last executing test programs: 2m3.677518616s ago: executing program 3 (id=4886): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000009c0)='./file1\x00', 0x10400, &(0x7f0000000a00)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m3.351270665s ago: executing program 3 (id=4887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m2.622427118s ago: executing program 3 (id=4891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)="e9ff4522956583952f", &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 2m2.329040905s ago: executing program 3 (id=4895): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) 2m2.101822768s ago: executing program 3 (id=4898): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') 2m1.938010098s ago: executing program 3 (id=4900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 1m46.818548181s ago: executing program 32 (id=4900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 1m44.43891442s ago: executing program 2 (id=5076): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1m44.109622889s ago: executing program 2 (id=5079): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000120001000000e200000000100000000c"], 0x2c}], 0x1}, 0x0) 1m43.885611842s ago: executing program 2 (id=5081): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) 1m43.259299609s ago: executing program 2 (id=5086): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 1m43.05902033s ago: executing program 2 (id=5088): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000007c0)) 1m42.786465537s ago: executing program 2 (id=5092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) 1m27.677064019s ago: executing program 33 (id=5092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) 2.210610852s ago: executing program 1 (id=6090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'P'}]}], {0x14}}, 0x7c}}, 0x0) 2.153929405s ago: executing program 5 (id=6091): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x804c4700, &(0x7f0000000040)={0x8, 0x5, 0xb1, 0x3f, 0x1a, "3eccd25569e20900"}) 2.123864636s ago: executing program 4 (id=6092): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f0000001180)=ANY=[@ANYBLOB="18050000080000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000095000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.915272219s ago: executing program 1 (id=6095): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x14, 0xf, 0x0, 0x0, 0x0, {0xfffffffe}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 1.754698888s ago: executing program 4 (id=6096): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.753060028s ago: executing program 5 (id=6097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.646259694s ago: executing program 1 (id=6099): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) 1.450008666s ago: executing program 5 (id=6102): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() rt_sigqueueinfo(r0, 0x3a, &(0x7f0000001500)) 1.449573146s ago: executing program 1 (id=6103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$rds(0x15, 0x5, 0x0) fchown(r0, 0x0, 0x0) 1.343502982s ago: executing program 4 (id=6104): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x74, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x840) 1.282825855s ago: executing program 0 (id=6105): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000080)=0x8, 0x4) 1.282347486s ago: executing program 1 (id=6107): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5200447, &(0x7f00000003c0)=ANY=[], 0xfd, 0x635c, &(0x7f0000012780)="$eJzs3U2PHEcZB/Cn521fjB0rhyhYCG0SAwkhfg3GECDJAQ5cOCBfka3NJrJwANkGOZGFN1oJceBDgJA4AuLIiQ+QA1dufAAs2UhATmk0u1XrnmHGY6+907Nbv5+06X66uneq85/emXF3TwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/77g/OVhFx+edpwfGIz0Q3ohOxMqzXImJl7XhevxcRz8d2czwXEf2liCo3PhPxekR8fCzi3v3b68NF5x6xH9/5099/98Mj3//bH/qn//Pnm903pq1369av//2XO3vfXwAAAChRXdd1lT7mn0if7zttdwoAmIv8+l8nebl64erNBeuPWq1Wqw9g3VRPdqdZRMRmc5vhewan4wHggNmMT9ruAi2Sf9F6EXGk7U4AC61quwPsi3v3b69XKd+q+XqwttOerwUZyX+z2r2/Y9p0lvFrTOb1/NqKbjw7pT8rc+rDIsn5d8bzv7zTPkjr7Xf+8zIt/8HOrU/Fyfl3x/Mfc3jy70zMv1Q5/95j5d+VPwAAAAAALLD87//HWz7/u/Tku/JIHnb+d21OfQAAAAAAAACAp+0Jx/+r6zp9+19l/D8AAABYVMPP6kO/OfZg2bTvYhsuv1RFHB1bHyhMullmte1+AAAAAAAAAAAAAEBJejvX8F6qIvoRcXR1ta7r4U/TeP24nnT7g670/YeStf1HHgAAdnx8bOxe/ipiOSIupe/666+urtb18spqvVqvLOX3s4Ol5Xql8bk2T4fLlgaz3w+vxKAe/rLlxnZNsz4vz2of/33DxxrU3dkdm5MWAweA2P4C3zrinlekQ6aun4m23+VwMDj+Dx/HP4+i7ecpAAAAsP/quq6r9HXeJ9I5/07bnQIA5iK//o+fF1Cr1Wq1Wn346qZ6sjvNIiI2m9sM3zMYjh8ADpjN+GTi8l8a4LcI0/KnCL2IeL7tTgALrWq7A+yLe/dvr1cp36r5epDGd8/Xgozkv1ltb5e3nzSdZfwak70/v44+1tpb0Y1np/TnuT334eDK+XfG87+80z5I6+13/vMyLf/hfh5voT9ty/l3x/Mfc3jy70zMv1Q5/14j/96E9Ubz78ofAAAAAAAWWP73/+MLdf53sNfdmelh53/X9u1RAQAAAAAAAGB/3bt/ez3f95rP/39uwnru/zyccv6V/IuU80/3/+9eePPy2Hrdxvzdtx/k/6/7t9d/f/Ofn83TR81/Kc9U6ZlVpWdElR6pSnchP+UvHtnqdwfDR+pXnW4vXfNT99+Nq3EtNuLMyLqddDw8aD870j7saX+7ve7utJ8bae/ttuftz4+099OVTvVKbj8V6/GTuBbvbLcP25Zm7P/yjPZ6RnvOv+v4L1LOv9f4Gea/mtqrsenQ3Y86/3fcN6eTHuetq5//1Zn9352ZtqK7u29Nw/17sYX+bP8/OTKIn93YuH7q1pWbN6+fjTQZWXou0uQpy/n300/O/+WXdtrz3/3m8Xr3o8Fj578otqI3Nf+XGvPD/X1lzn1rQ85/kH5y/u+k9snH/0HOf/rx/2oL/QEAAAAAAAAAAAAAAICHqet6+xbRtyLiQrr/p617MwGA+cqv/3WSl8+r7u51+z+O7kdb/Ver51xXC9afudaf1ovVn4n10oL1p7z6vwvWn4Wrm+rJ3mwWEfHX5jbD9wy/mPTLAIBF9mlE/KPtTtAa+Rcsf9/fcHqy7c4Ac3Xjgw9/dOXatY3rN9ruCQAAAAAAAACwV3n8z7XG+M8n67q+M7beyPivb8fak47/2cszuwOMThmouvv4+/QwW51Bt9MYbvyFmDb+d3937mHjf/dmPF5/RvtgRvvSjPblGe0Tb/RoyPm/0Bjv/GREnBgbfr2E8V/Hx7wvQc7/xcbzeZj/l8bWa+Zf//Yg598Zyf/0zfd/evrGBx++dvX9K+9tvLfx4/Nnz545f+HCxYsXT7979drGmZ3/ttjj/ZXzz2Nfuw60LDn/nLn8y5Lz/0Kq5V+WnP8XUy3/suT88/s9+Zcl558/+8i/LDn/V1It/7Lk/L+cavmXJef/aqrlX5ac/1dSLf+y5PxfS7X8y5LzP5Vq+Zcl53861Y+Y/8p+94v5yPnnM1yO/7Lk/POVDfIvS87/XKrlX5ac//lUy78sOf/XUy3/suT8v5pq+Zcl538h1fIvS87/a6mWf1ly/hdTLf+y5Py/nmr5lyXn/41Uy78sOf83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+ZavmX5cH3/5sxY8ZMnmn7LxMAAAAAAAAAAAAAMG4elxO3vY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh715j5Drr+4Gf2ZvXDkkMhPyd/E3YOCaEZJNdX+ILrYsJ14ZbSQiFXrBd79os9Q2vXQKNakeBEgmjIkTb8KItINTmTYXV8oJWgPICtapaCdoX9A2iQuVFVAUUkJAogmw15zzPszOzszN7Gdsz53w+UvzbnTlzzjNnnnN2frv5zgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3f762U/Usiyr1WrFDZuz7EX1unFic37La67t+AAAAID1+2X+7/M3phsOruBBDcv8823f+srCwsJC9t7hPx397MJCumMiy0Y3ZFl+X3T5+++rNS4TPJGN14Yavh/qsvnhLvePdLl/tMv9Y13u39Dl/vEu9y/ZAUtszGppZdvzLzcXuzS7KRvN79ve5lFP1DYM1fddemxWyx+zMHosm8tOZLPZdNPyxbK1fPmv3V7f1luyuK2hhm1trc+QHz92NI6hFvbx9qZtLa4z+uHrsomf/Pixo3997rlb2tWuu6FpfcU479pWH+fHwi3FWGvZhrRP4jiHGsa5tc1rMtw0zlr+uPrXreN8foXjHF4c5lXV+pqPZ0P519/O99NILWuzn7aG2352R5ZlFxeH3brMkm1lQ9mmpluGFl+f8WJG1tdRn0ovyUZWNU9vX8E8rdeZ7c3ztPWYiK//7eFxI8uMofFl+uHjYw2v+y8W1jJPo/qzXu5YaZ2DvT5W+mUOxnnx7fxJP9l2Dm4Pz/+xO5efg23nTps5mJ53wxzc1m0ODo0N52NOL0Itf8ziHNzRtPxwvqVaXp+9s/McnDp38szU/Ec+eu/cySPHZ4/Pntq1Y8f0rj179u3bN3Vs7sTsdPHvGvd2/9uUDaVjYFvYd/EYeFXLso1TdeELY0vOv2s9Dsc7HIebW5bt9XE40vrkalfngFw6p4tj4931nT5+aShb5hjLX5+7138cpufdcByONByHbX+mtDkOR1ZwHNaXOXP3yt6zjDT8124My/8sWN8c3NwwB1vfj7TOwV6/H+mXOTge5sV3717+Z8HWMN4nJ1f7fmR4yRxMTzece+q3pPf74/vy0m5e3lq/47qx7Pz87Nn7Hj1y7tzZHVkoV8VLG+ZK63zd1PCcsiXzdWjV8/Xg3G1P3trm9s1hX43fW/9nfNnXqr7M7vs6v1b5T7f2+7Pp1p1ZKD3Wg/25ULiwov3Z7qd5fX+OZdnnvvn4Q19/7HOvX3Z/1vvNj02t/7146ksbzr+jy5x/Y9//QrG9tKonhkdHiuN3OO2d0abzcfNLNZKfu2r5tp+fWtn5eDT8d7XPxzd1OB9vaVm21+fj0dYnF8/HtW6/7Vif1tdzPMyTE9Odz8f1ZbbsXO2cHOl4Pr4j1FrY/68OnULqixrmznLzNm1rZGQ0PK+RuIXmebqrafnR0JvVt/X0zrXN07vuKNY1nJ7doqs1Tydalu31PE2/+1punta6/fZtbVpfz/EwL27a1Xme1pd5Zvf6z50b45cN586xbnNwdHisPubRNAnz8322sDHOwfuyo9np7EQ2k987ls+nWr6tyftXNgfHwn9X+1y5pcMcvKtl2V7PwfRzbLm5VxtZ+uR7oPX1HA/z4qn7O8/B+jJv2Nvb9653hVvSMg3vXVt/v7bc77xubdlNV2qujIRxfnNv59/N1pc5sW+1fWbn/XRPuOW6Nvup9fhd7piaya7OftoSxvncvuX3U3089WU+u3+F8+lglmUXPvRA/vve8PeVvzv/na80/d2l3d90LnzogR9df+yfVjN+AAbfC0XZVPysa/jL1Er+/g8AAAAMhNj3D4Wa6P8BAACgNGLfH/+v8ET/DwAAAKUR+/6RUJOK9P9b3vDc3AsXspTMDx/2kDJzaTc8WCwXM67T4fuJhUX12x/40uxP//HCyrY9lGXZLx78w7bLb3kwjqswEcZ5+Y3Nty/xlXtXtO3Dj1xI223Mr38+rD8+n5VOg3YR3Oksy75246fy7Uy871Jen3nwcF4fuvjkE/Vlnt9ffB8f/+xLi+X/IoR/Dx470vT4Z8N++EGo029tvz/i47586dVb975ncXvxcbVtN+RP+6n3F+uNn5Pz6SeK5eN+Xm78X//k01+uL//oK9uP/8JQ+/E/Hdb7pVD/9+XF8o2vQf37+LiPh/HH7cXH3ffFb7Qd/+VPFMufeVOx3OFQ4/bvCt9vf9Nzc43769Hakabnlb25WC5uf/o7f5LfH9cX1986/vFDl5r2R+v8eOY/ivVMtSwfb4/bif6hZfv19TTOz7j9p//4cNN+7rb9yw89+/L6elu3f0/Lcmc+dHe+/cX1NX9i019+/FNttxfHc/BvzzQ9n4PvCsdx2P5T7w/zMdz/88vF+lo/XeHwu5rPP3H5z2++0PR8orf8pNj+5dcez+uG8Y2brnvR9TdcfEV932XZtzcU6+u2/eN/dbpp/F+4udgf8f6Y0W/d/nLi9s9+ePLU6fnzczNprz52Y/7ZOW8rxhPHe2M4t7Z+f+j0uQ/Mnp2YnpjOsonyfoTemn0x1B8V5WLnpReWnEHvfiS8nrf++dc23fnvn4y3/+e7i9svvbX4ufWqsNynw+2bw+u3uu0v9dTtN+fHd+2ZMMKFpZ8XvB5bt//PvhUtGJ5/6/uCON/PvOwD+X6o35f/3IjH9TrH/72ZYj1fDft1IXwy87abF7fXuHz8bIRLDxfH+7r3XzjNxdf1b8Lr/fYfFOuP44rP93vhfcw3tjSf7+L8+OqFodb155/icTGcT7KLxf1xqZ+H/X3p+ZvbDi9+Dkl28Zb8+8+k9dyyqqe5nPmPzE+dmDt1/tGpc7Pz56bmP/LRQydPnz917lD+WZ6HPtjt8Yvnp035+Wlmds/uLD9bnS7KFXatx3/mkaMze6fvnJk9duT8sXOPnJk9e/zo/PzR2Zn5O48cOzb74W6Pn5s5sGPn/l17d04en5s5sG///l37J+dOna4PoxhUF3umf3/y1NlD+UPmD+zev+P++3dPT548PTN7YO/09OT5bo/PfzZN1h/9B5NnZ08cOTd3cnZyfu6jswd27N+zZ2fDpwH+tO3jT545Nj8xdfb8qanz87Nnp4rnMnEuv7n+s6/b9imn+f8q3s+2qhUfxJe985496fNZ6770+LKrKhZp+QDR58Jn0fzLi8/sW8n3se8fDTWpSP8PAAAAVRD7/rFQE/0/AAAAlEbs+zeEmuj/AQAAoDRi3z8ealKR/r90+f8tF1a0ffn/6uX/N2by//L/If//cL/l/4vzhfx/b6w3fy//H8j/X5P8/4L8/0CPvzr5//bk/2mn3/L/se/fmGWV7P8BAACgCmLfvynURP8PAAAApRH7/utCTfT/AAAAUBqx739RqElF+n/5f/n/quT/Xf9f/l/+vxquRP4/vjuQ/5f/r0L+P6tW/v9iL8cv/y//z1L9lv+Pff/1oSYV6f8BAACgCmLff0Ooif4fAAAASiP2/TeGmuj/AQAAoDRi37851KQi/X+l8v9nr09fyv/L/zfuL/l/+f9225f/H0yu/9+Z/H8X8v+u/y//L/9PT/U0/z+y/vx/7PtfHGpSkf4fAAAAqiD2/S8JNdH/AwAAQP8ZWdvDYt//0lCTJf3/GjcAAAAAXHOx778pawmCV+Tv/5XK/zeQ/x+k/P+GdJ/8v/x/1pf5/+FM/r9/yP93Jv/fhfx/hfP/8aeB/L/8P73U0/x/tv78f973Z+PZy0JNKtL/AwAAQBXEvv/mUBP9PwAAAJRG7Pv/X6iJ/h8AAABKI/b9W0JNKtL/y//L//d//t/1/+X/+z3/7/r//UT+vzP5/y7k/yuc/3f9f/l/roR+y//Hvv+WUJOK9P8AAABQBbHvvzXURP8PAAAApRH7/v8faqL/BwAAgNKIff/WUJOK9P/y/32e/4/JUfl/+X/5f/l/+f8Vkf/vTP6/C/l/+X/5f/l/eqrf8v+x7395qElF+n8AAACogtj33xZqov8HAACA0oh9/ytCTfT/AAAAUBqx758INalI/y//3+f5/yIHP3btr/9fvPLy//L/jeT/C/L//UX+v7Py5v8fl//vgWudnx/08S/m/xcuyP/L/1Pot/x/7PtvDzWpSP8PAAAAVRD7/m2hJvp/AAAAKI3Y998RaqL/BwAAgNKIff/2UJOK9P/y/wOR/8+uff7f9f/l/zP5f/n/gSD/31l58/+u/98L1zo/P+jjd/1/+X+W6rf8f+z7XxlqUpH+HwAAAKog9v13hpro/wEAAKA0Yt//qlAT/T8AAACURuz77wo1qUj/L/8v/y//L/8v/99++/L/g0n+vzP5/y7k/+X/5f/l/+mpfsv/x77/1aEmFen/AQAAoApi3393qEmH/n/jFR8VAAAA0Eux778n1MTf/wEAAKA0Yt8/GWpSkf5f/l/+X/5f/l/+f/E1lP8ffPL/ncn/dyH/L/8v/y//T0/1W/4/9v33hppUpP8HAACAKoh9/32hJvp/AAAAKI3Y90+Fmuj/AQAAoDRi3z8dalKR/l/+X/5f/l/+f1X5/1csrrdM+f9225f/H0zy/53J/3ch/y//f83z/6Py/5RKv+X/Y9+/I9SkIv0/AAAAVEHs+3eGmuj/AQAAoDRi378r1ET/DwAAAKUR+/7doSYV6f/l/+X/5f/l/13/v/325f8Hk/x/Z73P/8enKP8v/y//7/r/8v8s1W/5/9j33x9qUpH+HwAAAKog9v17Qk30/wAAAFAase/fG2qi/wcAAIDSiH3/vlCTivT/8v/y//L/8v/y/+23L/8/mOT/O3P9/y42p3/l/+X/5f/l/1mTh/+o8bu15f/H2q24J/n/2PfvDzWpSP8PAAAAVRD7/teEmuj/AQAAoDRi3/8ref3XxTv0/wAAAFAaRd8/nv1qqElF+n/5/6bsef3pyv/L/8v/y//n5P8Hk/x/Z/L/Xbj+f9nz/xuv5Pjl/+X/WWrZ/H9ovdvn/9vqSf4/9v0HQk0q0v8DAABAFcS+/9dCTfT/AAAAUBqx739tqIn+HwAAAEoj9v0HQ00q0v/L/7v+v/z/6vL/9Q3L/xfk/wu9yv/HK93K/6+P/H9n8v9dyP+XPf9/Rccv/y//z1Jru/5/Wz3J/8e+/3WhJhXp/wEAAKAKYt//QKiJ/h8AAABKI/b9rw810f8DAABAacS+/w2hJhXp/+X/5f/l/13/X/6//fZd/38wyf93Jv/fhfy//L/8v/w/PdVv+f/Y978x1KQi/T8AAABUQez73xRqsrr+f6S3owIAAAB6Kfb9bw418fd/AAAAKI3Y978l1KSc/f+SmLr8v/y//L/8v/x/++3L/w8m+f/O5P+7kP+X/5f/l/+np/ot/x/7/l8PNSln/w8AAADlML66xWPf/2Drg/X/AAAAUBqx739rqIn+HwAAAEoj9v1vCzWpSP8v/y//L/8v/y//33778v+DSf6/swHL///yhnC7/H9B/r+/x7/a/H/rBcSuSP7/+8vl/xc2tD5+jfn/0fiF/D/t9Fv+P/b9bw81qUj/DwAAAFUQ+/53hJro/wEAAKA0Yt//zlAT/T8AAACURuz7fyPUpCL9v/x/fRyL6WX5/7Lm/4fk//sv///3380y+X/5/56T/+9swPL/rv/fQv6/v8fv+v/y/yzVb/n/2Pe/K9SkIv0/AAAAVEHs+x8KNdH/AwAAQGnEvv/hUBP9PwAAAJRG7PvfHWpSkf5f/t/1/6uR/3f9/6z/8v+u/9+wV+X/e0f+vzP5/y7k/+X/+y3//9/y/wy2fsv/x77/kVCTivT/AAAAUAWx739PqIn+HwAAAEoj9v2/GWqi/wcAAIDSiH3/e0NNKtL/y/8PSv5/YkDz/4/L/1/B/P9tNxTLyf/L/7NI/r8z+f8u5P/l//st/+/6/wy4fsv/x77/faEmK+//x1e8JAAAAHBNxL7/t0JNKvL3fwAAAKiC2Pf/dqiJ/h8AAABKI/b9vxNqUpH+X/5/UPL/rv+fyf+7/n/L85H/l/9v5+rl/+OZR/5f/l/+P5L/l/+X/6dVv+X/Y9//u6EmFen/AQAAoApi3//+UBP9PwAAAAyEdv9PdqvY9x8KNdH/AwAAQGnEvv9wqElF+n/5/xXk/zd0X5/8f/P45f/bz49V5f//bNu/ffdb7zi8Q/5f/l/+f1Wu6vX/6we/6//L/8v/J/L/8v/y/7Tqt/x/7PuPhJpUpP8HAACAKoh9/++Fmuj/AQAAoDRi33801ET/DwAAAKUR+/6ZUJOK9P/y/67/L//fp/n/Ab7+f9wf8v/Nepb/jydd+f+2ivx9mkVXNv//nsWcuPz/avP/Y21vlf+X/x/k8cv/y/+zVL/l/2PfPxtqUpH+HwAAAKog9P1Dx4q6eIf+HwAAAEoj9v3HQ030/wAAAFAase//QKhJRfp/+f+ByP9/Jssy+X/5/4HJ/1fh+v+1Edf/71cpf/+z/ECR/2/RP/n/9uT/5f8Hefzy//L/LNVv+f/Y98+FmlSk/wcAAIAqiH3/B0NN9P8AAADwf+zdR5Bm9VrH8dP3zjg9dVlYpVUu3Fjl0qVLFrpW9y7cuLHKMmBARUVlwJxQFMyKYMKAAQQRFcwBTChmUDFnEcMgSI1F9/M8nU6ft8Pbb5/z/38+i3nubaZ5X25N9eVHz5fTjNz9nxy32P8AAADQjNz9nxK3dLL/9f+L6P8PPP8/f67+X/+v/+/0+f/6/0nn7e/1/0H/33f/f1P/r//X/7Mec+v/c/d/atzSyf4HAACAHuTuvyNusf8BAACgGbn7Py1usf8BAACgGbn7Pz1u6WT/6//P0//vVcqb7P89//+E/f9H6P+Pe/0F9P/X9//59P/6/9PQ/09ru//f2tL/n89l9/NLf//6f/0/R82t/8/d/xlxSyf7HwAAAHqQu/8z4xb7HwAAAJqRu//OuMX+BwAAgGbk7v+suKWT/X+o/98a+uz/M+NdxPP/9f+e/99B/3+A/l//fxqb7f/vffcrn/5/Nv2/5/+f12X380t//yfs/68d9/n6f1o0t/4/d/9nxy2d7H8AAADoQe7+z4lb7H8AAABoRu7+u+IW+x8AAACakbv/c+OWTvb/+p7/v/u47oX2/0X/r//f+YD+X/+v/18sz/+f1lP/f+fL77vjjac/+JnTvL7+X//v+f/6f9Zrbv1/7v7Pi1s62f8AAADQg9z9nx+32P8AAADQjNz9d8ct9j8AAAA0I3f/F8Qtnez/9fX/i37+f9H/6/93PqD/1//r/xdL/z+tp/7/LK+v/9f/6//1/6zX3Pr/3P1fGLd0sv8BAACgB7n7vyhusf8BAACgGbn774lb7H8AAABoRu7+G3FLJ/tf/3/x/f87+n/9f1z9v/5f/3/x9P/T9P8r6P/1//p//T9rNbf+P3f/vXFLJ/sfAAAAepC7/764xf4HAACAZuTu/+K4xf4HAACAZuTu/5K4pZP9r//3/H/9v/5f/z/++vr/ZdL/T9P/r6D/P28/f1X/r//X/7PfKfv/tya+bK+l/8/d/6VxSyf7HwAAAHqQu//L4hb7HwAAAJqRu//L4xb7HwAAAJqRu/8r4pZO9r/+X/+v/9f/n7n/P/pLb4f+f5z+fzP0/9Nm0/9vXRn9sP5/8f2/5//r//X/HDC35//n7v/KuKWT/Q8AAAA9yN3/VXHLxP4/9T/MBwAAAC5V7v6vjlt8/x8AAAAWL6uz3P1fE7d0sv/1//p//b/+3/P/x19/qv9/Zt/70//Pi/5/2mz6/2Po//X/S37/+n/9P0fNrf/P3f+1cUsn+x8AAAB6kLv//rjF/gcAAIBm5O7/urjF/gcAAIBm5O7/+rilk/0/3v/v/XH9/8no/w++f/3/+K+PdfX/+WfU/0/2/x/p+f990v9P23z/f03/f/DPf8b+f/crjv5/3u+/8f7/+qrP1/8zZm79f+7+B+KWTvY/AAAA9CB3/zfELfY/AAAANCN3/zfGLfY/AAAALNqHf+BeC5a7/8Htocv97/n/+n/9//L6f8//33WZz/8fNt7/X9H/n5D+f5rn/68w2/5/l/5/3u+/8f7f8/85k7n1/w/ufNb28FDc0sn+BwAAgB489Oaws/u/aRjsfwAAAFii/b934PBvKA25+785brH/AQAAoBm5+78lbulk/+v/9f/6f/2//n/89efV/3v+/0ktuv+/svcf9f/6/zEL7f+vNNb/P3zc58+h/79H/8/MHOj/n9v7+GX1/7n7vzVu6WT/AwAAQA9y939b3GL/AwAAQDNy93973GL/AwAAQDNy939H3NLJ/r/w/v/68a+t/9f/6//1//p//f+6Lbr/9/x//X+b/b/n/3v+v/6/Y3v9/8Gvh5fV/+fu/864pZP9DwAAAD3I3f9dcYv9DwAAAM3I3f9w3GL/AwAAQDNy93933NLJ/l/U8/+v6P/1//p//b/+X/8/Tf8/Tf+/gv5f/6//1/+zVgee/7/PZfX/ufsfiVs62f8AAADQg9z9j8Yt9j8AAAA0I3f/98Qt9j8AAAA0I3f/98Ytnez/RfX/C3z+f35c/6//H/T/+n/9/0Y01v9fP/Enbo39P9FRx/T/L37ijY8++BH9v/5f/6//1/+zBrPo/2/t/d1l7v7vi1s62f8AAADQg9z93x+