last executing test programs: 1m42.255007483s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0xe423}}}}}}, 0x0) 1m42.060624369s ago: executing program 2 (id=8): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) 1m41.149402039s ago: executing program 2 (id=12): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00005eb000/0x2000)=nil, 0x2000}, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 1m40.974283074s ago: executing program 2 (id=13): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) 1m40.158810311s ago: executing program 2 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0xc4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x24004810) 1m38.093852688s ago: executing program 2 (id=38): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000001480)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c6c617a7974696d652c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6e6f657874656e745f63616368652c6e6f657874656e745f63616368652c7768696e745f6d6f64653d66732d62617365642c636865636b706f696e743d64697361626c652c6a71666d743d76667376302c6a71666d743d7666736f6c642c6261636b67726f756e645f67633d6f66662c6e6f61636c2c646174615f666c7573682c009155f76df4d07ad6534d3588c19362f06435c912cf73b02e9946cfefd7b578c7029ce8c93b87feddd9bb7bb8924e6211c8b54dffa2d339edb64a6434663023894c1ae07c9ce2b93d95fbac8d5dbd8afb838537dbe757fdc7bf5cf39436f951f8f451e754a4bcb17e69c41e94995a3ae74e9dac87ec351b0f1e4f23af9301"], 0x1, 0x5519, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy6H+ht1V38wF3KqgdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNUDLvVLe6gtC0sdvfDybPzDtvnnneUArPTEgAJ9Zi9uvPlbgU5yJiPiIuRhT7lXIr3E7hhYi4HBFzj22VcvzPgdMRcT4iLk2Sp5yV8tTnV8dXbv701i/ffHfm1IUvvv5+dqsGZu3FiOhvpP3tfop5J8WH5Xhj3C1i/8a4jOlE72w638/T+HZ7rciw3dib1yji9U6an29sDSdxvddoTmKnu16MbwzSBYfjzl6e4g0PG5vFcau9VsTuMC9iZzddd2c3/W/bHY5SnlaZ76MifYxGezGNt3faaT0bj4rYHIzK8ZQ3b7V3JnFcxvJy0cx7raKOtQN80P9zb3cHWzvZuL057OaD7Gat/lKtfqta38xb7VH7RrXRb926kS11epNp1VG70b/dyfNOr11r5v3lbKnTbFbr9WzpTnut2xhk9Xrteu1a9eZyuXc1e/3+e1mvlS1N4qvdwdao2xtm6/lmlt6xnK3Urr+8nF2pZ+/cW81WH9y9e2/13Q/uvH//lXtvvlZO+kdZ2dLKtZWVav1adaW+fILW/0lZ9BTXDwdSmXUBAMeP/h+YhYP0//1H5fET+//NBxGH3/+H/n8qjlX/e9L7/0NYPxyI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MT6YeHLN4qdxXR8oRx/phx6rjyuRMRcRPz+BPNxel/O+TLPwr/MX/hbDd9WosgwucaZcjsfEbfL7bdnD/tTAAAAgKfXVx9f/ix16+llcdYFcZTSTZu5ix9OKV8lIhYWf5xStrnJy/NTSlb8fZ+KnSllK25gnZ1SsnTL7dS0sv0n8/vC2cdCJYW5Iy0HAAA4Evs7gaPtQgAAADhKn866AGajEnuPMveeBRffvP/rgeC5fUcAAADAMVSZdQEAAADAoSv6f7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wc793CYORHEAfjZ4Yf9p0Wrv28reoIwtIcccIwpIExSQAzWkAWogt5QQQYTHIRBxiOSxrUTfJzmTscyPNwgOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJceqnUVN39v2+bs9u3kGQ0AAABwybZaL+p/Zqn/vbn/s7n1u+kXEVFGxKW5+yi+nGWOmpzq9fm70+erNzXcR9QJh/eYNNe3iPjXXE+/uv4UAAAA4PPaLFfzNFtPf2ZDF0Sf0qJN+eN/prwiIqrZY6a08pD3J1NY/f0ex3WmtHoBa5opLC25jXOlvUv9cz+u2k1PmiI15cWXHYvMNnYAAKBHo7Om31kIAAAAfboaugCGUcTLVuZxK3CSmmZ77+tZDwAAAPiAiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz8vclNxAMBfksnUVsVxlTmsiIIHvdjptLb2Jh6UxYN/grBsp3Xt1B/tHmwp4l68yZ57ET2KCMp66//Qcwu91FsPc6ggHkeSSWbSdtFZwSTd/Xzg5X0TQt73JbDsNy+7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCavLuIk2zTm8Vxcez2g+sbWX/nkT5zc+fuatayOKoz6SfDy9WdqN9cIgAAABweSVnfhxDupbtrWR/38vo/Lc/Jav7vn53FZT3/aN1f9mXtn7Xffr3/4nyg3myc7KLnN8ejE4+n0vn/Ztluz/3rGZ38zufvXpL8gcQfbL8wSfP7GX1769Z73Tw8Uke2AMB/cbzsi6D8fSjrh00mBsCh0akU3mX9n/SazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDpPt8HQZRyGE1c4iztx5cH1jr/7mzt3Vsp25cWMnfL24ZnaJNIRwfnM8OlHrbNrtytVrF9fH49Hl+oNXQghNjf5OMf2LHy1xcgiN3J/9B3+1I422BXHxsNuSz5MRNPhDCQCAAyktWlbX30t317Jj0UoI0x8erv9fr8Rhyfr//sdnblfHqtb/w9pm2H6DrUufD65cvfbm5qX1C6MLo0/fOjl8e3jq7OnTZwf5u5KBNyYAAADs23Q6nc53ukWr1v/xyuPr/8cqcViy/v/iu+FX1YET9f+eFot+TWcCAABwuD3/6p9/RHscj7rd8OX61tbl4Ww73z852zaQ6r4dKVq1/k9Wms4KAAAAqMNkO3po/f9cJQ5Lrv8/8+NLP1evmYQQjhbr/8c3Phufq286rVbHnxM3PUcAAACadbRo1fX/NP/+P55/8hCHEN54bRYX/wbwH+v/tKj/k/e/+ak6VvX7/1P1TbGV4v7sfuR9P4ROv+mMAAAAOMieKlpW7P+e7q598suxD7u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo298BAAD//y5wQIQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20, 0x10) 1m38.054196409s ago: executing program 32 (id=38): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20, 0x10) 1m20.333073572s ago: executing program 3 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7ff}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m19.078665132s ago: executing program 3 (id=134): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 1m18.954376107s ago: executing program 3 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) removexattr(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdfad2c000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 1m18.608509228s ago: executing program 3 (id=136): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) 1m17.772536145s ago: executing program 3 (id=141): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000240)) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000100)='./file0\x00') 1m15.12737s ago: executing program 3 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m14.985159855s ago: executing program 33 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5.843576131s ago: executing program 0 (id=755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/145, 0x91}], 0x1}, 0x2) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) 4.698133188s ago: executing program 0 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001980)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x15, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@tcp={0x7, 0x6, "f1186b", 0xf98, 0x6, 0x0, @empty, @loopback, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x9df, 0x0, 0x1}, {"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"}}}}}}, 0xfce) 4.389342828s ago: executing program 0 (id=766): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000240)=""/178, 0xb2) 3.368313221s ago: executing program 0 (id=780): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285ee28f5aa0000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.039502911s ago: executing program 0 (id=784): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) 2.879126547s ago: executing program 1 (id=785): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2c) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xf2b, 0xaeb, 0xe57, 0x1, 0xf4, "1c00", 0x4, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xd) 2.702515532s ago: executing program 6 (id=786): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2e, &(0x7f0000001900)="$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") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES16, @ANYRESHEX], 0xfe, 0xc33, &(0x7f0000002580)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000c0000000000001203000000030000000000005a698d37688fcf492e2e2e"], 0x0, 0x44, 0x0, 0x8000001}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 2.414682642s ago: executing program 1 (id=787): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0) 2.412451372s ago: executing program 4 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d07, 0xec000000, 0xcd}]}) 2.213398758s ago: executing program 1 (id=789): syz_mount_image$hfs(&(0x7f0000000940), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000e40)={[{@file_umask={'file_umask', 0x3d, 0x8001}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@file_umask={'file_umask', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x7ff}}, {@type={'type', 0x3d, "49f210f3"}}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x50009405, &(0x7f00000004c0)={0x800000, 0x0, 0x43a, 0x5, 0x7}) 2.040686273s ago: executing program 6 (id=790): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e7, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.955513757s ago: executing program 1 (id=791): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x3d2, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}, 0x8}) 1.774968683s ago: executing program 0 (id=792): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.55127706s ago: executing program 6 (id=793): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') openat(r1, &(0x7f0000000440)='./cgroup\x00', 0x440, 0x80) 1.439420263s ago: executing program 1 (id=795): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r0) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) 1.381810785s ago: executing program 6 (id=796): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "32146e6692cbe41f47269e4404887352"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_PMKID={0x14, 0x55, "e4d2e58ccb9690060c8fbdfa4ddf6a4b"}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.343829056s ago: executing program 6 (id=797): r0 = semget(0x1, 0x5, 0x6b4) semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) semop(r0, &(0x7f00000002c0), 0x7) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 1.296918688s ago: executing program 1 (id=798): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x6f, 0x6, &(0x7f0000000040)={0x1c, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f4cd94926deff85d80fe447883b"}}) 1.099307034s ago: executing program 4 (id=799): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x8000, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) 1.050954296s ago: executing program 4 (id=801): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000c40)=ANY=[], 0x1, 0x2b1, &(0x7f0000000100)="$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") ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/sync_on_suspend', 0xa0042, 0x0) 889.374241ms ago: executing program 4 (id=803): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x7c}, 0x1, 0x20, 0x0, 0x8040}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0xfec5, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 689.308428ms ago: executing program 4 (id=804): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 670.098308ms ago: executing program 5 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000010009d"], 0x48}}, 0x40) 626.52545ms ago: executing program 4 (id=806): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file1\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x5569, &(0x7f0000005a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) fstat(r0, &(0x7f00000000c0)) 511.359363ms ago: executing program 5 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1838a}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6759}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb86f}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x40000) 415.501826ms ago: executing program 5 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5"], 0x58) 370.069728ms ago: executing program 6 (id=809): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000200001032abd6700ffdbdf250200000008"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 195.347123ms ago: executing program 5 (id=810): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) 89.032847ms ago: executing program 5 (id=811): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5cac}, 0x1c) 0s ago: executing program 5 (id=812): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x180, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x120) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0xb4842000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) kernel console output (not intermixed with test programs): es ready [ 90.378862][ T4360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.388396][ T4360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397501][ T4360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.407071][ T4360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.433416][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.441378][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.473593][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.498114][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.506992][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.523766][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.608466][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.645479][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.736955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.804678][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.837907][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.891571][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.291750][ T4642] loop3: detected capacity change from 0 to 2048 [ 91.311886][ T4631] loop1: detected capacity change from 0 to 8192 [ 91.391245][ T4259] device hsr_slave_0 left promiscuous mode [ 91.402057][ T4259] device hsr_slave_1 left promiscuous mode [ 91.420841][ T4631] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 91.436837][ T4631] UDF-fs: Scanning with blocksize 512 failed [ 91.472830][ T4631] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 91.486460][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.497716][ T4642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.507836][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.515700][ T4631] UDF-fs: Scanning with blocksize 1024 failed [ 91.551457][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.566917][ T4631] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 91.592832][ T4631] UDF-fs: Scanning with blocksize 2048 failed [ 91.603153][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.652471][ T4259] device bridge_slave_1 left promiscuous mode [ 91.660528][ T4631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.692369][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.731013][ T4259] device bridge_slave_0 left promiscuous mode [ 91.745939][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.101'. [ 91.761432][ T26] audit: type=1800 audit(1778669767.138:2): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="bus" dev="loop1" ino=824 res=0 errno=0 [ 91.767098][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.887086][ T4259] device veth1_macvtap left promiscuous mode [ 91.933861][ T4259] device veth0_macvtap left promiscuous mode [ 91.959941][ T4259] device veth1_vlan left promiscuous mode [ 91.962345][ T4657] loop4: detected capacity change from 0 to 2048 [ 92.006145][ T4259] device veth0_vlan left promiscuous mode [ 92.098182][ T4664] loop0: detected capacity change from 0 to 512 [ 92.245443][ T4664] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.105: inode has both inline data and extents flags [ 92.269182][ T4664] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.105: couldn't read orphan inode 15 (err -117) [ 92.282284][ T4671] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.318996][ T4664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.448647][ T26] audit: type=1326 audit(1778669767.828:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4b7fbe59 code=0x0 [ 92.536350][ T4657] NILFS (loop4): error -2 truncating bmap (ino=16) [ 92.713062][ T4657] syz.4.104 (4657) used greatest stack depth: 20400 bytes left [ 92.781088][ T4679] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.821719][ T4679] netlink: 312 