last executing test programs: 3m31.833383325s ago: executing program 3 (id=8863): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)={0x30, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x1d, 0x0, 0x0, 0x0, [@generic="b90871777c8c3c271c22975c6b62551ef7", @typed={0x8, 0x36, 0x0, 0x0, @fd=r0}]}]}, 0x30}], 0x1}, 0x0) 3m31.679513723s ago: executing program 3 (id=8866): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x0, 0x1, 0x8}, 0x20) 3m31.543429921s ago: executing program 3 (id=8868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3m31.277457285s ago: executing program 3 (id=8872): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000840)=ANY=[@ANYBLOB='keep_last_dots,errors=continue,errors=remount-ro,allow_utime=00000000000000000141077,discard,dmask=00000000000000000000003,iocharset=cp864,utf8,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c6d61736b3d5e4d41595f415050454e442c64656e636f6e746578743d73797361646d5f752c736d61636b66736465663d212c6673636f6e746578743d73746166665f752c736d61636b6673726f6f743d2e212d8f2c2b2c736d61636b6673726f6f743d646d61736b2c6f626a5f747970653df12124215d293a27242c636f6e746578743d73746166665f752c00"], 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m30.815420233s ago: executing program 3 (id=8877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3m29.688644964s ago: executing program 3 (id=8888): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m29.107359475s ago: executing program 32 (id=8888): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.883781441s ago: executing program 5 (id=12091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe0}}, 0x0) 3.832245848s ago: executing program 5 (id=12092): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2}, {0x30, 0xfe, 0x0, 0x1b}, {0x6, 0x4, 0x0, 0xffff0001}]}) open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0x50) 3.672283127s ago: executing program 5 (id=12095): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11}, 0x0) 3.376010843s ago: executing program 5 (id=12100): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e7000905", @ANYRES64], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.23473998s ago: executing program 2 (id=12111): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000300)={0x7, {0x1, 0x1, 0x1, 0xb96}}) 2.999927526s ago: executing program 4 (id=12104): r0 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff050000000000112233ff07000000000000eeff0011", 0x20, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0x0, 0x0) 2.562525355s ago: executing program 4 (id=12107): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.551549413s ago: executing program 2 (id=12108): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x40000e00, 0x34324142, 0x280, 0x101, 0x3, @discrete={0x1, 0x4}}) 2.355071042s ago: executing program 4 (id=12109): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)={[{@shortname_mixed}, {@fat=@nfs}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@utf8}, {@shortname_winnt}, {@numtail}, {@fat=@dos1xfloppy}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0xfd, 0x2a9, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) 2.344950591s ago: executing program 0 (id=12123): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2.228229907s ago: executing program 2 (id=12112): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x80, 0x80, 0x4, 0x0, @multicast2, @rand_addr=0x64010101}}}}) 2.091991869s ago: executing program 0 (id=12113): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) 2.091875492s ago: executing program 4 (id=12114): prctl$PR_CAPBSET_DROP(0x18, 0x0) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000440)={0x0, 0x0, 0x7ff}) 2.029655018s ago: executing program 4 (id=12116): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.88648247s ago: executing program 2 (id=12120): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x1, 0xe}, 'port1\x00', 0x3, 0x100058, 0x3ff, 0x2, 0x7, 0x401, 0xe70, 0x0, 0x6}) 1.854430436s ago: executing program 0 (id=12121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000014c0)={r0, &(0x7f0000001300), 0x0}, 0x20) 1.690601772s ago: executing program 0 (id=12124): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0xc802, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x5fe0, &(0x7f00000023c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1.690411751s ago: executing program 2 (id=12125): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000180)={0x20, 0x10, 0x10, {0x10, 0x4, "c69300ea71f77838320b45b008cb"}}, 0x0}, 0x0) 1.548463473s ago: executing program 5 (id=12126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x134, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.484487633s ago: executing program 5 (id=12128): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) 437.906447ms ago: executing program 1 (id=12132): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x20000, 0x2000003}}, 0x8) 324.315931ms ago: executing program 1 (id=12133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) 323.646638ms ago: executing program 0 (id=12143): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c00450072646d615f636dfa"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 257.224461ms ago: executing program 1 (id=12134): r0 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x9f50, 0x1800}, {0x1, 0x8, 0x1000}], 0x2, 0x0) 208.954216ms ago: executing program 1 (id=12135): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000280)={0x4, @broadcast}) 140.827427ms ago: executing program 0 (id=12136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x34, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0) 139.552067ms ago: executing program 1 (id=12137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x13, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 32.285292ms ago: executing program 2 (id=12138): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 25.129881ms ago: executing program 1 (id=12149): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) 0s ago: executing program 4 (id=12139): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) kernel console output (not intermixed with test programs): s /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1000.029225][T15915] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 1000.179202][ T5622] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1000.202358][T15915] usb 5-1: USB disconnect, device number 127 [ 1000.202525][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1000.336715][ T5622] usb 3-1: Using ep0 maxpacket: 8 [ 1000.338337][ T5622] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1000.341238][ T5622] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.341302][ T5622] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.380798][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.380852][ T5622] usb 3-1: Product: syz [ 1000.380869][ T5622] usb 3-1: Manufacturer: syz [ 1000.380905][ T5622] usb 3-1: SerialNumber: syz [ 1000.426538][ T30] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1000.576473][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1000.582861][ T30] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 1000.595508][ T30] usb 2-1: config 53 has an invalid interface number: 101 but max is 0 [ 1000.603950][ T30] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.614250][ T30] usb 2-1: config 53 has no interface number 0 [ 1000.620617][ T30] usb 2-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1000.632470][ T30] usb 2-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 1000.644295][ T30] usb 2-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1000.654703][ T30] usb 2-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1000.667146][ T30] usb 2-1: config 53 interface 101 altsetting 0 endpoint 0x81 has invalid maxpacket 33040, setting to 64 [ 1000.693468][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.693516][ T30] usb 2-1: Product: syz [ 1000.693554][ T30] usb 2-1: Manufacturer: syz [ 1000.693585][ T30] usb 2-1: SerialNumber: syz [ 1000.720798][T31085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1000.833203][T31104] netlink: 'syz.0.10685': attribute type 1 has an invalid length. [ 1000.841495][T31104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10685'. [ 1000.850751][T31104] netlink: 'syz.0.10685': attribute type 1 has an invalid length. [ 1000.893659][ T5622] usb 3-1: USB disconnect, device number 4 [ 1000.981163][ T30] kvaser_usb 2-1:53.101: error -ENODEV: Cannot get usb endpoint(s) [ 1001.016299][ T30] usb 2-1: USB disconnect, device number 110 [ 1001.061402][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.388073][T15915] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1001.540363][T15915] usb 6-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=56.f2 [ 1001.550910][T15915] usb 6-1: config 127 has an invalid interface number: 6 but max is 0 [ 1001.550963][T15915] usb 6-1: config 127 has no interface number 0 [ 1001.551017][T15915] usb 6-1: config 127 interface 6 has no altsetting 0 [ 1001.567354][T15915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.567435][T15915] usb 6-1: Product: syz [ 1001.567486][T15915] usb 6-1: Manufacturer: syz [ 1001.567538][T15915] usb 6-1: SerialNumber: syz [ 1001.665369][T31135] loop2: detected capacity change from 0 to 256 [ 1001.679401][T31135] exfat: Deprecated parameter 'namecase' [ 1001.679569][T31135] exfat: Deprecated parameter 'namecase' [ 1001.679713][T31135] exfat: Deprecated parameter 'utf8' [ 1001.727389][T31135] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 1001.773267][T31135] overlay: ./file0 is not a directory [ 1001.875848][T31146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10706'. [ 1002.144279][T15915] mct_u232 6-1:127.6: MCT U232 converter detected [ 1002.155154][T15915] mct_u232 ttyUSB0: expected endpoint missing [ 1002.162611][T31156] loop1: detected capacity change from 0 to 1024 [ 1002.180642][T31156] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1002.181486][T15915] usb 6-1: USB disconnect, device number 9 [ 1002.199802][T15915] mct_u232 6-1:127.6: device disconnected [ 1002.230085][T31156] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.10711: lblock 2 mapped to illegal pblock 2 (length 1) [ 1002.230166][T31156] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1002.233069][T31156] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1002.233217][T31156] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.10711: lblock 0 mapped to illegal pblock 48 (length 1) [ 1002.233310][T31156] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1002.235044][T31156] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1002.235094][T31156] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.10711: Failed to acquire dquot type 0 [ 1002.235159][T31156] loop1: lost filesystem error report for type 5 error -117 [ 1002.236512][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 1002.236582][ C0] EXT4-fs (loop1): initial error at time 1786642083: ext4_map_blocks:790: inode 3: block 2 [ 1002.236679][ C0] EXT4-fs (loop1): last error at time 1786642083: ext4_acquire_dquot:7069 [ 1002.237151][T31156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1002.237211][T31156] loop1: lost filesystem error report for type 5 error -117 [ 1002.239436][T31156] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.10711: mark_inode_dirty error [ 1002.239520][T31156] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1002.249584][T31156] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 1002.249853][T31156] EXT4-fs (loop1): 1 orphan inode deleted [ 1002.257614][ T12] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1002.257707][ T12] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1002.261959][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1002.262149][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 1002.262204][ T12] loop1: lost filesystem error report for type 5 error -117 [ 1002.287960][T31156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.357268][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1002.446278][T31156] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.10711: Invalid inode table block 1 in block_group 0 [ 1002.487774][T31156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1002.520008][ T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1002.524256][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.551553][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.551609][ T10] usb 5-1: Product: syz [ 1002.551645][ T10] usb 5-1: Manufacturer: syz [ 1002.551662][ T10] usb 5-1: SerialNumber: syz [ 1002.664143][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.665625][ T1009] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1002.665793][ T1009] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1002.667129][ T1009] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1002.667321][ T1009] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 1002.667431][ T1009] loop1: lost filesystem error report for type 5 error -117 [ 1002.672279][ T5615] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1002.672409][ T5615] loop1: lost filesystem error report for type 5 error -117 [ 1002.673281][ T5615] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1002.673303][ T5615] loop1: lost filesystem error report for type 5 error -117 [ 1002.673765][ T5615] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 1002.673892][ T5615] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1002.674836][ T5615] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1002.674910][ T5615] loop1: lost filesystem error report for type 5 error -117 [ 1002.867997][ T10] snd-usb-caiaq 5-1:1.0: invalid EPs [ 1002.868043][ T10] usb 5-1: unable to init card! (ret=-22) [ 1002.908358][ T10] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 1003.099631][ T10] usb 5-1: USB disconnect, device number 2 [ 1003.120180][T31169] netlink: 84 bytes leftover after parsing attributes in process `syz.5.10717'. [ 1003.120236][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10717'. [ 1003.120273][T31169] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10717'. [ 