32P8AAADQjNz9PxC32P8AAADQjNz9j8Utp9z/77/Wd7U5+n/P/9f/6//1/+Ovr/9fpsb6f8//1/8foP+f9/vX/+v/OepC+v+be1/cT/v8/9z9Pxi3+P4/AAAANCN3/w/FLfY/AAAANCN3/w/HLfY/AAAANCN3/4/ELZ3sf/2//l//r//X/4+//ln7/+1hnP5/M/T/0/T/K+j/9f/6f/0/a7W2/v9q3EP/4r3T9v/v7v63PyA/u7/9DwAAAD14fOfH7eFH4xb7HwAAAJqw9zuytocfi1vsfwAAAGhG7v4fj1s62f/6f/2//l//v5T+//Bfz1z7/+Po/zdD/z9N/z8MwxMTb2Cs/791Tf+v/9f/6/85owt5/v8+p+3/c/f/RNzSyf4HAACAHuTufyJusf8BAACgGbn7n4xb7H8AAABoRu7+n4xbOtn/+n/9v/5f/7+U/n8pz/8/jv5/M/T/0/T/K3j+/3n7+Vv6f/2//p/95tb/5+5/Km7pZP8DAABAD3L3Px232P8AAADQjNz9PxW32P8AAADQjNz9z8Qtnex//b/+X/+v/7+Q/v+G/v8w/f9mXFz/P+j/9f/6/xU8/1//r//nsE31/2/F1/tV/X/u/p+OWzrZ/wAAANCD3P3Pxi32PwAAADQjd//PxC32PwAAADQjd//Pxi2d7H/9v/5f/6//9/z/8dfX/y+T5/9P0/+vsIz+/5r+f57vX/+v/+eoTfX/x/X+h/977v6fi1s62f8AAADQg9z9z8Ut9j8AAAA0I3f/83GL/Q8AAADNyN3/83FLJ/tf/6//P9j/D4P+X/+v/9+1gf5/e9D/r53+f5r+f4Vl9P+e/3/a9/+eoaH+//qxn6//Z47m1v/n7v+FuKWT/Q8AAAA9yN3/i3GL/Q8AAADNyN3/S3GL/Q8AAADNyN3/y3FLS/v/nePTt+X3/9cOfaL+fxiGV+7y/H/9/8Tr6/9n0//X/6r6//XR/0/T/6+g/2+z//f8f/0/l2Zu/X/u/l+JW1ra/wAAANC53P2/GrfY/wAAANCM3P2/FrfY/wAAANCM3P2/Hrd0sv8P9P8398Kz/OPz7/8Pf6L+fzjX8//1/zsf0P/r//X/i3Xe/v6R7fj/NP2//l//P9rPbx3z9z2D/l//r/9nxNz6/9z9vxG3dLL/AQAAoAe5+1+IW+x/AAAAaEbu/hfjFvsfAAAAmpG7/zfjlk72//Kf/3/4E/X/g/6/i/5/W/+v/9f/j5rL8/9vv/2jXtL/6/9b7P+n6P/1//p/Dptb/5+7/7filk72PwAAAPQgd/9vxy32PwAAADQjd//vxC32PwAAADQjd//vxi2d7P+j/f/VYbdQ3TXW/0ejpv/fR/9/8P3r/8d/fXj+v/5f/3/x5tL/e/7/2d7/ifv/u3c/rv/X/8/p/Z+q//+Qo5+v/6dFc+v/c/e/FLd0sv8BAACgB7n7fy9usf8BAACgGbn7fz9usf8BAACgGbn7X45bOtn/nv+v/9f/6//1/+Ovr/9fpjX3//U3Bvr/XbPp/4P+f4b9f35V1f8v9/n/79X/sz5z6/9z9/9B3LIz/D70tjP+ZQIAAAAzkrv/D+OWTr7/DwAAAD3I3f9HcYv9DwAAAM3I3f/HcUsn+1//r//X/+v/9f/jr6//X6YlPf//9ZGP6f/1/xvq/7fHPnjZ/fx5Xfb7b6b/9/x/1mhu/X/u/j+JWzrZ/wAAANC2N3d+zN3/p3GL/Q8AAADNyN3/Z3GL/Q8AAADNyN3/StzSyf7X/+v/2+//P17/f+j19f/6/5Ytqf8fs47+/+rEH9P/r9BP/z/qsvv5pb//6v9vXdP/6/8Jc+v/c/e/Grd0sv8BAACgB7n7/zxusf8BAACgGbn7/yJusf8BAACgGbn7/zJu6WT/6//76v+3hpn2//tiVc//3/s8/f+u7P+3D/316P/1/2OW0/8/emXso57/r//X/y/3/Xv+v/6fo+bW/+fuf23rSpf7HwAAAJbqYz/sk1496c99befH7eGv4hb7HwAAAJqRu/+v4xb7HwAAAJqRu/9v4pZO9r/+v6/+v8/n/+v/W+n/Pf9f/38Sy+n/x+n/9f/6/+W+f/2//p+j5tb/5+7/27hl3/Ab/Rf0AAAAAJfn/U7303P3/13c0sn3/wEAAKAHufv/Pm45sv9vnfB3tQMAAABzk7v/H+KWTr7/r/+fef8/XFD/Hz9P/79L/99d/3/fe/T/zdL/Tztn/39rS/+v/5+g/9f/6/85bG79f+7+Z58autz/AAAA0KgD/0ThH3d+3B7+KW6x/wEAAKAZufv/OW6x/wEAAKAZufv/JW7pZP/r/2fe/5/p+f/X6z95/n/n/f/926Ovr//3/P+W6f+nef7/Cvp//b/+X//PWp2i/98ZpBP9/207P56z/8/d/69xSyf7HwAAAHqQu//f4hb7HwAAAJqRu//f4xb7HwAAAJqRu//1uKWT/a//v4T+/4Frw3Ch/f8Jnv+v/++j/z/m9dvp/z/ofTde+LhPePLxlvv/3Z/zMY/p/09qk/1//lrQ/+v/9f+79P/6f/0/h83t+f+5+/8jbulk/wMAAEAPcve/EbfY/wAAANCM3P3/Gbe8u/+fv6x3BQAAAKxT7v7/ils6+f6//r/F5/8vs//P/60vof+/sbz+P5vi3vt/z//X/x/l+f/T9P8r6P/1//p//T9rNbf+P3f/f8ctnex/AAAA6EHu/v+JW3L/b536H90DAAAAM5O7/2bc4vv/AAAA0Izc/W/GLZ3sf/2//n8u/X/y/P+9z/P8/136f/3/aej/p+n/V9D/6//X3P+/V/+v/+/c3Pr/3P3/G7d0sv8BAACgB7n734pb7H8AAABoRu7+t+MW+x8AAACakbv//+KWTva//l//r//X/+v/x19f/79M+v9p+v8V9P/6f8//1/+zVnPr/3P3/38AAAD//2XeZSg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x2000}) 1.282118036s ago: executing program 6 (id=6108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) 1.281926176s ago: executing program 5 (id=6109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0) 1.164997492s ago: executing program 4 (id=6110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000180)='./file0/file0\x00', 0x204018, &(0x7f00000022c0)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6", @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYBLOB="fb2c368f64ca4d24a7344934eff3af72ab00edd0a4c5ff3b0f2020bfb71eda877a6cb2da1b4f5c54f5f8896dd2694f0cb4dd3e8306c1de577ac5cac52db6d1a5922ab8dd959bcb7430f46e1a1b0926bbd100851ec7cd7e7848e8cbd19c1e3e31b3119cadfe7387a73ab5737a84a028d1e4442367258bcf97d7cdc63ae27540577ff7e48956b18858d2841718955e0948a9569848963de792d5a9670bb66e5b50b8f7c5da71a58ca11f29294fec34f680ac3b7bfcd767a0ab4a23178fc44da9e2dfdd73a2c9ffcab8ce4f23ba9dae0d5cfca2b8fbe37d1d47f5b3d132f98bebf1df9fafcc05ee22ad46a7cb86d191a0bdc73c92010d03ea441a35fa1811ab306024c3790c2e30eacb67da50af7a64a9faf4ba71d416ee5878a98e83e4ef9b930f8a2e74e221359144ad8652db5a3da6e500f204df7fefc9ad2efff8063054af9fd5fe5c18eca78aad0bc8ba70a652eac6eea295703692d268dab90dc834f4441c10db0cb2e00912ce260a4b8a4a1ce55de6818e01d59b4e24cb1cf29a5ee8d26d1b6599faaa9f20867330a2d637ac6e6075d22e5ba76997502a00ac5a21c711db4d61b76dbed1db693e9007d94e7dfee1bea31a751550d3f6528df05acb6f925c5b70010928f8937299c062dd614ebae897d77d4a24ee091ae4ae96034ae67994e1383f56d2cefdf914beb1db57fddca1182daf308c8fc97b451bedd528d7390187c1142e79d4462fbfcf68f17ecc1b31237663fcf57e5686ebcc1125557c6def86ea25642c83c18fcf1edc456417f15c45e9f3267ea663e8b21fecb96c79cdacd96d2461a56bb77df15e89ec46a7ea5c7fd4acce6a3583fd5b551309193c39e6f22432f93a84b7799c23edfdbce366f01dfeacb077df4422ee46c903a824a35fca985caa5031ef431d548ac403aef4874b59e8a0bc89f79a4b3ef5cf8c0951008a2eafc4f673dec744981ac7644783e2dbd3807f3b3c4a24520a61a3f88dafb1f35a5119e99cf70eacc50775faf44076a07fd82794f8906b3f5ffb4452a1a639df7b61d3fbad46db9efbc62c61532f22ea7a81d593b961d3a27cca674ab24d9598dd0821d51930e8a56e6bd90a1f57e63c03bdeb9619809152d75e2d3f27aefa0f96192dfbbf3624d60e86afd363d969923fe509e149cab742a051d5d14f08d0fbf5b5f814a154aa907ea5bd4b0d3695e96c6e32658fb0d2b3ec779b9876080f1ff8e0dafe5501ebd7ab058d6dc3362ea063f949e793fc60082008dd9950f2f01e91e1cde60824f1a9412124404e0aa452ce77dc9a19de1d42155aba19b34eca86a872d5474736036206ae9c2176cf40a21f9ee656c9dbb98052614fbca96493bee88561884d0a702e9d94abc0ddea9533815b26b437c0c22b9e60665dcd615cdb3a7a82c7b47e039ce13532f1c0011b0b0ed7083d93fd71db4b56e7f3722e7d84a2e73fa76e239f63aa5519e548940b38b3531d71a910837595c936499c7cb2563e0ce6e4298c1952b4b4c07cf91045d28de13e1b04da1ad36d12d0964df7bba2d195b7d8df43de75f47ca8d2adf120feab254287de1c99c67d53ce94850ebe57fd9be707abbf6fa11cdef567b3a82b8683f5d65955dbecb7e9d15a0adab2bc18c6c725cca922cc7ee5666df58aac38d911b75f734af1d61095fa8e9d0efbe31176301c475197d07ccb02a162040fcd9e3276dd0bcb449258760fc7d85b5cc165d519d96a0d4378dc6e4f1d32229981926a99fd40cd70f9b6f8a13dd0643db52d902cac58a47add16b66363155255acb6c4da360cbe4fca4292b0c13c42c08c4abbd2ce7c1c5a420af613bb2f76540a500522227cf19276aac44e4ea695fa87668acc3cba69b8bc497d0bc42b89121d322f65a0de7495cb794df907622232efc03360ddec62e0791699997323c570e13523a6287139b2e65a3f5cc65b20428afe06ccfb5cb8c6c10831575eedeb6b4ac114e93101873c1247ff4a1d1d16aeb7c29fb0f0969079b2fb3d99a4bde44444fbfdcfa96f9760656dcfba37bdfd5aa82d8f0acc00c7f48255b652469bd4a3e44f7fa995acf7234abdf3679b176a132fc67f0d75320cb61c3e5e047d8a0e89fd255e1e016d676e4c98e54ce86e2513b81373387f0665bf193ad81ce28cda088f83a56cc6c537c2bdf371707c17631cdb55289a217d43c1b2d0f02ed2380b8363ace9a1289757d5db946b45cf64930a12f2d666aa708762c1143e700f2b912b2d09c1b181737a2be45aa9e468918ce6ee57acb22d555d7731acae80eac8633e3efe983c9e70ead4bbc46d818de65243f5831d634e9695d91591b058410ff02c7b3d52233ea56c3c3c57d168a0fa6a9ec289cefbcd5b8da18ec6fcc0c6172d5c8044a3deccf570ab4c200e0d30f2b49fe71590b5a888b275d659e9788de4ae1e585353d292ab1d61baffa885e6cbaa92fbe2ea67b0406b67c5679be9cf4ec09599b2bc5566ca0ef96d060fb90f583dcba1c3ec83ebaa9034ed31fe5241721a5dedcacbd3abcaf83cd0ae3566baf087be1906b4c2b3185c073e89f612d2802631bb0ecb06a5edc2d51a29e0b8062d95cde839c5c20c35dad0b149e48977f1fe159c7d8cd4a778e08019b9b57b4073694659bd366e0925ee58429abe0df9bbe7399cb231e3beeca427bac45d70bc2d89f088f9d066b8bacb2cdeb2d728b0043b5c93fba53fe03f290b83dae0ffffd7097792060a8edda75d2885ba6295932a0c87d0f1ee6eda41f0581adbc00322e9491d1db3a580ca2fd6e9c1e6b98131f66296d40abcb827e13b99d016b5b0d4ad27391d5f1f4e2e4a71df69ec560673d237f55410cb1c69377d7dafc4b1b906e5fc77583963adecf643c0f5aaa0b476f39d81c69f9396f2820bf5a1bceb350f3fcdc28b7cd498d473bf7a9186017b028e946c0e99af496eab3ca7c432f0912a3d9455f83b1c4038b2a3df13782d5d4315b692f24658c63073a426689695cdf79d05b62810b50bda0c37f9bbf1d697071b7cf9cafe2afc3341e7ab4bb40a3a245dd7c38ec54d536002ae56f7aaf22fa9c7b0ec9c719bf8fd108fa6c149f7a68d440f4d4f6a6150b067a2eb20c24aef2b9002378154b78b0258d241832e9ecb271f10fbde7da41cc337b92205c95baacc8627881bb5f043f0b40392ad2f6847678339571af16e0a4fbcbb502b816ff7bfc4daa3776f835df49a86ae373b54f701dd71f97e220b9977f6d80b44ab8577d034417dbcfb1730a35ca190e103b8d0a62b92849757543b1ea5f8e14f8b35791abd5d2615de4f6643f2d57a793a0be847ac208f4ef901608ada13010e601bbfe0ead32e08b491830b46ac11e522323db580e05755dfca4371c0a8915767e8d64011faf281f3e361d6d34807a8f15790878fd995007ec1de149049253442c7ddbb4a8e93d25acbf24023d7c880d862f95c3e9499266234a72ed7e040f0a6d36f988b59abcbdb3f09c990e8bba4d53e8b6294d75bf5b7c2c1b0f0b015db413b98860f59adae0f606308685e73e6633918d85576af82eb1ba8fdbbe0e2448458194ba2e0cd52bf314e4a79c83f2b0b806ecfc93c6ca981fe610551c30c689ad1e7220e6442eb6d90e6da684ff3e705afa7601a515e30627be260794663779a85e9c608c2678e53107c1d593fc8f7053c0a2741f77b85352d7db1b5d13e66d0407fba7ea1759f1a156a970757c3c6bf1921a5dd622b676c617d7a4f07a2bc86d7a8305301a7f7e975bdc57cb5494e439df7150dd4866f558cb8d5954dda8ea96c591e1cfbe82fb0c82f8a51370e5725d3f11a4fa086ceef9b03a5e402eb41ad35a60f13d087e07e29641bd2fe48d78673ca0c9d4282bc80e71916008aa4ac7a6c46a6df8ea15a1fb4f602979cfccae67b60f55ed3e772fb63c165b6bf561ed992e2df894213211de418b88c62a22c3c2be55d5af03038b410e2b5ec65e80175faabffd101bec1600d00b9d893463a0766f907330943bf8f89541d948a55bc43b07c2d88a26d1421a56c96640bf393dfe2ed6c0060dc59fd5e6038d8aa6a4a66fdfccf01e46eeb089321183863097abac8415c2c781f97abb38c6170129c6f4b37e955e75a1f267f9c04d91cdfe8a674567dd4c3d799fe4b249462bd5e05d584bcb7b57334ea65bebccfaaaa0fc7149a91b4063fac4ae13010520a9d52456e72e5b3dced7da83a5f72a64a51f5e80e73ebeb26ef6b2666aac19a25c36356b0c05db3dc0790c376a0e1beed5f083395040bf4d580748e201bfdc8864bbdd03f91c337ab84f2a5423deda3e43c7f3f2e81d2ef207422687556c513f099cd5248ffacc370b706bb0c77bdd9729da809bd40015d40d62df6758321bdf06aed6f8776a0ed0861e0b7531ff291bd7c0771b8f55b88d1a43824592fc9a32877464f78ebf82e904dcdb29c8a4ba9d90118d575cbd5ccc50c6e8df0e9699973db44cca44ba2ea50c16e648c28918df5b063faa11ef29803a7468b81a261fc7d207f57832b5e1d85972b65ec0ec741eea286560a118ee4f9adefb920933b6d847ce9759855194c32a8b44b64f69aa8596161180588948a903f19e5149cddecf552f4b16ee51c1c3e2896620fdb678717db0db2994db873c1b08eff180258b6533a3997dc015e2911d168a43ee84b871abd5915f61283de864b0ac194dd419287e728c0ed6427e103f1fb02e69ebbe0e6efe2a4d8bbcab861b239c33cf491d4dafd4255842a86a73cce788816297924558c67b85503d7964cdb4952b2b6e057487dd3254a4bd83b1113b759423d48822f8a19728ca3d05689817d0567ad6c01963fe91a4b6f76d49dc6ca2feefdea237106217fd30a44aa1e59042df3167daf227f06203d519a2020a6145aac270ef761891313366619cb1de67384634a6e001a980cd1bc070d5ee5de1cdbc2b3b454a6e785633061967578aac84bf71783fb186cfed0633c71ea71ea5f4064b1a0b608d53b9a26c562f1e015c195ae3370ca4576e0e23656056ee6f59bf3bdd5d1026062024d316eb56469bd1b49d44f3b55256c02c888dbc660cc04f4452007838ce47dd03634d84f4ed16e1762aca839e0a44a459265356fa7c0f176af631db27e33e330d759901e5b28b15d99a414f2ff6f135da649193a821a3e818b90a059c594c7bc01a71d3af9af337c2cb00750391bfddd61723867410d8f3d897c2587df9f3e49a75a4dcdb6abcbbd40b20fbbda8e5f76a8f674f74d0bfe11574de6a73a2c29f1be1598d96cc459ca6d8976ca376ea7d98cfe2f94a918ea98100faef44801326e819c92d3d36a536b0cc42c4c272febb329afd34ce737e70f557389a578ac7c669fef56d57591b776e0e2c5ae1ed6882cbec584e2e8880b7baea476755e6cccccebf4c43afe1bd6afbb86f942567f4ad89aa24bbbe80d1d097f406ff795b7868408501c65569fe5e909e1fef379ded82f3e1b51f58e7668d0263d143051bbb2fcdfdf1da931584ff08eb1bcd305b96c7a0dd9b7b92f2c90559c81f09c0cbdc92854b9cdf8c1cd25ff1668d233e1acbc88aa66ceff3deaab3663cb6be83628fda2b61d3cf1c8f44753797d0df961dde193cdd1e0f509852453d3692c341067f617ccaccd0a43295451c30e2e3ef0b7ff4f3c09eed3eb807bb30dabd2f8f9c2881a6530cf851d2a96f0ffbd7cb08a87eb4cbaf11366719a34825a09af50be2e506a8734f47e6a403b15026bf138c7f8b29da3f08a76f61ba6112207f1bc0fa7ea9c6325df50ffcefc8fdef912768ff7789d88f3022220dc37b1716e3b4de93e04ae08fb39c13493d5690097"], 0x1, 0x586, &(0x7f0000000c00)="$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") setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1.123189795s ago: executing program 6 (id=6111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x1, 0x4) 1.058865058s ago: executing program 0 (id=6112): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), r0) 1.003846612s ago: executing program 4 (id=6113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x2d, 0x0, 0xbf, 0x7}, {0x0, 0x3f, 0xe, 0x1}]}, 0x10) 998.587622ms ago: executing program 5 (id=6114): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) fstat(r0, &(0x7f00000001c0)) 894.798318ms ago: executing program 0 (id=6115): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 884.141989ms ago: executing program 6 (id=6116): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/sync_on_suspend', 0x2882, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) fchmod(r0, 0x10) 795.149554ms ago: executing program 5 (id=6117): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 734.743198ms ago: executing program 4 (id=6118): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 662.824271ms ago: executing program 6 (id=6119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 569.724617ms ago: executing program 0 (id=6120): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x80047456, 0x0) 378.549188ms ago: executing program 0 (id=6121): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000040), 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 362.635109ms ago: executing program 6 (id=6122): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}) 176.2178ms ago: executing program 0 (id=6123): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000000, 0x0) 54.741367ms ago: executing program 6 (id=6124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={0x54, r1, 0x1, 0x70bd2b, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x8f, 0x7f}}]}, 0x54}}, 0x0) 0s ago: executing program 1 (id=6125): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000002a0000009500000000000000bcbdf45c662e6df62f0b95c9f9e79506280c4ab1240a9e4c9985b20ea63ef82302df99831e9bbf3e821e49c78f879a1bcef2bb3831519724116cc9ad3bc12edfabcf17bc835f118dbcee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c001680"], 0x38}}, 0x10) kernel console output (not intermixed with test programs): [ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.374478][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.217464][T15684] loop0: detected capacity change from 0 to 128 [ 368.293833][T15684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 368.449017][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 368.582980][T15689] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 368.582980][T15689] program syz.4.5133 not setting count and/or reply_len properly [ 368.820078][ T4365] bond0 (unregistering): Released all slaves [ 369.404614][T15690] loop0: detected capacity change from 0 to 40427 [ 369.443327][T15690] F2FS-fs (loop0): invalid crc value [ 369.518005][T15690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 369.552704][T15486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.604823][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.635769][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.695372][T15715] sctp: [Deprecated]: syz.4.5139 (pid 15715) Use of int in max_burst socket option deprecated. [ 369.695372][T15715] Use struct sctp_assoc_value instead [ 369.713668][T15690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 369.724197][T15486] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.757652][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.784048][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.849463][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.856656][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.901705][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.995882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.030064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.079093][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.086432][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.136503][ T4271] syz-executor: attempt to access beyond end of device [ 370.136503][ T4271] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 370.187731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.277460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.309222][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.383291][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.454835][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.482787][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.506634][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.543849][T15486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.599042][T15486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.657652][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.685113][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.708413][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.731752][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.750095][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.604847][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.659811][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.702809][T15486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.736931][T15767] loop4: detected capacity change from 0 to 128 [ 371.901651][T15767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.150384][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 372.539608][T15759] loop1: detected capacity change from 0 to 40427 [ 372.567781][T15759] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 372.596046][T15759] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 372.642890][T15759] F2FS-fs (loop1): invalid crc value [ 372.669928][T15759] F2FS-fs (loop1): Found nat_bits in checkpoint [ 372.749670][ T4324] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 372.802470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.816340][T15759] F2FS-fs (loop1): Start checkpoint disabled! [ 372.817448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.864401][T15759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 372.893659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.911134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.936860][T15486] device veth0_vlan entered promiscuous mode [ 372.945196][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.960565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.972293][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.985581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.003875][ T4324] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 373.017818][T15486] device veth1_vlan entered promiscuous mode [ 373.055279][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.091026][ T4324] usb 5-1: config 0 descriptor?? [ 373.103484][T15486] device veth0_macvtap entered promiscuous mode [ 373.143161][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.161773][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 373.202143][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.239987][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.248502][ T35] kworker/u4:2: attempt to access beyond end of device [ 373.248502][ T35] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 373.270634][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.302552][T15486] device veth1_macvtap entered promiscuous mode [ 373.373603][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.404629][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.467019][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.490551][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.505688][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.523988][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.525304][ T4324] hid-steam 0003:28DE:1142.000F: item fetching failed at offset 1/5 [ 373.547285][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.564971][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.577194][T15486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.589330][ T4324] hid-steam 0003:28DE:1142.000F: steam_probe:parse of hid interface failed [ 373.595190][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.599493][ T4324] hid-steam: probe of 0003:28DE:1142.000F failed with error -22 [ 373.612122][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.648916][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.664373][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.748884][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.784666][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.805308][ T4377] usb 5-1: USB disconnect, device number 23 [ 373.811344][T15486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.845355][T15486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.858732][T15486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.878611][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 373.941282][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.969854][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.990523][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.009274][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.033137][T15486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.049324][T15486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.070586][T15486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.088857][T15486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.269611][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.292715][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.306567][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.345189][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.354348][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.365210][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.018910][T15050] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 375.218863][T15050] usb 6-1: Using ep0 maxpacket: 32 [ 375.228024][T15050] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 375.257349][T15050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.282156][T15050] usb 6-1: Product: syz [ 375.295588][T15050] usb 6-1: Manufacturer: syz [ 375.311776][T15050] usb 6-1: SerialNumber: syz [ 375.330695][T15050] usb 6-1: config 0 descriptor?? [ 375.360183][T15050] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 375.386406][T15050] dvb-usb: bulk message failed: -22 (2/0) [ 375.417021][T15050] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.477504][T15050] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 375.497597][T15050] usb 6-1: media controller created [ 375.558326][T15830] dvb-usb: bulk message failed: -22 (3/0) [ 375.590022][T15050] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.618522][T15844] loop1: detected capacity change from 0 to 128 [ 375.669818][T15844] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 375.688492][T15050] usb 6-1: selecting invalid altsetting 7 [ 375.696247][T15833] loop4: detected capacity change from 0 to 40427 [ 375.719562][T15844] hpfs: filesystem error: improperly stopped [ 375.719821][T15050] cxusb: set interface failed [ 375.735883][T15844] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 375.770961][T15833] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 375.774476][T15844] hpfs: You really don't want any checks? You are crazy... [ 375.787264][T15050] dvb-usb: bulk message failed: -22 (1/0) [ 375.793720][T15833] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 375.837184][T15844] hpfs: hpfs_map_sector(): read error [ 375.841311][T15833] F2FS-fs (loop4): invalid crc value [ 375.859634][T15844] hpfs: code page support is disabled [ 375.860582][T15833] F2FS-fs (loop4): Found nat_bits in checkpoint [ 375.887773][T15844] hpfs: hpfs_map_4sectors(): unaligned read [ 375.919497][T15844] hpfs: hpfs_map_4sectors(): unaligned read [ 375.945332][T15844] hpfs: filesystem error: unable to find root dir [ 376.042832][T15050] DVB: Unable to find symbol lgdt330x_attach() [ 376.052276][T15050] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 376.102351][T15833] F2FS-fs (loop4): Start checkpoint disabled! [ 376.162652][T15852] loop0: detected capacity change from 0 to 128 [ 376.218345][T15833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 376.279513][T15852] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 376.408816][T15050] rc_core: IR keymap rc-dvico-portable not found [ 376.417515][ T4271] sysv_free_block: trying to free block not in datazone [ 376.448775][T15050] Registered IR keymap rc-empty [ 376.455218][T15050] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 376.533604][T15050] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input32 [ 376.544196][ T4271] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 376.658921][T15050] dvb-usb: schedule remote query interval to 100 msecs. [ 376.665914][T15050] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 376.702387][T15865] loop5: detected capacity change from 0 to 512 [ 376.743190][T15050] usb 6-1: USB disconnect, device number 2 [ 376.748168][T15865] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 376.757698][T15865] UDF-fs: Scanning with blocksize 512 failed [ 376.799570][T15865] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 376.897230][T15865] UDF-fs: Scanning with blocksize 1024 failed [ 376.901393][T15050] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 376.941370][T15865] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 376.961156][T15865] UDF-fs: Scanning with blocksize 2048 failed [ 377.008558][T15865] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 377.047968][ T4365] kworker/u4:7: attempt to access beyond end of device [ 377.047968][ T4365] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 377.083527][T15865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.615721][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.646000][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.655505][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.663890][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.677346][T15881] loop1: detected capacity change from 0 to 1024 [ 377.722631][T15881] EXT4-fs: inline encryption not supported [ 377.749261][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.757816][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.839787][T15881] EXT4-fs: Ignoring removed bh option [ 377.952984][T15881] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 378.066424][ T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.095128][T15868] loop0: detected capacity change from 0 to 40427 [ 378.181976][T15868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 378.222346][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 378.393063][T15904] loop5: detected capacity change from 0 to 1024 [ 378.410456][T15868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 378.422502][T15904] EXT4-fs: Ignoring removed bh option [ 378.432380][ T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.446191][T15904] EXT4-fs: Ignoring removed nobh option [ 378.487176][T15904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.511251][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.517581][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.578368][T15904] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 378.739125][ T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.777374][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 378.777387][ T26] audit: type=1326 audit(378.813:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 378.860653][T15486] EXT4-fs (loop5): unmounting filesystem. [ 378.921295][T15896] loop4: detected capacity change from 0 to 40427 [ 378.933458][ T26] audit: type=1326 audit(378.813:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 379.017998][T15916] trusted_key: encrypted_key: key trusted:s)’yz not found [ 379.019776][T15896] F2FS-fs (loop4): invalid crc value [ 379.076917][ T26] audit: type=1326 audit(378.813:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 379.156666][T15896] F2FS-fs (loop4): Found nat_bits in checkpoint [ 379.164637][ T26] audit: type=1326 audit(378.823:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 379.251995][ T26] audit: type=1326 audit(378.853:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 379.285747][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.326434][T15896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 379.340675][T15921] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5193'. [ 379.457411][T15878] chnl_net:caif_netlink_parms(): no params data found [ 379.589626][ T4276] syz-executor: attempt to access beyond end of device [ 379.589626][ T4276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.652251][T15937] 9p: Unknown access argument 18446744073709551615: -34 [ 379.789165][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 379.826405][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.861741][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.873530][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.883892][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.898280][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.918917][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.939879][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.953037][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 