] device vlan0 entered promiscuous mode [ 467.284482][T27118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.400364][T24055] usb 7-1: Using ep0 maxpacket: 32 [ 467.495268][T27129] netlink: 'syz.0.10393': attribute type 4 has an invalid length. [ 467.496156][T27120] loop7: detected capacity change from 0 to 4096 [ 467.562080][T24055] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 467.581277][T24055] usb 7-1: config 0 has no interface number 0 [ 467.615707][T24055] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 242, changing to 11 [ 467.648517][T24055] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 24941, setting to 1024 [ 467.663349][T24055] usb 7-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.721598][T24055] usb 7-1: config 0 interface 196 has no altsetting 0 [ 467.747951][T27120] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 467.868749][T11179] ntfs3: loop7: ntfs_sync_fs r=9 failed, -22. [ 467.878325][T11179] ntfs3: loop7: ntfs_evict_inode r=9 failed, -22. [ 467.930403][T24055] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 467.954455][T24055] usb 7-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 467.966074][T24055] usb 7-1: Product: syz [ 467.975544][T24055] usb 7-1: Manufacturer: syz [ 467.984507][T27159] netlink: 'syz.7.10406': attribute type 28 has an invalid length. [ 467.989902][T24055] usb 7-1: SerialNumber: syz [ 468.015893][T24055] usb 7-1: config 0 descriptor?? [ 468.028564][T27159] netlink: 'syz.7.10406': attribute type 3 has an invalid length. [ 468.036280][T27160] loop0: detected capacity change from 0 to 2048 [ 468.085673][T27160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.087419][T27159] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10406'. [ 468.227437][T27172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10414'. [ 468.310861][T24055] ipheth 7-1:0.196: Unable to find endpoints [ 468.339519][T24055] usb 7-1: USB disconnect, device number 33 [ 468.407656][T27182] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 468.421326][T27185] netlink: 'syz.7.10421': attribute type 21 has an invalid length. [ 468.430751][T27185] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10421'. [ 468.517201][T27192] binder: 27191:27192 ioctl c018620b 0 returned -14 [ 468.698833][T27207] device bridge_slave_0 left promiscuous mode [ 468.713775][T27207] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.779612][T27207] team0: Port device bridge0 removed [ 469.153723][T27241] netlink: 'syz.7.10448': attribute type 21 has an invalid length. [ 469.162965][T27240] overlayfs: empty lowerdir [ 469.168844][T27241] netlink: 100 bytes leftover after parsing attributes in process `syz.7.10448'. [ 469.286009][T27252] netlink: 'syz.7.10452': attribute type 5 has an invalid length. [ 469.505505][T27267] netlink: 'syz.5.10461': attribute type 10 has an invalid length. [ 469.549104][T27267] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 469.860317][T24055] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 470.106187][T27316] netlink: 'syz.7.10485': attribute type 1 has an invalid length. [ 470.291075][T24055] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 470.311807][T24055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.320940][T27332] netdevsim netdevsim7: Direct firmware load for / [ 470.320940][T27332] failed with error -2 [ 470.338895][T27332] netdevsim netdevsim7: Falling back to sysfs fallback for: / [ 470.338895][T27332] [ 470.362172][T24055] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 470.608473][T27352] __nla_validate_parse: 2 callbacks suppressed [ 470.608489][T27352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10502'. [ 470.742535][T27358] kAFS: unable to lookup cell '(,c' [ 470.809537][T27363] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10509'. [ 470.820421][T24055] gspca_sn9c20x: Write register 1001 failed -71 [ 470.824495][T27363] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 470.836895][T24055] gspca_sn9c20x: Device initialization failed [ 470.857160][T24055] gspca_sn9c20x: probe of 2-1:252.0 failed with error -71 [ 470.895088][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10511'. [ 