last executing test programs: 4m47.691961146s ago: executing program 4 (id=108): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m46.997692935s ago: executing program 4 (id=117): sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x3f6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000300001f0000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 4m46.643878247s ago: executing program 4 (id=123): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x69c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x1, "a701f6dd566a4aa89e1f83b4ff1d093971e3aece62c53bb51200", 0x20385655}) 4m46.373372643s ago: executing program 4 (id=128): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000280)={[{@gid}, {@discard_size={'discard', 0x3d, 0x9}}, {@gid}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp866'}, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@grpquota}, {@usrquota}, {@uid}, {@quota}, {@gid}, {@noquota}, {@errors_remount}, {@gid}, {@noquota}], [{@subj_type={'subj_type', 0x3d, '+-]{.&Q.'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$.+[**@(*(.'}}, {@measure}]}, 0x5, 0x60ea, &(0x7f000000c4c0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 4m45.581379365s ago: executing program 4 (id=137): syz_mount_image$fuse(0xfffffffffffffffe, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX], 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000140)='fd') 4m44.247979202s ago: executing program 4 (id=157): unshare(0x2040600) getdents(0xffffffffffffffff, 0x0, 0x0) 4m43.852093802s ago: executing program 32 (id=157): unshare(0x2040600) getdents(0xffffffffffffffff, 0x0, 0x0) 4m12.069667615s ago: executing program 2 (id=556): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x1, 0x0, 0xffffffffffffffff}) 4m11.804414583s ago: executing program 2 (id=559): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timerfd_create(0x7, 0x0) 4m11.52116786s ago: executing program 2 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m11.171390704s ago: executing program 2 (id=569): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x40}}, {@errors_remount}, {@gid}, {@errors_remount}, {@umask}, {@errors_continue}]}, 0x4, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 4m10.374914312s ago: executing program 2 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 4m9.856836579s ago: executing program 2 (id=591): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000010c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {0x20}, [], {}, [], {0x10, 0x1}}, 0x24, 0x0) 4m9.250863437s ago: executing program 33 (id=591): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000010c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000001040)={{}, {0x20}, [], {}, [], {0x10, 0x1}}, 0x24, 0x0) 3m37.719564803s ago: executing program 5 (id=988): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b}) 3m37.603756547s ago: executing program 5 (id=990): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f0000006a80)={'gre0\x00', 0x0, 0x8000, 0x700, 0x4, 0x923, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x7, 0x2f, 0x0, @broadcast, @multicast1}}}}) 3m37.521864035s ago: executing program 5 (id=991): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3m37.218282059s ago: executing program 5 (id=994): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) 3m36.729185628s ago: executing program 5 (id=1000): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 3m35.825046787s ago: executing program 5 (id=1014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m35.6558084s ago: executing program 34 (id=1014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.609996484s ago: executing program 3 (id=2818): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) 8.01248422s ago: executing program 3 (id=2824): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000240)={{}, "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"}) 7.214648792s ago: executing program 6 (id=2830): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x168, 0x9, 0x178, 0xb, 0x290, 0x250, 0x250, 0x290, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [0xffffff00], 'veth1_to_team\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x140, 0x178, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'ip6_vti0\x00', {}, 0x5, 0xe}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x402, 0x2, 0x6}, {0x3, 0x1}, {0x1, 0x0, 0x3}, 0x9, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x96, 'syz1\x00', {0xb8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 6.623807069s ago: executing program 6 (id=2833): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="00000000f800", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) 5.97692974s ago: executing program 6 (id=2838): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 5.339498786s ago: executing program 6 (id=2841): setresuid(0x0, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002e0000006600000000000000160000000000000095000000000000004954053038dbdcbdd1a795fc1d5544513cc0537c565387ae9c4aae89a8dd3ee2a640661086ff844e59f1f6bec894f26b45da5a0bf77c16609a5dbab72807f15c"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x36) 4.978474202s ago: executing program 1 (id=2843): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x3}}, 0x10) 4.774027678s ago: executing program 6 (id=2845): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xff, 0x5e15, &(0x7f000000c740)="$eJzs3cuOHFf9B/BfX6bnkn8cK/orMhYLx4GQEOK7DeEWhwULWICEvMbWZBIZHC62QSSy8EReIDbAI8AmGxZ5BR4gz4B4ACzZrLIgFKrpc+yamh73GHu6uud8PlK76lena/qUv1NTfanqEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfO+7Pzrdi4jLv04LDkf8Xwwi+hGrdX0s6pmL+f7DiDgSW83xQkQMliPq9bf+eS7iXER8ciji3v1b6/XiM3vsx/lTN69/9v3v/P13f7xz5Cdv//ijdvsP///sx7+/HXH4B298/Nntp7PtAAAAUIqqqqpeepl/NL2+73fdKQBgJvLxv0rycrVarVY/1foP/fnqj7rQuqma7HaziIjN5jr1cwYfxwPAgtmMT7vuAh2Sf9GGEfFM150A5lqv6w6wL+7dv7XeS/n2mseDY+P2/D7ltvw3ew+u79htOk37HJNZ/X7diUE8v0t/VmfUh3mS8++38788bh+l++13/rOyW/6j8aVPxcn5D9r5t2zL/08RsbD59yfmX6qc//Bx8t8cLPD+L38AAAAAAA6+/P7/4Y4//11+8k3Zk0d9/ntsRn0AAAAAAAAAgKftScf/e8D4fwAAADC36tfqtT8ferhst+9iq5df6kU827o/UJh0scxa1/0AAAAAAAAAAAAAgJIMx+fwXupFLEXEs2trVVXVt6Z2/biedP1FV/r2Q8m6/iMPAABjnxxqXcvfi1iJiEvjtwZ+ubS2tlZVK6tr1Vq1upyfz46WV6rVxuvaPK2XLY/28IR4OKrqH7bSWK9p2uvlae3tn1c/1qga7KFjs9Fh4AAQEeOj0T1HpAOmqp6Lrp/lsBjs/weP/Z+96Pr3FAAAANh/VVVVvfR13kfT+H79rjsFAMxEPv63PxdQq9VqtVp98OqmarLbzSIiNpvr1M8ZDMcPAAtmMz7tugt0SP5FG0bEka47Acy1XtcdYF/cu39rvZfy7TWPB2l893wuyLb8N3tb6+X1J02naZ9jMqvfrzsxiOd36c8LM+rDPMn599v5Xx63j9L99jv/Wdkt/3o7D3fQn67l/Aft/FsOTv79ifmXKuc/fKz8B/IHAAAAAIA5lt//P+zz37zJAAAAAAAAALBw7t2/tZ6ve82f/39+wv16zTnXfx4YOf/envN3/e9BkvPvt/NvnZAzaMzffeth/v+6f2v9o5v//Fyezn3+S4NR/dhLvf5gmM75qZbeiatxLTbi1I77D7e1n97RvrSt/cyU9rM72kd1+2puPxHr8fO4Fm8/aF+ecmLUypT2akp7zn9g/y9Szn/YuNX5r6X2Xmtau/thf8d+35xOepyLf/33yzv3rtm7E4MH29ZUb9/xDvqz9X/yzCh+dWPj+onfXLl58/rpSJNtS89EmjxlOf+ldMv5v/LSuD3/3W/ur3c/HD12/vPiTgx3zf+lxny9va/OuG9dyPmP0i3nn49Ak/f/Rc5/9/3/tQ76AwAAAAAAAAAAAAAAAI9SVdXWJaIXI+JCuv6nq2szAYDZysf/KsnL1Wq1Wq1WH7y6qZrszWYREX9rrlM/Z/jtpB8GAMyz/0TEP7ruBJ2Rf8Hy9/3V0y903Rlgpm68/8FPr1y7tnH9Rtc9AQAAAAAAAAD+V3n8z2ON8Z+3zgNqjRu9bfzXt+LYwo7/2R8NtsY6Txv0Yjx6/O/j8ejxv4dTHm9pSvtoSvvylPaVKe0TL/RoyPm/mDLO+R9NG1bS+K+vdNCfruX8j6exnnP+X2rdr5l/9ZdFzr+/Lf+TN9/7xckb73/w+tX3rry78e7Gz06funDu7PlzZ8+fP/nO1Wsbp8b/dtjj/ZXzz2NfOw+0LDn/nLn8y5Lz/2Kq5V+WnP/LqZZ/WXL++fme/MuS88+vfeRflpz/q6mWf1ly/l9OtfzLkvN/LdXyL0vO/yupln9Zcv6vp1r+Zcn5n0i1/MuS8z+ZavmXJeefP+GSf1ly/vnMBvmXJed/JtXyL0vO/2yq5V+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Py/mmr5lyXn/7VUy78sOf83Ui3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/m+mWv5lefj9/2bMmDGTZ7r+ywQAAAAAAAAAAAAAtM3idOKutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcXIVd93AD97s9eGBDfciQO2uRlY2F3fwCEGk4SUkl4oCWnTkhrHXptNfKt3l5tQ2RTaEgWpSO0DfWiaRGkUqa1AVaSmEo2QGql9a54a8RK1Uh78AJWDklaJAludmf//vzOzs3N2bY89c87ng/DPu3POzH/OnJnd71rfWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAabf7Y1J8NZFmW/1/7Y0OWXZz/fV22N/9wfteFXiEAAABwtt6t/fn3l6RP7F3BTg3b/Nu1//GdhYWFhezz75x67y8WFtIFm7JsaG2W1S6L/v3nP1to3CZ4PhsdGGz4eLDg5ocKLh8uuHyk4PI1BZevLbh8tODyJQdgiXX1n8fUruyG2l831A9pdlk2UrvshjZ7PT+wdnAw/iynZqC2z8LIoWw6O5JNZRNL9hmo/Zdlr2/Ob+uBLN7WYMNtbcyy7PRPnj0Q1zAQjvENWdON1TQ+dm/fl2165yfPHvjW7FtXt5uFh2HJSrNs65Z8nS9k2eKPq7KBbG06JnGdgw3r3NhmnUNN6xyo7Zf/vXWdp1e4zni/R8M6f9BhnRvD5566Psuy+WzZbVo9nw1m61tuNR3v0foZkV9H/lB+IBte1XmyeQXnSb7Pj69vPk9az8l4/DeHYzK8zBoaH463v7RmyXE/0/Mkv9e9cK7m1/1QfqOjo40/Wm06V/Ntnr1x+XOg7WPX5hxI53LDObCl6BwYXDNUOwcGF9e8pekcmFyyz2A2ULutUzd2PgfGZ4+eGJ95+pnbp4/uPzx1eOrY5MSuHdt37ti+c+f4oekjUxP1P1d3SPvI+mwwnYNbwmtNPAdvbtm28ZRc+Pq5ex6M9sjzIL/vn74pX9DFg9ky53i+zQtbz/55kL7uNzwPhhueB21fU9s8D4ZX8DzItzm9dWVfM4cb/m+3hm69Fm5oOAcu5NfD/DYfvWX518KNYV0v3rrar4dDS86BeLcGwnMv/0z6fm/0rnBclp4X1+QXXLQmm5uZOnnHU/tnZ09OZmGcF5c2PFat58v6hvuULTlfBld9vuz9u1/edE2bz28Ix2r0ts6PVb7NjrHOj1Xt1b398Wz67LYsjHPsfB/Pdl/N8uOZskSH45lv88LtZ/+9YMolDa9/I0Wvf0Mjw/XXv6F0NEaaXv+WPjRDtZVl2enbV/b6NxL+P9+vf5f1yOtffqwevaPzOZBv8+L4as+B4Y6vf9eHORDWc0tIDKMNuf+92uXz9dO04bEsPG+Gh0fCeTMcb7H5vNm+ZJ/82vLb3jpxZufN1uubH6um71tKeN7kx+ovJzqfN/k2b0ye/WvHuvjXhteONUXnwMjQmny9I+kkqL/eLayL58Ad2YHseHYkO5j2yR/l/LbGtq3sHFgT/j/frx1X9cg5kB+rV7Z1Pgfybb6//dx+77Q1fCZt0/C9U+vPF5bL/NcML15f62E715k/X+fHd3T+2VC+zVs7VpszOh+n28JnLmpznFqfP8ud0wez83OcrgrrPLKz88+m8m0u27XC82lvlmVvTr5Z+3lX+PnuP87953eafu7b7mfKb06++eD4wz9czfoBADhz79X+nF9T/16z4V+sV/Lv/wAAAEBfiLl/MMxE/gcAAIDSiLl/KMxE/gcAAIDSiLl/OMykIvn/8bt2v/ruc1l6N8CFIF4eD8ND99S3ix3v+fDxpoVF+ec/+s2RV7/83MpuezDLsl8++MG22z9+T1xX3Ym4zg83f36Jq65b0e0/9sjido3vn3B6d/364/1Z6WkQu8qvj2+rXe+mpydr840Hs9p8eP7F5+vXX/84bn9qe337vw5vWrL30EDT/lvDem4Ic1N4T5mH9i4eh3zG/V7deO2/XvqZxduL+w1seX/tbr7yR/Xrje8R9fKl9e3j/V5u/f/ylW+/mm//1I3t1//cYPv1nwrX++Mwf76nvn3jMf9yw/r/JKw/3l7c745vfK/t+l+7sr79a+G8+FqYreu/788/9G67xyvezt676/vF25/43x21/eL1xetvXf/oc5NNx6P1+t94p349e5746VDj9vHz8Xaix+5uPr8HwuPb1CPPsuzbf5o1HefsI/X9/rll/fH6Ttzdfv23tazzxMB1tf0X78+Gpvv11b/d1vb+xvXs/YcNTffn5fvD8Xtn/Pv59Z56OJyP4fJf/KB+fa3vZfra/c2vN3H7r22oP2/j9Y23rP/llvXPX5cfu+L1P/BOff2v3bu2af17PxHOpwfqs2j9h//mkqb9v/6t+uNx8smxY8dn5qYPNhzVxufx2tF16y+6+H3vvyS8lrZ+vO/47ONTJzdNbJrIsk19+JaB3V7/N8L8n/qYP/e3UPfDn9bPu5c+Wf+6dfPP6h+/HD7/WHg849fHr/7VSNP52vq4z99bn2e7/lvDOlbqyq/893Ur2vDU516f+6c/fqv1+4J4f05cPlq7f69svqJ22cAb9ctbX6+K/Nflzc/rHw1P1OZ3w3FdCO/MvOWK+u21Xn98b5KXPlV//sbv5OL+Wcv7iWwYar4fZ7v+H4XvY753VfPrXzw/vvtcy7s5b8gG8iXMh9eHbL5+edwqHu+XTl/R9vbi+/Bk81evZpnLmnl6ZvzI9LG5p8Znp2Zmx2eefmbf0eNzx2b31d67dN8XivZffH6vrz2/D07t2pHVnu3H66PLLvT6Tzxy4OCdEzcdnDq0f+7Q7CMnpk4ePjAzc2Dq4MxN+w8dmnqyaP/pg3smt+3efue2scPTB/fctXv39t1j08eO58uoL6rArokvjh07ua+2y8yeHbsnd+7cMTF29PjBqT13TkyMzRXtX/vaNJbv/cTYyakj+2enj06NzUw/M7VncveuXdsK3/3x6IlDM5vGT84dG5+bmTo5Xr8vm2Zrn86/9hXtTzXMHA+vdy0Gwnfnn71tV3p/3Nw3v7TsVdU3af72NHs7vBdU/PpW9HHM/SNhJhXJ/wAAAFAFMfeHN/5fvED+BwAAgNKIuX9tmIn8DwAAAKURc/9omElF8r/+v/6//r/+v/6//n836f/r/3ei/6//38/r1//X/6dYr/X/Y+5fl2WVzP8AAABQBTH3rw8zkf8BAACgNGLuvyjMRP4HAACA0oi5/+Iwk4rkf/1//X/9/079/7it/n+m/6//f4b0//X/O9H/1//v5/X3YP9/nf4/vabX+v8x978vzKQi+R8AAACqIOb+94eZyP8AAABQGjH3XxJmIv8DAABAacTcvyHMpCL5X/9f/79b/f+LStH/9/v/G+n/6/+fCf1//f9O9P/1//t5/T3Y//f7/+k5vdb/j7n/V8JMKpL/AQAAoApi7v9AmIn8DwAAAKURc/+lYSbyPwAAAJRGzP2XhZlUJP/r/+v/+/3/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5//Iwk4rkfwAAAKiCmPuvCDOR/wEAAKA0Yu6/MsxE/gcAAIDSiLn/qjCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//r/9PsV7r/8fcf3WYSUXyPwAAAFRBzP3XhJnI/wAAANA3Bgsuj7n/g2Em8j8AAACURsz9G8NMKpL/9f/1//X/9f/1//X/u6m/+v/L/6uB/n+d/n8z/X/9f/1//X8667X+f8z9HwozqUj+BwAAgCqIuf/aMBP5HwAAAEoj5v7rwkzkfwAAACiNmPs3hZlUJP/r/1+I/v+w/n/DsdP/X9xP/z88rvr/+v+r4Pf/6/9n+v9n7EL35/t9/fr/+v8U67X+f8z9m8NMKpL/AQAAoApi7t8SZiL/AwAAQGnE3H99mIn8DwAAAKURc/8NYSYVyf/6/37/v/6//r/+v/5/N+n/6/93ov+v/9/P69f/1/+nWK/1/2PuvzHMpCL5HwAAAKog5v6bwkzkfwAAACiNmPtvDjOR/wEAAKA0Yu7fGmZSkfyv/6//r/+v/6//r//fTfr/+v+d6P/r//fz+vX/9f8p1mv9/5j7bwkzqUj+BwAAgCqIuf/WMBP5HwAAAEoj5v7bwkzkfwAAACiNmPvHwkwqkv/1//X/9f/1//X/9f+7Sf9f/78T/X/9/35ev/6//j/Feq3/H3P/7WEmFcn/AAAAUAUx998RZiL/AwAAQGnE3D8eZiL/AwAAQGnE3D8RZlKR/K//r/+v/6//r/+v/99N+v/6/53o/+v/9/P69f/1/ynWa/3/mPsnw0wqkv8BAACgCmLu3xZmIv8DAABAacTcvz3MRP4HAACA0oi5f0eYSUXyv/6//r/+v/6//r/+fzfp/+v/d6L/r//fz+vX/9f/p9lgm8/1Wv8/5v6dYSYVyf8AAABQBTH37wozkf8BAACgNGLuvzPMRP4HAACA0oi5/64wk4rkf/1//X/9f/1//X/9/27S/9f/70T/X/+/n9ev/6//T7Fe6//H3L87zKQi+R8AAACqIOb+D4eZyP8AAABQGjH33x1mIv8DAABAX2n3ewijmPs/EmZSkfyv/1/2/v/CWv1//X/9/87r1//vLv1//f9O9P/1//t5/fr/+v8U67X+f8z9e8JMKpL/AQAAoApi7r8nzET+BwAAgNKIuf/eMBP5HwAAAEoj5v69YSYVyf/6/2Xv//v9//r/+v9F69f/7y79f/3/TvT/+7P/H75t0f/vof5/fg7p/9OLeq3/H3P/fWEmFcn/AAAAUAUx9380zET+BwAAgNKIuf9jYSbyPwAAAJRGzP0fDzOpSP7X/9f/1//X/9f/1//vJv1//f9O9P/7s/8f6f/3Tv/f7/+nV/Va/z/m/vvDTCqS/wEAAKAKYu7/RJiJ/A8AAAClEXP/r4aZyP8AAABQGjH3PxBmUpH8r/+v/6//r/+v/6//3036//r/nej/6//38/r1//X/KdZr/f+Y+38tzGRV+X90NRsDAAAA51nM/Q+GmVTk3/8BAACgCmLu/2SYifwPAAAApRFz/6+HmVQk/+v/n5/+/2C6fv1//X/9f/1//f9zSf9f/z/T/z9jF7o/3+/r1//X/6dYr/X/Y+7/jTCTiuR/AAAAqIKY+38zzET+BwAAgNKIuf+3wkzkfwAAACiNmPsfCjOpSP7X//f7//X/9f/1//X/u0n/X/+/E/1//f9+Xr/+v/4/xXqt/x9z/2+HmVQk/wMAAEAVxNz/cJiJ/A8AAAClEXP/p8JM5H8AAAAojZj7Px1mUpH8r/+v/6//r/+v/6//3036//r/nej/6//38/r1//X/KdZr/f+Y+x8JM6lI/gcAAIAqiLn/M2Em8j8AAACURsz9vxNmIv8DAABAacTc/7thJhXJ//r/+v/6//r/+v/6/92k/7+0/5+/hun/1+n/6//38/r1//X/KdZr/f+Y+z8bZlKR/A8AAABVEHP/74WZyP8AAABQGjH3/36YifwPAAAApRFz/6NhJhXJ//r/+v/6//r/+v/6/92k/+/3/3ei/6//38/r1//X/6dYr/X/Y+7/XJhJRfI/AAAAVEHM/X8QZiL/AwAAQGnE3L8vzET+BwAAgNKIuf+xMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+xXuv/x9y/P8ykIvkfAAAAqiDm/s+Hmcj/AAAAUBox9x8IM5H/AQAAoDRi7j8YZlKR/K//r/+v/6//r/+v/99N+v/6/510of//i3wT/f+VudD9+X5fv/6//j/Feq3/H3P/VJhJRfI/AAAAVEHM/YfCTOR/AAAAKI2Y+w+Hmcj/AAAAUBox9z8eZlKR/K//r/+v/6//r/+v/99N+v/6/534/f/6//28fv1//X+K9Vr/P+b+6TCTiuR/AAAAqIKY+78QZiL/AwAAQGnE3P/FMBP5HwAAAEoj5v4jYSYVyf/6//r/+v/6//r/+v/dpP+v/9+J/r/+fz+vX/9f/59ivdb/j7n/aJhJRfI/AAAAVEHM/cfCTOR/AAAAKI2Y+4+Hmcj/AAAAUBox958IM6lI/tf/1//X/++v/v//Lej/6//3F/1//f9O9P/1//t5/fr/+v8U67X+f8z9fxhmUpH8DwAAAFUQc//JMBP5HwAAAEoj5v6ZMBP5HwAAAEoj5v7ZMJOK5H/9f/1//f/+6v9nfv+//n+f0f/X/+9E/1//v5/Xr/+v/0+xXuv/x9w/F2ZSkfwPAAAAVRBz/xNhJvI/AAAAlEbM/U+Gmcj/AAAAUBox9z8VZlKR/K//r/+v/6/////s3eXOYHcRx/EFXkBCuBiugEvgGrgM3KW4u7u7u7u7u0OhuCYlYWemodmes116+vzPzOfzZlJJ9p882Wx+2Xxz9P/6/yPp//X/W/T/+v8zv1//r/9n32r9f+7+e8ctQ/Y/AAAATJC7/z5xi/0PAAAAbeTuv2/cYv8DAABAG7n77xe3DNn/+n/9v/5f/6//1/8fSf+v/9+i/9f/n/n9+n/9P/tW6/9z998/bhmy/wEAAGCC3P0PiFvsfwAAAGgjd/8D4xb7HwAAANrI3f+guGXI/tf/6//1//p//b/+/0j6f/3/Fv2//v/M79f/6//Zt1r/n7v/wXHLkP0PAAAAE+Tuf0jcYv8DAABAG7n7Hxq32P8AAADQRu7+h8UtQ/a//l//r//X/+v/9f9H0v/r/7fo//X/Z36//l//z77V+v/c/Q+PW4bsfwAAAJggd/8j4hb7HwAAANrI3f/IuMX+BwAAgDZy9z8qbhmy//X/+n/9v/5f/6//P5L+X/+/Rf+v/z/z+/X/+n/2Hd7/3/O6/96r7f9z918XtwzZ/wAAADBB7v5Hxy32PwAAALSRu/8xcYv9DwAAAG3k7n9s3DJk/+v/9f839f833kH/r//X/9/07/X/tw39v/5/i/5f/3/m9+v/9f/sO7z/3+n9b/7PufsfF7cM2f8AAAAwQe7+x8ct9j8AAAC0kbv/CXGL/Q8AAABt5O5/YtwyZP/r//X/vv+v/9f/6/+PpP/X/2/R/+v/z/z+rf7/Hlfxfv0/E6zW/+fuf1LcMmT/AwAAwAS5+58ct9j/AAAA0Ebu/qfELfY/AAAAtJG7/6lxy5D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5nf7/v/+n/2rdb/5+5/WtwyZP8DAADABLn7nx632P8AAADQRu7+Z8Qt9j8AAAC0kbv/mXHLkP2v/9f/6//1//9X/38n/b/+f5v+X/+/Rf+v/z/z+/X/+n/2rdb/5+5/VtwyZP8DAADABLn7nx232P8AAADQRu7+58Qt9j8AAAC0kbv/uXHLkP2v/9f/6//1/77/r/8/kv5/bv9/481/c1+B/l//f+b36//1/+xbrf/P3f+8uGXI/gcAAIAJcvc/P26x/wEAAKCN3P0viFvsfwAAAGgjd/8L45Yh+1//r//X/+v/9f/6/yPdvv3/Vf4BdA30/5f5/v//0v/r//X/+n+2rdb/5+5/UdwyZP8DAADABLn7Xxy32P8AAADQRu7+l8Qt9j8AAAC0kbv/pXHLkP2v/9f/6//1//p//f+RfP9f/79F/3/l/v8ut/Dr6f/Xer/+X//PvtX6/9z9L4tbhux/AAAAmCB3/8vjFvsfAAAA2sjd/4q4xf4HAACANnL3vzJuGbL/b6n/v+Gul/+7/v/q6P+v/H79v/5f/6//1//r/7fo/33//8zv1//r/9m3Wv+fu/9VccuQ/Q8AAAAT5O5/ddxi/wMAAEAbuftfE7fY/wAAANBG7v7Xxi1D9r/v/+v/9f/6f/2//v9I+n/9/xb9v/7/zO/X/+v/2bda/5+7/3Vxy5D9DwAAABPk7n993GL/AwAAQBu5+98Qt9j/AAAA0Ebu/jfGLUP2v/5f/3/h/f8d9f9J/x8/V/2//v9W0P/r/y/p/6/ZRffzZ3+//l//z77V+v/c/W+KW4bsfwAAAJggd/+b4xb7HwAAANrI3f+WuMX+BwAAgDZy9781bhmy//X/+v8L7/99/7/o/+Pnqv/X/98K+n/9/yX9/zW76H7+7O/X/+v/2bda/5+7/21xy5D9DwAAABPk7n973GL/AwAAQBu5+98Rt9j/AAAA0Ebu/nfGLUP2v/5f/6//1//r//X/R9L/6/+36P/1/2d+v/5f/8++1fr/3P3viluG7H8AAACYIHf/u+MW+x8AAADayN3/nrjF/gcAAIA2cve/N24Zsv/1/2fv/+91fbxA/6//1//r/5ek/9f/b9H/6//P/H79v/6ffav1/7n73xe3DNn/AAAAMEHu/vfHLfY/AAAAtJG7/wNxi/0PAAAAbeTu/2DcMmT/6//P3v/7/r/+X/+v/1+b/l//v0X/r/8/8/v1//p/9q3W/+fu/1DcMmT/AwAAwAS5+z8ct9j/AAAA0Ebu/o/ELfY/AAAAtJG7/6Nxy5D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5nfr//X/7Nvtf4/d//H4pYh+x8AAAAmyN3/8bjF/gcAAIA2cvd/Im6x/wEAAKCN3P2fjBvufreLe9LtSv+v/9f/6//1//r/I+n/9f9b9P/6/zO/X/+v/2ffav1/7v5PxS3+/h8AAADayN3/6bjF/gcAAIA2cvd/Jm6x/wEAAKCN3P2fjVuG7H/9v/5f/6//1//r/4+k/9f/b9H/6//P/H79v/6ffav1/7n7Pxe3DNn/AAAAMEHu/s/HLfY/AAAAtJG7/wtxi/0PAAAAbeTu/2LcMmT/6//1//p//b/+X/9/JP2//n+L/l//f+b36//1/+xbrf/P3f+luGXI/gcAAIAJcvd/OW6x/wEAAKCN3P1fiVvsfwAAAGgjd/9X45Yh+1//r//X/+v/9f/6/yPp//X/W/T/+v8zv1//r/9n32r9f+7+r8UtQ/Y/AAAATJC7/+txi/0PAAAAbeTu/0bcYv8DAABAG7n7vxm3DNn/nfv/rf9N/3+Z/l//f0n/r/8/mP5f/79F/6//P/P79f/6f/at1v/n7v9W3DJk/wMAAMAEufu/HbfY/wAAANBG7v7vxC32PwAAALSRu/+7ccuQ/d+5/9+i/79M/6//v6T/1/8fTP+v/9+i/9f/n/n9+n/9P/tW6/9z938vbhmy/wEAAGCC3P3fj1vsfwAAAGgjd/8P4hb7HwAAANrI3f/DuGXI/tf/6//1//p//b/+/0j6f/3/Fv2//v/M79f/6//Zt1r/n7v/R3HLkP0PAAAAE+Tu/3HcYv8DAABAG7n7fxK32P8AAADQRu7+n8YtQ/a//l//r//X/+v/9f9H0v/r/7fo//X/Z36//l//z77V+v/c/T+LW4bsfwAAAJggd//P4xb7HwAAANrI3f+LuMX+BwAAgDZy9/8ybhmy//X/+n/9v/5f/6//P5L+X/+/Rf+v/1/z/Zf0//p/biOr9f+5+38VtwzZ/wAAADBB7v5fxy32PwAAALSRu/83cYv9DwAAAG3k7v9t3DJk/+v/9f/6f/2//l//fyT9v/5/i/5f/3/m9+v/9f/sW63/z91/fdwyZP8DAADABLn7fxe32P8AAADQRu7+38ct9j8AAAC0kbv/hrhlyP7X/+v/W/b/d9b/6//1/6vQ/+v/t+j/9f9nfr/+X//PvtX6/9z9f4hbhux/AAAAmCB3/x/jFvsfAAAA2sjd/6e4xf4HAACANnL3/zluGbL/9f/6/5b9v+//6//1/8vQ/+v/t+j/9f9nfr/+X//PvtX6/9z9f4lbhux/AAAAmCB3/1/jFvsfAAAA2sjd/7e4xf4HAACANnL3/z1uGbL/9f/6f/2//l//r/8/kv5f/79F/6//P/P79f/6f/at1v/n7v9H3DJk/wMAAMAEufv/GbfY/wAAANBG7v5/xS32PwAAALSRu//fccuQ/a//1//r//X/+n/9/5H0//r/Lfp//f+Z36//1/+zb7X+P3f/fwIAAP//jaA+eA==") mkdir(&(0x7f0000000cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x27) 