379.965242][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 380.106462][T15878] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.211275][T15878] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.226640][T15878] device bridge_slave_0 entered promiscuous mode [ 380.236996][T15878] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.252385][T15878] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.263986][T15957] tmpfs: Cannot retroactively limit inodes [ 380.264329][T15878] device bridge_slave_1 entered promiscuous mode [ 380.367968][T15878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.589047][T15969] loop1: detected capacity change from 0 to 128 [ 380.632003][T15969] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.729082][T15969] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000700) [ 380.749065][T15878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.787863][T15969] FAT-fs (loop1): Filesystem has been set read-only [ 381.045188][T15878] team0: Port device team_slave_0 added [ 381.157685][T15878] team0: Port device team_slave_1 added [ 381.303914][T15992] loop1: detected capacity change from 0 to 512 [ 381.338703][T15878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.380037][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.421024][T15992] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5217: invalid indirect mapped block 10 (level 1) [ 381.487934][T15878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.498991][T15992] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5217: invalid indirect mapped block 8 (level 1) [ 381.592355][T15992] EXT4-fs (loop1): 1 truncate cleaned up [ 381.604656][T15992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 381.620381][T15878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.627444][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.695180][T15878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.758193][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 381.868458][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 381.938424][ T4354] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 381.946695][T15878] device hsr_slave_0 entered promiscuous mode [ 381.973247][T15878] device hsr_slave_1 entered promiscuous mode [ 382.009084][T15878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.018945][T15878] Cannot create hsr debugfs directory [ 382.128483][ T4354] usb 1-1: Using ep0 maxpacket: 32 [ 382.138541][ T4354] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 382.168437][ T4354] usb 1-1: config 0 has no interface number 0 [ 382.181530][ T4354] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.210609][ T4354] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.243291][ T4354] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 382.264709][ T4354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.306221][ T4354] usb 1-1: config 0 descriptor?? [ 382.659181][ T71] IPVS: stopping backup sync thread 10194 ... [ 382.733452][T16038] loop1: detected capacity change from 0 to 4096 [ 382.830829][T16043] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.925903][ T4354] usb 1-1: USB disconnect, device number 34 [ 382.945339][T15878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.015337][T15878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.025360][T15878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.037762][T15878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.238371][ T6601] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 383.246977][ T26] audit: type=1326 audit(383.273:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.5.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 383.270392][ T26] audit: type=1326 audit(383.303:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.5.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 383.294140][ T26] audit: type=1326 audit(383.333:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.5.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 383.342066][ T26] audit: type=1326 audit(383.333:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.5.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 383.447897][ T26] audit: type=1326 audit(383.333:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.5.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 383.470994][ T6601] usb 5-1: Using ep0 maxpacket: 16 [ 383.478552][ T6601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.522194][ T6601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.563062][ T6601] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 383.582788][ T6601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.617945][ T6601] usb 5-1: config 0 descriptor?? [ 383.892572][T16051] loop1: detected capacity change from 0 to 32768 [ 383.912325][ T71] device hsr_slave_0 left promiscuous mode [ 383.925249][ T71] device hsr_slave_1 left promiscuous mode [ 383.945699][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.948439][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 383.953607][ T7811] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 384.006914][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.066338][T16051] XFS (loop1): Mounting V5 Filesystem [ 384.078368][ T6601] topre 0003:0853:0148.0011: unknown main item tag 0xd [ 384.101027][T16051] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 384.113319][ T6601] topre 0003:0853:0148.0011: unexpected long global item [ 384.115732][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.121008][ T6601] topre: probe of 0003:0853:0148.0011 failed with error -22 [ 384.170087][ T7811] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 384.179556][T16051] XFS (loop1): Starting recovery (logdev: internal) [ 384.188535][ T7811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.206978][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.217539][ T7811] usb 1-1: config 0 descriptor?? [ 384.237842][ T71] device bridge_slave_1 left promiscuous mode [ 384.261506][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.314381][ T71] device bridge_slave_0 left promiscuous mode [ 384.323805][ T4324] usb 5-1: USB disconnect, device number 24 [ 384.331381][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.448055][ T71] device veth1_macvtap left promiscuous mode [ 384.472091][ T71] device veth0_macvtap left promiscuous mode [ 384.480987][ T71] device veth1_vlan left promiscuous mode [ 384.505818][T16051] XFS (loop1): Ending recovery (logdev: internal) [ 384.530936][T16051] XFS (loop1): Quotacheck needed: Please wait. [ 384.618313][T16051] XFS (loop1): Quotacheck: Done. [ 384.642590][ T7811] kye 0003:0458:0138.0012: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 384.665383][T16072] loop5: detected capacity change from 0 to 32768 [ 384.735863][ T4267] XFS (loop1): Unmounting Filesystem [ 384.836042][ T7811] usb 1-1: USB disconnect, device number 35 [ 385.012866][T16085] fido_id[16085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 385.670657][T16103] loop4: detected capacity change from 0 to 512 [ 385.873371][T16103] FAT-fs (loop4): codepage cp86 not found [ 386.029606][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 386.066286][T16116] loop4: detected capacity change from 0 to 1024 [ 386.117196][T16116] hfsplus: bad catalog entry type [ 386.121516][ T71] bond1 (unregistering): Released all slaves [ 386.191941][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 386.300087][ T7811] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 386.524550][ T7811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.541175][ T7811] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 386.570402][ T7811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.598267][ T7811] usb 1-1: config 0 descriptor?? [ 386.944338][T16134] loop4: detected capacity change from 0 to 512 [ 386.955635][T16134] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 387.036077][ T7811] lg-g15 0003:046D:C222.0013: unbalanced delimiter at end of report description [ 387.057753][ T7811] lg-g15: probe of 0003:046D:C222.0013 failed with error -22 [ 387.243318][ T4377] usb 1-1: USB disconnect, device number 36 [ 387.300534][T16138] __nla_validate_parse: 43 callbacks suppressed [ 387.300554][T16138] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5273'. [ 387.364653][ T71] team0 (unregistering): Port device team_slave_1 removed [ 387.458856][ T71] team0 (unregistering): Port device team_slave_0 removed [ 387.560949][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.576203][ T71] device bond_slave_1 left promiscuous mode [ 387.671047][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.685889][ T71] device bond_slave_0 left promiscuous mode [ 388.383484][T16142] loop4: detected capacity change from 0 to 131072 [ 388.416953][T16142] F2FS-fs (loop4): Test dummy encryption mode enabled [ 388.430703][T16142] F2FS-fs (loop4): invalid crc value [ 388.502954][T16142] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1 [ 388.544680][T16142] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 388.696276][ T71] bond0 (unregistering): Released all slaves [ 388.814051][ T127] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 388.998823][T15878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.019712][ T127] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 389.038088][ T127] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 389.057608][T15878] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.075759][ T127] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 389.115168][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.133615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.154461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.158482][ T127] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 389.185008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.208963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.231278][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.238453][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.285464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 389.308496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 389.320346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.333894][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.343073][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.362908][ T127] gspca_sn9c2028: read1 error -32 [ 389.378053][T15049] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 389.389105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 389.398882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 389.471040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.531477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.560763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.580601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.589515][ T127] gspca_sn9c2028: read1 error -71 [ 389.591866][T15049] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 389.596703][ T127] sn9c2028: probe of 1-1:220.0 failed with error -71 [ 389.640924][ T127] usb 1-1: USB disconnect, device number 37 [ 389.646462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.655199][T15049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.686554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.715661][T15049] usb 6-1: config 0 descriptor?? [ 389.743262][T15878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.780233][T15878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.797410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.847396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.864501][T16176] loop4: detected capacity change from 0 to 512 [ 389.896650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.085054][T16176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 390.142109][T15049] hid-alps 0003:044E:120C.0014: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 390.289636][T16191] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 390.366194][T15049] usb 6-1: USB disconnect, device number 3 [ 390.391386][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 390.567982][T16203] loop4: detected capacity change from 0 to 128 [ 390.575188][T16192] fido_id[16192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 390.624868][T16203] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 390.634564][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.648093][T16203] hpfs: filesystem error: improperly stopped [ 390.654167][T16203] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 390.668475][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.701208][T15878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.748585][T16203] hpfs: You really don't want any checks? You are crazy... [ 390.757098][T16203] hpfs: hpfs_map_sector(): read error [ 390.807490][T16203] hpfs: code page support is disabled [ 390.818796][T16203] hpfs: hpfs_map_4sectors(): unaligned read [ 390.824875][T16203] hpfs: hpfs_map_4sectors(): unaligned read [ 390.841412][T16203] hpfs: filesystem error: unable to find root dir [ 391.051473][T16217] tipc: Enabling not permitted [ 391.057181][T16217] tipc: Enabling of bearer rejected, failed to enable media [ 391.633749][T15049] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 391.700940][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.713806][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.733572][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.753786][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.771889][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.789778][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.802714][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.821181][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.838173][T15049] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 391.848772][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 391.866462][T15049] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 391.879259][T15049] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 391.889429][T15049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.917350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.929175][T15049] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 