470.897644][T24055] usb 2-1: USB disconnect, device number 52 [ 470.957019][T27370] netlink: 'syz.5.10512': attribute type 5 has an invalid length. [ 470.965172][T24047] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 471.206665][T27390] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 471.264391][T27390] exFAT-fs (nullb0): invalid boot record signature [ 471.272396][T27390] exFAT-fs (nullb0): failed to read boot sector [ 471.279620][T27390] exFAT-fs (nullb0): failed to recognize exfat type [ 471.345891][T27400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.420468][T24047] usb 7-1: unable to get BOS descriptor or descriptor too short [ 471.464148][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10529'. [ 471.591241][ T25] audit: type=1400 audit(471.568:16): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=27415 comm="syz.1.10535" [ 471.648524][T27422] loop5: detected capacity change from 0 to 256 [ 471.701058][T24047] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 471.719414][T24047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.738164][T24047] usb 7-1: Product: syz [ 471.748728][T27428] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10540'. [ 471.760400][T24047] usb 7-1: Manufacturer: syz [ 471.775895][T24047] usb 7-1: SerialNumber: syz [ 471.787745][T27422] FAT-fs (loop5): Directory bread(block 64) failed [ 471.805668][T27422] FAT-fs (loop5): Directory bread(block 65) failed [ 471.825856][T27422] FAT-fs (loop5): Directory bread(block 66) failed [ 471.860777][T27422] FAT-fs (loop5): Directory bread(block 67) failed [ 471.883974][T27422] FAT-fs (loop5): Directory bread(block 68) failed [ 471.900310][T27422] FAT-fs (loop5): Directory bread(block 69) failed [ 471.927272][T27422] FAT-fs (loop5): Directory bread(block 70) failed [ 471.950744][T27422] FAT-fs (loop5): Directory bread(block 71) failed [ 471.963060][T27422] FAT-fs (loop5): Directory bread(block 72) failed [ 471.984031][T27422] FAT-fs (loop5): Directory bread(block 73) failed [ 472.012512][T27447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10548'. [ 472.105711][T24047] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 472.120474][T27422] FAT-fs (loop5): Filesystem has been set read-only [ 472.170925][T24047] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 472.184621][T27456] IPv6: sit2: Disabled Multicast RS [ 472.190291][T24047] usb 7-1: unit 13 not found! [ 472.254372][T27462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.271289][T24047] usb 7-1: USB disconnect, device number 34 [ 472.570689][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.720750][T27491] Cannot find del_set index 4 as target [ 472.746112][T27497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.975009][T27517] xt_hashlimit: max too large, truncated to 1048576 [ 473.014893][T27517] No such timeout policy "syz1" [ 473.133971][T27527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10587'. [ 473.145264][T27527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10587'. [ 473.220322][T24047] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 473.270788][T27533] netlink: 'syz.7.10591': attribute type 16 has an invalid length. [ 473.510283][T24047] usb 1-1: Using ep0 maxpacket: 8 [ 473.631108][T24047] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 473.660203][T24047] usb 1-1: config 0 has no interface number 0 [ 473.680210][T24047] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 473.717486][T24047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.756313][T24047] usb 1-1: config 0 descriptor?? [ 473.866706][T27555] loop7: detected capacity change from 0 to 2048 [ 473.944676][T27555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.083011][ T6499] usb 1-1: USB disconnect, device number 51 [ 474.187692][T27570] loop7: detected capacity change from 0 to 16 [ 474.516183][T27579] loop5: detected capacity change from 0 to 4096 [ 474.557439][T27579] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 474.609927][T27591] loop7: detected capacity change from 0 to 64 [ 474.629134][T27579] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 474.650854][T27579] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 