last executing test programs: 22.284464145s ago: executing program 4 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe5) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 22.102771508s ago: executing program 4 (id=2216): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000c40)="de31", 0x2}], 0x1, 0x0, 0x0, 0x4c810}, 0x0) recvmmsg$unix(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x12040, 0x0) 21.94439485s ago: executing program 4 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 21.442252288s ago: executing program 4 (id=2225): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2) 20.836980966s ago: executing program 4 (id=2233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 20.156438237s ago: executing program 4 (id=2241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(0x3) 19.875669701s ago: executing program 32 (id=2241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(0x3) 4.542713452s ago: executing program 3 (id=2354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001840)=ANY=[@ANYBLOB="02000000000000000a000000000000800200000005000000fbffffff00000000000100000000000000000000000000000700000000000000010000000e00000002"]) 4.472116543s ago: executing program 2 (id=2355): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x3}]}}]}, 0x40}}, 0x0) 4.359047134s ago: executing program 2 (id=2357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000b3000040"]) 4.229825376s ago: executing program 2 (id=2359): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.214308276s ago: executing program 3 (id=2360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.00269278s ago: executing program 3 (id=2361): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.908232361s ago: executing program 2 (id=2362): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB='iocharset=iso8859-15,umask=00000000000000000000003,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303235332c646973636172642c666d61736b3d30303030303030303030303030300000000030303031302c757466382c696f636861727365743d6d6163696e7569742c4ea0a5899b233b5a616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c00"], 0x1, 0x1528, &(0x7f00000037c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 3.462071338s ago: executing program 0 (id=2369): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x3000002, &(0x7f0000000480)={[{@nodatacow}, {@enospc_debug}, {@clear_cache}, {@datacow}, {@thread_pool={'thread_pool', 0x3d, 0x9}}, {@clear_cache}, {@nospace_cache}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@acl}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@datasum}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.461668028s ago: executing program 1 (id=2370): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x6}, &(0x7f0000000080)=0x8) 3.32169943s ago: executing program 1 (id=2371): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES16], 0x0, 0x260, &(0x7f0000000780)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) 3.152616483s ago: executing program 3 (id=2372): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r0, 0x329, 0xfffffffc, 0x1000000, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) 3.067107244s ago: executing program 2 (id=2374): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 2.977741595s ago: executing program 3 (id=2375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 2.909090457s ago: executing program 1 (id=2377): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local, 0xfffffff7}, @host, 0x4, 0x2, 0x7, 0x6, 0xfffffffffffffff8, 0x0, 0x6}) 2.865592147s ago: executing program 3 (id=2378): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000600)={[{@quota}, {@dax_always}, {@pqnoenforce}]}, 0x1, 0x9847, &(0x7f0000009880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x200002) ioctl$FS_IOC_GETFSMAP(r0, 0x40305825, &(0x7f00000000c0)=ANY=[]) 2.745555909s ago: executing program 1 (id=2380): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file2\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@ssd}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@nodatasum}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 2.381625204s ago: executing program 2 (id=2381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.043746249s ago: executing program 33 (id=2381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.901613341s ago: executing program 0 (id=2383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 1.584437756s ago: executing program 0 (id=2384): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000080)="80040007007c68a9", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000200)=0x7f, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x62, 0x0) 1.519791657s ago: executing program 5 (id=2385): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0xc) 1.368038669s ago: executing program 0 (id=2386): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0x0, 0x58) 1.34115761s ago: executing program 5 (id=2387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003"], 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 1.162117283s ago: executing program 5 (id=2388): syz_open_dev$media(&(0x7f0000000000), 0x9, 0x502) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000), 0x4) 1.122812223s ago: executing program 0 (id=2389): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) 1.060289684s ago: executing program 5 (id=2390): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') getdents(r0, &(0x7f0000000740)=""/24, 0xff90) getdents64(r0, 0xffffffffffffffff, 0x43) 919.128986ms ago: executing program 5 (id=2391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x32, 0x0, 0x400000007fff, 0x3, 0x3e, 0xffffffeb, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x400, 0x2, 0xe}, [{0x3, 0xf97, 0x7fffffffffffffff, 0xd, 0x1cc, 0xe2, 0x78991372, 0x2003}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 753.963119ms ago: executing program 5 (id=2392): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) write$cgroup_pressure(r0, &(0x7f0000000080)={'some', 0x20, 0x4e, 0x20, 0x500000}, 0x2f) ftruncate(r0, 0x2) 600.354411ms ago: executing program 1 (id=2393): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 91.075579ms ago: executing program 0 (id=2394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffffd87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040), 0x1, 0x5131, &(0x7f000000a280)="$eJzs3U+IVVUcB/Dz5s04k4LzEgJbZRFItXBwExHRUyaoKHrlYjACpxZBunASJFoIYov+LXwlRS0kV1KLZBZGUBsXUhiB29AwF24UA8lFO4259543753ru+/NpI3p5xMz9577u+fc8x53Md+X574AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIYQXfv/sUFX91LXpM+dmmjsPbJm5vG963ekQatnxWlHfsfXZV97ctuPFidhh9uV822j0GzLvej5vrOo5uNCv9+f1EMJYMkC92D6zpjRq9+6e8oCVrl/cfXTT3ubG44fb9auXzp4sv3QWTKz0BFZKcV9dWLyXmtnvkeSMTrvr1qv13KJ5//SG+09eBACwJFOtbNP5c7T4E7fT3p/Wk3YzabeTdvwLod3dWI583FX95rkhra/QPJt5VBjvO8+kXrz/nXYr7Z+0k6ixhHn2nlpEmol+85xL6is1TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDbySNvjz5UVT91bfrMuZnmzgNbZi7vm153OoRGdryWl2ur3z/c/OvbrccO/Lj5q+MXnn+snh1udvqPdp0cfos7T0yG8EZX5UIc9uLaEFq9hawZviwX3sp2nosFAAAA7iT3Z79HOu08Do71tGtZmqxl/0V5WLx+cffRTXubG48fbtevXjp7cvnjtfqM17zheJ12Y/Gn1hWMY/xNx1usx1P3lMaplo6Y5vnHz0/9XdW/lP8b1fk/vnP1Yiv/AwAAsBzyfzpOtUH5/7vX/vikqn8p/2/ouWQp/8cZx/w/EpaX/wEAAOB2dgvz//VMaZxqg/L/+EtjX1f1L+X/qeHy/2j3648Hf40T3jUZwtSgqQMAAAB9xP/vvvjRQszr+ScTaV5/6tGD56rGK+X/5nD5f+ymvioAAADg3zjyxfaHq+ql/N8aLv+P39JZAwAAAEvxzocTH1TVS/l/drj8v7rYFisf8k4/xX+FcGgyhImFnbm88HNoP90pAAAAADdJzOl/frrzh6rzSvl/rvr5//FJB3H9f8/z/0rr/7sK+VP/nvRgAAAAAO5G5fX88fH4+TcX3Pj794df///APQdfrbp+Kf/vHy7/17u3N/P7/wAAAGAZ/m/f/7e9NE61Qc//v++jd3+p6l/K/+3h8n/crul+eSdqtfz9eW8yhPULO8XTBL+Jl9uVFObHugqZVtJjW+xRFObHuwqZuaTH5skQHlzY2Z8U7o2FdlK4srYoHEkKp2OhuB86hWNJ4US80z5fW0w3LXwfC8UCi/m4gmJNZ0lE0uNqvx4LhRv2ONu5OAAAwF0lhuciy471NkMaZedrg05YPeiEkUEn1AedMJqckJ7Y73iY7S3E4+0zG5f2/f9Hhsv/8a1YlW/6rf8Pcf1/fnxx/f9sLDSSwnwstNInBrTiNfKw+3G8RqNV9LiyvlMAAACAO1r8XKC+wvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ye/eY+S66sOBn317H15vAj8R8kOwQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL8URRHCNX8kdQiQUADihsJo6h5oFSNSKJEpHWCiELTAAqFSLiauffcvXPuzsOPdbzJ5yN558x8z/POw3PuvXMuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvDwc/dwn/rZV/J7fXfbI41dOffTAxiuf+fRl5z8QwnT98a4s3DV0/VenfnHrpbcduHP9zXccv/zN/Xm5PB6Ga3+68zufjbUeXx7Ct7tC6E0Da0ayQF9+fyTW95qREM4L84GixMxQViJtOPxgMIRDYT5QVPXdwRBGSoErHrz7ri/UEjcNhrAyhDCQtvHYQNbGYBq4qD8LDKWBnb1Z4NcnMkXgO91ZAE5bfDMUL/oj040ZxhYu1+T113fGOvbiSofXExNjzfP9fOMid6qkP31g+rSetkp1LIrK2+Ood9sSeLdVtvONnrbyF6n8G8qJ+dBA6N42s33LNXN74yPdYWKip1lNi/Q8P/zcp7aeTHrJvA5jB8bOyOvwi/evvLVn9Xvuu2PNyqcOv+Xg06fbzR+XNmk5vdgGQv6aWzLPYzQ13d1w/+X5eXKuP22Vb0njvnSFELZ/5Pfe2ypemf+PtZ7/x5dzvO1uyB1rfWE0m5vHR0Zi4tnRbG4OAAAAS8ZS2Gu6c+L772hVX2X+P97Z8f+4SyyfzGejPRrCVD1xcEUIF9QfzwLfiM19eEUIr6+nphsDG5PA0RBeXU+sLqpKSiyLJcaTwE9H88BUEjgWA9NJ4OsxcGMS+GwMHEkCW2PgaBK4NAbCbOM4fn80H0fHgcEY2JxtxCPxLIRfjsbWkm31aFEVAADAGZLPDvsa75bOdTjdDHF6eWSwXYZ4BnbTDANJDekMtphWNa2ht10N3S1qqD12pBj3/tbDr9Tc1a5vldMwuhozfPVXf/O+0EJl/j/Zev4/UOrIsqLJ9Ph/CJvqf2Pu7jwyV8Q3TzdkAAAAAE7D8P8+8bVW8cr8f6qz8//jPpGeUuZwb9wNsWNFCJONgazaP6wGsqPew3kAAAAAloLieHxxLHw2v81O0U7n09X80yeZPx74n1owf//R721u1d/K/H+6s/P/hxpvs04ci7340op4dkAW+GHsZS1QNx4DP3lnYyAf/7G4AW6IVeUnJhRV3RBLbI6BySRwqFmJHxUlLmgM5E9W0fjBYhyzeYlSAAAAAM66uDsgHpeP5/+/4bfrP9GqXGX+v7nz8/9r6vPgyun9c8MhrO0NoSf9YcC9Q9nCgDEw0pUnvj+U1dWTVnXdUAiX1AaWVvVEvv5/b7rG4IODWVUxcMEbDj93US3xtcEQ1pYDD33glrfWEnuTQNH4Xw6G8LraaNPGv7Usa7wvbfzLy0J4bSlQVPXhZSHUGutPq7p7IL+OQVrVPw+E8IpSoKjqbQMh7AsALFHxv9Jt5Qf37Lt2x5a5uZndi5iI+/AHw/bZuZmJrTvntg006dO2pM8NyxhdVx1Tp1e+eTRfouj9t28a6SRd/E5wstxWvh+/cuJgfj9+F+qrj3N9X8PdDemQ3/TGahOh9E2q2ZC7F3nIQ+VK5p/ESv0xf38YDsuu2TOze+KTW/bu3b0u+9tp9vXZ33iYKdtW69JtNbRQ3zp4eTRdLStxqttqVbmStXuv3rV2z75r18xeveWqmatmPrbubesnL57cMPn2i9fWRjWZ/W0z1FULVZ0M9cQtHY7rDA71wt5SJWfjU0NCQmKpJXYOr2r5f3Jl/r+r9fw/furET/58fYZmx//H4mH+7PH5w/ybY+BQp8f/x5odzS9ODBhPAvtjYL/D/AAAALw0xEl+3JsZ90r/bPW3nmpVrjL/39/Z7//P0Pr/xdL1lzdb5n91LDHZbP3/dJn/Yv3//c3W/0+X+S/W/z/0Iqz/f00RSDbJL63/DwAAvBScvfX/2y7vn14goJKh1fL+YaELBFQytF3Gv9MLBJz0+v+P/edf/XdooTL/v7Gz+b+F+wEAAODc8Zk/+8T/axWvzP8PTYdwojjtven8/+yv/xeanf8/3iww3WxhQOv/AQAAsEQ1W/9v7PqhD7UqV5n/H+ns+H887aK7IXes9YXRbE27kK5p9+xo8ZMBAAAAWBq6w8REX4d5G1ZG3XjqbT6cLwXaKl32xJ8cP7nz/492Nv9v+F3GF+9feWvP6vfc98Ida1Y+dfgtB5+eP/4PAAAALJ5O90sAAAAAAAAAAAAAAAAvvif+48CGVvHK7//DpvrjzX7/H6/7F39f8MqG3LHW9uv/5fevePdt++pLFt47GsIby4EdB3acF/Jr868qB+764OpX1RIH0hLfe/zSJ2uJD6WBd605//la4pIksDkukvjqNBCvqvj88iQQl1f89zQQt8eRNNCfBz6/PBtHV7qtfjaSbauudFs9MhLCilKg2FbfHsna6EoHeFMSKAb48TQQB/jneaA77dVtw1mvYmAkFr15OOsVAADnrPgtsC9sn52bmYxf4ePthb2Nt1HDkmXXVavt6rD5R/Olyd5/+6aRTtI96XfR+WuN94WB2hDWVb6ulrN01Ud5Zmpps+le2WTI7VZ7625SLnWym66/+YgGsxFNbN05t62v7cA3tM+yvrdtlnWVyU45S3d9k3ZQSwd9aZElM7Ohw23TQZfj/e4wMdGT5PqDGBxrbL/dK6LT3+uX1/lr9ioo5/nY8YO/blVfZf4/1tn8f6A8rufziwHsj1fW+7sVlvkHAACAxfX5jb/5Svz3vuvveahV3sr8f7yz+X/cg5UfCs72dhyN1/8/uCKE+qX1x7LAN2JzH14RwuvrqelYIrug/uWxxGQW+EbcYbI6ltg83VjVshg4kgR+OpoHjiaBYzGQ76U4HPJdOX8/GsJb66lNjSV2xRJjSeC9MTCeBCZiYDIJLI+BqSTwzPI8MJ0E/i0Gwmzjtrp9eb6tAAAATkY+z+prvBvSed6R3nYZutplGGqXobtdhoF2GZqNIt7/ZszQl5y80lXK1JfWOpjUUskQL4Z/0v2qZAg/asyZFkxPEzgSzz8ozjfoaqz5znf0pqdCNKjM/yc7m/8PNd5mrR+L8//56/9lgR/G7n0pnjo+HgM/eWdjIN8xcCxOdm8oqprOS+ST9htiiakYGE8Cu2JgKgls3pQHDr2qMZDPtIvGDxaNz+YlSgEAAAA46+IOgribJs7/b97zueFW5Srz/6nO5v+xveFyY5+NtR5fHsK3u+Z7UwTWjGSBuB9jJP48/jUjIZxX2sFRlJgZykr0Jw2HHwxmv1DvT6v67mD244N4/4oH777rC7XETYMhrCztfSnaeGwga2MwDVzUnwWG0sDO3iwQ9/wUge90ZwE4bcXevviCyk91KRQ/MjrRsJOvyevvpXJN0HR4lX2gC+Rb6DdXi6WywzXfp1oYW7hck6et5f5bzpjK2+Nos3dbI++2Sr4X9d029nJ8tw2mDxRfpPJvKCfmQwOhe9vM9i3XzO2Nj5R/yVqxSM9z+VeqnaTPwOtw/6n3tr2BtAOTycfH5MLlFn4ddsXqvnj/ylt7Vr/nvjvWrHzq8FsOPt1xN5qIPxS++9P/OvLj0uZdbAMhf80tuc+T6Zfj50nFknvaxj1tIYRNz3z5hlbxyvx/urP5f29yW/ebuDH3rAjhTaWNe2/c/H+8IvscLAWyT8lXVAPZIff/Gm36yQkAAABnWrG7o9hfMJvfZieEp/Pkav7pk8wf91dMLZi/034P/fUHV7aKV+b/m1vP/5cl3XT83/F/Fknnx/8bOSJZyXc2d0UvSx/Yf1q7oivVsSgc/1/Quf5uc/x/QY7/O/6/EMf/23D8f0Hn+tNW+Za0y5euEMJTf/T9R1rFK/P/XZ3N/63/t/CifcX6f5ubrf+3q9n6f/ut/wcAACyqJgvNpfO8yup9lQzp6n2VDG0XCGy7xKD1/ypNt1v/78kLH/ttaKEy/9/f2fw/vhyGy60vlfX/xjc1qerGGNhlYUAAAADORc12EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiuvMf/mdbq/g9v7vskcevnProgY1XPvPpy85/IITZ+uNdWbhr6PqvTv3i1ktvO3Dn+pvvOH75mwfycn357f9vyB1rfWE0hEOlR0Zi4tnR2p35wBXvvm1fby1x72gIbywHdhzYcV4t8fXREFaVA3d9cPWraokDaYnvPX7pk7XEh9LAu9ac/3wtcUke6Eq7+4/Ls+52pd39wvIQVpQCRXc/uryxqqKNP80D3Wkb/zSStREDI7HoV0ayNmJgLpaYXRbC2t4QetKq7hnIqupJq/qXgayqnrSqzwyEcEkIoTet6vH+rKredOQP9GdVxcAFbzj83EW1xKH+ENaWAw994Ja31hIfTwJF43/RH8Lrai+ZtPFv9mWN96WN39QXwmtDCP1piV/1ZiX60xJP9IbwilKgaPwjvSHsC7wkxA+fhk+0Pfuu3bFlbm5m9yIm+vO2BsP22bmZia0757YNJH1qpquUPnHdqY/90ec+tbV2+/7bN410ku7Ny/XVu7y+r+HuhnO997FfQ+VK5p+PSv0xf38YDsuu2TOze+KTW/bu3b0u+1t/5jrIvj7725NHs221bqlsq1XlStbuvXrX2j37rl0ze/WWq2aumvnYuretn7x4csPk2y9eWxvVZPb3TAz1lrM/1At7S5WcjQ8ACQmJpZbobvh0mzzXP8grX/TnO9oXBuof0JVpRTlLV32UZ2LQG09xxKfyPaXtiNZVJg6VLOsXyHJdY5YNlcnEfC2DWZb697rK5LDcWHd9k9bv9ITQHSYmeppth7HGu+XN+/PT2LwP55uu0zQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6zB6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASwEAAP//C04qbw==") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 0s ago: executing program 1 (id=2395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r1, @ANYBLOB="1800258014000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.803286][ T6438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.829984][ T6438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 148.855860][ T6438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 148.865937][ T6438] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 148.876169][ T6438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.934116][ T6438] usb 1-1: config 0 descriptor?? [ 148.940514][ T5889] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 148.987367][ T5889] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 149.012989][ T5889] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 149.020266][ T5889] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 149.044533][ T5889] microsoft 0003:045E:00F9.0019: unknown main item tag 0x0 [ 149.068116][ T5889] microsoft 0003:045E:00F9.0019: hidraw0: USB HID v1.01 Device [HID 045e:00f9] on usb-dummy_hcd.3-1/input0 [ 149.092046][ T5889] microsoft 0003:045E:00F9.0019: no inputs found [ 149.111635][ T7819] loop1: detected capacity change from 0 to 1024 [ 149.113093][ T5889] microsoft 0003:045E:00F9.0019: could not initialize ff, continuing anyway [ 149.198200][ T7819] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.215544][ T4182] usb 4-1: USB disconnect, device number 10 [ 149.239383][ T7824] fido_id[7824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 149.262116][ T7821] loop2: detected capacity change from 0 to 4096 [ 149.272908][ T6438] usbhid 1-1:0.0: can't add hid device: -71 [ 149.280222][ T6438] usbhid: probe of 1-1:0.0 failed with error -71 [ 149.296121][ T6438] usb 1-1: USB disconnect, device number 8 [ 149.306229][ T7819] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz.1.1371: directory missing '..' [ 149.341669][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 149.362604][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 149.474888][ T7821] ntfs: volume version 3.1. [ 149.574907][ T7837] loop4: detected capacity change from 0 to 128 [ 149.621189][ T7837] EXT4-fs (loop4): Ignoring removed oldalloc option [ 149.660157][ T7837] EXT4-fs (loop4): inline encryption not supported [ 149.701070][ T7837] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,inlinecrypt,init_itable,minixdf,dax=never,,errors=continue. Quota mode: none. [ 149.745525][ T7837] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.829425][ T7845] loop0: detected capacity change from 0 to 256 [ 149.924368][ T7845] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.966640][ T7845] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.056145][ T7853] loop2: detected capacity change from 0 to 1024 [ 150.101689][ T7840] loop1: detected capacity change from 0 to 32768 [ 150.160251][ T7853] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.200946][ T7861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1387'. [ 150.251506][ T7853] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz.2.1385: directory missing '..' [ 150.328493][ T7868] loop4: detected capacity change from 0 to 256 [ 150.372414][ T7864] loop3: detected capacity change from 0 to 4096 [ 150.403863][ T7868] exfat: Deprecated parameter 'utf8' [ 150.415412][ T7868] exfat: Deprecated parameter 'namecase' [ 150.445269][ T7868] exfat: Deprecated parameter 'namecase' [ 150.450959][ T7868] exfat: Deprecated parameter 'utf8' [ 150.519700][ T7873] loop2: detected capacity change from 0 to 256 [ 150.527766][ T7868] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 150.564626][ T7873] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.627957][ T7864] ntfs: volume version 3.1. [ 150.688122][ T7873] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.801849][ T7878] loop0: detected capacity change from 0 to 128 [ 150.956421][ T7878] autofs4:pid:7878:autofs_fill_super: called with bogus options [ 151.248158][ T7886] loop4: detected capacity change from 0 to 4096 [ 151.260485][ T7892] loop0: detected capacity change from 0 to 128 [ 151.298384][ T7892] EXT4-fs (loop0): Ignoring removed oldalloc option [ 151.313203][ T7892] EXT4-fs (loop0): inline encryption not supported [ 151.325629][ T7892] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,inlinecrypt,init_itable,minixdf,dax=never,,errors=continue. Quota mode: none. [ 151.362906][ T7892] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.542920][ T7867] loop1: detected capacity change from 0 to 40427 [ 151.550745][ T7886] ntfs: volume version 3.1. [ 151.613431][ T7867] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 151.643114][ T7897] loop0: detected capacity change from 0 to 1024 [ 151.681927][ T7867] F2FS-fs (loop1): invalid crc value [ 151.706563][ T7867] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.786262][ T7897] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.818132][ T7897] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.1401: directory missing '..' [ 151.820240][ T7891] loop3: detected capacity change from 0 to 32768 [ 151.919040][ T7867] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.123845][ T4181] attempt to access beyond end of device [ 152.123845][ T4181] loop1: rw=2049, want=45104, limit=40427 [ 152.145301][ T7908] loop4: detected capacity change from 0 to 4096 [ 152.663540][ T7905] loop2: detected capacity change from 0 to 32768 [ 152.676849][ T4297] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.733332][ T7905] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1404 (7905) [ 152.763783][ T7917] loop1: detected capacity change from 0 to 4096 [ 152.801319][ T7905] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 152.814036][ T7917] __ntfs_error: 51 callbacks suppressed [ 152.814053][ T7917] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 152.832124][ T7905] BTRFS info (device loop2): setting nodatacow, compression disabled [ 152.840818][ T7905] BTRFS info (device loop2): turning on sync discard [ 152.848075][ T7917] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.861310][ T7905] BTRFS info (device loop2): setting datacow [ 152.868118][ T7905] BTRFS info (device loop2): doing ref verification [ 152.876557][ T7917] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 152.891177][ T7905] BTRFS info (device loop2): turning off barriers [ 152.905909][ T7905] BTRFS info (device loop2): enabling ssd optimizations [ 152.913288][ T7917] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 152.937837][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 152.944794][ T7910] loop0: detected capacity change from 0 to 32768 [ 152.947356][ T7905] BTRFS info (device loop2): using spread ssd allocation scheme [ 152.970960][ T7917] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 152.989091][ T7905] BTRFS info (device loop2): turning on barriers [ 153.008426][ T7905] BTRFS info (device loop2): not using ssd optimizations [ 153.017999][ T7917] ntfs: volume version 3.1. [ 153.039223][ T7917] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 153.051825][ T7905] BTRFS info (device loop2): not using spread ssd allocation scheme [ 153.052158][ T7910] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.061161][ T7905] BTRFS info (device loop2): using free space tree [ 153.077673][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.078631][ T7917] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 153.102720][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.131537][ T7905] BTRFS info (device loop2): has skinny extents [ 153.132800][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.143152][ T7917] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 153.150857][ T7910] lbmIODone: I/O error in JFS log [ 153.208019][ T4297] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 153.220996][ T7917] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 153.226331][ T7910] *** Log Format Error ! *** [ 153.237408][ T7910] lmLogInit: exit(-22) [ 153.241549][ T7910] lmLogOpen: exit(-22) [ 153.247086][ T7917] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 153.277733][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.340649][ T4297] usb 5-1: config 0 descriptor?? [ 153.671019][ T7949] loop1: detected capacity change from 0 to 128 [ 153.755896][ T7949] autofs4:pid:7949:autofs_fill_super: called with bogus options [ 153.847138][ T4297] ryos 0003:1E7D:31CE.001A: item fetching failed at offset 0/11 [ 153.859089][ T4297] ryos 0003:1E7D:31CE.001A: parse failed [ 153.865869][ T4297] ryos: probe of 0003:1E7D:31CE.001A failed with error -22 [ 154.008375][ T7954] loop2: detected capacity change from 0 to 256 [ 154.044958][ T7954] exfat: Deprecated parameter 'utf8' [ 154.055426][ T7954] exfat: Deprecated parameter 'namecase' [ 154.062609][ T7954] exfat: Deprecated parameter 'namecase' [ 154.069149][ T7954] exfat: Deprecated parameter 'utf8' [ 154.100611][ T7954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 154.121502][ T5889] usb 5-1: USB disconnect, device number 8 [ 154.158417][ T7960] loop3: detected capacity change from 0 to 128 [ 154.283776][ T7960] autofs4:pid:7960:autofs_fill_super: called with bogus options [ 154.327531][ T7964] loop2: detected capacity change from 0 to 1024 [ 154.582608][ T7958] loop0: detected capacity change from 0 to 32768 [ 154.672848][ T4602] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.926820][ T4602] usb 2-1: Using ep0 maxpacket: 16 [ 155.021996][ T7968] loop3: detected capacity change from 0 to 32768 [ 155.042980][ T4602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.054663][ T4602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.064964][ T4602] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 155.074335][ T4602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.084340][ T4602] usb 2-1: config 0 descriptor?? [ 155.136919][ T7984] loop2: detected capacity change from 0 to 4096 [ 155.186943][ T7968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1422 (7968) [ 155.231363][ T7968] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 155.273394][ T7968] BTRFS info (device loop3): setting nodatacow, compression disabled [ 155.310797][ T7968] BTRFS info (device loop3): max_inline at 0 [ 155.317374][ T7968] BTRFS info (device loop3): enabling disk space caching [ 155.366481][ T7968] BTRFS info (device loop3): turning off barriers [ 155.389379][ T7968] BTRFS info (device loop3): turning on flush-on-commit [ 155.407261][ T7968] BTRFS info (device loop3): doing ref verification [ 155.430840][ T7968] BTRFS info (device loop3): force clearing of disk cache [ 155.460559][ T7968] BTRFS info (device loop3): enabling ssd optimizations [ 155.478863][ T7968] BTRFS info (device loop3): max_inline at 4096 [ 155.493412][ T7968] BTRFS info (device loop3): disk space caching is enabled [ 155.518183][ T7968] BTRFS info (device loop3): has skinny extents [ 155.565237][ T4602] gt683r_led 0003:1770:FF00.001B: invalid report_count -1225023125 [ 155.577843][ T4602] gt683r_led 0003:1770:FF00.001B: item 0 4 1 9 parsing failed [ 155.596918][ T4602] gt683r_led 0003:1770:FF00.001B: hid parsing failed [ 155.612916][ T4602] gt683r_led: probe of 0003:1770:FF00.001B failed with error -22 [ 155.623715][ T7982] loop4: detected capacity change from 0 to 40427 [ 155.729755][ T7982] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 155.770456][ T7982] F2FS-fs (loop4): invalid crc value [ 155.801127][ T4182] usb 2-1: USB disconnect, device number 13 [ 155.853882][ T7968] BTRFS info (device loop3): clearing free space tree [ 155.861237][ T7968] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.877364][ T7982] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.903890][ T7968] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.922283][ T8022] loop2: detected capacity change from 0 to 512 [ 155.962952][ T8022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.002865][ T7982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.066225][ T8022] EXT4-fs (loop2): 1 truncate cleaned up [ 156.076324][ T4185] attempt to access beyond end of device [ 156.076324][ T4185] loop4: rw=2049, want=45104, limit=40427 [ 156.082887][ T4602] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.087949][ T8022] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 156.332961][ T4602] usb 1-1: Using ep0 maxpacket: 16 [ 156.453049][ T4602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.478576][ T4602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.502949][ T4602] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.522018][ T4602] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 156.532522][ T4602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.550496][ T4602] usb 1-1: config 0 descriptor?? [ 156.825337][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.024584][ T4602] ryos 0003:1E7D:31CE.001C: item fetching failed at offset 0/11 [ 157.046585][ T4602] ryos 0003:1E7D:31CE.001C: parse failed [ 157.062422][ T4602] ryos: probe of 0003:1E7D:31CE.001C failed with error -22 [ 157.092778][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 157.223541][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.242780][ T7] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 157.262316][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.269216][ T4226] usb 1-1: USB disconnect, device number 9 [ 157.301057][ T7] usb 3-1: config 0 descriptor?? [ 157.312168][ T8050] loop3: detected capacity change from 0 to 40427 [ 157.318831][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.354055][ T8050] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 157.373030][ T8050] F2FS-fs (loop3): invalid crc value [ 157.382586][ T8054] loop1: detected capacity change from 0 to 32768 [ 157.405657][ T8054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1452 (8054) [ 157.417932][ T8050] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.454199][ T8054] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 157.471144][ T8054] BTRFS info (device loop1): setting nodatacow, compression disabled [ 157.482614][ T8054] BTRFS info (device loop1): max_inline at 0 [ 157.491943][ T8050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.492985][ T8054] BTRFS info (device loop1): enabling disk space caching [ 157.527574][ T8054] BTRFS info (device loop1): turning off barriers [ 157.553364][ T8054] BTRFS info (device loop1): turning on flush-on-commit [ 157.568640][ T4190] attempt to access beyond end of device [ 157.568640][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 157.580112][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 157.581088][ T8054] BTRFS info (device loop1): doing ref verification [ 157.600848][ T8054] BTRFS info (device loop1): force clearing of disk cache [ 157.609818][ T8054] BTRFS info (device loop1): enabling ssd optimizations [ 157.619209][ T8054] BTRFS info (device loop1): max_inline at 4096 [ 157.625962][ T8054] BTRFS info (device loop1): disk space caching is enabled [ 157.633660][ T8054] BTRFS info (device loop1): has skinny extents [ 157.706709][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.717981][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.735949][ T23] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 157.749086][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.761103][ T23] usb 5-1: config 0 descriptor?? [ 157.784759][ T7] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 157.793323][ T7] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 157.800137][ T7] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 157.812361][ T7] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 157.820341][ T7] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 157.832179][ T7] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 157.905874][ T8054] BTRFS info (device loop1): clearing free space tree [ 157.917157][ T8054] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.937516][ T8054] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.016480][ T4226] usb 3-1: USB disconnect, device number 11 [ 158.124201][ T8086] loop3: detected capacity change from 0 to 736 [ 158.252822][ T6255] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.264594][ T23] gt683r_led 0003:1770:FF00.001E: invalid report_count -1225023125 [ 158.282467][ T23] gt683r_led 0003:1770:FF00.001E: item 0 4 1 9 parsing failed [ 158.316100][ T23] gt683r_led 0003:1770:FF00.001E: hid parsing failed [ 158.336078][ T23] gt683r_led: probe of 0003:1770:FF00.001E failed with error -22 [ 158.508490][ T4226] usb 5-1: USB disconnect, device number 9 [ 158.698117][ T6255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.709405][ T6255] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 158.723954][ T6255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.744689][ T6255] usb 1-1: config 0 descriptor?? [ 159.173068][ T8102] loop3: detected capacity change from 0 to 32768 [ 159.211512][ T8102] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1465 (8102) [ 159.216588][ T6255] wacom 0003:056A:032C.001F: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.0-1/input0 [ 159.294487][ T8104] loop2: detected capacity change from 0 to 32768 [ 159.308755][ T8102] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.321603][ T8115] loop1: detected capacity change from 0 to 512 [ 159.331705][ T8102] BTRFS info (device loop3): setting nodatacow, compression disabled [ 159.365278][ T8102] BTRFS info (device loop3): turning on sync discard [ 159.380133][ T8102] BTRFS info (device loop3): setting datacow [ 159.395347][ T8102] BTRFS info (device loop3): doing ref verification [ 159.405713][ T8115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.416132][ T6255] usb 1-1: USB disconnect, device number 10 [ 159.422604][ T8102] BTRFS info (device loop3): turning off barriers [ 159.453183][ T8102] BTRFS info (device loop3): enabling ssd optimizations [ 159.460844][ T8102] BTRFS info (device loop3): using spread ssd allocation scheme [ 159.469317][ T8102] BTRFS info (device loop3): turning on barriers [ 159.476029][ T8102] BTRFS info (device loop3): not using ssd optimizations [ 159.483821][ T8102] BTRFS info (device loop3): not using spread ssd allocation scheme [ 159.492064][ T8102] BTRFS info (device loop3): using free space tree [ 159.499251][ T8102] BTRFS info (device loop3): has skinny extents [ 159.503405][ T8115] EXT4-fs (loop1): 1 truncate cleaned up [ 159.511160][ T8115] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 159.977335][ T8154] loop1: detected capacity change from 0 to 8 [ 160.068422][ T8157] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 160.219979][ T4375] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop3 scanned by udevd (4375) [ 160.572913][ T4593] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.784479][ T8186] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1491'. [ 160.817849][ T4593] usb 3-1: Using ep0 maxpacket: 16 [ 160.916775][ T8165] loop3: detected capacity change from 0 to 32768 [ 160.950268][ T4593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.973895][ T4593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.990237][ T8165] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.992879][ T4593] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 161.027204][ T8194] loop0: detected capacity change from 0 to 8 [ 161.033544][ T8165] lbmIODone: I/O error in JFS log [ 161.038740][ T8165] *** Log Format Error ! *** [ 161.043517][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.066904][ T4593] usb 3-1: config 0 descriptor?? [ 161.072936][ T8165] lmLogInit: exit(-22) [ 161.077043][ T8165] lmLogOpen: exit(-22) [ 161.148096][ T8178] loop1: detected capacity change from 0 to 32768 [ 161.172782][ T4226] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.442880][ T4226] usb 5-1: Using ep0 maxpacket: 16 [ 161.544612][ T4593] gt683r_led 0003:1770:FF00.0020: invalid report_count -1225023125 [ 161.560759][ T4593] gt683r_led 0003:1770:FF00.0020: item 0 4 1 9 parsing failed [ 161.575553][ T4593] gt683r_led 0003:1770:FF00.0020: hid parsing failed [ 161.590124][ T4593] gt683r_led: probe of 0003:1770:FF00.0020 failed with error -22 [ 161.603064][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.642786][ T4226] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 161.657681][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.694503][ T4226] usb 5-1: config 0 descriptor?? [ 161.768700][ T8219] loop3: detected capacity change from 0 to 8 [ 161.801612][ T4593] usb 3-1: USB