last executing test programs: 11m45.280470852s ago: executing program 32 (id=2083): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) 11m35.851770587s ago: executing program 5 (id=2188): setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) 11m35.637136487s ago: executing program 5 (id=2189): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000980)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 11m35.189797489s ago: executing program 5 (id=2193): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000001100)={[{@utf8}, {@utf8no}, {@fat=@nfs}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 11m34.577668571s ago: executing program 5 (id=2196): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 11m34.320170759s ago: executing program 5 (id=2198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}}}}]}, 0x38}}, 0x0) 11m32.71447029s ago: executing program 5 (id=2209): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000940)=0x6) 11m31.824210483s ago: executing program 33 (id=2209): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000940)=0x6) 7m25.621592493s ago: executing program 0 (id=5019): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0) pwrite64(r0, 0x0, 0x0, 0x2000008) 7m25.281711561s ago: executing program 0 (id=5022): syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="b3e5174b8aa9", @local, @void, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "3ca501700d4848065e5e770678f5a4d003d9f8c51da04f35fa5a70d32e6213bafdeff39137fa12ce4f66aafd8c1d9ac93caffd5c906ce13079136fb4baf30072"}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f10103010902"], 0x0) 7m22.342250491s ago: executing program 0 (id=5045): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x0, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 7m21.989226262s ago: executing program 0 (id=5047): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}], [], 0x2c}) 7m21.029450367s ago: executing program 0 (id=5055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="bb0d54bb", 0x4}], 0x1) 7m19.808166695s ago: executing program 0 (id=5061): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x3, 0xc6628414d33889a, 0x4, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10) 7m18.976079123s ago: executing program 34 (id=5061): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x3, 0xc6628414d33889a, 0x4, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10) 2m28.341567111s ago: executing program 8 (id=8361): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6bb23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c00"/193], 0xfc, 0xc41, &(0x7f0000001b80)="$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") link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2m27.88770381s ago: executing program 8 (id=8369): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000000)) 2m27.405751676s ago: executing program 8 (id=8374): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 2m27.020173732s ago: executing program 8 (id=8382): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) 2m26.384447632s ago: executing program 8 (id=8394): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') pread64(r0, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 2m24.427138346s ago: executing program 8 (id=8419): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) userfaultfd(0x80001) 2m23.747671459s ago: executing program 35 (id=8419): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) userfaultfd(0x80001) 1m51.765923123s ago: executing program 4 (id=8701): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, 0x0, 0x0) 1m51.346839848s ago: executing program 4 (id=8705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000210001002cbd7000fddbdf250a108004ff0000000401010014000100fc00000000000000000000000000000114000200ff0200000000000000000000000000010c001400c0"], 0x50}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) 1m50.822889679s ago: executing program 4 (id=8708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc810) 1m50.414022064s ago: executing program 4 (id=8711): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@umask={'umask', 0x3d, 0x8}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m49.560680204s ago: executing program 4 (id=8718): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x4, 0x14, "0000e000000000000000240a2ee700"}) 1m48.707670163s ago: executing program 4 (id=8728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000380)={[{@errors_remount}, {@nodiscard}]}, 0x8, 0x48d, &(0x7f0000001340)="$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") 1m47.73285986s ago: executing program 36 (id=8728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000380)={[{@errors_remount}, {@nodiscard}]}, 0x8, 0x48d, &(0x7f0000001340)="$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") 19.896818826s ago: executing program 7 (id=9557): r0 = epoll_create1(0x0) unshare(0x22020600) epoll_pwait(r0, 0x0, 0x0, 0x80000000, 0x0, 0x0) 19.44663819s ago: executing program 7 (id=9561): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) shutdown(r0, 0x1) 18.29767945s ago: executing program 7 (id=9574): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2b, 0x801, 0x0) splice(r1, 0x0, r0, 0x0, 0x39000, 0x9) 18.01489636s ago: executing program 7 (id=9577): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16.68657843s ago: executing program 7 (id=9592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000640)="3f8b749f49c5cd1f06d2dad26eabdc9d0bd607332ee57071e9d5156af87ee4c196fd01000000000000008724d411ac84d016e354a0e2824179d51d8c4ff24c0ed24bafa2ce69948792a2bc108492348f6c8b15c45362c4c3608099d48efaaf4495aa5d7d172929b4b796a9e96ffd87ce061f3606bc03ec23d5275dd3d0a001e18709415dcadb2fd451c380892085b411d9c05ae157e5d7be7bfb6c4a5fc9c1584b94ee519310fb905cced57e577436bcc4d8deca402a86e52e07b64f15279ae3b393bc6671804d27eedce127378e64e13d5c391d86820f80464eb01534ca5573404df646acd86aa20e251b92", 0xb47, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 15.813686573s ago: executing program 7 (id=9599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x607, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804) 14.854242955s ago: executing program 37 (id=9599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x607, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804) 9.854024387s ago: executing program 1 (id=9640): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file2\x00', 0x200900, &(0x7f0000000180)={[{@inode64}]}, 0x5, 0x9680, &(0x7f000001c300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20400, 0x0) getdents64(r0, 0x0, 0x2e) 6.696652474s ago: executing program 1 (id=9660): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0xf, 0x28, 0xfffff038}, {0x20, 0x1f, 0xf6, 0xfffff024}, {0x6, 0x80, 0xf2}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x4, 0x2}, {0x1, 0xb}}}, 0x24}}, 0x44880) 5.637790177s ago: executing program 2 (id=9665): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x1, @multicast1}, 0x10) listen(r0, 0xffffffff) 5.229708761s ago: executing program 2 (id=9669): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 5.151193985s ago: executing program 9 (id=9670): unshare(0x24060400) r0 = socket$inet(0x2, 0x1, 0x100) signalfd(r0, &(0x7f0000000000)={[0x10000]}, 0x8) 5.00345645s ago: executing program 2 (id=9672): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) 4.8497111s ago: executing program 9 (id=9673): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.250958541s ago: executing program 9 (id=9679): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.144319625s ago: executing program 6 (id=9684): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) 2.710304266s ago: executing program 3 (id=9687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 2.582293366s ago: executing program 3 (id=9688): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) 2.402862537s ago: executing program 3 (id=9689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) 2.213744843s ago: executing program 3 (id=9690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 2.104030214s ago: executing program 3 (id=9691): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.889838028s ago: executing program 2 (id=9692): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r0) 1.784580998s ago: executing program 1 (id=9693): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000100)={[{@utf8}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x362, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.626377397s ago: executing program 9 (id=9694): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) r0 = socket(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000180)=@known='security.apparmor\x00') 1.589842388s ago: executing program 6 (id=9695): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1, 0x1}) 1.49055126s ago: executing program 2 (id=9696): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 1.37779904s ago: executing program 9 (id=9697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x6, 0x201}, 0x14}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.352459208s ago: executing program 6 (id=9698): modify_ldt$write2(0x11, &(0x7f00000001c0)={0x4, 0xffffffffdfffefff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) modify_ldt$read(0x0, &(0x7f0000000500)=""/214, 0xd6) 1.116487607s ago: executing program 3 (id=9699): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 1.114088923s ago: executing program 1 (id=9700): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 1.076756451s ago: executing program 2 (id=9701): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x3, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x103, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x31, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.073666316s ago: executing program 9 (id=9702): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x200c451, &(0x7f0000000480)=ANY=[@ANYBLOB='iocharset=macgreek,quota,errors=remount-ro,integrity,nodiscard,noquota,discard=0x000000000000ffff\x00usrquota,discard=0x0000000000000009,gid=', @ANYRESDEC, @ANYBLOB="2c6e6f71756f74612c646973636172643d307830303030303030303030303030756d61736b3d3078303030303030303030303032303034342c646f6e745f61707072616973652c646566636f6e746578743d757365725f752c646f6e745f6170705c616973652c736d61636b6673726f6f743d657569643c2c00213ac47b0641c04240b162fdb7d7913b19ae8c3099d49ab55e270a942e2778b8bb045a8be17ad0359229e4ff78421b513476f67674104456560d59f8af3822ae5ec326acd8abcbf653501efb6592e41b73d307be1cd1dbbae773316015185d0d9704c377b0e2a8883e9c7c6bb580b3c22ea4b03fd5dcba8d4c4fe1e0d9dfa9bb954bbb628c7283ba0f6f22d84f59e9fde56cd4ee621d780ad18b15fe8903318dea0ffb3324067b19c4b702e44b896cd6e4c1981070754355eb04034023670a21b0b274bd1f", @ANYRES8], 0x1, 0x6201, &(0x7f000000c980)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVynSoi5SUJKK0s4soXDpz4C0BIHBHiiDjwB/TAlRsnTkSykUA9MdXYzxOPJ7tdp4531p7PR3JmfvPMep/xd2dfMjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD1Y6EXHtF2nBUsRnohfRjVgo6+WIWFheyuv3I+K52GmOZyNiMBdR3n7nn6cjXo2ID09HbG2vr5aLLx6wH9/90z9+/8NTb/39j4Pz//vz3d5r49a7d+/X//3L/cNtMwAAALRNURRFJ33MP5M+33eb7hQAMBX59b9I8vITX//mX2/9dZb6o1ar1Wr1FOqqYrT71SIiNqq3Kd8zOBwPAMfMRnzUdBdokPxbrR8Rp5ruBDDTOk13gCOxtb2+2kn5dqqvB8u77flckH35b3QeXt8xbjpJ/RyTaT2+NqMXz4zpz8KU+jBLcv7dev7XdtuHab2jzn9axuU/3L30qXVy/r16/jUnJ//uyPzbKufff6z8e/IHAAAAAIAZlv//f6nh479zh9+UA/mk47/LU+oDAAAAAAAAADxphx3/7yHj/wEAAMDMKj+rl357em/ZuO9iK5df7UQ8VVsfaJl0scxi0/0AAAAAAAAAAAAAgDbp757De7UTMYiIpxYXi6Iof6rq9eM67O2Pu7ZvP7RZ00/yAACw68PTtWv5OxHzEXE1fdffYHFxsSjmFxaLxWJhLr+fHc7NFwuVz7V5Wi6bGx7gDXF/WJS/bL5yu6pJn5cntdd/X3lfw6J3gI49IYP01xzT3FDYAJDsvhpteUU6YYri6XFvPmAf+/8JtBRLTT+umH1NP0wBAACAo1cURdFJX+d9Jh3z7zbdKQBgKvLrf/24wKHq7pj2iCfz+9VqtVqtVn+quqoY7X61iIiN6m3K9wyG4weAY2YjPmq6CzRI/q3Wj4jnmu4EMNM6TXeAI7G1vb7aSfl2qq8HaXz3fC7Ivvw3Oju3y7cfNZ2kfo7JtB5fm9GLZ8b059kp9WGW5Py79fyv7bYP03pHnf+0jMt/uHPJXPvk/Hv1/GtOTv7dkfm3Vc6//1j59+QPAAAAAAAzLP///5Ljv3mTAQAAAAAAAODY2dpeX83Xvebj/58bsZ7rP0+mnH/ncfNfSPPyP9Zy/t1a/l+urderzD94c2///8/2+uof7v77s3l60Pzn8kwnPbI66RHRSffU6afpYbbuUZuD3rC8p0Gn2+unc36KwY24GbdiLS7sW7eb/h577Sv72sueDva1X9zX3n+k/dK+9kH63oFiIbefi9X4SdyKt3fay7a5Cds/P6G9mNCe8+95/m+lnH+/8lPmv5jaO7Vp6cEH3Uf2++p01P28cfPzv7pw9Jsz0Wb0Hm5bVbl9Zxvoz87f5NQwfn5n7fa5e9fv3r29Emmyb+nFSJMnLOc/2PmZ23v+f2G3PT/vV/fXBx8MHzv/WbEZ/bH5v1CZL7f3pSn3rQk5/2H6yfm/ndpH7//HOf/x+//LDfQHAAAAAAAAAAAAAAAAPklRFDuXiL4REZfT9T9NXZsJAExXfv0vkrxcPaX6xs9mqz9qtVqtPtF1VTHa69UiIv5WvU35nuGXo34ZADDL/h8R/2y6EzRG/i2Wv++vnL7YdGeAqbrz3vs/un7r1trtO033BAAAAAAAAAD4tPL4n8uV8Z9fjIil2nr7xn99M5YPO/5nP888HGD0CQ/0PcZmd9jrVoYbfz52xuc+N27877Px6PjfeUzcXnU7xhhMaB9OaJ+b0D4/culeWiMv9KjI+T9fGe+8zP9Mbfj1Noz/Wh/zvg1y/mcrj+cy/y/V1qvmX/xu5vLfOOiKm9Hdl//5u+/+9Pyd995/5ea7199Ze2ftx5dWVi5cunz5ypUr52/cvLV2Yfffo+n1DMj557GvnQfaLjn/nLn82yXn/4VUy79dcv5fTLX82yXnn9/vyb9dcv75s4/82yXn/1Kq5d8uOf+vpFr+7bK1vT5X5v9yquXfLnn//2qq5d8uOf9XUi3/dsn5n0u1/Nsl538+1QfI39fDnyA5/3yEy/7fLjn/lVTLv11y/hdTLf92yflfSrX82yXn/2qq5d8uOf+vpVr+7ZLzv5xq+bdLzv/rqZZ/u+T8r6Ra/u2S8/9GquXfLjn/b6Za/u2S838t1fJvl5z/t1It/3bJ+X871fJvl5z/d1It/3bJ+b+eavm3y973/5sxY8ZMnmn6mQkAAAAAAAAAAAAAqJvG6cRNbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMwOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFyneUdwM+sd9drhxADITipgU1iQkiW7NpO/EGbYsJnA5QCCYV+4LjetVnwF167BIpk00CJhFFRRdX0oi0g1EaqKiLEBa0ozUXVj6vSXtCbiqoSUqMqoICK1CLKVjPnfd+dmZ2d2fWO12fP+/tJybM7c86cd8685+w8u/7PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2t75+7tONoiia/7X+t6Montf8etvkjtZtr7nWIwQAAADW6/9a/3/uhnTD4VWs1LbM37/sn762uLi4WLx3y++PfX5xMd0xWRRjW4uidV/01H+8r9G+TPBYMdEYaft+ZMDmtwy4f3TA/WMD7h8fcP/WAfdPDLh/2Q5YZlv5+5jWg+1ufbmj3KXFjcVY677dPdZ6rLF1ZCT+Lqel0Vpncex4MV+cLOaKmY7ly2UbreW/cWtzW28p4rZG2ra1qzlDfvDxY3EMjbCPd3dsa+kxo++9rpj84Q8+fuxPzz97c686cDd0PF45zjtva47zk+GWcqyNYmvaJ3GcI23j3NXjNdnSMc5Ga73m193jfG6V49yyNMwN1f2aTxQjra+/1dpPo+2/1kv7aVe47X9uL4ri0tKwu5dZtq1ipNjeccvI0uszUc7I5mM0p9ILi9E1zdNbVzFPm3V2d+c87T4m4ut/a1hvdIUxtL9M3/vE+LLXfa3zNGo+65WOle45OOxjpSpzMM6Lb7We9OM95+Du8Pw/fsfKc7Dn3OkxB9PzbpuDtw2agyPjW1pjTi9Co7XO0hzc07H8ltaWGq36zB395+D0+VNnpxc++rFXz586emLuxNzpfXv2zOzbv//gwYPTx+dPzs2U/7/CvV1924uRdAzcFvZdPAZe2bVs+1Rd/OLwjsOJPsfhjq5lh30cjnY/ucbGHJDL53R5bDzU3OkTl0eKFY6x1utz1/qPw/S8247D0bbjsOfPlB7H4egqjsPmMmfvWt17ltG2/3qN4Wr9LNjRNge73490z8Fhvx+pyhycCPPi3+5a+WfBrjDex6fiHFz6Sdn//ciWZXMwPd1w7mnekt7vTxxslV7z8pbmHdeNFxcW5s7d8+jR8+fP7SlC2RAvapsr3fN1e9tzKpbN15E1z9fD8y97/JYet+8I+2ri1c3/Taz4WjWXufee/u8dWz/deu/Pjlv3FqEM2Ubvz14/zZv7M/WSffZnc5lPTq//vXjqS9vOv2MrnH9j3//TcnvpoR7bMjZaHr9b0t4Z6zgfd75Uo61zV6O17eemV3c+Hgv/bfT5+MY+5+OdXcsO+3w81v3k4vm4Mei3HevT/XpOhHlycqb/+bi5zM69a52To33Px7eH2gj7/1WhU0hn+7a5s9K8TdsaHR0Lz2s0bqFznu7rWH4s9GbNbT2598rm6Z23l4+1JT27JRs1Tye7lh32PE3nq5XmaWPQb9+uTPfrORHmxY37+s/T5jJP37v+c+e2+GXbuXN80Bwc2zLeHPNYmoTl+X5xW5yD9xTHijPFyWK2de94az41Wtuaum91c3A8/LfR58qdfebgnV3LDnsOpp9jK829xujyJz8E3a/nRJgXT9zXfw42l3nDgbXOwf7vXe8Mt6Rl2t67dv9+baXfed3StZuu5u+8muP82wP9fzfbXObkwbX2mf33093hlut67Kfu43elY2q22Jj9tDOM89mDK++n5niay3z+0Crn0+GiKC5++IHW73vD31e+euHbX+v4u0uvv+lc/PAD37/++N+tZfwAbH4/Lcv28mdd21+mVvP3fwAAAGBTiH3/SKiJ/h8AAABqI/b98V+FJ/p/AAAAqI3Y94+GmmTS/+98w7PzP71YpGT+YhDvT7vhwXK5mHGdCd9PLi5p3v7Al+d+9FcXV7ftkaIofvLgb/VcfueDcVylyTDOp97YefvyFS+uavuPPLy0XHt+/Qvh8ePzWe006BXBnSmK4hs3fLa1ncn3XW7Vpx98pFXfdenxx5rLPHeo/D6u/8yLyuX/KIR/Dx8/2rH+M2E/fDfUmbf23h9xva9cftWuA+9Z2l5cr3Hb81tP+4n3l48bPyfnc4+Vy8f9vNL4//ozT36lufyjr+g9/osjvcf/ZHjcL4f6vy8tl29/DZrfx/U+FcYftxfXu+dL3+w5/qc+XS5/9k3lco+EGrd/Z/h+95uenW/fX482jnY8r+LN5XJx+zPf/t3W/fHx4uN3j3/iyOWO/dE9P57+l/JxpruWj7fH7UR/2bX95uO0z8+4/Sd/55GO/Txo+0+965mXNh+3e/t3dy23pWv97k9s+uNPfbbn9uJ4Dv/F2Y7nc/id4TgO23/i/WE+hvt//NRnO7YbPfLOzvNPXP4LOy52PJ/oLT8st//Ua0+06n9O/ugPr3ve9c+/9PLmviuKb727fLxB2z/xJ2c6xv/Fm+5qvR7x/pjR797+SuL2z31k6vSZhQvzs217tfXZOW8rx7N1Ytv25nhvCOfW7u+PnDn/gblzkzOTM0UxWd+P0LtiXwr1+2W5tNb173o4vJ63/ME3tt/xz5+Jt//rQ+Xtl99a/tx6ZVjuc+H2HeXrt9hY5/afuPWm1vHdeLr8viPHPgS7dv/XwVUtGJ5/9/uCON/PvvgDrf3QvK/1cyMe1+sc/3dmy8f5etivi+GTmW+7aWl77cvHz0a4/O7yeF/3/gunufi6/ll4vd/+3fLx47ji8/1OeB/zzZ2d57s4P75+caT78Vuf4nEpnE+KS+X9cam4vy8/d1PP4cXPISku3dz6/vfS49y8pqe5koWPLkyfnD994dHp83ML56cXPvqxI6fOXDh9/kjrszyPfHDQ+kvnp+2t89Ps3P57i5ltRVGcKWY24IR1dcbf/Gp14z/78LHZAzN3zM4dP3rh+PmHz86dO3FsYeHY3OzCHUePH5/7yKD152fv37P30L4De6dOzM/ef/DQoX2HpuZPn2kOoxzUAPtnPjR1+tyR1ioL9997aM999907M3XqzOzc/QdmZqYuDFq/9bNpqrn2b06dmzt59Pz8qbmphfmPzd2/59D+/XsHfhrgqbPHFyanz104PX1hYe7cdPlcJs+3bm7+7Bu0PvW08O/l+9lujfKD+Ip33L0/fT5r05c/seJDlYt0fYDos+GzaP7xBWcPrub72PePhZpk0v8DAABADmLfPx5qov8HAACA2oh9/9ZQE/0/AAAA1Ebs+ydCTTLp/+X/5f9Xl/8v75f/zyv/f/bDZa50s+f/Y35e/j8P1zj/v+7ty//L/9cv/7/6/PxmH7/8v/w/y1Ut/x/7/m1FkWX/DwAAADmIff/2UBP9PwAAANRG7PuvCzXR/wMAAEBtxL7/eaEmmfT/8v+ryv/vHRS4qn/+3/X/5f+LzZn/jy+O/H821py/f89DHd/K/wfy//L/8v/y//L/rNvYivdcq/x/7PuvDzXJpP8HAACAHMS+//mhJvp/AAAAqI3Y998QaqL/BwAAgNqIff+OUJNM+n/5f9f/l/+X/691/n+91/9vG4z8/+bg+v/9yf8PcMX5/wn5/82Y/x8b7virnf8fOHz5f66Kql3/P/b9Lwg1yaT/BwAAgBzEvv+FoSb6fwAAAKiN2Pe/KNRE/w8AAAC1Efv+G0NNMun/5f/l/+X/5f/l/3tvf/D1/8uv5P+rRf6/P/n/AVz/P6/8/5DHX+38/7Cv/z/2xu715f/ppWr5/9j3vzjUJJP+HwAAAHIQ+/6bQk30/wAAAFAbse9/SaiJ/h8AAABqI/b9O0NNMun/5f/l/+X/5f/l/3tvf3D+vyT/Xy3y//3J/w9Qpfz/xPLhyf9Xe/xZ5f97vPmV/6eXquX/Y99/c6hJJv0/AAAA5CD2/beEmuj/AQAAoDZi3/8zoSa9+v8e/w4LAAAAqL7Y9+8KNcnk7//y//L/8v955f/vHpf/l/+vN/n//uT/B6hS/r8H+f9qjz+r/H8Pa8n/bx30YNRG1fL/se9/aahJJv0/AAAA5CD2/S8LNdH/AwAAQG3Evv/loSb6fwAAAKiN2PdPhppk0v/L/9cr///nf/PEywv5f/n/Aduvaf4/TgP5/8zJ//cn/z+A/L/8v/z/huT/yUfV8v+x77811CST/h8AAAByEPv+20JN9P8AAABQG7Hvvz3URP8PAAAAtRH7/t2hJpn0//L/9cr/R/L/8v/9tl/T/H8i/583+f8e2g5S+f8B5P/l/7PP/8d3v/L/DEfV8v+x739FqEkm/T8AAADkIPb9d4Sa6P8BAACgNmLf/8pQE/0/AAAA1Ebs++8MNdmE/f+PryAjKP8v/y//L/8v/997+/L/m5P8f39rzf+Py//L/8v/Z5b/d/1/hqtq+f/Y978q1GQT9v8AAABAb7HvvyvURP8PAAAAtRH//Wb57171/wAAAFBHse+fCjXJpP+X/5f/zyn/35D/l/+X/689+f/+XP9/APl/+X/5f/l/hqpq+f/Y97861CST/h8AAAByEPv+e0JN9P8AAABQG7Hvnw410f8DAABAbcS+fybUJJP+X/5f/j+n/L/r/8v/y//Xn/x/f/L/A8j/y//XLf9fFPL/XFNVy//Hvn9PqEkm/T8AAADkIPb9e0NN9P8AAABQG7Hv3xdqov8HAACA2oh9/72hJpn0//L/8v/y//L/8v+9ty//vznJ//cn/z+A/L/8f93y/67/zzVWtfx/7PvvCzXJpP8HAACAHMS+f3+oif4fAAAAaiP2/QdCTUL/3+vfdQMAAACbS+z7D4aaZPL3f/n/muT/f/sfOrYt/y//32/7w8n/b5P/D1X+v1pqmv/vPiyumPz/APL/a8/Pb1v6Uv5f/l/+n25Vy//Hvv9QqEkm/T8AAADkIPb9rwk10f8DAABAbcS+/2dDTfT/AAAAUBux7/+5UJNM+n/5/5rk/7vI/8v/99u+6//L/9dZTfP/Q1Or/P+I/H8l8v9t5P+PzR4Yl/+X/6