474.761302][T27579] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 474.780804][T27579] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 474.867857][T27579] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 474.916852][T27605] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.10627'. [ 474.931419][T27579] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 474.945495][T27605] openvswitch: netlink: Tunnel attr 0 has unexpected len 145 expected 8 [ 474.971715][T27579] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 474.986270][T27579] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 475.059024][T27579] ntfs: volume version 3.1. [ 475.620942][T27643] loop5: detected capacity change from 0 to 256 [ 475.651537][T27646] damon: kdamond (27646) starts [ 475.679647][T27643] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 475.803389][T27643] exFAT-fs (loop5): hint_cluster is invalid (17) [ 475.993257][T27658] loop0: detected capacity change from 0 to 4096 [ 476.000631][T24055] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 476.063499][T27658] ntfs: volume version 3.1. [ 476.303578][T24055] usb 7-1: Using ep0 maxpacket: 32 [ 476.356611][T27676] device batadv0 left promiscuous mode [ 476.366766][T27676] bridge0: port 3(batadv0) entered disabled state [ 476.412794][T27676] device bridge_slave_1 left promiscuous mode [ 476.419208][T27676] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.430521][T24055] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.438562][T24055] usb 7-1: config 0 has no interface number 0 [ 476.460265][T27676] device bridge_slave_0 left promiscuous mode [ 476.474681][T27676] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.522478][T27676] team0: Port device bridge0 removed [ 476.524088][T27662] loop5: detected capacity change from 0 to 32768 [ 476.592187][T27680] sp0: Synchronizing with TNC [ 476.607539][T27662] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 476.618631][T24055] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 476.647787][T24055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.713917][T27662] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 476.735770][T24055] usb 7-1: Product: syz [ 476.739979][T24055] usb 7-1: Manufacturer: syz [ 476.782861][T24055] usb 7-1: SerialNumber: syz [ 476.788037][T27695] loop7: detected capacity change from 0 to 64 [ 476.826673][T24055] usb 7-1: config 0 descriptor?? [ 476.830709][T27698] loop0: detected capacity change from 0 to 512 [ 476.865464][T11134] ocfs2: Unmounting device (7,5) on (node local) [ 476.874184][T24055] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 476.898534][T24055] usb 7-1: selecting invalid altsetting 1 [ 476.911362][T24055] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 476.938528][T24055] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 476.991626][T27698] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.10666: iget: bad extra_isize 50264 (inode size 256) [ 477.010362][T24055] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 477.031398][T24055] usb 7-1: media controller created [ 477.034641][T27698] EXT4-fs (loop0): Remounting filesystem read-only [ 477.057478][T24055] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.082798][T27698] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.10666: couldn't read orphan inode 15 (err -117) [ 477.095302][T27698] EXT4-fs (loop0): Remounting filesystem read-only [ 477.102513][T27698] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,journal_dev=0x000000000000000f,inode_readahead_blks=0x0000000000000000,noinit_itable,journal_ioprio=0x0000000000000006,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,auto_da_alloc,commit=0x00. Quota mode: none. [ 477.134749][T24055] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 477.142753][T24055] zl10353_read_register: readreg error (reg=127, ret==-71) [ 477.175667][T27708] loop7: detected capacity change from 0 to 16 [ 477.180493][T24055] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 477.218687][T27708] erofs: (device loop7): mounted with root inode @ nid 36. [ 477.257127][T24055] usb 7-1: USB disconnect, device number 35 [ 