391.938485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.999605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.014359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.027449][T15878] device veth0_vlan entered promiscuous mode [ 392.035932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.049986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.074899][T15878] device veth1_vlan entered promiscuous mode [ 392.125869][T15049] gspca_sn9c2028: read1 error -32 [ 392.170294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 392.181805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 392.219717][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.241697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.321821][T15878] device veth0_macvtap entered promiscuous mode [ 392.335206][T15049] gspca_sn9c2028: read1 error -71 [ 392.349148][T15049] sn9c2028: probe of 5-1:220.0 failed with error -71 [ 392.369442][T15878] device veth1_macvtap entered promiscuous mode [ 392.389732][T15049] usb 5-1: USB disconnect, device number 25 [ 392.416689][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.479195][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.499333][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.501550][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 392.501562][ T26] audit: type=1326 audit(392.534:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.520514][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.613313][ T26] audit: type=1326 audit(392.534:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.642105][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.657653][ T26] audit: type=1326 audit(392.594:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.695544][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.706724][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.722292][ T26] audit: type=1326 audit(392.594:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.753639][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.774549][T15878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.784160][ T26] audit: type=1326 audit(392.594:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.811697][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.823228][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.834414][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.847381][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.861589][ T26] audit: type=1326 audit(392.594:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.900078][T16256] loop0: detected capacity change from 0 to 32768 [ 392.912490][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.928783][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.944358][ T26] audit: type=1326 audit(392.594:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 392.979391][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.995007][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.998220][T16256] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 393.006212][ T26] audit: type=1326 audit(392.594:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.5.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7219bf79 code=0x7ffc0000 [ 393.013095][T15049] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 393.042672][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.042695][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.042719][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.042730][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.053262][T15878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.093309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 393.125805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.172171][T16256] JBD2: Ignoring recovery information on journal [ 393.191675][T15878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.201056][T15878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.236973][T15878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.287755][T15878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.340640][T16256] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 393.349072][T16262] loop1: detected capacity change from 0 to 40427 [ 393.405114][T16262] F2FS-fs (loop1): invalid crc value [ 393.475155][T16262] F2FS-fs (loop1): Found nat_bits in checkpoint [ 393.491697][T15049] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 393.531570][T15049] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.554340][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.576527][T16256] (syz.0.5309,16256,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 393.589737][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.597539][T15049] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.601951][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.635760][T16256] (syz.0.5309,16256,0):update_backups:188 ERROR: status = -12 [ 393.643856][T15049] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 393.669681][T16256] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 393.691745][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.691988][T15049] usb 6-1: config 0 interface 0 has no altsetting 0 [ 393.718718][T16262] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 393.747004][T15049] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 393.787410][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.797986][T15049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.826101][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 393.856469][T15049] usb 6-1: config 0 descriptor?? [ 393.902854][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 394.028602][ T4267] syz-executor: attempt to access beyond end of device [ 394.028602][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 394.284986][T15049] ryos 0003:1E7D:3138.0015: item fetching failed at offset 3/5 [ 394.304665][T15049] ryos 0003:1E7D:3138.0015: parse failed [ 394.324486][T15049] ryos: probe of 0003:1E7D:3138.0015 failed with error -22 [ 394.347371][T16301] __nla_validate_parse: 43 callbacks suppressed [ 394.347390][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.422895][T16304] loop0: detected capacity change from 0 to 512 [ 394.434772][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.501715][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.513988][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.523138][T16304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 394.536562][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.554038][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.562153][T16304] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.5328: corrupted inode contents [ 394.582600][T16304] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.5328: mark_inode_dirty error [ 394.610665][T16304] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.5328: corrupted inode contents [ 394.683470][T16312] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.5328: corrupted inode contents [ 394.687567][T16311] loop4: detected capacity change from 0 to 1024 [ 394.708367][T16312] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.5328: mark_inode_dirty error [ 394.724493][T16312] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.5328: corrupted inode contents [ 394.725449][T15049] usb 6-1: USB disconnect, device number 4 [ 394.742632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 394.742645][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.770514][T16312] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.5328: mark_inode_dirty error [ 394.791217][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.801522][T16312] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.5328: corrupted inode contents [ 394.844787][T16312] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.5328: mark_inode_dirty error [ 394.887860][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 394.896791][ T26] audit: type=1800 audit(394.924:262): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5323" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 394.945424][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 395.090648][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 396.233006][ T26] audit: type=1326 audit(396.264:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.6.5344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f453599bf79 code=0x0 [ 396.326050][T16376] [U] @  [ 396.741644][T16396] loop1: detected capacity change from 0 to 512 [ 396.785266][T16396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.842529][T16396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 397.023720][T16407] smc: net device bond0 applied user defined pnetid SYZ0 [ 397.023823][T16383] loop0: detected capacity change from 0 to 32768 [ 397.037612][ T6602] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 397.163055][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 397.241200][ T6602] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 397.278162][ T6602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.286202][ T6602] usb 5-1: Product: syz [ 397.337541][ T6602] usb 5-1: Manufacturer: syz [ 397.342236][ T6602] usb 5-1: SerialNumber: syz [ 397.370789][ T6602] usb 5-1: config 0 descriptor?? [ 397.614719][ T6602] usb 5-1: USB disconnect, device number 26 [ 397.846354][T16425] loop0: detected capacity change from 0 to 1024 [ 397.979012][T16425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 398.045833][T16430] loop5: detected capacity change from 0 to 512 [ 398.067610][T16425] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 398.177783][T16430] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.5364: inode #1: comm syz.5.5364: iget: illegal inode # [ 398.226956][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 398.332372][T16411] loop6: detected capacity change from 0 to 40427 [ 398.339153][T16430] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.5364: error while reading EA inode 1 err=-117 [ 398.393606][T16411] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 398.402850][T16430] EXT4-fs (loop5): 1 orphan inode deleted [ 398.432819][T16430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 398.451611][T16417] loop1: detected capacity change from 0 to 32768 [ 398.459691][T16411] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 398.511429][T16411] F2FS-fs (loop6): invalid crc value [ 398.656711][T16417] XFS (loop1): Mounting V5 Filesystem [ 398.681201][T16411] F2FS-fs (loop6): Found nat_bits in checkpoint [ 398.721465][T15486] EXT4-fs (loop5): unmounting filesystem. [ 398.800551][T16417] XFS (loop1): Ending clean mount [ 398.881693][T16411] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 398.911364][T16411] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 399.044167][ T4267] XFS (loop1): Unmounting Filesystem [ 399.622884][T16438] loop0: detected capacity change from 0 to 32768 [ 399.696905][ T26] audit: type=1800 audit(399.724:264): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5366" name="file2" dev="loop0" ino=7 res=0 errno=0 [ 399.997098][T16482] loop4: detected capacity change from 0 to 256 [ 400.048318][T16482] exfat: Deprecated parameter 'namecase' [ 400.079082][T16482] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd2fbf2c1, utbl_chksum : 0xe619d30d) [ 400.921031][T16518] batman_adv: batadv0: Adding interface: gretap1 [ 400.957442][T16518] batman_adv: batadv0: Interface activated: gretap1 [ 401.191692][T16525] loop5: detected capacity change from 0 to 256 [ 401.519812][T16503] loop6: detected capacity change from 0 to 32768 [ 401.560761][T16503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.5386 (16503) [ 401.600043][T16539] __nla_validate_parse: 44 callbacks suppressed [ 401.600062][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5399'. [ 401.631162][T16504] loop1: detected capacity change from 0 to 32768 [ 401.637906][T16503] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 401.661030][T16503] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 401.672816][T16540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5399'. [ 401.716594][T16503] BTRFS info (device loop6): enabling auto defrag [ 401.726480][ T26] audit: type=1800 audit(401.754:265): pid=16504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5385" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 401.777301][T16503] BTRFS info (device loop6): use no compression [ 401.783615][T16503] BTRFS info (device loop6): force clearing of disk cache [ 401.835702][ T26] audit: type=1800 audit(401.864:266): pid=16544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5401" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 401.847808][T16503] BTRFS info (device loop6): max_inline at 4096 [ 401.943466][T16503] BTRFS info (device loop6): disabling free space tree [ 402.235498][T16546] loop5: detected capacity change from 0 to 32768 [ 402.350219][T16503] BTRFS info (device loop6): enabling ssd optimizations [ 402.359188][T16503] BTRFS info (device loop6): rebuilding free space tree [ 402.392954][T16571] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5404'. [ 402.402010][T16503] BTRFS info (device loop6): disabling free space tree [ 402.402078][T16503] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.402138][T16503] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 402.536282][T16578] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 402.606236][T16578] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 402.645778][T16578] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 402.688758][T16578] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 402.736832][T16578] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 402.778360][T16578] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 402.780779][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5408'. [ 402.839334][T16578] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 402.867373][T16578] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 402.898156][T16578] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 402.917379][T16578] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 403.359988][T15878] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.531045][T16603] loop5: detected capacity change from 0 to 1024 [ 403.670050][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5419'. [ 404.305161][T16632] loop1: detected capacity change from 0 to 512 [ 404.379113][T16636] loop4: detected capacity change from 0 to 4096 [ 404.382251][T16632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 