last executing test programs: 29.101374526s ago: executing program 4 (id=465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x400}}) 29.001917868s ago: executing program 4 (id=466): r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 29.001724139s ago: executing program 4 (id=467): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 28.947770621s ago: executing program 4 (id=469): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") creat(&(0x7f00000003c0)='./bus\x00', 0x110) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x7) write(r1, &(0x7f00000001c0)='u', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 28.66039095s ago: executing program 4 (id=472): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f800040000000000000020000000100000000000800080001", 0x1f) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 28.077765418s ago: executing program 4 (id=479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x800, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}]}]}, 0xfc}}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f000000f080)="$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") r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000bc0)='./bus\x00', 0x1018000, &(0x7f0000000100)={[{@minixdf}]}, 0x0, 0x638, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') symlink(0x0, 0x0) lseek(r1, 0xfffffffffffffffb, 0x2) truncate(&(0x7f00000001c0)='./file1\x00', 0x5) 27.978451162s ago: executing program 32 (id=479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x800, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}]}]}, 0xfc}}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f000000f080)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==") r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000bc0)='./bus\x00', 0x1018000, &(0x7f0000000100)={[{@minixdf}]}, 0x0, 0x638, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') symlink(0x0, 0x0) lseek(r1, 0xfffffffffffffffb, 0x2) truncate(&(0x7f00000001c0)='./file1\x00', 0x5) 6.572700579s ago: executing program 0 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {0xa, 0x2}, {0x1f, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.452497363s ago: executing program 0 (id=609): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 6.25266526s ago: executing program 5 (id=610): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x4000000000009}, {0x8, 0xaef3, 0xa, 0x7, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x20, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.009913687s ago: executing program 5 (id=612): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f8000400000000000000200000001000000", 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.567566421s ago: executing program 0 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x29e) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040080) 5.093325176s ago: executing program 5 (id=622): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.98944388s ago: executing program 5 (id=623): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xf, 0x3, "a0e778"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060101"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4.905246653s ago: executing program 0 (id=624): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000630000/0x2000)=nil, 0x2000) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x204080, &(0x7f0000000540)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 4.6955991s ago: executing program 0 (id=625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.12592033s ago: executing program 2 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.778249851s ago: executing program 5 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "946be22aa236030a", "340053f6c256b016d6939bcd95a609cf", "686c211a", "4fc3fb34160497af"}, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x37, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.205939709s ago: executing program 1 (id=637): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f8000400000000000000200000001000000000008000800", 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.87487037s ago: executing program 5 (id=638): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0xff, 0x8, 0xfffff038}, {0x6, 0x0, 0x83, 0xfffffffd}, {0x16, 0xc2, 0x9, 0x1}]}, 0x10) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 1.650553117s ago: executing program 3 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x840) 1.54978526s ago: executing program 3 (id=640): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f800040000000000000", 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.388004906s ago: executing program 1 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace(0x10, 0x0) ptrace(0x10, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x129a00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x260280, 0x0) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000300), 0x200c80, 0x0) sendto$inet(r4, &(0x7f0000000340)="852e05f9fb18fdf852e338a74f626aba0c9cd648dc878064cd0ca5185683839431ad3f3a3bfa9be505163f19fb7e036c779764b143fb90d59b96a3996c147a3d859e5db8c86d1353d181a0cab4fb46b93563718eddf729547c591accfa85b802478c89ac4f7b52e0f8936dc1eee50f0a24959ea626ea32fb09b73dfc39f5209e00", 0x81, 0x40014, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.335551748s ago: executing program 1 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000200)={r2, &(0x7f0000000040)='/dev/kvm\x00', 0x0, &(0x7f0000000080)={@align=0x7, {0x3, 0x4, 0xfff}}, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x266, &(0x7f0000000740)="$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") r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2f}) 1.26175861s ago: executing program 0 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace(0x10, r2) ptrace(0x10, r2) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) move_pages(r2, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x129a00, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x260280, 0x0) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000300), 0x200c80, 0x0) sendto$inet(r6, &(0x7f0000000340)="852e05f9fb18fdf852e338a74f626aba0c9cd648dc878064cd0ca5185683839431ad3f3a3bfa9be505163f19fb7e036c779764b143fb90d59b96a3996c147a3d859e5db8c86d1353d181a0cab4fb46b93563718eddf729547c591accfa85b802478c89ac4f7b52e0f8936dc1eee50f0a24959ea626ea32fb09b73dfc39f5209e00", 0x81, 0x40014, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902"], 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.166256623s ago: executing program 2 (id=644): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2010040, 0x0) r1 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x1, 0x1, 0x7, 0x10000, 0x9, 0x8}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, 0x0, 0x8080) syz_open_procfs$pagemap(r1, &(0x7f0000000080)) 1.026182617s ago: executing program 1 (id=645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vbi(&(0x7f0000002100), 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 973.800369ms ago: executing program 2 (id=646): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000340), 0x1, 0x50c, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000f40)={'#! ', './bus', [], 0xa, "fd95ec871373f47200005edbb4503ea0e73e9d55cd8b3910c9501f5e2462f043b7803b41e1ab02246803b40559301baca878f49d8fd862e6486060c10fcc2df0cb280f260927be0bd0de37c9223accd88d6d74c0ce3f3d1b996156590d51d163cb987b675d894330eff9134a0e4bd7e065f67b2d0b2e5f01"}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 872.015603ms ago: executing program 1 (id=647): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f800040000000000000020000000100000000000800", 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 680.423178ms ago: executing program 3 (id=648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cc4e1fb122bef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x7fffffff, 0x1f8, 0x4, 0x8, 0xffff, 0x4, 0x1, 0x400]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 545.853033ms ago: executing program 2 (id=649): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x42000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x0, 0x1, 0x0, 0x0, 0x4}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 483.514195ms ago: executing program 3 (id=650): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x17, 0x2, r2}) 340.100089ms ago: executing program 2 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 233.841323ms ago: executing program 2 (id=652): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f800040000000000000020000000100000000000800080001", 0x1f) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 120.111736ms ago: executing program 3 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace(0x10, 0x0) ptrace(0x10, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x129a00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x260280, 0x0) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000300), 0x200c80, 0x0) sendto$inet(r4, &(0x7f0000000340)="852e05f9fb18fdf852e338a74f626aba0c9cd648dc878064cd0ca5185683839431ad3f3a3bfa9be505163f19fb7e036c779764b143fb90d59b96a3996c147a3d859e5db8c86d1353d181a0cab4fb46b93563718eddf729547c591accfa85b802478c89ac4f7b52e0f8936dc1eee50f0a24959ea626ea32fb09b73dfc39f5209e00", 0x81, 0x40014, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 52.263438ms ago: executing program 3 (id=654): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) 0s ago: executing program 1 (id=655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="ae7e", 0x2}], 0x10000030) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x37, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 12][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.527936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.536710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.545334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.553615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.565638][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.579922][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.589850][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.599680][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.608711][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.632316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.641726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.653311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.664392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.691911][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.760331][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.769241][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.797059][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.807451][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.822024][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.830531][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.857673][ T4189] device veth0_vlan entered promiscuous mode [ 54.890309][ T4197] device veth0_vlan entered promiscuous mode [ 54.901819][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.910955][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.922132][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.930850][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.943295][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.951337][ T4189] device veth1_vlan entered promiscuous mode [ 54.968135][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.977305][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.981127][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.994446][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.004288][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.012637][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.028182][ T4197] device veth1_vlan entered promiscuous mode [ 55.053875][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.075738][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.090096][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.098704][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.108235][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.117054][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.124753][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.132336][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.140463][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.149135][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.161354][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.177546][ T4189] device veth0_macvtap entered promiscuous mode [ 55.191382][ T4197] device veth0_macvtap entered promiscuous mode [ 55.237380][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.245654][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.254213][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.263372][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.272213][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.281816][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.291100][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.300670][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.309208][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.320393][ T4189] device veth1_macvtap entered promiscuous mode [ 55.336539][ T4197] device veth1_macvtap entered promiscuous mode [ 55.345978][ T4190] device veth0_vlan entered promiscuous mode [ 55.359703][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.369231][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.379986][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.397598][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.415724][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.450118][ T4190] device veth1_vlan entered promiscuous mode [ 55.462165][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.476106][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.491673][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.504570][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.545450][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.571524][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.582102][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.609310][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.627663][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.639030][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.650252][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.696045][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.707383][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.715847][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.724806][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.736908][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.746680][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.756222][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.764552][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.773926][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.783208][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.793097][ T4188] device veth0_vlan entered promiscuous mode [ 55.808423][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.822602][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.844206][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.853274][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.886637][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.898387][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.910431][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.921876][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.933124][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.941736][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.953243][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.968028][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.979621][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.021943][ T4190] device veth0_macvtap entered promiscuous mode [ 56.039164][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.048829][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.058864][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.068165][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.083492][ T4188] device veth1_vlan entered promiscuous mode [ 56.096879][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.112388][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.128095][ T4190] device veth1_macvtap entered promiscuous mode [ 56.171254][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.194669][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.221561][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.233485][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 56.244846][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 56.252046][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.270634][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.283476][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.299558][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.311212][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 56.321642][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 56.328169][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.338420][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 56.346758][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.401954][ T4188] device veth0_macvtap entered promiscuous mode [ 56.416635][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.431694][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.441583][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.456791][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.472629][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.493594][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.503569][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.520146][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.531359][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.547205][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.561616][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.578514][ T4188] device veth1_macvtap entered promiscuous mode [ 56.597381][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.606168][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.607759][ T4276] loop1: detected capacity change from 0 to 131072 [ 56.614490][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.631019][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.650385][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.659771][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.669363][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684769][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.698576][ T4276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.749360][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.769556][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.783229][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.794473][ T4276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.814943][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.826373][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.844945][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.861732][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.876164][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.893001][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.905735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.914617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.941575][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.955318][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.966121][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.977078][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.987349][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.998068][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.008139][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.019154][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.031343][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.043754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.054013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.095487][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.103328][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.131693][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.151529][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.161949][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.173015][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.192207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.225121][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.233299][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.263128][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.297320][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.305431][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.313523][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.321576][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.357891][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.374495][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.390704][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.419921][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.484813][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.499922][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.519230][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.529741][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.545486][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.565275][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.573016][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.670047][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.701924][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.733381][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.251018][ T4265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.257292][ T4290] loop2: detected capacity change from 0 to 32768 [ 58.307239][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 58.326962][ T4290] ======================================================= [ 58.326962][ T4290] WARNING: The mand mount option has been deprecated and [ 58.326962][ T4290] and is ignored by this kernel. Remove the mand [ 58.326962][ T4290] option from the mount to silence this warning. [ 58.326962][ T4290] ======================================================= [ 58.356394][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.375399][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 58.423867][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 58.439149][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 58.459295][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 58.462002][ T4285] loop4: detected capacity change from 0 to 40427 [ 58.524678][ T4285] F2FS-fs (loop4): Zoned block device path is missing [ 58.532436][ T4285] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 58.553031][ T4285] F2FS-fs (loop4): invalid crc value [ 58.614188][ T4290] JBD2: Ignoring recovery information on journal [ 58.639064][ T4285] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 58.655306][ T4265] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 58.686124][ T4324] loop3: detected capacity change from 0 to 512 [ 58.697434][ T4265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.718389][ T4290] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 58.760619][ T4265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.790334][ T4285] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 58.799735][ T4265] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 58.800332][ T4285] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.824275][ T4324] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.866966][ T4324] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.917071][ T4285] attempt to access beyond end of device [ 58.917071][ T4285] loop4: rw=524288, want=45072, limit=40427 [ 58.954147][ T4285] attempt to access beyond end of device [ 58.954147][ T4285] loop4: rw=0, want=45072, limit=40427 [ 59.003673][ T4285] attempt to access beyond end of device [ 59.003673][ T4285] loop4: rw=0, want=45072, limit=40427 [ 59.010056][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 59.015642][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.045306][ T4265] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 59.057046][ T4265] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 59.067334][ T4265] usb 1-1: Manufacturer: syz [ 59.069187][ T4189] attempt to access beyond end of device [ 59.069187][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 59.087774][ T4265] usb 1-1: config 0 descriptor?? [ 59.425370][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.447108][ T4342] loop3: detected capacity change from 0 to 256 [ 59.454525][ T1110] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 59.470329][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.482288][ T1110] usb 2-1: config 0 descriptor?? [ 59.537721][ T4342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 59.569537][ T4265] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 59.588995][ T4265] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 59.622278][ T4265] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 59.676108][ T4349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18'. [ 59.881918][ T4233] usb 1-1: USB disconnect, device number 2 [ 59.977152][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 59.986307][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 59.994168][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 60.002991][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 60.012516][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 60.020464][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 60.028566][ T1110] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 60.038962][ T1110] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 60.051143][ T1110] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 60.215036][ C1] hid-thrustmaster 0003:044F:B65D.0002: Wheel with model id 0x200 is a Thrustmaster T300RS (Missing Attachment) [ 60.233479][ T4357] loop2: detected capacity change from 0 to 256 [ 60.434970][ C1] hid-thrustmaster 0003:044F:B65D.0002: Success?! The wheel should have been initialized! [ 60.638001][ T4241] usb 2-1: USB disconnect, device number 2 [ 60.706621][ T4380] loop0: detected capacity change from 0 to 2048 [ 60.806129][ T4380] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 60.885902][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.903617][ T4380] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.26: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.934489][ T4380] EXT4-fs (loop0): Remounting filesystem read-only [ 61.022078][ T4390] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #2: comm syz.0.26: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 61.105634][ T4392] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1048580 out of range (51000000..2150000000) [ 61.135472][ T4390] EXT4-fs (loop0): Remounting filesystem read-only [ 61.260749][ T4233] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 61.425627][ T4233] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.445014][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 61.463133][ T4233] usb 5-1: Product: syz [ 61.467676][ T4233] usb 5-1: Manufacturer: syz [ 61.480870][ T4233] usb 5-1: SerialNumber: syz [ 61.513962][ T4233] usb 5-1: config 0 descriptor?? [ 61.538636][ T4408] kvm: apic: phys broadcast and lowest prio [ 61.679138][ T4394] loop2: detected capacity change from 0 to 32768 [ 61.705562][ T4415] loop1: detected capacity change from 0 to 1024 [ 61.786711][ T4394] XFS (loop2): Mounting V5 Filesystem [ 61.819119][ T4233] usb 5-1: USB disconnect, device number 2 [ 61.833955][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.862707][ T4415] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.920475][ T4394] XFS (loop2): Ending clean mount [ 61.957934][ T25] audit: type=1800 audit(1780951553.036:2): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="bus" dev="loop2" ino=6153 res=0 errno=0 [ 62.001719][ T4190] XFS (loop2): Unmounting Filesystem [ 62.068558][ T4432] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.38: lblock 0 mapped to illegal pblock 0 (length 6) [ 62.095817][ T4432] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 62.110274][ T4432] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.110274][ T4432] [ 62.128309][ T4432] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 8: comm syz.1.38: lblock 8 mapped to illegal pblock 8 (length 8) [ 62.144023][ T4432] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 62.158076][ T4432] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.158076][ T4432] [ 62.266271][ T4435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.42'. [ 62.589414][ T144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 62.616524][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 896 with max blocks 2048 with error 28 [ 62.632663][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.632663][ T144] [ 62.648522][ T144] EXT4-fs (loop1): Total free blocks count 0 [ 62.656618][ T4444] loop4: detected capacity change from 0 to 64 [ 62.656671][ T144] EXT4-fs (loop1): Free/Dirty block details [ 62.692691][ T144] EXT4-fs (loop1): free_blocks=0 [ 62.700952][ T144] EXT4-fs (loop1): dirty_blocks=7376 [ 62.881211][ T4450] process 'syz.0.48' launched './file0' with NULL argv: empty string added [ 63.099879][ T4457] loop0: detected capacity change from 0 to 4096 [ 63.196748][ T4457] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 63.223932][ T4457] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 63.243559][ T4457] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 63.256232][ T4457] ntfs: volume version 3.1. [ 63.417196][ T4188] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 63.567206][ T4482] capability: warning: `syz.1.57' uses 32-bit capabilities (legacy support in use) [ 63.595771][ T4202] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.703600][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 63.774456][ T4492] netlink: 48 bytes leftover after parsing attributes in process `syz.0.60'. [ 63.870202][ T4202] usb 3-1: Using ep0 maxpacket: 16 [ 63.895178][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.033121][ T4202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.053286][ T4202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.069767][ T4202] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.108498][ T4202] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.126275][ T4202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.153204][ T4202] usb 3-1: config 0 descriptor?? [ 64.305153][ T4265] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 64.500233][ T4265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 64.510356][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 64.518973][ T4265] usb 4-1: Product: syz [ 64.523325][ T4265] usb 4-1: Manufacturer: syz [ 64.542535][ T4265] usb 4-1: SerialNumber: syz [ 64.557386][ T4265] usb 4-1: config 0 descriptor?? [ 64.645119][ T4202] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input5 [ 64.667210][ T4202] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 64.876498][ T4265] usb 4-1: USB disconnect, device number 2 [ 64.927109][ T21] usb 3-1: USB disconnect, device number 2 [ 64.958420][ T4533] fido_id[4533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 65.443585][ T4543] loop0: detected capacity change from 0 to 32768 [ 65.503167][ T4543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.74 (4543) [ 65.578838][ T4551] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.650159][ T4543] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 65.665603][ T4543] BTRFS info (device loop0): turning on sync discard [ 65.672565][ T4543] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 65.702365][ T4556] loop3: detected capacity change from 0 to 256 [ 65.732390][ T4543] BTRFS info (device loop0): use zstd compression, level 3 [ 65.740465][ T4543] BTRFS info (device loop0): turning on async discard [ 65.748647][ T4543] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 65.760445][ T4543] BTRFS info (device loop0): trying to use backup root at mount time [ 65.769603][ T4543] BTRFS error (device loop0): unrecognized mount option 'fragment=metadata' [ 65.779072][ T4556] exfat: Deprecated parameter 'utf8' [ 65.784452][ T4556] exfat: Deprecated parameter 'namecase' [ 65.805461][ T4543] BTRFS error (device loop0): open_ctree failed: -22 [ 65.822521][ T4556] exfat: Deprecated parameter 'namecase' [ 65.865943][ T4556] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 66.107186][ T4562] loop1: detected capacity change from 0 to 256 [ 66.162580][ T4568] netlink: 'syz.0.85': attribute type 2 has an invalid length. [ 66.190627][ T4568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 66.206153][ T4562] exfat: Deprecated parameter 'utf8' [ 66.210596][ T4568] Zero length message leads to an empty skb [ 66.254468][ T4562] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 66.532680][ T4558] loop2: detected capacity change from 0 to 32768 [ 66.597515][ T4558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.81 (4558) [ 66.631540][ T4558] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 66.649291][ T4558] BTRFS info (device loop2): using free space tree [ 66.657299][ T4558] BTRFS info (device loop2): has skinny extents [ 66.716536][ T4566] loop3: detected capacity change from 0 to 32768 [ 66.791203][ T4566] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.84 (4566) [ 66.889050][ T4558] BTRFS info (device loop2): enabling ssd optimizations [ 67.104053][ T4182] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4182) [ 67.247466][ T4612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.94'. [ 67.284966][ T4177] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.333871][ T4537] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4537) [ 67.652636][ T4638] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 67.664971][ T4638] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 67.682760][ T4638] netlink: 252 bytes leftover after parsing attributes in process `syz.2.92'. [ 67.697608][ T4177] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 67.730291][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.925095][ T4177] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.957242][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 67.989896][ T4177] usb 2-1: Product: syz [ 68.003255][ T4177] usb 2-1: Manufacturer: syz [ 68.015961][ T4177] usb 2-1: SerialNumber: syz [ 68.044830][ T4177] usb 2-1: config 0 descriptor?? [ 68.134167][ T4653] loop0: detected capacity change from 0 to 4096 [ 68.236708][ T4653] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 68.314537][ T25] audit: type=1800 audit(1780951559.386:3): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.99" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 68.389473][ T4177] usb 2-1: USB disconnect, device number 3 [ 68.485075][ T4634] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.855121][ T4634] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.866424][ T4634] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 68.875636][ T4634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.894461][ T4634] usb 3-1: config 0 descriptor?? [ 68.940780][ T4634] pwc: Askey VC010 type 2 USB webcam detected. [ 69.032654][ T4691] loop4: detected capacity change from 0 to 4096 [ 69.046763][ T4693] loop1: detected capacity change from 0 to 256 [ 69.180928][ T4691] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.196783][ T4691] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 69.219058][ T4691] System zones: 0-5 [ 69.236358][ T4691] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 69.375230][ T4634] pwc: recv_control_msg error -32 req 02 val 2b00 [ 69.391686][ T4691] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 69.411457][ T4707] loop3: detected capacity change from 0 to 64 [ 69.418710][ T4634] pwc: recv_control_msg error -32 req 02 val 2700 [ 69.475625][ T4634] pwc: recv_control_msg error -32 req 02 val 2c00 [ 69.735174][ T4634] pwc: recv_control_msg error -71 req 04 val 1300 [ 69.765072][ T4634] pwc: recv_control_msg error -71 req 04 val 1400 [ 69.787067][ T4634] pwc: recv_control_msg error -71 req 02 val 2000 [ 69.835188][ T4634] pwc: recv_control_msg error -71 req 02 val 2100 [ 69.855150][ T4634] pwc: recv_control_msg error -71 req 04 val 1500 [ 69.875041][ T4634] pwc: recv_control_msg error -71 req 02 val 2500 [ 69.906732][ T4634] pwc: recv_control_msg error -71 req 02 val 2400 [ 69.925069][ T4634] pwc: recv_control_msg error -71 req 02 val 2600 [ 69.960261][ T4634] pwc: recv_control_msg error -71 req 02 val 2900 [ 70.000242][ T4634] pwc: recv_control_msg error -71 req 02 val 2800 [ 70.040566][ T4634] pwc: recv_control_msg error -71 req 04 val 1100 [ 70.075106][ T4634] pwc: recv_control_msg error -71 req 04 val 1200 [ 70.096092][ T4634] pwc: Registered as video103. [ 70.120400][ T4634] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 70.155634][ T4241] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.175504][ T4634] usb 3-1: USB disconnect, device number 3 [ 70.565202][ T4241] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 70.785335][ T4241] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.794418][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 70.807143][ T4241] usb 4-1: Product: syz [ 70.811345][ T4241] usb 4-1: Manufacturer: syz [ 70.820588][ T4241] usb 4-1: SerialNumber: syz [ 70.836481][ T4241] usb 4-1: config 0 descriptor?? [ 71.112639][ T4711] loop4: detected capacity change from 0 to 131072 [ 71.125942][ T4241] usb 4-1: USB disconnect, device number 3 [ 71.162960][ T4711] F2FS-fs (loop4): invalid crc value [ 71.188720][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.195444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.217471][ T4728] loop1: detected capacity change from 0 to 131072 [ 71.227774][ T4711] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.317819][ T4728] F2FS-fs (loop1): invalid crc value [ 71.359494][ T4711] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 71.368010][ T4728] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.411488][ T4711] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 71.478399][ T4728] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 71.505878][ T4728] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 71.888014][ T4763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 73.034955][ T4634] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.103358][ T4792] loop2: detected capacity change from 0 to 256 [ 73.116600][ T4792] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.405145][ T4634] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 73.471980][ T4802] loop0: detected capacity change from 0 to 2048 [ 73.474659][ T4804] loop2: detected capacity change from 0 to 512 [ 73.556921][ T4804] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.150: iget: bad i_size value: 38620345925642 [ 73.575252][ T4634] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.604769][ T4804] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.150: couldn't read orphan inode 15 (err -117) [ 73.606355][ T4802] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.628807][ T4804] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.637782][ T4634] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.676073][ T4802] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.678805][ T4634] usb 4-1: Product: syz [ 73.701215][ T4634] usb 4-1: Manufacturer: syz [ 73.711358][ T4634] usb 4-1: SerialNumber: syz [ 73.723919][ T4634] usb 4-1: config 0 descriptor?? [ 73.760961][ T4802] fs-verity: sha512 using implementation "sha512-avx2" [ 73.803482][ T4802] syz.0.149 (4802) used greatest stack depth: 21016 bytes left [ 73.917020][ T4806] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 74.011617][ T4634] usb 4-1: USB disconnect, device number 4 [ 74.017891][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.142029][ T4818] Illegal XDP return value 4294967274, expect packet loss! [ 74.179360][ T4787] loop1: detected capacity change from 0 to 131072 [ 74.205606][ T4821] loop0: detected capacity change from 0 to 256 [ 74.241939][ T4821] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.250825][ T4787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.259007][ T25] audit: type=1800 audit(1780951565.326:4): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 74.346234][ T25] audit: type=1800 audit(1780951565.326:5): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 74.394333][ T4787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.395338][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.416295][ T4825] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200) [ 74.425820][ T4825] FAT-fs (loop0): Filesystem has been set read-only [ 74.451370][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.466207][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.514991][ T4234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.545000][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.557711][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 74.572331][ T4234] usb 5-1: config 0 descriptor?? [ 74.756019][ T4835] loop2: detected capacity change from 0 to 7 [ 74.769358][ T4835] Dev loop2: unable to read RDB block 7 [ 74.778153][ T4835] loop2: unable to read partition table [ 74.784095][ T4835] loop2: partition table beyond EOD, truncated [ 74.803251][ T4835] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 74.970103][ T25] audit: type=1326 audit(1780951566.046:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.2.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3df4123e59 code=0x0 [ 75.056993][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.068750][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.076610][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.084192][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.091987][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.103592][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.121568][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.129499][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.137187][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.144858][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.149041][ T4846] loop1: detected capacity change from 0 to 256 [ 75.155598][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.168110][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.175753][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.183543][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.193755][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 75.202099][ T4234] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 75.202875][ T4846] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 75.241303][ T4234] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 75.343892][ T4265] usb 5-1: USB disconnect, device number 3 [ 75.603762][ T4851] loop1: detected capacity change from 0 to 32768 [ 75.718750][ T4851] XFS (loop1): Mounting V5 Filesystem [ 75.768695][ T4851] XFS (loop1): Ending clean mount [ 75.801204][ T4866] loop2: detected capacity change from 0 to 128 [ 75.880236][ T4191] XFS (loop1): Unmounting Filesystem [ 75.913907][ T4866] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.930964][ T4872] loop0: detected capacity change from 0 to 64 [ 76.054845][ T4872] hfs: request for non-existent node 131072 in B*Tree [ 76.063569][ T4872] hfs: request for non-existent node 131072 in B*Tree [ 76.248452][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.499873][ T4882] EXT4-fs (loop2): journaled quota format not specified [ 76.957598][ T7] cfg80211: failed to load regulatory.db [ 77.050414][ T4876] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.118580][ T4876] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.707952][ T4898] XFS (loop1): Mounting V5 Filesystem [ 77.847662][ T25] audit: type=1326 audit(1780951568.926:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.4.192" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8874653e59 