477.298237][T27698] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.10666: Directory hole found for htree leaf block 0 [ 477.359814][T27698] EXT4-fs (loop0): Remounting filesystem read-only [ 477.439050][T27718] loop5: detected capacity change from 0 to 256 [ 477.477134][T27720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10677'. [ 477.493494][T27718] exfat: Deprecated parameter 'namecase' [ 477.526945][T27718] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 477.961603][T27753] loop5: detected capacity change from 0 to 512 [ 478.092705][T27749] loop0: detected capacity change from 0 to 4096 [ 478.111042][T27753] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 478.130130][T27765] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.176232][T27749] __ntfs_error: 28 callbacks suppressed [ 478.176247][T27749] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 478.358090][T27749] ntfs: volume version 3.1. [ 478.406723][T27749] ntfs: (device loop0): parse_options(): Unrecognized mount option 18446744073709551615@LqE: 艞t}0$. [ 478.446792][T27749] ntfs: (device loop0): parse_options(): Unrecognized mount option 18446744073709551615@LqE: 艞t}0$. [ 478.615083][T27784] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10708'. [ 478.970376][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10716'. [ 478.972089][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10716'. [ 478.972361][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10716'. [ 478.973134][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10716'. [ 478.973319][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10716'. [ 479.076614][T27801] device bridge_slave_0 left promiscuous mode [ 479.076766][T27801] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.129418][T27779] loop5: detected capacity change from 0 to 32768 [ 479.388233][T27810] loop5: detected capacity change from 0 to 128 [ 479.456347][T27810] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 479.489858][T27791] loop0: detected capacity change from 0 to 32768 [ 479.535993][T27810] hpfs: filesystem error: improperly stopped [ 479.545502][T27810] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 479.579674][T27810] hpfs: You really don't want any checks? You are crazy... [ 479.603190][T27791] XFS (loop0): Mounting V5 Filesystem [ 479.609330][T27810] hpfs: Code page index out of array [ 479.623372][T27810] hpfs: code page support is disabled [ 479.628978][T27810] hpfs: hpfs_map_4sectors(): unaligned read [ 479.639653][T27810] hpfs: hpfs_map_4sectors(): unaligned read [ 479.645883][T27810] hpfs: filesystem error: unable to find root dir [ 479.685503][T27830] loop7: detected capacity change from 0 to 512 [ 479.715219][T27791] XFS (loop0): Ending clean mount [ 479.765601][T27791] XFS (loop0): Quotacheck needed: Please wait. [ 479.781208][T27830] EXT4-fs (loop7): Ignoring removed nobh option [ 479.806836][T27830] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 479.844990][T27791] XFS (loop0): Quotacheck: Done. [ 479.846326][T27830] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.10726: attempt to clear invalid blocks 1 len 1 [ 479.874277][T27791] XFS (loop0): Unmounting Filesystem [ 479.897641][T27830] EXT4-fs (loop7): Remounting filesystem read-only [ 479.904845][T27830] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 479.940558][T27830] EXT4-fs (loop7): Remounting filesystem read-only [ 479.970882][T27830] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.10726: invalid indirect mapped block 1819239214 (level 0) [ 480.049967][T27830] EXT4-fs (loop7): Remounting filesystem read-only [ 480.057844][T27830] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.10726: invalid indirect mapped block 1819239214 (level 1) [ 480.099150][T27830] EXT4-fs (loop7): Remounting filesystem read-only [ 480.107777][T27830] EXT4-fs (loop7): 1 truncate cleaned up [ 480.119511][T27830] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 480.158949][T27830] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 13: comm syz.7.10726: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 480.184721][T27830] EXT4-fs (loop7): Remounting filesystem read-only [ 480.185665][T27836] [ 