disconnect, device number 12 [ 162.196051][ T4226] pantherlord 0003:0E8F:0003.0021: unknown main item tag 0x5 [ 162.213095][ T4226] pantherlord 0003:0E8F:0003.0021: item fetching failed at offset 4/5 [ 162.242221][ T4226] pantherlord 0003:0E8F:0003.0021: parse failed [ 162.262151][ T4226] pantherlord: probe of 0003:0E8F:0003.0021 failed with error -22 [ 162.385664][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 162.385677][ T26] audit: type=1326 audit(1752759339.375:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.2.1522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a5f2b2929 code=0x0 [ 162.427254][ T4226] usb 5-1: USB disconnect, device number 10 [ 162.558373][ T8257] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1525'. [ 162.712567][ T8245] loop0: detected capacity change from 0 to 32768 [ 162.767501][ T8245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1517 (8245) [ 162.787049][ T8245] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 162.796911][ T8245] BTRFS info (device loop0): setting nodatacow, compression disabled [ 162.805457][ T8245] BTRFS info (device loop0): max_inline at 0 [ 162.811649][ T8245] BTRFS info (device loop0): enabling disk space caching [ 162.821305][ T8245] BTRFS info (device loop0): turning off barriers [ 162.828947][ T8245] BTRFS info (device loop0): turning on flush-on-commit [ 162.840771][ T8245] BTRFS info (device loop0): doing ref verification [ 162.848761][ T8245] BTRFS info (device loop0): force clearing of disk cache [ 162.862384][ T8245] BTRFS info (device loop0): enabling ssd optimizations [ 162.870882][ T8245] BTRFS info (device loop0): max_inline at 4096 [ 162.881808][ T8245] BTRFS info (device loop0): disk space caching is enabled [ 162.890629][ T8245] BTRFS info (device loop0): has skinny extents [ 163.054291][ T8245] BTRFS info (device loop0): clearing free space tree [ 163.061633][ T8245] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.082851][ T8245] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.479960][ T8304] netlink: 'syz.2.1539': attribute type 16 has an invalid length. [ 164.106076][ T8336] loop2: detected capacity change from 0 to 2048 [ 164.247828][ T8336] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 164.267745][ T8346] loop0: detected capacity change from 0 to 512 [ 164.323185][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.404412][ T8350] loop1: detected capacity change from 0 to 1024 [ 164.422521][ T8346] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.534651][ T8333] loop4: detected capacity change from 0 to 32768 [ 164.616717][ T8333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1549 (8333) [ 164.651982][ T8333] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 164.668607][ T8333] BTRFS info (device loop4): setting nodatacow, compression disabled [ 164.676989][ T8333] BTRFS info (device loop4): max_inline at 0 [ 164.735746][ T8333] BTRFS info (device loop4): enabling disk space caching [ 164.756872][ T8333] BTRFS info (device loop4): turning off barriers [ 164.794584][ T8359] loop1: detected capacity change from 0 to 1024 [ 164.814767][ T8333] BTRFS info (device loop4): turning on flush-on-commit [ 164.833659][ T8364] loop2: detected capacity change from 0 to 512 [ 164.840027][ T8333] BTRFS info (device loop4): doing ref verification [ 164.863648][ T8333] BTRFS info (device loop4): force clearing of disk cache [ 164.876123][ T8333] BTRFS info (device loop4): enabling ssd optimizations [ 164.884203][ T8333] BTRFS info (device loop4): max_inline at 4096 [ 164.903921][ T8333] BTRFS info (device loop4): disk space caching is enabled [ 164.918411][ T8364] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1564: invalid block [ 165.011753][ T8333] BTRFS info (device loop4): has skinny extents [ 165.018276][ T8364] EXT4-fs (loop2): Remounting filesystem read-only [ 165.033511][ T8364] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1564: invalid indirect mapped block 4294967295 (level 1) [ 165.069910][ T8364] EXT4-fs (loop2): Remounting filesystem read-only [ 165.079905][ T8364] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1564: invalid indirect mapped block 4294967295 (level 1) [ 165.099113][ T8364] EXT4-fs (loop2): Remounting filesystem read-only [ 165.106382][ T8364] EXT4-fs (loop2): 2 truncates cleaned up [ 165.112124][ T8364] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback. [ 165.314659][ T8392] loop1: detected capacity change from 0 to 256 [ 165.348893][ T8399] loop2: detected capacity change from 0 to 512 [ 165.406243][ T8392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 165.429940][ T8399] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.506793][ T8409] loop3: detected capacity change from 0 to 2048 [ 165.509254][ T8333] BTRFS info (device loop4): clearing free space tree [ 165.554173][ T8409] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 165.562965][ T8333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.575574][ T8333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.688966][ T8409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.892973][ T8416] sp0: Synchronizing with TNC [ 165.960107][ T8422] netlink: 'syz.0.1581': attribute type 16 has an invalid length. [ 166.127669][ T8424] loop3: detected capacity change from 0 to 1024 [ 166.131551][ T8427] loop0: detected capacity change from 0 to 1024 [ 166.668021][ T8452] loop0: detected capacity change from 0 to 256 [ 166.769650][ T8452] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 166.807877][ T8463] loop2: detected capacity change from 0 to 1024 [ 167.280028][ T8497] loop3: detected capacity change from 0 to 256 [ 167.395808][ T8497] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 167.733263][ T26] audit: type=1326 audit(1752759344.735:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde4bfee929 code=0x0 [ 167.836573][ T8526] loop0: detected capacity change from 0 to 1024 [ 167.937318][ T8526] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 168.080801][ T8533] loop4: detected capacity change from 0 to 4096 [ 168.101531][ T8514] loop2: detected capacity change from 0 to 32768 [ 168.147357][ T8535] loop0: detected capacity change from 0 to 4096 [ 168.157212][ T8533] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.334118][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 168.351426][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 168.397760][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 168.437571][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 168.501135][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 168.533115][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 168.541018][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 168.573671][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 168.581563][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 168.629876][ T8550] loop4: detected capacity change from 0 to 16 [ 168.636697][ T8535] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 168.712617][ T8550] erofs: (device loop4): mounted with root inode @ nid 36. [ 168.747205][ T26] audit: type=1800 audit(1752759345.745:41): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1633" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 168.750215][ T8557] sp0: Synchronizing with TNC [ 168.949495][ T26] audit: type=1326 audit(1752759345.945:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.012295][ T26] audit: type=1326 audit(1752759345.975:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.087662][ T26] audit: type=1326 audit(1752759345.985:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.200541][ T26] audit: type=1326 audit(1752759345.985:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.282088][ T26] audit: type=1326 audit(1752759345.985:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.381166][ T8586] loop3: detected capacity change from 0 to 256 [ 169.398129][ T26] audit: type=1326 audit(1752759345.985:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.446231][ T26] audit: type=1326 audit(1752759345.985:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.472457][ T26] audit: type=1326 audit(1752759345.985:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15520d9929 code=0x7ff00000 [ 169.560933][ T8586] FAT-fs (loop3): Directory bread(block 64) failed [ 169.586520][ T8586] FAT-fs (loop3): Directory bread(block 65) failed [ 169.632865][ T8586] FAT-fs (loop3): Directory bread(block 66) failed [ 169.673167][ T8586] FAT-fs (loop3): Directory bread(block 67) failed [ 169.702966][ T8586] FAT-fs (loop3): Directory bread(block 68) failed [ 169.709532][ T8586] FAT-fs (loop3): Directory bread(block 69) failed [ 169.743907][ T8586] FAT-fs (loop3): Directory bread(block 70) failed [ 169.758676][ T8601] loop1: detected capacity change from 0 to 64 [ 169.767087][ T8586] FAT-fs (loop3): Directory bread(block 71) failed [ 169.804254][ T8586] FAT-fs (loop3): Directory bread(block 72) failed [ 169.824955][ T8586] FAT-fs (loop3): Directory bread(block 73) failed [ 169.983155][ T8576] loop2: detected capacity change from 0 to 40427 [ 170.076346][ T8576] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.229512][ T8618] loop1: detected capacity change from 0 to 4096 [ 170.257814][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 170.270228][ T8576] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 170.290935][ T8576] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 170.318840][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 170.339595][ T8618] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.365575][ T8576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.373538][ T8626] netlink: 'syz.3.1666': attribute type 14 has an invalid length. [ 170.387349][ T8626] netlink: 'syz.3.1666': attribute type 13 has an invalid length. [ 170.549205][ T8635] netlink: 'syz.3.1670': attribute type 2 has an invalid length. [ 170.699960][ T8640] loop1: detected capacity change from 0 to 1024 [ 170.822106][ T8640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.897107][ T8640] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.038331][ T8659] loop4: detected capacity change from 0 to 64 [ 171.088477][ T8661] loop3: detected capacity change from 0 to 4096 [ 171.172914][ T6255] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.205275][ T8661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.374267][ T8668] loop1: detected capacity change from 0 to 16 [ 171.390738][ T8670] loop4: detected capacity change from 0 to 64 [ 171.454100][ T6255] usb 3-1: Using ep0 maxpacket: 32 [ 171.460865][ T8668] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.541104][ T8663] loop0: detected capacity change from 0 to 40427 [ 171.586207][ T8672] loop3: detected capacity change from 0 to 256 [ 171.614536][ T6255] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 171.631793][ T6255] usb 3-1: config 0 has no interface number 0 [ 171.649911][ T8672] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 171.680815][ T8663] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.736870][ T8672] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 171.825891][ T8663] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 171.853538][ T8663] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 171.863578][ T6255] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 171.879004][ T6255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.901738][ T6255] usb 3-1: Product: syz [ 171.915482][ T8663] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.932988][ T6255] usb 3-1: Manufacturer: syz [ 171.936281][ T4593] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.943135][ T6255] usb 3-1: SerialNumber: syz [ 171.976776][ T6255] usb 3-1: config 0 descriptor?? [ 172.034139][ T6255] ftdi_sio 3-1:0.120: FTDI USB Serial Device converter detected [ 172.059792][ T6255] usb 3-1: Detected SIO [ 172.079421][ T6255] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 172.096873][ T8692] loop3: detected capacity change from 0 to 128 [ 172.155853][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 172.183354][ T8692] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 172.232923][ T4593] usb 5-1: Using ep0 maxpacket: 8 [ 172.268951][ T6255] usb 3-1: USB disconnect, device number 13 [ 172.285949][ T6255] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 172.316795][ T6255] ftdi_sio 3-1:0.120: device disconnected [ 172.353044][ T4593] usb 5-1: config index 0 descriptor too short (expected 4096, got 18) [ 172.455948][ T8705] loop1: detected capacity change from 0 to 256 [ 172.470574][ T8702] loop3: detected capacity change from 0 to 4096 [ 172.513070][ T4593] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 172.524086][ T4593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.532519][ T4593] usb 5-1: Product: syz [ 172.537673][ T4593] usb 5-1: Manufacturer: syz [ 172.542282][ T4593] usb 5-1: SerialNumber: syz [ 172.594659][ T4593] usb 5-1: config 0 descriptor?? [ 172.599071][ T8707] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.655091][ T4593] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 172.808923][ T8706] loop0: detected capacity change from 0 to 32768 [ 172.868583][ T8716] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 172.886727][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 172.895893][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 172.937141][ T8719] netlink: 'syz.2.1707': attribute type 14 has an invalid length. [ 172.945250][ T4593] pwc: Failed to set LED on/off time (-71) [ 172.963004][ T4593] pwc: send_video_command error -71 [ 172.968682][ T4593] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 172.996421][ T8719] netlink: 'syz.2.1707': attribute type 13 has an invalid length. [ 173.021166][ T4593] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 173.058508][ T4593] usb 5-1: USB disconnect, device number 11 [ 173.083286][ T8721] tmpfs: Too few inodes for current use [ 173.197569][ T8727] loop2: detected capacity change from 0 to 128 [ 173.268401][ T8727] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 173.284771][ T4375] udevd[4375]: incorrect ext4 checksum on /dev/loop2 [ 173.341297][ T8731] loop1: detected capacity change from 0 to 64 [ 173.660060][ T8715] loop3: detected capacity change from 0 to 40427 [ 173.739803][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 173.762756][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 173.769183][ T8715] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.782800][ T6255] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.790571][ T8747] netlink: 'syz.4.1722': attribute type 14 has an invalid length. [ 173.819700][ T8747] netlink: 'syz.4.1722': attribute type 13 has an invalid length. [ 173.928545][ T8715] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 173.984377][ T8715] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 174.001217][ T8758] loop4: detected capacity change from 0 to 1024 [ 174.007874][ T8715] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.052964][ T6255] usb 1-1: Using ep0 maxpacket: 32 [ 174.068535][ T8743] loop1: detected capacity change from 0 to 32768 [ 174.086472][ T8758] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.164001][ T8758] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.209332][ T26] kauditd_printk_skb: 126 callbacks suppressed [ 174.209347][ T26] audit: type=1800 audit(1752759351.205:176): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1725" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 174.213124][ T6255] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 174.294023][ T6255] usb 1-1: config 0 has no interface number 0 [ 174.493001][ T6255] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 174.510535][ T6255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.536609][ T6255] usb 1-1: Product: syz [ 174.549830][ T6255] usb 1-1: Manufacturer: syz [ 174.564860][ T6255] usb 1-1: SerialNumber: syz [ 174.585985][ T6255] usb 1-1: config 0 descriptor?? [ 174.644174][ T6255] ftdi_sio 1-1:0.120: FTDI USB Serial Device converter detected [ 174.666889][ T6255] usb 1-1: Detected SIO [ 174.680481][ T6255] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 174.712006][ T8783] tmpfs: Too few inodes for current use [ 174.728156][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 174.884669][ T4593] usb 1-1: USB disconnect, device number 11 [ 174.901639][ T4593] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 174.909252][ T8790] loop2: detected capacity change from 0 to 8192 [ 174.916808][ T4593] ftdi_sio 1-1:0.120: device disconnected [ 174.931992][ T8790] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 174.943890][ T8790] REISERFS (device loop2): using ordered data mode [ 