fd1c//x69Wl/+Pff/9oSaZ9P8AAACQg9j3/3yoif4fAAAAaiP2/a8NNdH/AwAAQG3Evv9wqEkm/b/8v/y//L/8/9XJ/7+26HZN8v/xxhXy/83JI/9fL/L//dUq/+/6//L/FRt/va7/XzTk/xmGql3/P/b9rws1yaT/BwAAgBzEvv+BUBP9PwAAANRG7PtfH2qi/wcAAIDaiH3/G0JNMun/V5X//6r8/yDy/53jl//vPT/yyv+7/n83+f+NIf/fn/z/APL/8v/y/67/z1BVLf8f+/43hppk0v8DAABADmLf/6ZQE/0/AAAA1Ebs+98caqL/BwAAgNqIff9bQk0y6f9d/1/+X/5f/l/+v/f25f83p02Z/z+x9KX8v/y//P/mHb/8v/w/y1Ut/x/7/l8INcmk/wcAAIAcxL7/wVAT/T8AAADURuz73xpqov8HAACA2oh9/9tCTTLp/+X/5f/l/+X/5f97b1/+f3PalPn/NvL/8v/y/5t3/OvK/8dJIP9PzVQt/x/7/reHmmTS/wMAAEAOYt//i6Em+n8AAACojdj3vyPURP8PAAAAtRH7/l8KNcmk/5f/l/+vVv5/8WL7evL/8v/FsPL/zZXk/7Mg/9+f/P8APfL/W+X/5f9d/1/+nytWtfx/7PvfGWqSSf8PAAAAOYh9/7tCTfT/AAAAUBux7393qIn+HwAAAGoj9v0PhZpk0v/L/2eZ/09PuXr5f9f/l/93/X/5//WR/+9P/n8A1/+X/5f/l/9nqKqW/499/8OhJpn0/wAAAJCD2Pe/J9RE/w8AAAC1Efv+Xw410f8DAABAbcS+/72hJpn0//L/Web/K3z9/7rl/0c75kdO+f+JttczzUv5f/n/DSD/35/8/wDy//L/Vc7/h9m8bYX15f+poqrl/2Pf/75Qk0z6fwAAAMhB7Pt/JdRE/w8AAAC1Efv+Xw010f8DAABAbcS+/9dCTTLp/+X/5f/l/13/3/X/e29f/n9zkv/vT/5/APl/+f8q5/8HkP+niqqW/499/6+HmqzY+H3/v1fxNAEAAIAKiX3/+0NNMvn7PwAAAOQg9v1HQk30/wAAAFAbse9/JNQkk/5f/r87/x+vqCr/L/8v/y//L/+/GQ0v//+S64tC/l/+X/5f/l/+X/6f9aha/j/2/UdDTTLp/wEAACAHse//jVAT/T8AAADURuz7j4Wa6P8BAACgNmLfPxtqkkn/fw3z/2PVzP+7/v+V5v9/Iv8v/x/I//cm/78xXP+/P/n/AeT/5f/l/+X/Gaqq5f9j3z8XapJJ/w8AAAA1ln4dHPv+46Em+n8AAACojdj3nwg10f8DAABAbcS+/wOhJpn0/67/L//v+v/XIv8/2rG8/H9J/l/+fxjk//uT/x9A/l/+X/5f/p+hqlr+P/b986EmmfT/AAAAkIPY938w1ET/DwAAALUR+/4PhZro/wEAAKA2Yt9/MtQkk/5f/l/+P/f8f6MoLrn+v/x/r+3L/29O8v/9yf8PIP8v/y//L//PUFUt/x/7/lOhJpn0/wAAAPw/e/fxJNdZ/X+8HZQWYP4E1qxYUbAyfwHFlp2rWJNNDrbJGUzOwYBNzhkDxuScczI5R5NsqBKl0TlH09Ote0dSz/S9z/N6bQ5WSb9p4bGpz0/fdz30IHf//eMW+x8AAACakbv/AXGL/Q8AAADNyN3/wLilk/2v/9f/997/L7by/v/yz9f/n6b/1/9vwkp/f+n6n3e2KPys/f9d737lFfp//b/+f5D+X/+v/2evqfX/ufsfFLd0sv8BAACgB7n7Hxy32P8AAADQjNz9D4lb7H8AAABoRu7+K+OWTva//l//r//X/y/1/zfp//X/8+b9/2H6/xH6f/2//l//z0ZNrf/P3f/QuKWT/Q8AAAA9yN3/sLjF/gcAAIBm5O5/eNxi/wMAAEAzcvc/Im7pZP/r//X/+v+59P9Hvf+/5/ej/9f/r6P/H6b/H6H/1//r//X/bNTU+v/c/Y+MWzrZ/wAAANCD3P2PilvsfwAAAGhG7v5Hxy32PwAAADQjd/9j4pZO9r/+X/+v/59L/39I7//r/w+s/z+h/z8U1y3O/DtB/79K/z9ipP9fLPT/Q/bdz6//7c3n85+F/l//z6qp9f+5+x8bt9xzsTh6vr9JAAAAYFJy9z8ubunkz/8BAACgB7n7r4pb7H8AAABoRu7+q+OWTva//l//r//X/+v/13997//Pk/f/h114/3+XO93vvv32/97/H+b9/033/6e+M/T/zNvU+v/c/dfELZ3sfwAAAOhB7v7Hxy32PwAAADQjd/8T4hb7HwAAAJqRu/+JcUsn+1//31r/f8nSr9vV/+/ULvp//b/+X//fOv3/MO//j9j519yJ+kv9v/7f+//6fwbs48H8qfX/ufufFLd0sv8BAACgB7n7nxy32P8AAADQjNz9T4lb7H8AAABoRu7+p8Ytnez/Tfb/2cLq/0/z/r/+f+/3h/5f/6//P3j6/2H6/xGtvP9/nt812+7nL9S2P7/+X//Pqqn1/7n7nxa3dLL/AQAAoAe5+58et9j/AAAA0Izc/c+IW+x/AAAAaEbu/mfGLZ3sf+//6//n0f/nV9D/6/8Pvv9P+v950v8P0/+PaKX/P0/b7ufn/vn1//p/Vk2t/8/d/6y4pZP9DwAAAD3I3f/suMX+BwAAgGbk7n9O3GL/AwAAQDNy9z83bulk/0+k/79h5XPp/3fo/73/r//3/r/+/9w01v8fO9dfP0b/P0L/r/9vpP+/+Yrr73Xqx/T/bNvU+v/c/dfGLZ3sfwAAAOhB7v7nxS32PwAAADQjd//z4xb7HwAAAJqRu/8FcUsn+38i/f/q59L/79D/6//1//p//f+5aaz/9/6//n+J/n/an39K/b/3/5mKCfX/u37V8cUL45ZO9j8AAAD0IHf/i+IW+x8AAACakbv/xXGL/Q8AAADNyN3/krilk/2v/59M/7+T87XV/59YLBb6/0Wn/f+JXX8/6/tS/6//PwT6/2H6/xH6f/2//l//z0ZNqP/f+evc/S+NWzrZ/wAAANCD3P0vi1vsfwAAAGhG7v6Xxy32PwAAADQjd/8r4pZO9r/+fzL9/462+n/v/+/9/uip//f+/yr9/+HQ/w/T/4/Q/+v/9f/6fzZqav1/7v5Xxk1Hj5z3bxEAAACYmNz9r4pbOvnzfwAAAOhB7v5Xxy32PwAAAMzUtSs/krv/NXFLJ/tf/7/Z/v/orh/T/+v/935/6P/1//r/g6f/H6b/H6H/1/+32P9fpP9ne6bW/+fuf23c0sn+BwAAgB7k7r8ubrH/AQAAoBm5+18Xt9j/AAAA0Izc/a+PWzrZ//p/7//r//X/+v/1X1//P0/6/2H6/xH6f/3/dvv/Y2f+o/f/acM59P8nT5686sD7/9z9b4hbOtn/AAAA0IPc/dfHLfY/AAAANCN3/w1xi/0PAAAAzcjd/8a4pZP9r//vtP/Pb/V59f9XLxb6f/2//l//P0z/P0z/P0L/r/9v8f1//T9bNLX3/3P3vylu6WT/AwAAQA9y9785brH/AQAAoBm5+98St9j/AAAA0Izc/W+NWzrZ//r/Tvt/7//r//X/h93/377Q/x+KWfT/J87+9afe/1+j/9f/D+iu/7/3PZb+Uv+v/2fV1Pr/3P1vi1s62f8AAADQg9z9b49b7H8AAABoRu7+d8Qt9j8AAAA0I3f/O+OmSzvZ/xPp/++48rn0/zsOuP8/mj9f/6//1/9v/f3/U/886v83YBb9/4Cp9/+bef9/7z/lZ+j/9f9z/vz6f/0/q6bW/+fuf1fc0sn+BwAAgB7k7n933GL/AwAAQDNy978nbrH/AQAAoBm5+98bt3Sy/yfS/69+Lv3/Du//6//1/xvo/6+ZRf/v/f8N0f8Pm0b/f3b6f/3/nD+//l//z/5tq//P3f++uKWT/Q8AAAA9yN3//rjF/gcAAIBm5O7/QNxi/wMAAEAzcvd/MG7pZP/r//X/59L/5+fU/7fV/x+bXP9/fOn/vU7e/9f/b4j+f5j+f4T+X/+v/79W/88mTe39/9z9H4pbOtn/AAAA0IPc/R+OW/9ft/Y/AAAANCN3/0fiFvsfAAAAmpG7/8a4pZP9r//X/3v/X//f/Pv/+v+u6P+H6f9H6P/1//p/7/+zUVPr/3P3fzRu6WT/AwAAQA9y938sbrH/AQAAoBm5+z8et9j/AAAA0Izc/TfFLZ3sf/2//l//r//X/5/+e6j/b4P+f9jh9P8n9P/6/+rnL4p/CvT/+v+xX09T7naH+A9T6/9z938ibulk/wMAAEAPcvffHLfY/wAAANCM3P2fjFvsfwAAAJilS9f8WO7+T8Utnex//b/+X/+v/9f/r//6+v952kr/n98U+n/v/4d++v87L/3V3N7/3/u/X/p//T+bN7X+P3f/p+OWTvY/AAAA9CB3/2fiFvsfAAAAmpG7/7Nxi/0PAAAAzcjd/7m4pZP9r//X/+v/9f/6//VfX/8/T97/H6b/H6H/3+r7+XP//Pp//T+rptb/5+7/fNzSyf4HAACAHuTu/0LcYv8DAABAM3L3fzFusf8BAACgGTu7P+OyDve//l//r//X/+v/1399/f886f+H6f9H6P/1//p//T8bNbX+/0s7v+r44stxSyf7HwAAAHqQu/8rcYv9DwAAAM3I3f/VuMX+BwAAgGbk7v9a3NLJ/tf/6//n0f+fPHnyKv2//n/593Om/79F/0/Z3d9ftud/0/ZD/x/0//p//b/+X//PBkyt/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy938rbulk/+v/J9D/Hz+I/v/Ioq3+3/v/+n/v/+v/98f7/8P0/yNa7P+P7/+3v+1+/kJt+/Pr//X/rJpa/5+7/9txSyf7HwAAAHqQu/87cYv9DwAAAM3I3f/duMX+BwAAgGbk7v9e3NLJ/tf/H17/f+q/u17e/z+xWP/59f/6f/2//v+g6f+H6f9HtNj/n4Nt9/Nz//z6f/0/q6bW/+fu/37csjz8juz+i2P7+p0CAAAAU5G7/wdxSyd//g8AAAA9yN3/w7jF/gcAAIBm5O7/UdzSyf7X/0/g/f8G+3/v/6///tD/T7r/v1j/3wb9/zD9/wj9v/5f/7+h/j+/m/X/vZta/5+7/8dxSyf7HwAAAHqQu/8ncYv9DwAAAM3I3f/TuMX+BwAAgGbk7r8lbtm1/9e13a3Q/+v/9f/6f/3/+q+v/58n/f+w/fb/xxYX1v8n/b/+X//fa//v/X9Om1r/n7v/Z3GLP/8HAACA2Tlylh/P3f/zuMX+BwAAgGbk7v9F3GL/AwAAQDNy9/8ybrn14m19pEOl/9f/6//1//r/9V9f/z9Pfff/x0d/hvf/R+j/N9HPX67/b6P/Xyz0/1y4qfX/uft/Fbf4838AAABoRu7+X8ct9j8AAAA0I3f/b+IW+x8AAACakbv/t3FLJ/tf/99c/3/J4nD7/500U/9/mv7/NP3/evr/w9F3/z9O/z9C/+/9f/2/9//ZqKn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3s/631//Ff9Sz7/9tWY8IJ9f9Lv877//r/dV9f/6//b5n+f5j+f4T+X/+v/9f/s1FT6/9z9/8pbulk/wMAAEAPcvf/OW6x/wEAAKAZufv/ErfY/wAAANCM3P1/jVs62f/e/2/u/f+lX6f/1/+v+/r6f/1/y/T/w/T/69XfKP2//l//r/9no6bW/+fu/1vc0sn+BwAAgB7k7v973GL/AwAAQDNy998at9j/AAAA0Izc/f+IWzrZ//p//b/+X/+v/1//9fX/86T/H7bN/v8+l41/We//b73/z4+g/9f/6//ZiKn1/7n7/xm3dLL/AQAAoAe5+/8Vt9j/AAAA0Izc/f+OW+x/AAAAaEbu/v/ELZ3s/5H+/1j9RP3/IP3/8ufX/6///tD/6//1/wdP/z/M+/8j9P/e/9f/6//ZqKn1/7n7b4tbOtn/AAAA0IPc/bfHLfY/AAAAzM+6/wPtxaJ2/3/jFvsfAAAAmpG7/39xSyf73/v/c+r/L9f/6//1//p//f8I/f8w/f+I7vr/G5f+Fb7tfv5Cbfvz6//1/6yaWv+fu///AQAA//9gi1kM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fsync(r0) 913.743259ms ago: executing program 6 (id=9703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000010) 589.346465ms ago: executing program 6 (id=9704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 372.330248ms ago: executing program 1 (id=9705): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup3(r1, r0, 0x0) 81.652607ms ago: executing program 6 (id=9706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x3c}}, 0x80d4) 0s ago: executing program 1 (id=9707): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 9][T10440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 868.336236][T10440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 868.349084][T10440] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 868.372039][T10440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.382537][T10440] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 868.496193][T26674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 868.506779][T26674] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 868.514728][T26674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 868.531292][T26674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.543209][T26674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 868.638807][ T8313] loop7: detected capacity change from 0 to 4096 [ 868.751915][ T8313] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 868.898701][ T49] bridge_slave_1: left allmulticast mode [ 868.904398][ T49] bridge_slave_1: left promiscuous mode [ 868.980667][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.010180][ T8313] ntfs3(loop7): ino=19, mi_enum_attr [ 869.024637][ T8313] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 869.135528][ T49] bridge_slave_0: left allmulticast mode [ 869.179946][ T49] bridge_slave_0: left promiscuous mode [ 869.235317][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.566551][ T8391] loop2: detected capacity change from 0 to 1764 [ 869.762290][ T8391] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 869.826334][ T8401] loop4: detected capacity change from 0 to 256 [ 869.952289][ T8401] exfat: Deprecated parameter 'utf8' [ 870.006895][ T8401] exfat: Deprecated parameter 'namecase' [ 870.060418][ T8401] exfat: Deprecated parameter 'utf8' [ 870.110022][ T8406] loop7: detected capacity change from 0 to 2048 [ 870.158448][ T8401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 870.204389][ T8406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.276122][ T8401] Invalid source name [ 870.555840][T26674] Bluetooth: hci1: command tx timeout [ 870.601664][ T8365] loop6: detected capacity change from 0 to 32768 [ 870.634227][ T8426] loop2: detected capacity change from 0 to 1024 [ 870.653853][ T8365] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 870.750886][ T8426] hfsplus: filesystem is marked journaled, leaving read-only. [ 870.800012][ T8382] loop3: detected capacity change from 0 to 32768 [ 870.840301][ T8365] XFS (loop6): Ending clean mount [ 871.165595][ T8451] vivid-003: ================= START STATUS ================= [ 871.173275][ T8451] vivid-003: Radio HW Seek Mode: Bounded [ 871.279641][ T8451] vivid-003: Radio Programmable HW Seek: false [ 871.281629][T14095] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 871.286160][ T8451] vivid-003: RDS Rx I/O Mode: Block I/O [ 871.342157][ T8451] vivid-003: Generate RBDS Instead of RDS: false [ 871.393467][ T8451] vivid-003: RDS Reception: true [ 871.398587][ T8451] vivid-003: RDS Program Type: 0 inactive [ 871.489492][ T8451] vivid-003: RDS PS Name: inactive [ 871.494781][ T8451] vivid-003: RDS Radio Text: inactive [ 871.641202][ T8451] vivid-003: RDS Traffic Announcement: false inactive [ 871.648069][ T8451] vivid-003: RDS Traffic Program: false inactive [ 871.761759][ T8451] vivid-003: RDS Music: false inactive [ 871.795779][ T8451] vivid-003: ================== END STATUS ================== [ 872.536972][T26674] Bluetooth: hci1: command tx timeout [ 872.613065][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8465'. [ 872.881232][ T8504] loop3: detected capacity change from 0 to 4096 [ 872.935919][ T8504] ntfs3(loop3): It is recommened to use chkdsk. [ 872.937303][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.955166][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 872.984499][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.013490][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 873.053941][ T49] bond0 (unregistering): Released all slaves [ 873.062044][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 873.079513][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 873.087724][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 873.096052][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 873.108322][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 873.116673][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 873.129871][ T8504] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 873.160183][ T49] bond1 (unregistering): Released all slaves [ 873.535038][ T8524] program syz.6.8473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 873.652908][ T30] audit: type=1107 audit(891.261:1453): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 874.495285][ T8570] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8484'. [ 874.520382][T26674] Bluetooth: hci1: command tx timeout [ 874.671384][ T8578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.140556][ T8601] netlink: 'syz.3.8493': attribute type 6 has an invalid length. [ 875.994856][ T8635] nbd: couldn't find a device at index -1605786504 [ 876.508528][T26674] Bluetooth: hci1: command tx timeout [ 876.951231][ T8613] loop2: detected capacity change from 0 to 32768 [ 876.977222][ T8613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8496 (8613) [ 877.018443][ T8618] loop6: detected capacity change from 0 to 32768 [ 877.071538][ T8618] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8498 (8618) [ 877.203221][ T8618] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 877.217693][ T8613] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 877.256247][ T8618] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 877.268460][ T8613] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 877.485772][ T8688] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 877.709744][ T8630] loop3: detected capacity change from 0 to 32768 [ 877.770440][ T8630] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 1fd5c5ab-4e64-4b4d-9652-3cd03172c987 [ 877.851905][ T8630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8502 (8630) [ 877.896489][ T8618] BTRFS info (device loop6): enabling ssd optimizations [ 877.922404][ T8618] BTRFS info (device loop6): enabling free space tree [ 877.927860][ T8631] loop7: detected capacity change from 0 to 32768 [ 877.968340][ T8613] BTRFS info (device loop2): enabling ssd optimizations [ 878.021599][ T8613] BTRFS info (device loop2): enabling free space tree [ 878.042901][ T8630] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 878.095828][ T8630] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 878.320169][T14095] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 878.437618][ T5878] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 878.511221][ T8630] BTRFS info (device loop3): enabling ssd optimizations [ 878.518218][ T8630] BTRFS info (device loop3): enabling free space tree [ 878.821544][ T8759] netlink: 'syz.4.8514': attribute type 1 has an invalid length. [ 878.936434][ T5873] BTRFS info (device loop3): last unmount of filesystem 1fd5c5ab-4e64-4b4d-9652-3cd03172c987 [ 879.300385][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.300421][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.341610][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.341645][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.497549][ T49] veth1_macvtap: left promiscuous mode [ 879.497674][ T49] veth0_macvtap: left promiscuous mode [ 879.497886][ T49] veth1_vlan: left promiscuous mode [ 879.510098][ T49] veth0_vlan: left promiscuous mode [ 879.604280][ T8849] loop2: detected capacity change from 0 to 256 [ 879.610850][ T8849] exfat: Deprecated parameter 'namecase' [ 879.610979][ T8849] exfat: Deprecated parameter 'utf8' [ 879.636535][ T8849] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 880.559995][ T8876] mmap: syz.6.8523 (8876): VmData 37482496 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 880.633430][ T5953] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 880.834170][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 880.852160][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 880.897763][ T5953] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 880.909699][ T5953] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 880.937732][ T5953] usb 4-1: Product: syz [ 880.945175][ T5953] usb 4-1: Manufacturer: syz [ 880.950664][ T5953] usb 4-1: SerialNumber: syz [ 881.218644][ T5953] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 881.229296][ T5953] visor 4-1:1.0: probe with driver visor failed with error -71 [ 881.293403][ T5953] usb 4-1: USB disconnect, device number 33 [ 881.613287][ T49] team0 (unregistering): Port device team_slave_1 removed [ 881.651983][ T49] team0 (unregistering): Port device team_slave_0 removed [ 881.877904][ T30] audit: type=1326 audit(899.890:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.3.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 881.922817][ T30] audit: type=1326 audit(899.922:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.3.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 881.965169][ T30] audit: type=1326 audit(899.922:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.3.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 882.001526][ T30] audit: type=1326 audit(899.922:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.3.