480.185665][T27836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 480.185665][T27836] [ 480.241446][T27836] ERROR: (device loop5): ea_get: invalid ea.flag [ 480.241446][T27836] [ 480.257128][T27836] ERROR: (device loop5): remounting filesystem as read-only [ 480.268427][T27836] ERROR: (device loop5): ea_get: invalid ea.flag [ 480.268427][T27836] [ 480.382984][T27842] device bridge_slave_0 left promiscuous mode [ 480.400695][T27842] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.630383][ T6500] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 481.004501][ T6500] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.019849][ T6500] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.046957][ T6500] usb 8-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 481.062989][ T6500] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.093589][ T6500] usb 8-1: config 0 descriptor?? [ 481.144361][T27890] tipc: Started in network mode [ 481.154497][T27890] tipc: Node identity 00000000000000000000ffffe0000002, cluster identity 4711 [ 481.164147][T27890] tipc: Enabling of bearer rejected, failed to enable media [ 481.336948][T27896] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 481.760381][T27922] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 481.800329][ T6500] usb 8-1: string descriptor 0 read error: -71 [ 481.817184][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop0 [ 481.820706][ T6500] uclogic 0003:5543:0081.0002: failed retrieving string descriptor #200: -71 [ 481.850219][T27932] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.907658][ T6500] uclogic 0003:5543:0081.0002: failed retrieving pen parameters: -71 [ 481.946213][ T6500] uclogic 0003:5543:0081.0002: failed probing pen v2 parameters: -71 [ 481.974216][ T6500] uclogic 0003:5543:0081.0002: failed probing parameters: -71 [ 481.997440][T27937] mkiss: ax0: crc mode is auto. [ 482.025426][ T6500] uclogic: probe of 0003:5543:0081.0002 failed with error -71 [ 482.053500][ T6500] usb 8-1: USB disconnect, device number 35 [ 482.404035][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10785'. [ 482.580923][T27967] set_capacity_and_notify: 4 callbacks suppressed [ 482.580939][T27967] loop7: detected capacity change from 0 to 512 [ 482.602200][T27967] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 482.653639][T27967] EXT4-fs (loop7): 1 truncate cleaned up [ 482.653667][T27967] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 482.808727][T27957] loop5: detected capacity change from 0 to 32768 [ 482.943242][T27979] loop0: detected capacity change from 0 to 128 [ 482.998435][T27979] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 483.034072][T27979] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 483.400453][T24047] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 483.671311][T24047] usb 6-1: Using ep0 maxpacket: 16 [ 483.801203][T24047] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.816106][T28017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10813'. [ 483.820203][T24047] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.851388][T28017] tc_dump_action: action bad kind [ 483.947029][T28020] [ 483.949386][T28020] ====================================================== [ 483.956403][T28020] WARNING: possible circular locking dependency detected [ 483.963436][T28020] syzkaller #0 Not tainted [ 483.967849][T28020] ------------------------------------------------------ [ 483.974862][T28020] syz.1.10816/28020 is trying to acquire lock: [ 483.981015][T28020] ffff88801a784c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 483.992075][T28020] [ 483.992075][T28020] but task is already holding lock: [ 483.999446][T28020] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 484.009124][T28020] [ 484.009124][T28020] which lock already depends on the new lock. [ 484.009124][T28020] [ 484.019528][T28020] [ 484.019528][T28020] the existing dependency chain (in reverse order) is: [ 484.028540][T28020] [ 484.028540][T28020] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 484.036542][T28020] __mutex_lock_common+0x1e3/0x2400 [ 484.042283][T28020] mutex_lock_nested+0x17/0x20 [ 484.047573][T28020] rfkill_register+0x33/0x8a0 [ 