1003.273238][T31173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10719'. [ 1003.523184][T31188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10726'. [ 1003.533083][T31188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10726'. [ 1003.544057][T31188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10726'. [ 1003.980170][T31210] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10737'. [ 1005.061803][T31258] netlink: 'syz.5.10760': attribute type 28 has an invalid length. [ 1005.061846][T31258] netlink: 'syz.5.10760': attribute type 3 has an invalid length. [ 1005.200310][T31241] loop2: detected capacity change from 0 to 32768 [ 1005.209509][T31241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10752 (31241) [ 1005.241794][T31241] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.252432][T31241] BTRFS info (device loop2): using sha256 checksum algorithm [ 1005.371096][T31241] BTRFS info (device loop2): enabling ssd optimizations [ 1005.371163][T31241] BTRFS info (device loop2): turning on async discard [ 1005.371201][T31241] BTRFS info (device loop2): enabling free space tree [ 1005.396559][T31174] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.435300][T31241] BTRFS info (device loop2): resizing devid 73709551615 [ 1005.435357][T31241] BTRFS info (device loop2): resizer unable to find device 73709551615 [ 1005.519129][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.916864][T31299] __nla_validate_parse: 1 callbacks suppressed [ 1005.917194][T31299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10773'. [ 1005.958558][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1006.107674][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1006.109865][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1006.111254][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1006.111286][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1006.121762][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1006.121834][ T10] usb 5-1: SerialNumber: syz [ 1006.177001][ T10] usb 5-1: 0:2 : does not exist [ 1006.285171][T31307] loop5: detected capacity change from 0 to 1024 [ 1006.361890][T31312] loop2: detected capacity change from 0 to 256 [ 1006.386156][T31307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.404981][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1006.425689][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1006.442438][T31312] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1006.513679][T31312] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 1006.566861][T26922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.699899][ T10] usb 5-1: USB disconnect, device number 3 [ 1006.721108][T31316] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1006.808149][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.921299][T31325] loop2: detected capacity change from 0 to 2048 [ 1006.957572][T31325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.155480][T31334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1007.386329][T31346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10794'. [ 1007.621006][T31357] program syz.4.10800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.772224][T31363] netlink: 'syz.5.10802': attribute type 10 has an invalid length. [ 1007.781378][T31363] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10802'. [ 1007.790989][T31363] dummy0: entered promiscuous mode [ 1007.796316][T31363] dummy0: entered allmulticast mode [ 1007.802865][T31363] bridge0: port 3(dummy0) entered blocking state [ 1007.812156][T31363] bridge0: port 3(dummy0) entered disabled state [ 1007.832844][T31363] bridge0: port 3(dummy0) entered blocking state [ 1007.833384][T31363] bridge0: port 3(dummy0) entered forwarding state [ 1008.202139][T31381] netlink: 'syz.5.10812': attribute type 1 has an invalid length. [ 1008.357699][T31389] loop4: detected capacity change from 0 to 764 [ 1008.368201][T31389] rock: directory entry would overflow storage [ 1008.374524][T31389] rock: sig=0x5245, size=8, remaining=5 [ 1009.202928][T31417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10830'. [ 1009.268112][T31393] orangefs_mount: mount request failed with -4 [ 1009.760110][T31443] binder: 31442:31443 ioctl c0306201 2000000002c0 returned -14 [ 1009.820564][T31445] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1009.844253][T31447] ipvlan1: left promiscuous mode [ 1010.442826][T31473] loop5: detected capacity change from 0 to 1024 [ 1010.800283][T31488] geneve5: entered promiscuous mode [ 1011.135651][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1011.200741][T31505] loop4: detected capacity change from 0 to 1024 [ 1011.235394][T31505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.247844][T15957] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1011.299478][ T30] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1011.311370][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1011.311417][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1011.311473][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.372685][T31505] EXT4-fs error (device loop4): ext4_generic_delete_entry:2675: inode #2: block 16: comm syz.4.10874: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1011.407953][T15957] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1011.419549][T15957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.419616][T15957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1011.419673][T15957] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1011.419702][T15957] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.419749][T15957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.443712][T31505] EXT4-fs error (device loop4) in ext4_delete_entry:2746: Corrupt filesystem [ 1011.485624][T31505] EXT4-fs warning (device loop4): ext4_rename_delete:3741: inode #2: comm syz.4.10874: Deleting old file: nlink 1, error=-117 [ 1011.547005][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.712082][T15957] gud 3-1:1.0: Protocol version 33 is not supported [ 1011.803286][T31516] netlink: 'syz.1.10878': attribute type 3 has an invalid length. [ 1011.813885][T15915] usb 6-1: USB disconnect, device number 10 [ 1011.923069][T15957] usb 3-1: USB disconnect, device number 5 [ 1012.223230][T31535] netlink: 'syz.0.10887': attribute type 21 has an invalid length. [ 1012.232070][T31535] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10887'. [ 1012.241461][T31535] netlink: 'syz.0.10887': attribute type 5 has an invalid length. [ 1012.249599][T31535] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10887'. [ 1012.483032][T31548] loop1: detected capacity change from 0 to 512 [ 1012.530032][T31548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.572113][T31548] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.10893: corrupted xattr block 8: invalid header [ 1012.666520][T15957] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1012.717477][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.828613][T15957] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1012.841662][T15957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.841706][T15957] usb 5-1: Product: syz [ 1012.841738][T15957] usb 5-1: Manufacturer: syz [ 1012.841759][T15957] usb 5-1: SerialNumber: syz [ 1012.873108][T15957] usb 5-1: config 0 descriptor?? [ 1012.882213][T15957] hub 5-1:0.0: bad descriptor, ignoring hub [ 1012.890055][T15957] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1012.898383][T15957] f81232 5-1:0.0: f81534a converter detected [ 1013.012575][T31568] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 1013.101213][T15957] usb 5-1: f81534a converter now attached to ttyUSB0 [ 1013.259119][T31576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10907'. [ 1013.268562][T31576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10907'. [ 1013.270882][T31576] netlink: 'syz.0.10907': attribute type 4 has an invalid length. [ 1013.271046][T31578] : renamed from bond_slave_0 [ 1013.407548][T15915] usb 5-1: USB disconnect, device number 4 [ 1013.420043][T15915] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1013.428886][T15915] f81232 5-1:0.0: device disconnected [ 1013.943035][T31607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10924'. [ 1013.943099][T31607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10924'. [ 1013.945940][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10924'. [ 1014.216325][T31621] loop1: detected capacity change from 0 to 512 [ 1014.229282][T31621] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1014.241513][T31621] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1014.252370][T31621] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1014.262263][T31621] System zones: 0-2, 18-18, 34-35 [ 1014.280675][T31621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.466914][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.579721][T31636] loop5: detected capacity change from 0 to 1024 [ 1014.592179][T31636] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1014.648678][T31636] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.10936: lblock 2 mapped to illegal pblock 2 (length 1) [ 1014.648749][T31636] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1014.650730][T31636] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1014.650860][T31636] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.10936: lblock 0 mapped to illegal pblock 48 (length 1) [ 1014.650948][T31636] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1014.653281][T31636] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1014.653348][T31636] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.10936: Failed to acquire dquot type 0 [ 1014.653413][T31636] loop5: lost filesystem error report for type 5 error -117 [ 1014.654436][T31636] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1014.654501][T31636] loop5: lost filesystem error report for type 5 error -117 [ 1014.655674][T31636] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.10936: mark_inode_dirty error [ 1014.655750][T31636] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1014.662063][T31636] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 1014.663770][T31636] EXT4-fs (loop5): 1 orphan inode deleted [ 1014.681458][ T12] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1014.681551][ T12] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1014.697335][T31636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.718842][ T12] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1014.718963][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 1014.873522][T31612] orangefs_mount: mount request failed with -4 [ 1014.876040][ T12] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm kworker/u8:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 1015.014802][ T12] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1015.014886][ T12] EXT4-fs error (device loop5): ext4_write_dquot:7049: comm kworker/u8:0: Failed to commit dquot type 0 [ 1015.095132][ T12] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1015.126229][T26922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.140690][T26922] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1015.140753][T26922] loop5: lost filesystem error report for type 5 error -117 [ 1015.142158][T26922] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1015.142248][T26922] loop5: lost filesystem error report for type 5 error -117 [ 1015.144354][T26922] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 1015.144429][T26922] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1015.145683][T26922] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1015.145758][T26922] loop5: lost filesystem error report for type 5 error -117 [ 1015.994973][T31679] bond3: option arp_all_targets: invalid value (3) [ 1016.010885][T31679] bond3 (unregistering): Released all slaves [ 1016.364812][T31705] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1016.412942][T31696] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1016.432243][T31696] bond1 (unregistering): Released all slaves [ 1016.597361][T31673] orangefs_mount: mount request failed with -4 [ 1016.763927][T31717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10969'. [ 1016.818679][T31724] loop5: detected capacity change from 0 to 128 [ 1016.848101][T31724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1016.848338][T31724] System zones: 1-3, 19-19, 35-36 [ 1016.878762][T31724] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1016.879236][T31724] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.097663][T26922] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1017.142753][T31736] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1017.269984][T31742] loop5: detected capacity change from 0 to 512 [ 1017.279550][T31742] EXT4-fs: Ignoring removed orlov option [ 1017.331219][T31742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.344005][T31742] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.590198][T26922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.104978][T31774] overlayfs: failed to resolve 'ô$½ÒãW¿­»=ê¥&©(°úU6ÛËmR aM¿]d`Ä­®€ÉùÝÕ­<0&…ˆÉÇŽ°è45h1YáˆYÆ8¥XŠnÌ È¿7лÿ?i­@Å€à|ÌÖfêS—Åù!