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 882.724352][ T8940] loop4: detected capacity change from 0 to 256 [ 882.901768][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8541'. [ 882.928680][ T8312] chnl_net:caif_netlink_parms(): no params data found [ 882.940365][ T8940] FAT-fs (loop4): Directory bread(block 64) failed [ 882.963044][ T8940] FAT-fs (loop4): Directory bread(block 65) failed [ 883.062730][ T8940] FAT-fs (loop4): Directory bread(block 66) failed [ 883.069300][ T8940] FAT-fs (loop4): Directory bread(block 67) failed [ 883.163578][ T8940] FAT-fs (loop4): Directory bread(block 68) failed [ 883.183198][ T8940] FAT-fs (loop4): Directory bread(block 69) failed [ 883.234038][ T8940] FAT-fs (loop4): Directory bread(block 70) failed [ 883.275221][ T8940] FAT-fs (loop4): Directory bread(block 71) failed [ 883.320315][ T8940] FAT-fs (loop4): Directory bread(block 72) failed [ 883.363239][ T8940] FAT-fs (loop4): Directory bread(block 73) failed [ 884.127546][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.167596][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.204675][ T8312] bridge_slave_0: entered allmulticast mode [ 884.272653][ T8312] bridge_slave_0: entered promiscuous mode [ 884.282288][ T9052] netlink: 'syz.4.8551': attribute type 5 has an invalid length. [ 884.341937][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.375603][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.384960][ T8312] bridge_slave_1: entered allmulticast mode [ 884.426544][ T8312] bridge_slave_1: entered promiscuous mode [ 884.695650][ T8312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.720347][ T9093] loop2: detected capacity change from 0 to 512 [ 884.773617][ T9093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 884.774236][ T8312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.852400][ T9093] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 884.897543][ T9093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 884.964660][ T9093] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 884.974477][ T9093] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 885.042561][ T8973] loop7: detected capacity change from 0 to 32768 [ 885.053898][ T6057] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 885.057006][ T9093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 885.082917][ T9119] loop4: detected capacity change from 0 to 16 [ 885.133379][ T9119] erofs (device loop4): mounted with root inode @ nid 36. [ 885.150768][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8559'. [ 885.213228][ T8312] team0: Port device team_slave_0 added [ 885.217846][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8559'. [ 885.255393][ T8973] JBD2: Ignoring recovery information on journal [ 885.261078][ T8312] team0: Port device team_slave_1 added [ 885.269498][ T9093] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 885.287339][ T6057] usb 4-1: Using ep0 maxpacket: 8 [ 885.356758][ T6057] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 885.402266][ T6057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.436143][ T6057] usb 4-1: Product: syz [ 885.463698][ T6057] usb 4-1: Manufacturer: syz [ 885.467489][ T8312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.468320][ T6057] usb 4-1: SerialNumber: syz [ 885.499209][ T8312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.550617][ T8973] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 885.571808][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.579368][ T6057] usb 4-1: config 0 descriptor?? [ 885.611241][ T6057] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 885.649574][ T8312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.976145][ T8312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.994826][ T8312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.028626][ T6057] gspca_sn9c2028: read1 error -71 [ 886.041253][ T6057] gspca_sn9c2028: read1 error -71 [ 886.064480][ T8312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.065972][ T6057] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 886.120943][ T6057] usb 4-1: USB disconnect, device number 34 [ 886.203350][ T9193] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 886.212772][T14770] ocfs2: Unmounting device (7,7) on (node local) [ 886.489149][ T8312] hsr_slave_0: entered promiscuous mode [ 886.539349][ T8312] hsr_slave_1: entered promiscuous mode [ 886.891623][T28118] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 886.962251][ T9267] loop4: detected capacity change from 0 to 1024 [ 887.034450][ T9267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.111392][T28118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.193004][T28118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.262464][T28118] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.336070][T28118] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.397522][T28118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.451111][T28118] usb 7-1: config 0 descriptor?? [ 887.494805][T28118] hub 7-1:0.0: USB hub found [ 887.543372][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.692957][T28118] hub 7-1:0.0: 14 ports detected [ 887.711383][T28118] hub 7-1:0.0: insufficient power available to use all downstream ports [ 887.805505][ T9350] loop3: detected capacity change from 0 to 64 [ 887.876280][ T8312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 887.887922][T28118] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 887.911523][T28118] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 887.988372][ T8312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 887.999143][T28118] usb 7-1: USB disconnect, device number 27 [ 888.084425][ T8312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 888.129385][ T8312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 888.750171][ T9399] loop6: detected capacity change from 0 to 512 [ 888.776062][ T9313] loop7: detected capacity change from 0 to 32768 [ 888.816730][ T9399] EXT4-fs error (device loop6): ext4_iget_extra_inode:5103: inode #15: comm syz.6.8587: corrupted in-inode xattr: overlapping e_value [ 888.855406][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.865997][ T9399] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.8587: couldn't read orphan inode 15 (err -117) [ 888.923594][ T9313] jfs_strtoUCS: char2uni returned -22. [ 888.938368][ T9399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.943387][ T9313] charset = cp932, char = 0xfc [ 888.979094][ T8312] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.013731][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.020987][T16359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.061649][ T9417] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 889.138270][ T9399] EXT4-fs error (device loop6): ext4_add_entry:2417: inode #2: comm syz.6.8587: Directory hole found for htree leaf block 0 [ 889.157774][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.164951][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.176603][ T9413] kernel write not supported for file /2943/clear_refs (pid: 9413 comm: kworker/0:2) [ 889.363071][ T9425] netlink: 'syz.2.8592': attribute type 1 has an invalid length. [ 889.409232][ T9425] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8592'. [ 889.424641][ T8312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.457159][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8592'. [ 889.590469][T14095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.633100][ T8312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.747472][ T9481] ./file0: Can't open blockdev [ 891.200968][ T9503] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8615'. [ 891.390642][ T9513] loop2: detected capacity change from 0 to 512 [ 891.441659][ T9513] EXT4-fs: Ignoring removed bh option [ 891.515902][ T9513] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 891.578584][ T9513] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 891.678002][ T9513] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 891.739618][ T9513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 891.813715][ T9513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.895759][ T5945] kworker/1:5 (5945) used greatest stack depth: 17304 bytes left [ 891.912918][ T9513] EXT4-fs error (device loop2): ext4_find_dest_de:2051: inode #2: block 3: comm syz.2.8619: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 892.153531][ T8312] veth0_vlan: entered promiscuous mode [ 892.204147][ T8312] veth1_vlan: entered promiscuous mode [ 892.246145][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.359123][ T8312] veth0_macvtap: entered promiscuous mode [ 892.414952][ T9555] netlink: 26 bytes leftover after parsing attributes in process `syz.3.8629'. [ 892.435140][ T8312] veth1_macvtap: entered promiscuous mode [ 892.533284][ T8312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.583785][ T8312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.704312][T16361] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.740775][T16361] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.749636][T16361] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.846751][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.896207][ T9569] loop4: detected capacity change from 0 to 256 [ 892.995738][ T9575] loop7: detected capacity change from 0 to 64 [ 893.065377][ T9569] FAT-fs (loop4): Directory bread(block 64) failed [ 893.092731][ T9569] FAT-fs (loop4): Directory bread(block 65) failed [ 893.141220][ T9569] FAT-fs (loop4): Directory bread(block 66) failed [ 893.147772][ T9569] FAT-fs (loop4): Directory bread(block 67) failed [ 893.227757][ T9569] FAT-fs (loop4): Directory bread(block 68) failed [ 893.262614][ T9569] FAT-fs (loop4): Directory bread(block 69) failed [ 893.295731][ T9569] FAT-fs (loop4): Directory bread(block 70) failed [ 893.301457][T16361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.330240][ T9569] FAT-fs (loop4): Directory bread(block 71) failed [ 893.378200][T16361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.379234][ T9569] FAT-fs (loop4): Directory bread(block 72) failed [ 893.456095][ T9569] FAT-fs (loop4): Directory bread(block 73) failed [ 893.535164][T16361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.565953][T16361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.643446][ T9540] loop6: detected capacity change from 0 to 32768 [ 893.680906][ T9540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8624 (9540) [ 893.705351][ T9605] loop3: detected capacity change from 0 to 2048 [ 893.746044][ T9605] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 893.839170][ T9540] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 893.887286][ T9605] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 893.904986][ T9540] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 893.992332][ T9605] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 894.127772][ T9605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.141945][ T9540] BTRFS info (device loop6): enabling ssd optimizations [ 894.238609][ T9540] BTRFS info (device loop6): enabling free space tree [ 894.665462][T14095] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 895.744076][ T9698] loop4: detected capacity change from 0 to 1024 [ 895.818924][ T9708] block nbd6: Attempted send on invalid socket [ 895.845810][ T9708] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 895.898818][ T9708] (syz.6.8664,9708,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 895.936750][ T9708] (syz.6.8664,9708,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 895.947723][ T9698] hfsplus: keylen 65060 too large [ 895.970361][ T9698] hfsplus: keylen 65060 too large [ 895.975629][ T9708] (syz.6.8664,9708,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 895.996996][ T9704] loop7: detected capacity change from 0 to 4096 [ 896.005597][ T9714] netlink: 'syz.3.8665': attribute type 1 has an invalid length. [ 896.013529][ T9708] (syz.6.8664,9708,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 896.054460][ T9704] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 897.684947][ T9780] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8684'. [ 897.796906][ T9707] loop9: detected capacity change from 0 to 32768 [ 897.834875][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8685'. [ 897.882178][ T9707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.8663 (9707) [ 898.018212][ T9707] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 898.079250][ T9707] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 898.412727][ T9707] BTRFS info (device loop9): enabling ssd optimizations [ 898.446694][ T9707] BTRFS info (device loop9): enabling free space tree [ 898.458054][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8691'. [ 898.636461][ T9836] loop2: detected capacity change from 0 to 1024 [ 898.827372][ T8312] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 899.205167][T16353] hfsplus: b-tree write err: -5, ino 4 [ 899.523077][ T9866] loop7: detected capacity change from 0 to 128 [ 899.599796][ T9866] FAT-fs (loop7): Directory bread(block 162) failed [ 899.659380][ T9866] FAT-fs (loop7): Directory bread(block 163) failed [ 899.713539][ T9866] FAT-fs (loop7): Directory bread(block 164) failed [ 899.720212][ T9866] FAT-fs (loop7): Directory bread(block 165) failed [ 899.808913][ T9866] FAT-fs (loop7): Directory bread(block 166) failed [ 899.840601][ T9866] FAT-fs (loop7): Directory bread(block 167) failed [ 899.865902][ T9866] FAT-fs (loop7): Directory bread(block 168) failed [ 899.872549][ T9866] FAT-fs (loop7): Directory bread(block 169) failed [ 900.047952][ T9866] FAT-fs (loop7): Directory bread(block 162) failed [ 900.055049][ T9866] FAT-fs (loop7): Directory bread(block 163) failed [ 900.068653][ T9866] syz.7.8703: attempt to access beyond end of device [ 900.068653][ T9866] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 900.153181][ T9866] syz.7.8703: attempt to access beyond end of device [ 900.153181][ T9866] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 900.169043][ T9891] loop3: detected capacity change from 0 to 16 [ 900.201350][ T9891] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 900.690526][ T9911] loop4: detected capacity change from 0 to 256 [ 900.771771][ T9911] exfat: Deprecated parameter 'utf8' [ 900.847266][ T9911] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 900.879366][ T9915] loop3: detected capacity change from 0 to 2048 [ 900.961036][ T9915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.104575][ T9848] loop6: detected capacity change from 0 to 32768 [ 901.187500][ T30] audit: type=1326 audit(920.152:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.2.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 901.243063][ T9848] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 901.307106][ T30] audit: type=1326 audit(920.152:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.2.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 901.371410][ T30] audit: type=1326 audit(920.194:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.2.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 901.394606][ T30] audit: type=1326 audit(920.194:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.2.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 901.421658][ T30] audit: type=1326 audit(920.194:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.2.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 901.528170][ T9848] XFS (loop6): Ending clean mount [ 901.916045][T14095] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 902.161833][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8725'. [ 902.244177][T16357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 902.336653][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8727'. [ 902.656799][T28119] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 902.669599][T16357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 902.850618][T28119] usb 7-1: Using ep0 maxpacket: 16 [ 902.886340][T28119] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 902.894549][T28119] usb 7-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 902.928832][T16357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 902.949532][T28119] usb 7-1: config 0 has no interface number 0 [ 902.974610][T28119] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 902.986960][T28119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.995419][T28119] usb 7-1: Product: syz [ 902.999630][T28119] usb 7-1: Manufacturer: syz [ 903.004231][T28119] usb 7-1: SerialNumber: syz [ 903.059871][T28119] usb 7-1: config 0 descriptor?? [ 903.080261][T28119] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 903.156377][T16357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 903.338295][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8732'. [ 903.371405][ T9844] usb 7-1: USB disconnect, device number 28 [ 903.703094][T16357] bridge_slave_1: left allmulticast mode [ 903.720988][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.782222][T16357] bridge_slave_0: left allmulticast mode [ 903.787500][T10078] loop3: detected capacity change from 0 to 256 [ 903.840217][T16357] bridge_slave_0: left promiscuous mode [ 903.846043][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.006661][T10078] FAT-fs (loop3): Directory bread(block 64) failed [ 904.028720][T10078] FAT-fs (loop3): Directory bread(block 65) failed [ 904.035367][T10078] FAT-fs (loop3): Directory bread(block 66) failed [ 904.118091][T10078] FAT-fs (loop3): Directory bread(block 67) failed [ 904.129415][T10087] loop7: detected capacity change from 0 to 8 [ 904.203231][T10078] FAT-fs (loop3): Directory bread(block 68) failed [ 904.225542][T10089] binder: 10086:10089 ioctl c0306201 200000000340 returned -14 [ 904.257122][T10078] FAT-fs (loop3): Directory bread(block 69) failed [ 904.313830][T10088] loop9: detected capacity change from 0 to 1764 [ 904.314642][T10078] FAT-fs (loop3): Directory bread(block 70) failed [ 904.390423][T10078] FAT-fs (loop3): Directory bread(block 71) failed [ 904.417053][T10078] FAT-fs (loop3): Directory bread(block 72) failed [ 904.424034][T10088] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 904.453432][T10078] FAT-fs (loop3): Directory bread(block 73) failed [ 904.819026][T10440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 904.848176][T10440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 904.856713][T10440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 904.877682][T10440] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 904.894685][T10440] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 905.515067][T10136] loop9: detected capacity change from 0 to 4096 [ 905.655928][T10146] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 905.672735][T10142] loop3: detected capacity change from 0 to 4096 [ 905.862836][T10142] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 906.015214][T10142] ntfs3(loop3): Failed to load $Extend (-22). [ 906.057913][T10142] ntfs3(loop3): Failed to initialize $Extend. [ 906.196456][T10163] overlayfs: overlapping lowerdir path [ 906.788748][T10186] loop2: detected capacity change from 0 to 256 [ 906.849004][T10186] exfat: Deprecated parameter 'namecase' [ 906.871476][T10186] exfat: Deprecated parameter 'namecase' [ 906.911263][T26674] Bluetooth: hci2: command tx timeout [ 906.947605][T10186] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 907.024469][T16357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.073960][T16357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.125347][T10199] netlink: 'syz.7.8767': attribute type 5 has an invalid length. [ 907.141357][T16357] bond0 (unregistering): Released all slaves [ 907.194541][T16357] bond1 (unregistering): Released all slaves [ 907.395546][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8771'. [ 907.520667][T16357] bond2 (unregistering): Released all slaves [ 907.542609][T16357] bond3 (unregistering): Released