last executing test programs: 19m7.214203076s ago: executing program 3 (id=1261): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 19m6.970078417s ago: executing program 3 (id=1264): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x100401, 0x1003, 0x4, {0xa, @pix_mp={0x5, 0xffffffff, 0x56595559, 0x3, 0xa, [{}, {0x32f, 0x20ae4}, {0x0, 0x3}, {0x9, 0x8}, {0x8fe, 0x8}, {0x5}, {0x4, 0x7a}, {0x1ff, 0x9}], 0x5, 0xfc, 0x7, 0x2, 0x1}}, 0x9}) 19m6.71151274s ago: executing program 3 (id=1269): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) 19m6.555733727s ago: executing program 3 (id=1273): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@utf8no}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@shortname_win95}, {@fat=@dos1xfloppy}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 19m6.232667602s ago: executing program 3 (id=1276): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000240)) 19m5.674605209s ago: executing program 3 (id=1285): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x10006, &(0x7f0000003880)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x2}}, {@discard_size}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uid}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) 19m5.300580776s ago: executing program 32 (id=1285): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x10006, &(0x7f0000003880)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x2}}, {@discard_size}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uid}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) 12m2.093258117s ago: executing program 1 (id=6634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x20, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffb00, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) 12m1.898946316s ago: executing program 1 (id=6637): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=t']) 12m1.642990368s ago: executing program 1 (id=6641): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xe, 0x0, 0x0) 12m1.492590915s ago: executing program 1 (id=6643): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x61a4, &(0x7f000000c4c0)="$eJzs3c1vHGcdB/Df7JtfSlurh6pECLlpeSmlSZyUECjQ9gAHLj2gXFEi160iUkBJQGllEVe+cODEXwBC4ogQR8SBP6AHrtw4cSKSjQTqiUFjP088u9ntOnW8s/Z8PpIz85tn1vuMvzv7kpnZJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+P73frBWRMS1n6cFKxGfiW5EJ2KpqlcjYml1Ja/fi4jnYq85no2I/kJEdfu9f56OeDUiPnoqYmd3c71afPGQ/fjuH//+ux8+8dbf/tA//98/3em+Nmm9u3d/9Z8/3zvaNgMAAEDblGVZFulj/pn0+b7TdKcAgJnIr/9lkpef+vrX/3zrL/PUH7VarVarZ1DXlePdqxcRsVW/TfWeweF4ADhhtuLjprtAg+Tfar2IeKLpTgBzrWi6AxyLnd3N9SLlW9RfD1b32/O5IEP5bxUPru+YNJ1m9ByTWT2+tqMbz0zoz9KM+jBPcv6d0fyv7bcP0npFPbFjyH9WJuU/2L/0qXVy/t3R/Ecc9/4/K9vRGZt/W+X8e4+Uf1f+AAAAAAAwx/L//680fPx34eibciifdPx3dUZ9AAAAAAAAAIDH7ajj/z1g/D8AAACYW9Vn9cpvnjpYNum72KrlV4uIJ0fWB1omXSyz3HQ/AAAAAAAAAAAAAKBNevvn8F4tIvoR8eTyclmW1U/daP2ojnr7k67t2w9t1vSTPAAA7PvoqZFr+YuIxYi4mr7rr7+8vFyWi0vL5XK5tJDfzw4WFsul2ufaPK2WLQwO8Ya4NyirX7ZYu13dtM/L09pHf191X4Oye4iOPSb99Nec0NxQ2ACQ7L8a7XhFOmXK8ulJbz5giP3/FFqJlaYfV8y/ph+mAAAAwPEry7Is0td5n0nH/DtNdwoAmIn8+j96XOBIdWdCe8Tj+f1qtVqtVqs/VV1XjnevXkTEVv021XsGw/EDwAmzFR833QUaJP9W60XEc013AphrRdMd4Fjs7G6uFynfov56kMZ3z+eCDOW/VezdLt9+3HSa0XNMZvX42o5uPDOhP8/OqA/zJOffGc3/2n77IK133PnPyqT8B3uXzLVPzr87mv+I05N/Z2z+bZXz7z1S/l35AwAAAADAHMv//7/i+G/eZAAAAAAAAAA4cXZ2N9fzda/5+P/nxqzn+s/TKedfPGr+S2le/idazr8zkv+XR9br1ubvv3mw//97d3P993f+9dk8PWz+C3mmSI+sIj0iinRPRS9Nj7J1D9vudwfVPfWLTreXzvkp++/EjbgZG3FhaN1O+nsctK8NtVc97Q+1Xxxq7z3UfmmovZ++d6Bcyu3nYj1+Ejfj7b32qm1hyvYvTmkvp7Tn/Lue/1sp59+r/VT5L6f2YmRauf9h56H9vj4ddz9v3Pj8Ly8c/+ZMtR3dB9tWV23f2Qb6s/c3eWIQP7u9cevc3et37txaizQZWnox0uQxy/n3934WDp7/X9hvz8/79f31/oeDR85/XmxHb2L+L9Tmq+19acZ9a0LOf5B+cv5vp/bx+/9Jzn/y/v9yA/0BAAAAAAAAAAAAAACAT1KW5d4lom9ExOV0/U9T12YCALOVX//LJC9Xq9VqtVp9+uq6crzX60VE/LV+m+o9wy/G/TIAYJ79LyL+0XQnaIz8Wyx/3181fbHpzgAzdfv9D350/ebNjVu3m+4JAAAAAAAAAPBp5fE/V2vjP78YESsj6w2N//pmrB51/M9ennkwwOhjHuh7gu3OoNupDTf+fOyNz31u0vjfZ+Ph8b/zmLjd+nZM0J/SPpjSvjClfXHs0oO0xl7oUZPzf7423nmV/5mR4dfbMP7r6Jj3bZDzP1t7PFf5f2lkvXr+5W/nLv+tw664HZ2h/M/fee+n52+//8ErN967/u7Guxs/vrS2duHS5ctXrlw5/86NmxsX9v89nl7PgZx/HvvaeaDtkvPPmcu/XXL+X0i1/Nsl5//FVMu/XXL++f2e/Nsl558/+8i/XXL+L6Va/u2S8/9KquXfLju7mwtV/i+nWv7tkvf/r6Za/u2S838l1fJvl5z/uVTLv11y/udTfYj8fT38KZLzz0e47P/tkvNfS7X82yXnfzHV8m+XnP+lVMu/XXL+r6Za/u2S8/9aquXfLjn/y6mWf7vk/L+eavm3S87/Sqrl3y45/2+kWv7tkvP/Zqrl3y45/9dSLf92yfl/K9Xyb5ec/7dTLf92yfl/J9Xyb5ec/+upln+7HHz/vxkzZszkmaafmQAAAAAAAAAAAACAUbM4nbjpbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch11vcDP7NvXjuEGAjByd/AJjEhJEt2bSd+4d8UE14boBRIKPQFx/WuzYLf8NolUCSbBkokjIoqqqYXbQGhNlJVEVVcUERpLqq+XJX2gt5UVJWQGlUBBVSktqLZauY8z+OZ2dk5u97xevY8n48U/7w7Z+acOfPM7H7X+e4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALS79Y3zn20URdH8r/XH9qJ4QfPvW6e+MNacr7vWRwgAAACs1/+2/nzuhvSJQ6u4Uts2f/uKf/j60tLSUvH+0d8d/+LSUrpgqijGtxRF67LoqX/7QKN9m+CxYrIx0vbxSMXuRysuH6u4fLzi8omKy7dUXD5ZcfmyE7DM1vLnMa0b29X66/bylBY3FuOty3b1uNZjjS0jI/FnOS2N1nWWxo8VC8WJYr6Y7di+3LbR2v5btzb39bYi7mukbV87myvkR588Go+hEc7xro59Xb7N6AdvKKZ+/KNPHv3jc8/e3GtWnoaO2yuP887bmsf56fCZ8lgbxZZ0TuJxjrQd584ej8lox3E2Wtdr/r37OJ9b5XGOXj7MDdX9mE8WI62/f6d1nsbaf6yXztPO8Ln/ur0oiouXD7t7m2X7KkaKbR2fGbn8+EyWK7J5G82l9OJibE3r9NZVrNPmnNvVuU67nxPx8b81XG9shWNof5h+8KmJZY/7Wtdp1LzXKz1XutfgoJ8rw7IG47r4TutOP95zDe4K9/+Td6y8BnuunR5rMN3vtjV4W9UaHJkYbR1zehAaretcXoO7O7Yfbe2p0ZrP3NF/Dc6cO3lmZvHjn3jtwskjx+ePz5/au3v37N59+w4cODBzbOHE/Gz55xWe7eG3rRhJz4HbwrmLz4FXd23bvlSXvjy45+Fkn+fh9q5tB/08HOu+c42NeUIuX9Plc+Oh5kmfvDRSrPAcaz0+d63/eZjud9vzcKztedjza0qP5+HYKp6HzW3O3LW671nG2v7rdQxX62vB9rY12P39SPcaHPT3I8OyBifDuviXu1b+WrAzHO/j02v9fmR02RpMdze89jQ/k77fnzzQGr3W5S3NC66bKM4vzp+959Ej586d3V2EsSFe0rZWutfrtrb7VCxbryNrXq+HFl7x+C09Pr89nKvJ1zb/mFzxsWpuc+89/R+r1le33uez47N7ijAGbKPPZ6+v5s3zmbJkn/PZ3ObTM+v/Xjzl0rbX3/EVXn9j7n++3F+6qcdGx8fK5+9oOjvjHa/HnQ/VWOu1q9Ha93Mzq3s9Hg//bfTr8Y19Xo93dG076Nfj8e47F1+PG1U/7Vif7sdzMqyTE7P9X4+b2+zYs9Y1Odb39fj2MBvh/L8mJIWUi9rWzkrrNu1rbGw83K+xuIfOdbq3Y/vxkM2a+3pyz5Wt0ztvL29rNN27yzZqnU51bTvodZper1Zap42qn75dme7HczKsixv39l+nzW2evnf9r51b41/bXjsnqtbg+OhE85jH0yIsX++XtsY1eE9xtDhdnCjmWpdOtNZTo7Wv6ftWtwYnwn8b/Vq5o88avLNr20GvwfR1bKW11xhbfucHoPvxnAzr4on7+q/B5jZv2j/Y713vDJ9J27R979r987WVfuZ1S9dpupo/82oe51/v7/+z2eY2Jw6sNWf2P093h89c1+M8dT9/V3pOzRUbc552hON89sDK56l5PM1tvnhwlevpUFEUFz76QOvnveHfV/78/He/3vHvLr3+TefCRx/44fXH/mYtxw/A5vd8ObaVX+va/mVqNf/+DwAAAGwKMfePhJnI/wAAAFAbMffH/ys8kf8BAACgNmLuHwszyST/73jTswvPXyhSM38piJen0/BguV3suM6Gj6eWLmt+/oGvzv/kmxdWt++Roih++uBv9Nx+x4PxuEpT4TifenPn55df8cJPvjle/csJH3n4Qtpve3/9S+H24/1Z7TLoVcGdLYriWzd8vrWfqQ9cas2nH3ykNd9z8fHHmts8d7D8OF7/mZeU2/9BOP5Dx450XP+ZcB6+H+bs23ufj3i9r116zc7977u8v3i9xm0vbN3tJz5Y3m78PTlfeKzcPp7nlY7/Lz/35Nea2z/6qt7Hf2Gk9/E/GW73q2H+98vL7dsfg+bH8XqfCccf9xevd89Xvt3z+J/6bLn9mbeU2z0SZtz/neHjXW95dqH9fD3aONJxv4q3ltvF/c9+97dbl8fbi7ffffyThy91nI/u9fH0P5W3M9O1ffx83E/0F137b95O+/qM+3/ytx7pOM9V+3/qPc+8vHm73fu/u2u70a7rd//Gpj/8zOd77i8ez6E/O9Nxfw69OzyPw/6f+GBYj+Hy/3nq8x37jR55d+frT9z+S9svdNyf6G0/Lvf/1OuPt+a/T/3k9697wfUvvPjK5rkriu+8t7y9qv0f/6PTHcf/5Zvuaj0e8fL4MtO9/5XE/Z/92PSp04vnF+bazmrrd+e8ozyeLZNbtzWP94bw2tr98eHT5z40f3Zqdmq2KKbq+yv0rthXwvxhOS6u9fp3PRwez1t+71vb7vjHz8XP//ND5ecvvb38uvXqsN0Xwue3l4/fUmOd+3/i1ptaz+/G0+XHHT32Adi56z8OrGrDcP+7vy+I6/3MSz/UOg/Ny1pfN+Lzep3H/7258na+Ec7rUvjNzLfddHl/7dvH341w6b3l833d5y+8zMXH9U/C4/3O75e3H48r3t/vhe9jvr2j8/Uuro9vXBjpvv3Wb/G4GF5Piovl5XGreL4vPXdTz8OLv4ekuHhz6+PfSbdz85ru5koWP744c2Lh1PlHZ87NL56bWfz4Jw6fPH3+1LnDrd/lefjDVde//Pq0rfX6NDe/795idmtRFKeL2Q14wbo6x9/82+qO/8zDR+f2z94xN3/syPlj5x4+M3/2+NHFxaPzc4t3HDl2bP5jVddfmLt/956De/fvmT6+MHf/gYMH9x6cXjh1unkY5UFV2Df7kelTZw+3rrJ4/70Hd993372z0ydPz83fv392dvp81fVbX5umm9f+9emz8yeOnFs4OT+9uPCJ+ft3H9y3b0/lbwM8eebY4tTM2fOnZs4vzp+dKe/L1LnWp5tf+6quTz0t/mv5/Wy3RvmL+Ip33b0v/X7Wpq9+asWbKjfp+gWiz4bfRfP3LzpzYDUfx9w/HmaSSf4HAACAHMTcPxFmIv8DAABAbcTcvyXMRP4HAACA2oi5fzLMJJP8X8v+/yr2r/+/1v5/ebn+f179/zMfLXulm73/H/vz+v95uMb9/3XvX/9f/79+/f/V9+c3+/Hr/+v/s9yw9f9j7t9aFFnmfwAAAMhBzP3bwkzkfwAAAKiNmPuvCzOR/wEAAKA2Yu5/QZhJJvlf/39V/f89VYWr+vf/vf+//n+xOfv/8cHR/8/Gmvv373uo40P9/0D/X/9f/1//X/+fdRtf8ZJr1f+Puf/6MJNM8j8AAADkIOb+F4aZyP8AAABQGzH33xBmIv8DAABAbcTcvz3MJJP8r//v/f/1//X/a93/X+/7/7cdjP7/5uD9//vT/69wxf3/yY3v/4/r/6/7+McHe/zD3f+vPHz9f66KYXv//5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAAGoj5v6XhJnI/wAAAFAbMfffGGaSSf7X/9f/1//X/9f/773/6vf/L/+m/z9c9P/70/+v4P3/8+r/D/j4h7v/P+j3/x9/c/f19f/pZdj6/zH3vzTMJJP8DwAAADmIuf+mMBP5HwAAAGoj5v6XhZnI/wAAAFAbMffvCDPJJP/r/+v/6//r/+v/995/df+/pP8/XPT/+9P/r6D/r/+v/7+6/n+Pb371/+ll2Pr/MfffHGaSSf4HAACAHMTcf0uYifwPAAAAtRFz//8LM5H/AQAAoDZi7t8ZZpJJ/tf/r0v/f6Jj3/r/+v8r7f/uCf1//f960//vT/+/gv6//r/+/yrf/3+5tfT/t1TdGLUxbP3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAaiPm/leGmcj/AAAAUBsx90+FmWSS//X/69L/L/3pXz3xykL/X/+/Yv817f/HZaD/nzn9//70/yvo/+v/6/9vSP+ffAxb/z/m/lvDTDLJ/wAAAJCDmPtvCzOR/wEAAKA2Yu6/PcxE/gcAAIDaiLl/V5hJJvlf/79e/f9I/1//v9/+a9r/T/T/86b/30Pbk1T/v4L+v/5/9v3/+N2v/j+DMWz9/5j7XxVmkkn+BwAAgBzE3H9HmIn8DwAAALURc/+rw0zkfwAAAKiNmPvvDDPJJP/r/+v/6//r/+v/996//v/mpP/f31r7/xP6//r/+v+Z9f+9/z+DNWz9/5j7XxNmkkn+BwAAgBzE3H9XmIn8DwAAALUR///N8v97lf8BAACgjmLunw4zyST/6//r/+fU/2/o/+v/r7P/3/wqof8/3PT/+/P+/xX0//X/9f/1/xmoYev/x9z/2jCTTPI/AAAA5CDm/nvCTOR/AAAAqI2Y+2fCTOR/AAAAqI2Y+2fDTDLJ//r/+v859f+9/7/+v/f/rz/9//70/yvo/+v/163/XxT6/1xTw9b/j7l/d5hJJvkfAAAAchBz/54wE/kfAAAAaiPm/r1hJvI/AAAA1EbM/feGmWSS//X/9f/1//X/9f9771//f3PS/+9P/7+C/r/+f936/97/n2ts2Pr/MfffF2aSSf4HAACAHMTcvy/MRP4HAACA2oi5f3+YScj/vf6/bgAAAGBzibn/QJhJJv/+r/9fk/7/b/5dx771//X/++1/MP3/rfr/Yer/D5ea9v+7nxZXTP+/gv6//r/+v/4/AzVs/f+Y+w+GmWSS/wEAACAHMfe/LsxE/gcAAIDaiLn//4eZyP8AAABQGzH3/0yYSSb5X/+/Jv3/Lvr/+v/99u/9//X/66ym/f+BqVX/f0T/X/9/uI5f/1//n+Wufv8//m11/f+Y++8PM8kk/wMAAEAOYu7/2TAT+R8AAABqI+b+14eZyP8AAABQGzH3HwozyST/6//r/+v/6/9fnf7/64tuw9j/by4e/f960f/vr1b9f+//r/8/ZMev/6//z3LD9v7/Mfe/Icwkk/wPAAAAOYi5/4EwE/kfAAAAaiPm/jeGmcj/AAAAUBsx978pzCST/K//r/+v/6//7/3/e+9f/39z0v/vT/+/gv6//r/+v/4/AzVs/f+Y+98cZpJJ/gcAAIAcxNz/ljAT+R8AAABqI+b+t4aZyP8AAABQGzH3vy3MJJP8r/+v/6//r/+v/997//r/m5P+f3/6/xX0//X/9f/1/xmoYev/x9z/c2EmmeR/AAAAyEHM/Q+Gmcj/AAAAUBsx9789zET+BwAAgNqIuf8dYSaZ5H/9f/1//X/9f/3/3vvX/9+c9P/70/+voP+v/z90/f/mJfr/bF7D1v+Puf+dYSaZ5H8AAADIQcz9Px9mIv8DAABAbcTc/64wE/kfAAAAaiPm/l8IM8kk/+v/6/8PV/9/6UL79fT/9f+LQfX/m1fS/8+C/n9/+v8VevT/t+j/6/97/3/9f67YsPX/Y+5/d5hJJvkfAAAAchBz/3vCTOR/AAAAqI2Y+98bZiL/AwAAQG3E3P9QmEkm+V//P8v+f7rLw9f/9/7/+v/e/1//f330//vT/6/g/f/1//X/9f8ZqGHr/8fc/3CYSSb5HwAAAHIQc//7wkzkfwAAAKiNmPt/McxE/gcAAIDaiLn//WEmmeR//f8s+/9D/P7/dev/j3Wsj5z6/5Ntj2dal/r/+v8bQP+/P/3/Cvr/+v/D3P8Pq3nrCtfX/2cYDVv/P+b+D4SZZJL/AQAAIAcx9/9SmIn8DwAAALURc/8vh5nI/wAAAFAbMff/SphJJvlf/1//X//f+/97///e+9f/35z0//vT/6+g/6//P8z9/wr6/wyjYev/x9z/q2EmKwa/H/7nKu4mAAAAMERi7v9gmEkm//4PAAAAOYi5/3CYifwPAAAAtRFz/yNhJpnkf/3/7v5/fEdV/X/9f/1//X/9/81ocP3/l11fFPr/+v/6//r/+v/6/6zHsPX/Y+4/EmaSSf4HAACAHMTc/2thJvI/AAAA1EbM/UfDTOR/AAAAqI2Y++fCTDLJ/9ew/z8+nP1/7/9/pf3/n+r/6/8H+v+96f9vDO//35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAACgxtKPg2PuPxZmIv8DAABAbcTcfzzMRP4HAACA2oi5/0NhJpnkf+//r//v/f+vRf9/rGN7/f+S/r/+/yDo//en/19B/1//X/9f/5+BWn//P72ODqT/H3P/QphJJvkfAAAAchBz/4fDTOR/AAAAqI2Y+z8SZiL/AwAAQG3E3H8izCST/K//r/+fe/+/URQXvf+//n+v/ev/b076//3p/1fQ/9f/1//X/2eg1t//v3yV1p/r7P/H3H8yzCST/A8AAAA5iLn/VJiJ/M//sXdfP3ad5R7H98lJbA8SCv8BXHPFJUhI4U/gljskriNa6MUJvUPovYTea+gl9N57D73XUAOSUcbP89gze89aHs/K7LXe9/O5eY6t+Mx2MsnR71hfvQAAADQjd/+94xb7HwAAAJqRu/8+cUsn+1//r//vvf9fbeX9/71/vf7/LP2//n8Ka/39pZv/uoOi8AP7/zvd+ap76v/1//r/Qfp//b/+n/3m1v/n7r9v3NLJ/gcAAIAe5O6/X9xi/wMAAEAzcvffP26x/wEAAKAZufuvils62f/6f/2//l//v6f/v0H/r/9fNu//D9P/j9D/6//1//p/JjW3/j93/wPilk72PwAAAPQgd/8D4xb7HwAAAJqRu/9BcYv9DwAAAM3I3f/guKWT/a//1//r/5fS/5/w/v++34/+X/+/if5/mP5/hP5f/6//1/8zqbn1/7n7HxK3dLL/AQAAoAe5+x8at9j/AAAA0Izc/Q+LW+x/AAAAaEbu/ofHLZ3sf/2//l//v5T+/5je/9f/6/8X7rrVuf8m6P/X6f9HjPT/q5X+f8gF9/Obf3vL+fwH0P/r/1k3t/4/d/8j4pa7rVYnLvY3CQAAAMxK7v5Hxi2d/Pk/AAAA9CB3/+m4xf4HAACAZuTuvzpu6WT/6//1//p//b/+f/PX1/8vk/f/hx29/7/j7a68V7/9v/f/h3n/f+r+/5bvDP0/yza3/j93/zVxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/t9b///+eX3de/79bu+j/9f/6f/1/6/T/w7z/P2L3P3M79UP9v/7f+//6f45mbv1/7v7Hxi2d7H8AAADoQe7+x8Ut9j8AAAA0I3f/4+MW+x8AAACakbv/CXFLJ/tf/99a/7/313n/X/+/6evr//X/LdP/D9P/j2jl/f+L/K7Zdj9/VNv+/Pp//T/r5tb/5+5/YtzSyf4HAACAHuTuf1LcYv8DAABAM3L3Pzlusf8BAACgGbn7nxK3dLL/9f/6/2X0//kV9P/6/1u//0/6/2XS/w/T/49opf+/SNvu55f++fX/+n/Wza3/z93/1Lilk/0PAAAAPcjd/7S4xf4HAACAZuTuf3rcYv8DAABAM3L3PyNu6WT/6//1/8vo/73/r//3/r/+/8Lo/4fp/0fo//X/+n/9P5OaW/+fu//auKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/+n/9v/5/89ff0//fXv+/FPr/Yfr/Efp//b/+X//PpGbU/5/3q06tnhO3dLL/AQAAoAe5+58bt9j/AAAA0Izc/c+LW+x/AAAAaEbu/ufHLZ3sf/3/bPr/3Zyvrf5/Z7Va6f9Xnfb/O+f986zvyyX3/97/Xwz9/zD9/wj9v/5f/6//Z1Iz6v93f5y7/wVxSyf7HwAAAHqQu/+FcYv9DwAAAM3I3f+iuMX+BwAAgGbk7n9x3NLJ/tf/z6b/39VW/+/9//3fHz31/829/6//Xwz9/zD9/wj9v/5f/6//Z1Jz6/9z978kbjpx2UX/FgEAAICZyd3/0rilkz//BwAAgB7k7n9Z3GL/AwAAwEJdu/YzuftfHrd0sv/1/9P2/yfO+zn9v/5///eH/l//r/+/9en/04mNP6v/H6H/1//r//X/TGpu/X/u/lfELZ3sfwAAAOhB7v7r4hb7HwAAAJqRu/+VcYv9DwAAAM3I3f+quKWT/a//9/6//l//r//f/PX1/8uk/x+m/x+h/9f/b7f/P3nuf9T/04ZD9P9nzpw5fav3/7n7Xx23dLL/AQAAoAe5+18Tt9j/AAAA0Izc/a+NW+x/AAAAaEbu/tfFLYfZ/7ed+lMdH/1/p/1/fqsvq/+/erXS/+v/9f/6/2H6/2H6/xH6f/2/9//1/0xqbu//5+5/fdziz/8BAACgGbn73xC32P8AAADQjNz9b4xb7H8AAABYuHMtVu7+N8Utnex//X+n/b/3//X/+v/j7v9vXun/j8Ui+v+dg7/+3Pv/a/T/+v8B3fX/d7/Lnh/q//X/rJtb/5+7/81xSyf7HwAAAHqQu/8tcYv9DwAAAM3I3f/WuMX+BwAAgGbk7n9b3HRpJ/tf/6//1//r//X/m7/+Mb//f2K1Wun/J7CI/n/A3Pv/ad7/3/9v+Tn6f/3/kj+//l//z7q59f+5+98et3Sy/wEAAKAHufvfEbfY/wAAANCM3P3vjFvsfwAAAGhG7v53xS2d7H/9v/5f/6//b77/v2YR/b/3/yei/x82j/7/YPp//f+SP7/+X//PhdtW/5+7//q4pZP9DwAAAD3I3f/uuMX+BwAAgGbk7n9P3GL/AwAAQDNy9783bulk/+v/9f+H6f/zc+r/2+r/T86u/z+1539fJ+//6/8nov8fpv8fof/X/+v/r9X/M6W5vf+fu/99cUsn+x8AAAB6kLv//XHr/3Vr/wMAAEAzcvd/IG6x/wEAAKAZufs/GLd0sv/1//p/7//r/5t//1//3xX9/zD9/wj9v/5f/+/9fyY1t/4/d/+H4pZO9j8AAAD0IHf/h+MW+x8AAACakbv/I3GL/Q8AAADNyN1/Q9zSyf7X/+v/9f/6f/3/2X+G+v826P+HHU//v6P/1/9XP/9/8W+B/l//P/bradPc+v/c/R+NWzrZ/wAAANCD3P0fi1vsfwAAAGhG7v6Pxy32PwAAACzSpRt+Lnf/J+KWTva//l//r//X/+v/N399/f8ybaX/z28K/b/3/0M//f8d9vxoae//7/+/X/p//T/Tm1v/n7v/k3FLJ/sfAAAAepC7/1Nxi/0PAAAAzcjd/+m4xf4HAACAZuTu/0zc0sn+1//r//X/+n/9/+avr/9fJu//D9P/j9D/b/X9/KV/fv2//p91c+v/c/d/Nm7pZP8DAABAD3L3fy5usf8BAACgGbn7Px+32P8AAADQjN3dn3FZh/tf/6//1//r//X/m7++/n+Z9P/D9P8jjqX/P33X+rH+f1Lb/vz6f/0/6+bW/39h91edWn0xbulk/wMAAEAPcvd/KW6x/wEAAKAZufu/HLfY/wAAANCM3P1fiVs62f/6f/3/Mvr/M2fOnNb/6//3/n7O9f836v8p+v9h+v8R3v/X/+v/9f9Mam79f+7+r8Ytnex/AAAA6EHu/q/FLfY/AAAANCN3/9fjFvsfAAAAmpG7/xtxSyf7X/8/g/7/lP7f+//6/5X3//X/E9lG/3/L94T+X/8/2/7/1IX/9rfdzx/Vtj+//l//z7q59f+5+78Zt3Sy/wEAAKAHufu/FbfY/wAAANCM3P3fjlvsfwAAAGhG7v7vxC2d7H/9//H1/7f8vevl/f+d1ebPfxz9f34W/f/BX1//r/9vmff/h+n/R7TY/x/Ctvv5pX9+/b/+n3Vz6/9z9383btk7/C473O8SAAAAmJPc/d+LWzr5838AAADoQe7+78ct9j8AAAA0I3f/D+KWTva//n8G7/832P97/3/z94f+f9b9/yX6/zbo/4fp/0fo//X/+v+J+v/8btb/925u/X/u/h/GLZ3sfwAAAOhB7v4fxS32PwAAADQjd/+P4xb7HwAAAJqRu//GuOW8/b+p7W6F/l//r//X/+v/N399/f8y6f+HXWj/f3J1tP4/6f/1//r/Xvt/7/9z1tz6/9z9P4lb/Pk/AAAALM5lB/x87v6fxi32PwAAADQjd//P4hb7HwAAAJqRu//ncctNl2zrIx0r/b/+X/+v/9f/b/76+v9l0v8P8/7/CP3/FP38Ffr/Nvr/1Ur/z9HNrf/P3f+LuMWf/wMAAEAzcvf/Mm6x/wEAAKAZuft/FbfY/wAAANCM3P2/jls62f/6f/3/Efv/3TRT/3/WYfr/2+j/9f/n/V3V/09H/z9M/z9C/+/9f/2/9/+Z1Nz6/9z9v4lbOtn/AAAA0IPc/b+NW+x/AAAAaEbu/t/FLfY/AAAANCN3/+/jlk72/9b6//hbrf9ffP/v/X/v/2+n/7/+cv2//n8j/f8w/f8I/b/+X/+v/2dSc+v/c/f/IW7pZP8DAABAD3L3/zFusf8BAACgGbn7/xS32P8AAADQjNz9f45bOtn/3v/X/+v/9f+L7P+9/6//P4D+f5j+f7P6BzXz/n9H/z/rz6//1/+zbm79f+7+v8Qtnex/AAAA6EHu/r/GLfY/AAAANCN3/01xi/0PAAAAzcjd/7e4pZP9r//X/+v/9f/6/81fX/+/TPr/Ydvs/+9x+fiX9f7/1t//z4+g/9f/6/+ZxNz6/9z9f49bOtn/AAAA0IPc/f+IW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72/0j/f7L+Qv3/IP3/3s+v/9/8/TFV/3+l/n+X/l//v4n+f5j3/0fo/73/r//X/zOpufX/ufv/Hbd0sv8BAACgB7n7b45b7H8AAABoRu7+/8Qt9j8AAAA0I3f/f+OWTva/9/+X1P9fof/X/3v/X/+v/x+h/x+m/x+h/9f/6//1/0xqbv1/7v7/BQAA//9UNFCF") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12m0.144638979s ago: executing program 1 (id=6654): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m59.336387707s ago: executing program 1 (id=6660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random="0a0000008000"}) 11m58.693333268s ago: executing program 33 (id=6660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random="0a0000008000"}) 6m2.844889513s ago: executing program 4 (id=11329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0x18}]}, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m2.70065425s ago: executing program 4 (id=11332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x3f, {0x1, 0x57b, 0x9, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48890) 6m2.545173618s ago: executing program 4 (id=11335): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e8000000110001d96a7546551150f30beb505ac9c88e6273c86baf8ed2e29f381fe34d78971597809e54ba852f80e50bfa36edb3b573b322215a86287416d87e301190c5aa083f7c4ceb11580acec1ea"], 0xe8}, 0x1, 0x0, 0x0, 0x40805}, 0x20000000) 6m2.302677039s ago: executing program 4 (id=11338): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m1.915404428s ago: executing program 4 (id=11344): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, 0x0, 0x0) 6m1.270501848s ago: executing program 4 (id=11352): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000340)="08004275ac5884c2", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x40010) 6m0.877060946s ago: executing program 34 (id=11352): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000340)="08004275ac5884c2", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x40010) 