last executing test programs: 3m59.226619209s ago: executing program 3 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000016e, 0x4, 0xca, 0x0, 0x1000, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x0, 0x0, "cc2f300fe9b28a"}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @exp_fastopen={0xfe, 0xb, 0xf989, "5d7d0438043979"}]}}}}}}}, 0x0) 3m59.066419395s ago: executing program 3 (id=29): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000300, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c}, {&(0x7f0000000340)=[0x6], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 3m58.90203073s ago: executing program 0 (id=31): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 3m58.310549899s ago: executing program 32 (id=31): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 3m58.2787793s ago: executing program 3 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m57.545949644s ago: executing program 3 (id=38): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c84015, 0x0, 0x40, 0x0, &(0x7f00000000c0)) 3m54.807340463s ago: executing program 3 (id=49): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) 3m48.11572814s ago: executing program 3 (id=71): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 3m47.411140582s ago: executing program 33 (id=71): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 3m1.627451038s ago: executing program 4 (id=326): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)=ANY=[@ANYBLOB="75746681d1302c73686f72746e616d653d77696e6e742c73686f72757466383d312c756e695f786c6174653d302c6e66733d6e6f7374616c655f726f2c747a3d5554432c756e695f786c6174653d312c73686f72746e726d653d6d697865642c73686f72746e616d653d77696e6e742c666c7573682c73686f727404616d653d77696e39352c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c00"], 0x0, 0x2c4, &(0x7f0000000a40)="$eJzs3UFr02AYwPFn7dZ2HVt7GIKC+KAXvYStfoIiG4gFZVvFeRAyl2ppbEZTKxVxu3n1E/gBht48Kah32cWbd/Gyi+BlB7WyNLFdF7FVttTt/4ORd++bp3nT9015Etpk+8bTe5WSa5TMusRSKjGRDdkRye6WfCP+MuaVE9JtQy5MfP14enH55pV8oTC3oDqfX7qYU9WpM28ePHp+9l194vrLqddJ2cre2v6S+7R1Yuvk9o+l4NUdEVNXHKdurtiWrpbdiqF6zbZM19Jy1bVqde1qL9nO2lpTzerqZHqtZrmumtWmVqym1h2t15pq3jHLVTUMQyfTvd0/8uIDRxS/J0TyB9IZRGE8rLJWy5vx0Mbi5mF0CgAADJeo8v+7ZVfLrladPfn9/vw/JgPk/yJh+T9+q7i5sGCS/x9xu/l/2j9+9yL/BwAAAAAAAAAAAAAAAAAAAADgf7Ajkmm1WpmdVstbBn9JEUmJSPB/1P3EwQjGnfE/nhaXR8T/4V5KxH7SKDaK7WW7PV+SsthiycyYyDdvPvja5fnLhbkZ9WTlrb3ux683inFJBvGBbHj8bDteu+PXZUzS3dvPSUamw+NzIfGNYkLOn2sl/S1bYkhGPtwWR2xZ9eZ1J/7xrOqlq4We+HFvPQAAAAAAjgJDf9l3/u61GxrcNqSnvV3ZuT4gmc71gbmw6wM959ejcmo0uv0GAAAAAOA4cZsPK6ZtW7U/FVKdmvf9Rw1VIXj+wcDh8ZCm4Bsx0e1Oqt+VR0XEr3k1LGPRTyH2D29vfIBRHts/nxMisqdm+vDn/ItnAxye/RU+3+9/0kb1iQQAAADgoARJ/7F5SCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOo35uHBev/zb3HujYXj2YvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOHwMwAA//8VhA3+") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) 3m0.784472045s ago: executing program 4 (id=329): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x300, 0x0, 0x54}, 0x9c) 3m0.055657478s ago: executing program 4 (id=334): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000002"], 0x18}, 0x40e0) 2m59.745745969s ago: executing program 4 (id=337): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file1\x00', 0x0, &(0x7f0000000040)={[{@utf8}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@utf8no}, {@shortname_win95}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m59.114064049s ago: executing program 4 (id=340): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) io_setup(0x4101, &(0x7f0000000000)=0x0) io_submit(r4, 0x3, &(0x7f0000000440)=[&(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x1, 0xff42, r1, &(0x7f0000000340)="17", 0x1, 0x100000001, 0x0, 0x0, r0}, 0x0, 0x0]) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x0) 2m58.214578198s ago: executing program 4 (id=347): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m57.809362602s ago: executing program 34 (id=347): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m15.900778301s ago: executing program 2 (id=577): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f0000002180)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) 2m15.262946252s ago: executing program 2 (id=580): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="14", 0x1}], 0x1}, 0x0) 2m15.145097236s ago: executing program 2 (id=582): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) capget(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000280)={0x400, 0x4, 0x1, 0x5, 0xe9, 0x9}) 2m14.547200045s ago: executing program 2 (id=588): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f0000002240)='./file1\x00', &(0x7f0000000040)='.\x02\x00') 2m13.726178192s ago: executing program 2 (id=596): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000200000000004c9821"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m13.382485923s ago: executing program 6 (id=598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4102, 0x1006}, 0xadd}], 0x1, 0x40002000, 0x0) 2m13.035579724s ago: executing program 6 (id=602): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c2, 0x491, 0xfffffffe, 0x3}, &(0x7f0000000440)=0x0, &(0x7f00000021c0)=0x0, &(0x7f0000002200)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000025c0)=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x8b1f, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x1, 0x849, 0xc, 0x0}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd81, 0x9, 0x0}}) io_uring_enter(r0, 0x20, 0xd9db, 0x8, 0x0, 0x0) 2m12.912769708s ago: executing program 2 (id=603): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 2m12.614610348s ago: executing program 35 (id=603): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 2m11.91851055s ago: executing program 6 (id=608): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) stat(0x0, 0x0) 2m11.588950241s ago: executing program 6 (id=610): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00') 2m11.251945342s ago: executing program 6 (id=614): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x148, 0x278, 0x148, 0x148, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @loopback, 0xff, 0xff, 'veth0_to_hsr\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x73, 0x1, 0x6b}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x48, {0x2, 0x4e21, @local}}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 2m10.68932042s ago: executing program 6 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@empty, @local, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x3c, 0xff, @private2={0xfc, 0x2, '\x00', 0x5}, @mcast2}}}}}, 0x3a) 2m10.166143177s ago: executing program 36 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@empty, @local, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x3c, 0xff, @private2={0xfc, 0x2, '\x00', 0x5}, @mcast2}}}}}, 0x3a) 54.602132699s ago: executing program 8 (id=1049): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000480)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 54.289870969s ago: executing program 8 (id=1052): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 54.038588447s ago: executing program 8 (id=1054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x2f}, 0x8) sendmmsg(r0, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="03", 0x1}], 0x1}}], 0x1, 0x4) 53.554688293s ago: executing program 8 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 53.146438596s ago: executing program 8 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 52.497681507s ago: executing program 8 (id=1058): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) keyctl$reject(0x13, 0x0, 0x0, 0x0, r0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000004ec0), &(0x7f0000004f00)={'syz', 0x0}, &(0x7f0000004f40)="2c6a0faa91b1a9f3", 0x8, r0) keyctl$read(0xb, r1, &(0x7f0000004fc0)=""/7, 0x7) 37.151652574s ago: executing program 37 (id=1058): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) keyctl$reject(0x13, 0x0, 0x0, 0x0, r0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000004ec0), &(0x7f0000004f00)={'syz', 0x0}, &(0x7f0000004f40)="2c6a0faa91b1a9f3", 0x8, r0) keyctl$read(0xb, r1, &(0x7f0000004fc0)=""/7, 0x7) 16.219063213s ago: executing program 0 (id=1135): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1100002, 0x0, 0x3e, 0x0, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES8=r2], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15.797210678s ago: executing program 0 (id=1218): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendto$inet6(r2, &(0x7f0000000180)='Q', 0x1, 0x20008011, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f00000038c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 14.685118984s ago: executing program 0 (id=1226): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 12.843449813s ago: executing program 0 (id=1233): r0 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x12) write$P9_RREADLINK(r0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) creat(0x0, 0x7a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 9.012644018s ago: executing program 1 (id=1245): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 8.702807088s ago: executing program 1 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000070601"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40004) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 5.470078073s ago: executing program 1 (id=1258): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) 5.360493486s ago: executing program 9 (id=1259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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") write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) 5.299517338s ago: executing program 0 (id=1261): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) setns(r0, 0x2000000) 4.691796958s ago: executing program 38 (id=1261): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) setns(r0, 0x2000000) 4.672643779s ago: executing program 1 (id=1265): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) 4.64084101s ago: executing program 9 (id=1267): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffff7fff, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.367187709s ago: executing program 1 (id=1270): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0xc802, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x5f85, &(0x7f0000008340)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x800000200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204, 0xfffffffffffffffd]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 4.239577512s ago: executing program 9 (id=1271): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2c, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000780)={0x0, 0x4000, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 3.786830527s ago: executing program 9 (id=1273): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x116}) close_range(r0, r0, 0x0) r1 = io_uring_setup(0x660c, &(0x7f0000000340)={0x0, 0xf04d, 0x8, 0xfffffffc, 0x211}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close(r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)) 3.430506949s ago: executing program 5 (id=1274): sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r1, 0x8b18, &(0x7f0000000040)) 3.166063977s ago: executing program 5 (id=1275): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1f9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.903796456s ago: executing program 5 (id=1277): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.625029905s ago: executing program 9 (id=1278): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008090}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 2.488671999s ago: executing program 9 (id=1279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.984519966s ago: executing program 1 (id=1281): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1.632312647s ago: executing program 5 (id=1282): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0x3, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) close(0x3) 1.598879378s ago: executing program 7 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1.362598906s ago: executing program 7 (id=1284): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 1.225833311s ago: executing program 5 (id=1285): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000400)=""/239, 0x1c) 1.139655633s ago: executing program 7 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r3, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 870.270602ms ago: executing program 5 (id=1287): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000340)=""/152, 0x98}], 0x2) 798.410254ms ago: executing program 7 (id=1288): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(r0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 605.14008ms ago: executing program 7 (id=1289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a80)="a28b7c", 0x3}], 0x1}, 0x4006041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 7 (id=1290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088fb4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x8864, r3}, 0x14) kernel console output (not intermixed with test programs): ecomes ready [ 202.138905][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.173724][ T6803] device veth1_vlan entered promiscuous mode [ 202.283378][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.312474][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.347121][ T6803] device veth0_macvtap entered promiscuous mode [ 202.383748][ T6803] device veth1_macvtap entered promiscuous mode [ 202.472016][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.516566][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.650809][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.750786][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.891384][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.013855][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.141476][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.216896][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.229524][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.246596][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.261929][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.301432][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.316683][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.355706][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.416725][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.457960][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.480360][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.514486][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.535485][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.586644][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.617615][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.671211][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.680942][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.690113][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.737238][ T6803] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.760709][ T6803] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.793906][ T6803] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.811080][ T6803] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.004745][ T5099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.028724][ T5099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.054144][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.127155][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.140945][ T5244] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 204.145798][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.186996][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.321070][ T5244] usb 6-1: Using ep0 maxpacket: 8 [ 204.333478][ T5244] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 204.381748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.391573][ T5244] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.413476][ T5244] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.424613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.450915][ T5244] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.473495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.483065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.497706][ T5244] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.515224][ T6851] device veth0_vlan entered promiscuous mode [ 204.523797][ T7159] netlink: 'syz.8.605': attribute type 8 has an invalid length. [ 204.539301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.547907][ T5244] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.559227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.586396][ T5244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.603370][ T6851] device veth1_vlan entered promiscuous mode [ 204.819128][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.837404][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.853746][ T5244] usb 6-1: usb_control_msg returned -32 [ 204.859404][ T5244] usbtmc 6-1:16.0: can't read capabilities [ 204.865505][ T7163] loop8: detected capacity change from 0 to 512 [ 204.900587][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.935552][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.964893][ T6851] device veth0_macvtap entered promiscuous mode [ 204.991547][ T7163] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.683: inode #1: comm syz.8.683: iget: illegal inode # [ 205.024924][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 205.041554][ T7163] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.683: error while reading EA inode 1 err=-117 [ 205.075119][ T6851] device veth1_macvtap entered promiscuous mode [ 205.104537][ T7163] EXT4-fs (loop8): 1 orphan inode deleted [ 205.107752][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 205.126614][ T14] usb 6-1: USB disconnect, device number 9 [ 205.135151][ T7163] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 205.206531][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.296867][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.336824][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.376644][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.417632][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.450896][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.475367][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.517636][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.567592][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.604641][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.636264][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.650130][ T6803] EXT4-fs (loop8): unmounting filesystem. [ 205.660538][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.764867][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.863339][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.049595][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.080839][ T4319] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 206.135339][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.155878][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.169448][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.182291][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.193012][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.204029][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.215268][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.231642][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.243830][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.255229][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.267274][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.292245][ T4319] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.315829][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.357926][ T4319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.380331][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.422174][ T6851] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.436642][ T4319] usb 9-1: config 0 descriptor?? [ 206.470113][ T6851] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.487019][ T4319] cp210x 9-1:0.0: cp210x converter detected [ 206.494590][ T6851] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.506865][ T6851] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.661018][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 206.730081][ T7200] loop5: detected capacity change from 0 to 2048 [ 206.788602][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.809238][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.823859][ T7201] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.881553][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.916250][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.927309][ T4319] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 206.979720][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.016611][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.038921][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.088679][ T26] audit: type=1800 audit(1780545438.468:14): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.692" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 207.096719][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.149580][ T7201] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 207.233539][ T4319] usb 9-1: cp210x converter now attached to ttyUSB0 [ 207.283711][ T7201] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 207.459446][ T5244] usb 9-1: USB disconnect, device number 2 [ 208.017660][ T7207] loop9: detected capacity change from 0 to 131072 [ 208.052639][ T7207] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 208.059480][ T7207] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 208.084455][ T7207] F2FS-fs (loop9): invalid crc value [ 208.094282][ T5244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.105501][ T7201] Remounting filesystem read-only [ 208.122011][ T7207] F2FS-fs (loop9): Found nat_bits in checkpoint [ 208.215990][ T7207] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 208.223308][ T7207] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 208.312785][ T5244] cp210x 9-1:0.0: device disconnected [ 208.346268][ T26] audit: type=1800 audit(1780545439.728:15): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.621" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 208.818796][ T7219] netlink: 'syz.5.694': attribute type 1 has an invalid length. [ 208.997811][ T7219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.124781][ T7222] bond1: (slave geneve2): making interface the new active one [ 209.172981][ T7222] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 209.218319][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 209.239752][ T7237] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 209.612719][ T7248] loop5: detected capacity change from 0 to 512 [ 209.834993][ T7248] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 209.851284][ T7248] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.972230][ T26] audit: type=1800 audit(1780545441.358:16): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.703" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 210.209160][ T4466] EXT4-fs (loop5): unmounting filesystem. [ 210.368085][ T7266] loop8: detected capacity change from 0 to 2048 [ 210.465950][ T7266] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 210.486245][ T7266] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.640197][ T6803] EXT4-fs (loop8): unmounting filesystem. [ 210.902358][ T7250] loop1: detected capacity change from 0 to 32768 [ 210.975418][ T7250] XFS (loop1): Mounting V5 Filesystem [ 211.058265][ T7250] XFS (loop1): Ending clean mount [ 211.072406][ T14] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 211.217756][ T4272] XFS (loop1): Unmounting Filesystem [ 211.284985][ T14] usb 10-1: Using ep0 maxpacket: 32 [ 211.301584][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.344288][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 211.393856][ T14] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.430447][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.465779][ T14] usb 10-1: config 0 descriptor?? [ 211.485889][ T7275] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 211.526204][ T14] hub 10-1:0.0: USB hub found [ 211.715236][ T7298] loop7: detected capacity change from 0 to 2048 [ 211.729151][ T14] hub 10-1:0.0: 1 port detected [ 211.820406][ T7298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.993566][ T7302] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 212.319822][ T7315] loop8: detected capacity change from 0 to 512 [ 212.460899][ T7315] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 212.612817][ T7315] EXT4-fs (loop8): 1 truncate cleaned up [ 212.631447][ T7315] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 212.835857][ T4322] usb 10-1: USB disconnect, device number 2 [ 212.959890][ T6803] EXT4-fs (loop8): unmounting filesystem. [ 213.009368][ T7334] loop5: detected capacity change from 0 to 512 [ 213.098404][ T7334] EXT4-fs (loop5): invalid journal inode [ 213.138201][ T7342] netlink: 'syz.8.724': attribute type 10 has an invalid length. [ 213.151565][ T7334] EXT4-fs (loop5): can't get journal size [ 213.215724][ T7334] EXT4-fs (loop5): 1 truncate cleaned up [ 213.289570][ T7334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 213.343800][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.375389][ T7342] team0: Port device bond0 added [ 213.684842][ T4466] EXT4-fs (loop5): unmounting filesystem. [ 213.777253][ T7352] loop9: detected capacity change from 0 to 4096 [ 213.939336][ T7362] loop1: detected capacity change from 0 to 2048 [ 214.000235][ T7362] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 21760 [ 214.101057][ T4322] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 214.320679][ T4322] usb 8-1: Using ep0 maxpacket: 16 [ 214.332031][ T4322] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.370549][ T4322] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.417410][ T4322] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 214.470959][ T4322] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.512440][ T4322] usb 8-1: config 0 descriptor?? [ 214.533798][ T6851] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 214.579724][ T6851] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 214.656398][ T7377] netlink: 'syz.5.737': attribute type 12 has an invalid length. [ 214.675911][ T7377] netlink: 'syz.5.737': attribute type 29 has an invalid length. [ 214.698292][ T7377] netlink: 148 bytes leftover after parsing attributes in process `syz.5.737'. [ 214.718269][ T7377] netlink: 'syz.5.737': attribute type 2 has an invalid length. [ 214.740977][ T7377] netlink: 'syz.5.737': attribute type 3 has an invalid length. [ 214.779538][ T7377] netlink: 15 bytes leftover after parsing attributes in process `syz.5.737'. [ 214.937276][ T4322] ntrig 0003:1B96:0008.000B: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.7-1/input0 [ 215.134495][ T4322] ntrig 0003:1B96:0008.000B: Firmware version: 4.0.7.25.1 (c099 29eb) [ 215.176064][ T7393] 9p: Unknown uid 00000000004294967295 [ 215.346105][ T14] usb 8-1: USB disconnect, device number 6 [ 215.455070][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 215.684541][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.747'. [ 216.170896][ T4322] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 216.360859][ T4322] usb 10-1: Using ep0 maxpacket: 16 [ 216.370318][ T4322] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 216.414959][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.439237][ T4322] usb 10-1: Product: syz [ 216.461904][ T4322] usb 10-1: Manufacturer: syz [ 216.481779][ T4322] usb 10-1: SerialNumber: syz [ 216.512027][ T4322] usb 10-1: config 0 descriptor?? [ 216.538981][ T4322] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 216.579797][ T4322] usb 10-1: Detected FT-X [ 216.738818][ T7446] loop8: detected capacity change from 0 to 128 [ 216.748380][ T4322] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 216.806291][ T7446] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.853031][ T7446] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.969186][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.983313][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.093834][ T46] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.227034][ T4322] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 217.427100][ T4322] usb 10-1: USB disconnect, device number 3 [ 217.468929][ T4322] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 217.547204][ T4322] ftdi_sio 10-1:0.0: device disconnected [ 217.630559][ T7433] loop7: detected capacity change from 0 to 32768 [ 217.673356][ T7433] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 217.791010][ T4323] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 217.985442][ T4323] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 218.004927][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.045464][ T4323] usb 6-1: Product: syz [ 218.049763][ T4323] usb 6-1: Manufacturer: syz [ 218.077347][ T4511] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 218.096364][ T4323] usb 6-1: SerialNumber: syz [ 218.113082][ T4323] usb 6-1: config 0 descriptor?? [ 218.303239][ T5784] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 218.503077][ T5784] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.526638][ T4323] usb 6-1: Firmware: major: 204, minor: 158, hardware type: UNKNOWN (237) [ 218.535914][ T5784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.570096][ T5784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.591694][ T7465] loop1: detected capacity change from 0 to 40427 [ 218.610161][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.635118][ T7465] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 218.646548][ T7465] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 218.649442][ T5784] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 218.674437][ T7465] F2FS-fs (loop1): invalid crc value [ 218.708764][ T7465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.710259][ T5784] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 218.727607][ T4323] usb 6-1: Read permanent extended address 2e:c6:8e:d7:19:ec:68:68 from device [ 218.746025][ T4323] usb 6-1: atusb_probe: initialization failed, error = -524 [ 218.759198][ T5784] usb 8-1: Manufacturer: syz [ 218.768933][ T4323] atusb: probe of 6-1:0.0 failed with error -524 [ 218.775785][ T5244] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 218.786456][ T5784] usb 8-1: config 0 descriptor?? [ 218.859565][ T7465] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 218.868012][ T7465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.932489][ T4322] usb 6-1: USB disconnect, device number 10 [ 218.971076][ T5244] usb 10-1: Using ep0 maxpacket: 16 [ 218.987904][ T5244] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.009601][ T5244] usb 10-1: config 0 interface 0 has no altsetting 0 [ 219.042465][ T5244] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 219.074852][ T5244] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.111765][ T5244] usb 10-1: config 0 descriptor?? [ 219.141510][ T7496] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 219.234218][ T5784] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 219.260034][ T5784] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 219.315775][ T5784] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 219.381570][ T7501] loop8: detected capacity change from 0 to 128 [ 219.552471][ T5244] nzxt-smart2 0003:1E71:2009.000D: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 219.594734][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.594764][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.630986][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.643479][ T5784] usb 8-1: USB disconnect, device number 7 [ 219.669356][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.669383][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.678325][ T7500] fido_id[7500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 219.699677][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.741225][ T4272] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 219.996269][ T5784] usb 10-1: USB disconnect, device number 4 [ 220.470986][ T7519] device syzkaller1 entered promiscuous mode [ 220.611322][ T4323] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 220.697593][ T7521] loop8: detected capacity change from 0 to 4096 [ 220.700016][ T7524] loop9: detected capacity change from 0 to 256 [ 220.761135][ T7521] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 220.791314][ T7524] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 220.821184][ T4323] usb 6-1: Using ep0 maxpacket: 32 [ 220.829016][ T4323] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 220.898556][ T4323] usb 6-1: config 2 has no interface number 0 [ 220.928988][ T4323] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 220.969590][ T4323] usb 6-1: config 2 interface 88 has no altsetting 0 [ 221.009612][ T4323] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 221.030910][ T7521] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 221.082666][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.095982][ T7521] ntfs3: loop8: Inode r=b is not in use! [ 221.110888][ T4323] usb 6-1: Product: syz [ 221.111676][ T7521] ntfs3: loop8: Failed to load $Extend. [ 221.115089][ T4323] usb 6-1: Manufacturer: syz [ 221.182550][ T4323] usb 6-1: SerialNumber: syz [ 221.188367][ T7533] loop7: detected capacity change from 0 to 16 [ 221.212852][ T7516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 221.234311][ T7535] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 221.284439][ T7533] erofs: (device loop7): mounted with root inode @ nid 36. [ 221.446523][ T7516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 221.850951][ T4322] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 222.064459][ T4322] usb 9-1: Using ep0 maxpacket: 32 [ 222.075915][ T4322] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.110063][ T4322] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 222.127117][ T7559] loop1: detected capacity change from 0 to 512 [ 222.133912][ T4322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.144040][ T4322] usb 9-1: Product: syz [ 222.148374][ T4322] usb 9-1: Manufacturer: syz [ 222.164312][ T4322] usb 9-1: SerialNumber: syz [ 222.175778][ T4322] usb 9-1: config 0 descriptor?? [ 222.189409][ T4322] usb 9-1: bad CDC descriptors [ 222.192732][ T7559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.195551][ T4322] usb 9-1: unsupported MDLM descriptors [ 222.331015][ T5784] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 222.460275][ T4322] usb 9-1: USB disconnect, device number 3 [ 222.524408][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 222.534422][ T5784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.534929][ T4323] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 222.579694][ T5784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.601036][ T4323] asix: probe of 6-1:2.88 failed with error -71 [ 222.623634][ T5784] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 222.631501][ T4323] usb 6-1: USB disconnect, device number 11 [ 222.661447][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.716383][ T5784] usb 8-1: config 0 descriptor?? [ 223.090593][ T7574] loop9: detected capacity change from 0 to 2048 [ 223.115126][ T7574] UDF-fs: bad mount option "gid=ÿÿÿÿÿÿÿÿ" or missing value [ 223.178198][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.202809][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.234300][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.258345][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.291368][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.328716][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.351354][ T5784] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 223.399894][ T5784] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 223.740524][ T7583] loop9: detected capacity change from 0 to 8192 [ 223.771986][ T7583] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 223.837567][ T7583] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 223.893929][ T7583] REISERFS (device loop9): using ordered data mode [ 223.900497][ T7583] reiserfs: using flush barriers [ 223.970870][ T7583] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.001574][ T7583] REISERFS (device loop9): checking transaction log (loop9) [ 224.061522][ T5784] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 224.069353][ T5784] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 224.103078][ T5784] pyra: probe of 0003:1E7D:2CF6.000E failed with error -71 [ 224.130387][ T7600] loop8: detected capacity change from 0 to 256 [ 224.157345][ T5784] usb 8-1: USB disconnect, device number 8 [ 224.339215][ T7583] REISERFS (device loop9): Using tea hash to sort names [ 224.357937][ T7583] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 224.394508][ T7600] syz.8.802: attempt to access beyond end of device [ 224.394508][ T7600] loop8: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 224.429277][ T7603] fido_id[7603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 224.490997][ T4323] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.521035][ T7605] syz.8.802: attempt to access beyond end of device [ 224.521035][ T7605] loop8: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 224.680946][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 224.688078][ T4323] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 224.725411][ T4323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 224.756962][ T4323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 224.780971][ T4323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.838581][ T4323] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.855563][ T7613] loop7: detected capacity change from 0 to 512 [ 224.877981][ T4323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.904777][ T7613] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 224.910301][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.962219][ T7613] EXT4-fs (loop7): 1 truncate cleaned up [ 224.968030][ T7613] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 225.120522][ T26] audit: type=1800 audit(1780545968.495:17): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.806" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 225.248937][ T4323] usb 2-1: GET_CAPABILITIES returned 0 [ 225.260937][ T4323] usbtmc 2-1:16.0: can't read capabilities [ 225.506882][ T4323] usb 2-1: USB disconnect, device number 12 [ 225.950887][ T14] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 225.962812][ T7636] loop9: detected capacity change from 0 to 128 [ 226.011331][ T7636] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 226.059373][ T7636] hpfs: filesystem error: improperly stopped [ 226.110836][ T7636] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 226.134195][ T7636] hpfs: You really don't want any checks? You are crazy... [ 226.152705][ T14] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 226.175306][ T14] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 226.203251][ T7636] hpfs: hpfs_map_sector(): read error [ 226.208729][ T7636] hpfs: code page support is disabled [ 226.215516][ T14] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 226.220354][ T7636] hpfs: hpfs_map_4sectors(): unaligned read [ 226.245927][ T14] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 226.257069][ T7636] hpfs: hpfs_map_4sectors(): unaligned read [ 226.293240][ T7636] hpfs: filesystem error: unable to find root dir [ 226.309685][ T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 226.330109][ T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 226.364311][ T7640] loop1: detected capacity change from 0 to 2048 [ 226.380906][ T14] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 226.438656][ T14] usb 9-1: string descriptor 0 read error: -22 [ 226.453120][ T7640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.463420][ T14] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 226.493104][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.511096][ T7640] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.542496][ T14] usb 9-1: config 0 descriptor?? [ 226.581959][ T14] hub 9-1:0.0: bad descriptor, ignoring hub [ 226.588556][ T14] hub: probe of 9-1:0.0 failed with error -5 [ 226.631006][ T14] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input15 [ 226.832830][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 226.846937][ T14] usb 9-1: USB disconnect, device number 4 [ 227.147446][ T5244] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 227.341035][ T5244] usb 10-1: Using ep0 maxpacket: 32 [ 227.343410][ T7659] loop5: detected capacity change from 0 to 512 [ 227.352513][ T5244] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.409790][ T5244] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.455086][ T5244] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 227.495564][ T5244] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 227.535685][ T5244] usb 10-1: Product: syz [ 227.540045][ T5244] usb 10-1: Manufacturer: syz [ 227.586595][ T5244] usb 10-1: SerialNumber: syz [ 227.665106][ T5244] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input16 [ 227.699012][ T7665] loop8: detected capacity change from 0 to 512 [ 227.806465][ T7665] EXT4-fs error (device loop8): __ext4_iget:5102: inode #11: block 1: comm syz.8.818: invalid block [ 227.811332][ T26] audit: type=1800 audit(1780545971.195:18): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.806" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 227.842758][ T7665] EXT4-fs (loop8): Remounting filesystem read-only [ 227.849426][ T7665] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.818: couldn't read orphan inode 11 (err -117) [ 227.881084][ T7665] EXT4-fs (loop8): Remounting filesystem read-only [ 227.887691][ T7665] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 227.902862][ T33] usb 10-1: USB disconnect, device number 5 [ 227.902923][ C0] appletouch 10-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 227.980161][ T33] appletouch 10-1:1.0: input: appletouch disconnected [ 228.157311][ T6803] EXT4-fs (loop8): unmounting filesystem. [ 228.398036][ T5726] EXT4-fs (loop7): unmounting filesystem. [ 228.820850][ T33] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 228.880925][ T5784] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 228.980549][ T7695] loop1: detected capacity change from 0 to 512 [ 229.010864][ T33] usb 8-1: Using ep0 maxpacket: 16 [ 229.017958][ T33] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.051116][ T7695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.056453][ T33] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.070465][ T7695] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.100911][ T5784] usb 9-1: Using ep0 maxpacket: 32 [ 229.113403][ T5784] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.134703][ T33] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 229.156840][ T5784] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.167288][ T33] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.176433][ T5784] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 229.188825][ T5784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.204257][ T5784] usb 9-1: config 0 descriptor?? [ 229.263817][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 229.503519][ T7708] loop1: detected capacity change from 0 to 4096 [ 229.549712][ T7708] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 229.623186][ T5784] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 229.638046][ T33] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 229.659407][ T5784] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 229.691092][ T5784] ft260 0003:0403:6030.0010: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 229.826618][ T5784] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 229.937533][ T14] usb 8-1: USB disconnect, device number 9 [ 229.937922][ T7708] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 230.195687][ T46] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 230.227632][ T5784] ft260 0003:0403:6030.0010: failed to retrieve status: -71 [ 230.239834][ T5784] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71 [ 230.289169][ T5784] usb 9-1: USB disconnect, device number 5 [ 230.295156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bb9400: rx timeout, send abort [ 230.304063][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058bb9400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.672752][ T7721] fido_id[7721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 231.042281][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.081594][ T7743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 231.746674][ T7759] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 231.757404][ T7759] team0: Device ipvlan2 failed to register rx_handler [ 231.969385][ T7770] loop5: detected capacity change from 0 to 1024 [ 231.985095][ T7770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.008606][ T7772] loop7: detected capacity change from 0 to 512 [ 232.044100][ T7772] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 232.080528][ T7770] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.098490][ T7772] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.852: bad orphan inode 131083 [ 232.143345][ T7770] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.257612][ T7772] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 232.295274][ T26] audit: type=1800 audit(1780545975.665:19): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.852" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 232.321154][ T7770] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.851: bg 0: block 112: padding at end of block bitmap is not set [ 232.398405][ T7770] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 232.448988][ T7770] EXT4-fs (loop5): This should not happen!! Data will be lost [ 232.448988][ T7770] [ 232.502112][ T7770] EXT4-fs (loop5): Total free blocks count 0 [ 232.530945][ T7770] EXT4-fs (loop5): Free/Dirty block details [ 232.537049][ T7770] EXT4-fs (loop5): free_blocks=0 [ 232.582908][ T7770] EXT4-fs (loop5): dirty_blocks=0 [ 232.588020][ T7770] EXT4-fs (loop5): Block reservation details [ 232.604532][ T7770] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 232.628806][ T7783] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 232.801069][ T4319] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 232.867031][ T5726] EXT4-fs (loop7): unmounting filesystem. [ 232.999762][ T4319] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 233.039623][ T4319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.086746][ T4319] usb 10-1: config 0 descriptor?? [ 233.113080][ T4319] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 233.306032][ T4319] gp8psk: usb in 128 operation failed. [ 233.518037][ T4319] gp8psk: usb in 146 operation failed. [ 233.525639][ T4319] gp8psk: failed to get FW version [ 233.542831][ T4319] gp8psk: usb in 149 operation failed. [ 233.563740][ T4319] gp8psk: failed to get FPGA version [ 233.797183][ T4319] gp8psk: usb out operation failed. [ 233.804579][ T4319] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 233.860940][ T4284] Bluetooth: hci1: command 0x0405 tx timeout [ 233.860965][ T4319] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 233.981383][ T4319] usb 10-1: USB disconnect, device number 6 [ 234.039148][ T7826] loop7: detected capacity change from 0 to 128 [ 234.083280][ T7825] loop5: detected capacity change from 0 to 128 [ 234.112193][ T7826] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.178581][ T7826] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.490461][ T46] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.684133][ T7842] netlink: 'syz.1.871': attribute type 39 has an invalid length. [ 234.944497][ T7816] loop8: detected capacity change from 0 to 40427 [ 234.979028][ T7816] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 235.017201][ T7816] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 235.062121][ T7816] F2FS-fs (loop8): invalid crc value [ 235.088790][ T7816] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.305383][ T7816] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 235.334732][ T7816] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 235.749840][ T7849] loop7: detected capacity change from 0 to 32768 [ 235.771126][ T7860] syz.8.863: attempt to access beyond end of device [ 235.771126][ T7860] loop8: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 235.955385][ T26] audit: type=1800 audit(1780545979.335:20): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.872" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 236.123989][ T7862] syz.8.863: attempt to access beyond end of device [ 236.123989][ T7862] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.027884][ T7937] netlink: 68 bytes leftover after parsing attributes in process `syz.9.897'. [ 238.141263][ T7904] loop1: detected capacity change from 0 to 40427 [ 238.190992][ T7904] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 238.210984][ T7904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 238.307837][ T7904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.430123][ T7904] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 238.444696][ T7904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.635942][ T7958] loop7: detected capacity change from 0 to 2048 [ 238.649529][ T7958] EXT4-fs: Ignoring removed nobh option [ 238.801501][ T7958] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 238.810594][ T7958] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.831029][ T5784] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 238.835843][ T7958] EXT4-fs (loop7): shut down requested (2) [ 239.015168][ T5784] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 239.035794][ T5726] EXT4-fs (loop7): unmounting filesystem. [ 239.041403][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.069169][ T5784] usb 6-1: Product: syz [ 239.081038][ T5784] usb 6-1: Manufacturer: syz [ 239.091200][ T5784] usb 6-1: SerialNumber: syz [ 239.098714][ T7968] loop8: detected capacity change from 0 to 64 [ 239.103140][ T5784] usb 6-1: config 0 descriptor?? [ 239.152277][ T14] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 239.352664][ T14] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 239.388440][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.440101][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.460928][ T14] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 239.537019][ T14] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 239.576979][ T14] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 239.596618][ T14] usb 10-1: Manufacturer: syz [ 239.609050][ T14] usb 10-1: config 0 descriptor?? [ 239.897659][ T7993] loop8: detected capacity change from 0 to 512 [ 240.052605][ T14] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 240.060290][ T14] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 240.133878][ T5784] usb 6-1: ATUSB: AT86RF230 version 167 [ 240.151459][ T14] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 240.335823][ T5784] usb 6-1: Firmware version (0.0) predates our first public release. [ 240.384934][ T5784] usb 6-1: Please update to version 0.2 or newer [ 240.517043][ T5784] usb 6-1: USB disconnect, device number 12 [ 240.751206][ T5244] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 240.790834][ T14] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 240.960934][ T5244] usb 9-1: Using ep0 maxpacket: 16 [ 240.967964][ T5244] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.990870][ T14] usb 8-1: Using ep0 maxpacket: 32 [ 240.998203][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.040923][ T5244] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.051911][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.083069][ T8012] loop1: detected capacity change from 0 to 32768 [ 241.094126][ T5244] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.109793][ T14] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.121018][ T5244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.140264][ T8018] loop5: detected capacity change from 0 to 16 [ 241.146880][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.218690][ T14] usb 8-1: config 0 descriptor?? [ 241.221207][ T8018] erofs: (device loop5): mounted with root inode @ nid 36. [ 241.226732][ T14] hub 8-1:0.0: USB hub found [ 241.234692][ T8012] XFS (loop1): Mounting V5 Filesystem [ 241.339462][ T8018] syz.5.920: attempt to access beyond end of device [ 241.339462][ T8018] loop5: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 241.361716][ T8018] syz.5.920: attempt to access beyond end of device [ 241.361716][ T8018] loop5: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 241.393451][ T8012] XFS (loop1): Ending clean mount [ 241.418529][ T26] audit: type=1800 audit(1780545984.795:21): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.920" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 241.446869][ T14] hub 8-1:0.0: 1 port detected [ 241.604760][ T5244] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 241.633911][ T4272] XFS (loop1): Unmounting Filesystem [ 241.829491][ T5244] usb 9-1: USB disconnect, device number 6 [ 241.917719][ T8032] loop5: detected capacity change from 0 to 4096 [ 241.945866][ T8032] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.023197][ T8032] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 242.087325][ T8032] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 242.097837][ T4323] hub 8-1:0.0: activate --> -90 [ 242.116433][ T8032] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 242.147088][ T8032] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 242.159136][ T8032] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 242.187289][ T4319] usb 10-1: USB disconnect, device number 7 [ 242.196240][ T8032] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 242.212060][ T8032] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 242.262235][ T8032] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 242.300990][ T8032] ntfs: volume version 3.1. [ 242.504019][ T4323] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 242.508054][ T5785] usb 8-1: USB disconnect, device number 10 [ 243.167990][ T8051] loop8: detected capacity change from 0 to 512 [ 243.335111][ T8051] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 243.535665][ T6803] EXT4-fs (loop8): unmounting filesystem. [ 243.760965][ T5784] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 243.777017][ T8074] loop9: detected capacity change from 0 to 4096 [ 243.808606][ T8074] EXT4-fs (loop9): Test dummy encryption mode enabled [ 243.817687][ T8074] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 243.832439][ T8074] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 243.961075][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 243.978161][ T5784] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 243.990292][ T5784] usb 2-1: config 1 has no interface number 0 [ 244.005150][ T5784] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 244.024410][ T5784] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 244.035222][ T5784] usb 2-1: config 1 interface 105 has no altsetting 0 [ 244.045361][ T5784] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 244.045593][ T6851] EXT4-fs (loop9): unmounting filesystem. [ 244.062190][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 244.083000][ T5784] usb 2-1: Product: syz [ 244.087356][ T5784] usb 2-1: Manufacturer: syz [ 244.099648][ T5784] usb 2-1: SerialNumber: syz [ 244.130148][ T8068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.150943][ T8068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.597408][ T8068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.629746][ T8068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.067715][ T5784] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 245.089216][ T5784] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 245.126802][ T5784] aqc111 2-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23 [ 245.367512][ T5784] usb 2-1: USB disconnect, device number 13 [ 245.370548][ T8110] loop8: detected capacity change from 0 to 32768 [ 245.379813][ T5784] aqc111 2-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 245.432441][ T8110] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 245.681401][ T5784] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 245.710849][ T5784] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 245.744491][ T5784] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 245.836172][ T4511] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 245.929414][ T8128] futex_wake_op: syz.5.945 tries to shift op by 36; fix this program [ 246.243854][ T8131] loop1: detected capacity change from 0 to 2048 [ 246.322547][ T8131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.460930][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 246.460955][ T26] audit: type=1800 audit(1780545989.825:22): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.946" name="file2" dev="loop1" ino=1416 res=0 errno=0 [ 246.885096][ T8151] netlink: 'syz.7.951': attribute type 1 has an invalid length. [ 246.921093][ T8151] netlink: 'syz.7.951': attribute type 4 has an invalid length. [ 246.941085][ T4323] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 246.948945][ T8151] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.951'. [ 247.058659][ T8126] loop8: detected capacity change from 0 to 40427 [ 247.087137][ T8126] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 247.104464][ T8126] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 247.138788][ T8126] F2FS-fs (loop8): invalid crc value [ 247.144494][ T4323] usb 10-1: Using ep0 maxpacket: 8 [ 247.159582][ T4323] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 247.171737][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 247.191934][ T4323] usb 10-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.217770][ T8126] F2FS-fs (loop8): Found nat_bits in checkpoint [ 247.236311][ T4323] usb 10-1: config 0 interface 0 has no altsetting 0 [ 247.254975][ T4323] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 247.285203][ T4323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.331672][ T4323] usb 10-1: config 0 descriptor?? [ 247.360873][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 247.372714][ T14] usb 6-1: config 0 has no interfaces? [ 247.392187][ T14] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 247.401594][ T8126] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 247.408830][ T8126] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 247.431088][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.459493][ T14] usb 6-1: SerialNumber: syz [ 247.491448][ T14] usb 6-1: config 0 descriptor?? [ 247.683582][ T8168] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 247.728216][ T8153] loop5: detected capacity change from 0 to 128 [ 247.758535][ T4323] input: HID 054c:03d5 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:03D5.0013/input/input17 [ 247.805867][ T33] usb 6-1: USB disconnect, device number 13 [ 247.867846][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.867873][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.894217][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.903687][ T4323] sony 0003:054C:03D5.0013: input,hidraw0: USB HID v0.04 Joystick [HID 054c:03d5] on usb-dummy_hcd.9-1/input0 [ 247.934241][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.934269][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.954251][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.970872][ T6803] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 247.979477][ T4323] usb 10-1: USB disconnect, device number 8 [ 248.413835][ T8173] fido_id[8173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 250.242777][ T26] audit: type=1326 audit(1780545993.625:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.382771][ T26] audit: type=1326 audit(1780545993.625:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.478295][ T26] audit: type=1326 audit(1780545993.645:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.576849][ T26] audit: type=1326 audit(1780545993.645:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.690785][ T26] audit: type=1326 audit(1780545993.645:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.787319][ T26] audit: type=1326 audit(1780545993.645:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.850956][ T26] audit: type=1326 audit(1780545993.645:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.919035][ T26] audit: type=1326 audit(1780545993.655:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 250.983963][ T26] audit: type=1326 audit(1780545993.655:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.7.