all slaves [ 907.750145][T16357] bond4 (unregistering): Released all slaves [ 907.775798][T16357] bond5 (unregistering): Released all slaves [ 907.845190][T10223] loop2: detected capacity change from 0 to 64 [ 908.049675][T16357] : left promiscuous mode [ 908.566755][T10253] program syz.6.8781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.613409][T10253] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 908.886574][T26674] Bluetooth: hci2: command tx timeout [ 908.996823][T10256] ip6tnl2: entered promiscuous mode [ 909.029202][T10256] ip6tnl2: entered allmulticast mode [ 910.765268][T10340] loop6: detected capacity change from 0 to 4096 [ 910.868046][T26674] Bluetooth: hci2: command tx timeout [ 911.043213][T10340] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 911.152929][T10340] ntfs3(loop6): ino=0, "file0" The size of extended attributes must not exceed 64KiB [ 912.148765][T10433] netlink: 'syz.6.8822': attribute type 10 has an invalid length. [ 912.661985][T10433] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 912.677479][T10433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.829358][T16357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.849112][T26674] Bluetooth: hci2: command tx timeout [ 912.892226][T16357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.034974][T16357] veth1_macvtap: left allmulticast mode [ 913.142559][ T30] audit: type=1326 audit(932.707:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 913.247238][ T30] audit: type=1326 audit(932.707:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 913.392190][ T30] audit: type=1326 audit(932.739:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 913.509782][ T30] audit: type=1326 audit(932.739:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.8828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 913.744779][T16357] team0 (unregistering): Port device virt_wifi0 removed [ 913.924913][T10401] loop9: detected capacity change from 0 to 32768 [ 913.981810][T10401] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 913.995005][T10401] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 914.050707][T10401] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 914.264811][ T6057] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 914.277891][T10401] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 914.432063][ T6057] usb 7-1: Using ep0 maxpacket: 8 [ 914.442097][ T6057] usb 7-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 914.485917][ T6057] usb 7-1: config 0 has an invalid interface number: 150 but max is 64 [ 914.504594][ T6057] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.546015][ T6057] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 914.556219][ T6057] usb 7-1: config 0 has no interface number 0 [ 914.562722][ T6057] usb 7-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 914.590755][ T6057] usb 7-1: config 0 interface 150 has no altsetting 0 [ 914.606074][ T6057] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 914.621319][ T6057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.643747][T16357] team0 (unregistering): Port device team_slave_1 removed [ 914.670042][ T6057] usb 7-1: config 0 descriptor?? [ 914.809510][T16357] team0 (unregistering): Port device team_slave_0 removed [ 914.850827][T16361] smc: removing ib device syz! [ 915.119150][ T5953] usb 7-1: USB disconnect, device number 29 [ 915.217594][ T30] audit: type=1326 audit(934.891:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10592 comm="syz.9.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32778ebe9 code=0x7ffc0000 [ 915.241281][ T30] audit: type=1326 audit(934.891:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10592 comm="syz.9.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32778ebe9 code=0x7ffc0000 [ 915.283449][ T30] audit: type=1326 audit(934.891:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10592 comm="syz.9.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa32778ebe9 code=0x7ffc0000 [ 915.340029][ T30] audit: type=1326 audit(934.891:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10592 comm="syz.9.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32778ebe9 code=0x7ffc0000 [ 915.522143][T16357] team0 (unregistering): Port device dummy0 removed [ 915.682388][T10541] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 915.720460][T10581] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 915.836928][T10109] chnl_net:caif_netlink_parms(): no params data found [ 916.050741][ T30] audit: type=1326 audit(935.752:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.7.8843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb265f8ebe9 code=0x7ffc0000 [ 916.091722][ T30] audit: type=1326 audit(935.752:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.7.8843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb265f8ebe9 code=0x7ffc0000 [ 916.472414][T10656] netlink: 'syz.7.8849': attribute type 23 has an invalid length. [ 916.565861][T10651] loop6: detected capacity change from 0 to 1024 [ 916.949937][T10689] loop2: detected capacity change from 0 to 8 [ 916.992032][T10689] SQUASHFS error: Failed to read block 0x1ec: -5 [ 917.000473][T10689] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 917.045699][T10109] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.061580][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.084717][T10109] bridge_slave_0: entered allmulticast mode [ 917.116870][T10109] bridge_slave_0: entered promiscuous mode [ 917.153963][T10109] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.195207][T10109] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.202451][T10109] bridge_slave_1: entered allmulticast mode [ 917.243838][T10109] bridge_slave_1: entered promiscuous mode [ 917.834474][T10109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.920403][T10109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.413750][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.583798][T10109] team0: Port device team_slave_0 added [ 918.642177][T10109] team0: Port device team_slave_1 added [ 918.820028][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 918.820055][ T30] audit: type=1326 audit(938.660:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.3.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 918.848044][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.988384][ T30] audit: type=1326 audit(938.660:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.3.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 919.073596][ T30] audit: type=1326 audit(938.712:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.3.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 919.204644][ T30] audit: type=1326 audit(938.712:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.3.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e5d8ebe9 code=0x7ffc0000 [ 919.226522][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.448743][T10109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.460769][T10871] loop2: detected capacity change from 0 to 512 [ 919.486491][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.512478][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.625497][T10109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.632452][T10871] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 919.685953][T10888] nftables ruleset with unbound chain [ 919.693436][T10871] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 919.702097][T10871] System zones: 0-1, 15-15, 18-18, 34-34 [ 919.708443][T10871] EXT4-fs (loop2): orphan cleanup on readonly fs [ 919.714982][T10871] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 919.725267][T10871] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 919.727713][T10109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.740614][T10871] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 919.778058][T10871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.8884: bg 0: block 40: padding at end of block bitmap is not set [ 919.800735][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.878888][T10871] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 919.918962][T10871] EXT4-fs (loop2): 1 truncate cleaned up [ 919.969047][T10109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.982819][T10893] loop6: detected capacity change from 0 to 512 [ 920.111903][T10893] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.8889: casefold flag without casefold feature [ 920.117256][T10900] netlink: 'syz.7.8892': attribute type 2 has an invalid length. [ 920.169050][T10893] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.8889: couldn't read orphan inode 15 (err -117) [ 920.222957][T10871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 920.313448][T10893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.367302][T10871] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.8884: bad symlink. [ 920.462010][T10900] : entered promiscuous mode [ 920.503230][T10109] hsr_slave_0: entered promiscuous mode [ 920.550286][T10109] hsr_slave_1: entered promiscuous mode [ 920.593928][T10109] debugfs: 'hsr0' already exists in 'hsr' [ 920.612999][T10109] Cannot create hsr debugfs directory [ 920.638280][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.696850][T14095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.869993][T10959] AppArmor: change_hat: Invalid input 'ÿ' [ 921.163792][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 921.193839][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.352061][T10999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.953543][T16357] IPVS: stop unused estimator thread 0... [ 922.379318][T11074] loop3: detected capacity change from 0 to 64 [ 922.932714][T11103] delete_channel: no stack [ 923.450750][T11123] tc_dump_action: action bad kind [ 923.494404][ T6057] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 923.716773][ T6057] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 923.757948][ T6057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.901603][ T6057] usb 8-1: config 0 descriptor?? [ 923.912747][T11154] loop3: detected capacity change from 0 to 256 [ 923.987338][T11154] msdos: Bad value for 'gid' [ 924.036231][T11154] msdos: Bad value for 'gid' [ 924.164502][ T6057] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 924.352541][ T6057] [drm:udl_init] *ERROR* Selecting channel failed [ 924.442980][ T6057] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 924.507559][ T6057] [drm] Initialized udl on minor 2 [ 924.559124][ T6057] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 924.624841][ T6057] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 924.632507][ T5953] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 924.634715][ T9386] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 924.699604][ T6057] usb 8-1: USB disconnect, device number 24 [ 924.748410][ T9386] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 924.850011][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 924.902695][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 924.947656][ T5953] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 924.976841][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.020510][ T5953] usb 3-1: Product: syz [ 925.034762][T11193] netlink: 'syz.6.8940': attribute type 5 has an invalid length. [ 925.064059][ T5953] usb 3-1: Manufacturer: syz [ 925.083885][ T5953] usb 3-1: SerialNumber: syz [ 925.153911][ T5953] usb 3-1: config 0 descriptor?? [ 925.278986][T10109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 925.382768][T10109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 925.385280][ T5953] powermate: unknown product id 0240 [ 925.503807][T10109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 925.505872][ T5953] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input44 [ 925.624559][ C1] powermate: config urb returned -71 [ 925.631439][ C1] powermate: config urb returned -71 [ 925.637165][ C1] powermate: config urb returned -71 [ 925.642727][ C1] powermate: config urb returned -71 [ 925.677842][ T5953] usb 3-1: USB disconnect, device number 40 [ 925.684026][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 925.804348][T10109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 926.210312][T11268] netlink: 'syz.3.8951': attribute type 5 has an invalid length. [ 926.255806][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8952'. [ 926.469317][T10109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.563193][T10109] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.601020][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.608248][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.679655][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.686899][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.811694][T11290] loop9: detected capacity change from 0 to 2048 [ 926.933728][T11284] loop6: detected capacity change from 0 to 4096 [ 926.980072][T11299] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 927.041031][T11290] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 927.171164][T11290] Remounting filesystem read-only [ 927.294820][T11295] loop7: detected capacity change from 0 to 4096 [ 927.469057][T11295] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 927.681389][T11295] ntfs3(loop7): ino=1a, mi_enum_attr [ 927.686851][T11295] ntfs3(loop7): ino=1a, mi_enum_attr [ 927.766207][T11295] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 927.913241][T11295] ntfs3(loop7): ino=1a, mi_enum_attr [ 928.197886][T10109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.539277][T10109] veth0_vlan: entered promiscuous mode [ 928.608509][T10109] veth1_vlan: entered promiscuous mode [ 928.614513][ T9386] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 928.704037][T11278] loop2: detected capacity change from 0 to 32768 [ 928.787219][T10109] veth0_macvtap: entered promiscuous mode [ 928.792391][T11278] jfs_strtoUCS: char2uni returned -22. [ 928.814024][T11278] charset = euc-jp, char = 0xd4 [ 928.830549][ T9386] usb 8-1: unable to get BOS descriptor or descriptor too short [ 928.857020][T10109] veth1_macvtap: entered promiscuous mode [ 928.874745][ T9386] usb 8-1: not running at top speed; connect to a high speed hub [ 928.919093][ T9386] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.976510][ T9386] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 928.998921][T10109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.009123][T11361] loop6: detected capacity change from 0 to 8 [ 929.024423][ T9386] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 929.051085][ T9386] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 929.098831][T11361] SQUASHFS error: Corrupted symlink [ 929.105397][T10109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.124449][ T9386] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 929.250742][ T9386] usb 8-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 929.262582][T16361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.300131][ T9386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.313347][T16361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.325611][ T9386] usb 8-1: Product: syz [ 929.352304][ T9386] usb 8-1: Manufacturer: syz [ 929.401517][ T9386] usb 8-1: SerialNumber: syz [ 929.423947][T16361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.469484][ T9386] ipaq 8-1:1.0: PocketPC PDA converter detected [ 929.478220][T16361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.798611][ T9386] usb 8-1: PocketPC PDA converter now attached to ttyUSB0 [ 930.016884][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.061889][ T9386] usb 8-1: USB disconnect, device number 25 [ 930.094720][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.156432][ T9386] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 930.218370][T11403] loop9: detected capacity change from 0 to 4096 [ 930.223476][ T9386] ipaq 8-1:1.0: device disconnected [ 930.300516][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.337949][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.384083][T11433] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 930.552768][T11436] loop6: detected capacity change from 0 to 512 [ 930.607101][T11436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 930.692396][T11436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.791912][T11436] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.8983: corrupted xattr block 19: overlapping e_value [ 930.876971][T11436] EXT4-fs (loop6): Remounting filesystem read-only [ 931.152816][T14095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.292559][T11468] binder: 11467:11468 unknown command 0 [ 931.344609][T11468] binder: 11467:11468 ioctl c0306201 200000000480 returned -22 [ 932.332032][T11493] loop1: detected capacity change from 0 to 4096 [ 932.367161][T11493] ntfs3(loop1): ino=3, Correct links count -> 2. [ 932.830885][T11515] loop2: detected capacity change from 0 to 256 [ 932.914817][T11461] loop3: detected capacity change from 0 to 32768 [ 932.967884][T11515] FAT-fs (loop2): Directory bread(block 64) failed [ 932.976827][T11515] FAT-fs (loop2): Directory bread(block 65) failed [ 933.016016][T11461] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 933.055889][T11515] FAT-fs (loop2): Directory bread(block 66) failed [ 933.082342][T11515] FAT-fs (loop2): Directory bread(block 67) failed [ 933.088948][T11515] FAT-fs (loop2): Directory bread(block 68) failed [ 933.166244][T11515] FAT-fs (loop2): Directory bread(block 69) failed [ 933.166332][T11461] XFS (loop3): Ending clean mount [ 933.173169][T11515] FAT-fs (loop2): Directory bread(block 70) failed [ 933.191536][T11515] FAT-fs (loop2): Directory bread(block 71) failed [ 933.213061][T11477] loop6: detected capacity change from 0 to 32768 [ 933.220339][T11515] FAT-fs (loop2): Directory bread(block 72) failed [ 933.246210][T11515] FAT-fs (loop2): Directory bread(block 73) failed [ 933.276521][T11477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8991 (11477) [ 