174.950420][ T8790] reiserfs: using flush barriers [ 174.956958][ T8790] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.002652][ T8797] loop3: detected capacity change from 0 to 64 [ 175.066000][ T8790] REISERFS (device loop2): checking transaction log (loop2) [ 175.089527][ T8790] REISERFS (device loop2): Using r5 hash to sort names [ 175.107437][ T8790] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 175.164924][ T8801] : renamed from bond0 [ 175.345729][ T8810] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.355711][ T8810] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.364521][ T8810] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.373256][ T8810] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.519050][ T8817] tmpfs: Too few inodes for current use [ 175.565509][ T8823] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1751'. [ 175.625360][ T8823] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1751'. [ 175.639991][ T8828] loop0: detected capacity change from 0 to 64 [ 175.660793][ T8831] : renamed from bond0 [ 175.772989][ T4593] Bluetooth: hci0: command 0x0406 tx timeout [ 175.777579][ T4226] Bluetooth: hci3: command 0x0406 tx timeout [ 175.780055][ T4593] Bluetooth: hci2: command 0x0406 tx timeout [ 175.822875][ T4240] Bluetooth: hci1: command 0x0406 tx timeout [ 176.036958][ T8858] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1770'. [ 176.074271][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 176.212824][ T6255] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.245862][ T8864] : renamed from bond0 [ 176.392356][ T8872] netlink: 'syz.4.1777': attribute type 298 has an invalid length. [ 176.533041][ T6255] usb 4-1: Using ep0 maxpacket: 32 [ 176.664359][ T8852] loop2: detected capacity change from 0 to 32768 [ 176.700244][ T6255] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.717206][ T8885] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.726122][ T8885] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.735067][ T8885] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.743831][ T8885] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.833066][ T6255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 176.894450][ T8894] syz.2.1787 uses obsolete (PF_INET,SOCK_PACKET) [ 177.033079][ T6255] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 177.056622][ T6255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.082909][ T6255] usb 4-1: Product: syz [ 177.092986][ T6255] usb 4-1: Manufacturer: syz [ 177.112708][ T6255] usb 4-1: SerialNumber: syz [ 177.133688][ T6255] usb 4-1: config 0 descriptor?? [ 177.161374][ T8905] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1793'. [ 177.172177][ T8897] loop4: detected capacity change from 0 to 8192 [ 177.177434][ T8905] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1793'. [ 177.180463][ T8907] loop2: detected capacity change from 0 to 64 [ 177.228203][ T8897] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 177.273207][ T8897] REISERFS (device loop4): using ordered data mode [ 177.280697][ T8897] reiserfs: using flush barriers [ 177.287512][ T8897] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.304212][ T8897] REISERFS (device loop4): checking transaction log (loop4) [ 177.320835][ T8897] REISERFS (device loop4): Using r5 hash to sort names [ 177.369882][ T8897] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.460074][ T6255] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 177.512796][ T4593] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 177.613973][ T8919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.622799][ T8919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.631566][ T8919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.640568][ T8919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.718950][ T4226] usb 4-1: USB disconnect, device number 11 [ 177.884689][ T4593] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 177.884717][ T4593] usb 2-1: config 0 has no interface number 0 [ 177.884745][ T4593] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 178.083382][ T4593] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 178.111289][ T4593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.121396][ T4593] usb 2-1: Product: syz [ 178.143893][ T4593] usb 2-1: Manufacturer: syz [ 178.148532][ T4593] usb 2-1: SerialNumber: syz [ 178.152555][ T8946] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 178.179866][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.189827][ T4593] usb 2-1: config 0 descriptor?? [ 178.196918][ T8946] CIFS: Unable to determine destination address [ 178.207192][ T8942] loop0: detected capacity change from 0 to 8192 [ 178.233002][ T8942] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 178.269550][ T8942] REISERFS (device loop0): using ordered data mode [ 178.308512][ T8942] reiserfs: using flush barriers [ 178.349872][ T8942] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.419430][ T8942] REISERFS (device loop0): checking transaction log (loop0) [ 178.467328][ T8942] REISERFS (device loop0): Using r5 hash to sort names [ 178.480662][ T8942] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 178.580859][ T8959] loop3: detected capacity change from 0 to 2048 [ 178.646009][ T8959] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.672773][ T6441] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.680636][ T8960] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.873335][ T4593] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 178.923429][ T4593] usb 2-1: USB disconnect, device number 14 [ 179.033051][ T6441] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.053790][ T6441] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.069704][ T6441] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.085152][ T6441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.118351][ T8954] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.457766][ T6441] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 179.569854][ T9010] loop4: detected capacity change from 0 to 64 [ 179.598116][ T9011] loop3: detected capacity change from 0 to 2048 [ 179.647945][ T9011] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 179.704940][ T9011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.732967][ T6441] usb 1-1: Using ep0 maxpacket: 8 [ 179.852908][ T6441] usb 1-1: config index 0 descriptor too short (expected 4096, got 18) [ 179.943003][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 179.990019][ T9026] device vlan2 entered promiscuous mode [ 179.996631][ T9026] device bridge0 entered promiscuous mode [ 180.009718][ T9028] device gtp0 entered promiscuous mode [ 180.040356][ T6441] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 180.067550][ T6441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.079009][ T6441] usb 1-1: Product: syz [ 180.083485][ T6441] usb 1-1: Manufacturer: syz [ 180.088251][ T6441] usb 1-1: SerialNumber: syz [ 180.103284][ T6441] usb 1-1: config 0 descriptor?? [ 180.144908][ T6441] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 180.185921][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'. [ 180.201552][ T9038] device vlan2 entered promiscuous mode [ 180.208648][ T9038] device bridge0 entered promiscuous mode [ 180.287854][ T9040] loop3: detected capacity change from 0 to 1024 [ 180.318863][ T9040] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 180.402375][ T9040] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nouid32,nombcache,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,. Quota mode: none. [ 180.442968][ T6441] pwc: Failed to set LED on/off time (-71) [ 180.463043][ T6441] pwc: send_video_command error -71 [ 180.468303][ T6441] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 180.487815][ T6441] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 180.509125][ T6441] usb 1-1: USB disconnect, device number 12 [ 180.651075][ T9057] loop1: detected capacity change from 0 to 64 [ 180.749249][ T6441] usb 3-1: USB disconnect, device number 14 [ 180.983112][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 180.998447][ T9073] device vlan2 entered promiscuous mode [ 181.004853][ T9073] device bridge0 entered promiscuous mode [ 181.077367][ T9077] loop1: detected capacity change from 0 to 2048 [ 181.138612][ T9077] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.182803][ T4375] udevd[4375]: incorrect nilfs2 checksum on /dev/loop1 [ 181.186981][ T9083] loop0: detected capacity change from 0 to 4096 [ 181.201813][ T9084] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.288151][ T9087] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.437391][ T9093] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1881'. [ 181.458736][ T26] audit: type=1326 audit(1752759358.455:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 181.472790][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1881'. [ 181.533728][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1881'. [ 181.560501][ T26] audit: type=1326 audit(1752759358.495:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 181.582758][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.595846][ T9093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'. [ 181.639808][ T26] audit: type=1326 audit(1752759358.505:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 181.662110][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.702570][ T9105] device gtp0 entered promiscuous mode [ 181.732532][ T9109] blktrace: Concurrent blktraces are not allowed on loop3 [ 181.759790][ T26] audit: type=1326 audit(1752759358.505:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 181.782145][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.843940][ T26] audit: type=1326 audit(1752759358.505:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 181.866204][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.887687][ T9115] loop4: detected capacity change from 0 to 1024 [ 181.917388][ T9121] blktrace: Concurrent blktraces are not allowed on loop3 [ 181.954671][ T26] audit: type=1326 audit(1752759358.525:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 181.990448][ T9115] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 182.063553][ T9115] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nouid32,nombcache,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,. Quota mode: none. [ 182.107930][ T26] audit: type=1326 audit(1752759358.525:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 182.130372][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.269214][ T26] audit: type=1326 audit(1752759358.525:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f2b2929 code=0x7ffc0000 [ 182.354945][ T9145] netlink: 'syz.1.1907': attribute type 2 has an invalid length. [ 182.357449][ T9144] loop0: detected capacity change from 0 to 1024 [ 182.500274][ T9150] device gtp0 entered promiscuous mode [ 182.662320][ T9156] loop4: detected capacity change from 0 to 512 [ 182.674849][ T9157] loop2: detected capacity change from 0 to 512 [ 182.748279][ T9156] EXT4-fs (loop4): Ignoring removed nobh option [ 182.768947][ T9156] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 182.785940][ T9159] loop0: detected capacity change from 0 to 4096 [ 182.827376][ T9163] loop1: detected capacity change from 0 to 2048 [ 182.829107][ T9156] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1913: iget: bad i_size value: 38620345925642 [ 182.857108][ T9157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.863456][ T9156] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1913: couldn't read orphan inode 15 (err -117) [ 182.881609][ T9156] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 182.891390][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 182.909366][ T9163] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.925093][ T9163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.939318][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 182.947522][ T9157] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.981106][ T9156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1913: bg 0: block 5: invalid block bitmap [ 182.999976][ T9156] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 183.003159][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 183.014624][ T9156] EXT4-fs (loop4): This should not happen!! Data will be lost [ 183.014624][ T9156] [ 183.030907][ T9156] EXT4-fs (loop4): Total free blocks count 0 [ 183.033658][ T9157] EXT4-fs warning (device loop2): verify_group_input:165: Last group not full [ 183.037566][ T9156] EXT4-fs (loop4): Free/Dirty block details [ 183.052170][ T9156] EXT4-fs (loop4): free_blocks=0 [ 183.058534][ T9156] EXT4-fs (loop4): dirty_blocks=1 [ 183.068579][ T9133] loop3: detected capacity change from 0 to 32768 [ 183.072849][ T9156] EXT4-fs (loop4): Block reservation details [ 183.080263][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 183.081111][ T9156] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 183.126599][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 183.164311][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 183.222780][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 183.239340][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 183.283576][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 183.291450][ T9159] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 183.341196][ T9133] XFS (loop3): Mounting V5 Filesystem [ 183.440994][ T9133] XFS (loop3): Ending clean mount [ 183.447728][ T9170] loop1: detected capacity change from 0 to 4096 [ 183.500760][ T4190] XFS (loop3): Unmounting Filesystem [ 183.614183][ T9185] loop2: detected capacity change from 0 to 1024 [ 183.631179][ T9187] loop4: detected capacity change from 0 to 1024 [ 183.650862][ T9188] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.715463][ T9185] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 183.794350][ T9185] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nouid32,nombcache,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,. Quota mode: none. [ 183.815672][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.438587][ T9222] loop3: detected capacity change from 0 to 1024 [ 184.442274][ T9215] loop2: detected capacity change from 0 to 4096 [ 184.477782][ T9219] loop1: detected capacity change from 0 to 4096 [ 184.479281][ T9224] loop4: detected capacity change from 0 to 512 [ 184.542815][ T9226] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.554058][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 184.587041][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 184.604285][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 184.640992][ T9224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.679966][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 184.684845][ T9224] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.716740][ T9224] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full [ 184.719767][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 184.787534][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 184.822795][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 184.861677][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 184.882933][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 184.923460][ T9219] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 185.332852][ T9247] netlink: 'syz.2.1949': attribute type 2 has an invalid length. [ 185.575992][ T26] audit: type=1326 audit(1752759362.575:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4bfee929 code=0x7ffc0000 [ 185.604532][ T9257] loop2: detected capacity change from 0 to 256 [ 185.644245][ T26] audit: type=1326 audit(1752759362.605:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.3.