3.952940803s ago: executing program 8 (id=2848): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x4, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x44044) 3.894656281s ago: executing program 1 (id=2849): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x9e2, 0x0, 0x0) 3.334818988s ago: executing program 8 (id=2851): futex(&(0x7f0000000380)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) 3.33091804s ago: executing program 7 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{r0}, &(0x7f0000000f00), &(0x7f0000000f40)='%+9llu \x00'}, 0x20) 3.113406578s ago: executing program 1 (id=2853): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x44, 0x0, &(0x7f00000001c0)={0xa, 0x4a24, 0x0, @remote, 0x5}, 0x1c) 2.808177783s ago: executing program 0 (id=2854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xd, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000040)=""/54, 0x2000000}, 0x20) 2.802612487s ago: executing program 3 (id=2855): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x2) 2.698925044s ago: executing program 7 (id=2856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x205, 0x0, 0x0, 0x80000008}, 0x400001}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.50730057s ago: executing program 1 (id=2857): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") lchown(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 2.330682242s ago: executing program 0 (id=2858): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x6, 0x4) 2.13162767s ago: executing program 7 (id=2859): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) 1.803954316s ago: executing program 8 (id=2860): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000300)={@host, 0x2}) 1.702966369s ago: executing program 0 (id=2861): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x2b, '\x00', @value=0x6}}) 1.535396161s ago: executing program 7 (id=2862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000280)) 1.415487752s ago: executing program 3 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 1.273110074s ago: executing program 8 (id=2864): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000000)) 1.184023025s ago: executing program 1 (id=2865): r0 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x3, 0x4, 0x4, 0x40, 0xfffffffa, {0x0, 0xea60}, {0x1, 0xc, 0x5, 0x9, 0xff, 0x9, "3c1017cb"}, 0x4, 0x2, {0x0}, 0xfff}) 1.172785917s ago: executing program 0 (id=2866): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) capget(&(0x7f0000000240)={0x20071026}, 0x0) 916.204384ms ago: executing program 6 (id=2867): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000980)=0x2) 903.556913ms ago: executing program 7 (id=2868): r0 = socket(0x10, 0x803, 0x0) connect$unix(r0, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) 784.679641ms ago: executing program 3 (id=2869): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) 616.687566ms ago: executing program 8 (id=2870): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a6009000002000000b755a1bc000900b8000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 616.223985ms ago: executing program 0 (id=2871): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/133, 0xfffffffffffffc70}], 0x1, 0xa, 0x8) 312.495567ms ago: executing program 7 (id=2872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 277.159724ms ago: executing program 1 (id=2873): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r0, &(0x7f0000000280)=[{0x0, 0x2a}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/54, 0x36}], 0x6) 92.251127ms ago: executing program 3 (id=2874): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 90.231704ms ago: executing program 8 (id=2875): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x6) 0s ago: executing program 0 (id=2876): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x8, @raw_data="7b627d24a77a8c050b75922cc967cc03e2efc08734ff8fe6dc0e84b38934a2de16d17baef1f2f718282bb4d758901936e59b6baa40c188ae52a81ceab9209924bfea330e0afea37195abb764a4e7d12ee156feacd6b44f90cdb6d0e7871ecbd244d806f7fca119e0aa274d69ea86dcd157edde8b1e2a9ceb4c05010615a9ba56ee373e19b1054bf2a5492a4c5ca46e2b71a3c579c199cb9eca8dd25e4ff8d9db17d0a419ada4e72ea4a29e8f232a5816e8ddb094d7a3ab939665f8f4b711556355c543c6c7a3f9e4"}) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 158.947406][ T5833] usb 8-1: USB disconnect, device number 2 [ 159.361981][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 159.586652][ T8707] xt_TCPMSS: Only works on TCP SYN packets [ 159.644083][ T8710] netlink: 'syz.1.1051': attribute type 7 has an invalid length. [ 159.651580][ T5852] Bluetooth: hci2: command tx timeout [ 159.652225][ T8710] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1051'. [ 159.770905][ T8713] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1056'. [ 159.926891][ T8718] loop7: detected capacity change from 0 to 16 [ 160.175235][ T8718] erofs (device loop7): mounted with root inode @ nid 36. [ 160.243430][ T8735] loop0: detected capacity change from 0 to 512 [ 160.257135][ T8735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.445925][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.483640][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.504104][ T8627] bridge_slave_0: entered allmulticast mode [ 160.504455][ T8735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.531189][ T8627] bridge_slave_0: entered promiscuous mode [ 160.534523][ T8735] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.549678][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.587970][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.608167][ T8627] bridge_slave_1: entered allmulticast mode [ 160.623423][ T8627] bridge_slave_1: entered promiscuous mode [ 160.771832][ T5051] bridge_slave_1: left allmulticast mode [ 160.777516][ T5051] bridge_slave_1: left promiscuous mode [ 160.790000][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.801859][ T5892] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.815984][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.873250][ T5051] bridge_slave_0: left allmulticast mode [ 160.900034][ T5051] bridge_slave_0: left promiscuous mode [ 160.907022][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.966100][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 160.976160][ T5892] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 160.986281][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.042388][ T5892] usb 4-1: Product: syz [ 161.046604][ T5892] usb 4-1: Manufacturer: syz [ 161.079784][ T5892] usb 4-1: SerialNumber: syz [ 161.115929][ T5892] usb 4-1: config 0 descriptor?? [ 161.158731][ T5892] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 161.208489][ T8766] loop1: detected capacity change from 0 to 16 [ 161.219027][ T8766] erofs (device loop1): mounted with root inode @ nid 36. [ 161.564425][ T5892] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 161.572147][ T5892] visor 4-1:0.0: probe with driver visor failed with error -71 [ 161.600757][ T5892] usb 4-1: USB disconnect, device number 7 [ 161.708612][ T5852] Bluetooth: hci2: command tx timeout [ 161.871443][ T8781] loop6: detected capacity change from 0 to 4096 [ 162.258137][ T5051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.289101][ T5051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.347224][ T5051] bond0 (unregistering): Released all slaves [ 162.391545][ T8772] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 162.480613][ T8785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1086'. [ 162.546765][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.603618][ T8790] bond0: (slave rose0): Enslaving as an active interface with an up link [ 162.675373][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.723910][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.765310][ T8808] loop3: detected capacity change from 0 to 64 [ 162.916714][ T8808] 9pnet_fd: p9_fd_create_unix (8808): problem connecting socket: ./file0: -13 [ 163.002910][ T8817] loop1: detected capacity change from 0 to 16 [ 163.052142][ T8817] erofs (device loop1): mounted with root inode @ nid 36. [ 163.093493][ T8817] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 163.210061][ T8817] erofs (device loop1): failed to decompress -23 in[64, 4032] out[1851] [ 163.218803][ T8817] erofs (device loop1): read error -117 @ 43 of nid 36 [ 163.293814][ T29] audit: type=1326 audit(1734498680.085:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 163.321609][ T29] audit: type=1326 audit(1734498680.165:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 163.343978][ T29] audit: type=1326 audit(1734498680.175:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 163.366972][ T29] audit: type=1326 audit(1734498680.175:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 163.389150][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.396064][ T29] audit: type=1326 audit(1734498680.175:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 163.544021][ T8627] team0: Port device team_slave_0 added [ 163.560455][ T8627] team0: Port device team_slave_1 added [ 163.827840][ T5852] Bluetooth: hci2: command tx timeout [ 164.221874][ T8858] loop7: detected capacity change from 0 to 4096 [ 164.229641][ T8858] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 164.314001][ T8858] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 164.342588][ T8873] loop1: detected capacity change from 0 to 1024 [ 164.661780][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.668762][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.699182][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.934134][ T5051] hsr_slave_0: left promiscuous mode [ 164.969282][ T8893] loop6: detected capacity change from 0 to 47 [ 164.991725][ T5051] hsr_slave_1: left promiscuous mode [ 164.998128][ T8895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1130'. [ 165.020065][ T5051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.039467][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.083922][ T5051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.113285][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.218797][ T5051] veth1_macvtap: left promiscuous mode [ 165.279134][ T5051] veth0_macvtap: left promiscuous mode [ 165.293772][ T5051] veth1_vlan: left promiscuous mode [ 165.299111][ T5051] veth0_vlan: left promiscuous mode [ 165.657705][ T8915] loop6: detected capacity change from 0 to 1024 [ 165.872508][ T5852] Bluetooth: hci2: command tx timeout [ 166.284128][ T8933] loop6: detected capacity change from 0 to 4096 [ 166.305197][ T8933] ntfs3(loop6): It is recommened to use chkdsk. [ 166.322695][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 166.345006][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 166.353488][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 166.361753][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 166.369704][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc1c00 [ 166.378173][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc2c00 [ 166.387500][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc4c00 [ 166.396381][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffc8c00 [ 166.404672][ T8933] ntfs3(loop6): try to read out of volume at offset 0x3fffffd0c00 [ 166.731201][ T5051] team0 (unregistering): Port device team_slave_1 removed [ 166.805271][ T5051] team0 (unregistering): Port device team_slave_0 removed [ 166.853207][ T8939] loop6: detected capacity change from 0 to 2048 [ 166.876301][ T8939] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.901430][ T6019] udevd[6019]: incorrect nilfs2 checksum on /dev/loop6 [ 166.906606][ T8940] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.280234][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 167.323800][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 167.790738][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.797949][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.863721][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.018369][ T8924] batadv1: entered promiscuous mode [ 168.074388][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 168.119407][ T8968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.195230][ T8966] @ÿ: renamed from veth0_vlan (while UP) [ 168.304621][ T8627] hsr_slave_0: entered promiscuous mode [ 168.361078][ T8627] hsr_slave_1: entered promiscuous mode [ 168.420657][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.428265][ T8627] Cannot create hsr debugfs directory [ 168.735211][ T8986] loop1: detected capacity change from 0 to 1764 [ 169.349459][ T8627] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.434292][ T8627] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 169.522167][ T8627] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 169.565130][ T8627] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 169.917331][ T9036] loop3: detected capacity change from 0 to 64 [ 169.926658][ T9035] loop0: detected capacity change from 0 to 2048 [ 169.941052][ T9033] Cannot find add_set index 0 as target [ 169.992442][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.081186][ T9036] hfs: keylen 94 too large [ 170.115163][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.129979][ T9036] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 170.149045][ T9038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.176044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.183214][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.242134][ T9035] NILFS (loop0): error -2 truncating bmap (ino=16) [ 170.296418][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.303905][ T7573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.456870][ T9025] loop1: detected capacity change from 0 to 40427 [ 170.474078][ T9025] F2FS-fs (loop1): heap/no_heap options were deprecated [ 170.485628][ T9025] F2FS-fs (loop1): invalid crc value [ 170.491065][ T9025] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 170.510876][ T9038] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 170.542465][ T9038] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 170.557162][ T9025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.608572][ T9038] Remounting filesystem read-only [ 170.710743][ T5826] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 170.734847][ T9025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 170.838096][ T9016] loop7: detected capacity change from 0 to 32768 [ 170.990027][ T9016] (syz.7.1186,9016,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 171.009321][ T9016] (syz.7.1186,9016,1):ocfs2_read_virt_blocks:1019 ERROR: status = -12 [ 171.072176][ T9016] (syz.7.1186,9016,1):ocfs2_read_dir_block:511 ERROR: status = -12 [ 171.129966][ T9016] (syz.7.1186,9016,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 171.137665][ T9016] (syz.7.1186,9016,1):ocfs2_read_virt_blocks:1019 ERROR: status = -12 [ 171.203149][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.210170][ T9016] (syz.7.1186,9016,1):ocfs2_read_dir_block:511 ERROR: status = -12 [ 171.218140][ T9016] (syz.7.1186,9016,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 171.294803][ T9016] (syz.7.1186,9016,1):ocfs2_read_virt_blocks:1019 ERROR: status = -12 [ 171.320047][ T9016] (syz.7.1186,9016,1):ocfs2_read_dir_block:511 ERROR: status = -12 [ 171.328231][ T9016] (syz.7.1186,9016,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 171.441569][ T9016] (syz.7.1186,9016,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 171.441631][ T9016] (syz.7.1186,9016,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 171.549870][ T9016] (syz.7.1186,9016,1):ocfs2_initialize_super:2250 ERROR: status = -22 [ 171.569990][ T9016] (syz.7.1186,9016,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 171.784962][ T9084] loop0: detected capacity change from 0 to 256 [ 171.916064][ T9084] FAT-fs (loop0): Directory bread(block 64) failed [ 171.938643][ T9084] FAT-fs (loop0): Directory bread(block 65) failed [ 171.972313][ T9084] FAT-fs (loop0): Directory bread(block 66) failed [ 172.001051][ T9084] FAT-fs (loop0): Directory bread(block 67) failed [ 172.018120][ T9093] loop1: detected capacity change from 0 to 1024 [ 172.066221][ T9084] FAT-fs (loop0): Directory bread(block 68) failed [ 172.080561][ T9084] FAT-fs (loop0): Directory bread(block 69) failed [ 172.110083][ T9084] FAT-fs (loop0): Directory bread(block 70) failed [ 172.116646][ T9084] FAT-fs (loop0): Directory bread(block 71) failed [ 172.179066][ T9084] FAT-fs (loop0): Directory bread(block 72) failed [ 172.233796][ T9084] FAT-fs (loop0): Directory bread(block 73) failed [ 172.282639][ T8627] veth0_vlan: entered promiscuous mode [ 172.301706][ T8627] veth1_vlan: entered promiscuous mode [ 172.328616][ T8627] veth0_macvtap: entered promiscuous