933.318994][T11535] IPv6: NLM_F_CREATE should be specified when creating new route [ 933.370321][T11477] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 933.410195][T11535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 933.417527][T11535] IPv6: NLM_F_CREATE should be set when creating new route [ 933.434223][T11477] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 933.813084][T11543] loop1: detected capacity change from 0 to 4096 [ 933.813431][T11477] BTRFS info (device loop6): enabling ssd optimizations [ 933.834580][T11477] BTRFS info (device loop6): enabling free space tree [ 933.863389][ T5873] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 933.872674][T11563] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 934.434797][T14095] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 934.583325][T11582] loop7: detected capacity change from 0 to 128 [ 934.672834][T11582] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 934.795861][T11582] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 934.978022][T11582] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz.7.9010: No space for directory leaf checksum. Please run e2fsck -D. [ 935.053610][T11582] EXT4-fs error (device loop7): __ext4_find_entry:1624: inode #11: comm syz.7.9010: checksumming directory block 0 [ 935.335410][T11609] loop1: detected capacity change from 0 to 1764 [ 935.386916][T28119] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 935.436979][T14770] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 935.469005][T11609] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 935.560449][T28119] usb 4-1: unable to get BOS descriptor or descriptor too short [ 935.608397][T28119] usb 4-1: not running at top speed; connect to a high speed hub [ 935.634784][T28119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.671561][T28119] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.748927][T28119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 935.793737][T28119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 935.853558][T28119] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 935.966222][T28119] usb 4-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 936.002071][T28119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.054678][T28119] usb 4-1: Product: syz [ 936.058890][T28119] usb 4-1: Manufacturer: syz [ 936.120445][T28119] usb 4-1: SerialNumber: syz [ 936.157682][T28119] ipaq 4-1:1.0: PocketPC PDA converter detected [ 936.210370][T11640] netlink: 'syz.9.9018': attribute type 8 has an invalid length. [ 936.282480][ T5961] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 936.371030][T28119] usb 4-1: PocketPC PDA converter now attached to ttyUSB0 [ 936.484075][ T5961] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 936.507078][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.651365][ T5953] usb 4-1: USB disconnect, device number 35 [ 936.654115][T11578] loop2: detected capacity change from 0 to 32768 [ 936.707980][ T5961] usb 7-1: config 0 descriptor?? [ 936.745861][ T5953] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 936.748455][ T5961] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 936.777412][T11578] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 936.782164][ T5953] ipaq 4-1:1.0: device disconnected [ 936.936293][T11668] loop7: detected capacity change from 0 to 4096 [ 937.075691][T11691] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 937.136096][ T5961] gspca_sunplus: reg_w_riv err -71 [ 937.151832][T11578] XFS (loop2): Ending clean mount [ 937.174638][ T5961] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 937.259570][ T5961] usb 7-1: USB disconnect, device number 30 [ 937.442834][ T5878] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 937.543732][T11707] usb usb8: usbfs: process 11707 (syz.3.9028) did not claim interface 0 before use [ 937.671388][T11710] netlink: 'syz.1.9026': attribute type 1 has an invalid length. [ 938.596672][T11745] loop7: detected capacity change from 0 to 256 [ 938.821828][T11745] FAT-fs (loop7): Directory bread(block 64) failed [ 938.863515][T11745] FAT-fs (loop7): Directory bread(block 65) failed [ 938.870170][T11745] FAT-fs (loop7): Directory bread(block 66) failed [ 938.968688][T11745] FAT-fs (loop7): Directory bread(block 67) failed [ 938.975341][T11745] FAT-fs (loop7): Directory bread(block 68) failed [ 939.073603][T11745] FAT-fs (loop7): Directory bread(block 69) failed [ 939.080262][T11745] FAT-fs (loop7): Directory bread(block 70) failed [ 939.142463][T11745] FAT-fs (loop7): Directory bread(block 71) failed [ 939.149685][T11745] FAT-fs (loop7): Directory bread(block 72) failed [ 939.150384][T11768] loop2: detected capacity change from 0 to 256 [ 939.180506][T11745] FAT-fs (loop7): Directory bread(block 73) failed [ 939.317864][T11768] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 939.519567][ T30] audit: type=1326 audit(960.401:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.1.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040dd8ebe9 code=0x7ffc0000 [ 939.641216][ T30] audit: type=1326 audit(960.401:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.1.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040dd8ebe9 code=0x7ffc0000 [ 939.740352][ T30] audit: type=1326 audit(960.464:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.1.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f040dd8ebe9 code=0x7ffc0000 [ 939.890888][ T30] audit: type=1326 audit(960.464:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.1.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040dd8ebe9 code=0x7ffc0000 [ 939.945253][ T30] audit: type=1326 audit(960.464:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.1.9046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040dd8ebe9 code=0x7ffc0000 [ 940.095451][T11809] netlink: 'syz.9.9055': attribute type 27 has an invalid length. [ 941.528663][ T30] audit: type=1326 audit(962.511:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 941.670752][ T30] audit: type=1326 audit(962.542:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 941.774652][ T30] audit: type=1326 audit(962.553:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 941.845406][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9077'. [ 941.912138][ T30] audit: type=1326 audit(962.553:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 941.988481][T11885] : entered promiscuous mode [ 942.059005][ T30] audit: type=1326 audit(962.553:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 942.312204][ T9386] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 942.394529][T11912] netlink: 'syz.6.9084': attribute type 4 has an invalid length. [ 942.508555][ T9386] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 942.530894][ T9386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.591178][ T9386] usb 8-1: config 0 descriptor?? [ 942.630971][ T9386] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 942.740630][T11913] loop9: detected capacity change from 0 to 4096 [ 943.013654][T11913] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 943.034429][ T9386] gspca_sunplus: reg_w_riv err -71 [ 943.049905][ T9386] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 943.083180][T11913] ntfs3(loop9): ino=0, "file0" The size of extended attributes must not exceed 64KiB [ 943.108955][ T9386] usb 8-1: USB disconnect, device number 26 [ 943.550248][T11870] loop3: detected capacity change from 0 to 32768 [ 943.705751][T11870] ialloc: diAlloc returned -17! [ 944.277218][T11989] loop3: detected capacity change from 0 to 256 [ 944.614479][T12002] loop6: detected capacity change from 0 to 1024 [ 944.740117][T12002] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 945.306608][ T5953] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 945.398373][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9114'. [ 945.466335][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 945.471218][T12048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9114'. [ 945.490059][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 945.577378][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 945.649435][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 945.737608][T12058] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9118'. [ 945.742317][ T5953] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 945.785122][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.813391][ T5953] usb 3-1: Product: syz [ 945.853467][ T5953] usb 3-1: Manufacturer: syz [ 945.863588][ T5953] usb 3-1: SerialNumber: syz [ 945.913631][ T5953] usb 3-1: config 0 descriptor?? [ 945.952413][ T5953] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 946.144090][ T5973] usb 3-1: USB disconnect, device number 41 [ 946.180090][T12076] fuse: blksize only supported for fuseblk [ 947.150350][T12130] loop1: detected capacity change from 0 to 256 [ 947.294354][T12137] loop6: detected capacity change from 0 to 256 [ 947.564535][T12151] gre0: entered allmulticast mode [ 947.960130][T12169] netlink: 'syz.2.9147': attribute type 33 has an invalid length. [ 948.010045][T12169] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9147'. [ 948.358426][T12184] loop6: detected capacity change from 0 to 512 [ 948.446291][T12184] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 948.503643][ T30] audit: type=1400 audit(969.828:1490): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=12192 comm="syz.2.9155" [ 948.596178][T12184] EXT4-fs (loop6): 1 truncate cleaned up [ 948.673489][T12184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.846394][T12195] loop7: detected capacity change from 0 to 4096 [ 948.938725][T12195] ntfs3(loop7): ino=3, Correct links count -> 2. [ 949.083173][T14095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.174351][T12287] loop1: detected capacity change from 0 to 512 [ 950.346748][T12299] netlink: 'syz.6.9171': attribute type 3 has an invalid length. [ 950.355425][T12198] loop9: detected capacity change from 0 to 32768 [ 950.390531][T12299] netlink: 666 bytes leftover after parsing attributes in process `syz.6.9171'. [ 950.516275][T12198] ERROR: (device loop9): txAbort: [ 950.516275][T12198] [ 950.565011][T12198] ERROR: (device loop9): remounting filesystem as read-only [ 950.680195][T12313] loop7: detected capacity change from 0 to 64 [ 951.356732][T12343] loop6: detected capacity change from 0 to 256 [ 951.511234][T12350] loop1: detected capacity change from 0 to 512 [ 951.704917][T12350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.851881][T12343] FAT-fs (loop6): Directory bread(block 64) failed [ 951.885243][T12343] FAT-fs (loop6): Directory bread(block 65) failed [ 951.936142][T12343] FAT-fs (loop6): Directory bread(block 66) failed [ 951.980628][T12343] FAT-fs (loop6): Directory bread(block 67) failed [ 951.990248][T12350] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.9185: corrupted xattr block 32: bad e_name length [ 952.008057][T12343] FAT-fs (loop6): Directory bread(block 68) failed [ 952.058508][T12343] FAT-fs (loop6): Directory bread(block 69) failed [ 952.091085][T12343] FAT-fs (loop6): Directory bread(block 70) failed [ 952.124957][T12343] FAT-fs (loop6): Directory bread(block 71) failed [ 952.175404][T12350] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 952.191950][T12343] FAT-fs (loop6): Directory bread(block 72) failed [ 952.225179][T12343] FAT-fs (loop6): Directory bread(block 73) failed [ 952.275966][T12350] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 952.343878][T12350] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.9185: Failed to acquire dquot type 1 [ 952.512966][T12389] netlink: 'syz.2.9192': attribute type 2 has an invalid length. [ 952.561705][T12389] netlink: 'syz.2.9192': attribute type 1 has an invalid length. [ 952.650989][T10109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.505329][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9205'. [ 953.926723][T12454] loop7: detected capacity change from 0 to 512 [ 954.029769][T12459] delete_channel: no stack [ 954.285630][ T5953] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 954.533929][ T5953] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 954.561860][ T5953] usb 7-1: config 0 interface 0 has no altsetting 0 [ 954.636403][ T5953] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 954.676354][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 954.720224][ T5953] usb 7-1: Product: syz [ 954.742893][ T5953] usb 7-1: Manufacturer: syz [ 954.762263][ T5953] usb 7-1: SerialNumber: syz [ 954.819143][ T5953] usb 7-1: config 0 descriptor?? [ 954.869559][ T5953] usb 7-1: selecting invalid altsetting 0 [ 954.947523][T12505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9221'. [ 955.010336][T12505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 955.212508][ T9386] usb 7-1: USB disconnect, device number 31 [ 955.337241][T12532] loop1: detected capacity change from 0 to 256 [ 955.464168][T12552] netlink: 'syz.2.9230': attribute type 1 has an invalid length. [ 955.484200][T12552] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9230'. [ 955.509522][T12544] loop7: detected capacity change from 0 to 2048 [ 955.574074][T12544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.610657][T12532] FAT-fs (loop1): Directory bread(block 64) failed [ 955.674083][T12532] FAT-fs (loop1): Directory bread(block 65) failed [ 955.695708][T12532] FAT-fs (loop1): Directory bread(block 66) failed [ 955.713711][T12532] FAT-fs (loop1): Directory bread(block 67) failed [ 955.754761][T12532] FAT-fs (loop1): Directory bread(block 68) failed [ 955.771196][T12532] FAT-fs (loop1): Directory bread(block 69) failed [ 955.810668][T12532] FAT-fs (loop1): Directory bread(block 70) failed [ 955.863470][T12532] FAT-fs (loop1): Directory bread(block 71) failed [ 955.883890][T12532] FAT-fs (loop1): Directory bread(block 72) failed [ 955.901657][T14770] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.901954][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9234'. [ 955.923579][T12532] FAT-fs (loop1): Directory bread(block 73) failed [ 956.256123][ T6216] udevd[6216]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.816198][T12606] netlink: 'syz.1.9243': attribute type 1 has an invalid length. [ 956.896342][T12606] netlink: 'syz.1.9243': attribute type 2 has an invalid length. [ 959.137267][T12703] loop7: detected capacity change from 0 to 1024 [ 959.569858][T16357] hfsplus: b-tree write err: -5, ino 4 [ 959.869398][T12739] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 959.869398][T12739] SÃȘØÈžZ§6ŸÂ' [ 960.054542][T12745] /dev/nullb0: Can't open blockdev [ 960.287498][T12756] netlink: 830 bytes leftover after parsing attributes in process `syz.9.9288'. [ 961.002524][T12788] kAFS: No cell specified [ 961.064492][T12793] loop2: detected capacity change from 0 to 256 [ 961.352792][T12793] FAT-fs (loop2): Directory bread(block 64) failed [ 961.363050][T12793] FAT-fs (loop2): Directory bread(block 65) failed [ 961.393929][T12793] FAT-fs (loop2): Directory bread(block 66) failed [ 961.400493][T12793] FAT-fs (loop2): Directory bread(block 67) failed [ 961.422416][T12805] netlink: 'syz.3.9302': attribute type 11 has an invalid length. [ 961.447080][T12793] FAT-fs (loop2): Directory bread(block 68) failed [ 961.454579][T12808] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9304'. [ 961.463949][T12793] FAT-fs (loop2): Directory bread(block 69) failed [ 961.473722][T12808] netlink: 35 bytes leftover after parsing attributes in process `syz.9.9304'. [ 961.494503][T12793] FAT-fs (loop2): Directory bread(block 70) failed [ 961.525511][T12808] netlink: 35 bytes leftover after parsing attributes in process `syz.9.9304'. [ 961.536357][T12793] FAT-fs (loop2): Directory bread(block 71) failed [ 961.609950][T12793] FAT-fs (loop2): Directory bread(block 72) failed [ 961.658626][T12793] FAT-fs (loop2): Directory bread(block 73) failed [ 962.629972][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9315'. [ 962.920639][T12832] loop3: detected capacity change from 0 to 16384 [ 962.944329][ T9386] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 963.021683][T12832] bcachefs (loop3): error requesting encryption key: ENOKEY [ 963.039715][T12832] bcachefs (loop3): shutdown complete [ 963.171688][ T9386] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.215710][ T9386] usb 10-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 963.251421][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9320'. [ 963.263669][ T9386] usb 10-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 963.302255][ T9386] usb 10-1: Manufacturer: syz [ 963.328895][ T9386] usb 10-1: SerialNumber: syz [ 963.355265][ T9386] usb 10-1: config 0 descriptor?? [ 963.372812][ T9386] uvcvideo 10-1:0.0: probe with driver uvcvideo failed with error -22 [ 963.506763][ T5953] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 963.597960][T12839] loop7: detected capacity change from 0 to 32768 [ 963.600184][ T9386] usb 10-1: USB disconnect, device number 2 [ 963.650935][T12839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9312 (12839) [ 963.683527][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.725953][ T5953] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 963.753878][T12839] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 963.772407][T12833] loop6: detected capacity change from 0 to 32768 [ 963.777355][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.795241][T12839] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 963.808885][T12833] XFS: attr2 mount option is deprecated. [ 963.824657][ T5953] usb 3-1: config 0 descriptor?? [ 963.860440][T12832] bcachefs: bch2_fs_get_tree() error: ENOKEY [ 963.993063][T12833] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 964.105485][T12839] BTRFS info (device loop7): enabling ssd optimizations [ 964.122710][T12839] BTRFS info (device loop7): enabling free space tree [ 964.222372][T12833] XFS (loop6): Ending clean mount [ 964.258654][T12833] XFS (loop6): Quotacheck needed: Please