üúq¦NÑœ§g°MelhÅìScY~çÏÛñiäRV»;,ÉœÌ:‡‹´½€0fWúü·L3噦°ïLL;†Œw/á¨ïž¯i­þcnjïÞƒ¥,Œ¹}e¥,—¸Ë¿•+­Ñ5ûÜÃOƒê+ƒàâ”x†(—c#ŠìúÁô÷Ó˜M®„‘†ûo': -2 [ 1018.284964][T31782] xt_CT: No such helper "snmp_trap" [ 1018.399803][T31785] loop5: detected capacity change from 0 to 2048 [ 1018.443479][T31790] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.592780][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.623592][T31785] Remounting filesystem read-only [ 1018.624548][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.659291][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.672710][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.673267][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.673582][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.674099][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.688546][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1018.713962][T15957] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1018.715285][T31785] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1018.726794][ T31] audit: type=1800 audit(1786642099.865:397): pid=31785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11002" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1018.886543][T15957] usb 5-1: Using ep0 maxpacket: 8 [ 1018.888127][T15957] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1018.891196][T15957] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1018.891267][T15957] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1018.905620][T15957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.905693][T15957] usb 5-1: Product: syz [ 1018.905749][T15957] usb 5-1: Manufacturer: syz [ 1018.905799][T15957] usb 5-1: SerialNumber: syz [ 1018.942103][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1018.951820][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.40 [ 1018.953365][T15957] usb 5-1: config 0 descriptor?? [ 1018.966928][ T10] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1018.966979][ T10] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.967024][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1019.000166][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.008405][ T10] usb 3-1: Product: syz [ 1019.008425][ T10] usb 3-1: Manufacturer: syz [ 1019.008442][ T10] usb 3-1: SerialNumber: syz [ 1019.028339][T15957] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1019.217097][T15957] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1019.218962][T15957] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1019.242962][T15957] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1019.273846][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 1019.273971][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1019.301548][ T10] usb 3-1: USB disconnect, device number 6 [ 1019.411290][T15957] usb 5-1: USB disconnect, device number 5 [ 1019.496656][T15958] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1019.646819][T15958] usb 6-1: Using ep0 maxpacket: 32 [ 1019.648675][T15958] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1019.658329][T15958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.658403][T15958] usb 6-1: Product: syz [ 1019.658445][T15958] usb 6-1: Manufacturer: syz [ 1019.658479][T15958] usb 6-1: SerialNumber: syz [ 1019.685639][T15958] usb 6-1: config 0 descriptor?? [ 1019.709873][T15958] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1019.941240][T31836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11025'. [ 1020.059596][T31838] loop4: detected capacity change from 0 to 64 [ 1020.098279][T31838] syz.4.11027: attempt to access beyond end of device [ 1020.098279][T31838] loop4: rw=8388608, sector=412, nr_sectors = 2 limit=64 [ 1020.131154][T15958] gspca_ov534_9: reg_w failed -71 [ 1020.132151][T31838] Trying to free block not in datazone [ 1020.245298][T31846] netlink: 'syz.1.11030': attribute type 1 has an invalid length. [ 1020.289972][T31848] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 1020.301002][T31848] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1020.311347][T31848] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 1020.433167][T31853] CIFS mount error: No usable UNC path provided in device string! [ 1020.433167][T31853] [ 1020.433225][T31853] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1020.556441][T15958] gspca_ov534_9: Unknown sensor 0000 [ 1020.556552][T15958] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1020.577508][T15958] usb 6-1: USB disconnect, device number 11 [ 1020.656621][ T85] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1020.657544][ T85] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1020.657628][ T85] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1020.657746][ T85] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1021.161701][T31880] loop2: detected capacity change from 0 to 128 [ 1021.173957][T31882] netlink: 'syz.4.11047': attribute type 1 has an invalid length. [ 1021.174038][T31882] netlink: 'syz.4.11047': attribute type 1 has an invalid length. [ 1021.197580][T31884] loop1: detected capacity change from 0 to 2048 [ 1021.206340][T31880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1021.215544][T31884] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1021.230444][T31884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.287755][T31880] FAT-fs (loop2): error, clusters badly computed (5 != 1) [ 1021.295189][T31880] FAT-fs (loop2): Filesystem has been set read-only [ 1021.303077][T31880] FAT-fs (loop2): error, clusters badly computed (6 != 2) [ 1021.311111][T31880] FAT-fs (loop2): error, clusters badly computed (7 != 3) [ 1021.318798][T31880] FAT-fs (loop2): error, clusters badly computed (8 != 4) [ 1021.327491][T31880] FAT-fs (loop2): error, clusters badly computed (9 != 5) [ 1021.341577][T31880] FAT-fs (loop2): error, clusters badly computed (10 != 6) [ 1021.349271][T31880] FAT-fs (loop2): error, clusters badly computed (11 != 7) [ 1021.360703][T31880] FAT-fs (loop2): error, clusters badly computed (12 != 8) [ 1021.368334][T31880] FAT-fs (loop2): error, clusters badly computed (13 != 9) [ 1021.375988][T31880] FAT-fs (loop2): error, clusters badly computed (14 != 10) [ 1022.156558][T15915] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1022.305831][T31930] netlink: 'syz.0.11073': attribute type 1 has an invalid length. [ 1022.317294][T15915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1022.317362][T15915] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1022.337278][T15915] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 1022.345788][T15915] usb 3-1: config 114 has no interface number 0 [ 1022.352889][T15915] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1022.364144][T15915] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1022.376543][T15915] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1022.387192][T15914] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1022.395288][T15915] usb 3-1: config 114 interface 240 has no altsetting 0 [ 1022.406009][T15915] usb 3-1: string descriptor 0 read error: -22 [ 1022.412668][T15915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.426661][T31908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1022.426841][T31908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1022.443878][T15915] ir_usb 3-1:114.240: IR Dongle converter detected [ 1022.548088][T15914] usb 5-1: not running at top speed; connect to a high speed hub [ 1022.548146][T15914] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1022.568107][T15914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1022.581720][T15914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.581794][T15914] usb 5-1: Product: syz [ 1022.581829][T15914] usb 5-1: Manufacturer: syz [ 1022.581850][T15914] usb 5-1: SerialNumber: syz [ 1022.619256][T15914] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1022.628625][T15914] keyspan 5-1:1.0: unsupported endpoint type 0 [ 1022.670069][T15915] usb 3-1: IR Dongle converter now attached to ttyUSB4 [ 1022.683206][T15914] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1022.702338][T15914] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1022.723616][T15914] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1022.764137][T15914] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1022.856946][T15957] usb 3-1: USB disconnect, device number 7 [ 1022.887237][T15957] ir-usb ttyUSB4: IR Dongle converter now disconnected from ttyUSB4 [ 1022.895609][T15957] ir_usb 3-1:114.240: device disconnected [ 1023.046045][T15914] usb 5-1: USB disconnect, device number 6 [ 1023.081905][T15914] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1023.099942][T31946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11080'. [ 1023.127635][T15914] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1023.143628][T15914] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1023.172235][T15914] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1023.186194][T15914] keyspan 5-1:1.0: device disconnected [ 1023.375029][T31938] loop5: detected capacity change from 0 to 32768 [ 1023.395569][T31938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11076 (31938) [ 1023.425035][T31938] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1023.425109][T31938] BTRFS info (device loop5): using crc32c checksum algorithm [ 1023.552993][T31938] BTRFS info (device loop5): setting nodatasum [ 1023.560408][T31938] BTRFS info (device loop5): enabling ssd optimizations [ 1023.568746][T31938] BTRFS info (device loop5): disabling tree log [ 1023.575522][T31938] BTRFS info (device loop5): turning on sync discard [ 1023.582606][T31938] BTRFS info (device loop5): enabling free space tree [ 1023.589712][T31938] BTRFS info (device loop5): enabling auto defrag [ 1023.698295][T31975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11086'. [ 1024.039200][T31987] loop2: detected capacity change from 0 to 256 [ 1024.055747][T31987] exfat: Deprecated parameter 'utf8' [ 1024.061822][T31987] exfat: Deprecated parameter 'namecase' [ 1024.103550][T31987] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1024.641429][T26922] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1024.870553][T32005] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1025.241024][T32020] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11090'. [ 1025.732970][T32040] loop1: detected capacity change from 0 to 512 [ 1025.834833][T32040] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.11117: bad orphan inode 32 [ 1025.845467][T32040] loop1: lost filesystem error report for type 5 error -117 [ 1025.846406][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1025.846441][ C0] EXT4-fs (loop1): initial error at time 1786642106: ext4_orphan_get:1429 [ 1025.846475][ C0] EXT4-fs (loop1): last error at time 1786642106: ext4_orphan_get:1429 [ 1025.877728][T32040] ext4_test_bit(bit=31, block=18) = 0 [ 1025.887184][T32040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.887425][T32040] ext4 filesystem being mounted at /2248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.064874][ T31] audit: type=1800 audit(1786642107.205:398): pid=32040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11117" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1026.118320][T32054] x_tables: duplicate entry at hook 3 [ 1026.126273][T32052] loop4: detected capacity change from 0 to 512 [ 1026.145027][T32052] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: comm syz.4.11120: inode #2147418112: comm syz.4.11120: iget: illegal inode # [ 1026.149685][T32052] loop4: lost filesystem error report for type 5 error -117 [ 1026.150864][T32052] EXT4-fs (loop4): no journal found [ 1026.150910][T32052] EXT4-fs (loop4): can't get journal size [ 1026.166446][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1026.166500][ C1] EXT4-fs (loop4): initial error at time 1786642107: ext4_get_journal_inode:5927 [ 1026.166572][ C1] EXT4-fs (loop4): last error at time 1786642107: ext4_get_journal_inode:5927 [ 1026.186295][T32052] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1026.187995][T32052] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1026.269268][T32057] ieee802154 phy0 wpan0: encryption failed: -90 [ 1026.269271][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.293996][T32052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.510105][T32063] kAFS: No cell specified [ 1026.545853][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.771657][T32074] loop5: detected capacity change from 0 to 512 [ 1026.782145][T32074] FAT-fs (loop5): bogus logical sector size 0 [ 1026.782187][T32074] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1027.195453][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11141'. [ 1027.242193][T32096] loop4: detected capacity change from 0 to 128 [ 1027.300016][T32096] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1027.310216][T32096] ext4 filesystem being mounted at /2239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.451718][ T5612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1027.892781][T32124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.130500][T32132] netlink: 'syz.1.11159': attribute type 29 has an invalid length. [ 1028.352001][T32138] loop5: detected capacity change from 0 to 128 [ 1028.569689][ T31] audit: type=1400 audit(1786642109.715:399): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A20FFFFFFFF pid=32141 comm="syz.1.11165" [ 1028.680120][T32144] sctp: [Deprecated]: syz.4.11166 (pid 32144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1028.680120][T32144] Use struct sctp_sack_info instead [ 1028.855418][T32149] loop1: detected capacity change from 0 to 2048 [ 1028.905212][T32149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.119015][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.561380][ T31] audit: type=1326 audit(1786642110.705:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.561996][ T31] audit: type=1326 audit(1786642110.705:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.585168][ T31] audit: type=1326 audit(1786642110.705:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.585334][ T31] audit: type=1326 audit(1786642110.705:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.586977][ T31] audit: type=1326 audit(1786642110.705:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.587100][ T31] audit: type=1326 audit(1786642110.705:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.587248][ T31] audit: type=1326 audit(1786642110.705:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.588395][ T31] audit: type=1326 audit(1786642110.735:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.1.11183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1029.617309][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1029.780671][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1029.789145][ T30] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1029.800603][ T30] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 1029.800652][ T30] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1029.800693][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.800773][ T30] usb 3-1: config 0 has no interface number 0 [ 1029.835672][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.835732][ T30] usb 3-1: Product: syz [ 1029.835780][ T30] usb 3-1: Manufacturer: syz [ 1029.835835][ T30] usb 3-1: SerialNumber: syz [ 1029.863386][ T30] usb 3-1: config 0 descriptor?? [ 1029.880429][ T30] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1029.880487][ T30] uvcvideo 3-1:0.105: No valid video chain found. [ 1030.123633][T15957] usb 3-1: USB disconnect, device number 8 [ 1030.287915][T32205] netlink: 84 bytes leftover after parsing attributes in process `syz.5.11194'. [ 1030.859110][T32226] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1031.120791][T32220] loop5: detected capacity change from 0 to 32768 [ 1031.132577][T32220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11201 (32220) [ 1031.154573][T32220] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1031.154621][T32220] BTRFS info (device loop5): using sha256 checksum algorithm [ 1031.263092][T32220] BTRFS info (device loop5): enabling ssd optimizations [ 1031.271217][T32220] BTRFS info (device loop5): turning on async discard [ 1031.279276][T32220] BTRFS info (device loop5): enabling free space tree [ 1031.402073][T26922] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1031.692022][T32263] netlink: 'syz.1.11214': attribute type 1 has an invalid length. [ 1031.764252][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11212'. [ 1031.880523][T32267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1032.082821][T32275] loop4: detected capacity change from 0 to 256 [ 1032.523019][T32289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11226'. [ 1032.897830][T32300] loop5: detected capacity change from 0 to 512 [ 1032.905515][T32300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1032.920353][T32300] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1032.920396][T32300] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1032.920589][T32300] System zones: 0-1, 15-15, 18-18, 34-34 [ 1032.921293][T32300] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1032.921475][T32300] __quota_error: 1 callbacks suppressed [ 1032.921510][T32300] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1032.921712][T32300] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1032.921786][T32300] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1032.929840][T32300] EXT4-fs (loop5): 1 truncate cleaned up [ 1032.948625][T32300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1033.137406][T32278] loop2: detected capacity change from 0 to 32768 [ 1033.197803][T26922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.232055][T32278] diRead: diIAGRead returned -5 [ 1033.232188][T32278] jfs_lookup: iget failed on inum 1048352 [ 1033.543110][T32320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1033.908398][T32335] x_tables: unsorted underflow at hook 3 [ 1034.342011][T32356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11256'. [ 1034.438825][T32362] loop2: detected capacity change from 0 to 64 [ 1034.615781][T32370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11263'. [ 1034.756822][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11265'. [ 1034.806253][T32377] xt_hashlimit: max too large, truncated to 1048576 [ 1034.818478][T32377] xt_hashlimit: size too large, truncated to 1048576 [ 1034.819357][T32377] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 1035.008124][T32388] netlink: 'syz.0.11273': attribute type 1 has an invalid length. [ 1035.008166][T32388] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11273'. [ 1035.126519][T15914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1035.276525][T15914] usb 5-1: Using ep0 maxpacket: 8 [ 1035.282965][T15914] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1035.294418][T15914] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1035.294473][T15914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.294499][T15914] usb 5-1: config 0 has no interface number 0 [ 1035.294534][T15914] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1035.294573][T15914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.356169][T15914] usb 5-1: config 0 descriptor?? [ 1035.399029][T32402] loop1: detected capacity change from 0 to 8 [ 1035.412767][T32402] unable to read id index table [ 1035.559641][T32405] comedi comedi0: 8255: I/O base address not correctly aligned [ 1035.639583][T32409] loop2: detected capacity change from 0 to 64 [ 1035.689064][T32409] hfs: request for non-existent node 327680 in B*Tree [ 1035.689104][T32409] hfs: request for non-existent node 327680 in B*Tree [ 1035.845291][T15957] usb 5-1: USB disconnect, device number 7 [ 1036.402713][ T31] audit: type=1326 audit(1786642117.545:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32440 comm="syz.2.11297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1036.430481][ T31] audit: type=1326 audit(1786642117.545:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32440 comm="syz.2.11297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1036.473473][ T31] audit: type=1326 audit(1786642117.615:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32440 comm="syz.2.11297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1036.474151][ T31] audit: type=1326 audit(1786642117.615:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32440 comm="syz.2.11297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1036.474880][ T31] audit: type=1326 audit(1786642117.615:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32440 comm="syz.2.11297" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1037.314355][T32485] loop2: detected capacity change from 0 to 1024 [ 1037.341486][T32485] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1037.341684][T32485] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1037.367787][T32485] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1037.368276][T32485] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1037.387279][T32485] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.11318: Inode bitmap for bg 0 marked uninitialized [ 1037.402236][T32485] loop2: lost filesystem error report for type 5 error -117 [ 1037.403398][T32485] EXT4-fs (loop2): Remounting filesystem read-only [ 1037.410981][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1037.411003][ C0] EXT4-fs (loop2): initial error at time 1786642118: ext4_read_inode_bitmap:169 [ 1037.411030][ C0] EXT4-fs (loop2): last error at time 1786642118: ext4_read_inode_bitmap:169 [ 1037.460972][T32485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1037.534537][T32490] loop1: detected capacity change from 0 to 164 [ 1037.545291][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.620996][T32490] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1037.795296][T32498] loop2: detected capacity change from 0 to 1024 [ 1037.890291][T32498] hfsplus: can't free extent: start 2889, count 1 [ 1037.908711][T32495] bridge0: mtu less than device minimum [ 1037.924093][T32495] bridge0: port 3(dummy0) entered disabled state [ 1037.934827][T32495] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1038.010160][T32506] loop5: detected capacity change from 0 to 256 [ 1038.208124][T32510] 8021q: VLANs not supported on ipvlan0 [ 1038.432494][T32500] loop1: detected capacity change from 0 to 32768 [ 1038.453147][T32500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11326 (32500) [ 1038.477599][T32500] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1038.477658][T32500] BTRFS info (device loop1): using crc32c checksum algorithm [ 1038.508203][T32521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11336'. [ 1038.517716][T32521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11336'. [ 1038.528707][T32521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11336'. [ 1038.637065][T32500] BTRFS info (device loop1): enabling ssd optimizations [ 1038.637119][T32500] BTRFS info (device loop1): turning on flush-on-commit [ 1038.637140][T32500] BTRFS info (device loop1): enabling free space tree [ 1038.637187][T32500] BTRFS info (device loop1): enabling auto defrag [ 1038.637254][T32500] BTRFS info (device loop1): use lzo compression, level 1 [ 1038.637337][T32500] BTRFS info (device loop1): max_inline set to 4096 [ 1038.768938][T32540] loop5: detected capacity change from 0 to 128 [ 1038.846481][T32540] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1038.846585][T32540] hpfs: filesystem error: improperly stopped [ 1038.846610][T32540] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1038.846633][T32540] hpfs: You really don't want any checks? You are crazy... [ 1038.847459][T32540] hpfs: hpfs_map_sector(): read error [ 1038.847483][T32540] hpfs: code page support is disabled [ 1038.847597][T32540] hpfs: hpfs_map_4sectors(): unaligned read [ 1038.847671][T32540] hpfs: hpfs_map_4sectors(): unaligned read [ 1038.847686][T32540] hpfs: filesystem error: unable to find root dir [ 1038.930444][T32540] hpfs: hpfs_map_4sectors(): unaligned read [ 1039.132132][ T5615] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1039.383879][T32557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11347'. [ 1039.690265][T32570] netlink: 312 bytes leftover after parsing attributes in process `syz.2.11354'. [ 1039.972962][T32581] netlink: 'syz.5.11359': attribute type 75 has an invalid length. [ 1040.696052][T32609] netlink: 'syz.2.11373': attribute type 1 has an invalid length. [ 1041.040638][T32625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11381'. [ 1041.040686][T32625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11381'. [ 1041.109115][T32628] netlink: 'syz.0.11383': attribute type 21 has an invalid length. [ 1041.109343][T32628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11383'. [ 1041.232421][T32634] loop4: detected capacity change from 0 to 256 [ 1041.242521][T32634] FAT-fs (loop4): Directory bread(block 1285) failed [ 1041.251973][T32634] FAT-fs (loop4): Directory bread(block 1286) failed [ 1041.259623][T32634] FAT-fs (loop4): Directory bread(block 1287) failed [ 1041.266685][T32634] FAT-fs (loop4): Directory bread(block 1288) failed [ 1041.315244][T32634] FAT-fs (loop4): Directory bread(block 1285) failed [ 1041.315311][T32634] FAT-fs (loop4): Directory bread(block 1286) failed [ 1041.315338][T32634] FAT-fs (loop4): Directory bread(block 1287) failed [ 1041.315426][T32634] FAT-fs (loop4): Directory bread(block 1288) failed [ 1041.315819][T32634] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 1041.701277][T32652] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11395'. [ 1041.799943][T32658] netlink: 'syz.1.11396': attribute type 3 has an invalid length. [ 1041.800006][T32658] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11396'. [ 1042.315786][T32682] bond4: entered promiscuous mode [ 1042.316167][T32682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1042.388192][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1042.448806][T32687] loop4: detected capacity change from 0 to 8 [ 1042.477312][T32687] unable to read xattr id index table [ 1042.561437][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1042.572913][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.585812][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.585858][ T10] usb 3-1: Product: syz [ 1042.585892][ T10] usb 3-1: Manufacturer: syz [ 1042.585915][ T10] usb 3-1: SerialNumber: syz [ 1042.618026][ T10] usb 3-1: config 0 descriptor?? [ 1042.636014][ T31] audit: type=1400 audit(1786642123.775:414): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=32692 comm="syz.0.11413" [ 1042.659693][ T10] adutux 3-1:0.0: interrupt endpoints not found [ 1042.840107][ T10] usb 3-1: USB disconnect, device number 9 [ 1042.965362][T32705] loop1: detected capacity change from 0 to 128 [ 1042.977998][T32705] adfs: Unknown parameter 'appraise_type' [ 1043.017539][T32708] netlink: 'syz.4.11421': attribute type 46 has an invalid length. [ 1043.433016][T32729] loop5: detected capacity change from 0 to 256 [ 1043.563762][T32736] kAFS: unparsable volume name [ 1043.574931][T32735] loop4: detected capacity change from 0 to 64 [ 1043.909307][T32742] bond5: option min_links: invalid value (18446744073709551608) [ 1043.909359][T32742] bond5: option min_links: allowed values 0 - 2147483647 [ 1043.942543][T32754] xt_addrtype: ipv6 does not support BROADCAST matching [ 1043.943337][T32742] bond5 (unregistering): Released all slaves [ 1044.128970][ T31] audit: type=1326 audit(1786642125.275:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32761 comm="syz.2.11445" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1044.155735][ T31] audit: type=1326 audit(1786642125.305:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32761 comm="syz.2.11445" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1044.186933][ T31] audit: type=1326 audit(1786642125.335:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32761 comm="syz.2.11445" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1044.213512][ T31] audit: type=1326 audit(1786642125.365:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32761 comm="syz.2.11445" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3df9e0d9 code=0x7ffc0000 [ 1044.301158][T32766] netlink: 'syz.4.11448': attribute type 1 has an invalid length. [ 1044.309222][T32766] __nla_validate_parse: 1 callbacks suppressed [ 1044.315607][T32766] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11448'. [ 1044.836872][T15915] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1044.987922][T15915] usb 5-1: Using ep0 maxpacket: 16 [ 1044.993903][T15915] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1045.004459][T15915] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 1045.013904][T15915] usb 5-1: config 0 has no interface number 0 [ 1045.023498][T15915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.031838][T15915] usb 5-1: Product: syz [ 1045.036220][T15915] usb 5-1: Manufacturer: syz [ 1045.040981][T15915] usb 5-1: SerialNumber: syz [ 1045.050372][T15915] usb 5-1: config 0 descriptor?? [ 1045.097142][T15915] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1045.117158][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1045.268502][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1045.279359][ T10] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1045.279406][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1045.302992][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.311217][ T10] usb 6-1: Product: syz [ 1045.311239][ T10] usb 6-1: Manufacturer: syz [ 1045.311258][ T10] usb 6-1: SerialNumber: syz [ 1045.335488][ T10] usb 6-1: config 0 descriptor?? [ 1045.342205][ T1286] usb 5-1: Failed to submit usb control message: -71 [ 1045.342588][T15958] usb 5-1: USB disconnect, device number 8 [ 1045.367645][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1045.374429][ T1286] usb 5-1: unable to send the bmi data to the device: -71 [ 1045.377284][ T344] netlink: 'syz.1.11469': attribute type 23 has an invalid length. [ 1045.390668][ T1286] usb 5-1: unable to get target info from device [ 1045.397201][ T1286] usb 5-1: could not get target info (-71) [ 1045.407846][ T1286] usb 5-1: could not probe fw (-71) [ 1045.643664][ T349] libceph: resolve '0' (ret=-3): failed [ 1045.730598][ T352] kAFS: unable to lookup cell '(,Ì' [ 1045.779080][ T10] usb 6-1: USB disconnect, device number 12 [ 1045.794957][ T355] ubi0: attaching mtd0 [ 1045.833681][ T355] ubi0: scanning is finished [ 1045.840285][ T355] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1045.889771][ T357] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11474'. [ 1045.899460][ T357] unsupported nlmsg_type 40 [ 1046.071125][ T355] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1046.362792][ T31] audit: type=1326 audit(1786642127.505:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=373 comm="syz.1.11482" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1046.362874][ T31] audit: type=1326 audit(1786642127.505:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=373 comm="syz.1.11482" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1046.414568][ T31] audit: type=1326 audit(1786642127.565:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=373 comm="syz.1.11482" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1046.414629][ T31] audit: type=1326 audit(1786642127.565:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=373 comm="syz.1.11482" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1046.441587][ T31] audit: type=1326 audit(1786642127.565:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=373 comm="syz.1.11482" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7faf66d9e0d9 code=0x7ffc0000 [ 1046.630618][ T384] ip6t_srh: unknown srh invflags 5040 [ 1047.110800][ T404] cgroup: name respecified [ 1047.387451][ T30] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1047.457946][ T419] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1047.556757][ T30] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1047.566091][ T30] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 1047.566155][ T30] usb 2-1: config 0 has no interface number 1 [ 1047.566329][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.610707][ T30] usb 2-1: config 0 descriptor?? [ 1047.660914][ T423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.838266][ T30] qcserial 2-1:0.2: Qualcomm USB modem converter detected [ 1048.055213][ T30] usb 2-1: USB disconnect, device number 111 [ 1048.061376][ T30] qcserial 2-1:0.2: device disconnected [ 1048.360114][ T452] netlink: 628 bytes leftover after parsing attributes in process `syz.4.11519'. [ 1049.136790][ T480] ip6t_srh: unknown srh match flags FF3F [ 1049.490778][ T494] netlink: 'syz.4.11540': attribute type 1 has an invalid length. [ 1049.490816][ T494] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11540'. [ 1049.606931][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1049.736288][ T506] loop4: detected capacity change from 0 to 64 [ 1049.763618][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1049.769939][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1049.780579][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.780645][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1049.780686][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1049.780715][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 1049.780746][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 253 [ 1049.780775][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1049.849677][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1049.849723][ T10] usb 2-1: SerialNumber: syz [ 1049.869809][ T488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1049.879475][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1049.888930][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 1050.031725][ T513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11549'. [ 1050.041118][ T513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11549'. [ 1050.080177][T17386] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 1050.098999][T15958] usb 2-1: USB disconnect, device number 112 [ 1050.154657][ T519] netlink: 'syz.0.11550': attribute type 10 has an invalid length. [ 1050.154710][ T519] openvswitch: netlink: Flow key attr not present in new flow. [ 1050.217700][ T30] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1050.273738][ T523] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 1050.285595][ T523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.377597][ T30] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1050.380681][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1050.380809][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.410494][ T30] usb 3-1: config 0 descriptor?? [ 1050.466455][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1050.625438][ T30] ath6kl: Failed to submit usb control message: -71 [ 1050.625524][ T30] ath6kl: unable to send the bmi data to the device: -71 [ 1050.625543][ T30] ath6kl: Unable to send get target info: -71 [ 1050.659542][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1050.659620][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1050.669708][ T30] ath6kl: Failed to init ath6kl core: -71 [ 1050.689302][ T10] usb 6-1: config 1 has an invalid interface number: 194 but max is 1 [ 1050.689348][ T10] usb 6-1: config 1 has no interface number 1 [ 1050.689403][ T10] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1050.689438][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1050.724353][ T30] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1050.740597][ T30] usb 3-1: USB disconnect, device number 10 [ 1050.750613][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.759927][ T10] usb 6-1: Product: syz [ 1050.764428][ T10] usb 6-1: Manufacturer: syz [ 1050.769596][ T10] usb 6-1: SerialNumber: syz [ 1051.007460][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 1051.024237][ T10] smsusb:smsusb_probe: board id=8, interface number 194 [ 1051.038573][ T10] usb 6-1: USB disconnect, device number 13 [ 1051.206461][T15915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1051.371065][T15915] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 1051.382299][T15915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.382369][T15915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1051.382423][T15915] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1051.382453][T15915] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1051.382503][T15915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.453682][T15915] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 1051.684722][ T2363] pvrusb2: Failed to submit write-control URB status=-90 [ 1051.684787][ T2363] pvrusb2: Device being rendered inoperable [ 1051.728109][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1051.744541][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1051.781890][ T582] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11583'. [ 1051.906184][ T30] usb 5-1: USB disconnect, device number 9 [ 1052.095804][ T597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11589'. [ 1052.184706][ T603] x_tables: duplicate underflow at hook 2 [ 1052.256145][ T605] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11592'. [ 1052.817368][ T608] loop2: detected capacity change from 0 to 32768 [ 1052.832639][ T608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11594 (608) [ 1052.854738][ T608] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1052.865553][ T608] BTRFS info (device loop2): using crc32c checksum algorithm [ 1052.989898][ T608] BTRFS info (device loop2): setting nodatasum [ 1053.003027][ T608] BTRFS info (device loop2): enabling ssd optimizations [ 1053.010294][ T608] BTRFS info (device loop2): disabling tree log [ 1053.016750][ T608] BTRFS info (device loop2): turning on sync discard [ 1053.023662][ T608] BTRFS info (device loop2): enabling free space tree [ 1053.030651][ T608] BTRFS info (device loop2): enabling auto defrag [ 1053.105605][ T5613] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1053.137291][ T647] loop5: detected capacity change from 0 to 764 [ 1053.233096][ T647] Symlink component flag not implemented [ 1053.233137][ T647] Symlink component flag not implemented [ 1053.233390][ T647] Symlink component flag not implemented (129) [ 1053.233424][ T647] Symlink component flag not implemented (6) [ 1053.496509][ T10] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1053.649334][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1053.660640][ T10] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1053.660695][ T10] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1053.660723][ T10] usb 2-1: config 0 has no interface number 0 [ 1053.660835][ T10] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1053.660869][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1053.660910][ T10] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.660945][ T10] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1053.735539][ T653] loop4: detected capacity change from 0 to 32768 [ 1053.735555][ T10] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1053.735586][ T10] usb 2-1: Product: syz [ 1053.735624][ T10] usb 2-1: SerialNumber: syz [ 1053.779140][ T10] usb 2-1: config 0 descriptor?? [ 1053.910604][ T653] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1054.045518][ T10] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input63 [ 1054.219904][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 1054.235396][T15957] usb 2-1: USB disconnect, device number 113 [ 1054.261145][ T4967] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1054.525970][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.816567][ T692] netlink: 'syz.2.11629': attribute type 11 has an invalid length. [ 1054.865317][ T695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11620'. [ 1054.943458][ T700] loop1: detected capacity change from 0 to 256 [ 1054.951050][ T700] exfat: Deprecated parameter 'utf8' [ 1054.956736][ T700] exfat: Deprecated parameter 'namecase' [ 1054.962743][ T700] exfat: Deprecated parameter 'namecase' [ 1055.024663][ T700] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1055.185592][ T710] misc userio: Invalid payload size [ 1055.322320][ T716] loop2: detected capacity change from 0 to 1024 [ 1055.343512][ T716] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1055.382898][ T716] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.11639: lblock 1 mapped to illegal pblock 1 (length 1) [ 1055.382982][ T716] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1055.383762][ T716] __quota_error: 4 callbacks suppressed [ 1055.383806][ T716] Quota error (device loop2): write_blk: dquota write failed [ 1055.383890][ T716] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1055.384064][ T716] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.11639: Failed to acquire dquot type 0 [ 1055.384128][ T716] loop2: lost filesystem error report for type 5 error -117 [ 1055.395480][ T716] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.11639: Freeing blocks not in datazone - block = 0, count = 4096 [ 1055.395575][ T716] loop2: lost filesystem error report for type 5 error -117 [ 1055.399792][ T716] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.11639: Invalid inode bitmap blk 0 in block_group 0 [ 1055.399847][ T716] loop2: lost filesystem error report for type 5 error -117 [ 1055.402458][ T716] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1055.402716][ T716] loop2: lost filesystem error report for type 5 error -117 [ 1055.405218][ T716] EXT4-fs (loop2): 1 orphan inode deleted [ 1055.412856][ T12] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1055.412951][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1055.415005][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1055.415104][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 1055.415166][ T12] loop2: lost filesystem error report for type 5 error -117 [ 1055.573656][ T716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.596260][ T724] loop1: detected capacity change from 0 to 512 [ 1055.623223][ T724] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.11641: corrupted in-inode xattr: invalid ea_ino [ 1055.623291][ T724] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1055.624006][ T724] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.11641: couldn't read orphan inode 15 (err -117) [ 1055.624045][ T724] loop1: lost filesystem error report for type 5 error -117 [ 1055.665411][ T724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.720716][ T730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11647'. [ 1055.864418][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.875385][ T5613] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 1055.875445][ T5613] loop2: lost filesystem error report for type 5 error -117 [ 1055.915242][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.116059][ T749] netlink: 'syz.5.11654': attribute type 16 has an invalid length. [ 1056.116102][ T749] netlink: 