mode [ 172.359062][ T8627] veth1_macvtap: entered promiscuous mode [ 172.437959][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.504787][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.545449][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.614196][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.637114][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.647664][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.657722][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.668414][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.678375][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.689541][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.701453][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.719007][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1220'. [ 172.728176][ T9114] netlink: 'syz.6.1220': attribute type 3 has an invalid length. [ 172.728534][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.749894][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.759717][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.779985][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.811567][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.885513][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.949109][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.949138][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.949160][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.949180][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.956586][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.979567][ T8627] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.979619][ T8627] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.979658][ T8627] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.979697][ T8627] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.319957][ T871] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 173.384631][ T7573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.426987][ T7573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.657527][ T7573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.705920][ T7573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.752345][ T871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.780148][ T871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.787298][ T9158] cgroup: none used incorrectly [ 173.832094][ T871] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.861929][ T871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.883233][ T871] usb 1-1: Product: syz [ 173.887431][ T871] usb 1-1: Manufacturer: syz [ 173.899928][ T871] usb 1-1: SerialNumber: syz [ 174.050363][ T5897] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 174.091778][ T9166] netlink: 'syz.6.1236': attribute type 27 has an invalid length. [ 174.124250][ T9166] C: renamed from team_slave_0 (while UP) [ 174.168920][ T871] usb 1-1: 0:2 : does not exist [ 174.204687][ T871] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 174.229975][ T5897] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 174.259010][ T5897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.259706][ T871] usb 1-1: USB disconnect, device number 4 [ 174.299613][ T5897] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 174.347453][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 174.381342][ T5897] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 174.420052][ T5897] usb 4-1: Product: syz [ 174.434721][ T5897] usb 4-1: Manufacturer: syz [ 174.439345][ T5897] usb 4-1: SerialNumber: syz [ 174.898911][ T5897] usb 4-1: USB disconnect, device number 8 [ 175.219241][ T969] IPVS: starting estimator thread 0... [ 175.360026][ T9212] IPVS: using max 19 ests per chain, 45600 per kthread [ 176.448129][ T9254] loop3: detected capacity change from 0 to 2048 [ 176.534779][ T9254] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 176.582401][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1270'. [ 176.582438][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1270'. [ 176.627229][ T6611] udevd[6611]: incorrect nilfs2 checksum on /dev/loop3 [ 176.740804][ T9265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.805256][ T9273] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1274'. [ 177.489628][ T9298] sock: sock_timestamping_bind_phc: sock not bind to device [ 177.668823][ T9294] loop8: detected capacity change from 0 to 8192 [ 177.703772][ T5852] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 177.712689][ T5852] Bluetooth: hci4: Injecting HCI hardware error event [ 177.759052][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1288'. [ 178.180873][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 178.276691][ T9331] bridge1: entered promiscuous mode [ 178.283561][ T9335] xt_addrtype: ipv6 does not support BROADCAST matching [ 178.303964][ T5838] Bluetooth: hci4: hardware error 0x00 [ 178.340426][ T9331] bridge1: entered allmulticast mode [ 178.625041][ T9350] loop6: detected capacity change from 0 to 256 [ 178.770945][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 178.830037][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 178.840537][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 179.251161][ T9366] loop8: detected capacity change from 0 to 32768 [ 179.310375][ T9366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1311 (9366) [ 179.605409][ T9366] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.661636][ T9366] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 179.689966][ T9366] BTRFS info (device loop8): using free-space-tree [ 179.797961][ T9394] geneve2: entered promiscuous mode [ 179.913668][ T9394] geneve2: entered allmulticast mode [ 180.060915][ T9413] binder: 9412:9413 ioctl c018620c 0 returned -14 [ 180.444105][ T9433] loop3: detected capacity change from 0 to 8 [ 180.580992][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 180.740573][ T8627] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.452393][ T9445] loop6: detected capacity change from 0 to 32768 [ 182.486948][ T9445] XFS: ikeep mount option is deprecated. [ 182.931500][ T9445] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 183.036690][ T9529] loop8: detected capacity change from 0 to 1024 [ 183.060176][ T5833] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.201172][ T9529] Invalid source name [ 183.209692][ T9529] UBIFS error (pid: 9529): cannot open "./file0", error -22 [ 183.221528][ T5833] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 183.248735][ T5833] usb 4-1: config 0 has no interface number 0 [ 183.292130][ T5833] usb 4-1: config 0 interface 8 has no altsetting 0 [ 183.361972][ T5833] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 183.373201][ T9445] XFS (loop6): Ending clean mount [ 183.409777][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.418091][ T5833] usb 4-1: Product: syz [ 183.440573][ T9445] XFS (loop6): Quotacheck needed: Please wait. [ 183.464903][ T5833] usb 4-1: Manufacturer: syz [ 183.492199][ T5833] usb 4-1: SerialNumber: syz [ 183.669917][ T9445] XFS (loop6): Quotacheck: Done. [ 183.682303][ T5833] usb 4-1: config 0 descriptor?? [ 183.982359][ T6285] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 184.171690][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1375'. [ 184.254815][ T5892] usb 4-1: USB disconnect, device number 9 [ 184.261184][ T5892] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 184.791947][ T9592] loop7: detected capacity change from 0 to 256 [ 184.799150][ T9592] exfat: Deprecated parameter 'utf8' [ 184.804801][ T9592] exfat: Deprecated parameter 'namecase' [ 184.810653][ T9592] exfat: Deprecated parameter 'namecase' [ 184.816362][ T9592] exfat: Deprecated parameter 'utf8' [ 184.905022][ T9599] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.913523][ T9599] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1386'. [ 185.054250][ T9592] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 185.653628][ T9626] loop1: detected capacity change from 0 to 256 [ 185.898955][ T9627] loop8: detected capacity change from 0 to 32768 [ 185.992271][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 186.057058][ T9627] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1400 (9627) [ 186.247207][ T9639] netlink: 'syz.3.1401': attribute type 21 has an invalid length. [ 186.249928][ T9627] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.350916][ T9627] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 186.394045][ T9627] BTRFS info (device loop8): using free-space-tree [ 186.677504][ T9651] loop7: detected capacity change from 0 to 256 [ 186.721714][ T9651] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 186.785499][ T9651] FAT-fs (loop7): Filesystem has been set read-only [ 186.815475][ T9651] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 186.900147][ T9651] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.012088][ T29] audit: type=1800 audit(1734498703.865:25): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1405" name="file1" dev="loop7" ino=1048636 res=0 errno=0 [ 187.118899][ T8627] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.552765][ T9683] loop6: detected capacity change from 0 to 2048 [ 187.635421][ T9683] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 187.688328][ T9683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.716275][ T9683] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 187.806817][ T9692] loop3: detected capacity change from 0 to 4096 [ 187.856939][ T9692] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 188.315839][ T9692] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 188.599459][ T9685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.622257][ T9715] openvswitch: netlink: IP tunnel dst address not specified [ 188.641133][ T9685] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 189.012057][ T9730] loop7: detected capacity change from 0 to 8 [ 189.051878][ T9685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.086626][ T9735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.242909][ T9685] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 189.487994][ T9685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.537283][ T9752] loop7: detected capacity change from 0 to 16 [ 189.550161][ T9685] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 189.604673][ T9752] erofs (device loop7): mounted with root inode @ nid 36. [ 189.629663][ T9752] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 189.686725][ T9752] erofs (device loop7): failed to decompress -50 in[64, 4032] out[1851] [ 189.758917][ T9752] erofs (device loop7): read error -117 @ 43 of nid 36 [ 189.830707][ T9761] loop6: detected capacity change from 0 to 1024 [ 190.394839][ T9786] sctp: [Deprecated]: syz.0.1449 (pid 9786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.394839][ T9786] Use struct sctp_sack_info instead [ 190.470457][ T9685] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 190.476403][ T9685] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 190.629399][ T9796] syz.6.1452 uses old SIOCAX25GETINFO [ 190.750090][ T29] audit: type=1326 audit(1734498707.595:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.8.1453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2bbd85d29 code=0x0 [ 190.967823][ T9811] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1458'. [ 191.061134][ T9813] loop6: detected capacity change from 0 to 64 [ 191.132960][ T9811] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 191.184888][ T9811] 0ªX¹¦Dö»: entered allmulticast mode [ 191.286762][ T9813] syz.6.1457: attempt to access beyond end of device [ 191.286762][ T9813] loop6: rw=0, sector=32783, nr_sectors = 1 limit=64 [ 191.532932][ T9831] trusted_key: encrypted_key: master key parameter '' is invalid [ 191.665339][ T9685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.701780][ T9685] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 191.851779][ T9839] binder: 9838:9839 ioctl c0306201 20000300 returned -14 [ 192.286228][ T9821] loop3: detected capacity change from 0 to 32768 [ 192.303436][ T9858] xt_bpf: check failed: parse error [ 192.456839][ T9821] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.496092][ T9861] loop1: detected capacity change from 0 to 1024 [ 192.554900][ T9821] (syz.3.1460,9821,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 192.624232][ T9861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.809725][ T9846] loop8: detected capacity change from 0 to 32768 [ 192.826778][ T5830] (syz-executor,5830,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 192.917272][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 193.011669][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.130011][ T5897] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 193.303753][ T5897] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 193.329922][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.385778][ T5897] usb 8-1: config 0 descriptor?? [ 193.458284][ T9853] loop6: detected capacity change from 0 to 32768 [ 193.523157][ T9853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1471 (9853) [ 193.684113][ T9895] netlink: 'syz.8.1480': attribute type 10 has an invalid length. [ 193.692209][ T9895] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 193.706573][ T9895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.717774][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.750109][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.781456][ T9853] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.792445][ T9853] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 193.801026][ T9853] BTRFS info (device loop6): using free-space-tree [ 193.960143][ T5897] ath6kl: Failed to submit usb control message: -71 [ 193.966816][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 193.979890][ T5897] ath6kl: Unable to send get target info: -71 [ 194.053060][ T9903] loop8: detected capacity change from 0 to 4096 [ 194.079974][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 194.103990][ T5897] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 194.130037][ T9903] ntfs3(loop8): ino=3, Correct links count -> 2. [ 194.147283][ T5897] usb 8-1: USB disconnect, device number 3 [ 194.474993][ T9853] BTRFS info (device loop6): rebuilding free space tree [ 194.697126][ T9934] loop1: detected capacity change from 0 to 1024 [ 195.177044][ T6285] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.267726][ T9959] loop7: detected capacity change from 0 to 1024 [ 195.517477][ T9971] vivid-000: disconnect [ 195.699213][ T9970] vivid-000: reconnect [ 196.295680][ T9995] bridge2: entered promiscuous mode [ 197.229634][T10033] loop8: detected capacity change from 0 to 32768 [ 197.705049][T10033] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 197.848334][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 197.857463][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 198.068287][T10033] XFS (loop8): Ending clean mount [ 198.132362][T10033] XFS (loop8): Quotacheck needed: Please wait. [ 198.224122][T10033] XFS (loop8): Quotacheck: Done. [ 198.597144][ T8627] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.656827][T10105] misc userio: The device must be registered before sending interrupts [ 199.070954][T10109] loop3: detected capacity change from 0 to 4096 [ 199.887425][T10157] loop7: detected capacity change from 0 to 24 [ 199.930516][T10157] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 199.960152][T10146] loop1: detected capacity change from 0 to 1764 [ 199.993646][T10157] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 200.026283][T10146] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 200.424520][ T29] audit: type=1326 audit(1734498717.275:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 200.490048][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 200.506851][ T29] audit: type=1326 audit(1734498717.275:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 200.577122][ T29] audit: type=1326 audit(1734498717.305:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 200.583820][T10109] loop3: detected capacity change from 0 to 32768 [ 200.599439][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.611805][ T29] audit: type=1326 audit(1734498717.305:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 200.634456][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.645291][T10109] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section quota: wrong size (got 40 should be 80) [ 200.645291][T10109] quota (size 40): [ 200.645291][T10109] user: flags 9 space timelimit 7 warnlimit 0 inodes timelimit 24 warnlimit 0 [ 200.645291][T10109] group: flags 1 space timelimit 80 warnlimit 10 inodes timelimit 0 warnlimit 0 [ 200.645291][T10109] project: flags 38 space timelimit 0 warnlimit 0 inodes timelimit 0 warnlimit 0 [ 200.645291][T10109] [ 200.690894][ T29] audit: type=1326 audit(1734498717.305:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 200.778599][T10109] bcachefs: bch2_fs_get_tree() error: invalid_sb_quota [ 200.934845][T10180] wg2: entered promiscuous mode [ 200.942437][T10180] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 