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e35b9ce59 code=0x7ffc0000 [ 251.520885][ T4317] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 251.722748][ T4317] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 251.740775][ T4317] usb 2-1: config 0 has no interface number 0 [ 251.767138][ T4317] usb 2-1: config 0 interface 41 has no altsetting 0 [ 251.821033][ T4317] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 251.848412][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.892171][ T4317] usb 2-1: Product: syz [ 251.896415][ T4317] usb 2-1: Manufacturer: syz [ 251.914042][ T4317] usb 2-1: SerialNumber: syz [ 251.950167][ T4317] usb 2-1: config 0 descriptor?? [ 251.969808][ T8275] loop9: detected capacity change from 0 to 1024 [ 252.098807][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.5.985'. [ 252.202757][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.212750][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.340908][ T8281] netlink: 44 bytes leftover after parsing attributes in process `syz.5.985'. [ 252.711121][ T8267] loop7: detected capacity change from 0 to 32768 [ 252.803527][ T4317] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 252.865923][ T8267] XFS (loop7): Mounting V5 Filesystem [ 253.075285][ T8267] XFS (loop7): Ending clean mount [ 253.267396][ T4317] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 253.274835][ T8316] loop9: detected capacity change from 0 to 2048 [ 253.299790][ T4317] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 253.323873][ T4317] CoreChips: probe of 2-1:0.41 failed with error -71 [ 253.327858][ T5726] XFS (loop7): Unmounting Filesystem [ 253.350982][ T4319] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 253.358604][ T8316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.373959][ T4317] usb 2-1: USB disconnect, device number 14 [ 253.588024][ T4319] usb 9-1: unable to get BOS descriptor or descriptor too short [ 253.617761][ T4319] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 253.634924][ T4319] usb 9-1: can't read configurations, error -71 [ 254.424510][ T8346] tipc: Started in network mode [ 254.470939][ T8346] tipc: Node identity 9, cluster identity 4711 [ 254.525194][ T8346] tipc: Node number set to 9 [ 255.348908][ T8376] loop1: detected capacity change from 0 to 512 [ 255.442433][ T8376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 255.566977][ T8375] loop8: detected capacity change from 0 to 4096 [ 255.575747][ T8375] __ntfs_warning: 64 callbacks suppressed [ 255.575771][ T8375] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 255.721873][ T8375] ntfs: (device loop8): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 255.777263][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 255.785157][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.791565][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.804559][ T8375] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 255.868872][ T8375] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 255.932434][ T8386] loop9: detected capacity change from 0 to 256 [ 256.040883][ T8375] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.115829][ T8386] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 256.117349][ T8375] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 256.361139][ T8375] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.383838][ T8397] loop5: detected capacity change from 0 to 512 [ 256.390970][ T8375] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 256.425825][ T8397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.548192][ T8375] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.572440][ T8397] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 256.612300][ T8397] EXT4-fs (loop5): orphan cleanup on readonly fs [ 256.629621][ T8375] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 256.683687][ T8397] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1014: Failed to acquire dquot type 1 [ 256.706246][ T8375] ntfs: volume version 3.1. [ 256.763768][ T8397] EXT4-fs (loop5): Remounting filesystem read-only [ 256.818912][ T8397] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1014: bg 0: block 40: padding at end of block bitmap is not set [ 256.907936][ T8397] EXT4-fs (loop5): Remounting filesystem read-only [ 256.933625][ T8397] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 256.967941][ T8397] EXT4-fs (loop5): Remounting filesystem read-only [ 257.023843][ T8397] EXT4-fs (loop5): 1 truncate cleaned up [ 257.030570][ T8397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.284779][ T8417] loop7: detected capacity change from 0 to 512 [ 257.442047][ T8417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.604825][ T4466] EXT4-fs (loop5): unmounting filesystem. [ 257.649102][ T5726] EXT4-fs (loop7): unmounting filesystem. [ 257.814049][ T8394] loop1: detected capacity change from 0 to 32768 [ 257.941381][ T8394] XFS (loop1): Mounting V5 Filesystem [ 258.097992][ T8394] XFS (loop1): Ending clean mount [ 258.364368][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1025'. [ 258.445361][ T4272] XFS (loop1): Unmounting Filesystem [ 258.810858][ T4323] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 258.926705][ T8434] loop7: detected capacity change from 0 to 32768 [ 259.001084][ T4323] usb 6-1: Using ep0 maxpacket: 16 [ 259.008306][ T4323] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.028243][ T8434] XFS (loop7): Mounting V5 Filesystem [ 259.040047][ T4323] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.061622][ T4323] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 259.071837][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.226339][ T8434] XFS (loop7): Ending clean mount [ 259.289830][ T8434] XFS (loop7): Quotacheck needed: Please wait. [ 259.421392][ T8434] XFS (loop7): Quotacheck: Done. [ 259.534626][ T4323] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 259.818199][ T5244] usb 6-1: USB disconnect, device number 14 [ 259.909179][ T8464] loop9: detected capacity change from 0 to 40427 [ 259.954395][ T8464] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 259.968085][ T8464] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 260.013103][ T8464] F2FS-fs (loop9): invalid crc value [ 260.062005][ T8464] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 260.224707][ T5726] XFS (loop7): Unmounting Filesystem [ 260.246120][ T8464] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 260.255033][ T8464] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 260.611848][ T8490] syz.9.1030: attempt to access beyond end of device [ 260.611848][ T8490] loop9: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 260.822703][ T8493] syz.9.1030: attempt to access beyond end of device [ 260.822703][ T8493] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.371051][ T8513] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 261.513042][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1044'. [ 261.547369][ T8519] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.556492][ T8519] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.565409][ T8519] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.574454][ T8519] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.672322][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1044'. [ 262.849848][ T8525] loop7: detected capacity change from 0 to 32768 [ 262.965739][ T8525] XFS (loop7): Mounting V5 Filesystem [ 262.980944][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 263.035573][ T8525] XFS (loop7): Ending clean mount [ 263.220645][ T5726] XFS (loop7): Unmounting Filesystem [ 263.649120][ T8538] loop9: detected capacity change from 0 to 40427 [ 263.720896][ T8538] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 263.728958][ T8538] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 263.794121][ T8538] F2FS-fs (loop9): invalid crc value [ 263.871140][ T8538] F2FS-fs (loop9): Found nat_bits in checkpoint [ 263.877940][ T8576] loop7: detected capacity change from 0 to 4096 [ 263.919295][ T8576] __ntfs_warning: 16 callbacks suppressed [ 263.919313][ T8576] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 264.063687][ T8576] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 264.112230][ T8538] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 264.137201][ T8538] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 264.152213][ T8576] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 264.184739][ T8576] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 264.224307][ T8553] loop5: detected capacity change from 0 to 40427 [ 264.285884][ T8553] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 264.310849][ T8553] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 264.314679][ T8576] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 264.358388][ T8553] F2FS-fs (loop5): invalid crc value [ 264.375395][ T8576] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 264.419895][ T8553] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 264.481906][ T8576] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 264.540819][ T8576] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 264.542330][ T8593] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 264.648832][ T8576] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 264.691255][ T8576] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 264.766580][ T8553] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 264.777833][ T8576] ntfs: volume version 3.1. [ 264.789852][ T8553] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 265.077197][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.077227][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.111086][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.158288][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.191699][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.220608][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.261557][ T6851] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 265.363882][ T8601] syz.5.1053: attempt to access beyond end of device [ 265.363882][ T8601] loop5: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 265.611279][ T4322] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 265.613245][ T8604] syz.5.1053: attempt to access beyond end of device [ 265.613245][ T8604] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.843463][ T4322] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.870471][ T4322] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.898998][ T4322] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.948222][ T4322] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.977929][ T4322] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.019240][ T4322] usb 8-1: config 0 descriptor?? [ 266.475334][ T4322] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 266.507526][ T4322] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 267.516826][ T8629] loop1: detected capacity change from 0 to 32768 [ 267.619689][ T8629] XFS (loop1): Mounting V5 Filesystem [ 267.711177][ T8629] XFS (loop1): Ending clean mount [ 267.758103][ T8629] XFS (loop1): Quotacheck needed: Please wait. [ 267.822811][ T8607] usb 8-1: string descriptor 0 read error: -71 [ 267.928410][ T8629] XFS (loop1): Quotacheck: Done. [ 268.279693][ T8666] device syzkaller1 entered promiscuous mode [ 268.424674][ T4272] XFS (loop1): Unmounting Filesystem [ 268.937331][ T4322] usb 8-1: USB disconnect, device number 11 [ 269.114754][ T4322] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 269.305942][ T4322] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.317582][ T4322] usb 8-1: config 0 has no interface number 0 [ 269.329539][ T4322] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 269.354399][ T4322] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 269.379586][ T4322] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.406031][ T4322] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.428491][ T4322] usb 8-1: config 0 descriptor?? [ 269.441231][ T8674] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 269.455605][ T4322] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 269.675607][ T126] usb 8-1: USB disconnect, device number 12 [ 269.681650][ C1] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 269.975372][ T8708] loop9: detected capacity change from 0 to 8 [ 270.037232][ T8708] SQUASHFS error: zlib decompression failed, data probably corrupt [ 270.055588][ T8708] SQUASHFS error: Failed to read block 0x9b: -5 [ 270.067911][ T8708] SQUASHFS error: Unable to read metadata cache entry [99] [ 270.084263][ T8708] SQUASHFS error: Unable to read inode 0x127 [ 270.356132][ T8700] loop5: detected capacity change from 0 to 32768 [ 271.710430][ T8715] loop9: detected capacity change from 0 to 40427 [ 271.745383][ T8715] F2FS-fs (loop9): Unrecognized mount option "whint_mode=fs-based" or missing value [ 271.788356][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1091'. [ 