bytes leftover after parsing attributes in process `syz.0.119'. [ 92.888465][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 92.929906][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 92.977179][ T4259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.030466][ T4259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.149951][ T4259] bond0 (unregistering): Released all slaves [ 93.355085][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.363196][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.613206][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 93.652854][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 93.664321][ T4189] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 93.732941][ T1111] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 93.741097][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.760060][ T1111] usb 2-1: config 0 has no interface number 0 [ 93.792956][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.812773][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.824357][ T1108] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 93.842719][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.875525][ T1108] usb 5-1: config 0 descriptor?? [ 93.923290][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 93.932443][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.971592][ T1111] usb 2-1: Product: syz [ 93.992326][ T1111] usb 2-1: Manufacturer: syz [ 94.008678][ T1111] usb 2-1: SerialNumber: syz [ 94.023036][ T4189] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 94.031293][ T4189] usb 6-1: config 0 has no interface number 0 [ 94.047824][ T1111] usb 2-1: config 0 descriptor?? [ 94.065058][ T4189] usb 6-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 94.096047][ T4189] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.124969][ T4189] usb 6-1: config 0 interface 113 has no altsetting 0 [ 94.304407][ T4189] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 94.322947][ T1111] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 94.329380][ T1111] usb 2-1: No valid video chain found. [ 94.336694][ T4189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.378790][ T4189] usb 6-1: Product: syz [ 94.385941][ T4189] usb 6-1: Manufacturer: syz [ 94.390601][ T4189] usb 6-1: SerialNumber: syz [ 94.408208][ T1108] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 94.430760][ T4189] usb 6-1: config 0 descriptor?? [ 94.489434][ T4189] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 94.552859][ T4189] usb 2-1: USB disconnect, device number 2 [ 94.593342][ T1108] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 94.627294][ T1108] ft260: probe of 0003:0403:6030.0001 failed with error -71 [ 94.677736][ T1108] usb 5-1: USB disconnect, device number 4 [ 94.696574][ T4235] usb 6-1: USB disconnect, device number 2 [ 94.885457][ T4714] loop3: detected capacity change from 0 to 40427 [ 94.909550][ T4727] fido_id[4727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 94.917970][ T4714] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 94.970819][ T4714] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.089535][ T4714] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.222334][ T4741] loop4: detected capacity change from 0 to 1024 [ 95.367444][ T4714] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.392490][ T4714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.403023][ T4741] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 95.452844][ T4741] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.565762][ T4741] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.125: lblock 3 mapped to illegal pblock 3 (length 1) [ 95.717721][ T4741] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 95.758927][ T4752] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 95.811441][ T4752] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 95.968838][ T4745] loop1: detected capacity change from 0 to 32768 [ 96.006829][ T4199] attempt to access beyond end of device [ 96.006829][ T4199] loop3: rw=2049, want=40968, limit=40427 [ 96.077922][ T4745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.126 (4745) [ 96.218987][ T4745] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 96.240087][ T4745] BTRFS info (device loop1): using free space tree [ 96.303420][ T4745] BTRFS info (device loop1): has skinny extents [ 96.351335][ T4730] loop0: detected capacity change from 0 to 40427 [ 96.516176][ T4730] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 96.533280][ T4730] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.547461][ T4751] loop5: detected capacity change from 0 to 32768 [ 96.580837][ T4730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.709179][ T4751] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.128 (4751) [ 96.793586][ T4730] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.857831][ T4730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.916678][ T4751] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 96.934702][ T4745] BTRFS info (device loop1): enabling ssd optimizations [ 96.953152][ T4751] BTRFS info (device loop5): force zlib compression, level 3 [ 96.978609][ T4360] attempt to access beyond end of device [ 96.978609][ T4360] loop0: rw=2049, want=45104, limit=40427 [ 97.032071][ T4751] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 97.073504][ T4751] BTRFS info (device loop5): use zstd compression, level 3 [ 97.080793][ T4751] BTRFS info (device loop5): enabling ssd optimizations [ 97.156380][ T4751] BTRFS info (device loop5): using free space tree [ 97.192603][ T4751] BTRFS info (device loop5): has skinny extents [ 97.860119][ T4820] loop3: detected capacity change from 0 to 1024 [ 98.004052][ T4820] EXT4-fs (loop3): Ignoring removed bh option [ 98.068686][ T4826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 98.084237][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 98.108274][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.276394][ T4820] EXT4-fs error (device loop3): ext4_check_all_de:667: inode #12: block 7: comm syz.3.136: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 98.380514][ T4820] EXT4-fs (loop3): Remounting filesystem read-only [ 98.882017][ T4199] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 98.904189][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.908461][ T4857] loop5: detected capacity change from 0 to 128 [ 98.938685][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 98.972034][ T4199] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 99.007799][ T4862] loop0: detected capacity change from 0 to 128 [ 99.035461][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.044633][ T4857] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.083008][ T4199] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 99.103279][ T4857] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.150366][ T4862] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 99.234747][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.247507][ T4862] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.263029][ T4860] loop4: detected capacity change from 0 to 4096 [ 99.267042][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.287413][ T4199] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 99.310486][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.317156][ T4199] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 99.339264][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.346112][ T4862] ext2 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.356894][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.357171][ T4199] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 99.385234][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.391983][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.436057][ T4860] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 99.462358][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.486970][ T4199] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 99.543313][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.550040][ T4199] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 99.584593][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.601667][ T4199] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 99.680928][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 99.714221][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.785045][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.879204][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.897191][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.930176][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 99.950597][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 100.008114][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 100.036863][ T4199] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 100.052723][ T4829] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.113138][ T1108] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 100.128536][ T1108] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 100.137292][ T1108] usb 2-1: Product: syz [ 100.141758][ T1108] usb 2-1: Manufacturer: syz [ 100.152413][ T1108] usb 2-1: SerialNumber: syz [ 100.160683][ T1108] usb 2-1: config 0 descriptor?? [ 100.214113][ T1108] ch341 2-1:0.0: ch341-uart converter detected [ 100.453059][ T4829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.473858][ T4829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.504596][ T4829] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.531606][ T4829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.565942][ T4829] usb 1-1: config 0 descriptor?? [ 100.597888][ T4879] loop5: detected capacity change from 0 to 32768 [ 100.634812][ T4829] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.646692][ T4879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.149 (4879) [ 100.663370][ T4829] dvb-usb: bulk message failed: -22 (3/0) [ 100.696617][ T4829] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.733400][ T4829] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.754084][ T4829] usb 1-1: media controller created [ 100.761171][ T4829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.799117][ T4879] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 100.815737][ T4829] dvb-usb: bulk message failed: -22 (6/0) [ 100.839252][ T4879] BTRFS info (device loop5): using free space tree [ 100.851019][ T4876] dvb-usb: bulk message failed: -22 (2/0) [ 100.858317][ T4829] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.869813][ T4876] dibusb: i2c wr: len=235 is too big! [ 100.869813][ T4876] [ 100.893173][ T4879] BTRFS info (device loop5): has skinny extents [ 100.981177][ T4829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 101.002447][ T4829] dvb-usb: schedule remote query interval to 150 msecs. [ 101.010132][ T4829] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 101.023429][ T4829] usb 1-1: USB disconnect, device number 2 [ 101.076337][ T1108] usb 2-1: failed to send control message: -71 [ 101.092804][ T1108] ch341-uart: probe of ttyUSB0 failed with error -71 [ 101.151392][ T1108] usb 2-1: USB disconnect, device number 3 [ 101.203271][ T1108] ch341 2-1:0.0: device disconnected [ 101.219322][ T4829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 101.237700][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.458555][ T4879] BTRFS info (device loop5): enabling ssd optimizations [ 101.471843][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.646786][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.680237][ T4896] loop4: detected capacity change from 0 to 32768 [ 102.135874][ T4961] loop5: detected capacity change from 0 to 64 [ 102.163303][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.180317][ T4896] XFS (loop4): Mounting V5 Filesystem [ 102.434680][ T4896] XFS (loop4): Ending clean mount [ 102.451236][ T4977] tap0: tun_chr_ioctl cmd 1074025688 [ 102.474098][ T4977] tap0: tun_chr_ioctl cmd 1074818700 [ 102.567734][ T4932] chnl_net:caif_netlink_parms(): no params data found [ 102.741096][ T4195] XFS (loop4): Unmounting Filesystem [ 103.010494][ T4999] netlink: 104 bytes leftover after parsing attributes in process `syz.0.173'. [ 103.201021][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.255221][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.374885][ T4932] device bridge_slave_0 entered promiscuous mode [ 103.404546][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.411754][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.473808][ T4932] device bridge_slave_1 entered promiscuous mode [ 103.562361][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.178'. [ 103.582922][ T4854] Bluetooth: hci4: command 0x0409 tx timeout [ 103.595111][ T5019] netlink: 'syz.5.178': attribute type 1 has an invalid length. [ 103.641443][ T5019] netlink: 'syz.5.178': attribute type 2 has an invalid length. [ 103.778341][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.824550][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.025728][ T4932] team0: Port device team_slave_0 added [ 104.054657][ T4932] team0: Port device team_slave_1 added [ 104.129802][ T5030] loop4: detected capacity change from 0 to 8192 [ 104.180486][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.207093][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.259474][ T5030] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 104.269487][ T5030] REISERFS (device loop4): using ordered data mode [ 104.276941][ T5030] reiserfs: using flush barriers [ 104.291763][ T5030] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.309365][ T5030] REISERFS (device loop4): checking transaction log (loop4) [ 104.354231][ T4932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.436860][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.453102][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.547447][ T4932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.574368][ T5030] REISERFS (device loop4): Using tea hash to sort names [ 104.602468][ T5052] Zero length message leads to an empty skb [ 104.636206][ T5030] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 104.658613][ T4932] device hsr_slave_0 entered promiscuous mode [ 104.666419][ T4932] device hsr_slave_1 entered promiscuous mode [ 104.674157][ T5030] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.695266][ T4932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.712818][ T4932] Cannot create hsr debugfs directory [ 104.868617][ T5058] loop2: detected capacity change from 0 to 1 [ 104.914648][ T5058] Dev loop2: unable to read RDB block 1 [ 104.947034][ T5058] loop2: AHDI p3 [ 104.950836][ T5058] loop2: partition table partially beyond EOD, truncated [ 105.001899][ T5060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 105.113645][ T5062] loop5: detected capacity change from 0 to 4096 [ 105.184639][ T5060] netlink: 2 bytes leftover after parsing attributes in process `syz.1.189'. [ 105.268786][ T5062] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 105.316161][ T5062] ntfs3: loop5: Failed to load $Extend. [ 105.539347][ T5062] ntfs3: loop5: ino=1b, "file0" directory corrupted [ 105.623225][ T4210] ntfs3: loop5: ntfs3_write_inode r=9 failed, -22. [ 105.639906][ T4361] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 105.650657][ T4361] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22. [ 105.662715][ T4854] Bluetooth: hci4: command 0x041b tx timeout [ 106.062791][ T144] device hsr_slave_0 left promiscuous mode [ 106.153880][ T144] device hsr_slave_1 left promiscuous mode [ 106.190287][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.200908][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.209310][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.216865][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.279809][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.298806][ T144] device bridge_slave_0 left promiscuous mode [ 106.319850][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.356159][ T144] device veth1_macvtap left promiscuous mode [ 106.369141][ T144] device veth0_macvtap left promiscuous mode [ 106.388288][ T144] device veth1_vlan left promiscuous mode [ 106.414509][ T144] device veth0_vlan left promiscuous mode [ 106.767413][ T144] team0 (unregistering): Port device team_slave_1 removed [ 106.789742][ T144] team0 (unregistering): Port device team_slave_0 removed [ 106.807544][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.827311][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.945352][ T144] bond0 (unregistering): Released all slaves [ 107.036676][ T5082] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.192'. [ 107.254047][ T5103] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.404156][ T4932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.455522][ T4932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.501935][ T4932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.566128][ T4932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.680605][ T5120] loop5: detected capacity change from 0 to 1024 [ 107.742789][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 107.778447][ T5124] loop8: detected capacity change from 0 to 7 [ 107.835040][ T5124] Dev loop8: unable to read RDB block 7 [ 107.851151][ T5125] loop1: detected capacity change from 0 to 64 [ 107.878653][ T5124] loop8: unable to read partition table [ 107.887283][ T5124] loop8: partition table beyond EOD, truncated [ 107.897564][ T5120] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,quota,noinit_itable,resuid=0x0000000000000000,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 107.900075][ T5124] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 108.012842][ T5120] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.100770][ T5120] EXT4-fs (loop5): shut down requested (0) [ 108.119917][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.178536][ T5137] netlink: 100 bytes leftover after parsing attributes in process `syz.0.210'. [ 108.204000][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.220367][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.294987][ T5139] attempt to access beyond end of device [ 108.294987][ T5139] loop1: rw=0, want=1026, limit=64 [ 108.344842][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.387845][ T5139] Buffer I/O error on dev loop1, logical block 512, async page read [ 108.444216][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.464454][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.474300][ T5139] attempt to access beyond end of device [ 108.474300][ T5139] loop1: rw=0, want=113154, limit=64 [ 108.506071][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.513239][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.534652][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.610505][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.622750][ T5139] Buffer I/O error on dev loop1, logical block 56576, async page read [ 108.650439][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.700951][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.708138][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.781720][ T5149] loop0: detected capacity change from 0 to 128 [ 108.809657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.840617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.857118][ T5149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.893882][ T5149] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.997663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.034844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.111925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.179562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.264436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.283692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.325725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.368891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.410017][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.706314][ T5144] loop4: detected capacity change from 0 to 40427 [ 109.737844][ T5144] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 109.756271][ T5144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.810907][ T5144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.822832][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 109.842771][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.923334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.958193][ T5144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 109.968788][ T5144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.984548][ T5162] device syzkaller1 entered promiscuous mode [ 110.254347][ T1108] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 110.285085][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.328387][ T5190] loop0: detected capacity change from 0 to 2048 [ 110.342850][ T1108] usb 2-1: config 0 has no interface number 0 [ 110.445572][ T5199] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.516503][ T4195] attempt to access beyond end of device [ 110.516503][ T4195] loop4: rw=2049, want=40968, limit=40427 [ 110.564325][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 110.577397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.586292][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.605828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.621006][ T1108] usb 2-1: Product: syz [ 110.636190][ T1108] usb 2-1: Manufacturer: syz [ 110.640948][ T1108] usb 2-1: SerialNumber: syz [ 110.681592][ T1108] usb 2-1: config 0 descriptor?? [ 110.696568][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.013088][ T1108] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 111.019698][ T1108] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 111.052673][ T1108] usb 2-1: No valid video chain found. [ 111.090991][ T1108] usb 2-1: USB disconnect, device number 4 [ 111.328841][ T5221] loop4: detected capacity change from 0 to 256 [ 111.434434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.481133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.560628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.604780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.656172][ T4932] device veth0_vlan entered promiscuous mode [ 111.685938][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.702393][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.768177][ T4932] device veth1_vlan entered promiscuous mode [ 111.942025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.961316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.003728][ T4932] device veth0_macvtap entered promiscuous mode [ 112.039505][ T4932] device veth1_macvtap entered promiscuous mode [ 112.071981][ T5232] loop1: detected capacity change from 0 to 2048 [ 112.108170][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.230990][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.252821][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.281074][ T5232] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 112.371277][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.401411][ T5232] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.482110][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.518727][ T5232] EXT4-fs (loop1): shut down requested (2) [ 112.562659][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.574385][ T5232] fs-verity: sha512 using implementation "sha512-avx2" [ 112.633060][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.656260][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.723151][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.732505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.759667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.774107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.831490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.913726][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.959213][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.976546][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.998398][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.018773][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.036386][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.056700][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.077689][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.119571][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.159399][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.194466][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.218745][ T4932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.244369][ T4932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.272748][ T4932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.281618][ T4932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.408523][ T5273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 113.441636][ T5273] device macsec1 entered promiscuous mode [ 113.519031][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.542175][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.625461][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.671401][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.693576][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.706137][ T5278] loop4: detected capacity change from 0 to 2048 [ 113.732859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.772098][ T5278] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 113.847012][ T5278] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 113.888388][ T5278] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 113.975213][ T5278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.067115][ T5265] loop0: detected capacity change from 0 to 32768 [ 114.125633][ T26] audit: type=1800 audit(1778669789.508:4): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.237" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 114.337811][ T5297] loop1: detected capacity change from 0 to 8 [ 114.447082][ T5297] squashfs image failed sanity check [ 114.506207][ T5265] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.959025][ T5316] loop1: detected capacity change from 0 to 256 [ 114.978505][ T4360] (syz-executor,4360,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 115.026062][ T4360] ocfs2: Unmounting device (7,0) on (node local) [ 115.039065][ T5320] loop6: detected capacity change from 0 to 1024 [ 115.045869][ T5316] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.048519][ T5321] sctp: [Deprecated]: syz.5.239 (pid 5321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.048519][ T5321] Use struct sctp_sack_info instead [ 115.135401][ T5316] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.940570][ T5352] loop6: detected capacity change from 0 to 2048 [ 116.052056][ T5352] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.081518][ T5358] loop5: detected capacity change from 0 to 512 [ 116.095712][ T5352] NILFS (loop6): mounting unchecked fs [ 116.134218][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop6 [ 116.162241][ T5352] NILFS (loop6): recovery complete [ 116.194982][ T5361] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.301469][ T5358] EXT4-fs (loop5): 1 truncate cleaned up [ 116.319493][ T5358] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 116.825311][ T5376] loop0: detected capacity change from 0 to 2048 [ 116.836975][ T5382] loop6: detected capacity change from 0 to 128 [ 116.918186][ T5376] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.954621][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop0 [ 117.021382][ T5382] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 117.032779][ T5388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.103270][ T5382] hpfs: filesystem error: improperly stopped [ 117.129906][ T5382] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 117.173418][ T5382] hpfs: You really don't want any checks? You are crazy... [ 117.217528][ T5382] hpfs: hpfs_map_sector(): read error [ 117.257119][ T5382] hpfs: code page support is disabled [ 117.285094][ T5382] hpfs: hpfs_map_4sectors(): unaligned read [ 117.285952][ T5376] overlayfs: upper fs does not support tmpfile. [ 117.318628][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 117.335099][ T5382] hpfs: hpfs_map_4sectors(): unaligned read [ 117.357490][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 117.371959][ T5382] hpfs: filesystem error: unable to find root dir [ 117.374341][ T5376] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.448310][ T5382] hpfs: hpfs_map_4sectors(): unaligned read [ 117.472977][ T5376] overlayfs: failed to set xattr on upper [ 117.479830][ T5376] overlayfs: ...falling back to index=off,metacopy=off. [ 117.794917][ T4360] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 117.815488][ T4360] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 117.894344][ T4360] Remounting filesystem read-only [ 117.899529][ T4360] NILFS (loop0): error -5 truncating bmap (ino=16) [ 117.956629][ T4360] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 118.007237][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 118.027995][ T5387] loop4: detected capacity change from 0 to 32768 [ 118.153495][ T5387] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.265 (5387) [ 118.239207][ T5387] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 118.285291][ T5387] BTRFS info (device loop4): force zlib compression, level 3 [ 118.351230][ T5387] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.412024][ T5387] BTRFS info (device loop4): use zstd compression, level 3 [ 118.414078][ T5431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.448126][ T5387] BTRFS info (device loop4): enabling ssd optimizations [ 118.481552][ T5387] BTRFS info (device loop4): using free space tree [ 118.499580][ T5387] BTRFS info (device loop4): has skinny extents [ 119.112717][ T4829] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.369580][ T4829] usb 2-1: Using ep0 