wait. [ 964.348141][ T5953] aquacomputer_d5next 0003:0C70:F00B.0003: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 964.465788][T12833] XFS (loop6): Quotacheck: Done. [ 964.504709][T14770] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 964.591047][ T5953] usb 3-1: USB disconnect, device number 42 [ 964.592532][T12942] loop9: detected capacity change from 0 to 128 [ 964.721378][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9328'. [ 964.742924][T12942] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 964.784572][T14095] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 964.852061][T12942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 964.954344][T12946] fido_id[12946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 965.547074][T12984] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9334'. [ 966.033361][T13005] netlink: 'syz.1.9340': attribute type 1 has an invalid length. [ 966.597372][T13026] loop1: detected capacity change from 0 to 256 [ 966.755470][T13021] loop6: detected capacity change from 0 to 4096 [ 966.908580][T13021] ntfs3(loop6): ino=b, Correct links count -> 1. [ 966.973769][T13021] ntfs3(loop6): ino=18, mi_enum_attr [ 967.001212][T13021] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 967.233878][T13049] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9352'. [ 967.263971][T13049] 8021q: VLANs not supported on ipvlan1 [ 967.573374][T13066] loop7: detected capacity change from 0 to 128 [ 967.631275][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 967.759941][T13066] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 967.803081][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 967.820698][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.845712][T13066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.864922][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.901875][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.975210][ T5845] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 968.043113][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.108835][ T5845] usb 2-1: config 0 descriptor?? [ 968.252238][T13091] loop3: detected capacity change from 0 to 512 [ 968.324298][T13091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 968.403807][T13091] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:168: inode #17: comm syz.3.9362: inline data xattr refers to an external xattr inode [ 968.498178][T13091] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.9362: couldn't read orphan inode 17 (err -117) [ 968.562272][T13091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.650322][ T5845] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 968.757027][ T5845] microsoft 0003:045E:07DA.0004: no inputs found [ 968.806426][ T5845] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 968.861196][ T5845] usb 2-1: USB disconnect, device number 9 [ 969.000992][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.192669][T13120] fido_id[13120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 969.242658][T13144] loop2: detected capacity change from 0 to 512 [ 969.361889][T13144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.676300][T13144] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 969.755464][T13144] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 969.798700][T13167] loop1: detected capacity change from 0 to 256 [ 969.802742][T13144] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.9370: Failed to acquire dquot type 1 [ 969.817450][T13156] loop3: detected capacity change from 0 to 4096 [ 969.849220][T13167] exfat: Deprecated parameter 'utf8' [ 969.890503][T13167] exfat: Deprecated parameter 'namecase' [ 969.969460][T13167] exfat: Deprecated parameter 'namecase' [ 970.015308][T13167] exfat: Deprecated parameter 'utf8' [ 970.123974][T13156] ntfs3(loop3): ino=b, Correct links count -> 1. [ 970.153834][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.180256][T13156] ntfs3(loop3): ino=18, mi_enum_attr [ 970.201506][T13167] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 970.215025][T13156] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 971.206147][T13202] loop9: detected capacity change from 0 to 2048 [ 971.311252][ T6216] loop9: p1 < > p4 [ 971.337428][ T6216] loop9: p4 size 722688 extends beyond EOD, truncated [ 971.421630][T13202] loop9: p1 < > p4 [ 971.443907][T13202] loop9: p4 size 722688 extends beyond EOD, truncated [ 971.572762][T13225] loop3: detected capacity change from 0 to 64 [ 971.583291][ T5228] loop9: p1 < > p4 [ 971.620645][T13227] 9pnet_fd: p9_fd_create_tcp (13227): problem binding to privport [ 971.628223][ T5228] loop9: p4 size 722688 extends beyond EOD, truncated [ 971.712780][T13225] syz.3.9384: attempt to access beyond end of device [ 971.712780][T13225] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 971.774163][T13169] loop6: detected capacity change from 0 to 32768 [ 971.803341][T13225] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 971.855391][ T6216] udevd[6216]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 971.860151][ T6088] udevd[6088]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 971.907797][T13169] jfs_lookup: iget failed on inum 32 [ 971.948751][T13169] jfs_lookup: iget failed on inum 32 [ 972.090665][T13251] loop7: detected capacity change from 0 to 256 [ 972.114389][ T8386] udevd[8386]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 972.122517][ T6088] udevd[6088]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 972.126029][T13252] netlink: 'syz.9.9387': attribute type 1 has an invalid length. [ 972.135909][T13225] Trying to free block not in datazone [ 972.368082][ T6216] udevd[6216]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 972.383800][ T6088] udevd[6088]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 973.143491][T13194] loop1: detected capacity change from 0 to 32768 [ 973.330868][T13194] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 973.556064][T28118] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 973.565647][T13194] XFS (loop1): Ending clean mount [ 973.756059][T28118] usb 7-1: Using ep0 maxpacket: 16 [ 973.811021][T28118] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.840830][T28118] usb 7-1: config 0 interface 0 has no altsetting 0 [ 973.901369][T28118] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 973.918482][T28118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.931875][T10109] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 974.012027][T28118] usb 7-1: config 0 descriptor?? [ 974.495883][T28118] holtek_mouse 0003:04D9:A04A.0005: unbalanced collection at end of report description [ 974.563826][T28118] holtek_mouse 0003:04D9:A04A.0005: hid parse failed: -22 [ 974.612856][T28118] holtek_mouse 0003:04D9:A04A.0005: probe with driver holtek_mouse failed with error -22 [ 974.616305][T13357] loop7: detected capacity change from 0 to 64 [ 974.691138][T28118] usb 7-1: USB disconnect, device number 32 [ 976.174924][T13426] loop2: detected capacity change from 0 to 1764 [ 976.270347][ T5845] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 976.290174][T28118] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 976.318373][T13426] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 976.455821][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.489677][ T5845] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 976.498631][ T5845] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 976.525291][T28118] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.565507][T28118] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.610693][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.620820][T28118] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 976.659440][ T5878] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 976.677518][T28118] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.686787][ T5845] usb 2-1: config 0 descriptor?? [ 976.717385][T28118] usb 8-1: config 0 descriptor?? [ 976.735499][ T5845] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 976.792766][ T5845] dvb-usb: bulk message failed: -22 (3/0) [ 976.801622][ T5878] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 976.834217][ T5845] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 976.878672][ T5845] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 976.927635][ T5845] usb 2-1: media controller created [ 976.945301][T13418] dvb-usb: bulk message failed: -22 (2/0) [ 976.963447][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.065789][ T5845] dvb-usb: bulk message failed: -22 (6/0) [ 977.095856][ T5845] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 977.149743][ T5845] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 977.200061][T13483] binder: 13478:13483 ioctl c0306201 200000000380 returned -14 [ 977.208997][T28118] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 5/7 [ 977.246293][ T5845] dvb-usb: schedule remote query interval to 150 msecs. [ 977.247679][T28118] pyra 0003:1E7D:2CF6.0006: parse failed [ 977.326574][T28118] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -22 [ 977.328557][ T5845] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 977.415675][T28118] usb 8-1: USB disconnect, device number 27 [ 977.442047][ T5845] usb 2-1: USB disconnect, device number 10 [ 977.482584][ T9413] dvb-usb: bulk message failed: -22 (1/0) [ 977.512332][ T9413] dvb-usb: error while querying for an remote control event. [ 977.665870][ T5845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 978.104526][T13539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9444'. [ 978.421850][T13554] loop7: detected capacity change from 0 to 1024 [ 978.453787][T13554] hfsplus: Bad value for 'gid' [ 978.910511][T13581] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 979.177081][T28118] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 979.241983][T13599] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 979.366709][T28118] usb 10-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 979.380861][T28118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.441769][T28118] usb 10-1: config 0 descriptor?? [ 979.686351][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.693073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.864838][T13605] loop1: detected capacity change from 0 to 8192 [ 979.950512][T28118] hid_parser_main: 33 callbacks suppressed [ 979.950545][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 979.994815][ T30] audit: type=1800 audit(1002.886:1491): pid=13605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9459" name="file1" dev="loop1" ino=1048777 res=0 errno=0 [ 980.044176][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.051254][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.073424][T13544] loop3: detected capacity change from 0 to 32768 [ 980.144118][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.181548][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.199288][T13544] syz.3.9445: attempt to access beyond end of device [ 980.199288][T13544] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 980.235638][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.276619][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.286163][T13640] loop7: detected capacity change from 0 to 256 [ 980.310545][T13544] metapage_write_end_io: I/O error [ 980.335243][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.338121][T13544] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 980.338121][T13544] [ 980.373140][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.418106][T28118] macally 0003:060B:0001.0007: unknown main item tag 0x0 [ 980.468309][T13544] ERROR: (device loop3): remounting filesystem as read-only [ 980.473857][T28118] macally 0003:060B:0001.0007: hidraw0: USB HID v8.00 Device [HID 060b:0001] on usb-dummy_hcd.9-1/input0 [ 980.535383][T13544] blkno = 8ed2c, nblocks = 1 [ 980.551952][T13640] FAT-fs (loop7): Directory bread(block 64) failed [ 980.591524][T28118] usb 10-1: USB disconnect, device number 3 [ 980.597137][T13544] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 980.597137][T13544] [ 980.625208][T13640] FAT-fs (loop7): Directory bread(block 65) failed [ 980.662836][T13640] FAT-fs (loop7): Directory bread(block 66) failed [ 980.699530][T13640] FAT-fs (loop7): Directory bread(block 67) failed [ 980.721436][T13544] UFO tlock:0xffffc900028da0d8 [ 980.765413][T13640] FAT-fs (loop7): Directory bread(block 68) failed [ 980.843123][T13640] FAT-fs (loop7): Directory bread(block 69) failed [ 980.854919][T13640] FAT-fs (loop7): Directory bread(block 70) failed [ 980.861463][T13640] FAT-fs (loop7): Directory bread(block 71) failed [ 980.915796][T13544] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 980.915796][T13544] [ 980.945841][T13640] FAT-fs (loop7): Directory bread(block 72) failed [ 980.986101][T13544] jfs_lookup: dtSearch returned -5 [ 981.030083][T13640] FAT-fs (loop7): Directory bread(block 73) failed [ 981.061415][T13659] fido_id[13659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 981.224201][ T111] blkno = 8ed2c, nblocks = 4 [ 981.228843][ T111] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 981.228843][ T111] [ 981.286014][ T5873] syz-executor: attempt to access beyond end of device [ 981.286014][ T5873] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 981.324680][ T5873] metapage_write_end_io: I/O error [ 981.343005][ T5873] JFS: metapage_get_blocks failed [ 981.360972][ T5873] JFS: metapage_get_blocks failed [ 981.376648][ T5873] JFS: metapage_get_blocks failed [ 981.381957][ T5873] JFS: metapage_get_blocks failed [ 982.004313][T13705] loop2: detected capacity change from 0 to 256 [ 982.180338][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9479'. [ 982.772034][T13732] loop9: detected capacity change from 0 to 64 [ 982.839298][T13737] xt_limit: Overflow, try lower: 324382443/4200216956 [ 982.899005][ T6216] udevd[6216]: symlink '../../loop9' '/dev/disk/by-diskseq/1776.tmp-b7:9' failed: Read-only file system [ 982.980086][ T6216] udevd[6216]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system [ 982.993091][ T6093] udevd[6093]: symlink '../../loop1' '/dev/disk/by-diskseq/1771.tmp-b7:1' failed: Read-only file system [ 983.117799][ T6216] udevd[6216]: symlink '../../loop9' '/dev/disk/by-diskseq/1776.tmp-b7:9' failed: Read-only file system [ 983.144429][T13748] loop2: detected capacity change from 0 to 256 [ 983.213901][T13748] exfat: Deprecated parameter 'utf8' [ 983.222998][ T6216] udevd[6216]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system [ 983.287157][T13748] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 983.330589][ T6216] udevd[6216]: symlink '../../loop9' '/dev/disk/by-diskseq/1776.tmp-b7:9' failed: Read-only file system [ 983.397045][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9490'. [ 983.422883][ T6216] udevd[6216]: symlink '../../loop9' '/dev/disk/by-diskseq/1776.tmp-b7:9' failed: Read-only file system [ 983.430464][ T6088] udevd[6088]: symlink '../../loop2' '/dev/disk/by-diskseq/1777.tmp-b7:2' failed: Read-only file system [ 983.460916][T13760] loop9: detected capacity change from 0 to 1024 [ 983.494549][ T6088] udevd[6088]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system [ 983.751972][ T6088] udevd[6088]: symlink '../../loop2' '/dev/disk/by-diskseq/1777.tmp-b7:2' failed: Read-only file system [ 984.143598][T13788] loop9: detected capacity change from 0 to 24 [ 984.341973][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9499'. [ 984.453584][T13801] loop2: detected capacity change from 0 to 1024 [ 984.654068][T13809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.051129][T13744] loop1: detected capacity change from 0 to 32768 [ 985.203143][T13744] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 985.498354][T13744] XFS (loop1): Ending clean mount [ 985.530496][T13744] XFS (loop1): Quotacheck needed: Please wait. [ 985.698666][T13744] XFS (loop1): Quotacheck: Done. [ 986.041070][T10109] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 986.381477][T13878] netlink: 'syz.7.9518': attribute type 25 has an invalid length. [ 986.540044][T10440] Bluetooth: hci1: command 0x0406 tx timeout [ 986.606217][ T5845] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 986.677604][T13887] IPVS: Error connecting to the multicast addr [ 986.845466][ T5845] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 986.873299][ T5845] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 986.903559][ T5845] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 986.932462][ T5845] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 986.958450][ T5845] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 987.012888][ T5845] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 987.048260][ T5845] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 987.082665][ T5845] usb 10-1: Product: syz [ 987.110447][ T5845] usb 10-1: Manufacturer: syz [ 987.155347][ T5845] cdc_wdm 10-1:1.0: skipping garbage [ 987.155381][ T5845] cdc_wdm 10-1:1.0: skipping garbage [ 987.185571][ T5845] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 987.185605][ T5845] cdc_wdm 10-1:1.0: Unknown control protocol [ 987.396963][ T5845] usb 10-1: USB disconnect, device number 4 [ 987.524969][T13923] loop1: detected capacity change from 0 to 128 [ 987.605213][T13923] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 987.764969][ T6216] udevd[6216]: symlink '../../loop1' '/dev/disk/by-diskseq/1788.tmp-b7:1' failed: Read-only file system [ 987.846512][ T6216] udevd[6216]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 987.927771][T13872] loop3: detected capacity change from 0 to 40427 [ 987.950442][T10109] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 987.979155][T13872] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 988.034342][T13872] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 988.103683][ T6088] udevd[6088]: symlink '../../loop1' '/dev/disk/by-diskseq/1788.tmp-b7:1' failed: Read-only file system [ 988.153350][T13872] F2FS-fs (loop3): invalid