201.402388][T10208] loop1: detected capacity change from 0 to 128 [ 201.412444][T10209] loop6: detected capacity change from 0 to 128 [ 201.420156][T10208] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.567574][T10216] netlink: 'syz.7.1596': attribute type 10 has an invalid length. [ 201.583348][T10218] loop3: detected capacity change from 0 to 128 [ 201.815192][T10224] netlink: 'syz.7.1599': attribute type 8 has an invalid length. [ 202.391592][T10242] loop8: detected capacity change from 0 to 2048 [ 202.453391][T10242] loop8: p3 < > p4 < > [ 202.457768][T10242] loop8: partition table partially beyond EOD, truncated [ 202.518620][T10242] loop8: p3 start 4284289 is beyond EOD, truncated [ 203.155855][T10255] loop3: detected capacity change from 0 to 8192 [ 203.262615][T10255] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.343819][T10255] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 203.390157][T10255] FAT-fs (loop3): Filesystem has been set read-only [ 203.558474][ T5830] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 203.680131][ T5897] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 203.815596][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1633'. [ 203.912458][ T5897] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 203.928075][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 203.969948][ T5897] usb 8-1: Product: syz [ 203.974189][ T5897] usb 8-1: Manufacturer: syz [ 203.999498][ T5897] usb 8-1: SerialNumber: syz [ 204.124443][ T5897] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 204.207206][T10320] loop3: detected capacity change from 0 to 8 [ 204.313675][T10320] SQUASHFS error: Failed to read block 0x63a: -5 [ 204.358423][T10331] netlink: 'syz.8.1642': attribute type 1 has an invalid length. [ 204.366329][T10331] netlink: 'syz.8.1642': attribute type 2 has an invalid length. [ 204.374623][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1642'. [ 204.390054][T10320] SQUASHFS error: Unable to read metadata cache entry [638] [ 204.430009][T10320] SQUASHFS error: Unable to read directory block [26067d:0] [ 204.571617][ T5897] vp7045: USB control message 'in' went wrong. [ 204.583860][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.684216][ T5897] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 205.116990][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 205.135697][T10355] loop8: detected capacity change from 0 to 256 [ 205.144347][ T5897] usb 8-1: USB disconnect, device number 4 [ 205.325912][T10355] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 205.697177][T10355] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 205.707198][T10355] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 205.728604][T10355] UDF-fs: Scanning with blocksize 512 failed [ 205.738851][T10355] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 205.859671][T10355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.092926][T10396] cgroup: name respecified [ 206.557058][T10420] netlink: 'syz.3.1679': attribute type 29 has an invalid length. [ 206.565345][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 207.029906][ T5897] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 207.059262][T10441] netlink: 'syz.7.1683': attribute type 13 has an invalid length. [ 207.105991][T10448] loop1: detected capacity change from 0 to 128 [ 207.138658][T10446] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.184247][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 207.211792][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.269873][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.309657][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.338092][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.551648][ T5897] usb 7-1: config 0 descriptor?? [ 207.761683][ T5897] hub 7-1:0.0: USB hub found [ 207.955090][ T5897] hub 7-1:0.0: 1 port detected [ 208.036146][T10482] loop1: detected capacity change from 0 to 64 [ 208.087640][T10483] mmap: syz.3.1701 (10483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 208.162782][ T5897] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 208.171262][ T5897] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 208.213125][ T5897] usbhid 7-1:0.0: can't add hid device: -71 [ 208.240705][ T5897] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 208.312970][ T5897] usb 7-1: USB disconnect, device number 5 [ 208.514564][T10501] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1708'. [ 208.854230][T10524] loop8: detected capacity change from 0 to 256 [ 209.076011][T10524] FAT-fs (loop8): Directory bread(block 64) failed [ 209.136627][T10524] FAT-fs (loop8): Directory bread(block 65) failed [ 209.163448][T10536] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 209.206139][T10534] loop7: detected capacity change from 0 to 4096 [ 209.212150][T10524] FAT-fs (loop8): Directory bread(block 66) failed [ 209.219038][T10524] FAT-fs (loop8): Directory bread(block 67) failed [ 209.239978][T10524] FAT-fs (loop8): Directory bread(block 68) failed [ 209.246894][T10524] FAT-fs (loop8): Directory bread(block 69) failed [ 209.253596][T10524] FAT-fs (loop8): Directory bread(block 70) failed [ 209.279902][T10534] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 209.306914][T10529] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.315108][T10524] FAT-fs (loop8): Directory bread(block 71) failed [ 209.339966][ T29] audit: type=1326 audit(1734498726.165:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 209.341008][T10524] FAT-fs (loop8): Directory bread(block 72) failed [ 209.398667][ T29] audit: type=1326 audit(1734498726.165:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 209.517187][T10524] FAT-fs (loop8): Directory bread(block 73) failed [ 209.548597][ T29] audit: type=1326 audit(1734498726.375:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 209.670155][ T29] audit: type=1326 audit(1734498726.445:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 209.693255][T10550] hfs: unable to load iocharset "io#harset" [ 209.807274][ T29] audit: type=1326 audit(1734498726.445:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 209.922941][ T29] audit: type=1326 audit(1734498726.635:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.3.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 210.072331][ T29] audit: type=1326 audit(1734498726.645:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.3.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 210.189896][ T29] audit: type=1326 audit(1734498726.645:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.3.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 210.287863][ T29] audit: type=1326 audit(1734498726.645:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.3.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 210.339095][T10576] No such timeout policy "syz0" [ 210.379743][T10579] loop6: detected capacity change from 0 to 256 [ 210.409873][ T29] audit: type=1326 audit(1734498726.645:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.3.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01a185d29 code=0x7ffc0000 [ 210.491090][T10579] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 210.618663][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 211.010692][T10604] loop8: detected capacity change from 0 to 512 [ 211.133175][T10604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.240351][T10604] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.377701][T10618] xt_hashlimit: max too large, truncated to 1048576 [ 211.514203][ T8627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.834406][T10585] loop1: detected capacity change from 0 to 32768 [ 211.910345][T10639] capability: warning: `syz.0.1758' uses 32-bit capabilities (legacy support in use) [ 211.946840][T10600] loop6: detected capacity change from 0 to 32768 [ 211.954487][T10585] (syz.1.1740,10585,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.010039][T10585] (syz.1.1740,10585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.077910][T10600] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 212.234606][T10658] loop7: detected capacity change from 0 to 512 [ 212.241778][T10658] EXT4-fs: Ignoring removed nobh option [ 212.260947][T10658] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 212.465934][T10600] XFS (loop6): Ending clean mount [ 212.500822][T10658] EXT4-fs (loop7): 1 truncate cleaned up [ 212.511426][T10585] JBD2: Ignoring recovery information on journal [ 212.547303][T10658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.739504][T10658] fscrypt (loop7, inode 15): Error -61 getting encryption context [ 212.762899][T10681] loop3: detected capacity change from 0 to 256 [ 212.800713][ T6285] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 212.870996][T10585] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 212.901020][T10681] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 212.985168][ T7477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.091247][T10585] (syz.1.1740,10585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0x9e9236ca. Applying ECC. [ 213.148144][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.159601][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.378629][T10705] loop3: detected capacity change from 0 to 2048 [ 213.415171][T10705] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 213.498880][T10705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.539964][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1781'. [ 213.912966][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 214.168935][T10731] xt_cgroup: xt_cgroup: no path or classid specified [ 214.577713][T10744] loop7: detected capacity change from 0 to 2048 [ 214.659374][T10744] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 214.765496][T10757] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 214.887922][T10763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.522227][T10774] loop7: detected capacity change from 0 to 32768 [ 215.542187][T10774] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 215.617515][T10774] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 215.617833][T10788] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1810'. [ 215.730367][T10774] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 215.779098][ T5833] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 215.786652][ T5833] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 216.036667][ T5833] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 250ms [ 216.079985][ T5833] gfs2: fsid=syz:syz.0: jid=0: Done [ 216.105600][T10774] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 216.354760][T10816] loop6: detected capacity change from 0 to 512 [ 216.428208][T10816] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 216.569653][T10816] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1820: corrupted in-inode xattr: e_value out of bounds [ 216.626879][T10816] EXT4-fs (loop6): Remounting filesystem read-only [ 216.696876][T10816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.941316][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.326488][T10860] loop3: detected capacity change from 0 to 128 [ 217.370327][T10860] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.433063][T10860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.927729][T10889] syz.8.1846: attempt to access beyond end of device [ 217.927729][T10889] nbd8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 218.017052][T10889] hfsplus: unable to find HFS+ superblock [ 218.339937][ T969] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 218.809167][ T969] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.864315][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.937234][ T969] usb 7-1: config 0 descriptor?? [ 218.952033][ T969] cp210x 7-1:0.0: cp210x converter detected [ 219.165667][ T969] usb 7-1: cp210x converter now attached to ttyUSB0 [ 219.366243][ T969] usb 7-1: USB disconnect, device number 6 [ 219.412736][ T969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.463915][T10919] loop8: detected capacity change from 0 to 32768 [ 219.474115][ T969] cp210x 7-1:0.0: device disconnected [ 219.508673][T10891] loop3: detected capacity change from 0 to 32768 [ 219.537090][T10919] XFS (loop8): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 219.596070][T10891] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.717374][T10960] loop7: detected capacity change from 0 to 4096 [ 219.728711][T10960] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 219.867470][T10919] XFS (loop8): Ending clean mount [ 220.020224][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 220.051967][T10891] XFS (loop3): Ending clean mount [ 220.057178][T10960] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 220.080517][ T8627] XFS (loop8): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 220.213386][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.223903][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.235655][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.270228][ T25] usb 2-1: Product: syz [ 220.274510][ T25] usb 2-1: Manufacturer: syz [ 220.312068][ T25] usb 2-1: SerialNumber: syz [ 220.361650][ T25] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.421130][ T5833] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.937648][T10994] libceph: resolve '400' (ret=-3): failed [ 222.412704][T11023] loop3: detected capacity change from 0 to 16 [ 222.545260][T11023] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 222.691695][T11023] erofs (device loop3): mounted with root inode @ nid 36. [ 222.780233][T11023] syz.3.1883: attempt to access beyond end of device [ 222.780233][T11023] loop3: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 222.953250][T11023] erofs (device loop3): read error -5 @ 0 of nid 36 [ 224.710032][ T969] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.935308][T11068] loop8: detected capacity change from 0 to 512 [ 224.947602][ T969] usb 4-1: config 32 has an invalid interface number: 2 but max is 0 [ 225.016966][ T969] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 225.075642][T11068] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 225.142897][ T969] usb 4-1: config 32 has no interface number 0 [ 225.149134][ T969] usb 4-1: config 32 interface 2 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 225.291795][T11068] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1900: bad orphan inode 131083 [ 225.318528][ T969] usb 4-1: config 32 interface 2 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 225.438558][ T969] usb 4-1: config 32 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 225.474109][T11068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.519874][T11080] vcan0 speed is unknown, defaulting to 1000 [ 225.611108][ T969] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=de.32 [ 225.622432][T11080] vcan0 speed is unknown, defaulting to 1000 [ 225.678980][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.710261][T11080] vcan0 speed is unknown, defaulting to 1000 [ 225.765687][ T969] usb 4-1: Product: syz [ 225.800061][ T969] usb 4-1: Manufacturer: syz [ 225.850817][ T969] usb 4-1: SerialNumber: syz [ 226.161361][ T969] HFC-S_USB 4-1:32.2: probe with driver HFC-S_USB failed with error -5 [ 226.200417][ C1] sched: DL replenish lagged too much [ 226.228268][ T8627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.319984][T11090] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1906'. [ 226.357928][ T969] usb 4-1: USB disconnect, device number 10 [ 227.355160][T11080] infiniband syz1: set active [ 227.361567][ T5894] vcan0 speed is unknown, defaulting to 1000 [ 227.427638][T11080] infiniband syz1: added vcan0 [ 227.474650][T11080] syz1: rxe_create_cq: returned err = -12 [ 227.570371][T11080] infiniband syz1: Couldn't create ib_mad CQ [ 227.607083][T11080] infiniband syz1: Couldn't open port 1 [ 227.885267][T11080] RDS/IB: syz1: added [ 227.930094][T11080] smc: adding ib device syz1 with port count 1 [ 227.936556][T11080] smc: ib device syz1 port 1 has pnetid [ 227.980168][T11118] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.1917'. [ 228.036252][ T5894] vcan0 speed is unknown, defaulting to 1000 [ 228.070146][T11118] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.1917'. [ 228.089587][T11080] vcan0 speed is unknown, defaulting to 1000 [ 228.160150][T11118] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1917'. [ 228.304061][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1919'. [ 229.218604][T11137] netlink: 'syz.6.1922': attribute type 1 has an invalid length. [ 229.264465][T11139] loop7: detected capacity change from 0 to 64 [ 229.291406][T11080] vcan0 speed is unknown, defaulting to 1000 [ 229.439358][T11139] hfs: request for non-existent node 16777216 in B*Tree [ 229.521079][T11139] hfs: request for non-existent node 16777216 in B*Tree [ 229.618055][T11139] hfs: request for non-existent node 16777216 in B*Tree [ 229.692731][T11139] hfs: request for non-existent node 16777216 in B*Tree [ 229.871815][ T29] audit: type=1326 audit(1734498746.725:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.1925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe804185d29 