code=0x0 [ 77.875594][ T4898] XFS (loop1): Ending clean mount [ 78.166715][ T4951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 78.202338][ T4191] XFS (loop1): Unmounting Filesystem [ 78.229274][ T4241] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.264855][ T4241] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.075147][ T4265] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.115793][ T4241] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.384981][ T4241] usb 1-1: Using ep0 maxpacket: 32 [ 79.465226][ T4265] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 79.523112][ T4241] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 79.537071][ T4241] usb 1-1: config 0 has no interface number 0 [ 79.543845][ T4241] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 79.562695][ T4241] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 79.574501][ T4241] usb 1-1: config 0 interface 89 has no altsetting 0 [ 79.655334][ T4265] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.665991][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.667854][ T5000] kernel profiling enabled (shift: 63) [ 79.674280][ T4265] usb 5-1: Product: syz [ 79.681614][ T5000] profiling shift: 63 too large [ 79.691763][ T4265] usb 5-1: Manufacturer: syz [ 79.696920][ T4265] usb 5-1: SerialNumber: syz [ 79.705650][ T4265] usb 5-1: config 0 descriptor?? [ 79.775284][ T4241] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 79.794563][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.804681][ T4241] usb 1-1: Product: syz [ 79.809277][ T4241] usb 1-1: Manufacturer: syz [ 79.813901][ T4241] usb 1-1: SerialNumber: syz [ 79.823840][ T4241] usb 1-1: config 0 descriptor?? [ 79.867186][ T4241] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 79.877393][ T4241] em28xx 1-1:0.89: Video interface 89 found: isoc [ 80.003324][ T4265] usb 5-1: USB disconnect, device number 4 [ 80.225060][ T4241] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 80.385898][ T4241] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 80.395711][ T4241] em28xx 1-1:0.89: board has no eeprom [ 80.515162][ T4241] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 80.532857][ T4241] em28xx 1-1:0.89: analog set to isoc mode. [ 80.540606][ T7] em28xx 1-1:0.89: Registering V4L2 extension [ 80.552128][ T4241] usb 1-1: USB disconnect, device number 3 [ 80.565581][ T4241] em28xx 1-1:0.89: Disconnecting em28xx [ 80.611264][ T7] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 80.624996][ T7] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 80.632104][ T7] em28xx 1-1:0.89: No AC97 audio processor [ 80.676374][ T7] usb 1-1: Decoder not found [ 80.681012][ T7] em28xx 1-1:0.89: failed to create media graph [ 80.702557][ T7] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 80.722263][ T5041] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 80.733272][ T7] em28xx 1-1:0.89: Registering snapshot button... [ 80.748192][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input7 [ 80.780679][ T7] em28xx 1-1:0.89: Remote control support is not available for this card. [ 80.783581][ T5041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.804639][ T4241] em28xx 1-1:0.89: Closing input extension [ 80.812264][ T4241] em28xx 1-1:0.89: Deregistering snapshot button [ 80.855936][ T4241] em28xx 1-1:0.89: Freeing device [ 80.955176][ T5043] bond1: (slave geneve2): making interface the new active one [ 80.982179][ T5036] set_capacity_and_notify: 3 callbacks suppressed [ 80.982193][ T5036] loop4: detected capacity change from 0 to 32768 [ 80.983624][ T5043] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 81.028079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 81.139650][ T5049] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.160976][ T5050] ERROR: (device loop4): diAllocAG: numfree > numinos [ 81.160976][ T5050] [ 81.173782][ T5043] syz.0.226 (5043) used greatest stack depth: 19856 bytes left [ 81.246417][ T5050] ERROR: (device loop4): remounting filesystem as read-only [ 81.253746][ T5050] ialloc: diAlloc returned -5! [ 81.785047][ T5053] loop0: detected capacity change from 0 to 40427 [ 81.835685][ T5053] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.843443][ T5053] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.874243][ T5053] F2FS-fs (loop0): invalid crc value [ 81.922053][ T5053] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.054293][ T5059] loop3: detected capacity change from 0 to 32768 [ 82.079592][ T5053] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.105094][ T5053] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.148640][ T5046] loop1: detected capacity change from 0 to 65536 [ 82.149908][ T5059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.231 (5059) [ 82.279988][ T5053] attempt to access beyond end of device [ 82.279988][ T5053] loop0: rw=2049, want=40984, limit=40427 [ 82.283984][ T5059] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 82.294632][ T25] audit: type=1800 audit(1780951573.366:8): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.230" name="file2" dev="loop0" ino=17 res=0 errno=0 [ 82.330639][ T5059] BTRFS info (device loop3): using free space tree [ 82.347150][ T5059] BTRFS info (device loop3): has skinny extents [ 82.377716][ T5046] XFS (loop1): Mounting V5 Filesystem [ 82.385146][ T4635] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.405158][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.443495][ T5046] XFS (loop1): Ending clean mount [ 82.620143][ T5059] BTRFS info (device loop3): enabling ssd optimizations [ 82.633585][ T4191] XFS (loop1): Unmounting Filesystem [ 82.645185][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 82.746459][ T4635] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 82.853454][ T4182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4182) [ 82.931373][ T4234] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 82.942001][ T4635] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.951487][ T4635] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.960128][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.968613][ T4635] usb 5-1: Product: syz [ 82.972787][ T4635] usb 5-1: Manufacturer: syz [ 82.977767][ T4234] usb 3-1: Product: syz [ 82.982216][ T4234] usb 3-1: Manufacturer: syz [ 82.987200][ T4635] usb 5-1: SerialNumber: syz [ 82.992392][ T4234] usb 3-1: SerialNumber: syz [ 82.999632][ T4635] usb 5-1: config 0 descriptor?? [ 83.016570][ T4234] usb 3-1: config 0 descriptor?? [ 83.091553][ T5112] loop0: detected capacity change from 0 to 32768 [ 83.277091][ T4234] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 004 [ 83.312883][ T4635] usb 5-1: USB disconnect, device number 5 [ 83.806671][ T5127] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 84.189721][ T4635] usb 3-1: USB disconnect, device number 4 [ 84.756866][ T5135] loop3: detected capacity change from 0 to 131072 [ 84.814230][ T5135] F2FS-fs (loop3): invalid crc value [ 84.866650][ T5135] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.909981][ T5135] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 84.928399][ T5135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 85.064965][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.294987][ T4241] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.315405][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 85.445057][ T7] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 85.453567][ T7] usb 2-1: config 0 has no interface number 0 [ 85.460167][ T7] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.471624][ T7] usb 2-1: config 0 interface 85 has no altsetting 0 [ 85.635215][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 85.648523][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.657851][ T7] usb 2-1: Product: syz [ 85.662113][ T7] usb 2-1: Manufacturer: syz [ 85.667528][ T7] usb 2-1: SerialNumber: syz [ 85.685223][ T4241] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 85.705584][ T7] usb 2-1: config 0 descriptor?? [ 85.875177][ T4241] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.893395][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 85.902106][ T4241] usb 3-1: Product: syz [ 85.912307][ T4241] usb 3-1: Manufacturer: syz [ 85.929030][ T4241] usb 3-1: SerialNumber: syz [ 85.950725][ T4241] usb 3-1: config 0 descriptor?? [ 86.240794][ T4241] usb 3-1: USB disconnect, device number 5 [ 86.316559][ T5203] loop0: detected capacity change from 0 to 256 [ 86.369549][ T5203] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.380405][ T5203] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 86.412153][ T5203] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.418524][ T7] appletouch 2-1:0.85: Geyser mode initialized. [ 86.450157][ T7] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8 [ 86.555507][ T5203] VFS: Lookup of 'file0' in exfat loop0 would have caused loop [ 86.649740][ T4177] usb 2-1: USB disconnect, device number 4 [ 86.676974][ T4177] appletouch 2-1:0.85: input: appletouch disconnected [ 86.803130][ T5207] loop4: detected capacity change from 0 to 32768 [ 87.079065][ T5221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4176852212 (267318541568 ns) > initial count (29189876608 ns). Using initial count to start timer. [ 87.167634][ T5217] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.191084][ T5217] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.496200][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.641696][ T5250] loop4: detected capacity change from 0 to 512 [ 87.685138][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.693130][ T5250] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024) [ 87.765052][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 87.938522][ T5264] syz.4.291 sent an empty control message without MSG_MORE. [ 87.946852][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.970820][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.985203][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.999908][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.009561][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.021939][ T21] usb 3-1: config 0 descriptor?? [ 88.065119][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 88.084204][ T5271] loop1: detected capacity change from 0 to 256 [ 88.113336][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 88.225110][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.240475][ T7] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.249080][ T7] usb 4-1: Product: syz [ 88.253357][ T7] usb 4-1: Manufacturer: syz [ 88.272464][ T7] usb 4-1: SerialNumber: syz [ 88.303425][ T7] usb 4-1: config 0 descriptor?? [ 88.553109][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input9 [ 88.572509][ T21] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 88.595547][ T7] usb 4-1: USB disconnect, device number 5 [ 88.779363][ T21] usb 3-1: USB disconnect, device number 6 [ 88.832716][ T5287] loop0: detected capacity change from 0 to 32768 [ 89.271490][ T5302] netlink: 160 bytes leftover after parsing attributes in process `syz.4.306'. [ 89.320119][ T5307] loop0: detected capacity change from 0 to 512 [ 89.409436][ T5307] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 89.451964][ T5307] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.492790][ T5314] loop3: detected capacity change from 0 to 4096 [ 89.509208][ T5307] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.527581][ T5307] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 49 vs 41 free clusters [ 89.530275][ T5314] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 89.564000][ T5307] EXT4-fs (loop0): Remounting filesystem read-only [ 89.571546][ T5307] Quota error (device loop0): write_blk: dquota write failed [ 89.580863][ T5307] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 89.592097][ T5307] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.308: Failed to acquire dquot type 0 [ 89.604961][ T5307] EXT4-fs (loop0): Remounting filesystem read-only [ 89.612427][ T5307] EXT4-fs (loop0): 1 truncate cleaned up [ 89.621451][ T5314] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 89.636658][ T5307] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000000000000d,noblock_validity,grpjquota=./file0,nolazytime,nogrpid,errors=continue,errors=remount-ro,i_version,resuid=0x00000000000000002. Quota mode: writeback. [ 89.713554][ T5314] ntfs3: loop3: ino=5, "/" directory corrupted [ 89.740678][ T4630] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.748494][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.786652][ T4197] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 89.794783][ T4197] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 89.975002][ T4241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.145257][ T4630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.156451][ T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 90.171440][ T4630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.216026][ T4630] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.219869][ T4241] usb 1-1: Using ep0 maxpacket: 32 [ 90.245658][ T4630] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.257985][ T4630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.275773][ T4630] usb 2-1: config 0 descriptor?? [ 90.355271][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.369712][ T21] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.379923][ T21] usb 5-1: Product: syz [ 90.384208][ T21] usb 5-1: Manufacturer: syz [ 90.395096][ T21] usb 5-1: SerialNumber: syz [ 90.409289][ T4241] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.411675][ T21] usb 5-1: config 0 descriptor?? [ 90.505114][ T4241] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 90.685084][ T4241] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.694162][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.707506][ T4241] usb 1-1: Product: syz [ 90.712053][ T4241] usb 1-1: Manufacturer: syz [ 90.717399][ T4241] usb 1-1: SerialNumber: syz [ 90.719553][ T21] usb 5-1: USB disconnect, device number 6 [ 90.751430][ T4630] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 90.767269][ T4630] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 90.778536][ T4630] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.016746][ T4177] usb 2-1: USB disconnect, device number 5 [ 91.105203][ T4241] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.135718][ T4241] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.246770][ T4241] usb 1-1: USB disconnect, device number 4 [ 91.358399][ T5341] loop2: detected capacity change from 0 to 2048 [ 91.418351][ T5341] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.429596][ T5341] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.494538][ T5348] device