crc value [ 988.207608][ T6088] udevd[6088]: symlink '../../loop1' '/dev/disk/by-diskseq/1788.tmp-b7:1' failed: Read-only file system [ 988.317124][ T6093] udevd[6093]: symlink '../../loop9' '/dev/disk/by-diskseq/1784.tmp-b7:9' failed: Read-only file system [ 988.355620][ T6088] udevd[6088]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 988.428741][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-diskseq/1789.tmp-b7:3' failed: Read-only file system [ 988.487969][T13917] loop6: detected capacity change from 0 to 32768 [ 988.504237][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 988.529416][ T6088] udevd[6088]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 988.541529][T13872] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 988.575834][ T6093] udevd[6093]: symlink '../../loop9' '/dev/disk/by-diskseq/1784.tmp-b7:9' failed: Read-only file system [ 988.606047][T13872] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 988.645387][T13917] ERROR: (device loop6): diRead: i_ino != di_number [ 988.645387][T13917] [ 988.655193][T13872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 988.670403][T13954] gfs2: not a GFS2 filesystem [ 988.682415][T13917] ERROR: (device loop6): remounting filesystem as read-only [ 988.947909][T13911] loop2: detected capacity change from 0 to 32768 [ 989.155203][T13911] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 989.155203][T13911] [ 989.560447][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9540'. [ 989.972290][T14000] loop6: detected capacity change from 0 to 128 [ 990.074905][T14000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 990.134299][T14000] System zones: 1-3, 19-19, 35-36 [ 990.141967][T14000] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 990.275855][T14011] loop7: detected capacity change from 0 to 64 [ 990.555978][T14095] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 990.860473][T14034] loop2: detected capacity change from 0 to 256 [ 991.002692][T14034] FAT-fs (loop2): Directory bread(block 64) failed [ 991.021142][T14034] FAT-fs (loop2): Directory bread(block 65) failed [ 991.070712][T14034] FAT-fs (loop2): Directory bread(block 66) failed [ 991.107883][T14034] FAT-fs (loop2): Directory bread(block 67) failed [ 991.143523][T14034] FAT-fs (loop2): Directory bread(block 68) failed [ 991.188884][T14034] FAT-fs (loop2): Directory bread(block 69) failed [ 991.212452][T14034] FAT-fs (loop2): Directory bread(block 70) failed [ 991.235520][T14034] FAT-fs (loop2): Directory bread(block 71) failed [ 991.252152][T14034] FAT-fs (loop2): Directory bread(block 72) failed [ 991.295226][T14034] FAT-fs (loop2): Directory bread(block 73) failed [ 991.305412][T14044] loop1: detected capacity change from 0 to 4096 [ 991.419647][T14044] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 991.473305][T14061] could not open pipe file descriptor [ 991.544188][T14044] ntfs3(loop1): ino=1a, mi_enum_attr [ 991.571923][T14044] ntfs3(loop1): ino=1a, mi_enum_attr [ 991.577263][T14044] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 991.811435][ T30] audit: type=1800 audit(1015.284:1492): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9556" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 992.330265][T14099] loop2: detected capacity change from 0 to 8 [ 992.358914][T14099] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 992.411810][T14099] cramfs: Error -3 while decompressing! [ 992.427051][T14099] cramfs: ffffffff9af2cd38(16)->ffff88804a105000(4096) [ 992.454188][T14099] cramfs: Error -3 while decompressing! [ 992.498563][T14099] cramfs: ffffffff9af2cd38(16)->ffff88804a105000(4096) [ 992.529449][ T30] audit: type=1800 audit(1016.051:1493): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9570" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 992.591104][T14107] loop6: detected capacity change from 0 to 1024 [ 992.600550][ T6088] udevd[6088]: symlink '../../loop1' '/dev/disk/by-diskseq/1803.tmp-b7:1' failed: Read-only file system [ 992.610089][ T6216] udevd[6216]: incorrect cramfs checksum on /dev/loop2 [ 992.652054][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-diskseq/1804.tmp-b7:2' failed: Read-only file system [ 992.670483][ T6163] udevd[6163]: symlink '../../loop7' '/dev/disk/by-diskseq/1798.tmp-b7:7' failed: Read-only file system [ 992.673087][T14111] loop1: detected capacity change from 0 to 512 [ 992.762563][ T6093] udevd[6093]: symlink '../../loop6' '/dev/disk/by-diskseq/1805.tmp-b7:6' failed: Read-only file system [ 992.768300][T14111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.778561][ T6093] udevd[6093]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 992.795310][ T6093] udevd[6093]: symlink '../../loop6' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:6' failed: Read-only file system [ 992.831477][ T6088] udevd[6088]: symlink '../../loop9' '/dev/disk/by-diskseq/1784.tmp-b7:9' failed: Read-only file system [ 992.879730][T14111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.976045][ T6088] udevd[6088]: symlink '../../loop2' '/dev/disk/by-diskseq/1804.tmp-b7:2' failed: Read-only file system [ 993.006468][ T6216] udevd[6216]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 993.055182][ T12] hfsplus: b-tree write err: -5, ino 4 [ 993.113076][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9578'. [ 993.231936][T14134] loop7: detected capacity change from 0 to 2048 [ 993.327074][T14134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.345618][T14141] loop6: detected capacity change from 0 to 256 [ 993.355395][T10109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.411997][T14141] exfat: Deprecated parameter 'utf8' [ 993.490831][T14134] overlayfs: upper fs needs to support d_type. [ 993.563072][T14134] overlayfs: cleanup of 'work/#3' failed (-2) [ 993.613953][T14141] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 993.622566][T14134] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 993.731162][T14134] overlayfs: failed to set xattr on upper [ 993.736925][T14134] overlayfs: ...falling back to redirect_dir=nofollow. [ 993.826341][T14134] overlayfs: ...falling back to index=off. [ 993.862633][T14134] overlayfs: ...falling back to uuid=null. [ 994.041574][T14165] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 994.242327][T14770] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 994.264862][T14770] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 994.550740][ T9413] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 994.763310][ T9413] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 994.781551][ T9413] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 994.821406][ T9413] usb 10-1: config 220 has an invalid descriptor of length 237, skipping remainder of the config [ 994.865642][ T9413] usb 10-1: config 220 has no interface number 2 [ 994.893995][ T9413] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 994.941195][ T9413] usb 10-1: config 220 interface 0 has no altsetting 0 [ 994.961192][ T9413] usb 10-1: config 220 interface 76 has no altsetting 0 [ 994.968168][ T9413] usb 10-1: config 220 interface 1 has no altsetting 0 [ 994.987915][ T9413] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 995.021137][ T9413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.073954][ T9413] usb 10-1: Product: syz [ 995.092541][ T9413] usb 10-1: Manufacturer: syz [ 995.110752][ T9413] usb 10-1: SerialNumber: syz [ 995.338336][T14209] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 995.402910][T16353] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.412850][ T9413] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 995.445835][ T9413] usb 10-1: No valid video chain found. [ 995.475521][ T9413] usb 10-1: selecting invalid altsetting 0 [ 995.515999][T14210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9600'. [ 995.540458][ T9413] usb 10-1: selecting invalid altsetting 0 [ 995.566155][ T9413] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 995.613876][ T9413] usb 10-1: USB disconnect, device number 5 [ 995.777606][T16353] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.855541][T14175] loop6: detected capacity change from 0 to 32768 [ 995.975592][T14175] jfs_create: dtInsert returned -EIO [ 995.987232][T16353] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.003757][T14175] ERROR: (device loop6): txAbort: [ 996.003757][T14175] [ 996.284498][T16353] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.087967][T16353] veth0_to_bridge: left allmulticast mode [ 997.133001][T16353] veth0_to_bridge: left promiscuous mode [ 997.138917][T16353] bridge0: port 3(veth0_to_bridge) entered disabled state [ 997.228741][T16353] bridge_slave_1: left allmulticast mode [ 997.234430][T16353] bridge_slave_1: left promiscuous mode [ 997.248329][T10440] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.266835][T10440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.275545][T10440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.294767][T10440] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.313546][T10440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.332528][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.404515][ T8386] udevd[8386]: symlink '../../loop9' '/dev/disk/by-diskseq/1784.tmp-b7:9' failed: Read-only file system [ 997.419288][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-diskseq/1794.tmp-b7:3' failed: Read-only file system [ 997.432618][ T6088] udevd[6088]: symlink '../../loop2' '/dev/disk/by-diskseq/1807.tmp-b7:2' failed: Read-only file system [ 997.463580][T16353] bridge_slave_0: left allmulticast mode [ 997.469635][T16353] bridge_slave_0: left promiscuous mode [ 997.475889][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.649148][ T6216] udevd[6216]: symlink '../../loop6' '/dev/disk/by-diskseq/1814.tmp-b7:6' failed: Read-only file system [ 997.727684][ T6088] udevd[6088]: symlink '../../loop3' '/dev/disk/by-diskseq/1794.tmp-b7:3' failed: Read-only file system [ 997.752648][ T5845] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 997.830900][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-diskseq/1807.tmp-b7:2' failed: Read-only file system [ 997.989330][ T5845] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 998.010299][ T5845] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 998.036937][ T5845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.090337][ T6216] udevd[6216]: symlink '../../loop6' '/dev/disk/by-diskseq/1814.tmp-b7:6' failed: Read-only file system [ 998.115528][ T5845] usb 10-1: config 0 descriptor?? [ 998.121607][T14293] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 998.167355][ T6088] udevd[6088]: symlink '../../loop2' '/dev/disk/by-diskseq/1807.tmp-b7:2' failed: Read-only file system [ 998.217165][T14317] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 998.223737][T14317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 998.291884][T14317] vhci_hcd vhci_hcd.0: Device attached [ 998.475016][ T5953] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 998.534575][ T9413] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 998.558397][ T5845] hid_parser_main: 1 callbacks suppressed [ 998.558432][ T5845] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 998.605589][ T5845] kone 0003:1E7D:2CED.0008: item fetching failed at offset 3/5 [ 998.628322][ T5845] kone 0003:1E7D:2CED.0008: parse failed [ 998.635621][ T5845] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -22 [ 998.640349][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.667181][ T6216] udevd[6216]: symlink '../../loop1' '/dev/disk/by-diskseq/1811.tmp-b7:1' failed: Read-only file system [ 998.692411][ T5953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 998.710266][ T5953] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 998.722037][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.758126][ T5953] usb 3-1: config 0 descriptor?? [ 998.794321][ T5845] usb 10-1: USB disconnect, device number 6 [ 998.810531][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9624'. [ 998.944029][ T6216] udevd[6216]: symlink '../../loop1' '/dev/disk/by-diskseq/1811.tmp-b7:1' failed: Read-only file system [ 999.001628][ T5953] usb 3-1: USB disconnect, device number 43 [ 999.018586][T14312] loop6: detected capacity change from 0 to 32768 [ 999.040981][T14318] usb 37-1: recv xbuf, 0 [ 999.045655][T16361] vhci_hcd: stop threads [ 999.057214][T16361] vhci_hcd: release socket [ 999.063245][T14312] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9622 (14312) [ 999.076046][T16361] vhci_hcd: disconnect device [ 999.113544][ T9413] vhci_hcd: vhci_device speed not set [ 999.130129][T14312] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 999.165329][T14312] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 999.273942][T14312] BTRFS info (device loop6): enabling ssd optimizations [ 999.282198][T14312] BTRFS info (device loop6): enabling free space tree [ 999.342154][T10440] Bluetooth: hci4: command tx timeout [ 999.392461][T14095] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1000.209891][T16353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.276086][T16353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.320062][T16353] bond0 (unregistering): Released all slaves [ 1000.378782][T16353] bond1 (unregistering): Released all slaves [ 1000.821228][T16353] bond2 (unregistering): Released all slaves [ 1000.888114][T16353] bond3 (unregistering): Released all slaves [ 1000.958058][T14358] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9626'. [ 1001.132590][T16353] : left promiscuous mode [ 1001.334746][T14404] loop2: detected capacity change from 0 to 32768 [ 1001.346698][T10440] Bluetooth: hci4: command tx timeout [ 1002.195582][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-diskseq/1817.tmp-b7:2' failed: Read-only file system [ 1002.258757][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 1002.346766][ T6088] udevd[6088]: symlink '../../loop3' '/dev/disk/by-diskseq/1794.tmp-b7:3' failed: Read-only file system [ 1002.579165][ T6088] udevd[6088]: symlink '../../loop9' '/dev/disk/by-diskseq/1784.tmp-b7:9' failed: Read-only file system [ 1002.969868][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9651'. [ 1003.011571][ T30] audit: type=1326 audit(2000000008.387:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.2.9650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 1003.099305][T14422] loop1: detected capacity change from 0 to 32768 [ 1003.101313][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-diskseq/1817.tmp-b7:2' failed: Read-only file system [ 1003.115013][ T30] audit: type=1326 audit(2000000008.387:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.2.9650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 1003.120849][ T6088] udevd[6088]: symlink '../../loop9' '/dev/disk/by-diskseq/1784.tmp-b7:9' failed: Read-only file system [ 1003.283387][ T30] audit: type=1326 audit(2000000008.440:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.2.9650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 1003.306387][ T30] audit: type=1326 audit(2000000008.440:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.2.9650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 1003.329327][ T30] audit: type=1326 audit(2000000008.440:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.2.9650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 1003.351776][T10440] Bluetooth: hci4: command tx timeout [ 1003.357344][ T30] audit: type=1326 audit(2000000008.440:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.2.9650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75a158ebe9 code=0x7ffc0000 [ 1003.515984][T14422] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1003.599345][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-diskseq/1817.tmp-b7:2' failed: Read-only file system [ 1003.809539][ T5845] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1003.814892][ T6216] udevd[6216]: symlink '../../loop2' '/dev/disk/by-diskseq/1818.tmp-b7:2' failed: Read-only file system [ 1003.846028][T14422] XFS (loop1): Ending clean mount [ 1003.980921][T14522] loop2: detected capacity change from 0 to 4096 [ 1004.017952][ T6093] udevd[6093]: symlink '../../loop1' '/dev/disk/by-diskseq/1819.tmp-b7:1' failed: Read-only file system [ 1004.031399][ T6088] udevd[6088]: symlink '../../loop6' '/dev/disk/by-diskseq/1816.tmp-b7:6' failed: Read-only file system [ 1004.047878][ T5845] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1004.079737][ T5845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1004.113640][ T5845] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1004.155470][ T5845] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1004.180368][T14522] ntfs3(loop2): ino=b, Correct links count -> 1. [ 1004.199379][ T5845] usb 10-1: Product: syz [ 1004.206301][T14522] ntfs3(loop2): ino=18, mi_enum_attr [ 1004.226405][T16353] hsr_slave_0: left promiscuous mode [ 1004.238159][ T5845] usb 10-1: Manufacturer: syz [ 1004.242863][ T5845] usb 10-1: SerialNumber: syz [ 1004.258576][T10109] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1004.293150][T16353] hsr_slave_1: left promiscuous mode [ 1004.332533][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.349975][ T5845] usb 10-1: config 0 descriptor?? [ 1004.399918][T16353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.433851][ T5845] usb 10-1: selecting invalid altsetting 0 [ 1004.467645][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.473551][T28119] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1004.475055][T16353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.686970][T28119] usb 4-1: Using ep0 maxpacket: 8 [ 1004.688883][T16353] veth1_macvtap: left promiscuous mode [ 1004.736857][T28119] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1004.745293][T16353] veth0_macvtap: left promiscuous mode [ 1004.764703][T28119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.802097][T16353] veth1_vlan: left promiscuous mode [ 1004.807119][T28119] usb 4-1: Product: syz [ 1004.814118][ T5845] usb 10-1: USB disconnect, device number 7 [ 1004.829437][T28119] usb 4-1: Manufacturer: syz [ 1004.847491][T28119] usb 4-1: SerialNumber: syz [ 1004.858032][T16353] veth0_vlan: left promiscuous mode [ 1004.901680][T28119] usb 4-1: config 0 descriptor?? [ 1004.993316][T28119] gspca_main: se401-2.14.0 probing 047d:5003 [ 1005.285994][T10440] Bluetooth: hci4: command tx timeout [ 1005.322644][T28119] gspca_se401: Bayer format not supported! [ 1005.378579][ T30] audit: type=1326 audit(2000000010.875:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.6.9664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c58ebe9 code=0x7ffc0000 [ 1005.492121][ T30] audit: type=1326 audit(2000000010.875:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.6.9664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c58ebe9 code=0x7ffc0000 [ 1005.559921][T28119] usb 4-1: USB disconnect, device number 36 [ 1005.584870][ T30] audit: type=1326 audit(2000000010.875:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.6.9664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f718c58ebe9 code=0x7ffc0000 [ 1005.634148][ T30] audit: type=1326 audit(2000000010.875:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.6.9664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c58ebe9 code=0x7ffc0000 [ 1005.989260][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9671'. [ 1006.098801][T14630] loop9: detected capacity change from 0 to 512 [ 1006.155337][T14630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.209687][T14630] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.355260][T14630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1006.441910][T14630] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 1006.487551][T14630] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 1006.584624][T14650] loop6: detected capacity change from 0 to 256 [ 1006.656264][T14650] FAT-fs (loop6): Directory bread(block 64) failed [ 1006.682695][ T8312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.684038][T14650] FAT-fs (loop6): Directory bread(block 65) failed [ 1006.737072][T14650] FAT-fs (loop6): Directory bread(block 66) failed [ 1006.775346][T14650] FAT-fs (loop6): Directory bread(block 67) failed [ 1006.807557][T14650] FAT-fs (loop6): Directory bread(block 68) failed [ 1006.843328][T14650] FAT-fs (loop6): Directory bread(block 69) failed [ 1006.904672][T14650] FAT-fs (loop6): Directory bread(block 70) failed [ 1006.944276][T14650] FAT-fs (loop6): Directory bread(block 71) failed [ 1006.958132][T14650] FAT-fs (loop6): Directory bread(block 72) failed [ 1006.958627][T14663] netlink: 'syz.9.9679': attribute type 10 has an invalid length. [ 1006.968657][T14650] FAT-fs (loop6): Directory bread(block 73) failed [ 1007.251052][ T6216] udevd[6216]: symlink '../../loop6' '/dev/disk/by-diskseq/1824.tmp-b7:6' failed: Read-only file system [ 1007.313237][ T6216] udevd[6216]: symlink '../../loop6' '/dev/disk/by-diskseq/1824.tmp-b7:6' failed: Read-only file system [ 1007.388956][ T6216] udevd[6216]: symlink '../../loop6' '/dev/disk/by-diskseq/1826.tmp-b7:6' failed: Read-only file system [ 1007.504047][T16353] team0 (unregistering): Port device team_slave_1 removed [ 1007.543163][T14659] loop3: detected capacity change from 0 to 32768 [ 1007.633349][T16353] team0 (unregistering): Port device team_slave_0 removed [ 1007.709797][ T6088] udevd[6088]: symlink '../../loop6' '/dev/disk/by-diskseq/1826.tmp-b7:6' failed: Read-only file system [ 1007.725879][T14659] read_mapping_page failed! [ 1007.730929][T14659] ERROR: (device loop3): txAbort: [ 1007.730929][T14659] [ 1007.828859][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-diskseq/1827.tmp-b7:3' failed: Read-only file system [ 1007.833096][ T6088] udevd[6088]: symlink '../../loop6' '/dev/disk/by-diskseq/1826.tmp-b7:6' failed: Read-only file system [ 1007.843962][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system [ 1008.031524][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-diskseq/1827.tmp-b7:3' failed: Read-only file system [ 1008.061874][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system [ 1008.137975][T14684] netlink: 'syz.3.9686': attribute type 83 has an invalid length. [ 1008.430051][ T6216] udevd[6216]: symlink '../../loop3' '/dev/disk/by-diskseq/1827.tmp-b7:3' failed: Read-only file system [ 1008.618345][T16353] team0 (unregistering): Port device dummy0 removed [ 1009.054164][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.123500][T14663] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1009.197669][T14773] loop1: detected capacity change from 0 to 256 [ 1009.201605][T14697] macsec1: entered promiscuous mode [ 1009.209509][T14697] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1009.269919][T14773] FAT-fs (loop1): Directory bread(block 64) failed [ 1009.302270][T14773] FAT-fs (loop1): Directory bread(block 65) failed [ 1009.332128][T14773] FAT-fs (loop1): Directory bread(block 66) failed [ 1009.349138][T14697] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1009.375420][T14773] FAT-fs (loop1): Directory bread(block 67) failed [ 1009.393825][T14773] FAT-fs (loop1): Directory bread(block 68) failed [ 1009.400483][T14773] FAT-fs (loop1): Directory bread(block 69) failed [ 1009.456574][T14773] FAT-fs (loop1): Directory bread(block 70) failed [ 1009.480260][T14773] FAT-fs (loop1): Directory bread(block 71) failed [ 1009.494788][T14773] FAT-fs (loop1): Directory bread(block 72) failed [ 1009.502684][T14773] FAT-fs (loop1): Directory bread(block 73) failed [ 1009.856933][T14277] chnl_net:caif_netlink_parms(): no params data found [ 1010.258427][ T5953] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1010.272293][T28119] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1010.434118][ T5953] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1010.489027][T28119] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1010.524224][T28119] usb 4-1: config 1 has no interface number 0 [ 1010.531661][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1010.560790][T28119] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1010.574923][ T5953] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1010.611860][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.639458][T28119] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1010.662302][ T5953] usb 3-1: config 0 descriptor?? [ 1010.675154][T28119] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.700352][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.727760][T28119] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1010.735895][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.744479][T28119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.765257][T14277] bridge_slave_0: entered allmulticast mode [ 1010.795972][T14277] bridge_slave_0: entered promiscuous mode [ 1010.800869][T28119] usb 4-1: Product: syz [ 1010.806012][T28119] usb 4-1: Manufacturer: syz [ 1010.813253][T28119] usb 4-1: SerialNumber: syz [ 1010.824280][T14812] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1010.875600][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.923267][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.956571][T14277] bridge_slave_1: entered allmulticast mode [ 1010.978216][T14277] bridge_slave_1: entered promiscuous mode [ 1011.008034][T16353] ================================================================== [ 1011.016121][T16353] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x9db/0xa30 [ 1011.024226][T16353] Write of size 8 at addr ffff8880534dc468 by task kworker/u8:10/16353 [ 1011.032476][T16353] [ 1011.034803][T16353] CPU: 0 UID: 0 PID: 16353 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1011.034850][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.034876][T16353] Workqueue: netns cleanup_net [ 1011.034936][T16353] Call Trace: [ 1011.034948][T16353] [ 1011.034962][T16353] dump_stack_lvl+0x116/0x1f0 [ 1011.035016][T16353] print_report+0xcd/0x630 [ 1011.035050][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.035097][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.035142][T16353] ? __phys_addr+0xe8/0x180 [ 1011.035201][T16353] ? __xfrm_state_delete+0x9db/0xa30 [ 1011.035248][T16353] kasan_report+0xe0/0x110 [ 1011.035284][T16353] ? __xfrm_state_delete+0x9db/0xa30 [ 1011.035338][T16353] __xfrm_state_delete+0x9db/0xa30 [ 1011.035387][T16353] xfrm_state_flush+0x512/0x700 [ 1011.035439][T16353] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 1011.035506][T16353] xfrm6_tunnel_net_exit+0x3d/0x160 [ 1011.035568][T16353] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 1011.035633][T16353] ops_undo_list+0x2ee/0xab0 [ 1011.035694][T16353] ? __pfx_ops_undo_list+0x10/0x10 [ 1011.035752][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.035800][T16353] ? idr_destroy+0x62/0x2e0 [ 1011.035845][T16353] cleanup_net+0x408/0x890 [ 1011.035907][T16353] ? __pfx_cleanup_net+0x10/0x10 [ 1011.035967][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.036014][T16353] ? rcu_is_watching+0x12/0xc0 [ 1011.036067][T16353] process_one_work+0x9cf/0x1b70 [ 1011.036117][T16353] ? __pfx_bond_3ad_state_machine_handler+0x10/0x10 [ 1011.036191][T16353] ? __pfx_process_one_work+0x10/0x10 [ 1011.036233][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.036286][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.036333][T16353] ? assign_work+0x1a0/0x250 [ 1011.036372][T16353] worker_thread+0x6c8/0xf10 [ 1011.036425][T16353] ? __pfx_worker_thread+0x10/0x10 [ 1011.036468][T16353] kthread+0x3c5/0x780 [ 1011.036505][T16353] ? __pfx_kthread+0x10/0x10 [ 1011.036543][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.036589][T16353] ? rcu_is_watching+0x12/0xc0 [ 1011.036637][T16353] ? __pfx_kthread+0x10/0x10 [ 1011.036675][T16353] ret_from_fork+0x5d7/0x6f0 [ 1011.036710][T16353] ? __pfx_kthread+0x10/0x10 [ 1011.036748][T16353] ret_from_fork_asm+0x1a/0x30 [ 1011.036808][T16353] [ 1011.036821][T16353] [ 1011.257749][T16353] Allocated by task 10180: [ 1011.262163][T16353] kasan_save_stack+0x33/0x60 [ 1011.266876][T16353] kasan_save_track+0x14/0x30 [ 1011.271582][T16353] __kasan_slab_alloc+0x89/0x90 [ 1011.276462][T16353] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1011.281944][T16353] xfrm_state_alloc+0x23/0x5c0 [ 1011.286716][T16353] __find_acq_core+0xb59/0x2900 [ 1011.291582][T16353] xfrm_find_acq+0x7b/0xa0 [ 1011.296014][T16353] xfrm_alloc_userspi+0x58e/0xbb0 [ 1011.301056][T16353] xfrm_user_rcv_msg+0x58e/0xc00 [ 1011.306011][T16353] netlink_rcv_skb+0x158/0x420 [ 1011.310800][T16353] xfrm_netlink_rcv+0x71/0x90 [ 1011.315488][T16353] netlink_unicast+0x5aa/0x870 [ 1011.320274][T16353] netlink_sendmsg+0x8d1/0xdd0 [ 1011.325061][T16353] ____sys_sendmsg+0xa98/0xc70 [ 1011.329827][T16353] ___sys_sendmsg+0x134/0x1d0 [ 1011.334523][T16353] __sys_sendmsg+0x16d/0x220 [ 1011.339134][T16353] do_syscall_64+0xcd/0x4c0 [ 1011.343662][T16353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.349558][T16353] [ 1011.351870][T16353] Freed by task 9386: [ 1011.355841][T16353] kasan_save_stack+0x33/0x60 [ 1011.360542][T16353] kasan_save_track+0x14/0x30 [ 1011.365240][T16353] kasan_save_free_info+0x3b/0x60 [ 1011.370302][T16353] __kasan_slab_free+0x60/0x70 [ 1011.375096][T16353] kmem_cache_free+0x2d1/0x4d0 [ 1011.379881][T16353] xfrm_state_gc_task+0x50a/0x770 [ 1011.384926][T16353] process_one_work+0x9cf/0x1b70 [ 1011.389877][T16353] worker_thread+0x6c8/0xf10 [ 1011.394489][T16353] kthread+0x3c5/0x780 [ 1011.398566][T16353] ret_from_fork+0x5d7/0x6f0 [ 1011.403159][T16353] ret_from_fork_asm+0x1a/0x30 [ 1011.407942][T16353] [ 1011.410259][T16353] The buggy address belongs to the object at ffff8880534dc440 [ 1011.410259][T16353] which belongs to the cache xfrm_state of size 928 [ 1011.424228][T16353] The buggy address is located 40 bytes inside of [ 1011.424228][T16353] freed 928-byte region [ffff8880534dc440, ffff8880534dc7e0) [ 1011.437944][T16353] [ 1011.440262][T16353] The buggy address belongs to the physical page: [ 1011.446663][T16353] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880534dccc0 pfn:0x534dc [ 1011.456725][T16353] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1011.465226][T16353] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1011.472773][T16353] page_type: f5(slab) [ 1011.476787][T16353] raw: 00fff00000000040 ffff8881426e7b40 dead000000000122 0000000000000000 [ 1011.485377][T16353] raw: ffff8880534dccc0 00000000800f000c 00000000f5000000 0000000000000000 [ 1011.493968][T16353] head: 00fff00000000040 ffff8881426e7b40 dead000000000122 0000000000000000 [ 1011.502646][T16353] head: ffff8880534dccc0 00000000800f000c 00000000f5000000 0000000000000000 [ 1011.511326][T16353] head: 00fff00000000002 ffffea00014d3701 00000000ffffffff 00000000ffffffff [ 1011.520003][T16353] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1011.528668][T16353] page dumped because: kasan: bad access detected [ 1011.535075][T16353] page_owner tracks the page as allocated [ 1011.540777][T16353] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6989, tgid 6987 (syz.0.433), ts 153985202701, free_ts 153145925916 [ 1011.559984][T16353] post_alloc_hook+0x1c0/0x230 [ 1011.564780][T16353] get_page_from_freelist+0x132b/0x38e0 [ 1011.570352][T16353] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1011.576277][T16353] alloc_pages_mpol+0x1fb/0x550 [ 1011.581134][T16353] new_slab+0x247/0x330 [ 1011.585304][T16353] ___slab_alloc+0xcf2/0x1740 [ 1011.589997][T16353] __slab_alloc.constprop.0+0x56/0xb0 [ 1011.595387][T16353] kmem_cache_alloc_noprof+0xef/0x3b0 [ 1011.600788][T16353] xfrm_state_alloc+0x23/0x5c0 [ 1011.605559][T16353] xfrm_add_sa+0x1283/0x5c50 [ 1011.610168][T16353] xfrm_user_rcv_msg+0x58e/0xc00 [ 1011.615117][T16353] netlink_rcv_skb+0x158/0x420 [ 1011.619903][T16353] xfrm_netlink_rcv+0x71/0x90 [ 1011.624586][T16353] netlink_unicast+0x5aa/0x870 [ 1011.629373][T16353] netlink_sendmsg+0x8d1/0xdd0 [ 1011.634163][T16353] ____sys_sendmsg+0xa98/0xc70 [ 1011.638934][T16353] page last free pid 6828 tgid 6825 stack trace: [ 1011.645256][T16353] __free_frozen_pages+0x7d5/0x10f0 [ 1011.650473][T16353] stack_depot_save_flags+0x352/0x9c0 [ 1011.655867][T16353] kasan_save_stack+0x42/0x60 [ 1011.660569][T16353] kasan_save_track+0x14/0x30 [ 1011.665268][T16353] __kasan_kmalloc+0xaa/0xb0 [ 1011.669880][T16353] ocfs2_dir_open+0x43/0xf0 [ 1011.674392][T16353] do_dentry_open+0x982/0x1530 [ 1011.679190][T16353] vfs_open+0x82/0x3f0 [ 1011.683271][T16353] path_openat+0x1de4/0x2cb0 [ 1011.687861][T16353] do_filp_open+0x20b/0x470 [ 1011.692366][T16353] do_sys_openat2+0x11b/0x1d0 [ 1011.697051][T16353] __x64_sys_openat+0x174/0x210 [ 1011.701915][T16353] do_syscall_64+0xcd/0x4c0 [ 1011.706449][T16353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.712352][T16353] [ 1011.714663][T16353] Memory state around the buggy address: [ 1011.720287][T16353] ffff8880534dc300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1011.728348][T16353] ffff8880534dc380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 1011.736410][T16353] >ffff8880534dc400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1011.744468][T16353] ^ [ 1011.751920][T16353] ffff8880534dc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1011.759980][T16353] ffff8880534dc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1011.768035][T16353] ================================================================== [ 1011.776217][T16353] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 1011.783941][T16353] CPU: 0 UID: 0 PID: 16353 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1011.793593][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.803661][T16353] Workqueue: netns cleanup_net [ 1011.808474][T16353] Call Trace: [ 1011.811754][T16353] [ 1011.814692][T16353] dump_stack_lvl+0x3d/0x1f0 [ 1011.819322][T16353] vpanic+0x6e8/0x7a0 [ 1011.823349][T16353] ? __pfx_vpanic+0x10/0x10 [ 1011.827899][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.833565][T16353] ? mark_held_locks+0x49/0x80 [ 1011.838378][T16353] ? __xfrm_state_delete+0x9db/0xa30 [ 1011.843738][T16353] panic+0xca/0xd0 [ 1011.847503][T16353] ? __pfx_panic+0x10/0x10 [ 1011.851970][T16353] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 1011.857814][T16353] end_report+0x159/0x170 [ 1011.862164][T16353] kasan_report+0xee/0x110 [ 1011.866602][T16353] ? __xfrm_state_delete+0x9db/0xa30 [ 1011.871925][T16353] __xfrm_state_delete+0x9db/0xa30 [ 1011.877072][T16353] xfrm_state_flush+0x512/0x700 [ 1011.881961][T16353] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 1011.887826][T16353] xfrm6_tunnel_net_exit+0x3d/0x160 [ 1011.893078][T16353] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 1011.898933][T16353] ops_undo_list+0x2ee/0xab0 [ 1011.903567][T16353] ? __pfx_ops_undo_list+0x10/0x10 [ 1011.908720][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.914384][T16353] ? idr_destroy+0x62/0x2e0 [ 1011.918925][T16353] cleanup_net+0x408/0x890 [ 1011.923388][T16353] ? __pfx_cleanup_net+0x10/0x10 [ 1011.928380][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.934047][T16353] ? rcu_is_watching+0x12/0xc0 [ 1011.938847][T16353] process_one_work+0x9cf/0x1b70 [ 1011.943822][T16353] ? __pfx_bond_3ad_state_machine_handler+0x10/0x10 [ 1011.950461][T16353] ? __pfx_process_one_work+0x10/0x10 [ 1011.955854][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.961513][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.967165][T16353] ? assign_work+0x1a0/0x250 [ 1011.971767][T16353] worker_thread+0x6c8/0xf10 [ 1011.976382][T16353] ? __pfx_worker_thread+0x10/0x10 [ 1011.981514][T16353] kthread+0x3c5/0x780 [ 1011.985592][T16353] ? __pfx_kthread+0x10/0x10 [ 1011.990194][T16353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.995845][T16353] ? rcu_is_watching+0x12/0xc0 [ 1012.000633][T16353] ? __pfx_kthread+0x10/0x10 [ 1012.005239][T16353] ret_from_fork+0x5d7/0x6f0 [ 1012.009838][T16353] ? __pfx_kthread+0x10/0x10 [ 1012.014445][T16353] ret_from_fork_asm+0x1a/0x30 [ 1012.019242][T16353] [ 1012.022475][T16353] Kernel Offset: disabled [ 1012.026790][T16353] Rebooting in 86400 seconds..