5m59.910262983s ago: executing program 5 (id=11363): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@euid_gt}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x2) 5m58.549025547s ago: executing program 5 (id=11374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x80) 5m58.260770501s ago: executing program 5 (id=11377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xffff6986, 0x4) 5m58.05255976s ago: executing program 5 (id=11380): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m57.548278895s ago: executing program 5 (id=11384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) 5m57.070532227s ago: executing program 5 (id=11388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 5m56.517569573s ago: executing program 35 (id=11388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 3m27.410652316s ago: executing program 0 (id=13212): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 3m27.309607041s ago: executing program 0 (id=13215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0xd0, 0x1c0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0xff], 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x2, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2fd, 'syz0\x00', {0xa96}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xd, 0x9710}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3c0) 3m27.206524525s ago: executing program 0 (id=13217): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000900)={0x1}) 3m27.074601452s ago: executing program 0 (id=13220): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fb, &(0x7f0000001380)="$eJzs3E1vG8cZAOBZfUS02hoFgjaOYyAbJwcXhRWSqmUI6SEstZQ2JbnELhXYp8KopdSIlABJC7S+BEaBtgFa9NRzkR566C/on8pvULHkUt8SFduKXeR5AHOG3Hdn3v3AjEVwNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIWqv1euNKHTT/ua9+GzttTzrnbN90t5/jxRHzB96DVEIUfkv1Grh2vija68exP6ofLkZXhu/ey3UyqIWHn/vxz9879W5mXLH+SgK5yT0XFwpX/ZmQ9XRpzPjfPa3f/6Hxx8/2NnZ+uyyE3lJrSf9tMjSXms9idMii1dXVurvbnSKuJN2k+J+MUx6cTtPWsMsj2+13w8hrC7HydL9bLO/vtbqJvGt9k/ixurq3dvNen0l/mBpkLTyIuu/+8FS0d5Iu920vz6KKTffbr4Z7pY34i/TYTxMar043n60s7U8LckyqHGRoOa0oGa92Ww0ms3Gyp3VO3fr9dr4dvh387Mw/mCufkw4vsvc5d+0vHReCYcGjskY98rzGsPhae21/376htlvOxMAAADgskSj79ij0ffy10a1Tjob6kdi9qIrLyw/AAAA4NlFYfT7uqj6Yd61EHXSblI/K9xvVgAAAOD/0F/219gtnLLGLkRRKAYL0eTP/sG9d6LdVllr7VYLBE6sExh2rkdXq0ZGxcpc9a6d3IheHwe9Pon+uiq2j671mw/H84jyfD56MkrgaH8XS6CMmgt/DdfHMdcfjsuHVVy1InGxk3aTpXbWfa8RWq2rM8Pk3vB3nzz6fQh5vjf7Zb93NQrbj3a2ln796c7DUS5Pylae7Ebj5qLzc1kIBycj/HZ/3WO1uvH9o0c8P/oipjzqL/u9xXG/9cMXoFqMOHPxCxD+FN4Yx7yxOC4XJ1t+OuqzVvbZWDrl6A9n0Rjce2eh6uyCR34sixvjmBu33i6Lt29VW+bDQRbNaVk0q/P/RXn+n+pcnJFFOJTF8rQslg/fBTOjm+ykYXm2Ts8C4EXZPj4LnZj/D+bdM+ed8Zr+c8ba7XNX8o+m8OO9nPjvxW/23589or81Dn3r+tzBjHRsRK9PG9HrF5zXzxrR/xNu/vMfIWyGm5PgU+aV0Rxb9vu3I7NqtPtVucNXVb//+uPeSAjVSvNQdJvl2ytRNXPM3n60++CjrY+2Pmk2l1fqP6vX7zTD/OgwquL0qzIbzD0A32lJ/nW0OPxzlOfp4FeN1dVGa7iRxHk2nnj2vojT/jDJ2xut/noSD/JsmLWzbryXZx+ma0kRF5uDQZYP406W71Utpt0krh79UiS9Vn+YtotBN2kVSdzO+sNWexivpUU7Hmz+opsWG0le7hwXg6SddtJ2a5hm/bjINvN2shTHRZIcCkzXkv4w7aRltR8P8rTXyu/HH2bdzV4SryVFO08Hw2zc4KSvtN/J8l7Z7IlJHAC+qz4P1RPs9h9l940roTYl5kUfIwBw1PFZeuHMSM8AAAAAAAAAAAAAAACAF+Xwcr2fV4/0eeYVgZNK7Tm1M6VSO/rJ98NpwW9eehrfqBJCmHv88YPJQ3ieqcHJk5hehuN69koUQngJ0jj/HrusSm3KpZyvtj9tF+XJnR78gzLm2x6JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC6/wUAAP//nwiOjg==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m26.850924012s ago: executing program 0 (id=13223): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x204, 0x0, 0x1}) 3m26.406252163s ago: executing program 0 (id=13227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000000)) 3m25.877413629s ago: executing program 36 (id=13227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000000)) 1.768791616s ago: executing program 7 (id=15681): set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400), &(0x7f0000000240), &(0x7f0000000000)) 1.601335975s ago: executing program 7 (id=15684): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000020940)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x182, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1.334712277s ago: executing program 7 (id=15688): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffc93}, 0x48) 1.174327045s ago: executing program 7 (id=15691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000740), 0x0}, 0x20) 1.055504401s ago: executing program 6 (id=15693): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x30, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/251, 0xfb}], 0x1) 930.100157ms ago: executing program 7 (id=15695): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 916.565897ms ago: executing program 6 (id=15696): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) 754.735145ms ago: executing program 7 (id=15698): futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) 754.568555ms ago: executing program 6 (id=15699): r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000180), 0x14) 719.970846ms ago: executing program 8 (id=15700): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 690.258548ms ago: executing program 2 (id=15701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 604.984382ms ago: executing program 6 (id=15702): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 530.684415ms ago: executing program 2 (id=15703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) 530.568385ms ago: executing program 8 (id=15704): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) 409.954011ms ago: executing program 8 (id=15705): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0xa905d000) 407.951221ms ago: executing program 6 (id=15706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 394.289572ms ago: executing program 2 (id=15707): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') lseek(r0, 0x4, 0x2) 226.68057ms ago: executing program 6 (id=15708): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000145c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000014640)=@conn_svc_rsp={0x0, 0x0, 0xa, "76b179f7", {0x3, 0x106, 0x0, 0x0, 0x4}}) 226.52196ms ago: executing program 8 (id=15709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="5bd6bc1996ff006859a121fc0e0d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 201.523461ms ago: executing program 2 (id=15710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa8182, 0x98) write$sysctl(r0, &(0x7f0000000100)='4\x00', 0x2) 117.853855ms ago: executing program 8 (id=15711): unshare(0x20000600) syz_io_uring_setup(0x7c77, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) 34.677409ms ago: executing program 2 (id=15712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 3.41395ms ago: executing program 8 (id=15713): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1a}, 0xa) 0s ago: executing program 2 (id=15714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): iled [ 1307.049048][ T6367] FAT-fs (loop2): Directory bread(block 65) failed [ 1307.068269][ T6367] FAT-fs (loop2): Directory bread(block 66) failed [ 1307.074873][ T6367] FAT-fs (loop2): Directory bread(block 67) failed [ 1307.097088][ T6367] FAT-fs (loop2): Directory bread(block 68) failed [ 1307.113880][ T6367] FAT-fs (loop2): Directory bread(block 69) failed [ 1307.122794][ T6367] FAT-fs (loop2): Directory bread(block 70) failed [ 1307.136837][ T6367] FAT-fs (loop2): Directory bread(block 71) failed [ 1307.145208][ T6367] FAT-fs (loop2): Directory bread(block 72) failed [ 1307.166249][ T6367] FAT-fs (loop2): Directory bread(block 73) failed [ 1307.293313][ T28] audit: type=1800 audit(1789535693.499:783): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14029" name="bus" dev="loop2" ino=1048743 res=0 errno=0 [ 1307.553583][ T6380] cgroup: none used incorrectly [ 1307.798217][ T346] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1307.998310][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1308.005441][ T346] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1308.022409][ T346] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1308.038102][ T346] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1308.047973][ T346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.068390][ T346] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.078292][ T346] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1308.087386][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.101054][ T6378] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1308.118327][ T6378] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1308.125767][ T6378] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1308.154027][ T346] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 1308.172623][ T6386] cgroup: Bad value for 'name' [ 1308.208279][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1308.222403][ T8] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1308.234515][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.244474][ T8] usb 7-1: Product: syz [ 1308.258069][ T8] usb 7-1: Manufacturer: syz [ 1308.262881][ T8] usb 7-1: SerialNumber: syz [ 1308.276881][ T8] usb 7-1: config 0 descriptor?? [ 1308.294800][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1308.522267][ T6394] netlink: 'syz.8.14043': attribute type 3 has an invalid length. [ 1308.566591][ T346] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 1308.589253][ T346] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1308.619380][ T346] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1308.688751][ T346] usb 3-1: USB disconnect, device number 80 [ 1308.694813][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1308.706521][ T8] gspca_sq930x: ucbus_write failed -71 [ 1308.728190][ T8] sq930x: probe of 7-1:0.0 failed with error -71 [ 1308.736393][ T346] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1308.754640][ T8] usb 7-1: USB disconnect, device number 13 [ 1308.775832][ T346] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1308.812437][ T346] mos7720 3-1:1.0: device disconnected [ 1308.906426][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14046'. [ 1309.278314][T20562] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1309.366209][ T6410] loop2: detected capacity change from 0 to 64 [ 1309.491788][T20562] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1309.507140][T20562] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1309.546473][T20562] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1309.565543][T20562] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.574441][T20562] usb 9-1: Product: syz [ 1309.579953][T20562] usb 9-1: Manufacturer: syz [ 1309.584745][T20562] usb 9-1: SerialNumber: syz [ 1309.592861][T20562] usb 9-1: config 0 descriptor?? [ 1309.609303][T20562] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1310.046534][T20562] gspca_sunplus: reg_r err -71 [ 1310.062219][T20562] sunplus: probe of 9-1:0.0 failed with error -71 [ 1310.102309][T20562] usb 9-1: USB disconnect, device number 7 [ 1310.311120][ T6424] loop6: detected capacity change from 0 to 128 [ 1310.337234][ T6426] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1310.346341][ T6426] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1310.657412][ T28] audit: type=1326 audit(1789535696.869:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.14062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1310.734212][ T28] audit: type=1326 audit(1789535696.869:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.14062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1310.794507][ T28] audit: type=1326 audit(1789535696.909:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.14062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1310.912730][ T28] audit: type=1326 audit(1789535696.909:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.14062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1310.979720][ T28] audit: type=1326 audit(1789535696.909:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.14062" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1311.442413][ T6465] netlink: 'syz.8.14077': attribute type 1 has an invalid length. [ 1312.109688][ T6488] loop6: detected capacity change from 0 to 4096 [ 1312.158769][ T6488] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1312.336162][ T6488] ntfs3: loop6: ino=19, mi_enum_attr [ 1312.341906][ T6488] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1312.584665][ T6508] netlink: 'syz.2.14099': attribute type 8 has an invalid length. [ 1312.605328][ T6508] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.14099'. [ 1312.848307][ T6517] netlink: 'syz.8.14102': attribute type 30 has an invalid length. [ 1312.994416][ T6520] netlink: 'syz.7.14105': attribute type 1 has an invalid length. [ 1313.089707][ T6526] loop8: detected capacity change from 0 to 1024 [ 1313.142735][ T6526] EXT4-fs: inline encryption not supported [ 1313.153531][ T6526] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 1313.153531][ T6526] [ 1314.741698][ T6552] loop7: detected capacity change from 0 to 32768 [ 1314.790117][ T6552] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 1314.804841][ T6552] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1314.910440][ T6552] XFS (loop7): Ending clean mount [ 1314.946689][ T6552] XFS (loop7): Quotacheck needed: Please wait. [ 1315.067624][ T6552] XFS (loop7): Quotacheck: Done. [ 1315.127192][T32039] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1315.281689][ T6528] netdevsim netdevsim2 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.291224][ T6528] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.300789][ T6528] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.312138][ T6528] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.365464][ T6532] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1315.408176][ T6564] netlink: 'syz.8.14127': attribute type 7 has an invalid length. [ 1315.438550][ T6564] netlink: 'syz.8.14127': attribute type 8 has an invalid length. [ 1315.446458][ T6564] netlink: 'syz.8.14127': attribute type 15 has an invalid length. [ 1316.794020][ T6609] loop6: detected capacity change from 0 to 1764 [ 1316.888554][ T972] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1317.080685][ T972] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1317.100281][ T972] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1317.116167][ T972] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.128488][ T972] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1317.137512][ T972] usb 9-1: config 1 has no interface number 0 [ 1317.144438][ T972] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1317.153881][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.177866][ T972] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1317.381759][ T972] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 1317.397596][ T972] snd_usb_pod 9-1:1.1: invalid control EP [ 1317.418144][ T972] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 1317.428566][ T972] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1317.446855][ T972] snd_usb_pod: probe of 9-1:1.1 failed with error -22 [ 1317.587829][ T972] usb 9-1: USB disconnect, device number 8 [ 1317.692203][ T6624] loop6: detected capacity change from 0 to 32768 [ 1317.703167][ T6624] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1317.818827][ T8096] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1317.828588][ T346] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1318.033896][ T28] audit: type=1326 audit(1789535704.249:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.040375][ T346] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.069368][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.077432][ T346] usb 3-1: Product: syz [ 1318.083865][ T346] usb 3-1: Manufacturer: syz [ 1318.088952][ T346] usb 3-1: SerialNumber: syz [ 1318.115660][ T28] audit: type=1326 audit(1789535704.249:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.165782][ T28] audit: type=1326 audit(1789535704.279:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.186170][ T5832] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1318.250755][ T28] audit: type=1326 audit(1789535704.279:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.295665][ T28] audit: type=1326 audit(1789535704.279:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.377524][ T28] audit: type=1326 audit(1789535704.279:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.425352][ T28] audit: type=1326 audit(1789535704.289:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.458692][ T28] audit: type=1326 audit(1789535704.289:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.536495][ T28] audit: type=1326 audit(1789535704.289:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.6.14158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1318.651003][ T972] usb 3-1: USB disconnect, device number 81 [ 1318.662072][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1319.296451][ T5832] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1319.311065][ T5832] ath9k_htc: Failed to initialize the device [ 1319.324967][ T972] usb 3-1: ath9k_htc: USB layer deinitialized [ 1319.412728][ T6658] loop6: detected capacity