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fde4bfee929 code=0x7ffc0000 [ 185.748963][ T9259] loop1: detected capacity change from 0 to 512 [ 185.781603][ T9257] FAT-fs (loop2): Directory bread(block 64) failed [ 185.798090][ T9257] FAT-fs (loop2): Directory bread(block 65) failed [ 185.818178][ T9257] FAT-fs (loop2): Directory bread(block 66) failed [ 185.865734][ T9259] EXT4-fs (loop1): Ignoring removed nobh option [ 185.869813][ T9257] FAT-fs (loop2): Directory bread(block 67) failed [ 185.872013][ T9259] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 185.930316][ T9259] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1950: iget: bad i_size value: 38620345925642 [ 185.964166][ T9257] FAT-fs (loop2): Directory bread(block 68) failed [ 185.975677][ T9259] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1950: couldn't read orphan inode 15 (err -117) [ 186.006145][ T9257] FAT-fs (loop2): Directory bread(block 69) failed [ 186.017478][ T9259] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 186.032406][ T9257] FAT-fs (loop2): Directory bread(block 70) failed [ 186.084835][ T9257] FAT-fs (loop2): Directory bread(block 71) failed [ 186.091453][ T9257] FAT-fs (loop2): Directory bread(block 72) failed [ 186.094175][ T9259] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1950: bg 0: block 5: invalid block bitmap [ 186.130520][ T9257] FAT-fs (loop2): Directory bread(block 73) failed [ 186.157811][ T9264] tipc: Started in network mode [ 186.185007][ T9264] tipc: Node identity , cluster identity 4711 [ 186.201762][ T9259] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 186.224541][ T9259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 186.224541][ T9259] [ 186.303441][ T9259] EXT4-fs (loop1): Total free blocks count 0 [ 186.309480][ T9259] EXT4-fs (loop1): Free/Dirty block details [ 186.415796][ T9259] EXT4-fs (loop1): free_blocks=0 [ 186.420787][ T9259] EXT4-fs (loop1): dirty_blocks=1 [ 186.420835][ T9269] loop4: detected capacity change from 0 to 4096 [ 186.475181][ T9259] EXT4-fs (loop1): Block reservation details [ 186.481911][ T9259] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 186.598360][ T9269] __ntfs_error: 3 callbacks suppressed [ 186.598374][ T9269] ntfs: (device loop4): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 186.740558][ T9269] ntfs: volume version 3.1. [ 186.800848][ T9287] loop3: detected capacity change from 0 to 512 [ 186.842735][ T9288] mkiss: ax0: crc mode is auto. [ 186.888675][ T9287] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.948777][ T9287] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1965: invalid indirect mapped block 4294967295 (level 1) [ 187.076427][ T9287] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1965: invalid indirect mapped block 4294967295 (level 1) [ 187.103918][ T9287] EXT4-fs (loop3): 2 truncates cleaned up [ 187.137402][ T9287] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 187.173069][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 187.264257][ T9287] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 187.291242][ T9301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1974'. [ 187.638242][ T9307] loop1: detected capacity change from 0 to 4096 [ 187.661401][ T9315] loop2: detected capacity change from 0 to 512 [ 187.673714][ T9307] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 187.795076][ T9315] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 187.882802][ T4593] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.901489][ T9315] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.1981: Unimplemented hash flags: 0x0001 [ 187.964649][ T9315] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1981: Corrupt directory, running e2fsck is recommended [ 187.983939][ T9315] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1981: path /359/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 188.318232][ T4593] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 188.318257][ T4593] usb 4-1: config 0 has no interface number 0 [ 188.318283][ T4593] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 188.318344][ T4593] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.394807][ T9319] loop0: detected capacity change from 0 to 32768 [ 188.408473][ T9340] loop1: detected capacity change from 0 to 256 [ 188.432751][ T9340] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.439143][ T4593] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 188.603875][ T9319] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 188.632991][ T4593] usb 4-1: New USB device found, idVendor=0738, idProduct=0ad5, bcdDevice=2e.f6 [ 188.633024][ T4593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.633043][ T4593] usb 4-1: Product: syz [ 188.633058][ T4593] usb 4-1: Manufacturer: syz [ 188.633071][ T4593] usb 4-1: SerialNumber: syz [ 188.642898][ T4593] usb 4-1: config 0 descriptor?? [ 188.691865][ T9319] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 188.705722][ T4593] xpad 4-1:0.156: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 188.723621][ T4593] xpad: probe of 4-1:0.156 failed with error -5 [ 188.918101][ T4598] usb 4-1: USB disconnect, device number 12 [ 188.983022][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 189.186268][ T9362] loop4: detected capacity change from 0 to 64 [ 189.204847][ T9356] loop2: detected capacity change from 0 to 4096 [ 189.399225][ T9369] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.512391][ T9356] syz.2.1999 (9356) used greatest stack depth: 20176 bytes left [ 189.560562][ T9374] sg_write: data in/out 41084/4 bytes for SCSI command 0x1c-- guessing data in; [ 189.560562][ T9374] program syz.3.2008 not setting count and/or reply_len properly [ 189.905326][ T9386] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2013'. [ 189.916701][ T9388] loop0: detected capacity change from 0 to 256 [ 190.149766][ T9398] loop2: detected capacity change from 0 to 512 [ 190.159109][ T9394] loop3: detected capacity change from 0 to 4096 [ 190.215052][ T9398] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33349!=33292) [ 190.250978][ T9398] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x00000000000000a7,abort,noblock_validity,,errors=continue. Quota mode: none. [ 190.384951][ T9398] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2019: Unimplemented hash flags: 0x0001 [ 190.433780][ T9394] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.442092][ T9398] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2019: Corrupt directory, running e2fsck is recommended [ 190.588504][ T9366] loop1: detected capacity change from 0 to 40427 [ 190.756098][ T9366] F2FS-fs (loop1): invalid crc value [ 190.788781][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 190.789624][ T9366] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.838792][ T9424] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2025'. [ 191.042960][ T9366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.227796][ T26] audit: type=1800 audit(1752759368.225:190): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2005" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 191.248067][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.279550][ T9442] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 191.323251][ T4181] attempt to access beyond end of device [ 191.323251][ T4181] loop1: rw=2049, want=45104, limit=40427 [ 191.729779][ T9459] loop0: detected capacity change from 0 to 256 [ 191.749645][ T9457] loop4: detected capacity change from 0 to 4096 [ 191.760455][ T23] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 191.857577][ T9459] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 191.909014][ T9457] ntfs3: loop4: Failed to load $MFT. [ 192.280069][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.305034][ T23] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 192.334168][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.366769][ T23] usb 3-1: config 0 descriptor?? [ 192.379665][ T9445] loop3: detected capacity change from 0 to 32768 [ 192.763934][ T9481] mkiss: ax0: crc mode is auto. [ 192.834370][ T9461] loop4: detected capacity change from 0 to 32768 [ 192.915137][ T23] asus 0003:0B05:17E0.0022: item fetching failed at offset 2/5 [ 192.925517][ T23] asus 0003:0B05:17E0.0022: Asus hid parse failed: -22 [ 192.947522][ T23] asus: probe of 0003:0B05:17E0.0022 failed with error -22 [ 193.135605][ T23] usb 3-1: USB disconnect, device number 15 [ 193.473682][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 193.507165][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 193.560914][ T9485] netlink: 'syz.0.2058': attribute type 15 has an invalid length. [ 193.740088][ T9492] loop2: detected capacity change from 0 to 1024 [ 193.740902][ T9488] loop1: detected capacity change from 0 to 2048 [ 194.032095][ T4264] hfsplus: b-tree write err: -5, ino 4 [ 194.142776][ T9488] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.187365][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193754][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.222473][ T9488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.872068][ T9538] loop1: detected capacity change from 0 to 32768 [ 195.009375][ T9538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2084 (9538) [ 195.107755][ T9538] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 195.116721][ T9538] BTRFS info (device loop1): force zlib compression, level 3 [ 195.124317][ T9538] BTRFS info (device loop1): enabling ssd optimizations [ 195.131265][ T9538] BTRFS info (device loop1): using spread ssd allocation scheme [ 195.139011][ T9538] BTRFS info (device loop1): turning on sync discard [ 195.145759][ T9538] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.156415][ T9538] BTRFS info (device loop1): trying to use backup root at mount time [ 195.164540][ T9538] BTRFS info (device loop1): doing ref verification [ 195.171148][ T9538] BTRFS info (device loop1): disabling free space tree [ 195.178133][ T9538] BTRFS info (device loop1): max_inline at 818 [ 195.184691][ T9538] BTRFS error (device loop1): cannot disable free space tree [ 195.222185][ T9538] BTRFS error (device loop1): open_ctree failed: -22 [ 195.356893][ T9553] loop3: detected capacity change from 0 to 1024 [ 195.489826][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 195.579511][ T4294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4294) [ 196.254848][ T9590] loop0: detected capacity change from 0 to 8 [ 196.324650][ T4598] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 196.602979][ T4598] usb 3-1: Using ep0 maxpacket: 16 [ 196.606836][ T9590] SQUASHFS error: Unable to read directory block [2c0:35] [ 196.727931][ T4598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.753456][ T4598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.763823][ T4598] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 196.803004][ T4598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.817291][ T9613] loop1: detected capacity change from 0 to 256 [ 196.841776][ T4598] usb 3-1: config 0 descriptor?? [ 196.862755][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.039672][ T9613] FAT-fs (loop1): Directory bread(block 64) failed [ 197.060422][ T9613] FAT-fs (loop1): Directory bread(block 65) failed [ 197.082397][ T9613] FAT-fs (loop1): Directory bread(block 66) failed [ 197.090480][ T9613] FAT-fs (loop1): Directory bread(block 67) failed [ 197.102985][ T9613] FAT-fs (loop1): Directory bread(block 68) failed [ 197.109536][ T9613] FAT-fs (loop1): Directory bread(block 69) failed [ 197.116834][ T9613] FAT-fs (loop1): Directory bread(block 70) failed [ 197.124547][ T9613] FAT-fs (loop1): Directory bread(block 71) failed [ 197.132068][ T9613] FAT-fs (loop1): Directory bread(block 72) failed [ 197.165291][ T9613] FAT-fs (loop1): Directory bread(block 73) failed [ 197.310502][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.340968][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.395097][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.422910][ T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.432913][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.456520][ T23] usb 5-1: config 0 descriptor?? [ 197.546008][ T9635] loop0: detected capacity change from 0 to 256 [ 197.565474][ T4598] usb 3-1: string descriptor 0 read error: -71 [ 197.585248][ T4598] uclogic 0003:5543:004D.0023: failed retrieving string descriptor #200: -71 [ 197.604323][ T4598] uclogic 0003:5543:004D.0023: failed retrieving pen parameters: -71 [ 197.621903][ T4598] uclogic 0003:5543:004D.0023: failed probing pen v2 parameters: -71 [ 197.686881][ T4598] uclogic 0003:5543:004D.0023: failed probing parameters: -71 [ 197.689688][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 197.700574][ T4598] uclogic: probe of 0003:5543:004D.0023 failed with error -71 [ 197.717576][ T9635] FAT-fs (loop0): Directory bread(block 64) failed [ 197.733026][ T9635] FAT-fs (loop0): Directory bread(block 65) failed [ 197.749965][ T9635] FAT-fs (loop0): Directory bread(block 66) failed [ 197.772337][ T4598] usb 3-1: USB disconnect, device number 16 [ 197.782356][ T9635] FAT-fs (loop0): Directory bread(block 67) failed [ 197.801113][ T9635] FAT-fs (loop0): Directory bread(block 68) failed [ 197.816796][ T9635] FAT-fs (loop0): Directory bread(block 69) failed [ 197.827563][ T9635] FAT-fs (loop0): Directory bread(block 70) failed [ 197.863403][ T9635] FAT-fs (loop0): Directory bread(block 71) failed [ 197.883008][ T9635] FAT-fs (loop0): Directory bread(block 72) failed [ 197.890055][ T9635] FAT-fs (loop0): Directory bread(block 73) failed [ 197.965236][ T23] plantronics 0003:047F:FFFF.0024: unbalanced collection at end of report description [ 197.989802][ T23] plantronics 0003:047F:FFFF.0024: parse failed [ 198.016308][ T23] plantronics: probe of 0003:047F:FFFF.0024 failed with error -22 [ 198.158643][ T4240] usb 5-1: USB disconnect, device number 12 [ 198.317437][ T9663] loop3: detected capacity change from 0 to 8 [ 199.045174][ T9667] loop4: detected capacity change from 0 to 32768 [ 199.220119][ T9667] XFS: ikeep mount option is deprecated. [ 199.236250][ T9667] XFS: noikeep mount option is deprecated. [ 199.326778][ T9667] XFS (loop4): Mounting V5 Filesystem [ 199.335328][ T9663] SQUASHFS error: Unable to read directory block [2c0:35] [ 199.415728][ T9685] loop1: detected capacity change from 0 to 256 [ 199.471272][ T9667] XFS (loop4): Ending clean mount [ 199.511706][ T9685] FAT-fs (loop1): Directory bread(block 64) failed [ 199.521578][ T9685] FAT-fs (loop1): Directory bread(block 65) failed [ 199.533197][ T9685] FAT-fs (loop1): Directory bread(block 66) failed [ 199.539752][ T9685] FAT-fs (loop1): Directory bread(block 67) failed [ 199.542581][ T9683] loop2: detected capacity change from 0 to 4096 [ 199.546930][ T9667] XFS (loop4): Quotacheck needed: Please wait. [ 199.565220][ T9685] FAT-fs (loop1): Directory bread(block 68) failed [ 199.582423][ T9685] FAT-fs (loop1): Directory bread(block 69) failed [ 199.610061][ T9683] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 199.632383][ T9685] FAT-fs (loop1): Directory bread(block 70) failed [ 199.643218][ T9685] FAT-fs (loop1): Directory bread(block 71) failed [ 199.670811][ T9685] FAT-fs (loop1): Directory bread(block 72) failed [ 199.685267][ T9685] FAT-fs (loop1): Directory bread(block 73) failed [ 199.690997][ T4593] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.743907][ T9667] XFS (loop4): Quotacheck: Done. [ 199.841134][ T9683] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 199.873383][ T9683] ntfs3: loop2: Failed to load $Extend. [ 199.873916][ T4185] XFS (loop4): Unmounting Filesystem [ 200.000016][ T4593] usb 1-1: Using ep0 maxpacket: 16 [ 200.085343][ T9689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2151'. [ 200.383017][ T4593] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 200.402481][ T4593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.432805][ T4593] usb 1-1: Product: syz [ 200.442981][ T4593] usb 1-1: Manufacturer: syz [ 200.457840][ T4593] usb 1-1: SerialNumber: syz [ 200.485984][ T4593] usb 1-1: config 0 descriptor?? [ 200.560374][ T23] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 200.603964][ T9697] loop1: detected capacity change from 0 to 4096 [ 200.799014][ T4593] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 200.810295][ T4593] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 200.877967][ T4593] usb 1-1: USB disconnect, device number 13 [ 200.975058][ T9691] loop3: detected capacity change from 0 to 32768 [ 201.033009][ T23] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 201.048479][ T23] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.074796][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.080299][ T9691] XFS (loop3): Mounting V5 Filesystem [ 201.090051][ T23] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 201.112738][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.142178][ T23] usb 3-1: config 0 descriptor?? [ 201.164031][ T9694] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 201.202754][ T4598] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 201.378087][ T9691] XFS (loop3): Ending clean mount [ 201.391491][ T9691] XFS (loop3): Quotacheck needed: Please wait. [ 201.462774][ T4598] usb 5-1: Using ep0 maxpacket: 16 [ 201.497733][ T9691] XFS (loop3): Quotacheck: Done. [ 201.621645][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.621806][ T4598] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 201.640107][ T4598] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 