maxpacket: 8 [ 119.487628][ T5490] loop0: detected capacity change from 0 to 256 [ 119.542580][ T4829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.626441][ T4829] usb 2-1: config 8 has an invalid interface number: 42 but max is 0 [ 119.646643][ T4829] usb 2-1: config 8 has no interface number 0 [ 119.676121][ T4829] usb 2-1: config 8 interface 42 has no altsetting 0 [ 119.862963][ T4829] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 119.872195][ T4829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.902578][ T4829] usb 2-1: Product: syz [ 119.933206][ T4829] usb 2-1: Manufacturer: syz [ 119.938048][ T4829] usb 2-1: SerialNumber: syz [ 120.224477][ T4231] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.266636][ T5504] loop6: detected capacity change from 0 to 2048 [ 120.274181][ T4829] empeg 2-1:8.42: empeg converter detected [ 120.280328][ T4829] usb 2-1: active config #8 != 1 ?? [ 120.316950][ T5509] loop0: detected capacity change from 0 to 2048 [ 120.323860][ T4829] usb 2-1: USB disconnect, device number 5 [ 120.324281][ T4231] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.442008][ T5504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.559276][ T5509] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.796091][ T5516] fido_id[5516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.099320][ T5535] loop0: detected capacity change from 0 to 8 [ 121.112736][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.234744][ T5535] SQUASHFS error: Unable to read inode 0x127 [ 121.285191][ T5502] loop4: detected capacity change from 0 to 32768 [ 121.465472][ T5549] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 121.527419][ T5502] XFS (loop4): Mounting V5 Filesystem [ 121.593008][ T13] usb 6-1: unable to get BOS descriptor or descriptor too short [ 121.664614][ T5561] loop0: detected capacity change from 0 to 1024 [ 121.664655][ T5502] XFS (loop4): Ending clean mount [ 121.712902][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.730210][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.795005][ T5502] XFS (loop4): Quotacheck needed: Please wait. [ 121.816761][ T5561] hfsplus: bad catalog entry type [ 121.925943][ T1227] hfsplus: b-tree write err: -5, ino 25 [ 121.931948][ T1227] hfsplus: b-tree write err: -5, ino 4 [ 121.938844][ T1227] hfsplus: b-tree write err: -5, ino 2 [ 121.957162][ T13] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 121.976331][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.996020][ T13] usb 6-1: Product: syz [ 122.000343][ T13] usb 6-1: Manufacturer: syz [ 122.010576][ T13] usb 6-1: SerialNumber: syz [ 122.043224][ T5502] XFS (loop4): Quotacheck: Done. [ 122.367462][ T5582] syz.6.312 uses obsolete (PF_INET,SOCK_PACKET) [ 122.678283][ T4195] XFS (loop4): Unmounting Filesystem [ 122.686653][ T5592] input: syz0 as /devices/virtual/input/input8 [ 122.965641][ T13] usb 6-1: USB disconnect, device number 3 [ 123.222268][ T5584] loop1: detected capacity change from 0 to 32768 [ 123.284236][ T5584] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.311 (5584) [ 123.346113][ T5584] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 123.386216][ T5584] BTRFS info (device loop1): force zlib compression, level 3 [ 123.421224][ T5584] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 123.461536][ T5584] BTRFS info (device loop1): use zstd compression, level 3 [ 123.502078][ T5584] BTRFS info (device loop1): enabling ssd optimizations [ 123.548506][ T5584] BTRFS info (device loop1): using free space tree [ 123.586525][ T5584] BTRFS info (device loop1): has skinny extents [ 124.063561][ T4829] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.152846][ T4240] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.316704][ T4829] usb 6-1: Using ep0 maxpacket: 16 [ 124.393010][ T4240] usb 5-1: Using ep0 maxpacket: 16 [ 124.433113][ T4829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 124.623187][ T4829] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 124.668721][ T4829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.682974][ T4240] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 124.702315][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.711497][ T4829] usb 6-1: Product: syz [ 124.722733][ T4829] usb 6-1: Manufacturer: syz [ 124.739094][ T4240] usb 5-1: Product: syz [ 124.745229][ T4829] usb 6-1: SerialNumber: syz [ 124.754836][ T4240] usb 5-1: Manufacturer: syz [ 124.760300][ T4240] usb 5-1: SerialNumber: syz [ 124.767443][ T4829] usb 6-1: config 0 descriptor?? [ 124.794697][ T4240] usb 5-1: config 0 descriptor?? [ 124.813603][ T4829] hub 6-1:0.0: bad descriptor, ignoring hub [ 124.822937][ T4829] hub: probe of 6-1:0.0 failed with error -5 [ 124.861049][ T5688] loop5: detected capacity change from 0 to 7 [ 124.884526][ T5688] Dev loop5: unable to read RDB block 7 [ 124.901611][ T5688] loop5: unable to read partition table [ 124.910075][ T5688] loop5: partition table beyond EOD, truncated [ 124.950107][ T5688] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.062891][ T4235] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 125.231510][ T5699] loop1: detected capacity change from 0 to 256 [ 125.241132][ T4840] usb 6-1: USB disconnect, device number 4 [ 125.272847][ T4240] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 125.308273][ T4240] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.349321][ T5699] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.353872][ T4240] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 125.363151][ T5699] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 125.400844][ T5699] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 125.413267][ T4240] usb 5-1: media controller created [ 125.450792][ T4240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.459885][ T4235] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.473866][ T5649] dtv5100: wlen = 0, aborting. [ 125.491579][ T4235] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.583113][ T4235] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.604797][ T4235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.620888][ T4235] usb 7-1: SerialNumber: syz [ 125.626172][ T4240] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.636346][ T4240] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 125.653185][ T4240] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 125.730614][ T4240] usb 5-1: USB disconnect, device number 5 [ 125.798646][ T5707] loop1: detected capacity change from 0 to 256 [ 125.836111][ T5707] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.853623][ T4240] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 125.858005][ T5707] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 125.936343][ T4235] usb 7-1: 0:2 : does not exist [ 125.948990][ T5707] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 126.007945][ T4235] usb 7-1: USB disconnect, device number 2 [ 126.210868][ T5695] loop0: detected capacity change from 0 to 32768 [ 126.281100][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.418206][ T5731] loop5: detected capacity change from 0 to 4096 [ 126.463233][ T5695] XFS (loop0): Mounting V5 Filesystem [ 126.561721][ T5743] loop6: detected capacity change from 0 to 64 [ 126.563489][ T5731] ntfs: volume version 3.1. [ 126.572853][ T5735] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 126.733599][ T5695] XFS (loop0): Ending clean mount [ 126.748412][ T5695] XFS (loop0): Quotacheck needed: Please wait. [ 126.880984][ T5695] XFS (loop0): Quotacheck: Done. [ 126.908939][ T5747] device pim6reg1 entered promiscuous mode [ 127.115806][ T5754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.352'. [ 127.138668][ T4360] XFS (loop0): Unmounting Filesystem [ 127.380823][ T5765] loop4: detected capacity change from 0 to 128 [ 127.742774][ T5669] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 127.885163][ T5782] loop5: detected capacity change from 0 to 8192 [ 128.032719][ T5669] usb 7-1: Using ep0 maxpacket: 32 [ 128.163228][ T5669] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.194094][ T5669] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.214455][ T5669] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 128.253581][ T5669] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.293540][ T5669] usb 7-1: config 0 descriptor?? [ 128.380777][ T5796] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 128.422187][ T5796] FAT-fs (loop5): Filesystem has been set read-only [ 128.469088][ T5812] loop0: detected capacity change from 0 to 512 [ 128.494039][ T5810] loop1: detected capacity change from 0 to 2048 [ 128.597474][ T5812] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,barrier,quota,,errors=continue. Quota mode: writeback. [ 128.637190][ T5812] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.838535][ T5669] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 129.097975][ T5669] usb 7-1: USB disconnect, device number 3 [ 129.158667][ T5834] hfsplus: xattr search failed [ 129.324217][ T4188] hfsplus: node 4:3 still has 1 user(s)! [ 129.353059][ T5840] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.417544][ T5841] fido_id[5841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 129.460652][ T4918] udevd[4918]: incorrect nilfs2 checksum on /dev/loop4 [ 129.483021][ T5846] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.581596][ T5840] overlayfs: upper fs does not support tmpfile. [ 129.665222][ T5840] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.756193][ T5840] overlayfs: failed to set xattr on upper [ 129.798463][ T5840] overlayfs: ...falling back to index=off,metacopy=off. [ 129.863302][ T5824] XFS (loop5): Mounting V5 Filesystem [ 129.890541][ T5852] set_capacity_and_notify: 5 callbacks suppressed [ 129.890558][ T5852] loop6: detected capacity change from 0 to 8192 [ 129.946979][ T5854] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.960669][ T5854] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.002193][ T5854] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 130.062107][ T5824] XFS (loop5): Ending clean mount [ 130.074121][ T4195] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 130.086772][ T5824] XFS (loop5): Quotacheck needed: Please wait. [ 130.113131][ T4195] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 130.124401][ T5854] EXT4-fs (loop0): Remounting filesystem read-only [ 130.133294][ T4195] Remounting filesystem read-only [ 130.142378][ T4195] NILFS (loop4): error -5 truncating bmap (ino=16) [ 130.152923][ T5866] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 130.162180][ T5866] FAT-fs (loop6): Filesystem has been set read-only [ 130.180505][ T4195] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 130.190250][ T5854] EXT4-fs (loop0): 1 truncate cleaned up [ 130.196372][ T5854] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,. Quota mode: writeback. [ 130.344169][ T5824] XFS (loop5): Quotacheck: Done. [ 130.385741][ T26] audit: type=1800 audit(1778669805.768:5): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.387" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 130.405953][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.482881][ T5870] loop4: detected capacity change from 0 to 128 [ 130.524384][ T5870] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 130.616374][ T5870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.913082][ T4361] XFS (loop5): Unmounting Filesystem [ 131.176733][ T5887] loop4: detected capacity change from 0 to 512 [ 131.217007][ T5890] loop6: detected capacity change from 0 to 512 [ 131.263458][ T5887] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.349771][ T5890] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.395234][ T5890] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.460331][ T5887] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,grpid,max_dir_size_kb=0x0000000000000100,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 131.513296][ T5887] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.695889][ T5913] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 131.707243][ T26] audit: type=1800 audit(1778669807.088:6): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.396" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 131.812723][ T4840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.864172][ T5913] team0: Port device wlan1 added [ 131.992127][ T5920] mmap: syz.0.409 (5920) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 132.352965][ T4840] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 132.381965][ T4840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.401095][ T4840] usb 6-1: Product: syz [ 132.409124][ T4840] usb 6-1: Manufacturer: syz [ 132.419379][ T4840] usb 6-1: SerialNumber: syz [ 132.428774][ T4840] usb 6-1: config 0 descriptor?? [ 132.475221][ T4840] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 132.579752][ T5945] loop0: detected capacity change from 0 to 64 [ 132.708504][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.714996][ T4840] sonixb 6-1:0.0: Error reading register 00: -71 [ 132.721827][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.746695][ T4840] usb 6-1: USB disconnect, device number 5 [ 132.871212][ T5956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.020775][ T5962] loop0: detected capacity change from 0 to 4096 [ 133.075857][ T5962] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 133.108486][ T5962] ntfs3: loop0: Failed to load $Extend. [ 133.406872][ T5972] loop4: detected capacity change from 0 to 512 [ 133.540887][ T5972] FAT-fs (loop4): bogus number of FAT sectors [ 133.579625][ T5972] FAT-fs (loop4): Can't find a valid FAT filesystem [ 133.650621][ T5961] loop6: detected capacity change from 0 to 40427 [ 133.700901][ T5961] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 133.728795][ T5961] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 133.799577][ T5964] loop1: detected capacity change from 0 to 32768 [ 133.819234][ T5961] F2FS-fs (loop6): Found nat_bits in checkpoint [ 133.872377][ T5961] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 133.886944][ T5961] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 133.894899][ T5964] Dev loop1 SGI disklabel: csum bad, label corrupted [ 133.932775][ T5669] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.020411][ T5983] netlink: 'syz.1.432': attribute type 3 has an invalid length. [ 134.083773][ T4932] attempt to access beyond end of device [ 134.083773][ T4932] loop6: rw=2049, want=45104, limit=40427 [ 134.241000][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.318034][ T5989] loop5: detected capacity change from 0 to 2048 [ 134.343161][ T5669] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.377868][ T5669] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.404992][ T5990] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.439602][ T26] audit: type=1326 audit(1778669809.818:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.5.436" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90537b4e59 