484.052779][T28020] hci_register_dev+0x452/0x970 [ 484.058162][T28020] vhci_create_device+0x32c/0x5c0 [ 484.060996][T28008] loop0: detected capacity change from 0 to 32768 [ 484.063712][T28020] vhci_write+0x391/0x450 [ 484.074954][T28020] vfs_write+0x745/0xd60 [ 484.079726][T28020] ksys_write+0x152/0x260 [ 484.084584][T28020] do_syscall_64+0x4c/0xa0 [ 484.089527][T28020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.095957][T28020] [ 484.095957][T28020] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 484.100493][T24047] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.103780][T28020] __mutex_lock_common+0x1e3/0x2400 [ 484.103807][T28020] mutex_lock_nested+0x17/0x20 [ 484.123777][T28020] vhci_send_frame+0x88/0x100 [ 484.124495][T24047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.128988][T28020] hci_send_frame+0x1a9/0x2e0 [ 484.139621][T24047] usb 6-1: Product: syz [ 484.142126][T28020] hci_tx_work+0x9f9/0x1710 [ 484.142151][T28020] process_one_work+0x85f/0x1010 [ 484.146625][T24047] usb 6-1: Manufacturer: syz [ 484.151303][T28020] worker_thread+0xaa6/0x1290 [ 484.151328][T28020] kthread+0x436/0x520 [ 484.151342][T28020] ret_from_fork+0x1f/0x30 [ 484.151359][T28020] [ 484.151359][T28020] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 484.151385][T28020] __flush_work+0x116/0x210 [ 484.151401][T28020] hci_dev_do_open+0xc58/0x1270 [ 484.151420][T28020] hci_power_on+0x1c1/0x610 [ 484.151439][T28020] process_one_work+0x85f/0x1010 [ 484.151456][T28020] worker_thread+0xaa6/0x1290 [ 484.151473][T28020] kthread+0x436/0x520 [ 484.151488][T28020] ret_from_fork+0x1f/0x30 [ 484.151505][T28020] [ 484.151505][T28020] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 484.151528][T28020] __mutex_lock_common+0x1e3/0x2400 [ 484.160293][T24047] usb 6-1: SerialNumber: syz [ 484.161531][T28020] mutex_lock_nested+0x17/0x20 [ 484.243973][T28020] bg_scan_update+0x44/0x3b0 [ 484.249096][T28020] process_one_work+0x85f/0x1010 [ 484.254563][T28020] worker_thread+0xaa6/0x1290 [ 484.259773][T28020] kthread+0x436/0x520 [ 484.264372][T28020] ret_from_fork+0x1f/0x30 [ 484.269316][T28020] [ 484.269316][T28020] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 484.279136][T28020] __lock_acquire+0x2c42/0x7d10 [ 484.284515][T28020] lock_acquire+0x19e/0x400 [ 484.289541][T28020] __flush_work+0x116/0x210 [ 484.294566][T28020] __cancel_work_timer+0x3f4/0x560 [ 484.300192][T28020] hci_request_cancel_all+0xcc/0x300 [ 484.305996][T28020] hci_dev_do_close+0x4e/0x1030 [ 484.311350][T28020] hci_rfkill_set_block+0x10a/0x190 [ 484.317077][T28020] rfkill_set_block+0x1c6/0x420 [ 484.322426][T28020] rfkill_fop_write+0x452/0x560 [ 484.327776][T28020] vfs_write+0x30b/0xd60 [ 484.332518][T28020] ksys_write+0x152/0x260 [ 484.337357][T28020] do_syscall_64+0x4c/0xa0 [ 484.342271][T28020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.348677][T28020] [ 484.348677][T28020] other info that might help us debug this: [ 484.348677][T28020] [ 484.358885][T28020] Chain exists of: [ 484.358885][T28020] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 484.358885][T28020] [ 484.374607][T28020] Possible unsafe locking scenario: [ 484.374607][T28020] [ 484.382038][T28020] CPU0 CPU1 [ 484.387387][T28020] ---- ---- [ 484.392728][T28020] lock(rfkill_global_mutex); [ 484.397488][T28020] lock(&data->open_mutex); [ 484.404576][T28020] lock(rfkill_global_mutex); [ 484.411841][T28020] lock((work_completion)(&hdev->bg_scan_update)); [ 484.418413][T28020] [ 484.418413][T28020] *** DEADLOCK *** [ 484.418413][T28020] [ 484.426534][T28020] 1 lock held by syz.1.10816/28020: [ 484.431792][T28020] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 484.441858][T28020] [ 484.441858][T28020] stack backtrace: [ 484.447725][T28020] CPU: 0 PID: 28020 Comm: syz.1.10816 Not tainted syzkaller #0 [ 484.455253][T28020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.465462][T28020] Call Trace: [ 484.468725][T28020] [ 484.471666][T28020] dump_stack_lvl+0x188/0x250 [ 484.476351][T28020] ? load_image+0x400/0x400 [ 484.480834][T28020] ? show_regs_print_info+0x20/0x20 [ 484.486023][T28020] ? print_circular_bug+0x12b/0x1a0 [ 484.491216][T28020] check_noncircular+0x296/0x330 [ 484.496152][T28020] ? look_up_lock_class+0x71/0x110 [ 484.501261][T28020] ? add_chain_block+0x940/0x940 [ 484.506203][T28020] ? lockdep_lock+0xf1/0x1f0 [ 484.510793][T28020] ? __lock_acquire+0x12e8/0x7d10 [ 484.515805][T28020] ? mark_lock+0x94/0x320 [ 484.520120][T28020] ? _find_first_zero_bit+0xce/0xf0 [ 484.525319][T28020] __lock_acquire+0x2c42/0x7d10 [ 484.530174][T28020] ? add_lock_to_list+0x18d/0x280 [ 484.535183][T28020] ? verify_lock_unused+0x140/0x140 [ 484.540392][T28020] lock_acquire+0x19e/0x400 [ 484.544877][T28020] ? __flush_work+0xfa/0x210 [ 484.549443][T28020] ? __lock_acquire+0x7d10/0x7d10 [ 484.554448][T28020] ? read_lock_is_recursive+0x10/0x10 [ 484.559806][T28020] ? start_flush_work+0x776/0x820 [ 484.564812][T28020] __flush_work+0x116/0x210 [ 484.569293][T28020] ? __flush_work+0xfa/0x210 [ 484.573868][T28020] ? flush_work+0x20/0x20 [ 484.578173][T28020] ? try_to_grab_pending+0xfa/0x7f0 [ 484.583354][T28020] ? mark_lock+0x94/0x320 [ 484.587669][T28020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 484.593863][T28020] ? lock_chain_count+0x20/0x20 [ 484.598704][T28020] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 484.604600][T28020] ? _raw_spin_unlock+0x40/0x40 [ 484.609439][T28020] ? __cancel_work_timer+0x36a/0x560 [ 484.614715][T28020] __cancel_work_timer+0x3f4/0x560 [ 484.619833][T28020] ? cancel_work_sync+0x20/0x20 [ 484.624662][T28020] ? remove_wait_queue+0x120/0x120 [ 484.629758][T28020] ? cancel_work+0x20/0x20 [ 484.634160][T28020] ? lock_chain_count+0x20/0x20 [ 484.638995][T28020] hci_request_cancel_all+0xcc/0x300 [ 484.644283][T28020] hci_dev_do_close+0x4e/0x1030 [ 484.649114][T28020] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 484.650953][T24047] usb 6-1: 0:2 : does not exist [ 484.654990][T28020] ? _raw_spin_unlock+0x40/0x40 [ 484.655015][T28020] hci_rfkill_set_block+0x10a/0x190 [ 484.669862][T28020] ? rcu_lock_release+0x20/0x20 [ 484.674733][T28020] rfkill_set_block+0x1c6/0x420 [ 484.679602][T28020] rfkill_fop_write+0x452/0x560 [ 484.684488][T28020] ? rfkill_fop_read+0x4d0/0x4d0 [ 484.686979][T24047] usb 6-1: USB disconnect, device number 36 [ 484.689443][T28020] ? common_file_perm+0x110/0x1c0 [ 484.689471][T28020] ? fsnotify_perm+0x5d/0x560 [ 484.704994][T28020] ? security_file_permission+0x75/0xa0 [ 484.710558][T28020] ? rfkill_fop_read+0x4d0/0x4d0 [ 484.715510][T28020] vfs_write+0x30b/0xd60 [ 484.719760][T28020] ? file_end_write+0x250/0x250 [ 484.724597][T28020] ? __fget_files+0x40f/0x480 [ 484.729386][T28020] ? __fdget_pos+0x1e2/0x370 [ 484.733962][T28020] ? ksys_write+0x71/0x260 [ 484.738367][T28020] ksys_write+0x152/0x260 [ 484.742680][T28020] ? __ia32_sys_read+0x80/0x80 [ 484.747431][T28020] ? lockdep_hardirqs_on+0x94/0x140 [ 484.752620][T28020] do_syscall_64+0x4c/0xa0 [ 484.757024][T28020] ? clear_bhb_loop+0x30/0x80 [ 484.761690][T28020] ? clear_bhb_loop+0x30/0x80 [ 484.766381][T28020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.772288][T28020] RIP: 0033:0x7f1e80ada799 [ 484.776705][T28020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.796296][T28020] RSP: 002b:00007f1e7ed34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 484.804696][T28020] RAX: ffffffffffffffda RBX: 00007f1e80d53fa0 RCX: 00007f1e80ada799 [ 484.812654][T28020] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 484.820602][T28020] RBP: 00007f1e80b70bd9 R08: 0000000000000000 R09: 0000000000000000 [ 484.828551][T28020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.836499][T28020] R13: 00007f1e80d54038 R14: 00007f1e80d53fa0 R15: 00007ffc50099228 [ 484.844453][T28020] [ 485.010305][ T6500] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 485.370312][ T6500] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 485.379384][ T6500] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.389240][ T6500] usb 8-1: config 0 descriptor?? [ 485.431971][ T6500] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 485.860248][ T6500] gspca_cpia1: usb_control_msg 03, error -71 [ 485.880322][ T6500] gspca_cpia1: usb_control_msg 01, error -71 [ 485.886329][ T6500] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 485.895396][ T6500] usb 8-1: USB disconnect, device number 36