batadv_slave_1 entered promiscuous mode [ 91.549370][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.594841][ T5347] device batadv_slave_1 left promiscuous mode [ 91.598874][ T5351] loop2: detected capacity change from 0 to 512 [ 91.721937][ T5351] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.805098][ T5351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.839721][ T5351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 91.883504][ T5369] netlink: 'syz.3.330': attribute type 12 has an invalid length. [ 91.891495][ T5351] System zones: 1-12 [ 91.895165][ T5369] netlink: 'syz.3.330': attribute type 29 has an invalid length. [ 91.896898][ T5351] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.323: bad orphan inode 131072 [ 91.907897][ T5369] netlink: 148 bytes leftover after parsing attributes in process `syz.3.330'. [ 91.915585][ T5351] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 91.923111][ T5369] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 91.954200][ T5369] netlink: 'syz.3.330': attribute type 2 has an invalid length. [ 91.961916][ T5369] netlink: 'syz.3.330': attribute type 3 has an invalid length. [ 91.969673][ T5369] netlink: 3 bytes leftover after parsing attributes in process `syz.3.330'. [ 92.135704][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.435105][ T4630] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.494991][ T4265] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 92.587327][ T21] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 92.628588][ T5390] loop0: detected capacity change from 0 to 512 [ 92.660683][ T5390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.677072][ T5390] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.775380][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.784663][ T21] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.805074][ T4630] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 92.826429][ T4630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.832436][ T5395] syz.0.339 uses obsolete (PF_INET,SOCK_PACKET) [ 92.842402][ T21] usb 2-1: Product: syz [ 92.854339][ T21] usb 2-1: Manufacturer: syz [ 92.859753][ T4630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.868527][ T4265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.870400][ T21] usb 2-1: SerialNumber: syz [ 92.884812][ T4265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 92.885477][ T4630] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 92.901403][ T4265] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.918032][ T21] usb 2-1: config 0 descriptor?? [ 93.005263][ T4265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.014714][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.021490][ T5397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 93.029341][ T4265] usb 3-1: SerialNumber: syz [ 93.033415][ T4630] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 93.046738][ T4630] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 93.054839][ T4630] usb 4-1: Manufacturer: syz [ 93.059948][ T5379] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 93.089440][ T4630] usb 4-1: config 0 descriptor?? [ 93.095825][ T4265] hub 3-1:1.0: bad descriptor, ignoring hub [ 93.101763][ T4265] hub: probe of 3-1:1.0 failed with error -5 [ 93.227192][ T21] usb 2-1: USB disconnect, device number 6 [ 93.277663][ T5403] loop0: detected capacity change from 0 to 2048 [ 93.297758][ T5379] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 93.374586][ T5403] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.386428][ T5403] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.596885][ T4630] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 93.604243][ T4630] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 93.619806][ T4630] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 93.779065][ T4265] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 93.793827][ T5420] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 94.365151][ T4241] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 94.374301][ T4265] usb 4-1: USB disconnect, device number 6 [ 94.414277][ T21] usb 3-1: USB disconnect, device number 7 [ 94.442886][ T21] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 94.532709][ T5454] loop4: detected capacity change from 0 to 512 [ 94.626041][ T5454] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 94.672930][ T5454] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 94.715977][ T5454] EXT4-fs (loop4): 1 truncate cleaned up [ 94.721751][ T5454] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 94.725106][ T4241] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 94.777762][ T4241] usb 2-1: config 1 has no interface number 0 [ 94.783969][ T4241] usb 2-1: config 1 interface 105 has no altsetting 0 [ 94.965143][ T4241] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 94.974374][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 94.995719][ T4241] usb 2-1: Product: syz [ 95.003304][ T4241] usb 2-1: Manufacturer: syz [ 95.012676][ T4241] usb 2-1: SerialNumber: syz [ 95.171580][ T5485] loop4: detected capacity change from 0 to 2048 [ 95.238578][ T4537] loop4: p4 < > [ 95.277849][ T5485] loop4: p4 < > [ 95.355094][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.576745][ T5485] loop4: detected capacity change from 0 to 4096 [ 95.598266][ T4537] udevd[4537]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 95.747735][ T5513] loop4: detected capacity change from 0 to 1024 [ 95.782799][ T5513] EXT4-fs (loop4): Ignoring removed orlov option [ 95.795228][ T21] usb 3-1: config 0 has no interfaces? [ 95.830727][ T5513] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 96.006227][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.016452][ T21] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.025014][ T21] usb 3-1: Product: syz [ 96.029290][ T21] usb 3-1: Manufacturer: syz [ 96.034067][ T21] usb 3-1: SerialNumber: syz [ 96.048724][ T21] usb 3-1: config 0 descriptor?? [ 96.165339][ T4241] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 96.205120][ T4241] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 96.245468][ T4241] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 06:9c:c5:b4:8a:ce [ 96.286786][ T4241] usb 2-1: USB disconnect, device number 7 [ 96.314596][ T4202] usb 3-1: USB disconnect, device number 8 [ 96.324116][ T4241] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 96.417068][ T4241] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 96.429708][ T4241] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 96.441683][ T4241] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 96.545637][ T5547] loop3: detected capacity change from 0 to 1024 [ 96.586210][ T5547] EXT4-fs (loop3): Ignoring removed bh option [ 96.609561][ T5547] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,usrquota,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,nogrpid,. Quota mode: writeback. [ 96.661406][ T5547] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.742048][ T5554] loop0: detected capacity change from 0 to 512 [ 96.868219][ T5562] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.377'. [ 96.932351][ T5554] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 96.961326][ T5554] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.011495][ T5554] capability: warning: `syz.0.372' uses deprecated v2 capabilities in a way that may be insecure [ 97.047915][ T5570] netlink: 27 bytes leftover after parsing attributes in process `syz.1.379'. [ 97.230691][ T5580] loop2: detected capacity change from 0 to 256 [ 97.300848][ T5580] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.363015][ T4234] Bluetooth: hci0: command 0x2036 tx timeout [ 97.695088][ T4234] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.947249][ T5629] loop4: detected capacity change from 0 to 512 [ 98.031091][ T5629] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.398: inode has both inline data and extents flags [ 98.052940][ T5629] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.398: couldn't read orphan inode 15 (err -117) [ 98.067079][ T5629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.087593][ T4234] usb 4-1: config 0 has no interfaces? [ 98.190415][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 98.285319][ T4234] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.301293][ T5637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.330484][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.355346][ T4234] usb 4-1: Product: syz [ 98.371583][ T4234] usb 4-1: Manufacturer: syz [ 98.383356][ T4234] usb 4-1: SerialNumber: syz [ 98.422585][ T4234] usb 4-1: config 0 descriptor?? [ 98.686390][ T21] usb 4-1: USB disconnect, device number 7 [ 99.270808][ T5673] loop3: detected capacity change from 0 to 512 [ 99.377971][ T5655] loop1: detected capacity change from 0 to 32768 [ 99.395903][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.412: iget: bad extra_isize 90 (inode size 256) [ 99.418418][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.425972][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.412: error while reading EA inode 11 err=-117 [ 99.460388][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.487805][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.412: iget: bad extra_isize 90 (inode size 256) [ 99.507385][ T5655] XFS (loop1): Mounting V5 Filesystem [ 99.557261][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.564174][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.412: error while reading EA inode 11 err=-117 [ 99.577863][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.584562][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.412: iget: bad extra_isize 90 (inode size 256) [ 99.599383][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.614577][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.412: error while reading EA inode 18 err=-117 [ 99.637517][ T5655] XFS (loop1): Ending clean mount [ 99.664414][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.690513][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.412: iget: bad extra_isize 90 (inode size 256) [ 99.700713][ T5655] XFS (loop1): Quotacheck needed: Please wait. [ 99.724486][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.743639][ T5673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.412: error while reading EA inode 18 err=-117 [ 99.792029][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 99.799275][ T5655] XFS (loop1): Quotacheck: Done. [ 99.801212][ T5673] EXT4-fs (loop3): 1 orphan inode deleted [ 99.829768][ T5673] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 100.014120][ T4191] XFS (loop1): Unmounting Filesystem [ 100.271944][ T5704] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 100.322212][ T5704] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 100.341897][ T5706] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 100.372409][ T5702] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 100.905008][ T4234] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.915109][ T4241] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.265511][ T4234] usb 3-1: config 0 has no interfaces? [ 101.335346][ T4241] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 101.346520][ T4241] usb 5-1: config 1 interface 0 has no altsetting 0 [ 101.425392][ T4234] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.439004][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.451962][ T4234] usb 3-1: Product: syz [ 101.458510][ T4234] usb 3-1: Manufacturer: syz [ 101.467836][ T4234] usb 3-1: SerialNumber: syz [ 101.478416][ T4234] usb 3-1: config 0 descriptor?? [ 101.625244][ T4241] usb 5-1: string descriptor 0 read error: -22 [ 101.631611][ T4241] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.641190][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.722163][ T4234] usb 3-1: USB disconnect, device number 9 [ 102.301343][ T4241] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 102.333206][ T4241] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0009/input/input11 [ 102.397367][ T5769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.473301][ T4241] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 102.523977][ T4241] usb 5-1: USB disconnect, device number 7 [ 102.741230][ T5775] fido_id[5775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 102.757012][ T5779] device syzkaller0 entered promiscuous mode [ 102.772520][ T5779] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 103.369549][ T5807] loop0: detected capacity change from 0 to 512 [ 103.390918][ T5807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.420134][ T5807] EXT4-fs (loop0): 1 orphan inode deleted [ 103.426386][ T5807] EXT4-fs (loop0): 1 truncate cleaned up [ 103.432686][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,noblock_validity,nombcache,journal_ioprio=0x0000000000000006,,errors=continue. Quota mode: none. [ 103.474971][ T4241] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.511602][ T5807] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.457: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=100663311, rec_len=0, size=1024 fake=0 [ 103.529073][ T5818] loop4: detected capacity change from 0 to 1024 [ 103.661694][ T5818] hfsplus: cannot replace xattr [ 103.875058][ T4241] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 104.035114][ T4241] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.044369][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.053325][ T4241] usb 2-1: Product: syz [ 104.057735][ T4241] usb 2-1: Manufacturer: syz [ 104.062329][ T4241] usb 2-1: SerialNumber: syz [ 104.074595][ T4241] usb 2-1: config 0 descriptor?? [ 104.335726][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.464'. [ 104.360970][ T4241] usb 2-1: USB disconnect, device number 8 [ 104.547536][ T5844] loop4: detected capacity change from 0 to 256 [ 104.603352][ T5842] APIC base relocation is unsupported by KVM [ 104.603645][ T5842] kvm: apic: phys broadcast and lowest prio [ 104.616549][ T5844] exfat: Deprecated parameter 'utf8' [ 104.621865][ T5844] exfat: Deprecated parameter 'utf8' [ 104.661096][ T5844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 104.763253][ T5844] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x75757575) [ 104.808909][ T4189] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x75757575) [ 104.850412][ T4189] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x75757575) [ 104.860945][ T4177] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.893532][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 104.921913][ T5854] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.931319][ T5854] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.940309][ T5854] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.949148][ T5854] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.988857][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 105.113715][ T5858] loop1: detected capacity change from 0 to 1024 [ 105.230067][ T5858] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.476: Invalid block bitmap block 0 in block_group 0 [ 105.245171][ T4177] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 105.255813][ T5858] Quota error (device loop1): write_blk: dquota write failed [ 105.271755][ T5858] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 105.274089][ T4177] usb 3-1: config 0 has no interface number 0 [ 105.294608][ T4177] usb 3-1: too many endpoints for config 0 interface 252 altsetting 124: 133, using maximum allowed: 30 [ 105.301559][ T5858] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.476: Failed to acquire dquot type 0 [ 105.306003][ T4177] usb 3-1: config 0 interface 252 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 105.331215][ T4177] usb 3-1: config 0 interface 252 has no altsetting 0 [ 105.338073][ T4177] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 105.347297][ T4177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.356983][ T4177] usb 3-1: config 0 descriptor?? [ 105.373784][ T5858] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.476: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.448158][ T5858] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.476: Invalid inode bitmap blk 0 in block_group 0 [ 105.471870][ T762] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8) [ 105.479589][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.492314][ T762] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 105.534056][ T5858] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 105.571770][ T5858] EXT4-fs (loop1): 1 orphan inode deleted [ 105.610349][ T5858] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 105.611639][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.635005][ T4177] usb 3-1: string descriptor 0 read error: -71 [ 105.697014][ T4177] usb 3-1: USB disconnect, device number 10 [ 105.741534][ T5858] Quota error (device loop1): write_blk: dquota write failed [ 105.753003][ T5858] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 105.777949][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.804121][ T5858] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.476: Failed to acquire dquot type 0 [ 105.890467][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.903964][ T762] Quota error (device loop1): remove_tree: Getting block too big (0 >= 10) [ 105.918590][ T5874] team0: No ports can be present during mode change [ 105.928854][ T762] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 105.991797][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.252/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.337731][ T5882] loop0: detected capacity change from 0 to 4096 [ 106.505722][ T5890] loop2: detected capacity change from 0 to 512 [ 106.547974][ T5890] EXT4-fs (loop2): Test dummy encryption mode enabled [ 106.554789][ T5890] EXT4-fs (loop2): Ignoring removed oldalloc option [ 106.735663][ T5890] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 106.775139][ T5882] loop_set_status: loop0 () has still dirty pages (nrpages=5) [ 106.858962][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 106.907712][ T5901] loop3: detected capacity change from 0 to 4096 [ 107.008977][ T5890] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 107.177723][ T5917] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.321772][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.362191][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.371344][ T25] audit: type=1800 audit(1780951598.446:9): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 107.421856][ T5871] device bridge_slave_0 entered promiscuous mode [ 107.450875][ T25] audit: type=1804 audit(1780951598.526:10): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.490" name="/newroot/102/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 107.496211][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.506290][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.527243][ T5871] device bridge_slave_1 entered promiscuous mode [ 107.657948][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.744746][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.898835][ T5871] team0: Port device team_slave_0 added [ 107.921335][ T5871] team0: Port device team_slave_1 added [ 107.940317][ T5914] loop0: detected capacity change from 0 to 32768 [ 107.985137][ T4234] Bluetooth: hci2: command 0x0409 tx timeout [ 108.040984][ T5914] JBD2: Ignoring recovery information on journal [ 108.065400][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.134713][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.253566][ T5914] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.274173][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.458202][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.473145][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.538450][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.575054][ T1110] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.656752][ T5959] loop1: detected capacity change from 0 to 1024 [ 108.662466][ T5871] device hsr_slave_0 entered promiscuous mode [ 108.682744][ T4188] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 108.700402][ T5871] device hsr_slave_1 entered promiscuous mode [ 108.726984][ T4188] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 108.740192][ T4188] OCFS2: File system is now read-only. [ 108.746097][ T4188] (syz-executor,4188,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30 [ 108.746226][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.756614][ T4188] (syz-executor,4188,1):_ocfs2_free_clusters:2583 ERROR: status = -30 [ 108.771117][ T4188] (syz-executor,4188,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 108.772352][ T5959] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.779673][ T4188] (syz-executor,4188,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 108.779698][ T4188] (syz-executor,4188,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 108.802503][ T5871] Cannot create hsr debugfs directory [ 108.828189][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 109.055048][ T1110] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 109.082750][ T5959] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.108630][ T5959] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 109.145678][ T5966] loop3: detected capacity change from 0 to 4096 [ 109.188442][ T9] device hsr_slave_0 left promiscuous mode [ 109.206096][ T9] device hsr_slave_1 left promiscuous mode [ 109.225848][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.248476][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.260310][ T1110] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.284262][ T5966] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 109.285657][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.318023][ T1110] usb 3-1: Product: syz [ 109.338134][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.356128][ T1110] usb 3-1: Manufacturer: syz [ 109.360879][ T1110] usb 3-1: SerialNumber: syz [ 109.372424][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.400807][ T1110] usb 3-1: config 0 descriptor?? [ 109.407683][ T9] device bridge_slave_1 left promiscuous mode [ 109.427783][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.472433][ T9] device bridge_slave_0 left promiscuous mode [ 109.489599][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.532055][ T9] device veth1_macvtap left promiscuous mode [ 109.540236][ T9] device veth0_macvtap left promiscuous mode [ 109.546542][ T9] device veth1_vlan left promiscuous mode [ 109.597203][ T9] device veth0_vlan left promiscuous mode [ 109.720413][ T1110] usb 3-1: USB disconnect, device number 11 [ 110.079936][ T4177] Bluetooth: hci2: command 0x041b tx timeout [ 110.267404][ T9] team0 (unregistering): Port device team_slave_1 removed [ 110.287854][ T9] team0 (unregistering): Port device team_slave_0 removed [ 110.309940][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.326803][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.396738][ T9] bond0 (unregistering): Released all slaves [ 110.405435][ T1110] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.491468][ T5986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.509'. [ 110.505266][ T5986] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 110.559839][ T5989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.509'. [ 110.575429][ T5989] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 110.695548][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 110.728277][ T5871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.767848][ T5871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.804788][ T5871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.826100][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.842775][ T5871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.997996][ T1110] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 111.003116][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.019232][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.044340][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.047146][ T1110] usb 2-1: Product: syz [ 111.054567][ T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.070934][ T1110] usb 2-1: Manufacturer: syz [ 111.078643][ T4202] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 111.082973][ T1110] usb 2-1: SerialNumber: syz [ 111.092275][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.113479][ T1110] usb 2-1: config 0 descriptor?? [ 111.167131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.168034][ T1110] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 111.183203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.225460][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.232567][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.268674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.295659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.322045][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.329270][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.337879][ T4202] usb 3-1: Using ep0 maxpacket: 8 [ 111.369380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.385988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.388445][ T1110] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 111.421675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.446805][ T1110] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 111.448248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.495375][ T4202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.507589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.530005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.556140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.571077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.582537][ T4202] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.604929][ T4202] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.622198][ T1110] usb 2-1: USB disconnect, device number 9 [ 111.622225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.650756][ T4202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 111.685608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.714451][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.741096][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.751508][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.788104][ T6015] loop0: detected capacity change from 0 to 32768 [ 111.945226][ T4202] usb 3-1: string descriptor 0 read error: -22 [ 111.951603][ T4202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.980376][ T4202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.035323][ T6004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.055073][ T6004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.076158][ T4202] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 112.110314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.134602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.146402][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 112.185154][ T4236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.202765][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.455089][ T4236] usb 4-1: Using ep0 maxpacket: 16 [ 112.575129][ T4236] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 112.583249][ T4236] usb 4-1: config 0 has no interface number 0 [ 112.595091][ T4236] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.620134][ T4236] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.662375][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.670653][ T4236] usb 4-1: config 0 interface 41 has no altsetting 0 [ 112.683961][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.732427][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.742256][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.760137][ T5871] device veth0_vlan entered promiscuous mode [ 112.774992][ T1110] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 112.777993][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.799160][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.819502][ T5871] device veth1_vlan entered promiscuous mode [ 112.854353][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.866360][ T4236] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 112.880163][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.890998][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.904203][ T4236] usb 4-1: Product: syz [ 112.913138][ T5871] device veth0_macvtap entered promiscuous mode [ 112.930427][ T5871] device veth1_macvtap entered promiscuous mode [ 112.936828][ T4236] usb 4-1: Manufacturer: syz [ 112.944556][ T4236] usb 4-1: SerialNumber: syz [ 112.960145][ T4236] usb 4-1: config 0 descriptor?? [ 112.984217][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.995140][ T6023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.002196][ T6023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.024478][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.046740][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.068349][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.088603][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.111513][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.136804][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.159866][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.183066][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.190993][ T1110] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 113.210610][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.229644][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.241434][ T6023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.246787][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.267338][ T6023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.269557][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.302661][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.323246][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.337960][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.355097][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.384903][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.401044][ T1110] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.414907][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.423091][ T1110] usb 2-1: Product: syz [ 113.423944][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.439921][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.443944][ T1110] usb 2-1: Manufacturer: syz [ 113.451065][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.466955][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.468098][ T1110] usb 2-1: SerialNumber: syz [ 113.483417][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.494169][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.512356][ T5871] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.522476][ T5871] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.525216][ T1110] usb 2-1: config 0 descriptor?? [ 113.531454][ T5871] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.545923][ T5871] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.651134][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.671174][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.688073][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.714236][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.732656][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.751427][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.828324][ T4233] usb 3-1: USB disconnect, device number 12 [ 113.843402][ T1110] usb 2-1: USB disconnect, device number 10 [ 113.945118][ T4236] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 114.225625][ T4177] Bluetooth: hci2: command 0x0419 tx timeout [ 115.095169][ T4236] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 115.116524][ T4236] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 115.144484][ T4236] CoreChips: probe of 4-1:0.41 failed with error -71 [ 115.172920][ T4236] usb 4-1: USB disconnect, device number 8 [ 115.240990][ T6143] loop5: detected capacity change from 0 to 4096 [ 115.301630][ T6148] loop3: detected capacity change from 0 to 128 [ 115.385416][ T6151] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.398224][ T6143] NILFS (loop5): cannot delete checkpoints: invalid range [1, 0) [ 115.406537][ T6143] NILFS (loop5): error -22 preparing GC: cannot delete checkpoints [ 115.427068][ T6148] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.913851][ T6172] loop5: detected capacity change from 0 to 64 [ 116.045170][ T4233] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 116.219469][ T6157] loop2: detected capacity change from 0 to 40427 [ 116.258929][ T6157] F2FS-fs (loop2): invalid crc value [ 116.278254][ T6157] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.331511][ T6157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.386575][ T6157] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 116.445107][ T4233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 116.628715][ T4233] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.640148][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.664919][ T4233] usb 2-1: Product: syz [ 116.675278][ T4233] usb 2-1: Manufacturer: syz [ 116.685113][ T4233] usb 2-1: SerialNumber: syz [ 116.704118][ T4233] usb 2-1: config 0 descriptor?? [ 116.958988][ T6199] loop2: detected capacity change from 0 to 256 [ 117.006463][ T4233] usb 2-1: USB disconnect, device number 11 [ 117.944308][ T25] audit: type=1804 audit(1780951609.016:11): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.551" name="file1" dev="ramfs" ino=41445 res=1 errno=0 [ 118.768437][ T6215] loop1: detected capacity change from 0 to 32768 [ 118.886262][ T6215] XFS (loop1): Mounting V5 Filesystem [ 118.954269][ T6215] XFS (loop1): Ending clean mount [ 119.066397][ T4191] XFS (loop1): Unmounting Filesystem [ 119.105653][ T4265] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.495136][ T4265] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 119.655262][ T4265] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.664359][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.686708][ T4265] usb 1-1: Product: syz [ 119.690906][ T4265] usb 1-1: Manufacturer: syz [ 119.698233][ T4265] usb 1-1: SerialNumber: syz [ 119.704197][ T4265] usb 1-1: config 0 descriptor?? [ 119.815149][ T4233] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 119.935169][ T1110] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 119.992462][ T4265] usb 1-1: USB disconnect, device number 5 [ 120.310089][ T1110] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 120.320509][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.343934][ T1110] usb 3-1: config 0 descriptor?? [ 120.397331][ T1110] pwc: Samsung MPC-C10 USB webcam detected. [ 120.415391][ T4233] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 120.430533][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.439197][ T4233] usb 4-1: Product: syz [ 120.443447][ T4233] usb 4-1: Manufacturer: syz [ 120.470198][ T4233] usb 4-1: SerialNumber: syz [ 120.492096][ T6295] loop1: detected capacity change from 0 to 32768 [ 120.625405][ T1110] pwc: send_video_command error -71 [ 120.630661][ T1110] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 120.653731][ T1110] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 120.670445][ T1110] usb 3-1: USB disconnect, device number 13 [ 120.939274][ T6306] loop1: detected capacity change from 0 to 32768 [ 121.011911][ T4233] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 121.878431][ T6324] block device autoloading is deprecated and will be removed. [ 122.131525][ T6317] loop2: detected capacity change from 0 to 131072 [ 122.207613][ T6317] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.247910][ T6317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.264399][ T6317] F2FS-fs (loop2): inode (7) has corrupted xattr [ 122.282913][ T6317] F2FS-fs (loop2): inode (7) has corrupted xattr [ 122.625343][ T1110] usb 4-1: USB disconnect, device number 9 [ 122.638175][ T1110] usblp0: removed [ 123.074991][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.212734][ T6314] loop1: detected capacity change from 0 to 131072 [ 123.256480][ T6345] loop3: detected capacity change from 0 to 32768 [ 123.270033][ T6314] F2FS-fs (loop1): Test dummy encryption mode enabled [ 123.278750][ T6314] F2FS-fs (loop1): invalid crc value [ 123.290689][ T6314] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.358189][ T6314] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.383206][ T6345] XFS (loop3): Mounting V5 Filesystem [ 123.440072][ T6345] XFS (loop3): Ending clean mount [ 123.468007][ T4265] XFS (loop3): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 123.485738][ T4265] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 123.514212][ T4265] XFS (loop3): Unmount and run xfs_repair [ 123.521359][ T4265] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 123.532555][ T4265] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 123.541755][ T4265] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 123.551061][ T4265] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 123.560255][ T4265] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 123.569706][ T4265] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 123.578890][ T4265] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.588859][ T4265] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.598082][ T4265] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.607422][ T7] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 123.616931][ T6345] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 123.629297][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.641352][ T7] usb 6-1: Product: syz [ 123.651881][ T6345] XFS (loop3): Failed to initialize disk quotas. [ 123.661601][ T7] usb 6-1: Manufacturer: syz [ 123.688508][ T7] usb 6-1: SerialNumber: syz [ 123.795514][ T4197] XFS (loop3): Unmounting Filesystem [ 123.880499][ T6350] loop2: detected capacity change from 0 to 32768 [ 123.990923][ T6350] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.059588][ T6350] BTRFS warning (device loop2): excessive commit interval 3581 [ 124.095116][ T6350] BTRFS info (device loop2): force zlib compression, level 3 [ 124.103032][ T6350] BTRFS info (device loop2): metadata ratio 107050 [ 124.164970][ T6350] BTRFS info (device loop2): turning on flush-on-commit [ 124.196694][ T6350] BTRFS info (device loop2): max_inline at 4096 [ 124.245067][ T6350] BTRFS info (device loop2): using free space tree [ 124.251612][ T6350] BTRFS info (device loop2): has skinny extents [ 124.419026][ T7] rtl8150 6-1:1.0: eth5: rtl8150 is detected [ 124.560187][ T6384] loop3: detected capacity change from 0 to 4096 [ 124.618401][ T7] usb 6-1: USB disconnect, device number 2 [ 124.655153][ T6350] BTRFS info (device loop2): enabling ssd optimizations [ 124.678727][ T6400] loop0: detected capacity change from 0 to 4096 [ 124.834157][ T6384] ntfs: volume version 3.1. [ 124.878211][ T6400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.754110][ T6440] loop1: detected capacity change from 0 to 1024 [ 125.845277][ T6435] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.895282][ T6434] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 125.968528][ T144] hfsplus: b-tree write err: -5, ino 25 [ 125.974732][ T144] hfsplus: b-tree write err: -5, ino 4 [ 126.002752][ T144] hfsplus: b-tree write err: -5, ino 2 [ 126.145149][ T6434] usb 3-1: Using ep0 maxpacket: 16 [ 126.159579][ T6453] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 126.187888][ T6453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 126.215236][ T6435] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 126.265075][ T6434] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.292208][ T6434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.375271][ T6435] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.399689][ T6435] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.410663][ T6435] usb 6-1: Product: syz [ 126.415236][ T6435] usb 6-1: Manufacturer: syz [ 126.419977][ T6435] usb 6-1: SerialNumber: syz [ 126.432157][ T6435] usb 6-1: config 0 descriptor?? [ 126.467374][ T6434] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 126.494545][ T6434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.520963][ T6434] usb 3-1: Product: syz [ 126.527838][ T6434] usb 3-1: Manufacturer: syz [ 126.532472][ T6434] usb 3-1: SerialNumber: syz [ 126.560041][ T6434] usb 3-1: config 0 descriptor?? [ 126.725493][ T4177] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.733376][ T6435] usb 6-1: USB disconnect, device number 3 [ 126.842244][ T6434] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 126.985094][ T4177] usb 4-1: Using ep0 maxpacket: 16 [ 127.115314][ T4177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.126875][ T4177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.142817][ T4177] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.156389][ T6434] rc_core: IR keymap rc-imon-pad not found [ 127.165099][ T6434] Registered IR keymap rc-empty [ 127.170285][ T4177] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 127.180629][ T6434] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 127.195226][ T4177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.203414][ T6434] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 127.232455][ T4177] usb 4-1: config 0 descriptor?? [ 127.306092][ T6434] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 127.322228][ T6434] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 127.346166][ T6434] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:14> initialized [ 127.349538][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 127.496381][ T1110] usb 3-1: USB disconnect, device number 14 [ 127.718598][ T4177] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000A/input/input14 [ 127.805740][ T4177] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 127.886736][ T6543] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.955258][ T6549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.328747][ T4635] usb 4-1: USB disconnect, device number 10 [ 128.429330][ T6576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.543219][ T6585] loop0: detected capacity change from 0 to 128 [ 128.608410][ T6585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.624123][ T6585] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.675133][ T4233] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 128.815493][ T4630] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.065051][ T4630] usb 6-1: Using ep0 maxpacket: 32 [ 129.085136][ T4233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 129.125345][ T4635] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.196751][ T4630] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.205147][ T4630] usb 6-1: config 0 has no interface number 0 [ 129.244450][ T6612] loop2: detected capacity change from 0 to 512 [ 129.305171][ T4233] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.326620][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.341159][ T4233] usb 2-1: Product: syz [ 129.346755][ T6612] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.628: iget: bad i_size value: 38620345925642 [ 129.369883][ T4233] usb 2-1: Manufacturer: syz [ 129.370031][ T6612] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.628: couldn't read orphan inode 15 (err -117) [ 129.374680][ T4233] usb 2-1: SerialNumber: syz [ 129.392723][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.397453][ T4233] usb 2-1: config 0 descriptor?? [ 129.414495][ T4635] usb 1-1: Using ep0 maxpacket: 8 [ 129.419694][ T4630] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.439581][ T4630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.448540][ T4630] usb 6-1: Product: syz [ 129.452723][ T4630] usb 6-1: Manufacturer: syz [ 129.463254][ T4630] usb 6-1: SerialNumber: syz [ 129.471031][ T4630] usb 6-1: config 0 descriptor?? [ 129.506296][ T6612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.628: bg 0: block 5: invalid block bitmap [ 129.522148][ T4630] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 129.534200][ T6612] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1300 with error 28 [ 129.548208][ T6612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.548208][ T6612] [ 129.557906][ T6612] EXT4-fs (loop2): Total free blocks count 0 [ 129.564259][ T6612] EXT4-fs (loop2): Free/Dirty block details [ 129.570469][ T6612] EXT4-fs (loop2): free_blocks=0 [ 129.575617][ T6612] EXT4-fs (loop2): dirty_blocks=1300 [ 129.580909][ T6612] EXT4-fs (loop2): Block reservation details [ 129.587283][ T6612] EXT4-fs (loop2): i_reserved_data_blocks=1300 [ 129.622297][ T6612] EXT4-fs (loop2): shut down requested (0) [ 129.718046][ T4233] usb 2-1: USB disconnect, device number 12 [ 129.754114][ T4630] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 129.775228][ T4635] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 129.789746][ T4635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.802595][ T4635] usb 1-1: Product: syz [ 129.807177][ T4630] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 129.819098][ T4635] usb 1-1: Manufacturer: syz [ 129.823717][ T4635] usb 1-1: SerialNumber: syz [ 129.840054][ T4635] usb 1-1: config 0 descriptor?? [ 129.896943][ T4635] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 129.926367][ T6620] loop2: detected capacity change from 0 to 2048 [ 129.979738][ T6621] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.006664][ T6620] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 130.022602][ T6620] Remounting filesystem read-only [ 130.060468][ T4190] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 130.115386][ T4234] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.160657][ T6623] loop2: detected capacity change from 0 to 512 [ 130.177684][ T4177] usb 6-1: USB disconnect, device number 4 [ 130.204996][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 130.214824][ T6623] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.228417][ T4177] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.281987][ T4177] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.308901][ T4177] quatech2 6-1:0.51: device disconnected [ 130.398837][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 130.525140][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.534799][ T4234] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 130.543909][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.557266][ T4234] usb 4-1: config 0 descriptor?? [ 130.854989][ T6435] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 131.231514][ T6618] udc-core: couldn't find an available UDC or it's busy [ 131.241498][ T6435] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 131.245430][ T6618] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.255699][ T6435] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 131.295201][ T4234] usb 4-1: string descriptor 0 read error: -71 [ 131.315057][ T4234] uclogic 0003:5543:006E.000B: failed retrieving string descriptor #200: -71 [ 131.325396][ T4234] uclogic 0003:5543:006E.000B: failed retrieving pen parameters: -71 [ 131.333566][ T4234] uclogic 0003:5543:006E.000B: failed probing pen v2 parameters: -71 [ 131.346716][ T4234] uclogic 0003:5543:006E.000B: failed probing parameters: -71 [ 131.354574][ T4234] uclogic: probe of 0003:5543:006E.000B failed with error -71 [ 131.371545][ T4234] usb 4-1: USB disconnect, device number 11 [ 131.455175][ T6435] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 131.464305][ T6435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.484914][ T6435] usb 3-1: Product: syz [ 131.489101][ T6435] usb 3-1: Manufacturer: syz [ 131.493676][ T6435] usb 3-1: SerialNumber: syz [ 131.516686][ T6435] usb 3-1: config 0 descriptor?? [ 131.535239][ T6630] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 131.545332][ T6630] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 131.685027][ T4635] gspca_sonixj: i2c_w8 err -71 [ 131.774981][ T4635] sonixj: probe of 1-1:0.0 failed with error -71 [ 131.775086][ T6435] dm9601: probe of 3-1:0.0 failed with error -71 [ 131.783897][ T4635] usb 1-1: USB disconnect, device number 6 [ 131.823829][ T6435] usb 3-1: USB disconnect, device number 15 [ 132.162784][ T6649] loop1: detected capacity change from 0 to 256 [ 132.216292][ T6649] FAT-fs (loop1): Directory bread(block 64) failed [ 132.225119][ T6649] FAT-fs (loop1): Directory bread(block 65) failed [ 132.232315][ T6649] FAT-fs (loop1): Directory bread(block 66) failed [ 132.243662][ T6649] FAT-fs (loop1): Directory bread(block 67) failed [ 132.250546][ T6649] FAT-fs (loop1): Directory bread(block 68) failed [ 132.257530][ T6649] FAT-fs (loop1): Directory bread(block 69) failed [ 132.264193][ T6649] FAT-fs (loop1): Directory bread(block 70) failed [ 132.271223][ T6649] FAT-fs (loop1): Directory bread(block 71) failed [ 132.285809][ T6649] FAT-fs (loop1): Directory bread(block 72) failed [ 132.301766][ T6649] FAT-fs (loop1): Directory bread(block 73) failed [ 132.525540][ T6660] loop2: detected capacity change from 0 to 512 [ 132.596891][ T4177] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.617633][ T6660] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.646: iget: bad i_size value: 38620345925642 [ 132.632110][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.632221][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.695924][ T6660] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.646: couldn't read orphan inode 15 (err -117) [ 132.708716][ T6660] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.761422][ T6660] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.646: bg 0: block 5: invalid block bitmap [ 132.790912][ T6660] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 132.811257][ T6660] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.811257][ T6660] [ 132.822652][ T6660] EXT4-fs (loop2): Total free blocks count 0 [ 132.828805][ T6660] EXT4-fs (loop2): Free/Dirty block details [ 132.835167][ T6660] EXT4-fs (loop2): free_blocks=0 [ 132.840127][ T6660] EXT4-fs (loop2): dirty_blocks=1 [ 132.845464][ T6660] EXT4-fs (loop2): Block reservation details [ 132.851731][ T6660] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 133.115105][ T4177] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 133.308022][ T4177] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.317585][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.326150][ T4177] usb 1-1: Product: syz [ 133.330318][ T4177] usb 1-1: Manufacturer: syz [ 133.335250][ T4177] usb 1-1: SerialNumber: syz [ 133.341727][ T4177] usb 1-1: config 0 descriptor?? [ 133.451138][ T6685] loop3: detected capacity change from 0 to 128 [ 133.573828][ T6685] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.625088][ T6685] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.675153][ T4234] Bluetooth: hci5: command 0x1003 tx timeout [ 133.681430][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 133.686503][ T4177] usb 1-1: USB disconnect, device number 7 [ 133.778902][ T6685] [ 133.781278][ T6685] ====================================================== [ 133.788301][ T6685] WARNING: possible circular locking dependency detected [ 133.795330][ T6685] syzkaller #0 Not tainted [ 133.799747][ T6685] ------------------------------------------------------ [ 133.806939][ T6685] syz.3.654/6685 is trying to acquire lock: [ 133.812834][ T6685] ffff888059ad0650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 133.822078][ T6685] [ 133.822078][ T6685] but task is already holding lock: [ 133.829445][ T6685] ffff888059ad2c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60 [ 133.839619][ T6685] [ 133.839619][ T6685] which lock already depends on the new lock. [ 133.839619][ T6685] [ 133.850001][ T6685] [ 133.850001][ T6685] the existing dependency chain (in reverse order) is: [ 133.858993][ T6685] [ 133.858993][ T6685] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 133.867408][ T6685] percpu_down_read+0x46/0x1b0 [ 133.872681][ T6685] ext4_writepages+0x20f/0x2df0 [ 133.878051][ T6685] do_writepages+0x476/0x6e0 [ 133.883150][ T6685] __writeback_single_inode+0x153/0xda0 [ 133.889206][ T6685] writeback_single_inode+0x3cb/0x8e0 [ 133.895097][ T6685] write_inode_now+0x23b/0x2c0 [ 133.900374][ T6685] iput+0x5ab/0x8a0 [ 133.904693][ T6685] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 133.910573][ T6685] ext4_xattr_block_set+0x4fd/0x2d20 [ 133.916450][ T6685] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 133.922765][ T6685] __ext4_expand_extra_isize+0x301/0x3e0 [ 133.928905][ T6685] __ext4_mark_inode_dirty+0x469/0x700 [ 133.934866][ T6685] ext4_evict_inode+0xa8d/0x1090 [ 133.940307][ T6685] evict+0x4c9/0x8d0 [ 133.944706][ T6685] ext4_orphan_cleanup+0xad2/0x1320 [ 133.950553][ T6685] ext4_fill_super+0x8d6e/0x94f0 [ 133.956012][ T6685] mount_bdev+0x287/0x3c0 [ 133.960861][ T6685] legacy_get_tree+0xe6/0x180 [ 133.966056][ T6685] vfs_get_tree+0x88/0x270 [ 133.971006][ T6685] do_new_mount+0x24a/0xa40 [ 133.976026][ T6685] __se_sys_mount+0x2e3/0x3d0 [ 133.981220][ T6685] do_syscall_64+0x4c/0xa0 [ 133.986180][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.992594][ T6685] [ 133.992594][ T6685] -> #0 (sb_internal){++++}-{0:0}: [ 133.999882][ T6685] __lock_acquire+0x2c42/0x7d10 [ 134.005252][ T6685] lock_acquire+0x19e/0x400 [ 134.010272][ T6685] percpu_down_read+0x46/0x1b0 [ 134.015544][ T6685] ext4_evict_inode+0x44a/0x1090 [ 134.020989][ T6685] evict+0x4c9/0x8d0 [ 134.025394][ T6685] ext4_ext_migrate+0xc0c/0xe60 [ 134.030747][ T6685] ext4_ioctl+0x1a84/0x3870 [ 134.035768][ T6685] __se_sys_ioctl+0xfa/0x170 [ 134.040860][ T6685] do_syscall_64+0x4c/0xa0 [ 134.045796][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.052191][ T6685] [ 134.052191][ T6685] other info that might help us debug this: [ 134.052191][ T6685] [ 134.062399][ T6685] Possible unsafe locking scenario: [ 134.062399][ T6685] [ 134.069826][ T6685] CPU0 CPU1 [ 134.075167][ T6685] ---- ---- [ 134.080517][ T6685] lock(&sbi->s_writepages_rwsem); [ 134.085696][ T6685] lock(sb_internal); [ 134.092270][ T6685] lock(&sbi->s_writepages_rwsem); [ 134.099967][ T6685] lock(sb_internal); [ 134.104021][ T6685] [ 134.104021][ T6685] *** DEADLOCK *** [ 134.104021][ T6685] [ 134.112140][ T6685] 3 locks held by syz.3.654/6685: [ 134.117144][ T6685] #0: ffff888059ad0460 (sb_writers#5){++++}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 134.126790][ T6685] #1: ffff88805aea3fc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_ioctl+0x1a7c/0x3870 [ 134.137126][ T6685] #2: ffff888059ad2c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60 [ 134.147627][ T6685] [ 134.147627][ T6685] stack backtrace: [ 134.153506][ T6685] CPU: 0 PID: 6685 Comm: syz.3.654 Not tainted syzkaller #0 [ 134.160859][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.170907][ T6685] Call Trace: [ 134.174182][ T6685] [ 134.177098][ T6685] dump_stack_lvl+0x188/0x250 [ 134.181760][ T6685] ? load_image+0x400/0x400 [ 134.186251][ T6685] ? show_regs_print_info+0x20/0x20 [ 134.191452][ T6685] ? print_circular_bug+0x12b/0x1a0 [ 134.196656][ T6685] check_noncircular+0x296/0x330 [ 134.201579][ T6685] ? add_chain_block+0x940/0x940 [ 134.206495][ T6685] ? lockdep_lock+0xf1/0x1f0 [ 134.211069][ T6685] ? mark_lock+0x94/0x320 [ 134.215389][ T6685] ? mark_lock+0x94/0x320 [ 134.219737][ T6685] __lock_acquire+0x2c42/0x7d10 [ 134.224591][ T6685] ? mark_lock+0x94/0x320 [ 134.228908][ T6685] ? __lock_acquire+0x13bc/0x7d10 [ 134.233930][ T6685] ? verify_lock_unused+0x140/0x140 [ 134.239138][ T6685] ? verify_lock_unused+0x140/0x140 [ 134.244324][ T6685] ? truncate_inode_pages_range+0x3cc/0xfe0 [ 134.250216][ T6685] ? __lock_acquire+0x13bc/0x7d10 [ 134.255231][ T6685] lock_acquire+0x19e/0x400 [ 134.259726][ T6685] ? ext4_evict_inode+0x44a/0x1090 [ 134.264821][ T6685] ? __might_sleep+0xf0/0xf0 [ 134.269498][ T6685] ? read_lock_is_recursive+0x10/0x10 [ 134.274862][ T6685] ? dquot_initialize+0x20/0x20 [ 134.279785][ T6685] ? do_raw_spin_lock+0x128/0x2f0 [ 134.284794][ T6685] percpu_down_read+0x46/0x1b0 [ 134.289543][ T6685] ? ext4_evict_inode+0x44a/0x1090 [ 134.294639][ T6685] ext4_evict_inode+0x44a/0x1090 [ 134.299559][ T6685] ? _raw_spin_unlock+0x24/0x40 [ 134.304479][ T6685] ? inode_wait_for_writeback+0x1df/0x220 [ 134.310183][ T6685] ? mark_buffer_dirty+0x2aa/0x490 [ 134.315276][ T6685] ? sb_clear_inode_writeback+0x360/0x360 [ 134.320978][ T6685] ? do_raw_spin_lock+0x128/0x2f0 [ 134.325985][ T6685] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 134.332237][ T6685] ? do_raw_spin_unlock+0x11d/0x230 [ 134.337609][ T6685] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 134.343497][ T6685] evict+0x4c9/0x8d0 [ 134.347387][ T6685] ? proc_nr_inodes+0x320/0x320 [ 134.352231][ T6685] ? do_raw_spin_unlock+0x11d/0x230 [ 134.357423][ T6685] ? _raw_spin_unlock+0x24/0x40 [ 134.362264][ T6685] ? iput+0x706/0x8a0 [ 134.366247][ T6685] ext4_ext_migrate+0xc0c/0xe60 [ 134.371105][ T6685] ? mb_regenerate_buddy+0x4f0/0x4f0 [ 134.376383][ T6685] ? sb_start_write+0x112/0x1c0 [ 134.381263][ T6685] ext4_ioctl+0x1a84/0x3870 [ 134.385762][ T6685] ? do_vfs_ioctl+0x1d16/0x1ef0 [ 134.390635][ T6685] ? ext4_fileattr_set+0x1750/0x1750 [ 134.395917][ T6685] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 134.401558][ T6685] ? rcu_lock_release+0x5/0x20 [ 134.406326][ T6685] ? __lock_acquire+0x7d10/0x7d10 [ 134.411367][ T6685] ? kfree+0xef/0x2a0 [ 134.415439][ T6685] ? tomoyo_path_number_perm+0x5b4/0x660 [ 134.421062][ T6685] ? verify_lock_unused+0x140/0x140 [ 134.426362][ T6685] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 134.431841][ T6685] ? bpf_lsm_file_ioctl+0x5/0x10 [ 134.436766][ T6685] ? security_file_ioctl+0x7c/0xa0 [ 134.441873][ T6685] ? ext4_fileattr_set+0x1750/0x1750 [ 134.447145][ T6685] __se_sys_ioctl+0xfa/0x170 [ 134.451724][ T6685] do_syscall_64+0x4c/0xa0 [ 134.456214][ T6685] ? clear_bhb_loop+0x30/0x80 [ 134.460885][ T6685] ? clear_bhb_loop+0x30/0x80 [ 134.465567][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.471472][ T6685] RIP: 0033:0x7fdcf7810e59 [ 134.475901][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.495491][ T6685] RSP: 002b:00007fdcf5a6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.503891][ T6685] RAX: ffffffffffffffda RBX: 00007fdcf7a89fa0 RCX: 00007fdcf7810e59 [ 134.511850][ T6685] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 134.519812][ T6685] RBP: 00007fdcf78a6d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.527775][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.535746][ T6685] R13: 00007fdcf7a8a038 R14: 00007fdcf7a89fa0 R15: 00007fffc302df28 [ 134.543715][ T6685] [ 134.582202][ T25] audit: type=1804 audit(1780951625.656:12): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.654" name="/newroot/135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 res=1 errno=0 [ 135.755070][ T4630] Bluetooth: hci5: command 0x1001 tx timeout [ 135.761122][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 137.825017][ T4635] Bluetooth: hci5: command 0x1009 tx timeout