'syz.5.11654': attribute type 17 has an invalid length. [ 1056.134155][ T747] team0: entered allmulticast mode [ 1056.141053][ T747] team_slave_0: entered allmulticast mode [ 1056.147404][ T747] ±ÿ: entered allmulticast mode [ 1056.153575][ T747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.165607][ T747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1056.208093][ T749] gre0: left promiscuous mode [ 1056.208133][ T749] gre0: left allmulticast mode [ 1056.279221][ T754] netlink: 'syz.4.11657': attribute type 21 has an invalid length. [ 1056.336469][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1056.490693][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1056.499157][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1056.499208][ T10] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=17.93 [ 1056.501453][ T749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.503824][ T749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.518838][ T10] usb 3-1: config 254 has an invalid interface number: 163 but max is 0 [ 1056.518866][ T10] usb 3-1: config 254 has no interface number 0 [ 1056.518899][ T10] usb 3-1: config 254 interface 163 has no altsetting 0 [ 1056.557191][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.565310][ T10] usb 3-1: Product: syz [ 1056.569729][ T10] usb 3-1: Manufacturer: syz [ 1056.574443][ T10] usb 3-1: SerialNumber: syz [ 1056.676193][ T763] loop1: detected capacity change from 0 to 256 [ 1056.724737][ T763] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00010001) [ 1056.724788][ T763] exFAT-fs (loop1): Filesystem has been set read-only [ 1056.724816][ T763] exFAT-fs (loop1): failed to count the number of clusters in root [ 1056.724831][ T763] exFAT-fs (loop1): failed to recognize exfat type [ 1056.865802][ T10] mxuport 3-1:254.163: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1056.876988][ T10] mxuport 3-1:254.163: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1056.877055][ T10] mxuport 3-1:254.163: probe with driver mxuport failed with error -71 [ 1056.900199][ T749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.919972][ T10] usb 3-1: USB disconnect, device number 11 [ 1056.926911][ T749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.947778][ T6039] udevd[6039]: setting owner of /dev/bus/usb/003/011 to uid=0, gid=0 failed: No such file or directory [ 1057.027205][T15958] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1057.064760][ T749] macvtap0: left promiscuous mode [ 1057.191562][T15958] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1057.195340][T15958] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1057.195413][T15958] usb 2-1: config 0 has no interface number 0 [ 1057.195517][T15958] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 19183, setting to 64 [ 1057.195632][T15958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.239571][T15958] usb 2-1: config 0 descriptor?? [ 1057.243658][ T763] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1057.282062][T15958] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input64 [ 1057.551581][ T10] usb 2-1: USB disconnect, device number 114 [ 1057.631159][ T786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1057.693272][ T749] bond1: left promiscuous mode [ 1057.693338][ T749] bond1: left allmulticast mode [ 1057.726906][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.728834][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.728948][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.729043][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.029970][ T796] loop2: detected capacity change from 0 to 4096 [ 1058.041311][ T796] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1058.065158][ T801] netlink: 'syz.0.11679': attribute type 3 has an invalid length. [ 1058.130247][ T796] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1058.132586][ T796] ntfs3(loop2): ino=1a, mi_enum_attr [ 1058.133088][ T796] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1058.162717][ T796] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1058.299572][ T809] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.103473][ T846] loop4: detected capacity change from 0 to 256 [ 1059.113764][ T846] exfat: Deprecated parameter 'namecase' [ 1059.113984][ T846] exfat: Deprecated parameter 'utf8' [ 1059.164194][ T846] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x3168f471, utbl_chksum : 0xe619d30d) [ 1059.410134][ T857] loop5: detected capacity change from 0 to 512 [ 1059.461632][ T857] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1059.503772][ T857] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1059.503982][ T857] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1059.504053][ T857] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.11706: Failed to acquire dquot type 1 [ 1059.504132][ T857] loop5: lost filesystem error report for type 5 error -117 [ 1059.517848][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1059.517927][ C1] EXT4-fs (loop5): last error at time 1786642140: ext4_acquire_dquot:7069 [ 1059.537740][ T857] EXT4-fs (loop5): 1 truncate cleaned up [ 1059.586838][ T857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1059.634892][ T857] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1059.635067][ T857] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1059.635149][ T857] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.11706: Failed to acquire dquot type 1 [ 1059.824203][T26922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1060.045982][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11719'. [ 1060.065515][ T884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11719'. [ 1060.147107][ T872] loop2: detected capacity change from 0 to 32768 [ 1060.177154][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1060.218814][ T872] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 1060.218814][ T872] [ 1060.224391][ T872] ERROR: (device loop2): remounting filesystem as read-only [ 1060.224453][ T872] ialloc: diAlloc returned -5! [ 1060.328726][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1060.336694][ T10] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1060.347156][ T10] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 1060.355632][ T10] usb 2-1: config 114 has no interface number 0 [ 1060.365371][ T10] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1060.376063][ T10] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1060.388532][ T10] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1060.399190][ T10] usb 2-1: config 114 interface 240 has no altsetting 0 [ 1060.417186][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1060.417357][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.435744][ T878] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1060.443347][ T878] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1060.457652][ T10] ir_usb 2-1:114.240: IR Dongle converter detected [ 1060.526488][ T5622] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1060.557688][ T897] usb usb1: check_ctrlrecip: process 897 (syz.0.11724) requesting ep 01 but needs 81 [ 1060.557773][ T897] usb usb1: usbfs: process 897 (syz.0.11724) did not claim interface 0 before use [ 1060.582087][ T899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11726'. [ 1060.680366][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 1060.685816][ T10] usb 2-1: IRDA class descriptor not found, device not bound [ 1060.701047][ T5622] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1060.711890][ T5622] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1060.723415][ T5622] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1060.737489][ T5622] usb 5-1: string descriptor 0 read error: -22 [ 1060.743948][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.759439][ T890] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1060.775007][ T5622] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1060.783890][ T5622] usb 5-1: MIDIStreaming interface descriptor not found [ 1060.939128][T15957] usb 2-1: USB disconnect, device number 115 [ 1061.162590][T15957] usb 5-1: USB disconnect, device number 10 [ 1061.266494][ T5622] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1061.351763][ T930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11738'. [ 1061.419363][ T5622] usb 6-1: Using ep0 maxpacket: 8 [ 1061.426848][ T5622] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1061.434728][ T5622] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=35.92 [ 1061.445120][ T5622] usb 6-1: config 7 has an invalid interface number: 18 but max is 0 [ 1061.453364][ T5622] usb 6-1: config 7 has no interface number 0 [ 1061.459760][ T5622] usb 6-1: config 7 interface 18 has no altsetting 0 [ 1061.471587][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.471645][ T5622] usb 6-1: Product: syz [ 1061.471668][ T5622] usb 6-1: Manufacturer: syz [ 1061.471690][ T5622] usb 6-1: SerialNumber: syz [ 1061.708543][ T5622] hub 6-1:7.18: bad descriptor, ignoring hub [ 1061.708612][ T5622] hub 6-1:7.18: probe with driver hub failed with error -5 [ 1061.723143][ T5622] kl5kusb105 6-1:7.18: KL5KUSB105D / PalmConnect converter detected [ 1061.735853][ T5622] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1061.807239][ T5622] usb 6-1: USB disconnect, device number 14 [ 1061.825088][ T5622] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1061.835853][ T5622] kl5kusb105 6-1:7.18: device disconnected [ 1062.124866][ T967] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.11751'. [ 1062.203429][ T971] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1062.821110][ T998] program syz.0.11766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.078372][ T1011] netlink: 'syz.1.11772': attribute type 1 has an invalid length. [ 1063.155350][ T982] loop5: detected capacity change from 0 to 32768 [ 1063.182615][ T982] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1063.357742][ T982] XFS (loop5): Ending clean mount [ 1063.459899][ T1033] loop4: detected capacity change from 0 to 256 [ 1063.486941][ T1033] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1063.503111][ T1033] FAT-fs (loop4): Filesystem has been set read-only [ 1063.574504][T26922] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1063.800021][ T31] audit: type=1326 audit(1786642144.945:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.841043][ T31] audit: type=1326 audit(1786642144.985:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.867921][ T31] audit: type=1326 audit(1786642144.985:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.894050][ T31] audit: type=1326 audit(1786642144.985:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.920572][ T31] audit: type=1326 audit(1786642144.985:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.947935][ T31] audit: type=1326 audit(1786642145.095:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.974020][ T31] audit: type=1326 audit(1786642145.095:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1063.999964][ T31] audit: type=1326 audit(1786642145.095:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1045 comm="syz.4.11780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1064.411799][ T1066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11789'. [ 1064.497985][ T1069] loop5: detected capacity change from 0 to 512 [ 1064.570958][ T1069] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 1064.575565][ T1069] EXT4-fs (loop5): Remounting filesystem read-only [ 1064.594938][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1064.595015][ C1] EXT4-fs (loop5): initial error at time 1786642145: ext4_mb_generate_buddy:1317 [ 1064.595098][ C1] EXT4-fs (loop5): last error at time 1786642145: ext4_mb_generate_buddy:1317 [ 1064.611499][ T1069] EXT4-fs (loop5): 1 truncate cleaned up [ 1064.633837][ T12] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 1064.634289][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1064.634344][ T12] Quota error (device loop5): write_blk: dquota write failed [ 1064.634388][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1064.634633][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 1064.663103][ T1069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.663374][ T1069] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.861423][T26922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.260281][ T1097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11801'. [ 1065.270112][ T1097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11801'. [ 1065.279967][ T1097] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11801'. [ 1065.534970][ T1105] ubi0: attaching mtd0 [ 1065.585396][ T1105] ubi0: scanning is finished [ 1065.615990][ T1105] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1066.106084][ T1105] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1066.137738][ T1118] bond1: option min_links: invalid value (18446744073709551608) [ 1066.146227][ T1118] bond1: option min_links: allowed values 0 - 2147483647 [ 1066.173025][ T1118] bond1 (unregistering): Released all slaves [ 1067.037788][ T1150] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1067.115282][ T1127] loop5: detected capacity change from 0 to 40427 [ 1067.127905][ T1127] F2FS-fs (loop5): build fault injection rate: 19 [ 1067.134528][ T1127] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 1067.142935][ T1127] F2FS-fs (loop5): invalid crc value [ 1067.169649][ T1127] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820 [ 1067.443302][ T1127] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 1067.479765][ T1127] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1067.587886][ T1127] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1067.635514][ T1127] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 1067.792422][ C1] F2FS-fs (loop5): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50 [ 1067.792780][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 1067.792836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1067.792864][ C1] Call Trace: [ 1067.792875][ C1] [ 1067.792887][ C1] dump_stack_lvl+0xe8/0x150 [ 1067.792936][ C1] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1067.792973][ C1] f2fs_write_end_bio+0x1211/0x16e0 [ 1067.793012][ C1] ? blkg_put+0x22/0x240 [ 1067.793057][ C1] blk_update_request+0x57b/0xe50 [ 1067.793102][ C1] blk_mq_end_request+0x3e/0x70 [ 1067.793136][ C1] blk_flush_complete_seq+0x68a/0xce0 [ 1067.793216][ C1] flush_end_io+0xb7e/0xe90 [ 1067.793263][ C1] __blk_mq_end_request+0x461/0x600 [ 1067.793301][ C1] blk_done_softirq+0x10a/0x160 [ 1067.793371][ C1] handle_softirqs+0x226/0x860 [ 1067.793408][ C1] ? schedule+0x90/0x2b0 [ 1067.793439][ C1] ? run_ksoftirqd+0x36/0x60 [ 1067.793482][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1067.793517][ C1] run_ksoftirqd+0x36/0x60 [ 1067.793551][ C1] smpboot_thread_fn+0x565/0xa70 [ 1067.793581][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1067.793614][ C1] kthread+0x38b/0x480 [ 1067.793632][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1067.793661][ C1] ? __pfx_kthread+0x10/0x10 [ 1067.793680][ C1] ret_from_fork+0x514/0xb70 [ 1067.793714][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.793747][ C1] ? __switch_to+0xc89/0x1420 [ 1067.793778][ C1] ? __pfx_kthread+0x10/0x10 [ 1067.793797][ C1] ret_from_fork_asm+0x1a/0x30 [ 1067.793840][ C1] [ 1067.793848][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1067.916713][T26922] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 1068.072175][ T1188] netlink: 'syz.2.11843': attribute type 1 has an invalid length. [ 1068.072218][ T1188] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.11843'. [ 1068.378416][ T30] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1068.483000][ T1203] loop2: detected capacity change from 0 to 1024 [ 1068.522800][ T1203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1068.537929][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 1068.543645][ T30] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1068.555587][ T30] usb 2-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1068.570053][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.570105][ T30] usb 2-1: Product: syz [ 1068.570124][ T30] usb 2-1: Manufacturer: syz [ 1068.570171][ T30] usb 2-1: SerialNumber: syz [ 1068.598893][ T30] usb 2-1: config 0 descriptor?? [ 1068.625922][ T30] cdc_ether 2-1:0.0: missing cdc header descriptor [ 1068.627035][ T30] usb 2-1: unsupported MDLM descriptors [ 1068.731591][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1068.750781][ T1195] loop4: detected capacity change from 0 to 40427 [ 1068.772101][ T1195] F2FS-fs (loop4): build fault injection rate: 14 [ 1068.778796][ T1195] F2FS-fs (loop4): build fault injection type: 0xe4 [ 1068.790672][ T1195] F2FS-fs (loop4): invalid crc value [ 1068.840002][ T5622] usb 2-1: USB disconnect, device number 116 [ 1068.861872][ T1195] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820 [ 1069.142543][ T1195] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1069.243180][ T1195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1069.291669][ T1195] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0 [ 1069.984406][ T1242] netlink: 'syz.1.11868': attribute type 1 has an invalid length. [ 1069.984457][ T1242] netlink: 'syz.1.11868': attribute type 12 has an invalid length. [ 1069.984473][ T1242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11868'. [ 1070.723501][ T1236] loop5: detected capacity change from 0 to 32768 [ 1070.755608][ T1236] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1070.869406][ T1236] XFS (loop5): Ending clean mount [ 1070.909259][ T1270] netlink: 'syz.1.11875': attribute type 3 has an invalid length. [ 1070.909308][ T1270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11875'. [ 1070.985003][T26922] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1071.131838][ T1278] loop4: detected capacity change from 0 to 512 [ 1071.162404][ T1276] loop1: detected capacity change from 0 to 2048 [ 1071.212574][ T1276] Dev loop1: RDB in block 1 has bad checksum [ 1071.720417][ T1295] netlink: 'syz.1.11888': attribute type 5 has an invalid length. [ 1072.065689][ T1312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.424750][ T1326] loop1: detected capacity change from 0 to 512 [ 1072.484490][ T1326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.512186][ T1326] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.11901: corrupted xattr block 33: invalid header [ 1072.848690][ T1343] loop4: detected capacity change from 0 to 256 [ 1072.866157][ T1343] FAT-fs (loop4): Directory bread(block 1285) failed [ 1072.873083][ T1343] FAT-fs (loop4): Directory bread(block 1286) failed [ 1072.879841][ T1343] FAT-fs (loop4): Directory bread(block 1287) failed [ 1072.880042][ T1343] FAT-fs (loop4): Directory bread(block 1288) failed [ 1072.969302][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.011223][ T1343] FAT-fs (loop4): Directory bread(block 1285) failed [ 1073.011283][ T1343] FAT-fs (loop4): Directory bread(block 1286) failed [ 1073.011310][ T1343] FAT-fs (loop4): Directory bread(block 1287) failed [ 1073.011420][ T1343] FAT-fs (loop4): Directory bread(block 1288) failed [ 1073.011605][ T1343] FAT-fs (loop4): Directory bread(block 1285) failed [ 1073.011670][ T1343] FAT-fs (loop4): Directory bread(block 1286) failed [ 1073.358048][ T1360] loop5: detected capacity change from 0 to 256 [ 1073.378545][ T1360] exfat: Deprecated parameter 'namecase' [ 1073.404385][ T1360] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0bdbf928, utbl_chksum : 0xe619d30d) [ 1073.814543][ T1375] loop1: detected capacity change from 0 to 256 [ 1073.828098][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1073.833545][ T1375] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1073.927891][ T13] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1073.976631][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 1073.980008][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1073.995653][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1073.995719][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1073.995749][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1073.995812][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1073.995904][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1073.996031][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.061271][ T30] usb 5-1: config 0 descriptor?? [ 1074.087579][ T1366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1074.125554][ T1382] netlink: 'syz.0.11929': attribute type 4 has an invalid length. [ 1074.135403][ T1382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11929'. [ 1074.750280][ T1378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1074.750336][ T1378] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1074.927405][ T1378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1074.934150][ T1378] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1074.982600][ T1378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.002215][ T1378] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1075.181070][T17386] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1075.214138][ T30] usb 5-1: USB disconnect, device number 11 [ 1075.384053][ T1414] loop2: detected capacity change from 0 to 32768 [ 1075.497789][ T5622] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1075.539769][ T1438] netlink: 136 bytes leftover after parsing attributes in process `syz.4.11955'. [ 1075.658453][ T5622] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1075.668746][ T5622] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1075.677172][ T5622] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1075.686413][ T5622] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.696893][ T5622] usb 2-1: config 220 has no interface number 2 [ 1075.703340][ T5622] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1075.716779][ T5622] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1075.723734][ T5622] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1075.730925][ T5622] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1075.772447][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.772495][ T5622] usb 2-1: Product: syz [ 1075.772529][ T5622] usb 2-1: Manufacturer: syz [ 1075.772550][ T5622] usb 2-1: SerialNumber: syz [ 1075.908135][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1075.908194][ T31] audit: type=1326 audit(1075.799:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.909921][ T31] audit: type=1326 audit(1075.799:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.937258][ T31] audit: type=1326 audit(1075.799:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.939551][ T31] audit: type=1326 audit(1075.799:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.943755][ T31] audit: type=1326 audit(1075.829:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.944381][ T31] audit: type=1326 audit(1075.829:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.945011][ T31] audit: type=1326 audit(1075.829:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.949223][ T31] audit: type=1326 audit(1075.829:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1075.953151][ T31] audit: type=1326 audit(1075.829:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.11960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1076.168808][ T5622] usb 2-1: selecting invalid altsetting 0 [ 1076.175343][ T5622] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1076.184056][ T5622] uvcvideo 2-1:220.0: No valid video chain found. [ 1076.201636][ T5622] usb 2-1: selecting invalid altsetting 0 [ 1076.207595][ T5622] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1076.229348][ T5622] usb 2-1: USB disconnect, device number 117 [ 1076.907102][ T1474] xt_CT: No such helper "snmp_trap" [ 1077.682045][ T1514] netlink: 'syz.4.11991': attribute type 4 has an invalid length. [ 1077.682090][ T1514] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1077.765094][ T1516] netlink: 'syz.0.11992': attribute type 10 has an invalid length. [ 1077.788695][ T1516] vxcan0: entered allmulticast mode [ 1077.788752][ T1516] team0: Device vxcan0 is of different type [ 1077.822469][ T1490] loop5: detected capacity change from 0 to 32768 [ 1077.854845][ T1490] (syz.5.11977,1490,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 1077.854845][ T1490] found = 1, set = 0, taken = 0, off = 0 [ 1077.883560][ T1490] (syz.5.11977,1490,0):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 1077.883628][ T1490] (syz.5.11977,1490,0):ocfs2_check_volume:2400 ERROR: status = -22 [ 1077.883657][ T1490] (syz.5.11977,1490,0):ocfs2_check_volume:2428 ERROR: status = -22 [ 1077.883687][ T1490] (syz.5.11977,1490,0):ocfs2_mount_volume:1763 ERROR: status = -22 [ 1077.993840][ T1490] (syz.5.11977,1490,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1078.248203][ T31] audit: type=1326 audit(1078.129:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1529 comm="syz.4.11999" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bfb9e0d9 code=0x7ffc0000 [ 1078.531500][ T1540] xfrm0: entered allmulticast mode [ 1078.580081][ T1540] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1079.366543][ T1583] netlink: 'syz.2.12022': attribute type 1 has an invalid length. [ 1079.366585][ T1583] netlink: 756 bytes leftover after parsing attributes in process `syz.2.12022'. [ 1079.456557][ T1588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12025'. [ 1079.536067][ T1596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12028'. [ 1079.748618][ T1588] bridge_slave_1: left allmulticast mode [ 1079.748669][ T1588] bridge_slave_1: left promiscuous mode [ 1079.749398][ T1588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.780135][ T1588] bridge_slave_0: left allmulticast mode [ 1079.780179][ T1588] bridge_slave_0: left promiscuous mode [ 1079.781410][ T1588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.836209][ T1604] ubi0: attaching mtd0 [ 1079.985589][ T1612] loop1: detected capacity change from 0 to 128 [ 1079.992046][ T1604] ubi0: scanning is finished [ 1079.992100][ T1604] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1080.015929][ T1612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1080.025129][ T1612] System zones: 1-3, 19-19, 35-36 [ 1080.036017][ T1612] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1080.064993][ T1612] EXT4-fs warning (device loop1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 1080.139846][ T5615] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1080.281443][ T1604] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1080.537296][ T1634] netlink: del zone limit has 8 unknown bytes [ 1080.748302][ T1642] loop1: detected capacity change from 0 to 764 [ 1080.765316][ T1642] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1081.054839][ T1653] bond3: option min_links: invalid value (18446744073709551608) [ 1081.064416][ T1653] bond3: option min_links: allowed values 0 - 2147483647 [ 1081.086816][ T1653] bond3 (unregistering): Released all slaves [ 1081.236081][ T1667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12061'. [ 1081.493496][ T1668] loop4: detected capacity change from 0 to 4096 [ 1081.584923][ T1668] ntfs3(loop4): Failed to load $Extend (-22). [ 1081.584983][ T1668] ntfs3(loop4): Failed to initialize $Extend. [ 1081.928752][ T1694] loop2: detected capacity change from 0 to 256 [ 1082.369818][ T1700] loop5: detected capacity change from 0 to 1024 [ 1082.390481][ T1700] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1082.413811][ T1700] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.12076: lblock 2 mapped to illegal pblock 2 (length 1) [ 1082.413877][ T1700] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1082.414570][ T1700] __quota_error: 8 callbacks suppressed [ 1082.414615][ T1700] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1082.414722][ T1700] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.12076: lblock 0 mapped to illegal pblock 48 (length 1) [ 1082.414810][ T1700] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1082.415497][ T1700] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1082.415560][ T1700] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.12076: Failed to acquire dquot type 0 [ 1082.415623][ T1700] loop5: lost filesystem error report for type 5 error -117 [ 1082.416527][ T1700] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1082.416599][ T1700] loop5: lost filesystem error report for type 5 error -117 [ 1082.419542][ T1700] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.12076: mark_inode_dirty error [ 1082.419651][ T1700] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1082.424295][ T1700] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 1082.424551][ T1700] EXT4-fs (loop5): 1 orphan inode deleted [ 1082.441909][ T1700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.541448][ T13] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1082.582764][ T13] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1082.592441][ T13] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 1082.610712][ T1700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.633003][ T1700] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.12076: Invalid inode table block 1 in block_group 0 [ 1082.646005][ T1700] loop5: lost filesystem error report for type 5 error -117 [ 1082.647286][ T1700] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1082.647337][ T1700] loop5: lost filesystem error report for type 5 error -117 [ 1082.649798][ T1700] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz.5.12076: mark_inode_dirty error [ 1082.649887][ T1700] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1082.650672][ T1700] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.12076: Invalid inode table block 1 in block_group 0 [ 1082.650750][ T1700] loop5: lost filesystem error report for type 5 error -117 [ 1082.872317][ T1691] loop4: detected capacity change from 0 to 32768 [ 1082.903163][ T1692] loop1: detected capacity change from 0 to 32768 [ 1082.934775][ T1691] [ 1082.934775][ T1691] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1082.934775][ T1691] [ 1082.954885][ T1692] JBD2: Ignoring recovery information on journal [ 1083.042557][ T12] [ 1083.042557][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1083.042557][ T12] [ 1083.042698][ T12] [ 1083.042698][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1083.042698][ T12] [ 1083.087389][ T120] [ 1083.087389][ T120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1083.087389][ T120] [ 1083.098159][ T5612] [ 1083.098159][ T5612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1083.098159][ T5612] [ 1083.100570][ T5612] [ 1083.100570][ T5612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1083.100570][ T5612] [ 1083.131446][ T1692] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1083.464445][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 1083.612569][ T1728] netlink: 'syz.1.12087': attribute type 2 has an invalid length. [ 1083.983340][ T1709] loop2: detected capacity change from 0 to 32768 [ 1083.996870][ T1709] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12080 (1709) [ 1084.028770][ T1709] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1084.028823][ T1709] BTRFS info (device loop2): using sha256 checksum algorithm [ 1084.194516][ T1709] BTRFS info (device loop2): enabling ssd optimizations [ 1084.202087][ T1709] BTRFS info (device loop2): turning on async discard [ 1084.209101][ T1709] BTRFS info (device loop2): enabling free space tree [ 1084.318356][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1084.375738][ T1770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.450221][ T1772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1084.542402][ T30] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1084.697860][ T30] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1084.713781][ T30] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1084.722414][ T30] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1084.733511][ T30] usb 6-1: config 0 has no interface number 0 [ 1084.740255][ T30] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1084.752039][ T30] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1084.763408][ T30] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.777021][ T30] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1084.785744][ T30] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1084.785806][ T30] usb 6-1: Product: syz [ 1084.785827][ T30] usb 6-1: SerialNumber: syz [ 1084.898134][ T30] usb 6-1: config 0 descriptor?? [ 1085.147444][ T30] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input66 [ 1085.236929][ T1795] loop4: detected capacity change from 0 to 256 [ 1085.410990][ T30] usb 6-1: USB disconnect, device number 15 [ 1085.411089][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1085.936153][ T1816] usb usb1: check_ctrlrecip: process 1816 (syz.1.12122) requesting ep 01 but needs 81 [ 1085.946224][ T1816] usb usb1: usbfs: process 1816 (syz.1.12122) did not claim interface 0 before use [ 1086.156488][ T5622] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1086.205389][ T1826] loop1: detected capacity change from 0 to 512 [ 1086.225859][ T1826] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1086.263313][ T1826] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 1086.273259][ T1826] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1086.285934][ T1826] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.12129: Failed to acquire dquot type 1 [ 1086.299906][ T1826] loop1: lost filesystem error report for type 5 error -117 [ 1086.304861][ T1826] EXT4-fs (loop1): 1 truncate cleaned up [ 1086.312541][ T5622] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1086.312590][ T5622] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1086.312630][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1086.312650][ C1] EXT4-fs (loop1): last error at time 1086: ext4_acquire_dquot:7069 [ 1086.314643][ T5622] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 1086.314707][ T5622] usb 3-1: config 114 has no interface number 0 [ 1086.314818][ T5622] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1086.314892][ T5622] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1086.314963][ T5622] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1086.315027][ T5622] usb 3-1: config 114 interface 240 has no altsetting 0 [ 1086.330593][ T5622] usb 3-1: string descriptor 0 read error: -22 [ 1086.330958][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.359216][ T1818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1086.359257][ T30] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1086.359369][ T1818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1086.373794][ T5622] ir_usb 3-1:114.240: IR Dongle converter detected [ 1086.455052][ T1826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1086.499076][ T1826] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 1086.499391][ T1826] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1086.499521][ T1826] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.12129: Failed to acquire dquot type 1 [ 1086.536430][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1086.543247][ T30] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1086.554195][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1086.554247][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1086.578827][ T30] usb 6-1: string descriptor 0 read error: -22 [ 1086.578986][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.597663][ T1824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1086.611625][ T5622] usb 3-1: IRDA class descriptor not found, device not bound [ 1086.621009][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1086.628168][ T30] usb 6-1: MIDIStreaming interface descriptor not found [ 1086.705204][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1086.787416][ T1804] loop4: detected capacity change from 0 to 40427 [ 1086.807798][ T1804] F2FS-fs (loop4): invalid crc value [ 1086.902497][ T5622] usb 3-1: USB disconnect, device number 12 [ 1087.053828][ T30] usb 6-1: USB disconnect, device number 16 [ 1087.247212][ T1804] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1087.406555][ T1804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1087.463165][ T1850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12137'. [ 1087.569719][ T5612] syz-executor: attempt to access beyond end of device [ 1087.569719][ T5612] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1087.607646][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1087.607680][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.607695][ T5612] Call Trace: [ 1087.607705][ T5612] [ 1087.607715][ T5612] dump_stack_lvl+0xe8/0x150 [ 1087.607752][ T5612] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1087.607785][ T5612] f2fs_write_end_bio+0x1211/0x16e0 [ 1087.607822][ T5612] ? blkg_put+0x22/0x240 [ 1087.607863][ T5612] __submit_merged_bio+0x258/0x6a0 [ 1087.607890][ T5612] ? rcu_is_watching+0x16/0xb0 [ 1087.607924][ T5612] __submit_merged_write_cond+0x3c9/0x4e0 [ 1087.607961][ T5612] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1087.608022][ T5612] f2fs_write_data_pages+0x2a27/0x36f0 [ 1087.608054][ T5612] ? __lock_acquire+0x6df/0x2e50 [ 1087.608117][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1087.608197][ T5612] ? __bfs+0x153/0x290 [ 1087.608220][ T5612] ? __pfx_hlock_conflict+0x10/0x10 [ 1087.608267][ T5612] ? lockdep_unlock+0x5c/0xd0 [ 1087.608297][ T5612] ? __lock_acquire+0x14b9/0x2e50 [ 1087.608349][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1087.608382][ T5612] do_writepages+0x338/0x560 [ 1087.608426][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 1087.608463][ T5612] filemap_fdatawrite+0x1e9/0x2f0 [ 1087.608499][ T5612] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1087.608584][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 1087.608621][ T5612] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1087.608673][ T5612] f2fs_write_checkpoint+0xa3d/0x2710 [ 1087.608706][ T5612] ? __lock_acquire+0x6df/0x2e50 [ 1087.608762][ T5612] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1087.608830][ T5612] ? try_to_wake_up+0x8f2/0x14d0 [ 1087.608869][ T5612] kill_f2fs_super+0x2dd/0x700 [ 1087.608908][ T5612] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1087.608951][ T5612] ? call_rcu+0x64d/0x8b0 [ 1087.608986][ T5612] ? lockdep_hardirqs_on+0x7b/0x110 [ 1087.609030][ T5612] deactivate_locked_super+0xbc/0x110 [ 1087.609057][ T5612] cleanup_mnt+0x3d3/0x460 [ 1087.609090][ T5612] task_work_run+0x1d9/0x270 [ 1087.609118][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 1087.609155][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 1087.609179][ T5612] ? rcu_is_watching+0x16/0xb0 [ 1087.609211][ T5612] do_syscall_64+0x328/0x520 [ 1087.609242][ T5612] ? trace_irq_disable+0x3b/0x140 [ 1087.609265][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.609291][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 1087.609319][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.609343][ T5612] RIP: 0033:0x7f89bfb9f317 [ 1087.609365][ T5612] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1087.609387][ T5612] RSP: 002b:00007fff4605d968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1087.609412][ T5612] RAX: 0000000000000000 RBX: 00007f89bfc34474 RCX: 00007f89bfb9f317 [ 1087.609429][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4605da20 [ 1087.609444][ T5612] RBP: 00007fff4605da20 R08: 00007fff4605ea20 R09: 00000000ffffffff [ 1087.609460][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4605eab0 [ 1087.609475][ T5612] R13: 00007f89bfc34474 R14: 000000000010979d R15: 00007fff4605eaf0 [ 1087.609513][ T5612] [ 1087.619140][ T5612] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1087.685631][T17386] [ 1087.940820][T17386] ============================= [ 1087.945681][T17386] WARNING: suspicious RCU usage [ 1087.950685][T17386] syzkaller #0 Not tainted [ 1087.955127][T17386] ----------------------------- [ 1087.960063][T17386] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 1087.968896][T17386] [ 1087.968896][T17386] other info that might help us debug this: [ 1087.968896][T17386] [ 1087.979273][T17386] [ 1087.979273][T17386] rcu_scheduler_active = 2, debug_locks = 1 [ 1087.987588][T17386] locks held by kworker/u9:0/17386: 4, last CPU#1: [ 1087.994222][T17386] #0: ffff8880335b7940 ((wq_completion)f2fs_evict_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1088.005896][T17386] #1: ffffc9000c637c40 ((work_completion)(&ew->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1088.018049][T17386] #2: ffff8880b873a820 (lock){+.+.}-{3:3}, at: __radix_tree_preload+0x82/0x870 [ 1088.027228][T17386] #3: ffff88807fa948c8 (&im->ino_lock){+.+.}-{3:3}, at: __f2fs_add_ino_entry+0x14c/0x830 [ 1088.037386][T17386] [ 1088.037386][T17386] stack backtrace: [ 1088.043313][T17386] CPU: 1 UID: 0 PID: 17386 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1088.052856][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.062910][T17386] Workqueue: f2fs_evict_wq f2fs_evict_inode_work [ 1088.069309][T17386] Call Trace: [ 1088.072598][T17386] [ 1088.075532][T17386] dump_stack_lvl+0xe8/0x150 [ 1088.080140][T17386] lockdep_rcu_suspicious+0x140/0x1d0 [ 1088.085535][T17386] __f2fs_add_ino_entry+0x782/0x830 [ 1088.090756][T17386] ? process_scheduled_works+0x97a/0x1630 [ 1088.096506][T17386] f2fs_evict_inode_work+0xa1/0x120 [ 1088.101725][T17386] process_scheduled_works+0xc3d/0x1630 [ 1088.107318][T17386] ? __pfx_process_scheduled_works+0x10/0x10 [ 1088.113318][T17386] ? assign_work+0x3cf/0x5d0 [ 1088.117922][T17386] worker_thread+0xa47/0xfb0 [ 1088.122563][T17386] ? __kthread_parkme+0x71/0x1f0 [ 1088.127526][T17386] kthread+0x38b/0x480 [ 1088.131612][T17386] ? __pfx_worker_thread+0x10/0x10 [ 1088.136751][T17386] ? __pfx_kthread+0x10/0x10 [ 1088.141449][T17386] ret_from_fork+0x514/0xb70 [ 1088.146095][T17386] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.151234][T17386] ? __switch_to+0xc89/0x1420 [ 1088.155936][T17386] ? __pfx_kthread+0x10/0x10 [ 1088.160556][T17386] ret_from_fork_asm+0x1a/0x30 [ 1088.165442][T17386]