code=0x0 [ 229.893562][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.903739][T11109] loop3: detected capacity change from 0 to 32768 [ 230.060901][T11109] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1913 (11109) [ 230.301533][T11109] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.375315][T11080] vcan0 speed is unknown, defaulting to 1000 [ 230.425034][T11109] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 230.568373][T11109] BTRFS info (device loop3): using free-space-tree [ 230.664168][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 230.726250][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 230.869885][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 230.970648][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 231.111506][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 231.196680][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 231.318801][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 231.430273][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 231.540568][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 231.639602][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 231.758378][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 231.818186][T11080] vcan0 speed is unknown, defaulting to 1000 [ 231.880263][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 231.880554][T11109] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 232.110677][T11109] BTRFS error (device loop3): open_ctree failed [ 233.343137][T11080] vcan0 speed is unknown, defaulting to 1000 [ 233.533388][T11205] loop7: detected capacity change from 0 to 256 [ 233.630726][T11205] exfat: Deprecated parameter 'utf8' [ 233.706724][T11205] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 234.497211][T11080] vcan0 speed is unknown, defaulting to 1000 [ 235.196718][T11226] netlink: 'syz.0.1950': attribute type 7 has an invalid length. [ 235.479955][T11211] lo speed is unknown, defaulting to 1000 [ 235.486124][T11211] lo speed is unknown, defaulting to 1000 [ 235.577148][T11211] lo speed is unknown, defaulting to 1000 [ 235.672141][T11211] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.775793][T11211] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 235.855046][T11233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1954'. [ 235.939087][T11233] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 235.993268][T11211] lo speed is unknown, defaulting to 1000 [ 236.108937][T11211] lo speed is unknown, defaulting to 1000 [ 236.167387][T11211] lo speed is unknown, defaulting to 1000 [ 236.251043][T11211] lo speed is unknown, defaulting to 1000 [ 236.257906][T11211] lo speed is unknown, defaulting to 1000 [ 236.411139][T11211] lo speed is unknown, defaulting to 1000 [ 237.325080][T11254] loop6: detected capacity change from 0 to 2048 [ 237.383527][T11254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.440398][T11260] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 237.469615][T11254] EXT4-fs: Ignoring removed nobh option [ 237.631879][T11254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.983026][T11254] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1962: bg 0: block 2: invalid block bitmap [ 238.183320][T11254] EXT4-fs (loop6): Remounting filesystem read-only [ 238.253601][T11254] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.6.1962: cleanup dec ref error -117 [ 239.064737][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.137774][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1984'. [ 240.240085][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1984'. [ 240.487913][T11319] SET target dimension over the limit! [ 242.764006][T11346] 9pnet_fd: p9_fd_create_tcp (11346): problem connecting socket to 127.0.0.1 [ 243.002601][T11364] x_tables: duplicate underflow at hook 3 [ 245.369761][T11393] loop8: detected capacity change from 0 to 8192 [ 245.551911][T11393] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.539748][T11375] loop3: detected capacity change from 0 to 32768 [ 246.811622][ T5894] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 247.090165][ T5894] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 247.179917][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.319911][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 247.420664][ T5894] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 247.503522][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.609274][ T5894] usb 8-1: config 0 descriptor?? [ 247.667088][T11416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 247.841207][ T5894] gspca_main: spca561-2.14.0 probing abcd:cdee [ 247.990026][ T5894] spca561 8-1:0.0: probe with driver spca561 failed with error -22 [ 247.998827][ T5894] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.180143][ T5894] usb 8-1: MIDIStreaming interface descriptor not found [ 248.500460][ T5894] usb 8-1: USB disconnect, device number 5 [ 249.060340][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.126307][T11454] loop6: detected capacity change from 0 to 1764 [ 249.343687][T11456] loop7: detected capacity change from 0 to 256 [ 249.447094][T11454] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 250.190385][T11467] sctp: [Deprecated]: syz.8.2040 (pid 11467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.190385][T11467] Use struct sctp_sack_info instead [ 250.510072][T11476] netlink: 'syz.7.2042': attribute type 1 has an invalid length. [ 250.570164][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2042'. [ 250.973603][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2047'. [ 251.167018][T11486] loop3: detected capacity change from 0 to 1024 [ 251.374847][T11486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 251.480057][T11486] System zones: 0-1, 3-36 [ 251.650049][T11486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.889150][T11486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 251.964262][T11498] tmpfs: User quota inode hardlimit too large. [ 252.018710][T11486] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 252.441406][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.044858][T11519] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 253.217789][T11473] loop6: detected capacity change from 0 to 32768 [ 253.289177][T11522] loop7: detected capacity change from 0 to 64 [ 253.345361][T11473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2041 (11473) [ 253.512000][T11473] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.617778][T11473] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 253.696233][T11473] BTRFS info (device loop6): using free-space-tree [ 253.783071][T11473] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 253.783366][T11473] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 253.876491][T11473] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 254.002606][T11473] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 254.225563][T11473] BTRFS error (device loop6): open_ctree failed [ 254.690568][T11546] loop1: detected capacity change from 0 to 2048 [ 254.937495][T11546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.157094][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.166836][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.798143][T11517] loop3: detected capacity change from 0 to 32768 [ 255.913220][T11517] JBD2: Ignoring recovery information on journal [ 256.155752][T11565] loop1: detected capacity change from 0 to 1024 [ 256.186092][T11517] JBD2: journal reset failed [ 256.213166][T11517] (syz.3.2057,11517,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 256.281909][T11517] (syz.3.2057,11517,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 256.563780][ T1151] hfsplus: b-tree write err: -5, ino 4 [ 256.828832][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.912997][T11519] team0: Port device batadv0 added [ 257.579181][T11580] QAT: failed to copy from user. [ 257.669488][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 257.784072][T11584] vlan0: entered promiscuous mode [ 257.880656][T11586] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2079'. [ 258.666201][T11598] loop6: detected capacity change from 0 to 128 [ 258.735321][T11598] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 258.967500][T11598] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 550) [ 259.069328][T11598] FAT-fs (loop6): Filesystem has been set read-only [ 259.430516][ T6285] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 550) [ 260.440180][ T5897] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 260.689836][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 260.773064][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.845816][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 260.946067][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 261.033895][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 261.055122][T11637] loop6: detected capacity change from 0 to 4096 [ 261.109909][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.132570][T11637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.220622][ T5897] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 261.240502][T11637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.277118][T11645] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 261.295740][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.350232][T11645] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2107'. [ 261.387659][ T5897] usb 4-1: Product: syz [ 261.409064][ T5897] usb 4-1: Manufacturer: syz [ 261.439530][T11637] EXT4-fs error (device loop6): ext4_empty_dir:3112: inode #12: block 80: comm syz.6.2104: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 261.459567][ T5897] usb 4-1: SerialNumber: syz [ 261.512036][ T5897] usb 4-1: config 0 descriptor?? [ 261.630726][T11637] EXT4-fs warning (device loop6): ext4_empty_dir:3114: inode #12: comm syz.6.2104: directory missing '..' [ 261.768732][ T5897] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 261.875067][ T5897] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 261.994296][ T5897] usb 4-1: USB disconnect, device number 11 [ 262.132541][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.825572][T11659] loop6: detected capacity change from 0 to 512 [ 263.120064][T11659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.120172][T11659] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.203358][T11659] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2112: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 263.300495][T11659] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2112: bg 0: block 18: invalid block bitmap [ 263.301322][T11659] Quota error (device loop6): write_blk: dquota write failed [ 263.301444][T11659] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 263.301510][T11659] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2112: Failed to acquire dquot type 1 [ 263.549222][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.362704][T11647] loop8: detected capacity change from 0 to 32768 [ 265.760030][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 266.151611][T11694] loop6: detected capacity change from 0 to 8 [ 266.261873][T11672] loop3: detected capacity change from 0 to 32768 [ 266.330361][T11694] SQUASHFS error: lzo decompression failed, data probably corrupt [ 266.373469][T11692] loop8: detected capacity change from 0 to 4096 [ 266.403130][T11694] SQUASHFS error: Failed to read block 0x4ec: -5 [ 266.446243][T11672] JBD2: Ignoring recovery information on journal [ 266.493046][T11694] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 266.571271][T11694] SQUASHFS error: Unable to read inode 0x20087 [ 266.690850][T11672] JBD2: journal reset failed [ 266.757341][T11672] (syz.3.2118,11672,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 266.837109][T11692] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 266.865691][T11672] (syz.3.2118,11672,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 267.174218][T11704] loop1: detected capacity change from 0 to 256 [ 267.515690][T11704] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x362c4cf6, utbl_chksum : 0xe619d30d) [ 267.937832][T11708] netlink: 'syz.6.2137': attribute type 1 has an invalid length. [ 268.470060][ T969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 268.556064][ T29] audit: type=1326 audit(1734498785.405:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 268.763633][ T29] audit: type=1326 audit(1734498785.405:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 268.785894][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.792226][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 268.867622][ T969] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.925010][ T969] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.951513][ T5897] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 269.025230][ T969] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 269.075048][ T29] audit: type=1326 audit(1734498785.455:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4734984690 code=0x7ffc0000 [ 269.140132][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.199926][ T5897] usb 8-1: Using ep0 maxpacket: 32 [ 269.215751][ T969] usb 1-1: Product: syz [ 269.289890][ T969] usb 1-1: Manufacturer: syz [ 269.294698][ T5897] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.306721][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2143'. [ 269.346829][ T969] usb 1-1: SerialNumber: syz [ 269.369904][ T29] audit: type=1326 audit(1734498785.465:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 269.421399][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.437762][ T969] usb 1-1: config 0 descriptor?? [ 269.510183][T11710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.520014][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 269.562371][T11710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.588220][T11728] random: crng reseeded on system resumption [ 269.619900][ T29] audit: type=1326 audit(1734498785.465:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 269.672121][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 269.782259][ T5897] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 269.910163][ T29] audit: type=1326 audit(1734498785.465:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 269.932403][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.967751][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.977740][ T969] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 270.050262][ T969] asix 1-1:0.0: probe with driver asix failed with error -71 [ 270.061975][ T5897] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 270.155768][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.179186][ T29] audit: type=1326 audit(1734498785.465:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 270.201389][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.210042][T11732] netlink: 'syz.6.2147': attribute type 1 has an invalid length. [ 270.217825][T11732] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2147'. [ 270.249276][ T969] usb 1-1: USB disconnect, device number 5 [ 270.330091][ T5897] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 270.346895][T11735] loop1: detected capacity change from 0 to 256 [ 270.380628][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.403993][ T29] audit: type=1326 audit(1734498785.615:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 270.481673][ T5897] usb 8-1: Product: syz [ 270.500033][T11735] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 270.544800][ T5897] usb 8-1: Manufacturer: syz [ 270.579823][ T5897] usb 8-1: SerialNumber: syz [ 270.616033][ T5897] usb 8-1: config 0 descriptor?? [ 270.647241][ T29] audit: type=1326 audit(1734498785.725:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 270.669399][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.699460][T11715] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 270.832718][ T29] audit: type=1326 audit(1734498785.845:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f473498592b code=0x7ffc0000 [ 271.035471][ T5897] cxacru 8-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 271.093606][T11735] syz.1.2148: attempt to access beyond end of device [ 271.093606][T11735] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 271.109347][ T5897] cxacru 8-1:0.0: probe with driver cxacru failed with error -22 [ 271.174785][ T5897] usb 8-1: USB disconnect, device number 6 [ 271.199005][T11735] syz.1.2148: attempt to access beyond end of device [ 271.199005][T11735] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 271.372033][T11735] syz.1.2148: attempt to access beyond end of device [ 271.372033][T11735] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 272.174863][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 272.410093][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 272.476372][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 272.559881][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 272.672361][ T5894] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 272.742750][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.815123][ T5894] usb 4-1: Product: syz [ 272.845274][ T5894] usb 4-1: Manufacturer: syz [ 272.887459][ T5894] usb 4-1: SerialNumber: syz [ 272.964012][ T5894] usb 4-1: config 0 descriptor?? [ 273.033999][T11759] syz.8.2160: attempt to access beyond end of device [ 273.033999][T11759] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 273.150745][T11759] efs: cannot read volume header [ 273.394383][ T5894] usb 4-1: Cannot retrieve CPort count: -71 [ 273.437960][ T5894] usb 4-1: Cannot retrieve CPort count: -71 [ 273.519934][ T5894] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 273.665394][ T5894] usb 4-1: USB disconnect, device number 12 [ 274.002873][T11775] loop6: detected capacity change from 0 to 64 [ 275.000133][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 275.000156][ T29] audit: type=1326 audit(1734498791.845:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f9f85d29 code=0x7ffc0000 [ 275.300691][ T29] audit: type=1326 audit(1734498791.845:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f9f85d29 code=0x7ffc0000 [ 275.322963][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.556838][ T29] audit: type=1326 audit(1734498791.895:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f48f9f85d29 code=0x7ffc0000 [ 275.599998][T11793] netlink: 'syz.6.2177': attribute type 5 has an invalid length. [ 275.714989][T11757] syz.1.2159 (11757): drop_caches: 2 [ 275.779418][ T29] audit: type=1326 audit(1734498791.895:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f9f85d29 code=0x7ffc0000 [ 275.933445][T11799] loop8: detected capacity change from 0 to 1764 [ 276.022157][ T29] audit: type=1326 audit(1734498791.895:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f9f85d29 code=0x7ffc0000 [ 276.457508][T11809] loop3: detected capacity change from 0 to 128 [ 277.347050][T11821] gre1: entered promiscuous mode [ 278.879419][T11847] ceph: No source [ 279.363700][T11857] IPv6: sit1: Disabled Multicast RS [ 279.470010][T11859] xt_ecn: cannot match TCP bits for non-tcp packets [ 281.522391][T11897] loop3: detected capacity change from 0 to 16 [ 281.631726][T11897] erofs (device loop3): mounted with root inode @ nid 36. [ 281.659338][T11892] loop8: detected capacity change from 0 to 4096 [ 281.873935][T11900] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 283.067605][T11918] loop3: detected capacity change from 0 to 256 [ 283.279926][T11918] FAT-fs (loop3): Directory bread(block 64) failed [ 283.361975][T11918] FAT-fs (loop3): Directory bread(block 65) failed [ 283.368621][T11918] FAT-fs (loop3): Directory bread(block 66) failed [ 283.419996][T11924] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 283.489941][T11918] FAT-fs (loop3): Directory bread(block 67) failed [ 283.596581][T11918] FAT-fs (loop3): Directory bread(block 68) failed [ 283.716983][T11918] FAT-fs (loop3): Directory bread(block 69) failed [ 283.787272][T11918] FAT-fs (loop3): Directory bread(block 70) failed [ 283.848715][T11918] FAT-fs (loop3): Directory bread(block 71) failed [ 283.917397][T11918] FAT-fs (loop3): Directory bread(block 72) failed [ 283.989938][T11918] FAT-fs (loop3): Directory bread(block 73) failed [ 285.301315][T11948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.309083][T11948] IPv6: NLM_F_CREATE should be set when creating new route [ 285.494374][T11914] loop8: detected capacity change from 0 to 32768 [ 285.583886][T11914] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2236 (11914) [ 285.730446][T11914] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 285.820244][T11914] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 285.920145][T11914] BTRFS info (device loop8): using free-space-tree [ 285.983472][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 285.983781][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 286.073700][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 286.160259][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 286.231136][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 286.339128][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 286.470076][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 286.553897][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 286.663925][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 286.750321][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 286.817290][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 286.950051][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 287.032617][T11914] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 287.194682][T11914] BTRFS error (device loop8): open_ctree failed [ 289.309654][T12024] x_tables: unsorted underflow at hook 3 [ 289.698580][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 289.749593][T12030] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 289.920398][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 289.970157][ T5897] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 290.016609][ T5897] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 290.065019][ T5897] usb 1-1: config 0 has no interface number 0 [ 290.071362][ T5894] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 290.133291][ T5897] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.246852][ T5897] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.295612][ T5894] usb 8-1: Using ep0 maxpacket: 32 [ 290.370131][ T5894] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 290.389497][ T5897] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.438313][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.500110][ T5897] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 290.509195][ T5897] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 290.537194][ T5894] usb 8-1: Product: syz [ 290.565246][ T5894] usb 8-1: Manufacturer: syz [ 290.594831][ T5894] usb 8-1: SerialNumber: syz [ 290.638303][ T5897] usb 1-1: Product: syz [ 290.643721][ T5894] usb 8-1: config 0 descriptor?? [ 290.673948][ T5897] usb 1-1: Manufacturer: syz [ 290.726100][ T5897] usb 1-1: config 0 descriptor?? [ 290.797770][T12026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.194772][ T5894] airspy 8-1:0.0: usb_control_msg() failed -71 request 0a [ 291.254182][ T5894] airspy 8-1:0.0: Could not detect board [ 291.292891][T12052] loop8: detected capacity change from 0 to 256 [ 291.315492][ T5894] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 291.398533][ T5897] usb 1-1: USB disconnect, device number 6 [ 291.440521][ T5894] usb 8-1: USB disconnect, device number 7 [ 291.477386][T12052] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 292.311418][T12064] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2306'. [ 293.140375][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.197362][T12076] loop8: detected capacity change from 0 to 2048 [ 293.348903][T12076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.432054][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 293.540225][ T5897] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 293.621586][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.629638][ T5897] usb 4-1: Product: syz [ 293.707582][ T5897] usb 4-1: Manufacturer: syz [ 293.739957][ T5897] usb 4-1: SerialNumber: syz [ 293.777086][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2318'. [ 293.805777][ T5897] usb 4-1: config 0 descriptor?? [ 294.147523][ T5897] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 294.342617][ T5897] usb write operation failed. (-71) [ 294.472904][ T5897] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.568158][ T5897] dvbdev: DVB: registering new adapter (Terratec H7) [ 294.622431][ T5897] usb 4-1: media controller created [ 294.699645][ T5897] usb read operation failed. (-71) [ 294.757101][ T5897] usb write operation failed. (-71) [ 294.811843][ T5897] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 294.859961][ T5894] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 294.930835][ T5897] usb 4-1: USB disconnect, device number 13 [ 295.161149][ T5894] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 295.203216][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.295749][ T5894] usb 7-1: Product: syz [ 295.336234][ T5894] usb 7-1: Manufacturer: syz [ 295.396952][ T5894] usb 7-1: SerialNumber: syz [ 295.450953][ T5894] usb 7-1: config 0 descriptor?? [ 295.524137][ T5894] ch341 7-1:0.0: ch341-uart converter detected [ 295.890207][ T5894] usb 7-1: failed to send control message: -71 [ 295.896441][ T5894] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 296.036041][ T5894] usb 7-1: USB disconnect, device number 7 [ 296.105686][ T5894] ch341 7-1:0.0: device disconnected [ 296.889242][T12137] loop6: detected capacity change from 0 to 256 [ 298.039170][T12157] loop1: detected capacity change from 0 to 256 [ 298.199859][ T5894] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 298.387839][T12161] loop3: detected capacity change from 0 to 512 [ 298.449931][ T5894] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.514656][ T5894] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.583247][T12161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.609837][ T5894] usb 7-1: config 1 has no interface number 0 [ 298.615959][ T5894] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.711390][T12161] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.830042][ T5894] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.900279][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.908323][ T5894] usb 7-1: Product: syz [ 299.029973][ T5894] usb 7-1: Manufacturer: syz [ 299.067917][ T5894] usb 7-1: SerialNumber: syz [ 299.093135][T12161] EXT4-fs error (device loop3): ext4_add_entry:2444: inode #12: comm syz.3.2351: Directory hole found for htree leaf block 0 [ 299.148501][ T5894] cdc_ncm 7-1:1.1: skipping garbage [ 299.209928][ T5894] cdc_ncm 7-1:1.1: invalid descriptor buffer length [ 299.257143][ T5894] cdc_ncm 7-1:1.1: NCM or ECM functional descriptors missing [ 299.279996][T12161] EXT4-fs (loop3): Remounting filesystem read-only [ 299.332244][ T5894] cdc_ncm 7-1:1.1: bind() failure [ 299.440059][ T5894] usb 7-1: USB disconnect, device number 8 [ 299.654635][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.688438][ T11] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 299.761953][ T11] Quota error (device loop3): write_blk: dquota write failed [ 299.803304][T12184] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 299.828669][ T11] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 299.880066][ T11] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 299.977766][ T11] Quota error (device loop3): write_blk: dquota write failed [ 300.059944][ T11] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 300.293933][T12189] loop1: detected capacity change from 0 to 256 [ 300.932903][T12200] netlink: 11 bytes leftover after parsing attributes in process `syz.8.2369'. [ 301.276041][T12209] IPv6: NLM_F_REPLACE set, but no existing node found! [ 301.689345][T12215] loop7: detected capacity change from 0 to 8 [ 301.752242][T12215] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 301.961435][T12215] cramfs: Error -3 while decompressing! [ 302.001919][T12215] cramfs: ffffffff9a4e1368(26)->ffff888053619000(4096) [ 302.084464][T12215] cramfs: Error -5 while decompressing! [ 302.136640][T12215] cramfs: ffffffff9a4e1382(26)->ffff888053d3e000(4096) [ 302.168288][T12223] netlink: 'syz.8.2380': attribute type 13 has an invalid length. [ 302.207472][T12215] cramfs: Error -3 while decompressing! [ 302.263283][T12219] loop6: detected capacity change from 0 to 4096 [ 302.280284][T12223] netlink: 288 bytes leftover after parsing attributes in process `syz.8.2380'. [ 302.289574][T12215] cramfs: ffffffff9a4e139c(16)->ffff888053d3f000(4096) [ 302.328951][T12215] cramfs: Error -3 while decompressing! [ 302.390975][T12215] cramfs: ffffffff9a4e1368(26)->ffff888053619000(4096) [ 302.474271][ T29] audit: type=1800 audit(2000000005.560:89): pid=12215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2377" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 303.275413][T12240] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2387'. [ 303.390182][T12240] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2387'. [ 304.375198][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2394'. [ 304.479992][T12266] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 305.818354][T12290] overlayfs: cannot append lower layer [ 307.273082][T12314] netlink: 134788 bytes leftover after parsing attributes in process `syz.6.2419'. [ 307.514964][T12316] tmpfs: Bad value for 'mpol' [ 308.346969][T12330] loop8: detected capacity change from 0 to 1764 [ 308.470278][T12322] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 308.600026][T12330] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 309.707714][T12354] loop1: detected capacity change from 0 to 64 [ 310.655365][T12365] loop8: detected capacity change from 0 to 1024 [ 310.749586][T12365] EXT4-fs: Ignoring removed orlov option [ 310.882272][T12365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 310.949706][T12365] System zones: 0-1, 3-12 [ 310.986363][T12365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.420979][ T8627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.583024][T12383] loop7: detected capacity change from 0 to 1024 [ 312.031321][ T5051] hfsplus: b-tree write err: -5, ino 4 [ 312.338584][T12391] loop3: detected capacity change from 0 to 1024 [ 312.596412][T12391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.818168][T12391] EXT4-fs error (device loop3): ext4_get_first_dir_block:3561: inode #11: comm syz.3.2452: directory missing '..' [ 313.178752][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.726728][T12379] loop6: detected capacity change from 0 to 32768 [ 313.926259][ T5897] XFS (loop6): Metadata CRC error detected at xfs_sb_read_verify+0x305/0x440, xfs_sb block 0x0 [ 314.007554][ T5897] XFS (loop6): Unmount and run xfs_repair [ 314.069896][ T5897] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 314.146360][ T5897] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 314.234142][ T5897] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 314.280062][T12418] netlink: 'syz.3.2460': attribute type 2 has an invalid length. [ 314.337266][ T5897] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 314.438806][ T5897] 00000030: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 24 40 ..............$@ [ 314.544747][ T5897] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 314.630157][ T5897] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 314.639092][ T5897] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 314.830300][ T5897] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 314.839665][T12379] XFS (loop6): SB validate failed with error -74. [ 314.950690][T12425] loop7: detected capacity change from 0 to 1024 [ 315.210892][T12431] loop8: detected capacity change from 0 to 512 [ 315.229968][T12425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.330236][T12431] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 315.452423][T12431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 315.503300][T12425] EXT4-fs error (device loop7): ext4_lookup:1805: inode #2: comm syz.7.2463: bad inode number: 12 [ 315.517166][T12437] loop1: detected capacity change from 0 to 128 [ 315.525906][T12431] EXT4-fs (loop8): orphan cleanup on readonly fs [ 315.580498][T12425] EXT4-fs (loop7): Remounting filesystem read-only [ 315.660176][T12431] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2466: bg 0: block 361: padding at end of block bitmap is not set [ 315.720285][T12437] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.857799][T12437] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.881912][T12431] EXT4-fs (loop8): Remounting filesystem read-only [ 316.023615][ T7477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.050601][T12431] EXT4-fs (loop8): 1 truncate cleaned up [ 316.057294][T12431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 316.307665][T12431] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.2466: dx entry: limit 0 != root limit 125 [ 316.428057][T12431] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2466: Corrupt directory, running e2fsck is recommended [ 316.602951][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.708328][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.847117][ T8627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 317.229693][T12458] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.106238][T12495] gretap1: entered allmulticast mode [ 320.626984][T12518] trusted_key: encrypted_key: hex blob is missing [ 320.687619][T12520] netlink: 'syz.3.2505': attribute type 5 has an invalid length. [ 320.966285][T12526] dvmrp1: entered allmulticast mode [ 321.270425][T12529] loop1: detected capacity change from 0 to 128 [ 321.304555][T12488] loop8: detected capacity change from 0 to 32768 [ 321.406242][T12488] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2490 (12488) [ 321.450846][T12529] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.583767][T12529] ext4 filesystem being mounted at /432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.615719][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.660086][T12488] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.782011][T12488] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 321.849596][T12488] BTRFS info (device loop8): using free-space-tree [ 321.884782][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 321.885100][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 321.952308][T12535] loop7: detected capacity change from 0 to 4096 [ 322.010408][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 322.010708][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 322.108362][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 322.148647][T12535] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 322.220840][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 322.221126][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 322.338337][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 322.440238][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 322.542647][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 322.581869][T12535] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 322.660633][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 322.660936][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 322.757741][T12488] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 322.890267][T12488] BTRFS error (device loop8): open_ctree failed [ 323.013115][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.717900][T12575] loop8: detected capacity change from 0 to 8 [ 324.551268][T12586] loop7: detected capacity change from 0 to 128 [ 324.642479][T12586] EXT4-fs (loop7): Test dummy encryption mode enabled [ 324.769025][T12586] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.968808][T12586] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.281995][T12598] netlink: 'syz.1.2535': attribute type 2 has an invalid length. [ 325.312600][T12598] netlink: 'syz.1.2535': attribute type 8 has an invalid length. [ 325.325572][T12586] fscrypt (loop7): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 325.451551][T12598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2535'. [ 325.823001][ T7477] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.840268][ T5897] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 327.967669][T12649] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 328.031044][T12640] loop7: detected capacity change from 0 to 8192 [ 328.105615][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 328.148143][T12640] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.183501][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.294256][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 328.324285][T12640] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 328.361255][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.384789][T12640] FAT-fs (loop7): Filesystem has been set read-only [ 328.441885][ T5897] usb 4-1: config 0 descriptor?? [ 328.462970][T12651] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2558'. [ 328.505654][ T5897] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 328.592007][ T5897] em28xx 4-1:0.0: Video interface 0 found: [ 328.842135][ T5897] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 328.978131][ T5897] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 329.117681][ T5897] em28xx 4-1:0.0: board has no eeprom [ 329.286691][ T5897] em28xx 4-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 329.356751][ T5897] em28xx 4-1:0.0: Currently, V4L2 is not supported on this model [ 329.484026][ T5897] usb 4-1: USB disconnect, device number 14 [ 329.571369][ T5897] em28xx 4-1:0.0: Disconnecting em28xx [ 329.577324][ T969] em28xx 4-1:0.0: Binding DVB extension [ 329.657301][ T969] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 329.750021][ T969] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 329.758412][ T969] em28xx 4-1:0.0: Registering input extension [ 329.934588][ T5897] em28xx 4-1:0.0: Closing input extension [ 330.004208][T12672] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 330.152004][ T5897] em28xx 4-1:0.0: Freeing device [ 331.296649][T12689] : Can't lookup blockdev [ 331.693154][T12697] loop1: detected capacity change from 0 to 64 [ 332.860027][T12714] netlink: 'syz.1.2588': attribute type 5 has an invalid length. [ 333.433305][T12723] loop8: detected capacity change from 0 to 256 [ 335.213321][ T5897] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 335.477406][ T5897] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 335.512361][ T5897] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 335.607516][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 335.706306][ T5897] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 335.835091][ T5897] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 335.902123][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.002176][ T5897] usb 9-1: SerialNumber: syz [ 336.037558][ T5897] usb 9-1: config 0 descriptor?? [ 336.097363][T12743] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 336.163031][ C0] port100 9-1:0.0: NFC: Urb failure (status -71) [ 336.199103][ T5897] port100 9-1:0.0: NFC: Could not get supported command types [ 336.339983][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 336.472395][ T8] usb 9-1: USB disconnect, device number 2 [ 336.569917][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 336.603234][ T969] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 336.672792][ T969] usb 1-1: config 0 has no interface number 0 [ 336.743348][ T969] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 336.834113][ T969] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 336.905556][ T969] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.986797][ T969] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.200037][ T969] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=10.15 [ 337.265216][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.340275][ T969] usb 1-1: Product: syz [ 337.381444][ T969] usb 1-1: Manufacturer: syz [ 337.426704][ T969] usb 1-1: SerialNumber: syz [ 337.483385][ T969] usb 1-1: config 0 descriptor?? [ 337.551077][ T969] keyspan 1-1:0.95: Keyspan 1 port adapter converter detected [ 337.558824][ T969] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 87 [ 337.688520][ T969] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 7 [ 337.788515][ T969] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 81 [ 337.884481][ T969] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 1 [ 337.982531][ T969] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 2 [ 338.070119][ T969] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 85 [ 338.167939][ T969] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 338.276978][ T969] usb 1-1: USB disconnect, device number 7 [ 338.371113][ T969] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 338.474224][ T969] keyspan 1-1:0.95: device disconnected [ 339.288817][T12813] xt_TCPMSS: Only works on TCP SYN packets [ 341.593059][T12857] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 341.810504][T12853] loop8: detected capacity change from 0 to 4096 [ 342.059934][ T969] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 342.329891][ T969] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 342.379579][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.425791][ T969] usb 4-1: Product: syz [ 342.459805][ T969] usb 4-1: Manufacturer: syz [ 342.464487][ T969] usb 4-1: SerialNumber: syz [ 342.570763][ T969] usb 4-1: config 0 descriptor?? [ 342.869912][ T969] mos7840 4-1:0.0: required endpoints missing [ 343.084880][ T969] usb 4-1: USB disconnect, device number 15 [ 344.226733][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2676'. [ 344.594665][T12866] loop7: detected capacity change from 0 to 32768 [ 344.691159][T12866] btrfs: Deprecated parameter 'usebackuproot' [ 344.697374][T12866] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 344.857617][T12866] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2663 (12866) [ 345.083358][T12866] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 345.201120][T12866] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 345.281767][T12866] BTRFS info (device loop7): disk space caching is enabled [ 345.365402][T12866] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 345.502733][T12866] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 345.503154][T12866] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 345.587616][T12866] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 345.698198][T12866] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 345.818138][T12866] BTRFS error (device loop7): open_ctree failed [ 346.505061][T12932] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2688'. [ 347.306841][T12939] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2691'. [ 347.484451][T12942] loop1: detected capacity change from 0 to 2048 [ 347.690117][T12942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.975914][T12948] netlink: 'syz.7.2696': attribute type 21 has an invalid length. [ 348.048906][T12948] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2696'. [ 348.133675][T12948] netlink: 'syz.7.2696': attribute type 5 has an invalid length. [ 348.202879][T12948] netlink: 'syz.7.2696': attribute type 6 has an invalid length. [ 348.292963][T12948] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2696'. [ 349.112100][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2702'. [ 349.208527][ T29] audit: type=1400 audit(2000000052.280:90): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=12960 comm="syz.3.2703" [ 349.229197][T12963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2702'. [ 349.986050][ T29] audit: type=1326 audit(2000000053.070:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12975 comm="syz.7.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 350.237833][ T29] audit: type=1326 audit(2000000053.110:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12975 comm="syz.7.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 350.471735][ T29] audit: type=1326 audit(2000000053.160:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12975 comm="syz.7.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 350.541968][T12984] loop3: detected capacity change from 0 to 1024 [ 350.706292][T12984] hfsplus: bad catalog entry type [ 350.725535][ T29] audit: type=1326 audit(2000000053.160:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12975 comm="syz.7.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 350.959827][ T29] audit: type=1326 audit(2000000053.160:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12975 comm="syz.7.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 351.220315][ T35] hfsplus: b-tree write err: -5, ino 4 [ 351.958270][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 352.054224][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 352.920275][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2731'. [ 353.024823][T13022] loop1: detected capacity change from 0 to 256 [ 353.125605][T12979] loop6: detected capacity change from 0 to 32768 [ 354.924566][T13055] loop7: detected capacity change from 0 to 512 [ 354.987665][T13057] loop1: detected capacity change from 0 to 256 [ 355.071663][T13055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.130726][T13055] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.250991][T13057] FAT-fs (loop1): Directory bread(block 64) failed [ 355.274458][T13055] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 355.324659][T13057] FAT-fs (loop1): Directory bread(block 65) failed [ 355.334732][ T29] audit: type=1400 audit(2000000058.420:96): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13059 comm="syz.6.2750" [ 355.375504][T13055] System zones: 0-2, 18-18, 34-34 [ 355.380961][T13057] FAT-fs (loop1): Directory bread(block 66) failed [ 355.432364][T13055] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 355.448319][T13057] FAT-fs (loop1): Directory bread(block 67) failed [ 355.512630][T13057] FAT-fs (loop1): Directory bread(block 68) failed [ 355.519223][T13057] FAT-fs (loop1): Directory bread(block 69) failed [ 355.649452][T13055] EXT4-fs (loop7): 1 truncate cleaned up [ 355.659644][T13057] FAT-fs (loop1): Directory bread(block 70) failed [ 355.711169][T13055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.734976][T13057] FAT-fs (loop1): Directory bread(block 71) failed [ 355.781289][T13057] FAT-fs (loop1): Directory bread(block 72) failed [ 355.787893][T13057] FAT-fs (loop1): Directory bread(block 73) failed [ 355.949135][T13055] EXT4-fs error (device loop7): ext4_xattr_block_list:768: inode #15: comm syz.7.2747: corrupted xattr block 19: invalid header [ 356.150127][T13055] EXT4-fs (loop7): Remounting filesystem read-only [ 356.552436][ T7477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.257880][T13092] netlink: 'syz.8.2764': attribute type 4 has an invalid length. [ 358.000040][T13104] netlink: 'syz.8.2770': attribute type 3 has an invalid length. [ 358.699840][ T29] audit: type=1400 audit(2000000061.780:97): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=13115 comm="syz.8.2776" [ 358.730999][T13117] ieee802154 phy0 wpan0: encryption failed: -90 [ 359.234034][T13129] loop8: detected capacity change from 0 to 8 [ 359.423345][T13129] SQUASHFS error: Failed to read block 0x1ec: -5 [ 359.453012][ T29] audit: type=1326 audit(2000000062.530:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.7.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 359.529894][T13129] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 359.704117][ T29] audit: type=1326 audit(2000000062.530:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.7.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 359.872628][T13138] netlink: 'syz.1.2787': attribute type 15 has an invalid length. [ 359.946118][ T29] audit: type=1326 audit(2000000062.600:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.7.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 359.978631][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2787'. [ 360.113264][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2790'. [ 360.190491][ T29] audit: type=1326 audit(2000000062.600:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.7.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 360.420016][ T29] audit: type=1326 audit(2000000062.600:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.7.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4734985d29 code=0x7ffc0000 [ 360.769887][ T29] audit: type=1326 audit(2000000063.850:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 360.995517][ T29] audit: type=1326 audit(2000000063.850:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 361.239936][ T29] audit: type=1326 audit(2000000063.960:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 361.494291][ T29] audit: type=1326 audit(2000000063.960:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 361.734323][ T29] audit: type=1326 audit(2000000063.960:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b91f85d29 code=0x7ffc0000 [ 361.976053][ T29] audit: type=1326 audit(2000000064.740:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13166 comm="syz.8.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2bbd85d29 code=0x7ffc0000 [ 362.267640][ T29] audit: type=1326 audit(2000000064.740:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13166 comm="syz.8.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2bbd85d29 code=0x7ffc0000 [ 362.480637][ T29] audit: type=1326 audit(2000000064.790:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13166 comm="syz.8.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fe2bbd85d29 code=0x7ffc0000 [ 362.527983][T13179] loop6: detected capacity change from 0 to 256 [ 362.588951][T13179] exfat: Deprecated parameter 'utf8' [ 362.629876][ T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 362.699844][ T29] audit: type=1326 audit(2000000064.790:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13166 comm="syz.8.