change from 0 to 32768 [ 1319.447877][ T6658] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1319.479038][ T5846] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1319.493047][ T6658] JBD2: Ignoring recovery information on journal [ 1319.626495][ T6658] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1319.698148][ T5846] usb 9-1: Using ep0 maxpacket: 8 [ 1319.727295][ T5846] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1319.745751][ T5846] usb 9-1: config 0 has no interface number 0 [ 1319.754213][ T5846] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1319.774805][ T5846] usb 9-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1319.786435][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.841415][ T5846] usb 9-1: Product: syz [ 1319.845748][ T5846] usb 9-1: Manufacturer: syz [ 1319.868518][ T5846] usb 9-1: SerialNumber: syz [ 1319.904758][ T5846] usb 9-1: config 0 descriptor?? [ 1320.038199][T31925] ocfs2: Unmounting device (7,6) on (node local) [ 1320.148914][ T5846] i2c-cp2615: probe of 9-1:0.1 failed with error -22 [ 1320.318249][ T5783] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1320.354028][ T5846] usb 9-1: USB disconnect, device number 9 [ 1320.510926][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.526063][ T5783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1320.538822][ T5783] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 1320.563034][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1320.578155][ T5783] usb 3-1: SerialNumber: syz [ 1320.585500][ T5783] usb 3-1: config 0 descriptor?? [ 1320.611842][ T6695] loop6: detected capacity change from 0 to 1024 [ 1320.624160][ T6695] EXT4-fs: Ignoring removed bh option [ 1320.634891][ T6695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1320.646871][ T6695] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1320.646871][ T6695] [ 1320.768306][ T6697] netlink: 'syz.6.14187': attribute type 13 has an invalid length. [ 1321.030860][ T5846] usb 3-1: USB disconnect, device number 82 [ 1321.706016][ T28] audit: type=1326 audit(1789535707.919:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.14192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1321.867025][ T6709] loop8: detected capacity change from 0 to 4096 [ 1321.942674][ T6709] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1321.988695][ T6709] ntfs3: loop8: Failed to load $Extend (-22). [ 1321.999373][ T6709] ntfs3: loop8: Failed to initialize $Extend. [ 1322.367592][ T6708] loop2: detected capacity change from 0 to 32768 [ 1322.398598][ T6708] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1322.414509][ T6708] JBD2: Ignoring recovery information on journal [ 1322.444522][ T6724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1322.507595][ T6708] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1322.682928][ T6729] loop6: detected capacity change from 0 to 256 [ 1322.698643][ T6729] exfat: Deprecated parameter 'utf8' [ 1322.761371][ T6729] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1322.783935][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 1322.941537][ T6733] loop8: detected capacity change from 0 to 64 [ 1323.349871][ T6745] netlink: 128 bytes leftover after parsing attributes in process `syz.7.14210'. [ 1323.359452][ T6745] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1323.392147][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14208'. [ 1323.423931][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14208'. [ 1323.435528][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14208'. [ 1324.016699][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14221'. [ 1324.052598][ T6771] netlink: 'syz.2.14222': attribute type 15 has an invalid length. [ 1324.073579][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14222'. [ 1324.212930][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14225'. [ 1324.233176][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14225'. [ 1324.398531][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14228'. [ 1324.608772][ T6792] netlink: 148 bytes leftover after parsing attributes in process `syz.8.14233'. [ 1325.390945][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1325.390962][ T28] audit: type=1326 audit(1789535711.609:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f026d59e159 code=0x0 [ 1326.407074][ T6860] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1326.618892][ T5833] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1326.710304][ T6848] loop7: detected capacity change from 0 to 32768 [ 1326.796133][ T6848] UFO tlock:0xffffc90002872168 [ 1326.840063][ T5833] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1326.853063][ T5833] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1326.882354][ T5833] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1326.908646][ T5833] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1326.929996][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1326.941447][ T5833] usb 9-1: Product: syz [ 1326.945808][ T5833] usb 9-1: Manufacturer: syz [ 1326.953808][ T5833] usb 9-1: SerialNumber: syz [ 1326.969712][ T5833] usb 9-1: config 0 descriptor?? [ 1326.986412][ T5833] hub 9-1:0.0: bad descriptor, ignoring hub [ 1327.010035][ T5833] hub: probe of 9-1:0.0 failed with error -5 [ 1327.035330][ T5833] usb 9-1: selecting invalid altsetting 0 [ 1327.157781][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.165429][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.408846][ T5282] usb 9-1: USB disconnect, device number 10 [ 1327.871822][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.945042][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.687850][ T6858] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.701703][ T6858] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.715561][ T6858] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.725324][ T6858] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.548203][ T23] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1329.750976][ T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1329.780195][ T23] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1329.798266][ T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1329.828322][ T23] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1329.843660][ T23] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1329.873702][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.910471][ T23] usb 9-1: config 0 descriptor?? [ 1330.138327][ T23] hdpvr 9-1:0.0: firmware version 0x7e dated ÍM‘å¬8 9 >�êÑèëþSŒÐ|âhÈÄn©ëBØÊk矉?qCÃ$FÃÔ [ 1330.170227][ T23] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 1330.327115][ T23] hdpvr 9-1:0.0: device init failed [ 1330.336064][ T23] hdpvr: probe of 9-1:0.0 failed with error -12 [ 1330.368774][ T23] usb 9-1: USB disconnect, device number 11 [ 1330.690886][ T6955] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1331.848517][ T6993] netlink: 'syz.7.14328': attribute type 1 has an invalid length. [ 1332.136606][ T6977] loop8: detected capacity change from 0 to 32768 [ 1332.165980][ T6977] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 1332.404188][ T8096] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 1332.541635][ T7011] loop2: detected capacity change from 0 to 512 [ 1332.568471][ T7014] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1332.677588][ T7011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.762642][ T7011] ext4 filesystem being mounted at /3707/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.073886][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.672918][ T7015] loop6: detected capacity change from 0 to 40427 [ 1333.699303][ T7015] F2FS-fs (loop6): heap/no_heap options were deprecated [ 1333.740796][ T7015] F2FS-fs (loop6): invalid crc value [ 1333.746234][ T7015] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1333.785633][ T5846] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1333.809618][ T7015] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1333.927959][ T7015] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1333.999034][ T5846] usb 9-1: Using ep0 maxpacket: 8 [ 1334.016826][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.068659][ T5846] usb 9-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1334.093436][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.114118][ T5846] usb 9-1: Product: syz [ 1334.122556][ T5846] usb 9-1: Manufacturer: syz [ 1334.137423][ T5846] usb 9-1: SerialNumber: syz [ 1334.151155][ T5846] usb 9-1: config 0 descriptor?? [ 1334.159079][ T5846] cdc_phonet 9-1:0.0: skipping garbage [ 1334.164636][ T5846] cdc_phonet 9-1:0.0: invalid descriptor buffer length [ 1334.171322][ T7060] loop2: detected capacity change from 0 to 512 [ 1334.172076][ T5846] cdc_phonet: probe of 9-1:0.0 failed with error -22 [ 1334.303588][ T7060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.376938][ T972] usb 9-1: USB disconnect, device number 12 [ 1334.383316][ T7060] ext4 filesystem being mounted at /3713/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.494754][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.109934][ T7089] __nla_validate_parse: 2 callbacks suppressed [ 1335.109954][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14369'. [ 1335.126311][ T7089] netlink: 56 bytes leftover after parsing attributes in process `syz.7.14369'. [ 1335.151316][ T7089] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.176523][ T7089] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.198260][ T7089] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.218158][ T7089] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.235857][ T7089] geneve2: entered promiscuous mode [ 1335.253977][ T7089] geneve2: entered allmulticast mode [ 1335.442992][ T7100] loop2: detected capacity change from 0 to 1024 [ 1335.457810][ T7100] EXT4-fs: Ignoring removed bh option [ 1335.517641][ T7100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1335.568255][ T7100] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1335.568255][ T7100] [ 1335.841065][ T7109] loop6: detected capacity change from 0 to 512 [ 1335.936699][ T7109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.950902][ T7109] ext4 filesystem being mounted at /761/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.104302][ T7117] netlink: 'syz.2.14381': attribute type 8 has an invalid length. [ 1336.157455][T31925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.375809][ T7101] loop7: detected capacity change from 0 to 32768 [ 1336.406013][ T7101] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 1336.553725][ T7129] netlink: 'syz.6.14386': attribute type 10 has an invalid length. [ 1336.578377][ T7129] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1336.648586][ T8096] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 1336.688352][ T7133] netlink: 'syz.2.14389': attribute type 10 has an invalid length. [ 1337.224612][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14397'. [ 1337.713481][ T7166] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1337.757910][ T7166] bond1 (unregistering): Released all slaves [ 1338.562180][ T7194] netlink: 'syz.6.14417': attribute type 3 has an invalid length. [ 1338.617246][ T7194] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.14417'. [ 1338.654365][ T7168] loop2: detected capacity change from 0 to 32768 [ 1338.664122][ T7168] XFS: ikeep mount option is deprecated. [ 1338.708403][ T7168] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1338.720310][ T7168] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1339.042136][ T7168] XFS (loop2): Ending clean mount [ 1339.053904][ T7215] loop8: detected capacity change from 0 to 128 [ 1339.067491][ T7168] XFS (loop2): Quotacheck needed: Please wait. [ 1339.240821][ T7168] XFS (loop2): Quotacheck: Done. [ 1339.472503][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1339.770156][ T7233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1340.262162][ T7250] loop8: detected capacity change from 0 to 4096 [ 1340.279885][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14442'. [ 1340.292137][ T7250] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 1340.437777][ T7250] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 1340.594496][ T11] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 1340.624766][ T4300] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 1340.656129][ T4300] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1340.688311][ T4300] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 1340.700155][ T12] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 1341.278273][ T23] IPVS: starting estimator thread 0... [ 1341.306182][ T28] audit: type=1326 audit(1789535727.519:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.330303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.378897][ T28] audit: type=1326 audit(1789535727.519:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.408735][ T7281] IPVS: using max 19 ests per chain, 45600 per kthread [ 1341.440627][ T28] audit: type=1326 audit(1789535727.559:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.500021][ T28] audit: type=1326 audit(1789535727.559:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.561803][ T28] audit: type=1326 audit(1789535727.559:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.641498][ T28] audit: type=1326 audit(1789535727.559:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.684435][ T28] audit: type=1326 audit(1789535727.559:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.800091][ T28] audit: type=1326 audit(1789535727.559:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.876144][ T28] audit: type=1326 audit(1789535727.559:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.7.14453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc23619e159 code=0x7ffc0000 [ 1341.954932][ T7299] loop7: detected capacity change from 0 to 256 [ 1342.267356][ T7305] x_tables: unsorted entry at hook 3 [ 1343.208147][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14477'. [ 1343.716400][ T28] audit: type=1326 audit(1789535729.929:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.6.14487" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1343.768310][ T972] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1343.962143][ T972] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.002892][ T972] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1344.018139][ T972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.026223][ T972] usb 9-1: Product: syz [ 1344.046462][ T972] usb 9-1: Manufacturer: syz [ 1344.058801][ T972] usb 9-1: SerialNumber: syz [ 1344.334387][ T972] snd-usb-6fire 9-1:1.0: unknown device firmware state received from device: [ 1344.358101][ T972] eb aa 00 00 00 00 00 00 [ 1344.368461][ T972] snd-usb-6fire: probe of 9-1:1.0 failed with error -5 [ 1344.401483][ T7372] dlm: Unknown command passed to DLM device : 11 [ 1344.401483][ T7372] [ 1344.539967][ T972] usb 9-1: USB disconnect, device number 13 [ 1344.764050][ T7387] netlink: 'syz.6.14503': attribute type 24 has an invalid length. [ 1345.083987][ T7399] loop2: detected capacity change from 0 to 1024 [ 1345.103858][ T7399] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1345.192303][ T7399] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.14508: lblock 1 mapped to illegal pblock 1 (length 1) [ 1345.239292][ T7399] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.14508: Failed to acquire dquot type 0 [ 1345.298911][ T7399] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.14508: Freeing blocks not in datazone - block = 0, count = 4096 [ 1345.365927][ T7399] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.14508: Invalid inode bitmap blk 0 in block_group 0 [ 1345.392385][ T1103] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1345.432031][ T7399] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1345.463614][ T1103] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 1345.488956][ T7399] EXT4-fs (loop2): 1 orphan inode deleted [ 1345.505234][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.565437][ T7399] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1345.589457][T27723] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 1345.742990][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.903915][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14520'. [ 1346.491033][ T7448] sctp: [Deprecated]: syz.6.14530 (pid 7448) Use of int in maxseg socket option. [ 1346.491033][ T7448] Use struct sctp_assoc_value instead [ 1346.516881][ T7451] cgroup: Invalid name [ 1346.638461][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1346.916300][ T7466] loop8: detected capacity change from 0 to 64 [ 1347.159447][ T7470] loop2: detected capacity change from 0 to 4096 [ 1347.188927][ T7470] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1347.908424][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1347.908441][ T28] audit: type=1400 audit(1789535734.119:818): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7498 comm="syz.8.14554" [ 1348.070271][ T7503] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14557'. [ 1348.088355][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14557'. [ 1348.345999][ T7509] loop8: detected capacity change from 0 to 512 [ 1348.357780][ T7509] EXT4-fs: Ignoring removed i_version option [ 1348.417241][ T7509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.463528][ T7509] ext4 filesystem being mounted at /309/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.481655][ T7496] loop6: detected capacity change from 0 to 32768 [ 1348.519962][ T7496] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1348.537689][ T7509] EXT4-fs error (device loop8): ext4_get_verity_descriptor_location:335: inode #15: comm syz.8.14559: verity file corrupted; can't find descriptor [ 1348.563386][ T7509] EXT4-fs (loop8): Remounting filesystem read-only [ 1348.571185][ T7509] fs-verity (loop8, inode 15): Error -117 getting verity descriptor size [ 1348.641134][ T4300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.730412][ T7496] XFS (loop6): Ending clean mount [ 1348.860479][T31925] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1349.245696][ T7530] loop8: detected capacity change from 0 to 2048 [ 1349.340210][ T7530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.462392][ T7540] netlink: 'syz.2.14569': attribute type 1 has an invalid length. [ 1349.470487][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14569'. [ 1349.508138][ T7537] netlink: 'syz.7.14568': attribute type 3 has an invalid length. [ 1349.598513][ T4300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.704658][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14570'. [ 1349.980505][ T7555] loop6: detected capacity change from 0 to 1024 [ 1350.000902][ T7555] EXT4-fs: Ignoring removed orlov option [ 1350.018172][ T7555] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1350.085954][ T7555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.181065][ T28] audit: type=1326 audit(1789535736.399:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1350.253138][ T28] audit: type=1326 audit(1789535736.419:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1350.299703][T31925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.309901][ T28] audit: type=1326 audit(1789535736.439:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1350.389953][ T28] audit: type=1326 audit(1789535736.439:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1350.421288][ T28] audit: type=1326 audit(1789535736.439:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1350.470768][ T28] audit: type=1326 audit(1789535736.499:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f6975e98e code=0x7ffc0000 [ 1350.535798][ T28] audit: type=1326 audit(1789535736.499:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f6975e98e code=0x7ffc0000 [ 1350.594732][ T28] audit: type=1326 audit(1789535736.509:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f6975e98e code=0x7ffc0000 [ 1350.637897][ T28] audit: type=1326 audit(1789535736.519:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.8.14580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f6975e98e code=0x7ffc0000 [ 1350.722526][ T7574] netlink: 'syz.2.14584': attribute type 46 has an invalid length. [ 1350.733973][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14584'. [ 1351.005085][ T7584] loop7: detected capacity change from 0 to 64 [ 1351.050147][ T7584] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1351.495966][ T7603] netlink: 'syz.7.14599': attribute type 29 has an invalid length. [ 1351.504671][ T7603] netlink: 'syz.7.14599': attribute type 29 has an invalid length. [ 1352.488677][ T7640] netlink: 9456 bytes leftover after parsing attributes in process `syz.2.14618'. [ 1352.560073][ T7646] IPVS: length: 126 != 8 [ 1353.048164][ T5282] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1353.089258][ T7666] loop6: detected capacity change from 0 to 256 [ 1353.199140][ T7666] FAT-fs (loop6): Directory bread(block 64) failed [ 1353.240177][ T7666] FAT-fs (loop6): Directory bread(block 65) failed [ 1353.246931][ T7666] FAT-fs (loop6): Directory bread(block 66) failed [ 1353.259076][ T7666] FAT-fs (loop6): Directory bread(block 67) failed [ 1353.265818][ T7666] FAT-fs (loop6): Directory bread(block 68) failed [ 1353.266237][ T5282] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1353.295759][ T7666] FAT-fs (loop6): Directory bread(block 69) failed [ 1353.298678][ T5282] usb 3-1: config 0 has no interface number 0 [ 1353.307604][ T7666] FAT-fs (loop6): Directory bread(block 70) failed [ 1353.315385][ T7666] FAT-fs (loop6): Directory bread(block 71) failed [ 1353.322971][ T7666] FAT-fs (loop6): Directory bread(block 72) failed [ 1353.330892][ T7666] FAT-fs (loop6): Directory bread(block 73) failed [ 1353.346182][ T5282] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1353.365918][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.390051][ T5282] usb 3-1: Product: syz [ 1353.406773][ T5282] usb 3-1: Manufacturer: syz [ 1353.429426][ T5282] usb 3-1: SerialNumber: syz [ 1353.436691][ T5282] usb 3-1: config 0 descriptor?? [ 1353.475344][ T5282] peak_usb: probe of 3-1:0.3 failed with error 3 [ 1353.673135][ T8] usb 3-1: USB disconnect, device number 83 [ 1353.831764][ T7682] loop8: detected capacity change from 0 to 256 [ 1353.871514][ T7682] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 1353.924196][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14641'. [ 1354.448183][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14649'. [ 1354.982624][ T7688] loop8: detected capacity change from 0 to 32768 [ 1355.217827][ T7688] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1355.465125][ T7688] XFS (loop8): Ending clean mount [ 1355.726131][ T4300] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1356.250586][ T7764] No such timeout policy "syz1" [ 1356.510526][ T7766] loop6: detected capacity change from 0 to 4096 [ 1356.520441][ T7772] usb usb7: usbfs: process 7772 (syz.8.14667) did not claim interface 0 before use [ 1356.533689][ T7766] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1356.935464][ T7783] loop7: detected capacity change from 0 to 16 [ 1356.952345][ T7783] erofs: (device loop7): mounted with root inode @ nid 36. [ 1357.063393][ T7783] erofs: (device loop7): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1357.110752][ T7783] syz.7.14681: attempt to access beyond end of device [ 1357.110752][ T7783] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1357.152405][ T7783] erofs: (device loop7): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1357.205543][ T7783] syz.7.14681: attempt to access beyond end of device [ 1357.205543][ T7783] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1357.253448][ T7783] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 1357.270627][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 1357.270643][ T28] audit: type=1800 audit(1789535743.489:1010): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.14681" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1357.336787][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.364998][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.378737][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.408479][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.429422][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.436971][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.457857][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.492805][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.506805][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.531145][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.560700][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.578270][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.607942][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.628080][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.639710][ T7802] sctp: [Deprecated]: syz.6.14691 (pid 7802) Use of int in max_burst socket option. [ 1357.639710][ T7802] Use struct sctp_assoc_value instead [ 1357.655307][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.678117][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.685590][ T5282] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1357.717332][ T7800] loop7: detected capacity change from 0 to 4096 [ 1357.741842][ T5282] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 1357.776841][ T7800] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512). [ 1358.036470][ T7805] fido_id[7805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1358.318897][ T4484] Bluetooth: hci2: command 0x0406 tx timeout [ 1358.395201][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14700'. [ 1358.554321][ T7829] loop8: detected capacity change from 0 to 1024 [ 1358.614998][ T7829] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1358.673204][ T7829] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1359.008692][ T7837] loop8: detected capacity change from 0 to 4096 [ 1359.038255][ T7837] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 1359.404238][ T7849] loop6: detected capacity change from 0 to 4096 [ 1359.478044][ T7849] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1359.546984][ T7849] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1359.596323][ T7849] ntfs3: loop6: ino=21, The size of extended attributes must not exceed 64KiB [ 1359.644357][ T7861] netlink: 'syz.8.14720': attribute type 3 has an invalid length. [ 1359.669402][ T7861] netlink: 'syz.8.14720': attribute type 1 has an invalid length. [ 1359.708304][ T7861] netlink: 224 bytes leftover after parsing attributes in process `syz.8.14720'. [ 1359.739561][ T7861] NCSI netlink: No device for ifindex 0 [ 1359.895639][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14722'. [ 1359.935912][ T7866] ip6t_rpfilter: unknown options [ 1360.176048][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.8.14728'. [ 1360.319320][ T28] audit: type=1800 audit(1789535746.529:1011): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.14724" name="/" dev="sockfs" ino=111597 res=0 errno=0 [ 1360.778353][ T8] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1360.838639][ T5282] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1360.974030][ T8] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1360.985598][ T8] usb 3-1: config 0 has no interface number 0 [ 1360.994462][ T8] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1361.009414][ T8] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1361.024554][ T8] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1361.033292][ T8] usb 3-1: Manufacturer: syz [ 1361.037950][ T8] usb 3-1: SerialNumber: syz [ 1361.045968][ T5282] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1361.059290][ T8] usb 3-1: config 0 descriptor?? [ 1361.065809][ T5282] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.098412][ T5282] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1361.115172][ T5282] usb 9-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 1361.126413][ T5282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.139121][ T5282] usb 9-1: Product: syz [ 1361.143385][ T5282] usb 9-1: Manufacturer: syz [ 1361.152292][ T5282] usb 9-1: SerialNumber: syz [ 1361.231268][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14744'. [ 1361.366928][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.405116][ T5282] usb 9-1: unit 115 not found! [ 1361.410380][ T5282] usb 9-1: unit 255 not found! [ 1361.446807][ T5282] usb 9-1: USB disconnect, device number 14 [ 1361.485696][T30135] udevd[30135]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1361.491130][ T8] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 1361.534463][ T8] usb 3-1: USB disconnect, device number 84 [ 1361.909522][ T7922] loop6: detected capacity change from 0 to 32768 [ 1361.918473][ T7922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.14749 (7922) [ 1361.935674][ T7922] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1361.948521][ T7922] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1361.957394][ T7922] BTRFS info (device loop6): setting nodatasum [ 1361.968592][ T7922] BTRFS info (device loop6): force zlib compression, level 3 [ 1361.976215][ T7922] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1361.987635][ T7922] BTRFS info (device loop6): use lzo compression, level 0 [ 1361.995418][ T7922] BTRFS info (device loop6): turning on flush-on-commit [ 1362.003155][ T7922] BTRFS info (device loop6): enabling auto defrag [ 1362.010105][ T7922] BTRFS info (device loop6): max_inline at 4096 [ 1362.016716][ T7922] BTRFS info (device loop6): using free space tree [ 1362.164408][ T7922] BTRFS info (device loop6): enabling ssd optimizations [ 1362.185874][ T7942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1362.567341][T31925] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1364.016243][ T7994] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.531347][ T972] IPVS: starting estimator thread 0... [ 1364.638331][ T8016] IPVS: using max 18 ests per chain, 43200 per kthread [ 1365.015594][ T8029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1365.355832][ T8041] netlink: 224 bytes leftover after parsing attributes in process `syz.7.14795'. [ 1365.526290][ T8008] loop8: detected capacity change from 0 to 32768 [ 1365.584306][ T8008] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1365.608831][ T8008] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1365.680720][ T8008] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1365.692741][ T5282] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1365.712292][ T5282] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1365.733366][ T8050] netlink: 'syz.6.14801': attribute type 7 has an invalid length. [ 1365.819394][ T5282] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 1365.850765][ T5282] gfs2: fsid=syz:syz.0: jid=0: Done [ 1365.856170][ T8008] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1366.108564][ T8062] loop2: detected capacity change from 0 to 16 [ 1366.137491][ T8062] erofs: (device loop2): mounted with root inode @ nid 36. [ 1366.202804][ T8062] syz.2.14806: attempt to access beyond end of device [ 1366.202804][ T8062] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1366.247523][ T8062] syz.2.14806: attempt to access beyond end of device [ 1366.247523][ T8062] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1366.287703][ T8062] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 1366.299694][ T28] audit: type=1800 audit(2000000003.280:1012): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14806" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1366.488127][ T23] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1366.606296][ T8008] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1366.668449][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1366.686183][ T23] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 1366.708040][ T23] usb 7-1: config 2 has no interface number 0 [ 1366.714366][ T23] usb 7-1: config 2 interface 31 has no altsetting 0 [ 1366.755366][ T23] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1366.780346][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.837893][ T23] usb 7-1: Product: syz [ 1366.846384][ T23] usb 7-1: Manufacturer: syz [ 1366.858168][ T23] usb 7-1: SerialNumber: syz [ 1366.894280][ T4300] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1366.894280][ T4300] inode = 11 2339 [ 1366.894280][ T4300] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 1366.915294][ T4300] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1366.924811][ T4300] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4300 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 1366.936201][ T4300] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1366.944575][ T4300] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1367.014190][ T4300] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1367.036375][ T8082] netlink: 'syz.2.14817': attribute type 3 has an invalid length. [ 1367.053420][ T4300] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1367.073269][ T4300] gfs2: fsid=syz:syz.0: File system withdrawn [ 1367.086947][ T4300] CPU: 1 PID: 4300 Comm: syz-executor Not tainted syzkaller #0 [ 1367.094574][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1367.104662][ T4300] Call Trace: [ 1367.108062][ T4300] [ 1367.111085][ T4300] dump_stack_lvl+0x18c/0x250 [ 1367.116051][ T4300] ? show_regs_print_info+0x20/0x20 [ 1367.121464][ T4300] ? load_image+0x420/0x420 [ 1367.126038][ T4300] ? kobject_uevent_env+0x368/0x890 [ 1367.131294][ T4300] gfs2_withdraw+0xe16/0x1400 [ 1367.136030][ T4300] ? gfs2_lm+0x240/0x240 [ 1367.140316][ T4300] ? preempt_schedule+0xc0/0xd0 [ 1367.145296][ T4300] ? gfs2_consist_inode_i+0xf5/0x110 [ 1367.150630][ T4300] gfs2_inode_refresh+0xb3c/0x11a0 [ 1367.155787][ T4300] ? gfs2_inode_metasync+0xf0/0xf0 [ 1367.160943][ T4300] ? gfs2_glock_nq+0xe2e/0x1440 [ 1367.165843][ T4300] gfs2_instantiate+0x162/0x220 [ 1367.170826][ T4300] gfs2_glock_wait+0x1d4/0x2a0 [ 1367.175637][ T4300] do_sync+0x4b8/0xd90 [ 