code=0x0 [ 134.442759][ T5669] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.472787][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.503023][ T5669] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.523571][ T5669] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.539311][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 134.545763][ T5991] NILFS (loop5): error -2 truncating bmap (ino=16) [ 134.685804][ T5669] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.695542][ T4231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.721998][ T5669] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.730298][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.741447][ T5669] usb 1-1: Product: syz [ 134.745707][ T5669] usb 1-1: Manufacturer: syz [ 134.750682][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.761802][ T4231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.780210][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.790248][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.824031][ T5669] cdc_wdm 1-1:1.0: skipping garbage [ 134.830416][ T5669] cdc_wdm 1-1:1.0: skipping garbage [ 134.840738][ T5669] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.848724][ T5669] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.862965][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.874382][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.884670][ T13] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 134.894164][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.906638][ T13] usb 2-1: config 0 descriptor?? [ 135.062850][ T4231] usb 5-1: GET_CAPABILITIES returned 0 [ 135.068678][ T4231] usbtmc 5-1:16.0: can't read capabilities [ 135.102884][ T4957] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 135.285181][ T4840] usb 5-1: USB disconnect, device number 6 [ 135.330183][ T6003] loop5: detected capacity change from 0 to 128 [ 135.347158][ T6003] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.366245][ T6003] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.385021][ T13] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x2 [ 135.401453][ T13] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.418753][ T13] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.428894][ T13] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.447645][ T13] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 135.502841][ T4957] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.540014][ T4957] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.550551][ T4235] usb 1-1: USB disconnect, device number 3 [ 135.583564][ T6007] loop5: detected capacity change from 0 to 164 [ 135.600639][ T13] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 135.609477][ T13] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 135.658158][ T4957] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.668625][ T13] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 135.686304][ T4957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.701515][ T13] usb 2-1: USB disconnect, device number 6 [ 135.711136][ T4957] usb 7-1: SerialNumber: syz [ 135.910944][ T6012] fido_id[6012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 135.929660][ T6019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.050672][ T4957] usb 7-1: 0:2 : does not exist [ 136.094599][ T4957] usb 7-1: USB disconnect, device number 4 [ 136.218665][ T6029] loop5: detected capacity change from 0 to 2048 [ 136.236846][ T6032] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.cÖ,iŠŽé Q×› [ 136.348919][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.372823][ T6029] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.393167][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.679168][ T6033] loop0: detected capacity change from 0 to 32768 [ 136.707525][ T6033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.446 (6033) [ 136.731307][ T6043] loop5: detected capacity change from 0 to 1024 [ 136.757230][ T6044] loop6: detected capacity change from 0 to 256 [ 136.769603][ T6033] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.785463][ T6039] loop1: detected capacity change from 0 to 8192 [ 136.792433][ T6033] BTRFS info (device loop0): using free space tree [ 136.799310][ T6033] BTRFS info (device loop0): has skinny extents [ 137.079299][ T6043] hfsplus: xattr search failed [ 137.293650][ T6033] BTRFS info (device loop0): enabling ssd optimizations [ 137.387739][ T6065] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 137.396375][ T4361] hfsplus: node 4:3 still has 1 user(s)! [ 137.410005][ T6065] FAT-fs (loop1): Filesystem has been set read-only [ 137.482979][ T13] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 137.805314][ T6091] loop5: detected capacity change from 0 to 1024 [ 137.887070][ T6091] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 137.887070][ T6091] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 137.887070][ T6091] [ 137.917485][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.928347][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.945243][ T6091] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 137.945243][ T6091] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 137.945243][ T6091] [ 137.962822][ T13] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.004386][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.038040][ T6091] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,usrquota,nouser_xattr,dioread_lock,debug_want_extra_isize=0x0000000000000080,block_validity,noauto_da_alloc,stripe=0x0000000000000081,noacl,,errors=continue. Quota mode: writeback. [ 138.080395][ T13] usb 5-1: config 0 descriptor?? [ 138.132863][ T4840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.151812][ T13] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.160591][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 138.204510][ T13] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.244665][ T13] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.257702][ T13] usb 5-1: media controller created [ 138.264827][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.323050][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 138.336838][ T13] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.365850][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 138.373290][ T6072] dibusb: i2c wr: len=235 is too big! [ 138.373290][ T6072] [ 138.394391][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 138.432895][ T13] dvb-usb: schedule remote query interval to 150 msecs. [ 138.440019][ T13] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.462077][ T13] usb 5-1: USB disconnect, device number 7 [ 138.502859][ T4840] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 138.534786][ T4840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.546260][ T13] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 138.583981][ T4840] usb 2-1: config 0 descriptor?? [ 138.636368][ T4840] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 138.788673][ T6122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.093023][ T4840] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 139.161591][ T6150] loop4: detected capacity change from 0 to 128 [ 139.259479][ T6150] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 139.282017][ T6150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.347084][ T6156] loop5: detected capacity change from 0 to 4096 [ 139.451088][ T6156] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 139.522764][ T4840] gspca_cpia1: usb_control_msg 02, error -71 [ 139.539187][ T4840] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 139.550434][ T6156] ntfs3: loop5: Failed to load $Extend. [ 139.562593][ T5666] kernel write not supported for file /vcs (pid: 5666 comm: kworker/0:18) [ 139.603006][ T4840] usb 2-1: USB disconnect, device number 7 [ 140.056677][ T6189] Invalid argument reading file caps for ./file0 [ 140.152892][ T4840] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 140.221304][ T6202] netlink: 'syz.0.485': attribute type 11 has an invalid length. [ 140.284624][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.297683][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.572968][ T4840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.588970][ T4840] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.618250][ T4840] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 140.637947][ T4840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.680377][ T4840] usb 7-1: config 0 descriptor?? [ 140.729822][ T6222] misc userio: Invalid payload size [ 140.738556][ T4840] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 140.755160][ T4840] dvb-usb: bulk message failed: -22 (3/0) [ 140.762258][ T6224] loop4: detected capacity change from 0 to 64 [ 140.781920][ T4840] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 140.792981][ T4957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.803021][ T4840] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 140.811671][ T4840] usb 7-1: media controller created [ 140.821029][ T4840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.840247][ T4840] dvb-usb: bulk message failed: -22 (6/0) [ 140.846582][ T4840] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 140.894017][ T4840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 140.895196][ T6224] loop4: detected capacity change from 0 to 256 [ 140.920722][ T4840] dvb-usb: schedule remote query interval to 150 msecs. [ 140.928528][ T4840] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 140.940518][ T6185] dvb-usb: bulk message failed: -22 (2/0) [ 140.989650][ T6185] dibusb: i2c wr: len=235 is too big! [ 140.989650][ T6185] [ 140.998721][ T4829] usb 7-1: USB disconnect, device number 5 [ 141.041205][ T6224] FAT-fs (loop4): Directory bread(block 64) failed [ 141.048855][ T4829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.072745][ T4957] usb 1-1: Using ep0 maxpacket: 16 [ 141.078460][ T6224] FAT-fs (loop4): Directory bread(block 65) failed [ 141.103347][ T6224] FAT-fs (loop4): Directory bread(block 66) failed [ 141.130701][ T6224] FAT-fs (loop4): Directory bread(block 67) failed [ 141.162489][ T6224] FAT-fs (loop4): Directory bread(block 68) failed [ 141.190024][ T6224] FAT-fs (loop4): Directory bread(block 69) failed [ 141.203026][ T4957] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.221582][ T4957] usb 1-1: config 0 has no interface number 0 [ 141.228220][ T6224] FAT-fs (loop4): Directory bread(block 70) failed [ 141.253275][ T4957] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 22057, setting to 64 [ 141.270397][ T6224] FAT-fs (loop4): Directory bread(block 71) failed [ 141.292913][ T6224] FAT-fs (loop4): Directory bread(block 72) failed [ 141.341992][ T6224] FAT-fs (loop4): Directory bread(block 73) failed [ 141.472959][ T4957] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 141.489400][ T6242] tipc: Started in network mode [ 141.502810][ T4957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.522777][ T4957] usb 1-1: Product: syz [ 141.531604][ T4957] usb 1-1: Manufacturer: syz [ 141.536802][ T6242] tipc: Node identity ac1414aa, cluster identity 4711 [ 141.576585][ T4957] usb 1-1: SerialNumber: syz [ 141.620129][ T6242] tipc: Enabled bearer , priority 10 [ 141.634511][ T4957] usb 1-1: config 0 descriptor?? [ 141.830466][ T6258] loop5: detected capacity change from 0 to 128 [ 141.845695][ T4957] snd-usb-audio: probe of 1-1:0.1 failed with error -2 [ 141.969470][ T4957] usb 1-1: USB disconnect, device number 4 [ 142.001872][ T6258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 142.015699][ T6258] System zones: 1-3, 19-19, 35-36 [ 142.067916][ T6258] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 142.141370][ T6258] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.230807][ T6258] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 131073 (only 1 groups) [ 142.293403][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.323785][ T6273] loop4: detected capacity change from 0 to 256 [ 142.600207][ T6280] loop0: detected capacity change from 0 to 64 [ 142.696215][ T4951] tipc: Node number set to 2886997162 [ 142.930891][ T6267] loop6: detected capacity change from 0 to 32768 [ 143.028473][ T6267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.503 (6267) [ 143.113307][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 143.145515][ T6267] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 143.166557][ T6267] BTRFS info (device loop6): using free space tree [ 143.247359][ T6267] BTRFS info (device loop6): has skinny extents [ 143.466230][ T6267] BTRFS info (device loop6): enabling ssd optimizations [ 143.651816][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.714713][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.857645][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 143.877941][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.515'. [ 143.952322][ T6325] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.962149][ T6325] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.971042][ T6325] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.979846][ T6325] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.077517][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 144.119917][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.515'. [ 144.344216][ T6329] loop4: detected capacity change from 0 to 8192 [ 144.767927][ T6338] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 144.801533][ T6338] FAT-fs (loop4): Filesystem has been set read-only [ 144.847640][ T6329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 144.894258][ T6329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 144.940620][ T6329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 145.409660][ T6352] loop0: detected capacity change from 0 to 1024 [ 145.441283][ T6355] loop6: detected capacity change from 0 to 256 [ 145.547910][ T6355] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 145.579559][ T6327] loop1: detected capacity change from 0 to 32768 [ 145.634976][ T6352] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.810224][ T6327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.516 (6327) [ 145.953346][ T6327] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 145.962219][ T6327] BTRFS info (device loop1): use no compression [ 146.106344][ T6327] BTRFS info (device loop1): use zlib compression, level 3 [ 146.133276][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.145860][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.158382][ T6327] BTRFS info (device loop1): force clearing of disk cache [ 146.185766][ T6327] BTRFS info (device loop1): enabling ssd optimizations [ 146.212756][ T6327] BTRFS info (device loop1): using spread ssd allocation scheme [ 146.247484][ T6374] loop4: detected capacity change from 0 to 128 [ 146.277558][ T6327] BTRFS info (device loop1): turning off barriers [ 146.302423][ T6374] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 