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2bbd85d29 code=0x7ffc0000 [ 362.751089][T13179] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 362.940366][ T8] usb 9-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 362.949452][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.097162][ T8] usb 9-1: config 0 descriptor?? [ 363.155106][ T8] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input10 [ 363.393483][ T8] usb 9-1: USB disconnect, device number 3 [ 363.643251][T13189] loop6: detected capacity change from 0 to 512 [ 363.727297][T13189] EXT4-fs: Ignoring removed bh option [ 363.804737][T13189] EXT4-fs error (device loop6): __ext4_iget:4984: inode #15: block 1803188595: comm syz.6.2812: invalid block [ 363.980047][T13189] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2812: couldn't read orphan inode 15 (err -117) [ 364.136087][T13189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.545097][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2819'. [ 364.658036][ T6285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.701064][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2819'. [ 365.576235][T13221] loop8: detected capacity change from 0 to 2048 [ 365.651491][T13223] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 365.723078][T13223] overlayfs: missing 'lowerdir' [ 365.729720][T13221] Alternate GPT is invalid, using primary GPT. [ 365.763770][T13226] Cannot find add_set index 1026 as target [ 365.780324][T13221] loop8: p1 p2 p3 [ 365.822445][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2829'. [ 365.920492][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2829'. [ 365.930075][ T5198] Alternate GPT is invalid, using primary GPT. [ 365.986979][ T5198] loop8: p1 p2 p3 [ 366.025046][T13229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 366.219391][ T6019] udevd[6019]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 366.315820][ T6611] udevd[6611]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 366.331922][ T6613] udevd[6613]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 366.632815][ T6019] udevd[6019]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 366.662807][ T6611] udevd[6611]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 366.675732][ T6613] udevd[6613]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 366.779931][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 367.003564][T13239] loop1: detected capacity change from 0 to 1024 [ 367.069994][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 367.136184][ T8] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 367.212826][ T8] usb 1-1: config 0 has no interface number 0 [ 367.246049][T13239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.330056][ T8] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.426916][ T8] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 367.519354][ T8] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 367.621551][ T8] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 367.770872][ T8] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 367.780443][T13213] loop3: detected capacity change from 0 to 32768 [ 367.811219][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.849841][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.857894][ T8] usb 1-1: Product: syz [ 367.887154][T13213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2824 (13213) [ 367.979096][ T8] usb 1-1: Manufacturer: syz [ 367.999430][ T8] usb 1-1: SerialNumber: syz [ 368.050520][T13213] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.086231][ T8] usb 1-1: config 0 descriptor?? [ 368.203243][T13213] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 368.314511][T13213] BTRFS info (device loop3): using free-space-tree [ 368.405990][ T8] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 368.420129][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 368.420425][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 368.520285][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 368.529683][ T8] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 368.641335][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 368.641605][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 368.738599][ T8] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 368.768972][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 368.769248][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 368.860418][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 368.960171][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 369.064376][ T8] usb 1-1: USB disconnect, device number 8 [ 369.094053][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 369.094334][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 369.220258][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 369.320122][T13213] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 369.464245][T13213] BTRFS error (device loop3): open_ctree failed [ 370.682069][T13296] loop1: detected capacity change from 0 to 2048 [ 370.792062][T13296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.107444][T13257] loop6: detected capacity change from 0 to 32768 [ 371.238792][T13257] read_mapping_page failed! [ 371.282395][T13257] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 371.371745][T13257] Mount JFS Failure: -5 [ 371.405181][T13257] jfs_mount failed w/return code = -5 [ 372.912718][ T30] INFO: task jbd2/sda1-8:5160 blocked for more than 143 seconds. [ 372.942630][ T30] Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 373.013149][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.109241][ T30] task:jbd2/sda1-8 state:D stack:24904 pid:5160 tgid:5160 ppid:2 flags:0x00004000 [ 373.200223][ T30] Call Trace: [ 373.246706][ T30] [ 373.282281][ T30] __schedule+0x1850/0x4c30 [ 373.309671][ T30] ? __pfx___schedule+0x10/0x10 [ 373.339194][ T30] ? __pfx_lock_release+0x10/0x10 [ 373.380466][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.395399][ T30] ? schedule+0x90/0x320 [ 373.424359][ T30] schedule+0x14b/0x320 [ 373.450242][ T30] io_schedule+0x8d/0x110 [ 373.479888][ T30] bit_wait_io+0x12/0xd0 [ 373.491354][ T30] __wait_on_bit+0xb2/0x2f0 [ 373.501607][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 373.508117][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 373.519379][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 373.527157][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 373.538024][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 373.548764][ T30] jbd2_journal_commit_transaction+0x3cfa/0x6560 [ 373.560078][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 373.567052][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 373.579836][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.591626][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 373.598243][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.623396][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 373.629175][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.642036][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 373.647979][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 373.658358][ T30] ? prepare_to_wait+0x186/0x210 [ 373.665949][ T30] ? schedule+0x90/0x320 [ 373.675824][ T30] kjournald2+0x41c/0x7b0 [ 373.680466][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.686936][ T30] ? __pfx_kjournald2+0x10/0x10 [ 373.699828][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 373.712524][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.718274][ T30] ? __kthread_parkme+0x169/0x1d0 [ 373.728261][ T30] ? __pfx_kjournald2+0x10/0x10 [ 373.743160][ T30] kthread+0x2f2/0x390 [ 373.747432][ T30] ? __pfx_kjournald2+0x10/0x10 [ 373.758081][ T30] ? __pfx_kthread+0x10/0x10 [ 373.765283][ T30] ret_from_fork+0x4d/0x80 [ 373.770010][ T30] ? __pfx_kthread+0x10/0x10 [ 373.774721][ T30] ret_from_fork_asm+0x1a/0x30 [ 373.779617][ T30] [ 373.794176][ T30] [ 373.794176][ T30] Showing all locks held in the system: [ 373.823312][ T30] 2 locks held by kworker/1:0/25: [ 373.828533][ T30] 1 lock held by khungtaskd/30: [ 373.837392][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 373.851131][ T30] 2 locks held by getty/5582: [ 373.855904][ T30] #0: ffff88814d1730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.878601][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 373.896320][ T30] 2 locks held by kworker/1:3/5833: [ 373.907688][ T30] 4 locks held by kworker/1:8/5941: [ 373.914729][ T30] [ 373.917148][ T30] ============================================= [ 373.917148][ T30] [ 373.944228][ T30] NMI backtrace for cpu 0 [ 373.948597][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 373.959123][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 373.969194][ T30] Call Trace: [ 373.972486][ T30] [ 373.975432][ T30] dump_stack_lvl+0x241/0x360 [ 373.980148][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.985382][ T30] ? __pfx__printk+0x10/0x10 [ 373.990017][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 373.994988][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 374.000473][ T30] ? _printk+0xd5/0x120 [ 374.004663][ T30] ? __pfx__printk+0x10/0x10 [ 374.009286][ T30] ? __wake_up_klogd+0xcc/0x110 [ 374.014160][ T30] ? __pfx__printk+0x10/0x10 [ 374.018784][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.024529][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 374.029585][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.035592][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 374.041612][ T30] watchdog+0xff6/0x1040 [ 374.045889][ T30] ? watchdog+0x1ea/0x1040 [ 374.050340][ T30] ? __pfx_watchdog+0x10/0x10 [ 374.055044][ T30] kthread+0x2f2/0x390 [ 374.059142][ T30] ? __pfx_watchdog+0x10/0x10 [ 374.063853][ T30] ? __pfx_kthread+0x10/0x10 [ 374.068475][ T30] ret_from_fork+0x4d/0x80 [ 374.072915][ T30] ? __pfx_kthread+0x10/0x10 [ 374.077531][ T30] ret_from_fork_asm+0x1a/0x30 [ 374.082328][ T30] [ 374.086441][ T30] Sending NMI from CPU 0 to CPUs 1: [ 374.091874][ C1] NMI backtrace for cpu 1 [ 374.091897][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 374.091923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 374.091939][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 374.091978][ C1] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 374.092004][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 374.092024][ C1] RSP: 0018:ffffc90000a185c0 EFLAGS: 00000056 [ 374.092043][ C1] RAX: 0000000000000001 RBX: 00000000000003fa RCX: ffffffff817ab99c [ 374.092059][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942a38f8 [ 374.092074][ C1] RBP: 00000000000c23fa R08: ffffffff942a38ff R09: 1ffffffff285471f [ 374.092092][ C1] R10: dffffc0000000000 R11: fffffbfff2854720 R12: ffff88801d6828c4 [ 374.092110][ C1] R13: 000000000000000a R14: 00000000000003fa R15: 0000000000000000 [ 374.092127][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 374.092147][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.092164][ C1] CR2: 0000001b2ff12ff8 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 374.092182][ C1] Call Trace: [ 374.092190][ C1] [ 374.092199][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 374.092227][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 374.092256][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 374.092292][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 374.092314][ C1] ? nmi_handle+0x151/0x5a0 [ 374.092343][ C1] ? nmi_handle+0x2a/0x5a0 [ 374.092371][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 374.092395][ C1] ? default_do_nmi+0x63/0x160 [ 374.092422][ C1] ? exc_nmi+0x123/0x1f0 [ 374.092446][ C1] ? end_repeat_nmi+0xf/0x53 [ 374.092481][ C1] ? __lock_acquire+0x4ac/0x2100 [ 374.092508][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 374.092533][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 374.092557][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 374.092581][ C1] [ 374.092589][ C1] [ 374.092597][ C1] srso_alias_return_thunk+0x5/0xfbef5 [ 374.092619][ C1] __lock_acquire+0x4ac/0x2100 [ 374.092655][ C1] lock_acquire+0x1ed/0x550 [ 374.092681][ C1] ? kcov_remote_start+0x97/0x7d0 [ 374.092710][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 374.092740][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.092763][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 374.092785][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 374.092815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.092838][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 374.092868][ C1] ? kcov_remote_start+0x97/0x7d0 [ 374.092899][ C1] kcov_remote_start+0xb0/0x7d0 [ 374.092924][ C1] ? kcov_remote_start+0x97/0x7d0 [ 374.092948][ C1] ? usb_unanchor_urb+0x7d/0xc0 [ 374.092986][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 374.093019][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 374.093052][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 374.093073][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093101][ C1] dummy_timer+0x856/0x4620 [ 374.093124][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093151][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 374.093200][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093236][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 374.093263][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 374.093286][ C1] __hrtimer_run_queues+0x59d/0xd30 [ 374.093319][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 374.093356][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 374.093389][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093412][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093435][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 374.093466][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 374.093502][ C1] handle_softirqs+0x2d6/0x9b0 [ 374.093538][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093565][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 374.093602][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 374.093639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093662][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 374.093693][ C1] __irq_exit_rcu+0xf7/0x220 [ 374.093727][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 374.093765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.093790][ C1] irq_exit_rcu+0x9/0x30 [ 374.093823][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 374.093859][ C1] [ 374.093867][ C1] [ 374.093878][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.093918][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 374.093954][ C1] Code: 8c e8 14 d4 66 0a 65 66 8b 05 34 11 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 c8 78 45 00 fb 65 8b 05 f8 10 a2 7e <85> c0 75 05 e8 77 82 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 374.093974][ C1] RSP: 0018:ffffc900001f7a80 EFLAGS: 00000282 [ 374.093993][ C1] RAX: 0000000080000000 RBX: 1ffff9200003ef54 RCX: ffffffff817b275a [ 374.094010][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5fac20 [ 374.094028][ C1] RBP: ffffc900001f7b40 R08: ffffffff942a3987 R09: 1ffffffff2854730 [ 374.094046][ C1] R10: dffffc0000000000 R11: fffffbfff2854731 R12: dffffc0000000000 [ 374.094064][ C1] R13: 1ffff9200003ef58 R14: ffffc900001f7ac0 R15: 0000000000000200 [ 374.094085][ C1] ? mark_lock+0x9a/0x360 [ 374.094118][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 374.094154][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 374.094189][ C1] ? rcu_read_lock_bh_held+0x7e/0x120 [ 374.094224][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 374.094263][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 374.094298][ C1] wg_packet_tx_worker+0x755/0x810 [ 374.094334][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 374.094371][ C1] ? process_scheduled_works+0x976/0x1840 [ 374.094395][ C1] process_scheduled_works+0xa68/0x1840 [ 374.094432][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.094460][ C1] ? assign_work+0x364/0x3d0 [ 374.094484][ C1] worker_thread+0x870/0xd30 [ 374.094515][ C1] ? __kthread_parkme+0x169/0x1d0 [ 374.094541][ C1] ? __pfx_worker_thread+0x10/0x10 [ 374.094565][ C1] kthread+0x2f2/0x390 [ 374.094593][ C1] ? __pfx_worker_thread+0x10/0x10 [ 374.094616][ C1] ? __pfx_kthread+0x10/0x10 [ 374.094645][ C1] ret_from_fork+0x4d/0x80 [ 374.094669][ C1] ? __pfx_kthread+0x10/0x10 [ 374.094696][ C1] ret_from_fork_asm+0x1a/0x30 [ 374.094725][ C1] [ 374.763364][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 374.770347][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 374.780870][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 374.790948][ T30] Call Trace: [ 374.794242][ T30] [ 374.797190][ T30] dump_stack_lvl+0x241/0x360 [ 374.801916][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.807152][ T30] ? __pfx__printk+0x10/0x10 [ 374.811769][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 374.817786][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.823444][ T30] ? vscnprintf+0x5d/0x90 [ 374.827805][ T30] panic+0x349/0x880 [ 374.831729][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.837471][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 374.843656][ T30] ? __pfx_panic+0x10/0x10 [ 374.848100][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 374.853510][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.859164][ T30] ? __irq_work_queue_local+0x137/0x410 [ 374.864735][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.870389][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 374.875788][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 374.881966][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 374.888151][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.893804][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 374.900003][ T30] watchdog+0x1035/0x1040 [ 374.904360][ T30] ? watchdog+0x1ea/0x1040 [ 374.908810][ T30] ? __pfx_watchdog+0x10/0x10 [ 374.913515][ T30] kthread+0x2f2/0x390 [ 374.917612][ T30] ? __pfx_watchdog+0x10/0x10 [ 374.922320][ T30] ? __pfx_kthread+0x10/0x10 [ 374.926944][ T30] ret_from_fork+0x4d/0x80 [ 374.931382][ T30] ? __pfx_kthread+0x10/0x10 [ 374.936000][ T30] ret_from_fork_asm+0x1a/0x30 [ 374.940799][ T30] [ 374.945446][ T30] Kernel Offset: disabled [ 374.949775][ T30] Rebooting in 86400 seconds..