271.826942][ T8747] netlink: 'syz.7.1091': attribute type 6 has an invalid length. [ 271.908162][ T8747] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.917767][ T8747] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.926611][ T8747] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.935461][ T8747] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.998204][ T8725] loop5: detected capacity change from 0 to 32768 [ 272.025531][ T8747] device vxlan0 entered promiscuous mode [ 272.051064][ T4322] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 272.087957][ T8725] XFS (loop5): Mounting V5 Filesystem [ 272.164364][ T8725] XFS (loop5): Ending clean mount [ 272.189844][ T8725] XFS (loop5): Quotacheck needed: Please wait. [ 272.243790][ T4322] usb 10-1: Using ep0 maxpacket: 16 [ 272.251877][ T4322] usb 10-1: unable to get BOS descriptor or descriptor too short [ 272.273430][ T4322] usb 10-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 272.306682][ T4322] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.368423][ T8725] XFS (loop5): Quotacheck: Done. [ 272.370302][ T4322] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 272.421627][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.446584][ T4322] usb 10-1: Product: syz [ 272.460832][ T4322] usb 10-1: Manufacturer: syz [ 272.477442][ T4322] usb 10-1: SerialNumber: syz [ 272.482400][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 272.482417][ T26] audit: type=1800 audit(1780546015.855:102): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1086" name="bus" dev="loop5" ino=6155 res=0 errno=0 [ 272.630876][ T26] audit: type=1800 audit(1780546015.905:103): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1086" name="bus" dev="loop5" ino=6155 res=0 errno=0 [ 272.695738][ T26] audit: type=1800 audit(1780546015.975:104): pid=8762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1086" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 272.787407][ T4322] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 272.799755][ T4466] XFS (loop5): Unmounting Filesystem [ 272.817805][ T4322] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 272.882189][ T4322] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 272.904673][ T4322] usb 10-1: USB disconnect, device number 9 [ 272.933213][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.141088][ T4280] Bluetooth: hci1: command 0x0411 tx timeout [ 273.755405][ T4322] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 273.950938][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 273.958188][ T4322] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.000281][ T4322] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.041529][ T4322] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 274.070842][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.250599][ T8804] fuse: root generation should be zero [ 274.526363][ T4322] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 274.782024][ T4322] usb 2-1: USB disconnect, device number 15 [ 274.998105][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1109'. [ 275.668415][ T8837] loop1: detected capacity change from 0 to 8192 [ 275.716282][ T8837] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.879008][ T8837] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 275.916249][ T8837] REISERFS (device loop1): using ordered data mode [ 275.966099][ T8837] reiserfs: using flush barriers [ 275.990216][ T8837] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.097366][ T8837] REISERFS (device loop1): checking transaction log (loop1) [ 276.121354][ T8837] REISERFS (device loop1): Using r5 hash to sort names [ 276.148714][ T8837] REISERFS (device loop1): using 3.5.x disk format [ 276.168565][ T8837] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 276.709449][ T8852] loop5: detected capacity change from 0 to 1024 [ 276.749911][ T8852] EXT4-fs: Ignoring removed bh option [ 276.841596][ T8852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 276.900683][ T8853] loop1: detected capacity change from 0 to 8192 [ 276.962073][ T8853] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.044456][ T4466] EXT4-fs (loop5): unmounting filesystem. [ 277.226492][ T8863] netlink: 'syz.5.1118': attribute type 11 has an invalid length. [ 278.086394][ T8870] loop7: detected capacity change from 0 to 40427 [ 278.115684][ T8870] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 278.125399][ T8870] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 278.158852][ T8870] F2FS-fs (loop7): invalid crc value [ 278.197936][ T8870] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 278.337553][ T8870] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 278.347094][ T8870] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 278.766798][ T8896] syz.7.1121: attempt to access beyond end of device [ 278.766798][ T8896] loop7: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 278.861262][ T8897] syz.7.1121: attempt to access beyond end of device [ 278.861262][ T8897] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.174507][ T8899] loop5: detected capacity change from 0 to 40427 [ 279.202132][ T8899] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 279.237944][ T8899] F2FS-fs (loop5): invalid crc value [ 279.283579][ T8899] F2FS-fs (loop5): Found nat_bits in checkpoint [ 279.438730][ T8899] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 279.556472][ T4466] syz-executor: attempt to access beyond end of device [ 279.556472][ T4466] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.730927][ T14] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 279.949041][ T14] usb 8-1: Using ep0 maxpacket: 16 [ 279.955413][ T14] usb 8-1: too many configurations: 22, using maximum allowed: 8 [ 279.996190][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.030821][ T14] usb 8-1: config 0 has no interface number 0 [ 280.062048][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.090612][ T14] usb 8-1: config 0 has no interface number 0 [ 280.112199][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.120316][ T14] usb 8-1: config 0 has no interface number 0 [ 280.139563][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.168508][ T14] usb 8-1: config 0 has no interface number 0 [ 280.184136][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.218627][ T14] usb 8-1: config 0 has no interface number 0 [ 280.243582][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.270794][ T14] usb 8-1: config 0 has no interface number 0 [ 280.299069][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.344205][ T14] usb 8-1: config 0 has no interface number 0 [ 280.380112][ T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.409314][ T14] usb 8-1: config 0 has no interface number 0 [ 280.432185][ T14] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 280.460930][ T14] usb 8-1: New USB device strings: Mfr=127, Product=6, SerialNumber=36 [ 280.476848][ T14] usb 8-1: Product: syz [ 280.484177][ T14] usb 8-1: Manufacturer: syz [ 280.488831][ T14] usb 8-1: SerialNumber: syz [ 280.533609][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.534458][ T14] usb 8-1: config 0 descriptor?? [ 280.549324][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.559012][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.575306][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.581597][ T14] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 280.590078][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.597727][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.899858][ T8929] loop9: detected capacity change from 0 to 128 [ 281.997759][ T14] gspca_spca1528: reg_w err -71 [ 282.003004][ T14] spca1528: probe of 8-1:0.1 failed with error -71 [ 282.043818][ T14] usb 8-1: USB disconnect, device number 13 [ 282.413762][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.458781][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.661046][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 283.097453][ T8926] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.106586][ T8926] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.116214][ T8926] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.125399][ T8926] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.169654][ T8926] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.178964][ T8926] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.195432][ T8926] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.204627][ T8926] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.235322][ T8939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1143'. [ 283.478820][ T6022] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.496993][ T6022] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.535178][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 283.676724][ T6022] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.720987][ T6022] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.810004][ T8977] loop1: detected capacity change from 0 to 256 [ 283.836325][ T8977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.921306][ T6022] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.970819][ T6022] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.159933][ T6022] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.267771][ T6022] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.401626][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.408866][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.442047][ T8920] device bridge_slave_0 entered promiscuous mode [ 284.544076][ T126] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 284.561058][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.568236][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.625731][ T8920] device bridge_slave_1 entered promiscuous mode [ 284.730963][ T126] usb 10-1: Using ep0 maxpacket: 8 [ 284.740886][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 284.764684][ T126] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 284.787189][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.804202][ T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.830836][ T126] usb 10-1: Product: syz [ 284.842953][ T126] usb 10-1: Manufacturer: syz [ 284.852479][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.862200][ T126] usb 10-1: SerialNumber: syz [ 284.876361][ T8989] loop7: detected capacity change from 0 to 32768 [ 284.891591][ T126] usb 10-1: config 0 descriptor?? [ 284.922289][ T126] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 284.949189][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 284.972144][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.981007][ T8920] team0: Port device team_slave_0 added [ 285.002130][ T8920] team0: Port device team_slave_1 added [ 285.025559][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.032831][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.049472][ T126] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 285.066490][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.083950][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.091409][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.119174][ T126] usb 10-1: media controller created [ 285.147762][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.207599][ T8989] XFS (loop7): Mounting V5 Filesystem [ 285.210464][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 285.311136][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.323836][ T8989] XFS (loop7): Ending clean mount [ 285.343440][ T8989] XFS (loop7): Quotacheck needed: Please wait. [ 285.552768][ T126] DVB: Unable to find symbol mt352_attach() [ 285.558759][ T126] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 285.575878][ T8989] XFS (loop7): Quotacheck: Done. [ 285.871284][ T8920] device hsr_slave_0 entered promiscuous mode [ 285.930171][ T8920] device hsr_slave_1 entered promiscuous mode [ 285.957704][ T8920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.966091][ T126] rc_core: IR keymap rc-dvico-portable not found [ 285.977125][ T126] Registered IR keymap rc-empty [ 285.997388][ T126] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 286.012107][ T8920] Cannot create hsr debugfs directory [ 286.047849][ T126] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input19 [ 286.075315][ T126] dvb-usb: schedule remote query interval to 100 msecs. [ 286.093688][ T126] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 286.120349][ T126] usb 10-1: USB disconnect, device number 10 [ 286.143932][ T5726] XFS (loop7): Unmounting Filesystem [ 286.247015][ T126] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 286.821215][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 287.841044][ T14] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 288.044234][ T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.064123][ T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.098001][ T14] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.138417][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.159986][ T14] usb 6-1: Product: syz [ 288.178989][ T14] usb 6-1: Manufacturer: syz [ 288.188523][ T14] usb 6-1: SerialNumber: syz [ 288.632081][ T14] usb 6-1: cannot find UAC_HEADER [ 288.702384][ T14] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 288.780590][ T4511] udevd[4511]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.894303][ T5784] usb 6-1: USB disconnect, device number 15 [ 288.901005][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 289.164840][ T9081] loop9: detected capacity change from 0 to 2048 [ 289.243420][ T9081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.631485][ T6022] device hsr_slave_0 left promiscuous mode [ 289.672992][ T6022] device hsr_slave_1 left promiscuous mode [ 289.720654][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.731206][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.767977][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.801800][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.829219][ T6022] device bridge_slave_1 left promiscuous mode [ 289.851069][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.862415][ T6022] device bridge_slave_0 left promiscuous mode [ 289.888028][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.027177][ T6022] device veth1_macvtap left promiscuous mode [ 290.041141][ T6022] device veth0_macvtap left promiscuous mode [ 290.047359][ T6022] device veth1_vlan left promiscuous mode [ 290.091250][ T6022] device veth0_vlan left promiscuous mode [ 291.014786][ T9107] loop1: detected capacity change from 0 to 40427 [ 291.049257][ T9107] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 291.072440][ T9107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 291.082295][ T9107] F2FS-fs (loop1): invalid crc value [ 291.106837][ T9107] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 291.271261][ T9107] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 291.289527][ T9107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.441854][ T9127] syz.1.1188: attempt to access beyond end of device [ 291.441854][ T9127] loop1: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 291.625025][ T9107] syz.1.1188: attempt to access beyond end of device [ 291.625025][ T9107] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.837307][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 291.972375][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 292.132117][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.209354][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.350825][ T4317] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 292.430937][ T126] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 292.542952][ T4317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.554475][ T4317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.566979][ T4317] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 292.576720][ T4317] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 292.585249][ T4317] usb 10-1: Manufacturer: syz [ 292.602717][ T4317] usb 10-1: config 0 descriptor?? [ 292.620896][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 292.628401][ T126] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 292.638670][ T126] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.649866][ T126] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.659885][ T126] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.670465][ T126] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.691908][ T126] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.701333][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.814079][ T6022] team0 (unregistering): Port device bond0 removed [ 292.871534][ T6022] bond0 (unregistering): Released all slaves [ 292.934535][ T126] usb 2-1: GET_CAPABILITIES returned 0 [ 292.941478][ T126] usbtmc 2-1:16.0: can't read capabilities [ 292.983964][ T126] usb 2-1: USB disconnect, device number 16 [ 293.206194][ T8920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.255585][ T8920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.315533][ T8920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.350457][ T8920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.422899][ T4317] input: syz Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0017/input/input20 [ 293.512235][ T4317] input: syz Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0017/input/input21 [ 293.542099][ T4317] input: syz Touch Strip as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0017/input/input22 [ 293.574067][ T4317] input: syz Dial as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0017/input/input23 [ 293.637034][ T4317] uclogic 0003:256C:006D.0017: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.9-1/input0 [ 293.704636][ T4317] usb 10-1: USB disconnect, device number 11 [ 293.917405][ T9143] fido_id[9143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 294.337771][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.386166][ T6024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.443829][ T6024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.493939][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.594550][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1199'. [ 294.607664][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.636553][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.671564][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.678706][ T5101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.717620][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.768647][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.796645][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.804211][ T5101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.841294][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.882424][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.924145][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.040907][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.083241][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.121821][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.151240][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.184131][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.211270][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.236539][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.261714][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.286257][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.338267][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.840915][ T4319] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 296.041004][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 296.048321][ T4319] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 296.087424][ T4319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 296.139759][ T4319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.184550][ T4319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 296.237002][ T4319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 296.267825][ T4319] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.273541][ T9176] loop9: detected capacity change from 0 to 32768 [ 296.305621][ T4319] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.325318][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.395297][ T6024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.408697][ T6024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.440797][ T9176] JBD2: Ignoring recovery information on journal [ 296.470359][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.596605][ T4319] usb 2-1: usb_control_msg returned -32 [ 296.603607][ T4319] usbtmc 2-1:16.0: can't read capabilities [ 296.648428][ T9176] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 296.678476][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.701621][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.906106][ T9202] loop5: detected capacity change from 0 to 1024 [ 296.978655][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 296.994564][ T9204] usbtmc 2-1:16.0: Unable to send data, error -71 [ 297.062119][ T9204] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 297.084433][ T126] usb 2-1: USB disconnect, device number 17 [ 297.127442][ T9202] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 297.282028][ T9209] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 297.391232][ T9209] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 268 with error 28 [ 297.438244][ T9209] EXT4-fs (loop5): This should not happen!! Data will be lost [ 297.438244][ T9209] [ 297.476996][ T9209] EXT4-fs (loop5): Total free blocks count 0 [ 297.496022][ T9209] EXT4-fs (loop5): Free/Dirty block details [ 297.515508][ T9209] EXT4-fs (loop5): free_blocks=68451041280 [ 297.540043][ T9209] EXT4-fs (loop5): dirty_blocks=272 [ 297.563030][ T9209] EXT4-fs (loop5): Block reservation details [ 297.588151][ T9209] EXT4-fs (loop5): i_reserved_data_blocks=17 [ 297.791775][ T6851] ocfs2: Unmounting device (7,9) on (node local) [ 297.825164][ T9201] loop7: detected capacity change from 0 to 131072 [ 297.838559][ T9201] F2FS-fs (loop7): invalid crc value [ 297.862668][ T9201] F2FS-fs (loop7): Found nat_bits in checkpoint [ 297.908935][ T9201] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 297.977298][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.019645][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.043446][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.056669][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.113611][ T8920] device veth0_vlan entered promiscuous mode [ 298.202194][ T8920] device veth1_vlan entered promiscuous mode [ 298.220507][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 298.300771][ T4319] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 298.362277][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.393484][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.417037][ T9224] loop5: detected capacity change from 0 to 256 [ 298.453897][ T8920] device veth0_macvtap entered promiscuous mode [ 298.464309][ T9224] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x00000f00, checksum : 0x1119ac00) [ 298.502385][ T8920] device veth1_macvtap entered promiscuous mode [ 298.511180][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 298.519611][ T4319] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 298.532244][ T9224] exFAT-fs (loop5): invalid boot region [ 298.559235][ T9224] exFAT-fs (loop5): failed to recognize exfat type [ 298.579926][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.610786][ T4319] usb 2-1: config 0 has no interface number 0 [ 298.616951][ T4319] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 298.650811][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.661171][ T4319] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 298.692189][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.704430][ T4319] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 298.734091][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.751157][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.770813][ T4319] usb 2-1: Product: syz [ 298.780881][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.792130][ T4319] usb 2-1: Manufacturer: syz [ 298.796779][ T4319] usb 2-1: SerialNumber: syz [ 298.820827][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.840286][ T4319] usb 2-1: config 0 descriptor?? [ 298.851468][ T9217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.858784][ T9217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.866115][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.893185][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.941384][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.954376][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.964752][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.012007][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.022931][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.076501][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.096966][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.121462][ T9217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.128746][ T9217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.140681][ T9224] xt_hashlimit: size too large, truncated to 1048576 [ 299.151972][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.222532][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.285575][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.331128][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.380770][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.437309][ T4319] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 299.469794][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.532294][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.582719][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.593833][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.617109][ T8920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.626625][ T8920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.656644][ T8920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.667333][ T8920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.928410][ T9226] loop9: detected capacity change from 0 to 32768 [ 300.010794][ T6022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.018766][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.103512][ T9226] XFS (loop9): Mounting V5 Filesystem [ 300.148428][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.265399][ T9226] XFS (loop9): Ending clean mount [ 300.294556][ T5101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.336247][ T5101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.401023][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.409766][ T26] audit: type=1800 audit(1780546043.785:105): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1210" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 300.442771][ T4319] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 300.471498][ T4319] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 300.522807][ T4319] asix: probe of 2-1:0.34 failed with error -71 [ 300.582172][ T4319] usb 2-1: USB disconnect, device number 18 [ 300.622862][ T6851] XFS (loop9): Unmounting Filesystem [ 301.844139][ T9281] loop9: detected capacity change from 0 to 128 [ 301.906269][ T9281] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 301.935361][ T9281] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.165439][ T6851] EXT4-fs (loop9): unmounting filesystem. [ 302.287536][ T9298] loop0: detected capacity change from 0 to 512 [ 302.378802][ T9298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 302.650840][ T9298] loop0: detected capacity change from 512 to 0 [ 302.670760][ C1] I/O error, dev loop0, sector 288 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 302.680494][ T9309] EXT4-fs error (device loop0): ext4_get_inode_loc:4658: inode #18: block 36: comm syz.0.1226: unable to read itable block [ 302.690910][ C1] I/O error, dev loop0, sector 272 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 302.754924][ T6029] loop: Write error at byte offset 9223372036854775807, length 4096. [ 302.770261][ C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 302.779892][ C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 302.790693][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 302.799400][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 302.828652][ T9309] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: IO failure [ 302.837988][ T6024] loop: Write error at byte offset 9223372036854775807, length 4096. [ 302.870770][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 302.880395][ C1] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 302.889905][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 302.898229][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 302.925443][ T9309] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #18: comm syz.0.1226: mark_inode_dirty error [ 302.957745][ T6024] loop: Write error at byte offset 9223372036854775807, length 4096. [ 302.979634][ C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 302.989340][ C0] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 302.998850][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.007278][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.031211][ C0] I/O error, dev loop0, sector 288 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 303.041037][ C0] I/O error, dev loop0, sector 272 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 303.058983][ T9309] EXT4-fs error (device loop0): ext4_get_inode_loc:4658: inode #18: block 36: comm syz.0.1226: unable to read itable block [ 303.077269][ T6024] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.086418][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.101166][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.108037][ T9309] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #18: comm syz.0.1226: can't get inode location 18 [ 303.122140][ T46] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.130414][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.141656][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.158522][ T9309] EXT4-fs error (device loop0): ext4_get_inode_loc:4658: inode #18: block 36: comm syz.0.1226: unable to read itable block [ 303.266205][ T6024] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.282386][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.291120][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.297958][ T9309] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: IO failure [ 303.371364][ T6024] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.379570][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.390802][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.397750][ T9309] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #18: comm syz.0.1226: mark_inode_dirty error [ 303.442728][ T46] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.471002][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.479466][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.504076][ T9309] EXT4-fs error (device loop0): ext4_wait_block_bitmap:573: comm syz.0.1226: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 303.535250][ T46] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.560872][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.569231][ T9309] EXT4-fs (loop0): I/O error while writing superblock [ 303.607948][ T9309] EXT4-fs error (device loop0): ext4_get_inode_loc:4658: inode #18: block 36: comm syz.0.1226: unable to read itable block [ 303.654485][ T46] loop: Write error at byte offset 9223372036854775807, length 4096. [ 303.676814][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 303.702688][ T4319] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 303.860598][ T9313] loop7: detected capacity change from 0 to 40427 [ 303.904735][ T9313] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 303.912832][ T4319] usb 6-1: Using ep0 maxpacket: 8 [ 303.920642][ T9313] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 303.932409][ T4319] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 303.957330][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.971766][ T9313] F2FS-fs (loop7): invalid crc value [ 303.977259][ T4319] usb 6-1: Product: syz [ 303.994183][ T4319] usb 6-1: Manufacturer: syz [ 304.029804][ T4319] usb 6-1: SerialNumber: syz [ 304.061720][ T9313] F2FS-fs (loop7): Found nat_bits in checkpoint [ 304.072490][ T4319] usb 6-1: config 0 descriptor?? [ 304.092964][ T4319] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 304.232257][ T9313] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 304.239452][ T9313] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 304.799977][ T9311] loop1: detected capacity change from 0 to 32768 [ 304.885332][ T9311] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1230 (9311) [ 305.057909][ T9311] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 305.121280][ T9311] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 305.200409][ T9311] BTRFS info (device loop1): turning on async discard [ 305.260866][ T9311] BTRFS info (device loop1): using free space tree [ 305.520893][ T4319] gspca_sonixj: i2c_w8 err -71 [ 305.549916][ T9311] BTRFS info (device loop1): enabling ssd optimizations [ 305.591228][ T4319] sonixj: probe of 6-1:0.0 failed with error -71 [ 305.618257][ T4319] usb 6-1: USB disconnect, device number 16 [ 305.826272][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 305.997825][ T26] audit: type=1800 audit(1780546049.375:106): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1231" name="file1" dev="loop7" ino=455 res=0 errno=0 [ 306.395278][ T46] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 306.429158][ T46] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 308.279153][ T9394] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.546899][ T9397] loop5: detected capacity change from 0 to 2048 [ 308.583960][ T9397] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 308.602228][ T9397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.129475][ T9401] loop5: detected capacity change from 0 to 128 [ 309.224663][ T4511] blk_print_req_error: 59 callbacks suppressed [ 309.224684][ T4511] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.381397][ T9404] loop5: detected capacity change from 0 to 128 [ 309.457620][ T9404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 309.483277][ T9404] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.857516][ T9404] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 309.944132][ T4466] EXT4-fs (loop5): unmounting filesystem. [ 311.566213][ T9428] loop5: detected capacity change from 0 to 512 [ 311.566215][ T9427] loop9: detected capacity change from 0 to 128 [ 311.645823][ T9428] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 311.660795][ T9427] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 311.720987][ T9427] hpfs: filesystem error: improperly stopped [ 311.727052][ T9427] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 311.751203][ T9427] hpfs: You really don't want any checks? You are crazy... [ 311.757944][ T4466] EXT4-fs (loop5): unmounting filesystem. [ 311.758457][ T9427] hpfs: Code page index out of array [ 311.780805][ T9427] hpfs: code page support is disabled [ 311.786408][ T9427] hpfs: hpfs_map_4sectors(): unaligned read [ 311.817310][ T9427] hpfs: hpfs_map_4sectors(): unaligned read [ 311.833902][ T9427] hpfs: filesystem error: unable to find root dir [ 312.538731][ T9452] loop5: detected capacity change from 0 to 256 [ 312.913942][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.947827][ T9466] loop5: detected capacity change from 0 to 8 [ 313.023716][ T9466] SQUASHFS error: Unable to read inode 0x0 [ 313.110158][ T4511] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.147198][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.212503][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.226631][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.235624][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.244030][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.254233][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 313.261826][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.318376][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.465057][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.759125][ T9479] loop7: detected capacity change from 0 to 128 [ 313.827526][ T9479] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 313.849302][ T9455] loop1: detected capacity change from 0 to 32768 [ 313.950982][ T9479] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.327446][ T9455] loop1: detected capacity change from 32768 to 32767 [ 314.373792][ T9496] ERROR: (device loop1): diWrite: ixpxd invalid [ 314.373792][ T9496] [ 314.393305][ T9496] ERROR: (device loop1): remounting filesystem as read-only [ 314.440924][ T5726] EXT4-fs (loop7): unmounting filesystem. [ 314.487272][ T9496] ERROR: (device loop1): txCommit: [ 314.487272][ T9496] [ 314.565009][ T9455] loop1: unable to read partition table [ 314.601026][ T9455] loop_reread_partitions: partition scan of loop1 (ï5ŸA;¹8R÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 314.677319][ T9470] chnl_net:caif_netlink_parms(): no params data found [ 314.690832][ T4322] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 314.838438][ T9509] loop7: detected capacity change from 0 to 512 [ 314.886200][ T9509] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 314.897076][ T4322] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 314.929250][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.950869][ T4322] usb 10-1: Product: syz [ 314.955965][ T4322] usb 10-1: Manufacturer: syz [ 314.976488][ T4322] usb 10-1: SerialNumber: syz [ 314.992014][ T4322] usb 10-1: config 0 descriptor?? [ 315.004405][ T4322] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 315.288227][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.306967][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 315.315845][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.366434][ T9470] device bridge_slave_0 entered promiscuous mode [ 315.552052][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.559295][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.607745][ T9470] device bridge_slave_1 entered promiscuous mode [ 315.779692][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.903227][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.025388][ T9470] team0: Port device team_slave_0 added [ 316.218483][ T9470] team0: Port device team_slave_1 added [ 316.373458][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.380669][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.435130][ T4322] gspca_sunplus: reg_w_riv err -71 [ 316.440364][ T4322] sunplus: probe of 10-1:0.0 failed with error -71 [ 316.474892][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.515518][ T4322] usb 10-1: USB disconnect, device number 12 [ 316.519063][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.551777][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.607489][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.722233][ T4272] ------------[ cut here ]------------ [ 316.728450][ T4272] kernel BUG at fs/jfs/inode.c:175! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.767555][ T4272] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 316.773691][ T4272] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 316.781277][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.791543][ T4272] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 316.797198][ T4272] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 1d 9b e6 fe e9 16 fe ff ff e8 73 93 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 316.816869][ T4272] RSP: 0018:ffffc90004237940 EFLAGS: 00010293 [ 316.822979][ T4272] RAX: ffffffff82ece82d RBX: ffff8880512b9ff0 RCX: ffff888079cfbc00 [ 316.830990][ T4272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880512b9ff0 [ 316.838999][ T4272] RBP: 0000000000000001 R08: ffffffff90aff417 R09: 1ffffffff215fe82 [ 316.847181][ T4272] R10: dffffc0000000000 R11: fffffbfff215fe83 R12: dffffc0000000000 [ 316.855551][ T4272] R13: dffffc0000000000 R14: ffff8880512b9c78 R15: ffff8880512ba018 [ 316.863566][ T4272] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 316.872713][ T4272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.879389][ T4272] CR2: 0000001b30c15ff8 CR3: 0000000054ba4000 CR4: 00000000003506e0 [ 316.887404][ T4272] Call Trace: [ 316.890735][ T4272] [ 316.893697][ T4272] ? evict+0x4c3/0x8d0 [ 316.897895][ T4272] ? jfs_write_inode+0x220/0x220 [ 316.902871][ T4272] evict+0x4c9/0x8d0 [ 316.906815][ T4272] ? proc_nr_inodes+0x2f0/0x2f0 [ 316.911704][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 316.917022][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 316.922258][ T4272] evict_inodes+0x60c/0x6a0 [ 316.926798][ T4272] ? clear_inode+0x150/0x150 [ 316.931514][ T4272] generic_shutdown_super+0x93/0x340 [ 316.936925][ T4272] kill_block_super+0x7c/0xe0 [ 316.941671][ T4272] deactivate_locked_super+0x93/0xf0 [ 316.947003][ T4272] cleanup_mnt+0x42c/0x4b0 [ 316.951469][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 316.956713][ T4272] task_work_run+0x1d0/0x260 [ 316.961432][ T4272] ? task_work_cancel+0x220/0x220 [ 316.966469][ T4272] ? do_exit+0x97d/0x2480 [ 316.970823][ T4272] ? kmem_cache_free+0xf7/0x290 [ 316.975782][ T4272] do_exit+0x982/0x2480 [ 316.979967][ T4272] ? put_task_struct+0x80/0x80 [ 316.984767][ T4272] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 316.990789][ T4272] ? lock_chain_count+0x20/0x20 [ 316.995659][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 317.000699][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 317.006258][ T4272] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 317.012255][ T4272] ? _raw_spin_unlock_irq+0x1f/0x40 [ 317.017488][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 317.023152][ T4272] do_group_exit+0x217/0x2d0 [ 317.027759][ T4272] __x64_sys_exit_group+0x3b/0x40 [ 317.032904][ T4272] do_syscall_64+0x4c/0xa0 [ 317.037345][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 317.042402][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 317.047117][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.053026][ T4272] RIP: 0033:0x7f0066b9ce59 [ 317.057537][ T4272] Code: Unable to access opcode bytes at 0x7f0066b9ce2f. [ 317.064652][ T4272] RSP: 002b:00007ffed777d6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 317.073168][ T4272] RAX: ffffffffffffffda RBX: 00007f0066c321ef RCX: 00007f0066b9ce59 [ 317.081153][ T4272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 317.089219][ T4272] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f0066c321ca [ 317.097228][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed777e970 [ 317.105209][ T4272] R13: 00007f0066c321ca R14: 000000000004cc93 R15: 00007ffed777fa40 [ 317.113247][ T4272] [ 317.116278][ T4272] Modules linked in: [ 317.170944][ T4272] ---[ end trace 0000000000000000 ]--- [ 317.176558][ T4272] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 317.203982][ T4272] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 1d 9b e6 fe e9 16 fe ff ff e8 73 93 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 317.224461][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224506][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.290755][ T4272] RSP: 0018:ffffc90004237940 EFLAGS: 00010293 [ 317.296894][ T4272] RAX: ffffffff82ece82d RBX: ffff8880512b9ff0 RCX: ffff888079cfbc00 [ 317.350848][ T4272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880512b9ff0 [ 317.358990][ T4272] RBP: 0000000000000001 R08: ffffffff90aff417 R09: 1ffffffff215fe82 [ 317.381106][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 317.470789][ T4272] R10: dffffc0000000000 R11: fffffbfff215fe83 R12: dffffc0000000000 [ 317.478846][ T4272] R13: dffffc0000000000 R14: ffff8880512b9c78 R15: ffff8880512ba018 [ 317.510743][ T4272] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 317.553013][ T4272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.559695][ T4272] CR2: 00007f0ea66ed000 CR3: 000000005e9e5000 CR4: 00000000003506f0 [ 317.580457][ T4272] Kernel panic - not syncing: Fatal exception [ 317.586761][ T4272] Kernel Offset: disabled [ 317.591094][ T4272] Rebooting in 86400 seconds..