146.335268][ T4546] udevd[4546]: incorrect ext4 checksum on /dev/loop4 [ 146.376919][ T6327] BTRFS info (device loop1): disabling free space tree [ 146.417887][ T6327] BTRFS info (device loop1): not using ssd optimizations [ 146.432668][ T6327] BTRFS info (device loop1): not using spread ssd allocation scheme [ 146.451374][ T6381] loop0: detected capacity change from 0 to 512 [ 146.471400][ T6327] BTRFS info (device loop1): has skinny extents [ 146.604871][ T6390] loop4: detected capacity change from 0 to 64 [ 146.705707][ T4234] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 146.992906][ T4234] usb 7-1: Using ep0 maxpacket: 16 [ 147.322912][ T4234] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 147.341684][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.360859][ T4234] usb 7-1: Product: syz [ 147.366510][ T4234] usb 7-1: Manufacturer: syz [ 147.374587][ T4234] usb 7-1: SerialNumber: syz [ 147.383904][ T6327] BTRFS error (device loop1): open_ctree failed: -12 [ 147.410228][ T4234] usb 7-1: config 0 descriptor?? [ 147.454276][ T4234] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 147.503409][ T4234] usb 7-1: Detected FT-X [ 147.662974][ T4234] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 147.792790][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 147.838715][ T4951] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.182972][ T4234] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.223137][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.238668][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.257779][ T13] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 148.273801][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.283677][ T4951] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 148.291997][ T4951] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 148.313534][ T4951] usb 1-1: config 220 has no interface number 2 [ 148.320783][ T13] usb 6-1: config 0 descriptor?? [ 148.326271][ T4951] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 148.352872][ T4951] usb 1-1: config 220 interface 0 has no altsetting 0 [ 148.359801][ T4951] usb 1-1: config 220 interface 76 has no altsetting 0 [ 148.367109][ T4951] usb 1-1: config 220 interface 1 has no altsetting 0 [ 148.398684][ T4836] usb 7-1: USB disconnect, device number 6 [ 148.446553][ T4836] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.466988][ T4836] ftdi_sio 7-1:0.0: device disconnected [ 148.562967][ T4951] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.572145][ T4951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.592747][ T4951] usb 1-1: Product: syz [ 148.611650][ T4951] usb 1-1: Manufacturer: syz [ 148.616746][ T4951] usb 1-1: SerialNumber: syz [ 148.835619][ T13] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x2 [ 148.843234][ T13] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 148.850107][ T13] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 148.857312][ T13] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 148.867399][ T13] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 148.994144][ T4951] usb 1-1: selecting invalid altsetting 0 [ 149.006314][ T4951] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 149.013875][ T4951] usb 1-1: No valid video chain found. [ 149.035505][ T6440] loop4: detected capacity change from 0 to 4096 [ 149.068725][ T13] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 149.076297][ T6440] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 149.089793][ T13] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 149.111532][ T4951] usb 1-1: selecting invalid altsetting 0 [ 149.136504][ T4951] usbtest: probe of 1-1:220.1 failed with error -22 [ 149.161730][ T13] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 149.174657][ T6440] ntfs: volume version 3.1. [ 149.206877][ T4951] usb 1-1: USB disconnect, device number 5 [ 149.260431][ T13] usb 6-1: USB disconnect, device number 6 [ 149.418026][ T6450] fido_id[6450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 149.522957][ T4836] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 149.762757][ T4836] usb 7-1: Using ep0 maxpacket: 32 [ 149.802024][ T6460] loop0: detected capacity change from 0 to 4096 [ 149.843225][ T6464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 149.850483][ T6464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.871607][ T6460] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 149.890263][ T4836] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.910633][ T4836] usb 7-1: config 0 has no interface number 0 [ 149.925194][ T6460] UDF-fs: Scanning with blocksize 512 failed [ 149.936835][ T6464] vhci_hcd vhci_hcd.0: Device attached [ 149.961534][ T6460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.003247][ T6453] loop1: detected capacity change from 0 to 32768 [ 150.056342][ T6453] XFS (loop1): Mounting V5 Filesystem [ 150.082890][ T4836] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 150.104022][ T4836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.112245][ T4836] usb 7-1: Product: syz [ 150.117020][ T4836] usb 7-1: Manufacturer: syz [ 150.121718][ T4836] usb 7-1: SerialNumber: syz [ 150.137486][ T4836] usb 7-1: config 0 descriptor?? [ 150.156390][ T6453] XFS (loop1): Ending clean mount [ 150.184669][ T4836] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.202902][ T4832] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 150.223625][ T4951] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.267184][ T4188] XFS (loop1): Unmounting Filesystem [ 150.427629][ T4836] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.442130][ T4836] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 150.492939][ T4951] usb 5-1: Using ep0 maxpacket: 8 [ 150.653098][ T4951] usb 5-1: config 0 has no interfaces? [ 150.659087][ T4951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.674979][ T4951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.697990][ T4951] usb 5-1: config 0 descriptor?? [ 150.829489][ T4240] usb 7-1: USB disconnect, device number 7 [ 150.842676][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.856107][ T4240] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 150.893946][ T4240] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 150.920880][ T4240] quatech2 7-1:0.51: device disconnected [ 150.982152][ T6465] vhci_hcd: cannot find a urb of seqnum 13832 max seqnum 1 [ 150.985190][ T4836] usb 5-1: USB disconnect, device number 8 [ 151.005167][ T6499] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.013347][ T144] vhci_hcd: stop threads [ 151.023950][ T144] vhci_hcd: release socket [ 151.048142][ T144] vhci_hcd: disconnect device [ 151.352785][ T4951] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 151.549125][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 151.757167][ T4951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.788414][ T4951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.798623][ T4951] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.816303][ T4951] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.830342][ T4951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.846657][ T6517] loop0: detected capacity change from 0 to 8192 [ 151.851016][ T4951] usb 6-1: config 0 descriptor?? [ 152.012993][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.335857][ T4951] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 152.384365][ T4951] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 152.403025][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 152.404606][ T6522] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 152.422644][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.454401][ T6522] FAT-fs (loop0): Filesystem has been set read-only [ 152.468721][ T6523] loop1: detected capacity change from 0 to 32768 [ 152.483547][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 152.513095][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 152.623180][ T6523] [ 152.623180][ T6523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.623180][ T6523] [ 152.639856][ T13] usb 6-1: USB disconnect, device number 7 [ 152.667711][ T6528] fido_id[6528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 152.752955][ T4234] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 152.772743][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.782121][ T4234] usb 5-1: Product: syz [ 152.803000][ T4234] usb 5-1: Manufacturer: syz [ 152.810893][ T4234] usb 5-1: SerialNumber: syz [ 152.847151][ T6523] ERROR: (device loop1): diWrite: ixpxd invalid [ 152.847151][ T6523] [ 152.856948][ T4234] usb 5-1: config 0 descriptor?? [ 152.901476][ T6523] ERROR: (device loop1): txCommit: [ 152.901476][ T6523] [ 152.938754][ T26] audit: type=1800 audit(1778669829.316:8): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.582" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 152.991715][ T6537] ERROR: (device loop1): diWrite: ixpxd invalid [ 152.991715][ T6537] [ 153.014831][ T6537] ERROR: (device loop1): txCommit: [ 153.014831][ T6537] [ 153.135936][ T4234] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 153.213177][ T4951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.270726][ T6550] loop0: detected capacity change from 0 to 512 [ 153.279994][ T4188] [ 153.279994][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.279994][ T4188] [ 153.310236][ T4188] [ 153.310236][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.310236][ T4188] [ 153.331138][ T6550] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.380543][ T4240] usb 5-1: USB disconnect, device number 9 [ 153.417922][ T6550] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.593: invalid indirect mapped block 32768 (level 2) [ 153.482958][ T6556] loop5: detected capacity change from 0 to 8 [ 153.561857][ T6550] EXT4-fs (loop0): 1 orphan inode deleted [ 153.567815][ T6550] EXT4-fs (loop0): 1 truncate cleaned up [ 153.583208][ T6550] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,nolazytime,,errors=continue. Quota mode: none. [ 153.690673][ T6550] EXT4-fs (loop0): shut down requested (1) [ 153.716706][ T6541] loop6: detected capacity change from 0 to 32768 [ 153.795676][ T6563] loop1: detected capacity change from 0 to 128 [ 153.814128][ T6541] XFS (loop6): Mounting V5 Filesystem [ 153.826929][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.902837][ T4836] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 153.988210][ T6541] XFS (loop6): Ending clean mount [ 154.002859][ T6574] loop0: detected capacity change from 0 to 128 [ 154.017599][ T26] audit: type=1804 audit(1778669830.396:9): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.598" name="/newroot/136/file0/bus" dev="loop1" ino=1048635 res=1 errno=0 [ 154.238118][ T4932] XFS (loop6): Unmounting Filesystem [ 154.262961][ T4836] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.289554][ T4836] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.322900][ T4836] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.332107][ T4836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.421188][ T4836] hub 6-1:4.0: USB hub found [ 154.497248][ T6585] netlink: 240 bytes leftover after parsing attributes in process `syz.0.604'. [ 154.643437][ T4836] hub 6-1:4.0: 2 ports detected [ 154.648876][ T4836] usb 6-1: selecting invalid altsetting 1 [ 154.659736][ T6592] loop4: detected capacity change from 0 to 16 [ 154.675671][ T4836] hub 6-1:4.0: Using single TT (err -22) [ 154.739249][ T6592] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.852877][ T4836] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 154.870750][ T4836] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 154.915297][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.948238][ T4836] usb 6-1: USB disconnect, device number 8 [ 155.226064][ T6609] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 155.250746][ T6609] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 155.349976][ T4832] vhci_hcd: vhci_device speed not set [ 155.491960][ T6604] loop6: detected capacity change from 0 to 32768 [ 155.526966][ T6604] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.602 (6604) [ 155.553796][ T6604] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 155.563464][ T6604] BTRFS info (device loop6): use no compression [ 155.569767][ T6604] BTRFS info (device loop6): use zlib compression, level 3 [ 155.577753][ T6604] BTRFS info (device loop6): force clearing of disk cache [ 155.586518][ T6604] BTRFS info (device loop6): enabling ssd optimizations [ 155.593826][ T6604] BTRFS info (device loop6): using spread ssd allocation scheme [ 155.601508][ T6604] BTRFS info (device loop6): turning off barriers [ 155.608416][ T6604] BTRFS info (device loop6): disabling free space tree [ 155.615645][ T6604] BTRFS info (device loop6): not using ssd optimizations [ 155.626247][ T6604] BTRFS info (device loop6): not using spread ssd allocation scheme [ 155.634817][ T6604] BTRFS info (device loop6): has skinny extents [ 155.754816][ T6618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 155.826617][ T6604] BTRFS info (device loop6): clearing free space tree [ 155.836394][ T6604] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.874516][ T6604] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.984026][ T4836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.016340][ T154] BTRFS warning (device loop6): checksum verify failed on 5308416 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x4a21ccf5e2b6d071413bede9f7fe52de5796fd222631a5e027ababe3db650722 level 0 [ 156.281196][ T6646] loop0: detected capacity change from 0 to 1764 [ 156.409318][ T6646] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 156.455448][ T6648] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.479009][ T6651] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 156.633488][ T6648] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 156.662641][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.729017][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.768256][ T6650] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 156.924225][ T6648] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.935496][ T6656] set_capacity_and_notify: 3 callbacks suppressed [ 156.935545][ T6656] loop0: detected capacity change from 0 to 512 [ 157.029920][ T4838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.057900][ T6648] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 157.079574][ T6656] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.096652][ T26] audit: type=1800 audit(1778669833.476:10): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.623" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 157.173018][ T6656] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.225309][ T6648] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 157.355228][ T6648] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 20 with error 28 [ 157.389295][ T6662] loop6: detected capacity change from 0 to 4096 [ 157.399378][ T6648] EXT4-fs (loop4): This should not happen!! Data will be lost [ 157.399378][ T6648] [ 157.409765][ T6648] EXT4-fs (loop4): Total free blocks count 0 [ 157.416418][ T6648] EXT4-fs (loop4): Free/Dirty block details [ 157.423553][ T6648] EXT4-fs (loop4): free_blocks=20480 [ 157.428966][ T6648] EXT4-fs (loop4): dirty_blocks=32 [ 157.447900][ T6648] EXT4-fs (loop4): Block reservation details [ 157.468215][ T6648] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 157.489191][ T6662] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 157.577608][ T6668] fuse: Invalid user_id [ 157.591064][ T6669] loop5: detected capacity change from 0 to 7 [ 157.629863][ T4918] Dev loop5: unable to read RDB block 7 [ 157.674607][ T4918] loop5: unable to read partition table [ 157.684860][ T4918] loop5: partition table beyond EOD, truncated [ 157.695540][ T6671] device syzkaller1 entered promiscuous mode [ 157.707442][ T6669] Dev loop5: unable to read RDB block 7 [ 157.745699][ T6669] loop5: unable to read partition table [ 157.767957][ T6669] loop5: partition table beyond EOD, truncated [ 157.793107][ T6669] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.136449][ T4831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.313550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.456516][ T6703] loop5: detected capacity change from 0 to 512 [ 158.463682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.542724][ T4836] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.567269][ T6703] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 158.728189][ T6706] loop0: detected capacity change from 0 to 256 [ 158.837487][ T6700] loop6: detected capacity change from 0 to 32768 [ 158.871983][ T6706] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 158.905482][ T6700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.643 (6700) [ 158.923328][ T4836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.949298][ T4836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.981585][ T6700] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 159.042942][ T4836] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.062535][ T4836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.092735][ T6700] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 159.122413][ T4836] usb 5-1: SerialNumber: syz [ 159.127473][ T6700] BTRFS info (device loop6): trying to use backup root at mount time [ 159.151295][ T6700] BTRFS info (device loop6): setting nodatasum [ 159.183393][ T4838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.198095][ T6700] BTRFS info (device loop6): enabling ssd optimizations [ 159.228239][ T6700] BTRFS info (device loop6): using spread ssd allocation scheme [ 159.267791][ T6700] BTRFS info (device loop6): turning on flush-on-commit [ 159.303050][ T6700] BTRFS info (device loop6): force zlib compression, level 3 [ 159.310506][ T6700] BTRFS info (device loop6): using free space tree [ 159.347666][ T6700] BTRFS info (device loop6): has skinny extents [ 159.445491][ T4836] usb 5-1: 0:2 : does not exist [ 159.502213][ T4836] usb 5-1: USB disconnect, device number 10 [ 159.574246][ T6728] loop1: detected capacity change from 0 to 4096 [ 159.638066][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.716247][ T6728] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 159.734247][ T6728] UDF-fs: Scanning with blocksize 512 failed [ 159.771039][ T6728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.792438][ T6745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.650'. [ 159.805319][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.361910][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.672750][ T4842] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 160.908788][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.665'. [ 160.918638][ T4842] usb 7-1: Using ep0 maxpacket: 32 [ 160.971538][ T6781] loop4: detected capacity change from 0 to 8192 [ 161.042961][ T4842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.092731][ T4842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.123317][ T4842] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.140734][ T4842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.181259][ T4842] usb 7-1: config 0 descriptor?? [ 161.423226][ T4855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.519837][ T6800] loop5: detected capacity change from 0 to 1024 [ 161.526851][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.610377][ T6800] EXT4-fs (loop5): Ignoring removed bh option [ 161.723102][ T4842] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 161.729436][ T6800] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noblock_validity,delalloc,journal_dev=0x0000000000000002,commit=0x0000000000000000,barrier=0x000000000000701c,bh,,errors=continue. Quota mode: none. [ 161.805469][ T6800] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.877931][ T6790] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 161.940339][ T6790] FAT-fs (loop4): Filesystem has been set read-only [ 161.977093][ T4829] usb 7-1: USB disconnect, device number 8 [ 162.001795][ T6800] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.670: bg 0: block 112: padding at end of block bitmap is not set [ 162.153420][ T6800] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.670: Freeing blocks not in datazone - block = 0, count = 16 [ 162.464694][ T4829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.628543][ T26] audit: type=1326 audit(1778669838.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.4.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4b7fbe59 code=0x0 [ 162.879534][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.098850][ T6869] loop0: detected capacity change from 0 to 32768 [ 163.139179][ T6869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.689 (6869) [ 163.200387][ T6869] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 163.227612][ T6869] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 163.286573][ T6869] BTRFS info (device loop0): trying to use backup root at mount time [ 163.313680][ T6869] BTRFS info (device loop0): setting nodatasum [ 163.342785][ T6869] BTRFS info (device loop0): enabling ssd optimizations [ 163.366785][ T6869] BTRFS info (device loop0): using spread ssd allocation scheme [ 163.398687][ T6869] BTRFS info (device loop0): turning on flush-on-commit [ 163.428385][ T4829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.442939][ T6869] BTRFS info (device loop0): force zlib compression, level 3 [ 163.471962][ T6869] BTRFS info (device loop0): using free space tree [ 163.494049][ T6885] loop6: detected capacity change from 0 to 8192 [ 163.503552][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.506916][ T6869] BTRFS info (device loop0): has skinny extents [ 163.622977][ T6885] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 163.686515][ T6885] REISERFS (device loop6): using ordered data mode [ 163.723433][ T6885] reiserfs: using flush barriers [ 163.767194][ T6885] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.791817][ T6879] loop1: detected capacity change from 0 to 32768 [ 163.819689][ T6885] REISERFS (device loop6): checking transaction log (loop6) [ 163.835375][ T6879] XFS (loop1): Mounting V5 Filesystem [ 164.114325][ T6879] XFS (loop1): Ending clean mount [ 164.162495][ T6879] XFS (loop1): Quotacheck needed: Please wait. [ 164.315313][ T6879] XFS (loop1): Quotacheck: Done. [ 164.329894][ T6885] REISERFS (device loop6): Using tea hash to sort names [ 164.343081][ T6885] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 164.543378][ T4829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.569358][ T4188] XFS (loop1): Unmounting Filesystem [ 164.670245][ T6929] vivid-000: disconnect [ 164.681771][ T6927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.695781][ T6928] vivid-000: reconnect [ 164.718687][ T6927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.761376][ T6927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.771040][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.808915][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.846620][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.886846][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.259071][ T6949] loop1: detected capacity change from 0 to 4096 [ 165.331225][ T6951] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.386522][ T6949] NILFS (loop1): nilfs_sufile_do_free: segment 7 is already clean [ 165.404797][ T6949] NILFS (loop1): nilfs_sufile_do_free: segment 8 is already clean [ 165.455774][ T4842] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 165.535402][ T6944] loop0: detected capacity change from 0 to 32768 [ 165.703042][ T4842] usb 7-1: Using ep0 maxpacket: 8 [ 165.779653][ T6956] loop4: detected capacity change from 0 to 8192 [ 165.829790][ T4842] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 165.858621][ T4842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 165.942360][ T6959] loop5: detected capacity change from 0 to 1024 [ 165.953368][ T4842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.998479][ T4842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 166.037073][ T4842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 166.057932][ T6959] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.084005][ T4842] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.117510][ T4842] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.142792][ T4842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.176039][ T6959] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 166.295363][ T6959] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.341031][ T6959] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: none. [ 166.365052][ T26] audit: type=1800 audit(1778669842.746:12): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.712" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 166.387242][ T6959] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 166.418767][ T6959] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 166.438835][ T4842] usb 7-1: GET_CAPABILITIES returned 0 [ 166.444811][ T4842] usbtmc 7-1:16.0: can't read capabilities [ 166.450905][ T6959] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.450905][ T6959] [ 166.502869][ T6959] EXT4-fs (loop5): Total free blocks count 0 [ 166.513125][ T4855] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.519752][ T6959] EXT4-fs (loop5): Free/Dirty block details [ 166.529488][ T6959] EXT4-fs (loop5): free_blocks=20480 [ 166.566971][ T6959] EXT4-fs (loop5): dirty_blocks=64 [ 166.574772][ T6977] loop0: detected capacity change from 0 to 8 [ 166.589806][ T6959] EXT4-fs (loop5): Block reservation details [ 166.600808][ T6977] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 166.620751][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop0 [ 166.622981][ T6959] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 166.666082][ T6947] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 166.694867][ T4842] usb 7-1: USB disconnect, device number 9 [ 166.717081][ T6977] cramfs: Error -3 while decompressing! [ 166.762879][ T4855] usb 5-1: Using ep0 maxpacket: 8 [ 166.785211][ T6977] cramfs: ffffffff964040c8(26)->ffff8880718a5000(4096) [ 166.797237][ T6977] cramfs: Error -3 while decompressing! [ 166.805795][ T6977] cramfs: ffffffff964040e2(26)->ffff88804ff44000(4096) [ 166.813311][ T6977] cramfs: Error -3 while decompressing! [ 166.827210][ T6977] cramfs: ffffffff964040fc(16)->ffff88804ff45000(4096) [ 166.853095][ T6977] cramfs: Error -3 while decompressing! [ 166.858717][ T6977] cramfs: ffffffff964040c8(26)->ffff8880718a5000(4096) [ 166.882963][ T4855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 166.910414][ T4855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.925826][ T4855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.937512][ T4855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 166.962449][ T4855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 166.972916][ T4855] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 166.982236][ T4855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.993274][ T6982] loop1: detected capacity change from 0 to 4096 [ 167.007306][ T4855] usb 5-1: config 0 descriptor?? [ 167.028683][ T6982] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 167.083472][ T4190] Bluetooth: hci5: urb ffff888019dd1700 submission failed (90) [ 167.291256][ T4829] usb 5-1: USB disconnect, device number 11 [ 167.387617][ T4188] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 167.389534][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.724'. [ 167.414004][ T4188] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 167.428244][ T4188] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 167.586408][ T6986] loop5: detected capacity change from 0 to 32768 [ 167.933546][ T4842] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.261974][ T7024] set_capacity_and_notify: 2 callbacks suppressed [ 168.261989][ T7024] loop4: detected capacity change from 0 to 2048 [ 168.293089][ T4842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 168.335984][ T4842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 168.363528][ T7024] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 168.402374][ T7024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.439848][ T7031] loop1: detected capacity change from 0 to 64 [ 168.479283][ T26] audit: type=1800 audit(1778669844.856:13): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.735" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 168.563082][ T4842] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 168.607716][ T4842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.641708][ T4842] usb 1-1: Product: syz [ 168.659607][ T4842] usb 1-1: Manufacturer: syz [ 168.695658][ T4842] usb 1-1: SerialNumber: syz [ 168.728072][ T4829] net_ratelimit: 4 callbacks suppressed [ 168.728088][ T4829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.746617][ T4842] usb 1-1: config 0 descriptor?? [ 168.763097][ T7003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.788681][ T7003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.038379][ T7003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.059514][ T7003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.081168][ T7045] loop5: detected capacity change from 0 to 32768 [ 169.126071][ T7048] loop4: detected capacity change from 0 to 1024 [ 169.179677][ T7045] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.740 (7045) [ 169.237791][ T7045] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 169.246639][ T7045] BTRFS info (device loop5): setting nodatacow, compression disabled [ 169.254859][ T7045] BTRFS info (device loop5): force clearing of disk cache [ 169.262007][ T7045] BTRFS info (device loop5): enabling ssd optimizations [ 169.269093][ T7045] BTRFS info (device loop5): using spread ssd allocation scheme [ 169.276845][ T7045] BTRFS info (device loop5): turning off barriers [ 169.283389][ T7045] BTRFS