1367.179748][ T4300] ? gfs2_quota_sync+0x411/0x5a0 [ 1367.184725][ T4300] ? bh_get+0x760/0x760 [ 1367.188930][ T4300] ? gfs2_quota_sync+0x318/0x5a0 [ 1367.193902][ T4300] ? gfs2_quota_sync+0x411/0x5a0 [ 1367.198868][ T4300] ? do_raw_spin_unlock+0x121/0x230 [ 1367.204119][ T4300] ? do_raw_spin_unlock+0x121/0x230 [ 1367.209367][ T4300] gfs2_quota_sync+0x411/0x5a0 [ 1367.214175][ T4300] gfs2_sync_fs+0x4c/0xb0 [ 1367.218549][ T4300] sync_filesystem+0xea/0x220 [ 1367.223304][ T4300] generic_shutdown_super+0x6f/0x2b0 [ 1367.228640][ T4300] kill_block_super+0x44/0x90 [ 1367.233357][ T4300] deactivate_locked_super+0x97/0x100 [ 1367.238779][ T4300] cleanup_mnt+0x3d7/0x460 [ 1367.243238][ T4300] task_work_run+0x1d4/0x260 [ 1367.247873][ T4300] ? task_work_cancel+0x220/0x220 [ 1367.252949][ T4300] ? exit_to_user_mode_loop+0x3b/0x110 [ 1367.258467][ T4300] exit_to_user_mode_loop+0xe6/0x110 [ 1367.263791][ T4300] exit_to_user_mode_prepare+0xee/0x180 [ 1367.269379][ T4300] syscall_exit_to_user_mode+0x1a/0x50 [ 1367.274869][ T4300] do_syscall_64+0x61/0xb0 [ 1367.279324][ T4300] ? clear_bhb_loop+0x40/0x90 [ 1367.284140][ T4300] ? clear_bhb_loop+0x40/0x90 [ 1367.288862][ T4300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1367.294795][ T4300] RIP: 0033:0x7f1f6979f397 [ 1367.299297][ T4300] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1367.318975][ T4300] RSP: 002b:00007ffdb56735c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1367.327431][ T4300] RAX: 0000000000000000 RBX: 00007f1f698344bb RCX: 00007f1f6979f397 [ 1367.335438][ T4300] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb5673680 [ 1367.343447][ T4300] RBP: 00007ffdb5673680 R08: 00007ffdb5674680 R09: 00000000ffffffff [ 1367.351449][ T4300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb5674710 [ 1367.359455][ T4300] R13: 00007f1f698344bb R14: 000000000014dc6a R15: 00007ffdb5674750 [ 1367.367480][ T4300] [ 1367.370693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.627611][ T23] ch9200: probe of 7-1:2.31 failed with error -22 [ 1367.639207][ T23] usb 7-1: USB disconnect, device number 14 [ 1367.796744][ T8094] loop7: detected capacity change from 0 to 1024 [ 1367.855891][ T8094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c018, mo2=0082] [ 1367.884015][ T8094] System zones: 0-1, 3-12 [ 1367.948672][ T8094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.990901][ T8102] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1368.051611][ T8102] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1368.069036][ T8094] EXT4-fs error (device loop7): ext4_lookup:1860: comm syz.7.14823: inode #12: comm syz.7.14823: iget: illegal inode # [ 1368.083362][ T8102] overlayfs: missing 'lowerdir' [ 1368.139591][ T8107] xt_CONNSECMARK: invalid mode: 129 [ 1368.241340][T32039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.534095][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14827'. [ 1368.674781][ T8126] loop6: detected capacity change from 0 to 512 [ 1368.719343][ T8126] EXT4-fs: Ignoring removed i_version option [ 1368.787419][ T8126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.878892][ T8126] ext4 filesystem being mounted at /884/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.971433][ T8126] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:335: inode #15: comm syz.6.14834: verity file corrupted; can't find descriptor [ 1369.008813][ T8126] EXT4-fs (loop6): Remounting filesystem read-only [ 1369.022741][ T8126] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 1369.098367][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14840'. [ 1369.144143][T31925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.651869][ T8157] netlink: 'syz.7.14849': attribute type 25 has an invalid length. [ 1369.698261][ T8157] netlink: 'syz.7.14849': attribute type 6 has an invalid length. [ 1369.716317][ T8157] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14849'. [ 1369.938243][ T8169] usb usb7: usbfs: process 8169 (syz.7.14855) did not claim interface 0 before use [ 1370.185656][ T8179] batadv0: entered promiscuous mode [ 1370.209451][ T8179] batadv0: entered allmulticast mode [ 1370.458959][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14864'. [ 1370.507510][ T8188] vlan0: entered promiscuous mode [ 1370.692881][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14870'. [ 1370.716637][ T8199] netlink: 312 bytes leftover after parsing attributes in process `syz.6.14870'. [ 1371.025389][ T8206] loop6: detected capacity change from 0 to 4096 [ 1371.157103][ T8206] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1371.215923][ T8206] ntfs3: loop6: Failed to load $Extend (-22). [ 1371.224975][ T8206] ntfs3: loop6: Failed to initialize $Extend. [ 1371.359933][ T8200] loop7: detected capacity change from 0 to 32768 [ 1373.485980][ T8276] xt_TCPMSS: Only works on TCP SYN packets [ 1373.946035][ T8262] loop6: detected capacity change from 0 to 32768 [ 1374.012001][ T8262] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1374.064492][ T8262] XFS (loop6): Ending clean mount [ 1374.249279][T31925] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1374.940121][ T8320] loop2: detected capacity change from 0 to 512 [ 1374.947525][ T8320] EXT4-fs: Ignoring removed nobh option [ 1375.040836][ T8320] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #3: comm syz.2.14925: corrupted inode contents [ 1375.065331][ T8320] EXT4-fs (loop2): Remounting filesystem read-only [ 1375.096258][ T8320] Quota error (device loop2): write_blk: dquota write failed [ 1375.126703][ T8320] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 1375.166822][ T8320] EXT4-fs (loop2): 1 truncate cleaned up [ 1375.206107][ T8320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1375.286798][ T8320] ext4 filesystem being mounted at /3869/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.443721][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.979906][ T8322] loop7: detected capacity change from 0 to 32768 [ 1376.081793][ T8350] loop2: detected capacity change from 0 to 256 [ 1376.091100][ T8322] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1376.183983][ T8322] XFS (loop7): Ending clean mount [ 1376.414249][T32039] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1376.799503][ T8373] netlink: 'syz.2.14947': attribute type 75 has an invalid length. [ 1376.953563][ T8375] loop8: detected capacity change from 0 to 2048 [ 1377.008132][ T8376] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1377.265725][ T8379] loop2: detected capacity change from 0 to 4096 [ 1377.392448][ T8379] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1377.491074][ T8371] loop6: detected capacity change from 0 to 32768 [ 1377.552787][ T8371] JBD2: Ignoring recovery information on journal [ 1377.728994][ T8371] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1377.887267][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14951'. [ 1378.130880][T31925] ocfs2: Unmounting device (7,6) on (node local) [ 1378.294686][ T8381] loop8: detected capacity change from 0 to 32768 [ 1378.363590][ T8381] (syz.8.14950,8381,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1378.424014][ T8381] (syz.8.14950,8381,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1378.508796][ T8381] (syz.8.14950,8381,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1378.599448][ T8381] JBD2: Ignoring recovery information on journal [ 1378.753119][ T8381] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1378.974123][ T8381] (syz.8.14950,8381,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 1379.018624][ T8381] (syz.8.14950,8381,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 1379.045364][ T8402] loop2: detected capacity change from 0 to 8192 [ 1379.072630][ T8381] (syz.8.14950,8381,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1379.097886][ T8381] (syz.8.14950,8381,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1379.121281][ T8411] loop6: detected capacity change from 0 to 16 [ 1379.127763][ T8381] Quota error (device loop8): find_next_id: Can't read quota tree block 5 [ 1379.129297][ T8402] loop2: p1 < > p2 < > p4 < > [ 1379.158771][ T8402] loop2: partition table partially beyond EOD, truncated [ 1379.171627][ T8381] (syz.8.14950,8381,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 1379.176989][ T8402] loop2: p1 start 83886080 is beyond EOD, truncated [ 1379.191299][ T8411] erofs: (device loop6): mounted with root inode @ nid 36. [ 1379.208954][ T8402] loop2: p2 start 16776960 is beyond EOD, truncated [ 1379.246950][ T8411] erofs: (device loop6): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1379.274486][ T8411] syz.6.14961: attempt to access beyond end of device [ 1379.274486][ T8411] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1379.320688][ T8411] erofs: (device loop6): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1379.352062][ T8411] syz.6.14961: attempt to access beyond end of device [ 1379.352062][ T8411] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1379.393367][ T8411] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 1379.418682][ T4300] ocfs2: Unmounting device (7,8) on (node local) [ 1379.428126][ T28] audit: type=1800 audit(2000000016.400:1013): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.14961" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1379.666989][ T8096] udevd[8096]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1379.968395][ T28] audit: type=1326 audit(2000000016.950:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.015404][ T28] audit: type=1326 audit(2000000016.990:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.095954][ T28] audit: type=1326 audit(2000000016.990:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.165474][ T8412] loop7: detected capacity change from 0 to 32768 [ 1380.174202][ T28] audit: type=1326 audit(2000000016.990:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.198626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.225625][ T8412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.14962 (8412) [ 1380.279448][ T28] audit: type=1326 audit(2000000016.990:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.327232][ T8412] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1380.349969][ T8412] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1380.372030][ T28] audit: type=1326 audit(2000000016.990:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.378175][ T8412] BTRFS info (device loop7): setting nodatasum [ 1380.396328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.418688][ T28] audit: type=1326 audit(2000000016.990:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.482278][ T8412] BTRFS info (device loop7): force zlib compression, level 3 [ 1380.509693][ T28] audit: type=1326 audit(2000000017.030:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.533909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.552181][ T8412] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1380.591243][ T28] audit: type=1326 audit(2000000017.030:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.2.14968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1380.615455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.629155][ T8412] BTRFS info (device loop7): use lzo compression, level 0 [ 1380.636359][ T8412] BTRFS info (device loop7): turning on flush-on-commit [ 1380.665017][ T8412] BTRFS info (device loop7): enabling auto defrag [ 1380.675188][ T8412] BTRFS info (device loop7): max_inline at 4096 [ 1380.690227][ T8412] BTRFS info (device loop7): using free space tree [ 1380.909175][ T8412] BTRFS info (device loop7): enabling ssd optimizations [ 1381.295628][T32039] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1381.380122][ T8465] loop8: detected capacity change from 0 to 8 [ 1381.554920][ T8427] loop6: detected capacity change from 0 to 32768 [ 1381.594688][ T8427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.14969 (8427) [ 1381.703996][ T8427] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1381.770677][ T8427] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1381.809149][ T8427] BTRFS info (device loop6): setting nodatasum [ 1381.864384][ T8427] BTRFS info (device loop6): force zlib compression, level 3 [ 1381.918661][ T8427] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1381.978221][ T8427] BTRFS info (device loop6): use lzo compression, level 0 [ 1381.985896][ T8427] BTRFS info (device loop6): turning on flush-on-commit [ 1382.048214][ T8427] BTRFS info (device loop6): enabling auto defrag [ 1382.054776][ T8427] BTRFS info (device loop6): max_inline at 4096 [ 1382.091352][ T8427] BTRFS info (device loop6): using free space tree [ 1382.341232][ T8427] BTRFS info (device loop6): enabling ssd optimizations [ 1382.476009][ T8503] loop2: detected capacity change from 0 to 16 [ 1382.569802][ T8503] erofs: (device loop2): mounted with root inode @ nid 36. [ 1382.673384][ T8503] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1382.739818][ T8503] syz.2.14990: attempt to access beyond end of device [ 1382.739818][ T8503] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1382.758321][T31925] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1382.794552][ T8503] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1382.804276][ T8503] syz.2.14990: attempt to access beyond end of device [ 1382.804276][ T8503] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1382.819747][ T8503] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 1382.849533][ T28] audit: type=1800 audit(2000000019.810:1023): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14990" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1382.878771][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14992'. [ 1382.893190][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14992'. [ 1383.505138][ T8497] loop8: detected capacity change from 0 to 32768 [ 1383.530957][ T8497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.14988 (8497) [ 1383.576245][ T8497] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1383.615616][ T8497] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1383.655263][ T8497] BTRFS info (device loop8): setting nodatasum [ 1383.678765][ T8497] BTRFS info (device loop8): force zlib compression, level 3 [ 1383.696460][ T8497] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1383.734848][ T8497] BTRFS info (device loop8): use lzo compression, level 0 [ 1383.767667][ T8497] BTRFS info (device loop8): turning on flush-on-commit [ 1383.784120][ T8497] BTRFS info (device loop8): enabling auto defrag [ 1383.801190][ T8497] BTRFS info (device loop8): max_inline at 4096 [ 1383.828162][ T8497] BTRFS info (device loop8): using free space tree [ 1384.098153][ T8497] BTRFS info (device loop8): enabling ssd optimizations [ 1384.246687][ T8553] loop7: detected capacity change from 0 to 128 [ 1384.277379][ T8553] ufs: ufstype=nextstep is supported read-only [ 1384.508264][ T23] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1384.585030][ T4300] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1384.720815][ T23] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.768223][ T23] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1384.805854][ T23] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1384.846545][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.866961][ T23] usb 7-1: Product: syz [ 1384.876904][ T23] usb 7-1: Manufacturer: syz [ 1384.889605][ T23] usb 7-1: SerialNumber: syz [ 1384.899341][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15011'. [ 1385.159492][ T23] usb 7-1: unit 4 not found! [ 1385.224363][ T23] usb 7-1: USB disconnect, device number 15 [ 1385.361594][ T8113] udevd[8113]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.803455][ T8583] loop2: detected capacity change from 0 to 256 [ 1385.822613][ T8585] binder: 8584:8585 ioctl c018620c 200000000240 returned -22 [ 1385.832486][ T8583] exfat: Deprecated parameter 'namecase' [ 1385.930607][ T8588] dummy0: entered allmulticast mode [ 1385.975351][ T8583] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 1386.656906][ T8612] loop7: detected capacity change from 0 to 512 [ 1386.679207][ T8612] EXT4-fs: Ignoring removed nobh option [ 1386.820180][ T8612] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #3: comm syz.7.15035: corrupted inode contents [ 1386.842524][ T8612] EXT4-fs (loop7): Remounting filesystem read-only [ 1386.860644][ T8612] Quota error (device loop7): write_blk: dquota write failed [ 1386.868608][ T8612] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 1386.879177][ T8612] EXT4-fs (loop7): 1 truncate cleaned up [ 1386.886999][ T8612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.899913][ T8612] ext4 filesystem being mounted at /833/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.035356][T32039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.365745][ T8625] binder: 8624:8625 ioctl c018620c 200000000100 returned -22 [ 1387.392395][ T8607] loop2: detected capacity change from 0 to 32768 [ 1387.429981][ T8607] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.15033 (8607) [ 1387.508187][ T8607] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1387.543158][ T8607] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1387.580660][ T8607] BTRFS info (device loop2): force zlib compression, level 3 [ 1387.609197][ T8607] BTRFS info (device loop2): turning on flush-on-commit [ 1387.616326][ T8607] BTRFS info (device loop2): max_inline at 4096 [ 1387.663145][ T8607] BTRFS info (device loop2): using free space tree [ 1387.859153][ T8607] BTRFS info (device loop2): enabling ssd optimizations [ 1387.866190][ T8607] BTRFS info (device loop2): auto enabling async discard [ 1388.093801][ T5775] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1388.918413][ T5282] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1389.141575][ T5282] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.153427][ T5282] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.171352][ T5282] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1389.219168][ T5282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1389.238214][ T5282] usb 9-1: SerialNumber: syz [ 1389.488915][ T5282] usb 9-1: 0:2 : does not exist [ 1389.534641][ T8690] loop6: detected capacity change from 0 to 2048 [ 1389.548380][ T5282] usb 9-1: USB disconnect, device number 15 [ 1389.613698][ T8690] NILFS (loop6): invalid segment: Inconsistency found [ 1389.636277][ T8096] udevd[8096]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1389.660242][ T8690] NILFS (loop6): trying rollback from an earlier position [ 1389.712794][ T8690] NILFS (loop6): recovery complete [ 1389.732550][ T8691] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1389.893116][ T8694] netlink: 'syz.2.15067': attribute type 11 has an invalid length. [ 1389.908215][ T8695] i2c i2c-0: Invalid block write size 252 [ 1390.245069][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15072'. [ 1390.276919][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15072'. [ 1390.307403][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15072'. [ 1390.330357][ T8712] netlink: 'syz.7.15075': attribute type 3 has an invalid length. [ 1390.377416][ T8712] netlink: 'syz.7.15075': attribute type 2 has an invalid length. [ 1390.566234][ T8720] netlink: 'syz.2.15078': attribute type 3 has an invalid length. [ 1391.050311][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15087'. [ 1391.524177][ T8758] loop8: detected capacity change from 0 to 256 [ 1392.033747][ T28] audit: type=1326 audit(2000000029.010:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.088088][ T28] audit: type=1326 audit(2000000029.040:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.171754][ T28] audit: type=1326 audit(2000000029.040:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.256514][ T28] audit: type=1326 audit(2000000029.040:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.322442][ T28] audit: type=1326 audit(2000000029.040:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.418302][ T28] audit: type=1326 audit(2000000029.040:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.535729][ T28] audit: type=1326 audit(2000000029.040:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.635787][ T28] audit: type=1326 audit(2000000029.070:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.734978][ T28] audit: type=1326 audit(2000000029.070:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.8.15106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1392.996936][ T8805] loop2: detected capacity change from 0 to 1024 [ 1393.019727][ T8805] EXT4-fs: inline encryption not supported [ 1393.037633][ T8805] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1393.078436][ T8805] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.15120: lblock 2 mapped to illegal pblock 2 (length 1) [ 1393.139440][ T8805] EXT4-fs (loop2): Remounting filesystem read-only [ 1393.146037][ T8805] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1393.211214][ T8805] EXT4-fs (loop2): 1 orphan inode deleted [ 1393.234925][ T8805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.432550][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.562841][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15128'. [ 1393.574457][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15128'. [ 1393.966548][ T8803] loop6: detected capacity change from 0 to 32768 [ 1393.992798][ T8803] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1394.008506][ T8803] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1394.029815][ T8803] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1394.050819][ T5282] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1394.057665][ T5282] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1394.068881][ T8] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1394.164442][ T5282] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 1394.187435][ T5282] gfs2: fsid=syz:syz.0: jid=0: Done [ 1394.198191][ T8803] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1394.223661][ T8837] loop8: detected capacity change from 0 to 4096 [ 1394.266596][ T8837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.288533][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1394.299233][ T8] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1394.307686][ T8] usb 3-1: config 0 has no interface number 0 [ 1394.315801][ T8] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1394.326154][ T8] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1394.336271][ T8] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1394.346514][ T8] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1394.355677][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.363963][ T8] usb 3-1: Product: syz [ 1394.369312][ T8] usb 3-1: Manufacturer: syz [ 1394.374217][ T8] usb 3-1: SerialNumber: syz [ 1394.381727][ T8] usb 3-1: config 0 descriptor?? [ 1394.390938][ T8] f81534 3-1:0.12: unsupported endpoint max packet size [ 1394.460578][ T4300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.617265][ T8803] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1394.625294][ T8] usb 3-1: USB disconnect, device number 85 [ 1394.846011][T31925] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1394.846011][T31925] inode = 11 2339 [ 1394.846011][T31925] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 1394.869934][T31925] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1394.894605][T31925] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:31925 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 1394.916220][T31925] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1394.924617][T31925] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1394.941389][T31925] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1394.952661][T31925] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1394.961025][T31925] gfs2: fsid=syz:syz.0: File system withdrawn [ 1394.967295][T31925] CPU: 0 PID: 31925 Comm: syz-executor Not tainted syzkaller #0 [ 1394.974976][T31925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1394.985092][T31925] Call Trace: [ 1394.988413][T31925] [ 1394.991396][T31925] dump_stack_lvl+0x18c/0x250 [ 1394.996148][T31925] ? show_regs_print_info+0x20/0x20 [ 1395.001416][T31925] ? load_image+0x420/0x420 [ 1395.005982][T31925] ? kobject_uevent_env+0x368/0x890 [ 1395.011239][T31925] gfs2_withdraw+0xe16/0x1400 [ 1395.015978][T31925] ? gfs2_lm+0x240/0x240 [ 1395.020269][T31925] ? gfs2_consist_inode_i+0xf5/0x110 [ 1395.025591][T31925] gfs2_inode_refresh+0xb3c/0x11a0 [ 1395.030743][T31925] ? gfs2_inode_metasync+0xf0/0xf0 [ 1395.035893][T31925] ? gfs2_glock_nq+0xe2e/0x1440 [ 1395.040789][T31925] gfs2_instantiate+0x162/0x220 [ 1395.045850][T31925] gfs2_glock_wait+0x1d4/0x2a0 [ 1395.050653][T31925] do_sync+0x4b8/0xd90 [ 1395.054750][T31925] ? gfs2_quota_sync+0x411/0x5a0 [ 1395.059717][T31925] ? bh_get+0x760/0x760 [ 1395.063910][T31925] ? gfs2_quota_sync+0x318/0x5a0 [ 1395.068881][T31925] ? gfs2_quota_sync+0x411/0x5a0 [ 1395.073843][T31925] ? do_raw_spin_unlock+0x121/0x230 [ 1395.079081][T31925] ? do_raw_spin_unlock+0x121/0x230 [ 1395.084315][T31925] gfs2_quota_sync+0x411/0x5a0 [ 1395.089114][T31925] gfs2_sync_fs+0x4c/0xb0 [ 1395.093480][T31925] sync_filesystem+0xea/0x220 [ 1395.098190][T31925] generic_shutdown_super+0x6f/0x2b0 [ 1395.103515][T31925] kill_block_super+0x44/0x90 [ 1395.108223][T31925] deactivate_locked_super+0x97/0x100 [ 1395.113621][T31925] cleanup_mnt+0x3d7/0x460 [ 1395.118077][T31925] task_work_run+0x1d4/0x260 [ 1395.122732][T31925] ? task_work_cancel+0x220/0x220 [ 1395.127796][T31925] ? exit_to_user_mode_loop+0x3b/0x110 [ 1395.133298][T31925] exit_to_user_mode_loop+0xe6/0x110 [ 1395.138624][T31925] exit_to_user_mode_prepare+0xee/0x180 [ 1395.144206][T31925] syscall_exit_to_user_mode+0x1a/0x50 [ 1395.149695][T31925] do_syscall_64+0x61/0xb0 [ 1395.154147][T31925] ? clear_bhb_loop+0x40/0x90 [ 1395.158879][T31925] ? clear_bhb_loop+0x40/0x90 [ 1395.163597][T31925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1395.169549][T31925] RIP: 0033:0x7f026d59f397 [ 1395.174013][T31925] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1395.193733][T31925] RSP: 002b:00007ffd47dffed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1395.202266][T31925] RAX: 0000000000000000 RBX: 00007f026d6344bb RCX: 00007f026d59f397 [ 1395.210273][T31925] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd47dfff90 [ 1395.218277][T31925] RBP: 00007ffd47dfff90 R08: 00007ffd47e00f90 R09: 00000000ffffffff [ 1395.226276][T31925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd47e01020 [ 1395.234269][T31925] R13: 00007f026d6344bb R14: 0000000000154a0c R15: 00007ffd47e01060 [ 1395.242282][T31925] [ 1395.869193][ T8863] loop2: detected capacity change from 0 to 4096 [ 1395.898934][ T8863] ntfs: volume version 3.1. [ 1396.164217][ T8852] loop8: detected capacity change from 0 to 32768 [ 1396.188424][ T8852] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 scanned by syz.8.15139 (8852) [ 1396.256950][ T8852] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1396.317926][ T8852] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1396.368225][ T8852] BTRFS info (device loop8): enabling ssd optimizations [ 1396.375263][ T8852] BTRFS info (device loop8): not using ssd optimizations [ 1396.405138][ T8852] BTRFS info (device loop8): turning off barriers [ 1396.421093][ T8852] BTRFS info (device loop8): use no compression [ 1396.438316][ T8852] BTRFS info (device loop8): using free space tree [ 1396.448506][ T8873] xt_cgroup: no path or classid specified [ 1396.727573][ T4300] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1397.026281][ T8096] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop8 scanned by udevd (8096) [ 1397.342903][ T8908] dummy0: entered allmulticast mode [ 1397.656025][ T8869] loop2: detected capacity change from 0 to 32768 [ 1397.709527][ T8869] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1397.755531][ T8869] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1397.808410][ T4793] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1397.886708][ T8869] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1397.937368][ T5282] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1397.960428][ T5282] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1398.007633][ T8921] netlink: 'syz.7.15163': attribute type 2 has an invalid length. [ 1398.010283][ T4793] usb 7-1: Using ep0 maxpacket: 32 [ 1398.045712][ T4793] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1398.061687][ T5282] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms [ 1398.069988][ T4793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.086986][ T4793] usb 7-1: config 0 descriptor?? [ 1398.092545][ T5282] gfs2: fsid=syz:syz.0: jid=0: Done [ 1398.102719][ T8869] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1398.113647][ T4793] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1398.299759][ T8928] loop8: detected capacity change from 0 to 64 [ 1398.521139][ T4793] gspca_sunplus: reg_w_riv err -71 [ 1398.526437][ T4793] sunplus: probe of 7-1:0.0 failed with error -71 [ 1398.569196][ T4793] usb 7-1: USB disconnect, device number 16 [ 1398.611134][ T8869] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1398.901138][ T8941] loop8: detected capacity change from 0 to 64 [ 1398.939203][ T5775] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1398.939203][ T5775] inode = 11 2339 [ 1398.939203][ T5775] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 1398.962635][ T5775] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1398.974270][ T5775] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5775 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 1398.984819][ T5775] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1399.015175][ T5775] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1399.042786][ T5775] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1399.057357][ T5775] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1399.065197][ T5775] gfs2: fsid=syz:syz.0: File system withdrawn [ 1399.083874][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 1399.091491][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1399.101595][ T5775] Call Trace: [ 1399.104918][ T5775] [ 1399.107891][ T5775] dump_stack_lvl+0x18c/0x250 [ 1399.112640][ T5775] ? show_regs_print_info+0x20/0x20 [ 1399.117900][ T5775] ? load_image+0x420/0x420 [ 1399.122466][ T5775] ? kobject_uevent_env+0x368/0x890 [ 1399.127733][ T5775] gfs2_withdraw+0xe16/0x1400 [ 1399.132487][ T5775] ? gfs2_lm+0x240/0x240 [ 1399.136801][ T5775] ? gfs2_consist_inode_i+0xf5/0x110 [ 1399.142149][ T5775] gfs2_inode_refresh+0xb3c/0x11a0 [ 1399.147314][ T5775] ? gfs2_inode_metasync+0xf0/0xf0 [ 1399.152479][ T5775] ? gfs2_glock_nq+0xe2e/0x1440 [ 1399.157394][ T5775] gfs2_instantiate+0x162/0x220 [ 1399.162304][ T5775] gfs2_glock_wait+0x1d4/0x2a0 [ 1399.167139][ T5775] do_sync+0x4b8/0xd90 [ 1399.171263][ T5775] ? gfs2_quota_sync+0x411/0x5a0 [ 1399.176257][ T5775] ? bh_get+0x760/0x760 [ 1399.180460][ T5775] ? gfs2_quota_sync+0x318/0x5a0 [ 1399.185452][ T5775] ? gfs2_quota_sync+0x411/0x5a0 [ 1399.190430][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 1399.195686][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 1399.200944][ T5775] gfs2_quota_sync+0x411/0x5a0 [ 1399.205756][ T5775] gfs2_sync_fs+0x4c/0xb0 [ 1399.210123][ T5775] sync_filesystem+0xea/0x220 [ 1399.214827][ T5775] generic_shutdown_super+0x6f/0x2b0 [ 1399.220145][ T5775] kill_block_super+0x44/0x90 [ 1399.224847][ T5775] deactivate_locked_super+0x97/0x100 [ 1399.230245][ T5775] cleanup_mnt+0x3d7/0x460 [ 1399.234696][ T5775] task_work_run+0x1d4/0x260 [ 1399.239324][ T5775] ? task_work_cancel+0x220/0x220 [ 1399.244386][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 1399.249882][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 1399.255203][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 1399.260784][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 1399.266282][ T5775] do_syscall_64+0x61/0xb0 [ 1399.270769][ T5775] ? clear_bhb_loop+0x40/0x90 [ 1399.275475][ T5775] ? clear_bhb_loop+0x40/0x90 [ 1399.280215][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1399.286138][ T5775] RIP: 0033:0x7f4d8759f397 [ 1399.290580][ T5775] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1399.310208][ T5775] RSP: 002b:00007ffd93ec1098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1399.318658][ T5775] RAX: 0000000000000000 RBX: 00007f4d876344bb RCX: 00007f4d8759f397 [ 1399.326649][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd93ec1150 [ 1399.334639][ T5775] RBP: 00007ffd93ec1150 R08: 00007ffd93ec2150 R09: 00000000ffffffff [ 1399.342631][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd93ec21e0 [ 1399.350633][ T5775] R13: 00007f4d876344bb R14: 0000000000155a00 R15: 00007ffd93ec2220 [ 1399.358643][ T5775] [ 1399.531065][ T8950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1399.798556][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15180'. [ 1400.076138][ T8967] loop2: detected capacity change from 0 to 1024 [ 1400.492187][ T8975] loop7: detected capacity change from 0 to 4096 [ 1400.544164][ T8982] jffs2: Bad value for 'rp_size' [ 1400.652178][ T8980] loop6: detected capacity change from 0 to 8192 [ 1400.685653][ T8980] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1400.699749][ T8980] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 1400.709288][ T8980] REISERFS (device loop6): using ordered data mode [ 1400.717754][ T8980] reiserfs: using flush barriers [ 1400.754678][ T8980] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1400.831882][ T8980] REISERFS (device loop6): checking transaction log (loop6) [ 1401.090042][ T8980] REISERFS (device loop6): Using rupasov hash to sort names [ 1401.090220][ C1] Adjusting tsc more than 11% (6083271 vs 8464875) [ 1401.130915][ T8980] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1401.541873][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15204'. [ 1401.777570][ T9015] loop8: detected capacity change from 0 to 256 [ 1401.810958][ T9015] exfat: Deprecated parameter 'utf8' [ 1401.816634][ T9015] exfat: Deprecated parameter 'namecase' [ 1401.857009][ T9015] exfat: Deprecated parameter 'namecase' [ 1401.863009][ T9015] exfat: Deprecated parameter 'utf8' [ 1401.935092][ T9015] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1401.999910][ T9021] loop7: detected capacity change from 0 to 4096 [ 1402.040850][ T9021] ntfs3: loop7: ino=19, mi_enum_attr [ 1402.052190][ T9021] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1402.094614][ T9023] netlink: 'syz.2.15211': attribute type 19 has an invalid length. [ 1402.431592][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15216'. [ 1402.547973][ T9039] loop8: detected capacity change from 0 to 64 [ 1403.135564][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1403.135582][ T28] audit: type=1326 audit(2000000039.661:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.237462][ T28] audit: type=1326 audit(2000000039.661:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.296489][ T8] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1403.317307][ T28] audit: type=1326 audit(2000000039.694:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.403798][ T28] audit: type=1326 audit(2000000039.694:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.484950][ T28] audit: type=1326 audit(2000000039.694:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.530832][ T28] audit: type=1326 audit(2000000039.694:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.560055][ T28] audit: type=1326 audit(2000000039.694:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.571898][ T8] usb 7-1: config 0 has an invalid interface number: 7 but max is 0 [ 1403.586840][ T28] audit: type=1326 audit(2000000039.694:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.620722][ T28] audit: type=1326 audit(2000000039.694:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.2.15229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d8759e159 code=0x7ffc0000 [ 1403.661484][ T8] usb 7-1: config 0 has no interface number 0 [ 1403.682914][ T8] usb 7-1: config 0 interface 7 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1403.724321][ T8] usb 7-1: config 0 interface 7 has no altsetting 0 [ 1403.747582][ T8] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1403.772918][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.781004][ T8] usb 7-1: Product: syz [ 1403.808301][ T8] usb 7-1: Manufacturer: syz [ 1403.824635][ T8] usb 7-1: SerialNumber: syz [ 1403.859886][ T8] usb 7-1: config 0 descriptor?? [ 1404.131708][ T23] usb 7-1: USB disconnect, device number 17 [ 1404.211663][ T9090] netlink: 'syz.7.15244': attribute type 3 has an invalid length. [ 1404.271284][ T9094] loop8: detected capacity change from 0 to 64 [ 1404.339448][ T9094] syz.8.15246: attempt to access beyond end of device [ 1404.339448][ T9094] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1404.364676][ T9094] Buffer I/O error on dev loop8, logical block 512, async page read [ 1404.382911][ T9094] syz.8.15246: attempt to access beyond end of device [ 1404.382911][ T9094] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1404.422614][ T9094] Buffer I/O error on dev loop8, logical block 56576, async page read [ 1405.297575][ T5846] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1405.362482][ T9120] loop7: detected capacity change from 0 to 4096 [ 1405.375419][ T9120] ext4: Unknown parameter 'noacl' [ 1405.437196][ T8096] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1405.527938][ T5846] usb 9-1: Using ep0 maxpacket: 8 [ 1405.563671][ T5846] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1405.572181][ T5846] usb 9-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 1405.600992][ T5846] usb 9-1: config 0 has no interface number 0 [ 1405.628081][ T5846] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1405.645563][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.661915][ T9130] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15262'. [ 1405.681906][ T5846] usb 9-1: Product: syz [ 1405.688347][ T5846] usb 9-1: Manufacturer: syz [ 1405.693017][ T5846] usb 9-1: SerialNumber: syz [ 1405.705568][ T9130] netlink: 'syz.2.15262': attribute type 1 has an invalid length. [ 1405.722258][ T5846] usb 9-1: config 0 descriptor?? [ 1405.842944][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15264'. [ 1405.891646][ T9134] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1405.978288][ T5846] usb 9-1: USB disconnect, device number 16 [ 1406.946392][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15283'. [ 1407.731958][ T9201] netlink: 'syz.6.15297': attribute type 1 has an invalid length. [ 1408.339977][ T9227] x_tables: duplicate entry at hook 2 [ 1408.496038][ T9232] loop7: detected capacity change from 0 to 256 [ 1408.709665][ T9232] FAT-fs (loop7): Directory bread(block 64) failed [ 1408.720740][ T9232] FAT-fs (loop7): Directory bread(block 65) failed [ 1408.742700][ T9232] FAT-fs (loop7): Directory bread(block 66) failed [ 1408.769052][ T9232] FAT-fs (loop7): Directory bread(block 67) failed [ 1408.789242][ T9232] FAT-fs (loop7): Directory bread(block 68) failed [ 1408.799988][ T9232] FAT-fs (loop7): Directory bread(block 69) failed [ 1408.832414][ T9232] FAT-fs (loop7): Directory bread(block 70) failed [ 1408.850288][ T9232] FAT-fs (loop7): Directory bread(block 71) failed [ 1408.859233][ T9232] FAT-fs (loop7): Directory bread(block 72) failed [ 1408.891043][ T9232] FAT-fs (loop7): Directory bread(block 73) failed [ 1409.000960][ T28] audit: type=1800 audit(2000000044.788:1042): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15312" name="file1" dev="loop7" ino=1048750 res=0 errno=0 [ 1409.598099][ T9244] loop6: detected capacity change from 0 to 32768 [ 1409.648765][ T9244] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1409.756739][ T9274] ip6erspan0: entered allmulticast mode [ 1409.782520][ T9244] XFS (loop6): Ending clean mount [ 1409.875854][ T9281] loop2: detected capacity change from 0 to 256 [ 1409.945367][T31925] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1410.086782][ T9286] tmpfs: Bad value for 'mpol' [ 1410.559904][ T972] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1410.778720][ T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.805061][ T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1410.839234][ T972] usb 3-1: string descriptor 0 read error: -22 [ 1410.867644][ T972] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1410.878393][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.950331][ T972] usb 3-1: 0:1 : does not exist [ 1410.959758][ T972] usb 3-1: 0:2 : does not exist [ 1411.308059][ T9302] loop8: detected capacity change from 0 to 32768 [ 1411.351332][ T9302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.15341 (9302) [ 1411.429818][ T9302] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1411.451408][ T9302] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1411.456570][ T8096] udevd[8096]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.470414][ T972] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 1411.492057][ T9302] BTRFS info (device loop8): setting nodatasum [ 1411.512315][ T972] usb 3-1: USB disconnect, device number 86 [ 1411.524289][ T9302] BTRFS info (device loop8): enabling auto defrag [ 1411.543619][ T9302] BTRFS info (device loop8): disabling tree log [ 1411.561295][ T9302] BTRFS info (device loop8): using free space tree [ 1411.672639][ T9308] loop7: detected capacity change from 0 to 40427 [ 1411.692309][ T9331] comedi comedi4: bad chanlist[0]=0x04004003 chan=16387 range length=2 [ 1411.719662][ T9308] F2FS-fs (loop7): Invalid log blocks per segment (4278190089) [ 1411.727307][ T9308] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1411.752900][ T9308] F2FS-fs (loop7): invalid crc value [ 1411.782720][ T9308] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1411.795263][ T9302] BTRFS info (device loop8): enabling ssd optimizations [ 1411.802299][ T9302] BTRFS info (device loop8): auto enabling async discard [ 1412.073140][ T9308] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 1412.083840][ T9308] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1412.112420][ T4300] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1412.124055][ T9308] F2FS-fs (loop7): Corrupted max_depth of 3: 255 [ 1412.170540][ T9308] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1412.410322][T30135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop8 scanned by udevd (30135) [ 1412.458175][ T9344] SET target dimension over the limit! [ 1412.510758][ T5282] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1412.738557][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 1412.758706][ T5282] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1412.792413][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.800591][ T5282] usb 3-1: Product: syz [ 1412.845300][ T5282] usb 3-1: Manufacturer: syz [ 1412.850527][ T9351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1412.857354][ T5282] usb 3-1: SerialNumber: syz [ 1412.866295][ T5282] r8152-cfgselector 3-1: config 0 descriptor?? [ 1413.129455][ T5282] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1413.153839][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15360'. [ 1413.361599][ T5282] usb 3-1: USB disconnect, device number 87 [ 1413.622994][ T9372] loop6: detected capacity change from 0 to 4096 [ 1413.728767][ T9376] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1415.182697][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15396'. [ 1415.704191][ T9453] loop2: detected capacity change from 0 to 736 [ 1415.903767][ T9461] cgroup: Unexpected value for 'nofavordynmods' [ 1416.874067][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15429'. [ 1416.896927][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15429'. [ 1417.015820][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15430'. [ 1417.025293][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15430'. [ 1417.071748][ T9503] netlink: 'syz.6.15430': attribute type 6 has an invalid length. [ 1417.336680][ T9517] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0) [ 1417.640421][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15443'. [ 1417.658392][ T9523] loop8: detected capacity change from 0 to 8192 [ 1418.194664][ T28] audit: type=1326 audit(2000000053.277:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.8.15450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1418.260626][ T28] audit: type=1326 audit(2000000053.277:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.8.15450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1418.289881][ T28] audit: type=1326 audit(2000000053.277:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.8.15450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1418.349394][ T9550] tipc: Can't bind to reserved service type 1 [ 1418.370933][ T28] audit: type=1326 audit(2000000053.277:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.8.15450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1418.428223][ T28] audit: type=1326 audit(2000000053.277:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.8.15450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6979e159 code=0x7ffc0000 [ 1418.608102][ T9558] loop6: detected capacity change from 0 to 128 [ 1418.653884][ T9558] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1418.659740][ T9562] bond0: left promiscuous mode [ 1418.677263][ T9562] bond_slave_0: left promiscuous mode [ 1418.683328][ T9562] bond_slave_1: left promiscuous mode [ 1418.695732][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.838354][T31925] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1419.369346][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15468'. [ 1419.403567][ T9583] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15468'. [ 1419.669141][ T9569] loop8: detected capacity change from 0 to 32768 [ 1419.765445][ T9569] XFS (loop8): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1420.088625][ T9578] loop2: detected capacity change from 0 to 32768 [ 1420.127156][ T9578] [ 1420.127156][ T9578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1420.127156][ T9578] [ 1420.210752][ T9578] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1420.210752][ T9578] [ 1420.252983][ T9578] ERROR: (device loop2): remounting filesystem as read-only [ 1420.260678][ T9578] ERROR: (device loop2): jfs_unlink: [ 1420.260678][ T9578] [ 1420.276698][ T9569] XFS (loop8): Starting recovery (logdev: internal) [ 1420.296589][ T9586] loop7: detected capacity change from 0 to 32768 [ 1420.303598][ T5775] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1420.303598][ T5775] [ 1420.373644][ T9569] XFS (loop8): Ending recovery (logdev: internal) [ 1420.435615][ T9586] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1420.691127][ T9586] XFS (loop7): Ending clean mount [ 1420.743231][ T4300] XFS (loop8): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1420.860145][T32039] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1421.518082][ T9611] loop6: detected capacity change from 0 to 32768 [ 1421.650260][ T9611] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 1421.650260][ T9611] [ 1421.661516][ T9632] loop2: detected capacity change from 0 to 512 [ 1421.703515][ T9611] ialloc: diAlloc returned -5! [ 1421.791486][ T9632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.841277][ T9632] ext4 filesystem being mounted at /4009/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1421.942508][ T9632] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #15: comm syz.2.15484: corrupted xattr block 33: invalid header [ 1422.073362][ T9643] netlink: 'syz.6.15487': attribute type 2 has an invalid length. [ 1422.104009][ T9643] netlink: 'syz.6.15487': attribute type 4 has an invalid length. [ 1422.123235][ T9643] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15487'. [ 1422.195408][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.772204][ T9668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1423.296044][ T9655] loop2: detected capacity change from 0 to 32768 [ 1423.315892][ T9655] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.15490 (9655) [ 1423.370549][ T9655] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1423.398697][ T9655] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1423.424804][ T9655] BTRFS info (device loop2): enabling ssd optimizations [ 1423.443930][ T9655] BTRFS info (device loop2): not using ssd optimizations [ 1423.500488][ T9655] BTRFS info (device loop2): turning off barriers [ 1423.550436][ T9655] BTRFS info (device loop2): use no compression [ 1423.566194][ T9655] BTRFS info (device loop2): using free space tree [ 1423.607710][ T9691] netlink: 44 bytes leftover after parsing attributes in process `syz.8.15510'. [ 1423.841558][ T9689] loop6: detected capacity change from 0 to 8192 [ 1423.857855][ T9689] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1424.028704][ T5775] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1424.265021][ T8096] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (8096) [ 1424.311145][ T9683] loop7: detected capacity change from 0 to 32768 [ 1424.443891][ T9683] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1424.645247][ T9716] loop6: detected capacity change from 0 to 4096 [ 1424.769004][ T9716] ntfs3: loop6: ino=9, mi_enum_attr [ 1424.774378][ T9716] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1424.847061][ T9716] ntfs3: loop6: ino=9, mi_enum_attr [ 1424.852495][ T9716] ntfs3: loop6: ino=b, mi_enum_attr [ 1424.865333][T32039] ocfs2: Unmounting device (7,7) on (node local) [ 1424.872174][ T9716] ntfs3: loop6: Failed to load $Extend (-22). [ 1424.908469][ T9716] ntfs3: loop6: Failed to initialize $Extend. [ 1425.267430][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.742305][ T9745] netlink: 'syz.8.15527': attribute type 2 has an invalid length. [ 1426.096070][ T9751] loop7: detected capacity change from 0 to 4096 [ 1426.179649][ T9732] loop6: detected capacity change from 0 to 32768 [ 1426.212208][ T9751] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1426.214921][ T9732] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1426.270167][ T9751] ntfs3: loop7: Failed to load $Extend (-22). [ 1426.292149][ T9751] ntfs3: loop7: Failed to initialize $Extend. [ 1426.335305][T30135] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1426.825571][ T9748] loop2: detected capacity change from 0 to 32768 [ 1426.874241][ T9748] [ 1426.874241][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.874241][ T9748] [ 1426.918830][ T9748] [ 1426.918830][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.918830][ T9748] [ 1426.966702][ T9748] [ 1426.966702][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.966702][ T9748] [ 1426.982816][ T9748] [ 1426.982816][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.982816][ T9748] [ 1426.998290][ T9748] [ 1426.998290][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1426.998290][ T9748] [ 1427.014246][ T9748] [ 1427.014246][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.014246][ T9748] [ 1427.028035][ T9748] [ 1427.028035][ T9748] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.028035][ T9748] [ 1427.056491][ T114] [ 1427.056491][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.056491][ T114] [ 1427.119029][ T5775] [ 1427.119029][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.119029][ T5775] [ 1427.146386][ T5775] [ 1427.146386][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1427.146386][ T5775] [ 1427.466803][ T9778] netlink: 144 bytes leftover after parsing attributes in process `syz.6.15541'. [ 1427.718999][ T9786] ieee802154 phy1 wpan1: encryption failed: -90 [ 1428.116408][ T9802] netlink: 'syz.2.15555': attribute type 17 has an invalid length. [ 1428.127769][ T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1428.333890][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1428.345281][ T8] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 1428.359889][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.371474][ T8] usb 7-1: Product: syz [ 1428.375812][ T8] usb 7-1: Manufacturer: syz [ 1428.385652][ T8] usb 7-1: SerialNumber: syz [ 1428.396987][ T8] empeg 7-1:1.0: empeg converter detected [ 1428.621037][ T8] usb 7-1: empeg converter now attached to ttyUSB0 [ 1428.799883][ T23] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1428.837945][ T8] usb 7-1: USB disconnect, device number 18 [ 1428.849664][ T8] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 1428.876189][ T8] empeg 7-1:1.0: device disconnected [ 1428.996008][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1429.003672][ T23] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1429.017850][ T23] usb 3-1: config 4 has no interface number 0 [ 1429.027457][ T23] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.045418][ T23] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.066731][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1429.076382][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.090716][ T23] hub 3-1:4.128: USB hub found [ 1429.312646][ T23] hub 3-1:4.128: 19 ports detected [ 1429.317943][ T23] hub 3-1:4.128: Using single TT (err -22) [ 1429.334445][ T23] hub 3-1:4.128: insufficient power available to use all downstream ports [ 1429.545888][ T23] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 1429.572137][ T23] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 1429.614782][ T23] usb 3-1: USB disconnect, device number 88 [ 1429.717761][ T9830] loop6: detected capacity change from 0 to 8192 [ 1430.349441][ T8] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 1430.546674][ T8] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 146, changing to 4 [ 1430.561116][ T8] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 1430.582092][ T8] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1430.614389][ T8] usb 9-1: string descriptor 0 read error: -22 [ 1430.636960][ T8] usb 9-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 1430.648626][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.682260][ T8] usb 9-1: low speed audio streaming not supported [ 1430.695635][ T8] usb 9-1: unit 2 not found! [ 1430.729954][ T8] usb 9-1: unit 6 not found! [ 1430.746266][ T8] usb 9-1: unit 3 not found! [ 1430.809856][ T8] snd_usb_pod 9-1:1.1: Line 6 BassPODxt Live found [ 1430.898364][ T8] snd_usb_pod 9-1:1.1: set_interface failed [ 1430.913700][ T8] snd_usb_pod 9-1:1.1: Line 6 BassPODxt Live now disconnected [ 1430.932824][ T8] snd_usb_pod: probe of 9-1:1.1 failed with error -71 [ 1430.959074][ T8] snd_usb_pod 9-1:1.2: Line 6 BassPODxt Live found [ 1430.975292][ T8] snd_usb_pod 9-1:1.2: set_interface failed [ 1430.988535][ T8] snd_usb_pod 9-1:1.2: Line 6 BassPODxt Live now disconnected [ 1431.024769][ T8] snd_usb_pod: probe of 9-1:1.2 failed with error -71 [ 1431.070127][ T8] usb 9-1: USB disconnect, device number 17 [ 1431.290627][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15590'. [ 1431.772546][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15599'. [ 1431.948995][ T9902] x_tables: duplicate underflow at hook 2 [ 1431.964327][ T5846] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1432.175522][ T5846] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1432.205997][ T5846] usb 3-1: config 0 has no interface number 0 [ 1432.212197][ T5846] usb 3-1: config 0 interface 3 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1432.240879][ T9913] loop8: detected capacity change from 0 to 164 [ 1432.247325][ T5846] usb 3-1: config 0 interface 3 has no altsetting 0 [ 1432.268317][ T5846] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1432.280151][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.288230][ T5846] usb 3-1: Product: syz [ 1432.293680][ T5846] usb 3-1: Manufacturer: syz [ 1432.306223][ T5846] usb 3-1: SerialNumber: syz [ 1432.311010][ T9913] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1432.336916][ T5846] usb 3-1: config 0 descriptor?? [ 1432.445498][ T9917] loop7: detected capacity change from 0 to 256 [ 1432.599230][ T9917] FAT-fs (loop7): Directory bread(block 64) failed [ 1432.633200][ T9917] FAT-fs (loop7): Directory bread(block 65) failed [ 1432.644227][ T9917] FAT-fs (loop7): Directory bread(block 66) failed [ 1432.659615][ T5846] usb 3-1: USB disconnect, device number 89 [ 1432.675302][ T9917] FAT-fs (loop7): Directory bread(block 67) failed [ 1432.700409][ T9917] FAT-fs (loop7): Directory bread(block 68) failed [ 1432.731908][ T9917] FAT-fs (loop7): Directory bread(block 69) failed [ 1432.756335][ T9917] FAT-fs (loop7): Directory bread(block 70) failed [ 1432.756377][ T9917] FAT-fs (loop7): Directory bread(block 71) failed [ 1432.756490][ T9917] FAT-fs (loop7): Directory bread(block 72) failed [ 1432.756522][ T9917] FAT-fs (loop7): Directory bread(block 73) failed [ 1433.267388][ T9940] loop7: detected capacity change from 0 to 16 [ 1433.293523][ T9940] erofs: (device loop7): z_erofs_load_lz4_config: too large lz4 pclusterblks 1027 [ 1433.479335][ T9946] overlayfs: disabling nfs_export due to verity=require [ 1433.503779][ T9946] overlayfs: conflicting options: userxattr,verity=require [ 1434.121314][ T28] audit: type=1326 audit(2000000067.975:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.6.15637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1434.164883][ T28] audit: type=1326 audit(2000000067.975:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.6.15637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1434.226288][ T9976] openvswitch: netlink: Message has 4 unknown bytes. [ 1434.241860][ T28] audit: type=1326 audit(2000000067.994:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.6.15637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1434.266085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.284338][ T972] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1434.347003][ T28] audit: type=1326 audit(2000000067.994:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.6.15637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1434.402135][ T28] audit: type=1326 audit(2000000067.994:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.6.15637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d59e159 code=0x7ffc0000 [ 1434.426395][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.546833][ T972] usb 9-1: config 0 has an invalid interface number: 9 but max is 0 [ 1434.556849][ T972] usb 9-1: config 0 has no interface number 0 [ 1434.563032][ T972] usb 9-1: config 0 interface 9 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1434.584745][ T972] usb 9-1: config 0 interface 9 has no altsetting 0 [ 1434.595027][ T972] usb 9-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1434.608744][ T972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.620606][ T972] usb 9-1: Product: syz [ 1434.624856][ T972] usb 9-1: Manufacturer: syz [ 1434.629533][ T972] usb 9-1: SerialNumber: syz [ 1434.679327][ T972] usb 9-1: config 0 descriptor?? [ 1434.731300][ T9989] netlink: 'syz.7.15645': attribute type 1 has an invalid length. [ 1434.739567][ T9989] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15645'. [ 1434.942104][ T972] usb 9-1: USB disconnect, device number 18 [ 1435.404566][T10008] loop2: detected capacity change from 0 to 4096 [ 1435.469496][T10008] ntfs: volume version 3.1. [ 1436.090855][T10026] xt_CT: No such helper "netbios-ns" [ 1436.136172][T10010] loop7: detected capacity change from 0 to 32768 [ 1436.618129][T10045] netlink: 5 bytes leftover after parsing attributes in process `syz.6.15672'. [ 1437.049752][T10061] program syz.2.15680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.069519][T10061] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1437.311856][T10072] loop7: detected capacity change from 0 to 8 [ 1437.352920][T10072] SQUASHFS error: Unable to read inode 0x0 [ 1438.310168][T10108] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15703'. [ 1438.344737][T10108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15703'. [ 1438.876494][T10129] [ 1438.878912][T10129] ====================================================== [ 1438.885972][T10129] WARNING: possible circular locking dependency detected [ 1438.893022][T10129] syzkaller #0 Not tainted [ 1438.897474][T10129] ------------------------------------------------------ [ 1438.904523][T10129] syz.8.15713/10129 is trying to acquire lock: [ 1438.910706][T10129] ffff88807e7280b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 1438.919970][T10129] [ 1438.919970][T10129] but task is already holding lock: [ 1438.922595][ T4793] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1438.927346][T10129] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1438.943924][T10129] [ 1438.943924][T10129] which lock already depends on the new lock. [ 1438.943924][T10129] [ 1438.954371][T10129] [ 1438.954371][T10129] the existing dependency chain (in reverse order) is: [ 1438.963436][T10129] [ 1438.963436][T10129] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1438.970883][T10129] __mutex_lock+0x135/0xc80 [ 1438.976074][T10129] rfcomm_security_cfm+0x41/0x550 [ 1438.981676][T10129] hci_auth_complete_evt+0x366/0xba0 [ 1438.987606][T10129] hci_event_packet+0x807/0x1280 [ 1438.993117][T10129] hci_rx_work+0x43a/0xd60 [ 1438.998177][T10129] process_scheduled_works+0xa60/0x1600 [ 1439.004301][T10129] worker_thread+0xa5e/0xfe0 [ 1439.009475][T10129] kthread+0x2fa/0x390 [ 1439.014115][T10129] ret_from_fork+0x48/0x80 [ 1439.019139][T10129] ret_from_fork_asm+0x11/0x20 [ 1439.024491][T10129] [ 1439.024491][T10129] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1439.032277][T10129] __mutex_lock+0x135/0xc80 [ 1439.037349][T10129] hci_remote_features_evt+0x535/0x900 [ 1439.043381][T10129] hci_event_packet+0x807/0x1280 [ 1439.048879][T10129] hci_rx_work+0x43a/0xd60 [ 1439.053838][T10129] process_scheduled_works+0xa60/0x1600 [ 1439.059950][T10129] worker_thread+0xa5e/0xfe0 [ 1439.065082][T10129] kthread+0x2fa/0x390 [ 1439.069708][T10129] ret_from_fork+0x48/0x80 [ 1439.074661][T10129] ret_from_fork_asm+0x11/0x20 [ 1439.080001][T10129] [ 1439.080001][T10129] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1439.087313][T10129] __lock_acquire+0x37ef/0x7d80 [ 1439.092710][T10129] lock_acquire+0x19e/0x420 [ 1439.097767][T10129] __mutex_lock+0x135/0xc80 [ 1439.102804][T10129] l2cap_chan_connect+0xfc/0xe30 [ 1439.108273][T10129] l2cap_sock_connect+0x586/0x760 [ 1439.113837][T10129] kernel_connect+0x142/0x1c0 [ 1439.119157][T10129] rfcomm_dlc_open+0xa1f/0xec0 [ 1439.124455][T10129] rfcomm_sock_connect+0x2ed/0x600 [ 1439.130157][T10129] __sys_connect+0x3da/0x470 [ 1439.135281][T10129] __x64_sys_connect+0x7a/0x90 [ 1439.140590][T10129] do_syscall_64+0x55/0xb0 [ 1439.145580][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1439.149806][ T4793] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1439.152031][T10129] [ 1439.152031][T10129] other info that might help us debug this: [ 1439.152031][T10129] [ 1439.152042][T10129] Chain exists of: [ 1439.152042][T10129] &hdev->lock [ 1439.161573][ T4793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.171319][T10129] --> hci_cb_list_lock --> rfcomm_mutex [ 1439.171319][T10129] [ 1439.171348][T10129] Possible unsafe locking scenario: [ 1439.171348][T10129] [ 1439.171354][T10129] CPU0 CPU1 [ 1439.171360][T10129] ---- ---- [ 1439.171366][T10129] lock(rfcomm_mutex); [ 1439.171380][T10129] lock(hci_cb_list_lock); [ 1439.171403][T10129] lock(rfcomm_mutex); [ 1439.171418][T10129] lock(&hdev->lock); [ 1439.171432][T10129] [ 1439.171432][T10129] *** DEADLOCK *** [ 1439.171432][T10129] [ 1439.171438][T10129] 1 lock held by syz.8.15713/10129: [ 1439.171452][T10129] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1439.171508][T10129] [ 1439.171508][T10129] stack backtrace: [ 1439.171515][T10129] CPU: 0 PID: 10129 Comm: syz.8.15713 Not tainted syzkaller #0 [ 1439.190575][ T4793] usb 7-1: Product: syz [ 1439.194347][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1439.194363][T10129] Call Trace: [ 1439.194372][T10129] [ 1439.194387][T10129] dump_stack_lvl+0x18c/0x250 [ 1439.194422][T10129] ? load_image+0x420/0x420 [ 1439.204403][ T4793] usb 7-1: Manufacturer: syz [ 1439.207270][T10129] ? show_regs_print_info+0x20/0x20 [ 1439.212801][ T4793] usb 7-1: SerialNumber: syz [ 1439.216827][T10129] ? print_circular_bug+0x12b/0x1a0 [ 1439.216860][T10129] check_noncircular+0x2fc/0x400 [ 1439.216893][T10129] ? print_deadlock_bug+0x5d0/0x5d0 [ 1439.274225][ T23] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1439.275109][T10129] ? lockdep_lock+0xf5/0x230 [ 1439.344262][T10129] ? _find_first_zero_bit+0xd6/0x100 [ 1439.349610][T10129] __lock_acquire+0x37ef/0x7d80 [ 1439.354527][T10129] ? verify_lock_unused+0x140/0x140 [ 1439.359780][T10129] ? __lock_acquire+0x1336/0x7d80 [ 1439.364880][T10129] ? verify_lock_unused+0x140/0x140 [ 1439.370148][T10129] lock_acquire+0x19e/0x420 [ 1439.374711][T10129] ? l2cap_chan_connect+0xfc/0xe30 [ 1439.379892][T10129] ? __might_sleep+0xe0/0xe0 [ 1439.384539][T10129] ? read_lock_is_recursive+0x20/0x20 [ 1439.389984][T10129] ? hci_get_route+0x3a5/0x4d0 [ 1439.394823][T10129] ? __lock_acquire+0x7d80/0x7d80 [ 1439.399912][T10129] __mutex_lock+0x135/0xc80 [ 1439.404471][T10129] ? l2cap_chan_connect+0xfc/0xe30 [ 1439.409636][T10129] ? do_raw_read_unlock+0x3d/0x80 [ 1439.414716][T10129] ? _raw_read_unlock+0x28/0x40 [ 1439.419622][T10129] ? hci_get_route+0x3a5/0x4d0 [ 1439.424445][T10129] ? l2cap_chan_connect+0xfc/0xe30 [ 1439.429605][T10129] ? mutex_lock_nested+0x20/0x20 [ 1439.434583][T10129] ? print_unlock_imbalance_bug+0x160/0x160 [ 1439.440540][T10129] ? mark_lock+0x94/0x320 [ 1439.444930][T10129] l2cap_chan_connect+0xfc/0xe30 [ 1439.449906][T10129] ? lock_chain_count+0x20/0x20 [ 1439.454802][T10129] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 1439.460762][T10129] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1439.466180][T10129] ? _local_bh_enable+0xa0/0xa0 [ 1439.471170][T10129] ? bacmp+0xe/0x30 [ 1439.475023][T10129] l2cap_sock_connect+0x586/0x760 [ 1439.480098][T10129] ? l2cap_sock_bind+0x940/0x940 [ 1439.485076][T10129] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1439.491104][T10129] ? __lock_acquire+0x7d80/0x7d80 [ 1439.496190][T10129] ? kernel_connect+0xf2/0x1c0 [ 1439.501007][T10129] kernel_connect+0x142/0x1c0 [ 1439.505732][T10129] ? kernel_accept+0x350/0x350 [ 1439.510565][T10129] ? rfcomm_dlc_open+0x9e3/0xec0 [ 1439.515555][T10129] rfcomm_dlc_open+0xa1f/0xec0 [ 1439.520375][T10129] ? rfcomm_sock_connect+0x2c6/0x600 [ 1439.525717][T10129] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1439.531142][T10129] ? rfcomm_dlc_free+0x50/0x50 [ 1439.535963][T10129] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1439.541382][T10129] ? _local_bh_enable+0xa0/0xa0 [ 1439.546279][T10129] ? do_raw_spin_unlock+0x121/0x230 [ 1439.551538][T10129] rfcomm_sock_connect+0x2ed/0x600 [ 1439.556703][T10129] __sys_connect+0x3da/0x470 [ 1439.561338][T10129] ? __sys_connect_file+0x170/0x170 [ 1439.566627][T10129] __x64_sys_connect+0x7a/0x90 [ 1439.571441][T10129] do_syscall_64+0x55/0xb0 [ 1439.575905][T10129] ? clear_bhb_loop+0x40/0x90 [ 1439.580631][T10129] ? clear_bhb_loop+0x40/0x90 [ 1439.585345][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1439.591299][T10129] RIP: 0033:0x7f1f6979e159 [ 1439.595759][T10129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.615400][T10129] RSP: 002b:00007f1f6a639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1439.623876][T10129] RAX: ffffffffffffffda RBX: 00007f1f69a25fa0 RCX: 00007f1f6979e159 [ 1439.631890][T10129] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004 [ 1439.639905][T10129] RBP: 00007f1f6983506b R08: 0000000000000000 R09: 0000000000000000 [ 1439.647934][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.655953][T10129] R13: 00007f1f69a26038 R14: 00007f1f69a25fa0 R15: 00007ffdb5674358 [ 1439.663972][T10129] [ 1439.667108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.777756][ T5846] usb 7-1: USB disconnect, device number 19 [ 1440.504525][ T23] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1440.511560][ T23] ath9k_htc: Failed to initialize the device [ 1440.520359][ T5846] usb 7-1: ath9k_htc: USB layer deinitialized [ 1441.893892][T27723] Bluetooth: hci2: command 0x0406 tx timeout