201.650964][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.650991][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.651011][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.651030][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.651049][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.651068][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.651088][ T23] elecom 0003:056E:00FD.0025: unknown main item tag 0x0 [ 201.652451][ T23] elecom 0003:056E:00FD.0025: hidraw0: USB HID vff.fe Device [HID 056e:00fd] on usb-dummy_hcd.2-1/input0 [ 201.680231][ T4598] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.770170][ T4190] XFS (loop3): Unmounting Filesystem [ 201.892112][ T6441] usb 3-1: USB disconnect, device number 17 [ 201.923020][ T4598] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.940370][ T4598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.956350][ T4598] usb 5-1: Product: syz [ 201.964152][ T4598] usb 5-1: Manufacturer: syz [ 201.972172][ T4598] usb 5-1: SerialNumber: syz [ 202.409764][ T4598] usb 5-1: USB disconnect, device number 13 [ 202.441659][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.522777][ T4240] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 202.646423][ T9736] loop2: detected capacity change from 0 to 8 [ 202.733442][ T9736] SQUASHFS error: Failed to read block 0x636: -5 [ 202.757928][ T9736] SQUASHFS error: Unable to read metadata cache entry [634] [ 202.772639][ T9736] SQUASHFS error: Unable to read metadata cache entry [634] [ 202.781909][ T9736] SQUASHFS error: Unable to read directory block [634:0] [ 202.837117][ T9740] loop3: detected capacity change from 0 to 512 [ 202.903640][ T6255] Bluetooth: hci0: command 0x0401 tx timeout [ 202.928495][ T9742] loop2: detected capacity change from 0 to 1024 [ 202.935402][ T4240] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 202.981556][ T4240] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 203.023272][ T4240] usb 1-1: config 54 has no interface number 0 [ 203.039765][ T4240] usb 1-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 203.061285][ T4240] usb 1-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.077170][ T9746] loop4: detected capacity change from 0 to 2048 [ 203.098787][ T9740] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.105797][ T9740] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.120035][ T9742] hfsplus: bad catalog entry type [ 203.190819][ T9740] EXT4-fs (loop3): 1 truncate cleaned up [ 203.237242][ T4298] hfsplus: b-tree write err: -5, ino 4 [ 203.263125][ T4240] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 203.278359][ T9740] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,test_dummy_encryption,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback. [ 203.331597][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.360260][ T4240] usb 1-1: Product: syz [ 203.373131][ T4240] usb 1-1: Manufacturer: syz [ 203.381306][ T4240] usb 1-1: SerialNumber: syz [ 203.582823][ T9756] loop1: detected capacity change from 0 to 4096 [ 203.622349][ T9740] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 203.666412][ T9756] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 203.776102][ T9756] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 203.810691][ T4240] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 203.831769][ T9756] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 203.853053][ T9756] ntfs: (device loop1): read_ntfs_boot_sector(): Using backup boot sector. [ 203.862055][ T9] usb 1-1: Failed to submit usb control message: -71 [ 203.898320][ T9] usb 1-1: unable to send the bmi data to the device: -71 [ 203.951154][ T4240] usb 1-1: USB disconnect, device number 14 [ 203.958351][ T9756] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 204.007281][ T9] usb 1-1: unable to get target info from device [ 204.014594][ T9756] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 204.038347][ T9] usb 1-1: could not get target info (-71) [ 204.072371][ T9] usb 1-1: could not probe fw (-71) [ 204.082258][ T9775] loop2: detected capacity change from 0 to 512 [ 204.104536][ T9756] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 204.113819][ T9756] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 204.149140][ T9779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.313454][ T9756] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 204.331147][ T9784] tun0: tun_chr_ioctl cmd 2147767511 [ 204.353092][ T9756] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 204.407196][ T9756] ntfs: volume version 3.1. [ 204.433340][ T9775] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,i_version,,errors=continue. Quota mode: writeback. [ 204.468527][ T9775] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.492412][ T9790] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2189'. [ 204.700447][ T9794] netlink: 616 bytes leftover after parsing attributes in process `syz.4.2191'. [ 204.997426][ T9809] loop3: detected capacity change from 0 to 512 [ 205.170861][ T9809] EXT4-fs (loop3): Ignoring removed orlov option [ 205.177834][ T9809] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 205.312050][ T9809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 205.404389][ T9809] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.2198: corrupted in-inode xattr [ 205.475602][ T9809] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2198: couldn't read orphan inode 15 (err -117) [ 205.516745][ T9809] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 205.675282][ T9836] Dead loop on virtual device ip6_vti0, fix it urgently! [ 205.680492][ T9802] loop2: detected capacity change from 0 to 32768 [ 206.106299][ T9802] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 206.166337][ T9828] loop1: detected capacity change from 0 to 32768 [ 206.198879][ T9856] tipc: Started in network mode [ 206.224222][ T9856] tipc: Node identity ac14140f, cluster identity 4711 [ 206.238745][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 206.253546][ T9856] tipc: New replicast peer: 255.255.255.255 [ 206.270667][ T9856] tipc: Enabled bearer , priority 4 [ 206.318534][ T9828] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 206.318534][ T9828] [ 206.369492][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2218'. [ 206.382022][ T9828] ERROR: (device loop1): remounting filesystem as read-only [ 206.417875][ T9828] ERROR: (device loop1): jfs_unlink: [ 206.417875][ T9828] [ 206.462040][ T9858] tipc: Disabling bearer [ 206.499697][ T4181] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 206.499697][ T4181] [ 206.722165][ T9874] loop4: detected capacity change from 0 to 16 [ 206.742247][ T9875] loop2: detected capacity change from 0 to 512 [ 206.783587][ T9874] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 206.855987][ T9875] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback. [ 206.899475][ T9875] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.989198][ T6255] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 207.092201][ T5160] udevd[5160]: incorrect cramfs checksum on /dev/loop4 [ 207.120136][ T9874] cramfs: Error -3 while decompressing! [ 207.139062][ T9874] cramfs: ffffffff961e5fd8(42)->ffff88807d8aa000(4096) [ 207.204080][ T9889] autofs4:pid:9889:autofs_fill_super: called with bogus options [ 207.244955][ T5160] udevd[5160]: incorrect cramfs checksum on /dev/loop4 [ 207.440732][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 207.543696][ T6255] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 207.568136][ T6255] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 207.595133][ T6255] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.622843][ T6255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.659228][ T9899] loop2: detected capacity change from 0 to 1024 [ 207.670466][ T9901] loop3: detected capacity change from 0 to 1024 [ 207.921898][ T9871] loop1: detected capacity change from 0 to 1024 [ 207.936175][ T4264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.958470][ T9901] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 207.958470][ T9901] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 207.958470][ T9901] [ 207.971314][ T4264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.102178][ T4602] usb 2-1: USB disconnect, device number 15 [ 208.118180][ T9901] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,init_itable=0x0000000000000400,inode_readahead_blks=0x0000000000000002,lazytime,norecovery,max_dir_size_kb=0x00000000004007b1,noblock_validity,grpquota,minixdf,nouser_xattr,barrier=0x0000000000000002,i_version,,errors=continue. Quota mode: writeback. [ 208.148683][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.283341][ T4264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.324595][ T4264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.364424][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2243'. [ 208.560223][ T4264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.599532][ T4264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.737388][ T297] hfsplus: b-tree write err: -5, ino 4 [ 208.757405][ T9905] loop0: detected capacity change from 0 to 32768 [ 208.789096][ T9905] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2240 (9905) [ 208.839252][ T4264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.903980][ T4264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.932413][ T9905] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 208.971690][ T9905] BTRFS info (device loop0): force zlib compression, level 3 [ 208.988688][ T9905] BTRFS info (device loop0): force clearing of disk cache [ 209.020572][ T9905] BTRFS info (device loop0): setting nodatasum [ 209.062766][ T9905] BTRFS info (device loop0): doing ref verification [ 209.082996][ T9905] BTRFS info (device loop0): allowing degraded mounts [ 209.089807][ T9905] BTRFS info (device loop0): enabling disk space caching [ 209.192771][ T9905] BTRFS info (device loop0): disk space caching is enabled [ 209.274092][ T9905] BTRFS info (device loop0): has skinny extents [ 209.292200][ T9914] chnl_net:caif_netlink_parms(): no params data found [ 209.321867][ T9928] loop3: detected capacity change from 0 to 4096 [ 209.608935][ T9937] loop1: detected capacity change from 0 to 32768 [ 209.685247][ T9937] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 209.693840][ T9937] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 209.729783][ T9937] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 209.747246][ T4602] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 209.780748][ T4602] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 209.883501][ T9954] sctp: [Deprecated]: syz.2.2254 (pid 9954) Use of int in maxseg socket option. [ 209.883501][ T9954] Use struct sctp_assoc_value instead [ 209.899341][ T9928] ntfs3: loop3: Failed to load $MFT. [ 210.001890][ T4602] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 221ms [ 210.015535][ T4602] gfs2: fsid=syz:syz.0: jid=0: Done [ 210.025095][ T9937] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 210.101123][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.131597][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.225095][ T9905] BTRFS info (device loop0): enabling ssd optimizations [ 210.233230][ T9914] device bridge_slave_0 entered promiscuous mode [ 210.260202][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.267405][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.278750][ T9914] device bridge_slave_1 entered promiscuous mode [ 210.355870][ T9905] BTRFS info (device loop0): clearing free space tree [ 210.362876][ T9905] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.372537][ T9905] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.375750][ T9937] gfs2: fsid=syz:syz.0: found 1 quota changes [ 210.409540][ T9914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.568803][ T9914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.602854][ T4264] tipc: Left network mode [ 210.728076][ T9914] team0: Port device team_slave_0 added [ 210.747338][ T6441] Bluetooth: hci1: command 0x0409 tx timeout [ 210.777420][ T9914] team0: Port device team_slave_1 added [ 210.804636][ T4181] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 210.847741][ T4181] CPU: 1 PID: 4181 Comm: syz-executor Not tainted 5.15.188-syzkaller #0 [ 210.856100][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.866175][ T4181] Call Trace: [ 210.869456][ T4181] [ 210.872397][ T4181] dump_stack_lvl+0x168/0x230 [ 210.877093][ T4181] ? show_regs_print_info+0x20/0x20 [ 210.882307][ T4181] ? load_image+0x3b0/0x3b0 [ 210.886818][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 210.891846][ T4181] ? do_raw_spin_unlock+0x11d/0x230 [ 210.897054][ T4181] gfs2_assert_warn_i+0x18f/0x2c0 [ 210.902087][ T4181] gfs2_quota_cleanup+0x4b4/0x6a0 [ 210.907123][ T4181] gfs2_make_fs_ro+0x491/0x5d0 [ 210.911893][ T4181] ? gfs2_dinode_out+0xb00/0xb00 [ 210.916836][ T4181] ? gfs2_put_super+0x189/0x7d0 [ 210.921694][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 210.926718][ T4181] ? __rwlock_init+0x140/0x140 [ 210.931477][ T4181] ? hook_inode_free_security+0xa0/0xa0 [ 210.937018][ T4181] ? do_raw_spin_unlock+0x11d/0x230 [ 210.942218][ T4181] gfs2_put_super+0x1d2/0x7d0 [ 210.946902][ T4181] ? gfs2_evict_inode+0x11f0/0x11f0 [ 210.952109][ T4181] generic_shutdown_super+0x130/0x300 [ 210.957489][ T4181] kill_block_super+0x7c/0xe0 [ 210.962166][ T4181] deactivate_locked_super+0x93/0xf0 [ 210.967452][ T4181] cleanup_mnt+0x418/0x4d0 [ 210.971864][ T4181] ? lockdep_hardirqs_on+0x94/0x140 [ 210.977063][ T4181] task_work_run+0x125/0x1a0 [ 210.981658][ T4181] exit_to_user_mode_loop+0x10f/0x130 [ 210.987031][ T4181] exit_to_user_mode_prepare+0xb1/0x140 [ 210.992577][ T4181] syscall_exit_to_user_mode+0x16/0x40 [ 210.998035][ T4181] do_syscall_64+0x58/0xa0 [ 211.002453][ T4181] ? clear_bhb_loop+0x30/0x80 [ 211.007123][ T4181] ? clear_bhb_loop+0x30/0x80 [ 211.011803][ T4181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.017714][ T4181] RIP: 0033:0x7f7609e7ac57 [ 211.022130][ T4181] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 211.030460][ T9971] loop3: detected capacity change from 0 to 32768 [ 211.041734][ T4181] RSP: 002b:00007ffcb7283f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 211.041793][ T4181] RAX: 0000000000000000 RBX: 00007f7609efba8d RCX: 00007f7609e7ac57 [ 211.041803][ T4181] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb7284000 [ 211.041811][ T4181] RBP: 00007ffcb7284000 R08: 0000000000000000 R09: 0000000000000000 [ 211.041821][ T4181] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb7285090 [ 211.041830][ T4181] R13: 00007f7609efba8d R14: 0000000000033689 R15: 00007ffcb72850d0 [ 211.041854][ T4181] [ 211.126042][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.152714][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.269279][ T9914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.306225][ T9971] [ 211.306225][ T9971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.306225][ T9971] [ 211.420310][ T9971] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 211.420310][ T9971] [ 211.609877][ T9971] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 211.629393][ T9980] loop2: detected capacity change from 0 to 32768 [ 211.837247][ T154] [ 211.837247][ T154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.837247][ T154] [ 211.865853][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.875587][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.928767][ T154] [ 211.928767][ T154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.928767][ T154] [ 211.945839][ T9914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.972735][ T4190] [ 211.972735][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.972735][ T4190] [ 211.982734][ T4593] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 212.005348][ T275] [ 212.005348][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.005348][ T275] [ 212.032051][ T4190] [ 212.032051][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.032051][ T4190] [ 212.210913][ T9914] device hsr_slave_0 entered promiscuous mode [ 212.226674][ T9914] device hsr_slave_1 entered promiscuous mode [ 212.254266][ T9914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.261848][ T9914] Cannot create hsr debugfs directory [ 212.397288][ T4593] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.415341][ T4593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.467811][T10005] loop0: detected capacity change from 0 to 4096 [ 212.481642][T10008] loop3: detected capacity change from 0 to 2048 [ 212.484481][ T4593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.517328][ T4593] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.625274][ T4593] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.636619][ T4593] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.653492][ T4593] usb 2-1: Manufacturer: syz [ 212.672531][ T4593] usb 2-1: config 0 descriptor?? [ 212.708739][ T9914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.726280][T10008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.745955][ T9914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.772038][ T9914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.813209][ T5890] Bluetooth: hci1: command 0x041b tx timeout [ 212.824330][ T9914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.027610][T10029] loop3: detected capacity change from 0 to 256 [ 213.123446][ T4593] rc_core: IR keymap rc-hauppauge not found [ 213.134684][ T4593] Registered IR keymap rc-empty [ 213.184830][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.203855][T10029] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.219027][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 213.225854][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.243395][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 213.294397][ T4593] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 213.353043][ T4593] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 213.382941][ T9914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.385365][T10037] sg_write: data in/out 41084/4 bytes for SCSI command 0x1c-- guessing data in; [ 213.385365][T10037] program syz.0.2270 not setting count and/or reply_len properly [ 213.466203][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.486463][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.496811][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.518656][ T9995] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 213.527396][T10041] loop1: detected capacity change from 0 to 256 [ 213.553273][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.560610][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.579659][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.609320][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.633556][T10041] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 213.637585][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.652655][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.682881][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.728728][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.783998][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.823476][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.851442][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.860932][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.873008][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.900911][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.907207][ T9995] usb 3-1: Using ep0 maxpacket: 16 [ 213.912190][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.921165][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.929454][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.952223][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.965746][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.977139][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.988902][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.023011][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.033001][ T4593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.037286][ T9995] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 214.053140][ T9995] usb 3-1: config 0 has no interface number 0 [ 214.059428][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.069833][ T4593] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 214.076617][ T9995] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 214.099492][ T4593] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 214.112311][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.113732][ T9995] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.143495][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.177658][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.196802][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.225125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.246785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.342805][ T9995] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 214.354533][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.362171][ T9995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.384541][ T9995] usb 3-1: Product: syz [ 214.393553][ T9995] usb 3-1: Manufacturer: syz [ 214.402935][ T9995] usb 3-1: SerialNumber: syz [ 214.437033][ T9995] usb 3-1: config 0 descriptor?? [ 214.480950][T10034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.493207][T10034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.734109][T10034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.757592][T10034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.766972][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.787412][ T5890] usb 2-1: USB disconnect, device number 16 [ 214.796539][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.816973][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.908619][ T4598] Bluetooth: hci1: command 0x040f tx timeout [ 215.222781][ T4264] device hsr_slave_0 left promiscuous mode [ 215.244971][ T4264] device hsr_slave_1 left promiscuous mode [ 215.273046][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.294584][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.314067][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.325006][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.335108][ T4264] device bridge_slave_1 left promiscuous mode [ 215.343947][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.380538][ T4264] device bridge_slave_0 left promiscuous mode [ 215.396201][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.439056][ T9995] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 215.474282][ T9995] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 215.479639][ T4264] device veth1_macvtap left promiscuous mode [ 215.493980][ T9995] asix: probe of 3-1:0.251 failed with error -71 [ 215.495485][ T4264] device veth0_macvtap left promiscuous mode [ 215.512819][ T4264] device veth1_vlan left promiscuous mode [ 215.533293][ T9995] usb 3-1: USB disconnect, device number 18 [ 215.552177][ T4264] device veth0_vlan left promiscuous mode [ 215.809598][ T4264] bond1 (unregistering): Released all slaves [ 216.081485][ T4264] team0 (unregistering): Port device team_slave_1 removed [ 216.147826][ T4264] team0 (unregistering): Port device team_slave_0 removed [ 216.188016][ T4264]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.222046][ T4264]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.404371][ T4264]  (unregistering): Released all slaves [ 216.579985][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.605978][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.701987][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.729959][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.738459][ T4598] Bluetooth: hci4: command 0x0406 tx timeout [ 216.768926][T10099] loop3: detected capacity change from 0 to 64 [ 216.785532][ T9914] device veth0_vlan entered promiscuous mode [ 216.817049][ T9914] device veth1_vlan entered promiscuous mode [ 216.855329][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.873146][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.898382][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.952534][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.970989][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.984667][ T2238] Bluetooth: hci1: command 0x0419 tx timeout [ 217.005923][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.035916][ T9914] device veth0_macvtap entered promiscuous mode [ 217.048803][T10111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2283'. [ 217.069188][ T9914] device veth1_macvtap entered promiscuous mode [ 217.134303][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.169700][T10118] block nbd0: NBD_DISCONNECT [ 217.171194][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.218403][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.266996][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.311664][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.369111][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.396105][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.446179][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.474647][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.487928][T10131] loop2: detected capacity change from 0 to 256 [ 217.494489][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2287'. [ 217.565144][T10120] bridge0: port 3(vlan3) entered blocking state [ 217.595172][T10120] bridge0: port 3(vlan3) entered disabled state [ 217.660816][T10133] loop3: detected capacity change from 0 to 512 [ 217.675219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.691106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.708404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.735314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.752199][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.768809][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.801789][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.839263][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.870509][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.912712][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.922602][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.974224][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.027308][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.080858][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.150684][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.188744][ T9914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.212147][ T9914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.261683][ T9914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.304434][ T9914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.595794][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.626303][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.713860][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.760125][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.823062][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.862416][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.871782][T10173] loop0: detected capacity change from 0 to 64 [ 219.027000][T10179] netlink: 'syz.1.2304': attribute type 2 has an invalid length. [ 219.076025][T10179] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2304'. [ 219.305370][T10189] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2305'. [ 219.361850][T10147] loop2: detected capacity change from 0 to 32768 [ 219.499131][T10200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2310'. [ 219.566461][T10147] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 219.987137][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 220.160081][T10214] loop1: detected capacity change from 0 to 4096 [ 220.342396][T10226] device bond_slave_0 entered promiscuous mode [ 220.349227][T10226] device bond_slave_1 entered promiscuous mode [ 220.390851][T10214] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 220.450658][T10226] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.558851][T10226] device bond_slave_0 left promiscuous mode [ 220.564858][T10226] device bond_slave_1 left promiscuous mode [ 220.625244][T10232] loop2: detected capacity change from 0 to 256 [ 220.632301][T10232] exfat: Deprecated parameter 'namecase' [ 220.750489][T10232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 220.981856][T10206] loop0: detected capacity change from 0 to 32768 [ 221.287077][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2328'. [ 221.482623][T10256] loop5: detected capacity change from 0 to 64 [ 221.820103][T10206] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2311 (10206) [ 221.873269][T10206] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 221.922799][T10206] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 221.932569][T10206] BTRFS info (device loop0): use zstd compression, level 3 [ 221.992719][T10206] BTRFS info (device loop0): using free space tree [ 222.012880][T10206] BTRFS info (device loop0): has skinny extents [ 222.159449][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 222.413611][T10206] BTRFS info (device loop0): enabling ssd optimizations [ 222.853987][T10315] loop3: detected capacity change from 0 to 4096 [ 222.959173][T10322] loop5: detected capacity change from 0 to 4096 [ 223.049168][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 223.072817][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 223.080700][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 223.162748][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 223.170634][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 223.223621][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 223.231521][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 223.288078][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 223.295201][T10340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.317012][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 223.335745][T10315] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 223.972771][T10374] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.127857][T10322] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 224.164483][T10380] loop2: detected capacity change from 0 to 256 [ 224.220294][T10322] Remounting filesystem read-only [ 224.660400][T10399] sctp: [Deprecated]: syz.1.2370 (pid 10399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.660400][T10399] Use struct sctp_sack_info instead [ 224.701891][T10380] exfat: Deprecated parameter 'namecase' [ 224.796756][T10401] loop1: detected capacity change from 0 to 256 [ 224.819959][T10380] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 224.842296][ T5890] kernel read not supported for file /dsp1 (pid: 5890 comm: kworker/0:18) [ 224.945833][T10401] FAT-fs (loop1): count of clusters too big (178174) [ 224.983264][T10401] FAT-fs (loop1): Can't find a valid FAT filesystem [ 225.299333][T10418] loop5: detected capacity change from 0 to 256 [ 225.306424][T10397] loop0: detected capacity change from 0 to 32768 [ 225.550603][ T9773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.590199][T10418] FAT-fs (loop5): Directory bread(block 64) failed [ 225.606611][ T9773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.627765][T10418] FAT-fs (loop5): Directory bread(block 65) failed [ 225.685104][T10418] FAT-fs (loop5): Directory bread(block 66) failed [ 225.753055][T10418] FAT-fs (loop5): Directory bread(block 67) failed [ 225.803156][T10418] FAT-fs (loop5): Directory bread(block 68) failed [ 225.839352][T10418] FAT-fs (loop5): Directory bread(block 69) failed [ 225.884848][T10418] FAT-fs (loop5): Directory bread(block 70) failed [ 225.891459][T10418] FAT-fs (loop5): Directory bread(block 71) failed [ 225.978643][ T9773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.015082][T10418] FAT-fs (loop5): Directory bread(block 72) failed [ 226.021685][T10418] FAT-fs (loop5): Directory bread(block 73) failed [ 226.079912][ T9773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.382969][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 226.382982][ T26] audit: type=1800 audit(1752759403.385:191): pid=10418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2379" name="P" dev="loop5" ino=1048775 res=0 errno=0 [ 226.741890][T10414] loop3: detected capacity change from 0 to 32768 [ 226.770987][T10434] loop0: detected capacity change from 0 to 2048 [ 226.794907][T10420] loop1: detected capacity change from 0 to 32768 [ 226.846476][T10434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.859399][T10436] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2387'. [ 226.878891][ T9773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.902736][ T9773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.127865][T10443] loop0: detected capacity change from 0 to 2048 [ 227.210306][T10431] chnl_net:caif_netlink_parms(): no params data found [ 227.241156][T10443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.346795][T10414] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 227.370059][T10414] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 227.380068][T10414] XFS (loop3): Mounting V5 Filesystem [ 227.476085][ T9773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.567131][ T9773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.729532][T10414] XFS (loop3): Ending clean mount [ 227.751243][T10414] XFS (loop3): Quotacheck needed: Please wait. [ 228.113205][T10414] XFS (loop3): Quotacheck: Done. [ 228.114527][ T4184] [ 228.120505][ T4184] ====================================================== [ 228.127513][ T4184] WARNING: possible circular locking dependency detected [ 228.134538][ T4184] 5.15.188-syzkaller #0 Not tainted [ 228.139729][ T4184] ------------------------------------------------------ [ 228.146744][ T4184] syz-executor/4184 is trying to acquire lock: [ 228.152893][ T4184] ffff888051748938 ((wq_completion)loop0){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 228.162639][ T4184] [ 228.162639][ T4184] but task is already holding lock: [ 228.169997][ T4184] ffff88814735d468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 228.178876][ T4184] [ 228.178876][ T4184] which lock already depends on the new lock. [ 228.178876][ T4184] [ 228.189279][ T4184] [ 228.189279][ T4184] the existing dependency chain (in reverse order) is: [ 228.198290][ T4184] [ 228.198290][ T4184] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 228.205772][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 228.211507][ T4184] mutex_lock_killable_nested+0x17/0x20 [ 228.217589][ T4184] lo_open+0x6a/0x100 [ 228.222095][ T4184] blkdev_get_whole+0x90/0x390 [ 228.227382][ T4184] blkdev_get_by_dev+0x2d0/0xa60 [ 228.232839][ T4184] blkdev_open+0x12d/0x2c0 [ 228.237773][ T4184] do_dentry_open+0x7ff/0xf80 [ 228.242971][ T4184] path_openat+0x2682/0x2f30 [ 228.248081][ T4184] do_filp_open+0x1b3/0x3e0 [ 228.253098][ T4184] do_sys_openat2+0x142/0x4a0 [ 228.258294][ T4184] __x64_sys_openat+0x135/0x160 [ 228.263660][ T4184] do_syscall_64+0x4c/0xa0 [ 228.268599][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.275016][ T4184] [ 228.275016][ T4184] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 228.282830][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 228.288552][ T4184] mutex_lock_nested+0x17/0x20 [ 228.293841][ T4184] blkdev_get_by_dev+0x157/0xa60 [ 228.299315][ T4184] swsusp_check+0x9b/0x2a0 [ 228.304254][ T4184] software_resume+0xc6/0x3b0 [ 228.309459][ T4184] resume_store+0xe4/0x130 [ 228.314398][ T4184] kernfs_fop_write_iter+0x379/0x4c0 [ 228.320204][ T4184] vfs_write+0x712/0xd00 [ 228.324964][ T4184] ksys_write+0x14d/0x250 [ 228.329808][ T4184] do_syscall_64+0x4c/0xa0 [ 228.334745][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.341160][ T4184] [ 228.341160][ T4184] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 228.349676][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 228.355401][ T4184] mutex_lock_nested+0x17/0x20 [ 228.360688][ T4184] software_resume+0x7c/0x3b0 [ 228.365884][ T4184] resume_store+0xe4/0x130 [ 228.370817][ T4184] kernfs_fop_write_iter+0x379/0x4c0 [ 228.376622][ T4184] vfs_write+0x712/0xd00 [ 228.381379][ T4184] ksys_write+0x14d/0x250 [ 228.386224][ T4184] do_syscall_64+0x4c/0xa0 [ 228.391158][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.397570][ T4184] [ 228.397570][ T4184] -> #4 (&of->mutex){+.+.}-{3:3}: [ 228.404775][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 228.410497][ T4184] mutex_lock_nested+0x17/0x20 [ 228.415877][ T4184] kernfs_seq_start+0x51/0x3c0 [ 228.421161][ T4184] seq_read_iter+0x3c4/0xd50 [ 228.426385][ T4184] vfs_read+0x725/0xcf0 [ 228.431144][ T4184] ksys_read+0x14d/0x250 [ 228.435986][ T4184] do_syscall_64+0x4c/0xa0 [ 228.440922][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.447335][ T4184] [ 228.447335][ T4184] -> #3 (&p->lock){+.+.}-{3:3}: [ 228.454378][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 228.460099][ T4184] mutex_lock_nested+0x17/0x20 [ 228.465472][ T4184] seq_read_iter+0xad/0xd50 [ 228.470498][ T4184] proc_reg_read_iter+0x1a9/0x270 [ 228.476134][ T4184] generic_file_splice_read+0x3a2/0x590 [ 228.482197][ T4184] splice_direct_to_actor+0x413/0xb50 [ 228.488086][ T4184] do_splice_direct+0x1b9/0x2c0 [ 228.493454][ T4184] do_sendfile+0x5d5/0xec0 [ 228.498395][ T4184] __se_sys_sendfile64+0x13b/0x190 [ 228.504024][ T4184] do_syscall_64+0x4c/0xa0 [ 228.508960][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.515399][ T4184] [ 228.515399][ T4184] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 228.522785][ T4184] lo_write_bvec+0x193/0x770 [ 228.527896][ T4184] loop_process_work+0x1d62/0x2480 [ 228.533530][ T4184] process_one_work+0x863/0x1000 [ 228.538988][ T4184] worker_thread+0xaa8/0x12a0 [ 228.544185][ T4184] kthread+0x436/0x520 [ 228.548769][ T4184] ret_from_fork+0x1f/0x30 [ 228.553709][ T4184] [ 228.553709][ T4184] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 228.562826][ T4184] process_one_work+0x7bf/0x1000 [ 228.568283][ T4184] worker_thread+0xaa8/0x12a0 [ 228.573484][ T4184] kthread+0x436/0x520 [ 228.578072][ T4184] ret_from_fork+0x1f/0x30 [ 228.583005][ T4184] [ 228.583005][ T4184] -> #0 ((wq_completion)loop0){+.+.}-{0:0}: [ 228.591080][ T4184] __lock_acquire+0x2c33/0x7c60 [ 228.596449][ T4184] lock_acquire+0x197/0x3f0 [ 228.601476][ T4184] flush_workqueue+0x142/0x1380 [ 228.606851][ T4184] drain_workqueue+0xcf/0x380 [ 228.612043][ T4184] destroy_workqueue+0x7b/0xb20 [ 228.617414][ T4184] __loop_clr_fd+0x234/0xb90 [ 228.622525][ T4184] blkdev_put+0x53f/0x7d0 [ 228.627375][ T4184] deactivate_locked_super+0x93/0xf0 [ 228.633183][ T4184] cleanup_mnt+0x418/0x4d0 [ 228.638122][ T4184] task_work_run+0x125/0x1a0 [ 228.643233][ T4184] exit_to_user_mode_loop+0x10f/0x130 [ 228.649145][ T4184] exit_to_user_mode_prepare+0xb1/0x140 [ 228.655300][ T4184] syscall_exit_to_user_mode+0x16/0x40 [ 228.661277][ T4184] do_syscall_64+0x58/0xa0 [ 228.666214][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.672627][ T4184] [ 228.672627][ T4184] other info that might help us debug this: [ 228.672627][ T4184] [ 228.682854][ T4184] Chain exists of: [ 228.682854][ T4184] (wq_completion)loop0 --> &disk->open_mutex --> &lo->lo_mutex [ 228.682854][ T4184] [ 228.696326][ T4184] Possible unsafe locking scenario: [ 228.696326][ T4184] [ 228.703774][ T4184] CPU0 CPU1 [ 228.709139][ T4184] ---- ---- [ 228.714506][ T4184] lock(&lo->lo_mutex); [ 228.718748][ T4184] lock(&disk->open_mutex); [ 228.725851][ T4184] lock(&lo->lo_mutex); [ 228.732612][ T4184] lock((wq_completion)loop0); [ 228.737460][ T4184] [ 228.737460][ T4184] *** DEADLOCK *** [ 228.737460][ T4184] [ 228.745621][ T4184] 2 locks held by syz-executor/4184: [ 228.750899][ T4184] #0: ffff8880204f8518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 228.760218][ T4184] #1: ffff88814735d468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 228.769580][ T4184] [ 228.769580][ T4184] stack backtrace: [ 228.775473][ T4184] CPU: 0 PID: 4184 Comm: syz-executor Not tainted 5.15.188-syzkaller #0 [ 228.783805][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.793864][ T4184] Call Trace: [ 228.797148][ T4184] [ 228.800076][ T4184] dump_stack_lvl+0x168/0x230 [ 228.804761][ T4184] ? load_image+0x3b0/0x3b0 [ 228.809269][ T4184] ? show_regs_print_info+0x20/0x20 [ 228.814473][ T4184] ? print_circular_bug+0x12b/0x1a0 [ 228.819678][ T4184] check_noncircular+0x274/0x310 [ 228.824622][ T4184] ? add_chain_block+0x940/0x940 [ 228.829570][ T4184] ? lockdep_lock+0xdc/0x1e0 [ 228.834166][ T4184] ? mark_lock+0x94/0x320 [ 228.838498][ T4184] ? _find_first_zero_bit+0xce/0xf0 [ 228.843702][ T4184] __lock_acquire+0x2c33/0x7c60 [ 228.848566][ T4184] ? verify_lock_unused+0x140/0x140 [ 228.853764][ T4184] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 228.859744][ T4184] ? verify_lock_unused+0x140/0x140 [ 228.864941][ T4184] ? verify_lock_unused+0x140/0x140 [ 228.870140][ T4184] ? verify_lock_unused+0x140/0x140 [ 228.875344][ T4184] ? memset+0x1e/0x40 [ 228.879339][ T4184] lock_acquire+0x197/0x3f0 [ 228.883849][ T4184] ? flush_workqueue+0x126/0x1380 [ 228.888888][ T4184] ? __mutex_trylock_common+0x14f/0x250 [ 228.894443][ T4184] ? read_lock_is_recursive+0x10/0x10 [ 228.899828][ T4184] ? __init_swait_queue_head+0xa5/0x150 [ 228.905385][ T4184] flush_workqueue+0x142/0x1380 [ 228.910268][ T4184] ? flush_workqueue+0x126/0x1380 [ 228.915300][ T4184] ? __lock_acquire+0x7c60/0x7c60 [ 228.920336][ T4184] ? lock_chain_count+0x20/0x20 [ 228.925192][ T4184] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 228.930575][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 228.935863][ T4184] ? rcu_work_rcufn+0x110/0x110 [ 228.940717][ T4184] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 228.946355][ T4184] ? finish_wait+0xc0/0x1d0 [ 228.950863][ T4184] drain_workqueue+0xcf/0x380 [ 228.955545][ T4184] destroy_workqueue+0x7b/0xb20 [ 228.960397][ T4184] __loop_clr_fd+0x234/0xb90 [ 228.964988][ T4184] ? lo_release+0x172/0x1f0 [ 228.969487][ T4184] ? lo_open+0x100/0x100 [ 228.973725][ T4184] blkdev_put+0x53f/0x7d0 [ 228.978057][ T4184] deactivate_locked_super+0x93/0xf0 [ 228.983429][ T4184] cleanup_mnt+0x418/0x4d0 [ 228.987850][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 228.993045][ T4184] task_work_run+0x125/0x1a0 [ 228.997646][ T4184] exit_to_user_mode_loop+0x10f/0x130 [ 229.003017][ T4184] exit_to_user_mode_prepare+0xb1/0x140 [ 229.008562][ T4184] syscall_exit_to_user_mode+0x16/0x40 [ 229.014016][ T4184] do_syscall_64+0x58/0xa0 [ 229.018429][ T4184] ? clear_bhb_loop+0x30/0x80 [ 229.023100][ T4184] ? clear_bhb_loop+0x30/0x80 [ 229.027774][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.033666][ T4184] RIP: 0033:0x7f15520dac57 [ 229.038078][ T4184] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 229.057680][ T4184] RSP: 002b:00007ffc9abbb4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 229.066096][ T4184] RAX: 0000000000000000 RBX: 00007f155215ba8d RCX: 00007f15520dac57 [ 229.074069][ T4184] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9abbb560 [ 229.082039][ T4184] RBP: 00007ffc9abbb560 R08: 0000000000000000 R09: 0000000000000000 [ 229.090014][ T4184] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9abbc5f0 [ 229.097987][ T4184] R13: 00007f155215ba8d R14: 0000000000037a61 R15: 00007ffc9abbc630 [ 229.105971][ T4184] [ 229.108997][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 229.118210][ T5890] Bluetooth: hci4: command 0x0409 tx timeout [ 229.141071][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 229.173978][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.190523][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.228654][T10431] device bridge_slave_0 entered promiscuous mode [ 229.240981][ T4190] XFS (loop3): Unmounting Filesystem [ 230.631950][ T9773] device hsr_slave_0 left promiscuous mode [ 230.648831][ T9773] device hsr_slave_1 left promiscuous mode [ 230.664190][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.671624][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.695332][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.704694][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.714400][ T9773] device bridge_slave_1 left promiscuous mode [ 230.720920][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.736016][ T9773] device bridge_slave_0 left promiscuous mode [ 230.742238][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.764846][ T9773] device bridge0 left promiscuous mode [ 230.776744][ T9773] device veth1_macvtap left promiscuous mode [ 230.784683][ T9773] device veth0_macvtap left promiscuous mode [ 230.790728][ T9773] device veth1_vlan left promiscuous mode [ 230.797787][ T9773] device veth0_vlan left promiscuous mode [ 230.961207][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 230.976587][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 230.992525][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.010395][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.080917][ T9773] bond0 (unregistering): Released all slaves [ 232.124861][ T9773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.135207][ T9773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.188892][ T9773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.199693][ T9773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.257216][ T9773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.267878][ T9773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.320631][ T9773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.332907][ T9773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.434505][ T9773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.476061][ T9773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.526802][ T9773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.568218][ T9773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.661347][ T9773] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.715728][ T9773] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.786236][ T9773] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.847660][ T9773] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.020143][ T9773] device hsr_slave_0 left promiscuous mode [ 234.026671][ T9773] device hsr_slave_1 left promiscuous mode [ 234.032963][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.040370][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.048184][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.056191][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.063931][ T9773] device bridge_slave_1 left promiscuous mode [ 234.070075][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.079134][ T9773] device bridge_slave_0 left promiscuous mode [ 234.085394][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.095427][ T9773] device hsr_slave_0 left promiscuous mode [ 234.101495][ T9773] device hsr_slave_1 left promiscuous mode [ 234.109286][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.116794][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.124680][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.132058][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.139556][ T9773] device bridge_slave_1 left promiscuous mode [ 234.145714][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.153936][ T9773] device bridge_slave_0 left promiscuous mode [ 234.160075][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.169661][ T9773] device hsr_slave_0 left promiscuous mode [ 234.176021][ T9773] device hsr_slave_1 left promiscuous mode [ 234.182107][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.189523][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.197688][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.205258][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.212725][ T9773] device bridge_slave_1 left promiscuous mode [ 234.218850][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.227382][ T9773] device bridge_slave_0 left promiscuous mode [ 234.233676][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.241761][ T9773] device bridge_slave_0 left promiscuous mode [ 234.247996][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.258590][ T9773] device bridge0 left promiscuous mode [ 234.264452][ T9773] device veth1_macvtap left promiscuous mode [ 234.270436][ T9773] device veth0_macvtap left promiscuous mode [ 234.276704][ T9773] device veth1_vlan left promiscuous mode [ 234.282451][ T9773] device veth0_vlan left promiscuous mode [ 234.288715][ T9773] device veth1_macvtap left promiscuous mode [ 234.294810][ T9773] device veth0_macvtap left promiscuous mode [ 234.300823][ T9773] device veth1_vlan left promiscuous mode [ 234.306792][ T9773] device veth0_vlan left promiscuous mode [ 234.313203][ T9773] device veth1_macvtap left promiscuous mode [ 234.319654][ T9773] device veth0_macvtap left promiscuous mode [ 234.325765][ T9773] device veth1_vlan left promiscuous mode [ 234.331506][ T9773] device veth0_vlan left promiscuous mode [ 234.487562][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 234.500528][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 234.510993][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.522370][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.561002][ T9773] bond0 (unregistering): Released all slaves [ 234.675706][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 234.685757][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 234.695205][ T9773]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.708738][ T9773]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.747564][ T9773]  (unregistering): Released all slaves [ 234.854792][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 234.867191][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 234.878006][ T9773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.889428][ T9773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.931115][ T9773] bond0 (unregistering): Released all slaves [ 235.001740][ T9773] bond0 (unregistering): Released all slaves