info (device loop5): disabling free space tree [ 169.290299][ T7045] BTRFS info (device loop5): not using ssd optimizations [ 169.297633][ T7045] BTRFS info (device loop5): not using spread ssd allocation scheme [ 169.305717][ T7045] BTRFS info (device loop5): has skinny extents [ 169.361905][ T7058] hfsplus: request for non-existent node 134217728 in B*Tree [ 169.372870][ T4842] Error reading MAC address [ 169.389276][ T4842] usb 1-1: USB disconnect, device number 6 [ 169.427681][ T7058] hfsplus: request for non-existent node 134217728 in B*Tree [ 169.443556][ T7064] hfsplus: hfsplus: Invalid key length: 27767 [ 169.506591][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 169.538151][ T4950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.570026][ T7045] BTRFS info (device loop5): clearing free space tree [ 169.577151][ T7045] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.587036][ T7045] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.668310][ T26] audit: type=1800 audit(1778669846.046:14): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.740" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 169.771249][ T4829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.104792][ T7103] loop0: detected capacity change from 0 to 64 [ 170.467916][ T7110] loop4: detected capacity change from 0 to 128 [ 170.661970][ T7112] device macvlan2 entered promiscuous mode [ 170.670849][ T7112] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 170.703676][ T7088] loop1: detected capacity change from 0 to 32768 [ 170.784193][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.899186][ T7120] loop4: detected capacity change from 0 to 4096 [ 170.916046][ T7088] XFS (loop1): Mounting V5 Filesystem [ 171.058448][ T7088] XFS (loop1): Ending clean mount [ 171.113368][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.125483][ T26] audit: type=1800 audit(1778669847.506:15): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.746" name="file1" dev="loop1" ino=5766 res=0 errno=0 [ 171.148847][ T7088] XFS (loop1): User initiated shutdown received. [ 171.165564][ T7088] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 171.180402][ T7088] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 171.204561][ T4188] XFS (loop1): Unmounting Filesystem [ 171.361383][ T4829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.410110][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 171.423460][ T7137] loop5: detected capacity change from 0 to 4096 [ 171.445323][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 171.486619][ T7138] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.556061][ T7137] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean [ 171.620116][ T7137] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean [ 171.682271][ T7142] device syzkaller1 entered promiscuous mode [ 171.857427][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.000145][ T7151] device syzkaller1 entered promiscuous mode [ 172.111007][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.768'. [ 172.125673][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 172.137290][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 172.146837][ T7155] netlink: 100 bytes leftover after parsing attributes in process `syz.5.768'. [ 172.271071][ T7161] loop1: detected capacity change from 0 to 256 [ 172.383417][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.417924][ T7161] FAT-fs (loop1): Directory bread(block 64) failed [ 172.437727][ T7161] FAT-fs (loop1): Directory bread(block 65) failed [ 172.458792][ T7161] FAT-fs (loop1): Directory bread(block 66) failed [ 172.498774][ T7161] FAT-fs (loop1): Directory bread(block 67) failed [ 172.548891][ T7161] FAT-fs (loop1): Directory bread(block 68) failed [ 172.553768][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.564271][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.613183][ T7161] FAT-fs (loop1): Directory bread(block 69) failed [ 172.663100][ T7161] FAT-fs (loop1): Directory bread(block 70) failed [ 172.678795][ T7161] FAT-fs (loop1): Directory bread(block 71) failed [ 172.729829][ T7161] FAT-fs (loop1): Directory bread(block 72) failed [ 172.757024][ T7161] FAT-fs (loop1): Directory bread(block 73) failed [ 172.782951][ T4829] Bluetooth: hci4: command 0x0405 tx timeout [ 173.140114][ T7184] Dev loop9: unable to read RDB block 7 [ 173.187447][ T7184] loop9: unable to read partition table [ 173.246623][ T7184] loop9: partition table beyond EOD, truncated [ 173.302790][ T7184] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 173.565164][ T7178] set_capacity_and_notify: 2 callbacks suppressed [ 173.565182][ T7178] loop4: detected capacity change from 0 to 131072 [ 173.633187][ T7178] F2FS-fs (loop4): invalid crc value [ 173.677180][ T7178] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.712793][ T7178] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 173.746856][ T7178] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 173.816471][ T7197] loop6: detected capacity change from 0 to 2048 [ 173.956265][ T7197] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.089902][ T7202] loop1: detected capacity change from 0 to 64 [ 174.389697][ T7207] loop6: detected capacity change from 0 to 512 [ 174.463102][ T4854] net_ratelimit: 2 callbacks suppressed [ 174.463118][ T4854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.533527][ T7207] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.711193][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.844878][ T7216] loop5: detected capacity change from 0 to 512 [ 174.846391][ T4854] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.941455][ T7216] EXT4-fs (loop5): inline encryption not supported [ 174.954680][ T7216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.999130][ T7216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 175.037776][ T7216] System zones: 1-12 [ 175.055537][ T7216] EXT4-fs (loop5): 1 truncate cleaned up [ 175.072580][ T7216] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,inlinecrypt,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 175.114010][ T4854] usb 1-1: Using ep0 maxpacket: 8 [ 175.199463][ T7232] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 175.199463][ T7232] The task syz.6.797 (7232) triggered the difference, watch for misbehavior. [ 175.240534][ T7234] loop4: detected capacity change from 0 to 128 [ 175.275504][ T4267] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.421232][ T4364] block nbd5: Receive control failed (result -107) [ 175.433035][ T4854] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 175.442403][ T4854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.450610][ T4854] usb 1-1: Product: syz [ 175.454859][ T4854] usb 1-1: Manufacturer: syz [ 175.459485][ T4854] usb 1-1: SerialNumber: syz [ 175.493491][ T4854] usb 1-1: config 0 descriptor?? [ 175.504226][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.518430][ T7237] block nbd5: shutting down sockets [ 175.534998][ T4854] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 175.556773][ T4267] usb 2-1: Using ep0 maxpacket: 16 [ 175.584075][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.592489][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.670655][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.805'. [ 175.688624][ T4267] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.703289][ T4267] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.720109][ T4267] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 175.729708][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.743095][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.785154][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.803096][ T7248] device batadv_slave_0 entered promiscuous mode [ 176.216771][ T4267] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 176.238846][ T4267] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 176.257294][ T4267] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 176.273228][ T4267] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 176.289578][ T4267] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 176.321199][ T4267] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 176.345826][ T7246] loop4: detected capacity change from 0 to 40427 [ 176.359333][ T7260] loop5: detected capacity change from 0 to 8 [ 176.423191][ T7246] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 176.430985][ T7246] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 176.435273][ T7223] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 176.450892][ T7223] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 176.459345][ T7223] CPU: 0 PID: 7223 Comm: syz.1.798 Not tainted syzkaller #0 [ 176.466660][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.476753][ T7223] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 176.482257][ T7223] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 66 9d 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 48 9d 55 fa 4c 8b 3b 4d 8d a7 70 [ 176.483553][ T26] audit: type=1800 audit(1778669852.866:16): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.812" name="file1" dev="loop5" ino=1 res=0 errno=0 [ 176.501894][ T7223] RSP: 0018:ffffc900023879a0 EFLAGS: 00010246 [ 176.501918][ T7223] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 176.501931][ T7223] RDX: ffffc90005619000 RSI: 0000000000000411 RDI: 0000000000000412 [ 176.501946][ T7223] RBP: 000000000000006f R08: 000000000000006f R09: 0000000000000008 [ 176.501958][ T7223] R10: dffffc0000000000 R11: fffffbfff1b13e06 R12: dffffc0000000000 [ 176.501974][ T7223] R13: 0000000000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 176.543438][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.551281][ T7223] FS: 00007f57bcb436c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 176.563913][ T7260] SQUASHFS error: Failed to read block 0x285: -5 [ 176.567260][ T7223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.567279][ T7223] CR2: 000055558951da38 CR3: 0000000023745000 CR4: 00000000003506f0 [ 176.567298][ T7223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.567310][ T7223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.567323][ T7223] Call Trace: [ 176.567330][ T7223] [ 176.567341][ T7223] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 176.567370][ T7223] ? mcp_i2c_xfer+0x420/0x420 [ 176.567397][ T7223] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 176.567419][ T7223] ? rt_mutex_lock_nested+0x1a4/0x210 [ 176.567445][ T7223] ? i2c_smbus_xfer+0x120/0x3b0 [ 176.567464][ T7223] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 176.567494][ T7223] ? __might_fault+0xb7/0x110 [ 176.567516][ T7223] i2c_smbus_xfer+0x272/0x3b0 [ 176.567537][ T7223] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 176.599565][ T7260] SQUASHFS error: Unable to read metadata cache entry [283] [ 176.605483][ T7223] ? __might_fault+0xb3/0x110 [ 176.605515][ T7223] i2cdev_ioctl_smbus+0x432/0x680 [ 176.605541][ T7223] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 176.605563][ T7223] ? __might_fault+0xb3/0x110 [ 176.614285][ T7260] SQUASHFS error: read_indexes: reading block [283:0] [ 176.621569][ T7223] ? _copy_from_user+0x111/0x170 [ 176.621599][ T7223] i2cdev_ioctl+0x583/0x7b0 [ 176.625443][ T7260] SQUASHFS error: Unable to read metadata cache entry [283] [ 176.627827][ T7223] ? i2cdev_write+0x120/0x120 [ 176.627856][ T7223] ? bpf_lsm_file_ioctl+0x5/0x10 [ 176.633228][ T7260] SQUASHFS error: read_indexes: reading block [283:0] [ 176.637455][ T7223] ? security_file_ioctl+0x7c/0xa0 [ 176.637487][ T7223] ? i2cdev_write+0x120/0x120 [ 176.672355][ T7246] F2FS-fs (loop4): invalid crc value [ 176.674330][ T7223] __se_sys_ioctl+0xfa/0x170 [ 176.674360][ T7223] do_syscall_64+0x4c/0xa0 [ 176.674380][ T7223] ? clear_bhb_loop+0x30/0x80 [ 176.674401][ T7223] ? clear_bhb_loop+0x30/0x80 [ 176.723199][ T7260] SQUASHFS error: Unable to read metadata cache entry [283] [ 176.724691][ T7223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.724722][ T7223] RIP: 0033:0x7f57be8e9e59 [ 176.730739][ T7260] SQUASHFS error: read_indexes: reading block [283:0] [ 176.734338][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.734358][ T7223] RSP: 002b:00007f57bcb43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.734379][ T7223] RAX: ffffffffffffffda RBX: 00007f57beb62fa0 RCX: 00007f57be8e9e59 [ 176.734393][ T7223] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 176.734405][ T7223] RBP: 00007f57be97fd6f R08: 0000000000000000 R09: 0000000000000000 [ 176.734415][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.734427][ T7223] R13: 00007f57beb63038 R14: 00007f57beb62fa0 R15: 00007ffc15b7cc68 [ 176.758994][ T7260] SQUASHFS error: Unable to read metadata cache entry [283] [ 176.760861][ T7223] [ 176.760887][ T7223] Modules linked in: [ 176.812918][ T7260] SQUASHFS error: read_indexes: reading block [283:0] [ 176.818644][ T7223] [ 176.818711][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.896408][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.896669][ T7260] SQUASHFS error: Unable to read metadata cache entry [283] [ 176.916781][ T7223] ---[ end trace 50e6b70108c19df2 ]--- [ 176.916954][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.922903][ T7223] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 176.933629][ T4854] gspca_sonixj: reg_w1 err -71 [ 176.938089][ T7223] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 66 9d 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 48 9d 55 fa 4c 8b 3b 4d 8d a7 70 [ 176.961008][ T7223] RSP: 0018:ffffc900023879a0 EFLAGS: 00010246 [ 176.967405][ T7223] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 176.975940][ T7223] RDX: ffffc90005619000 RSI: 0000000000000411 RDI: 0000000000000412 [ 176.984587][ T7223] RBP: 000000000000006f R08: 000000000000006f R09: 0000000000000008 [ 176.993086][ T7223] R10: dffffc0000000000 R11: fffffbfff1b13e06 R12: dffffc0000000000 [ 177.001209][ T7223] R13: 0000000000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 177.006499][ T7246] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 177.010961][ T7223] FS: 00007f57bcb436c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 177.030428][ T7223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.037372][ T7223] CR2: 000055558951da38 CR3: 0000000023745000 CR4: 00000000003506f0 [ 177.045791][ T7223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.057423][ T7260] SQUASHFS error: read_indexes: reading block [283:0] [ 177.063038][ T4854] sonixj: probe of 1-1:0.0 failed with error -71 [ 177.065370][ T7223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.083341][ T7260] SQUASHFS error: Unable to read metadata cache entry [283] [ 177.095538][ T4854] usb 1-1: USB disconnect, device number 7 [ 177.106662][ T7260] SQUASHFS error: read_indexes: reading block [283:0] [ 177.124346][ T7223] Kernel panic - not syncing: Fatal exception [ 177.130754][ T7223] Kernel Offset: disabled [ 177.135094][ T7223] Rebooting in 86400 seconds..