404.439754][T16636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 404.468217][T16645] ptrace attach of "./syz-executor exec"[15878] was attempted by ""[16645] [ 404.512282][ T26] audit: type=1800 audit(404.545:267): pid=16636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5425" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 404.615974][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 404.687256][ T6601] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 404.771585][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 404.888272][ T6601] usb 1-1: Using ep0 maxpacket: 32 [ 404.896104][ T6601] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 404.949513][ T6601] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 404.976345][ T6601] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.012780][ T6601] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 405.056674][ T6601] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 405.075641][ T6601] usb 1-1: Product: syz [ 405.085753][ T6601] usb 1-1: Manufacturer: syz [ 405.096004][ T6601] usb 1-1: SerialNumber: syz [ 405.156455][ T6601] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input33 [ 405.353504][ T6601] usb 1-1: USB disconnect, device number 38 [ 405.376299][ T6601] appletouch 1-1:1.0: input: appletouch disconnected [ 405.649984][T16671] loop1: detected capacity change from 0 to 8192 [ 405.666762][T16671] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 405.727573][T16671] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 405.768609][T16671] ntfs3: loop1: Failed to load $Extend. [ 406.463383][ T26] audit: type=1326 audit(406.495:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.4.5452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9e619bf79 code=0x0 [ 407.010555][ T127] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 407.214130][ T127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.246093][ T127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.278730][ T127] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.307598][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.354713][ T127] usb 6-1: SerialNumber: syz [ 407.595538][ T127] usb 6-1: 0:2 : does not exist [ 407.647227][ T127] usb 6-1: USB disconnect, device number 5 [ 407.723766][T16762] loop1: detected capacity change from 0 to 512 [ 407.767763][T16762] EXT4-fs: Ignoring removed oldalloc option [ 407.827915][T16762] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.888870][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.929835][T16762] EXT4-fs (loop1): 1 truncate cleaned up [ 407.935541][T16762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 408.065372][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 408.238431][T16773] loop6: detected capacity change from 0 to 4096 [ 408.275729][T16773] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 408.834866][T16805] loop4: detected capacity change from 0 to 512 [ 408.915920][T16805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.071817][T16814] loop1: detected capacity change from 0 to 256 [ 409.091254][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 409.294044][T16823] mkiss: ax0: crc mode is auto. [ 409.446704][T16826] loop1: detected capacity change from 0 to 512 [ 409.511005][T16826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 409.602976][T16826] EXT4-fs (loop1): 1 truncate cleaned up [ 409.621134][T16826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 409.715733][T16837] loop5: detected capacity change from 0 to 2048 [ 409.772575][T16837] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 409.823158][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 409.847839][T16842] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.974351][T16849] loop4: detected capacity change from 0 to 128 [ 410.108057][T16849] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 410.173588][T16849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.227169][T16855] loop0: detected capacity change from 0 to 1024 [ 410.458079][ T4310] hfsplus: b-tree write err: -5, ino 4 [ 410.886277][T16887] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 411.132943][ T26] audit: type=1326 audit(411.165:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.238472][ T26] audit: type=1326 audit(411.165:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.245977][T16898] loop5: detected capacity change from 0 to 2048 [ 411.260299][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.281089][ T26] audit: type=1326 audit(411.215:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.349593][ T26] audit: type=1326 audit(411.225:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.395411][T16898] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 411.443412][ T26] audit: type=1326 audit(411.225:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.498788][T16910] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.570400][T16910] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 411.571669][ T26] audit: type=1326 audit(411.225:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.643790][T16910] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 411.673307][T16915] loop0: detected capacity change from 0 to 512 [ 411.702473][T16915] EXT4-fs: Ignoring removed nobh option [ 411.737758][T16910] Remounting filesystem read-only [ 411.757086][T16915] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 411.776986][T16915] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 411.807116][ T26] audit: type=1326 audit(411.215:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.826788][T16915] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.5523: inode has both inline data and extents flags [ 411.829156][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.911094][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5526'. [ 411.923918][ T26] audit: type=1326 audit(411.225:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 411.931595][T16915] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5523: couldn't read orphan inode 13 (err -117) [ 411.948408][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5526'. [ 411.979551][T15486] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 412.055300][ T26] audit: type=1326 audit(411.225:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 412.126581][T16915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 412.154593][ T26] audit: type=1326 audit(411.245:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 412.242064][T16915] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 412.283727][ T26] audit: type=1326 audit(411.245:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 412.410722][ T26] audit: type=1326 audit(411.245:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 412.417561][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 412.443703][ T26] audit: type=1326 audit(411.245:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 412.466818][ T26] audit: type=1326 audit(411.245:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16899 comm="syz.4.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 412.656458][T16949] loop5: detected capacity change from 0 to 256 [ 412.713437][T16949] exfat: Deprecated parameter 'utf8' [ 412.726239][T16949] exfat: Deprecated parameter 'namecase' [ 412.746879][T16951] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5538'. [ 412.773947][T16949] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 412.787912][T16951] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5538'. [ 412.810315][ T14] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 413.016679][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 413.022908][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5541'. [ 413.039362][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.081061][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.121848][ T14] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 413.161334][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.204705][ T14] usb 2-1: config 0 descriptor?? [ 413.733793][T16991] netlink: 'syz.5.5550': attribute type 9 has an invalid length. [ 413.799864][T16996] loop0: detected capacity change from 0 to 256 [ 413.844209][ T14] usb 2-1: string descriptor 0 read error: -71 [ 413.856639][ T14] uclogic 0003:5543:0047.0016: failed retrieving string descriptor #200: -71 [ 413.917230][ T14] uclogic 0003:5543:0047.0016: failed retrieving pen parameters: -71 [ 413.933365][T17000] loop4: detected capacity change from 0 to 512 [ 413.943707][ T14] uclogic 0003:5543:0047.0016: failed probing pen v2 parameters: -71 [ 413.975726][ T14] uclogic 0003:5543:0047.0016: failed probing parameters: -71 [ 414.005609][T17000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 414.024997][ T14] uclogic: probe of 0003:5543:0047.0016 failed with error -71 [ 414.052464][T17000] EXT4-fs (loop4): 1 orphan inode deleted [ 414.066319][T17000] EXT4-fs (loop4): 1 truncate cleaned up [ 414.133241][T17000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 414.153861][ T14] usb 2-1: USB disconnect, device number 27 [ 414.345920][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 414.434432][T17010] loop5: detected capacity change from 0 to 4096 [ 414.678954][T15486] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 414.690512][T15486] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 415.578828][T17055] loop6: detected capacity change from 0 to 2048 [ 415.693719][T17055] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 415.772101][ T4378] udevd[4378]: incorrect nilfs2 checksum on /dev/loop6 [ 415.953762][T17077] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.339252][T17090] loop0: detected capacity change from 0 to 1024 [ 416.634144][T17107] loop5: detected capacity change from 0 to 256 [ 416.661868][T17107] exfat: Deprecated parameter 'namecase' [ 416.706527][T17107] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 416.787613][ T129] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 416.840742][ T14] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 416.994009][T17120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5597'. [ 417.013551][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 417.035064][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.056621][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 417.064699][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 417.093292][ T129] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 417.107210][ T14] usb 2-1: config 16 has an invalid interface number: 175 but max is 0 [ 417.150138][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.161922][ T14] usb 2-1: config 16 has no interface number 0 [ 417.177315][ T14] usb 2-1: New USB device found, idVendor=05d1, idProduct=9007, bcdDevice=32.00 [ 417.203935][ T129] usb 5-1: config 0 descriptor?? [ 417.223929][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.249992][ T14] usb 2-1: Product: syz [ 417.254233][ T14] usb 2-1: Manufacturer: syz [ 417.289620][ T14] usb 2-1: SerialNumber: syz [ 417.511535][T17128] loop5: detected capacity change from 0 to 4096 [ 417.546199][ T14] ftdi_sio 2-1:16.175: FTDI USB Serial Device converter detected [ 417.579065][ T14] usb 2-1: Detected FT233HP [ 417.617626][T17128] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 417.635165][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 417.652155][ T129] wacom 0003:056A:00C6.0017: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0 [ 417.689896][ T14] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 417.716080][T17128] ntfs3: loop5: Failed to load $Extend. [ 417.734409][ T14] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 417.775351][ T14] usb 2-1: USB disconnect, device number 28 [ 417.797689][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 417.831090][ T14] ftdi_sio 2-1:16.175: device disconnected [ 417.870996][ T129] usb 5-1: USB disconnect, device number 27 [ 417.993174][T17146] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.003375][T17146] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.012376][T17146] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.021238][T17146] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.023631][T17144] fido_id[17144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 418.143923][T17150] loop1: detected capacity change from 0 to 2048 [ 418.174749][T17150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.250038][T17150] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 418.691778][T17163] overlayfs: failed to set xattr on upper [ 418.703289][T17163] overlayfs: ...falling back to index=off,metacopy=off. [ 418.711477][T17163] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 419.163663][T17184] loop4: detected capacity change from 0 to 4096 [ 419.237899][T17186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.481271][T17189] loop5: detected capacity change from 0 to 4096 [ 419.526532][T17189] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 419.610967][T17189] ntfs3: loop5: failed to convert "c46c" to cp855 [ 419.755341][T17175] loop1: detected capacity change from 0 to 32768 [ 420.183081][T17213] loop4: detected capacity change from 0 to 1024 [ 420.189810][ T6602] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 420.217949][T17215] netlink: 'syz.6.5631': attribute type 21 has an invalid length. [ 420.259674][T17213] EXT4-fs: inline encryption not supported [ 420.265593][T17213] EXT4-fs: Ignoring removed nobh option [ 420.302188][T17213] EXT4-fs: Ignoring removed bh option [ 420.333214][T17213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 420.377759][ T6602] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 420.406676][ T6602] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.446202][ T6602] usb 6-1: config 0 interface 0 has no altsetting 0 [ 420.463955][T17213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 420.473282][ T6602] usb 6-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 420.571950][ T6602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.636829][ T6602] usb 6-1: config 0 descriptor?? [ 420.642851][T17204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 420.723376][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 421.086669][ T6602] wacom 0003:056A:00B8.0018: unknown main item tag 0x0 [ 421.114510][ T6602] wacom 0003:056A:00B8.0018: unknown main item tag 0x0 [ 421.145601][ T6602] wacom 0003:056A:00B8.0018: unknown main item tag 0x0 [ 421.171506][ T6602] wacom 0003:056A:00B8.0018: unknown main item tag 0x0 [ 421.194979][ T6602] wacom 0003:056A:00B8.0018: unknown main item tag 0x0 [ 421.220247][ T6602] wacom 0003:056A:00B8.0018: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 421.267128][ T6602] wacom 0003:056A:00B8.0018: hidraw0: USB HID v0.03 Device [HID 056a:00b8] on usb-dummy_hcd.5-1/input0 [ 421.296811][ T6602] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B8.0018/input/input37 [ 421.420772][ T6602] usb 6-1: USB disconnect, device number 6 [ 421.641670][T17248] fido_id[17248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 421.685763][T17245] loop1: detected capacity change from 0 to 32768 [ 421.759038][T17245] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 421.819968][T17245] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 421.948036][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 422.233131][T17247] loop4: detected capacity change from 0 to 32768 [ 422.372470][T17247] XFS (loop4): Mounting V5 Filesystem [ 422.454331][T17269] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 422.477119][T17276] loop6: detected capacity change from 0 to 2048 [ 422.498668][T17247] XFS (loop4): Ending clean mount [ 422.514901][T17276] EXT4-fs: inline encryption not supported [ 422.610147][T17276] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 422.721019][T17285] loop0: detected capacity change from 0 to 512 [ 422.764040][T17285] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 422.794992][T17285] EXT4-fs (loop0): invalid journal inode [ 422.810811][T17285] EXT4-fs (loop0): can't get journal size [ 422.861117][T17285] EXT4-fs (loop0): 1 truncate cleaned up [ 422.867022][T17285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 422.916518][T15878] EXT4-fs (loop6): unmounting filesystem. [ 423.021491][ T4276] XFS (loop4): Unmounting Filesystem [ 423.275401][T17293] loop5: detected capacity change from 0 to 4096 [ 423.301886][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 423.581995][T15486] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 423.616067][T15486] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 423.813488][T17291] loop6: detected capacity change from 0 to 32768 [ 423.976754][T17291] XFS (loop6): Mounting V5 Filesystem [ 424.079705][T17291] XFS (loop6): Ending clean mount [ 424.133078][T17300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 424.179359][T17301] ntfs3: loop0: failed to convert "0080" to cp869 [ 424.187952][T17291] XFS (loop6): Quotacheck needed: Please wait. [ 424.217494][T17300] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 424.258733][T17314] read_mapping_page failed! [ 424.263400][T17314] ERROR: (device loop1): txCommit: [ 424.263400][T17314] [ 424.281711][T17301] ntfs3: loop0: failed to convert name for inode 1e. [ 424.301440][T17300] REISERFS (device loop4): using ordered data mode [ 424.316976][T17291] XFS (loop6): Quotacheck: Done. [ 424.336168][T17300] reiserfs: using flush barriers [ 424.356556][T17300] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.430019][T15878] XFS (loop6): Unmounting Filesystem [ 424.537501][T17300] REISERFS (device loop4): checking transaction log (loop4) [ 424.551356][ T4267] ERROR: (device loop1): diFree: numfree > numinos [ 424.551356][ T4267] [ 424.642504][T17297] set_capacity_and_notify: 3 callbacks suppressed [ 424.642521][T17297] loop5: detected capacity change from 0 to 40427 [ 424.775017][T17297] F2FS-fs (loop5): invalid crc value [ 424.829734][T17297] F2FS-fs (loop5): Found nat_bits in checkpoint [ 424.962221][T17300] REISERFS (device loop4): Using tea hash to sort names [ 424.996217][T17300] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 425.036478][T17297] F2FS-fs (loop5): Start checkpoint disabled! [ 425.075817][T17300] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 425.096134][T17297] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 425.484744][ T11] kworker/u4:1: attempt to access beyond end of device [ 425.484744][ T11] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 425.912222][T17319] loop0: detected capacity change from 0 to 32768 [ 426.261386][T17349] loop1: detected capacity change from 0 to 16 [ 426.305093][T17352] rtc_cmos 00:00: Alarms can be up to one day in the future [ 426.312514][T17349] erofs: (device loop1): mounted with root inode @ nid 36. [ 426.654695][T17336] loop6: detected capacity change from 0 to 40427 [ 426.744641][T17336] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 426.796228][T17336] F2FS-fs (loop6): invalid crc value [ 426.825091][T17336] F2FS-fs (loop6): Found nat_bits in checkpoint [ 426.996264][T17336] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 427.019336][T17343] loop4: detected capacity change from 0 to 32768 [ 427.055230][T17336] syz.6.5662: attempt to access beyond end of device [ 427.055230][T17336] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 427.159789][T17343] XFS (loop4): Mounting V5 Filesystem [ 427.288573][T17343] XFS (loop4): Ending clean mount [ 427.330659][T17395] xt_l2tp: unknown flags: 7d [ 427.431753][T15878] syz-executor: attempt to access beyond end of device [ 427.431753][T15878] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 427.480337][ T4276] XFS (loop4): Unmounting Filesystem [ 427.848321][T17408] loop5: detected capacity change from 0 to 256 [ 427.952826][T17408] FAT-fs (loop5): Directory bread(block 64) failed [ 427.984840][T17408] FAT-fs (loop5): Directory bread(block 65) failed [ 428.021418][T17408] FAT-fs (loop5): Directory bread(block 66) failed [ 428.055904][T17408] FAT-fs (loop5): Directory bread(block 67) failed [ 428.062860][T17408] FAT-fs (loop5): Directory bread(block 68) failed [ 428.116413][T17408] FAT-fs (loop5): Directory bread(block 69) failed [ 428.123413][T17408] FAT-fs (loop5): Directory bread(block 70) failed [ 428.160015][T17408] FAT-fs (loop5): Directory bread(block 71) failed [ 428.196697][T17408] FAT-fs (loop5): Directory bread(block 72) failed [ 428.216424][T17408] FAT-fs (loop5): Directory bread(block 73) failed [ 428.328504][T17421] sp0: Synchronizing with TNC [ 428.367565][T17420] [U] è [ 429.319789][T17465] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5708'. [ 429.474458][T17468] loop0: detected capacity change from 0 to 4096 [ 429.568416][T17476] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.449459][T17516] loop0: detected capacity change from 0 to 2048 [ 430.472531][T17519] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.483427][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5726'. [ 430.513025][T17516] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 430.566087][T17516] Remounting filesystem read-only [ 430.759577][T17523] loop5: detected capacity change from 0 to 4096 [ 430.782493][T17523] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 430.883242][T17531] loop0: detected capacity change from 0 to 16 [ 430.936347][T17531] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 431.292940][T17545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5733'. [ 431.357325][T17545] IPVS: Error connecting to the multicast addr [ 431.685210][ T6602] kernel write not supported for file /2280/net/rt_cache (pid: 6602 comm: kworker/1:16) [ 431.833576][T17561] loop1: detected capacity change from 0 to 4096 [ 431.866485][T17561] EXT4-fs: inline encryption not supported [ 431.896292][T17561] EXT4-fs (loop1): Test dummy encryption mode enabled [ 431.932466][T17561] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 431.952472][T17561] System zones: 0-5 [ 431.990753][T17561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 432.091048][T17549] loop4: detected capacity change from 0 to 40427 [ 432.104600][T17549] F2FS-fs (loop4): invalid crc value [ 432.115180][T17549] F2FS-fs (loop4): Found nat_bits in checkpoint [ 432.198388][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 432.214758][T17549] F2FS-fs (loop4): Start checkpoint disabled! [ 432.275656][T17549] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 432.325122][ T26] audit: type=1800 audit(432.356:283): pid=17549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5735" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 432.365788][ T6602] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 432.577143][ T6602] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 432.602586][ T6602] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.610511][ T11] kworker/u4:1: attempt to access beyond end of device [ 432.610511][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 432.664684][ T6602] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 432.691900][ T6602] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.755234][ T6602] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.812280][ T6602] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 432.827426][T17583] loop1: detected capacity change from 0 to 8192 [ 432.855527][ T6602] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.884725][T17583] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 432.889182][ T6602] usb 1-1: Product: syz [ 432.923408][ T6602] usb 1-1: Manufacturer: syz [ 432.932915][ T6602] cdc_wdm 1-1:1.0: skipping garbage [ 432.938567][ T6602] cdc_wdm 1-1:1.0: skipping garbage [ 432.957894][ T6602] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 432.963999][ T6602] cdc_wdm 1-1:1.0: Unknown control protocol [ 433.005525][T17583] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 433.015175][T17583] REISERFS (device loop1): using journaled data mode [ 433.075720][T17583] reiserfs: using flush barriers [ 433.095971][T17583] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 433.163122][T17583] REISERFS (device loop1): checking transaction log (loop1) [ 433.173083][T17573] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 433.182778][ T6602] usb 1-1: USB disconnect, device number 39 [ 433.234476][T17583] REISERFS (device loop1): Using r5 hash to sort names [ 433.260265][T17583] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 433.283020][T17602] loop5: detected capacity change from 0 to 256 [ 433.305020][T17583] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 433.353960][T17602] exfat: Deprecated parameter 'namecase' [ 433.391112][T17602] exfat: Deprecated parameter 'namecase' [ 433.465622][ T4274] Bluetooth: hci4: command 0x0405 tx timeout [ 433.482106][T17602] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 433.901543][T17621] smc: net device bond0 applied user defined pnetid SYZ2 [ 434.380242][T17635] loop6: detected capacity change from 0 to 4096 [ 434.468158][T17635] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 434.557905][T17635] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 434.628413][T17635] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 434.675828][T17635] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 434.740274][T17635] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 434.801765][T17635] ntfs: volume version 3.1. [ 434.823685][T17635] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 434.877062][T17635] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 434.911597][T17635] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 434.950589][T17635] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 435.003166][T17623] loop0: detected capacity change from 0 to 32768 [ 435.125533][T17623] XFS (loop0): Mounting V5 Filesystem [ 435.152342][T17628] loop5: detected capacity change from 0 to 32768 [ 435.199581][T17628] (syz.5.5758,17628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 435.233758][T17623] XFS (loop0): Ending clean mount [ 435.251247][T17628] (syz.5.5758,17628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 435.290699][T17665] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5769'. [ 435.349213][T17628] (syz.5.5758,17628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 435.386731][T17628] (syz.5.5758,17628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 435.436325][T17628] JBD2: Ignoring recovery information on journal [ 435.483004][ T4271] XFS (loop0): Unmounting Filesystem [ 435.521685][T17628] (syz.5.5758,17628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 435.549237][T17628] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 435.564788][T17628] (syz.5.5758,17628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 435.591160][T17628] (syz.5.5758,17628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 435.758908][T17679] netlink: 'syz.1.5773': attribute type 1 has an invalid length. [ 435.802732][T15486] ocfs2: Unmounting device (7,5) on (node local) [ 436.510989][T17706] loop1: detected capacity change from 0 to 1024 [ 436.685700][T17710] loop5: detected capacity change from 0 to 8 [ 436.692592][T17710] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 436.704724][ T11] hfsplus: b-tree write err: -5, ino 4 [ 436.751848][ T4378] udevd[4378]: incorrect cramfs checksum on /dev/loop5 [ 437.133867][ T4274] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 437.365520][ T7807] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 437.393639][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5795'. [ 437.442808][T17708] loop6: detected capacity change from 0 to 32768 [ 437.555302][ T7807] usb 2-1: Using ep0 maxpacket: 16 [ 437.564686][ T7807] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 437.620134][T17708] XFS (loop6): Mounting V5 Filesystem [ 437.652633][ T7807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.676116][ T7807] usb 2-1: Product: syz [ 437.680358][ T7807] usb 2-1: Manufacturer: syz [ 437.685605][ T7807] usb 2-1: SerialNumber: syz [ 437.707669][ T7807] r8152-cfgselector 2-1: config 0 descriptor?? [ 437.754454][T17708] XFS (loop6): Ending clean mount [ 437.768050][T17708] XFS (loop6): Quotacheck needed: Please wait. [ 437.923609][T17708] XFS (loop6): Quotacheck: Done. [ 437.931650][ T7807] r8152-cfgselector 2-1: Unknown version 0x0000 [ 437.953254][ T7807] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 438.073549][T15878] XFS (loop6): Unmounting Filesystem [ 438.167573][ T7807] usb 2-1: USB disconnect, device number 29 [ 438.997326][T17795] tipc: Enabling of bearer rejected, failed to enable media [ 439.301124][T17809] loop5: detected capacity change from 0 to 256 [ 439.539968][T17816] loop0: detected capacity change from 0 to 1024 [ 439.874560][ T11] hfsplus: b-tree write err: -5, ino 4 [ 439.948455][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.954790][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.213712][T17797] loop1: detected capacity change from 0 to 32768 [ 440.258449][T17797] [ 440.258449][T17797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.258449][T17797] [ 440.302873][T17841] loop6: detected capacity change from 0 to 1024 [ 440.355257][T17841] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 440.382342][T17841] EXT4-fs (loop6): orphan cleanup on readonly fs [ 440.424228][T17811] loop4: detected capacity change from 0 to 40427 [ 440.434021][ T4267] [ 440.434021][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.434021][ T4267] [ 440.445071][T17841] __quota_error: 22 callbacks suppressed [ 440.445086][T17841] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 440.501213][ T4267] [ 440.501213][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.501213][ T4267] [ 440.531637][T17811] F2FS-fs (loop4): invalid crc value [ 440.545455][T17841] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 440.571811][T17811] F2FS-fs (loop4): Found nat_bits in checkpoint [ 440.630277][T17841] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 440.715661][T17841] EXT4-fs (loop6): 1 truncate cleaned up [ 440.721361][T17841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 440.800122][T17811] F2FS-fs (loop4): Start checkpoint disabled! [ 440.829502][T17841] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz.6.5830: path /76/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 440.858984][T17852] loop5: detected capacity change from 0 to 256 [ 440.890989][T17811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 440.912602][T17852] exfat: Deprecated parameter 'namecase' [ 440.959211][T17852] exfat: Deprecated parameter 'namecase' [ 440.992940][ T26] audit: type=1800 audit(441.027:299): pid=17811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5820" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 441.016265][T17852] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 441.088733][T17852] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 441.148763][ T4274] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 441.158264][ T4274] Bluetooth: hci2: Injecting HCI hardware error event [ 441.169387][ T48] Bluetooth: hci2: hardware error 0x00 [ 441.269193][T15878] EXT4-fs (loop6): unmounting filesystem. [ 441.392683][T17865] Bluetooth: MGMT ver 1.22 [ 441.502167][ T4365] kworker/u4:7: attempt to access beyond end of device [ 441.502167][ T4365] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 441.521840][ T26] audit: type=1326 audit(441.557:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.1.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 441.642880][ T26] audit: type=1326 audit(441.587:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.1.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 441.670880][ T7807] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 441.730447][ T26] audit: type=1326 audit(441.587:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.1.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 441.804785][ T26] audit: type=1326 audit(441.587:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.1.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf06d9bf79 code=0x7ffc0000 [ 441.879678][ T7807] usb 1-1: Using ep0 maxpacket: 8 [ 441.895875][ T7807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.944201][ T7807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.945410][T17883] loop1: detected capacity change from 0 to 4096 [ 441.979572][ T7807] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 441.994984][ T7807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.017557][ T7807] usb 1-1: config 0 descriptor?? [ 442.090501][T17883] ntfs3: loop1: ino=3, Correct links count -> 2. [ 442.175549][T17883] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 442.231998][ T7807] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 442.417659][T17876] loop5: detected capacity change from 0 to 32768 [ 442.431788][T17863] iowarrior 1-1:0.0: Error -90 while submitting URB [ 442.452382][ T14] usb 1-1: USB disconnect, device number 40 [ 442.488431][T17876] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 442.533901][T17876] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 442.671383][T15486] ocfs2: Unmounting device (7,5) on (node local) [ 443.023591][T17910] loop4: detected capacity change from 0 to 32768 [ 443.030871][T17910] XFS: ikeep mount option is deprecated. [ 443.106768][T17910] XFS (loop4): Mounting V5 Filesystem [ 443.202764][T17910] XFS (loop4): Starting recovery (logdev: internal) [ 443.222657][ T4324] XFS (loop4): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 443.239364][ T4324] XFS (loop4): Unmount and run xfs_repair [ 443.246313][ T4324] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 443.253726][ T4324] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 443.268515][ T4324] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 443.278905][ T4324] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 443.288233][ T4324] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 443.297880][ T4324] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 443.308904][ T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 443.344981][ T4324] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 443.354004][ T4324] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 443.368795][ T4324] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 443.382588][T17910] XFS (loop4): metadata I/O error in "xfs_read_agi+0x2ac/0x650" at daddr 0x2 len 1 error 74 [ 443.393157][T17910] XFS (loop4): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 443.402686][T17910] XFS (loop4): Failed to read root inode 0x1140, error 117 [ 443.421376][T17926] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5858'. [ 443.767576][T17934] Bluetooth: MGMT ver 1.22 [ 443.808197][T17909] loop1: detected capacity change from 0 to 32768 [ 443.868204][T17909] [ 443.868204][T17909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 443.868204][T17909] [ 444.166321][ T4267] [ 444.166321][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 444.166321][ T4267] [ 444.238055][ T4267] [ 444.238055][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 444.238055][ T4267] [ 444.795009][ T6602] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 444.809805][T17972] loop1: detected capacity change from 0 to 4096 [ 444.888492][T17981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.995912][ T6602] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 445.026549][ T6602] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 445.048788][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.105619][ T6602] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 445.150497][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.164548][T17988] loop0: detected capacity change from 0 to 256 [ 445.195446][ T6602] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 445.208634][T17988] exfat: Deprecated parameter 'namecase' [ 445.234791][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.275677][ T6602] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 445.284157][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.307180][T17988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 445.370389][ T6602] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 445.401636][T17993] syz.1.5884 (17993) used obsolete PPPIOCDETACH ioctl [ 445.413944][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.455353][ T6602] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 445.463834][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.495253][ T6602] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 445.503734][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.555866][ T6602] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 445.566444][ T6602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.599477][ T6602] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 445.620821][ T6602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.640083][ T6602] usb 5-1: Product: syz [ 445.644362][ T6602] usb 5-1: Manufacturer: syz [ 445.659624][ T6602] usb 5-1: SerialNumber: syz [ 445.691749][ T6602] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 445.791484][ T6602] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 445.889998][T18003] netlink: 'syz.1.5888': attribute type 4 has an invalid length. [ 445.948131][T18003] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5888'. [ 446.073232][T17975] loop6: detected capacity change from 0 to 40427 [ 446.163601][T17975] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 446.217715][T17975] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x2 [ 446.225084][T18014] Bluetooth: MGMT ver 1.22 [ 446.252851][T17975] F2FS-fs (loop6): invalid crc value [ 446.312721][T17975] F2FS-fs (loop6): Found nat_bits in checkpoint [ 446.469230][ T4354] usb 5-1: USB disconnect, device number 28 [ 446.568356][T17975] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 446.713356][T15878] syz-executor: attempt to access beyond end of device [ 446.713356][T15878] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 447.049553][T18034] loop5: detected capacity change from 0 to 4096 [ 447.064718][ T6602] usb 5-1: Service connection timeout for: 256 [ 447.070945][ T6602] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 447.114724][T18034] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 447.125691][ T6602] ath9k_htc: Failed to initialize the device [ 447.133943][ T4354] usb 5-1: ath9k_htc: USB layer deinitialized [ 447.343235][T18015] loop0: detected capacity change from 0 to 32768 [ 447.364356][T18046] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5901'. [ 447.521276][T18015] XFS (loop0): Mounting V5 Filesystem [ 447.528861][ T11] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 447.544326][T15486] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 447.553070][T15486] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 447.688705][T18015] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 447.791326][T18015] XFS (loop0): Starting recovery (logdev: internal) [ 447.853955][T18015] XFS (loop0): Ending recovery (logdev: internal) [ 447.904349][T18015] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 447.929688][T18015] XFS (loop0): Failed to initialize disk quotas. [ 447.933500][T18068] loop6: detected capacity change from 0 to 8192 [ 448.000874][T18068] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 448.020940][ T4271] XFS (loop0): Unmounting Filesystem [ 448.065885][T18068] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 448.165646][T18068] REISERFS (device loop6): using ordered data mode [ 448.175883][T18068] reiserfs: using flush barriers [ 448.203455][T18068] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 448.243483][T18075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5909'. [ 448.252819][T18075] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5909'. [ 448.268451][T18068] REISERFS (device loop6): checking transaction log (loop6) [ 448.311950][T18068] REISERFS (device loop6): Using r5 hash to sort names [ 448.332143][T18068] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 448.681464][T18087] loop5: detected capacity change from 0 to 256 [ 448.718366][T18087] exfat: Deprecated parameter 'utf8' [ 448.753945][T18087] exfat: Deprecated parameter 'namecase' [ 448.775969][T18087] exfat: Deprecated parameter 'namecase' [ 448.781697][T18087] exfat: Deprecated parameter 'utf8' [ 448.804744][ T4354] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 448.810496][T18090] loop0: detected capacity change from 0 to 64 [ 448.834335][T18093] loop1: detected capacity change from 0 to 256 [ 448.849047][T18087] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 448.999139][ T4354] usb 5-1: Using ep0 maxpacket: 8 [ 449.015781][ T4354] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 449.069148][ T4354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.093264][ T4354] usb 5-1: config 0 descriptor?? [ 449.332441][T18104] loop1: detected capacity change from 0 to 1024 [ 449.388960][T18104] hfsplus: bad catalog entry type [ 449.463970][ T4310] hfsplus: b-tree write err: -5, ino 4 [ 449.510885][ T4354] magicmouse 0003:05AC:0269.0019: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 449.595980][T18116] netlink: 'syz.0.5928': attribute type 5 has an invalid length. [ 449.709126][ T4354] usb 5-1: USB disconnect, device number 29 [ 449.927018][T18130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5935'. [ 450.074664][ T7807] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 450.260192][T18132] loop5: detected capacity change from 0 to 40427 [ 450.267988][ T7807] usb 1-1: Using ep0 maxpacket: 32 [ 450.275795][ T7807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.287972][ T7807] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 450.298336][ T7807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.314858][T18132] F2FS-fs (loop5): invalid crc value [ 450.323026][ T7807] usb 1-1: config 0 descriptor?? [ 450.335298][T18132] F2FS-fs (loop5): Found nat_bits in checkpoint [ 450.418046][T18132] F2FS-fs (loop5): Start checkpoint disabled! [ 450.456464][T18132] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 450.548267][ T26] audit: type=1326 audit(450.587:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 450.639259][ T26] audit: type=1326 audit(450.617:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 450.691859][ T26] audit: type=1326 audit(450.617:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 450.738459][ T7807] elo 0003:04E7:0009.001A: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 450.754578][ T26] audit: type=1326 audit(450.617:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 450.829832][ T26] audit: type=1326 audit(450.627:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 450.862110][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5945'. [ 450.938311][ T7807] usb 1-1: USB disconnect, device number 41 [ 451.010419][T18154] fido_id[18154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 451.061889][T18160] loop4: detected capacity change from 0 to 64 [ 451.097461][T18160] hfs: unable to locate alternate MDB [ 451.142747][T18160] hfs: continuing without an alternate MDB [ 451.225554][T18160] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 451.261571][T18165] loop5: detected capacity change from 0 to 1024 [ 451.279553][T18165] EXT4-fs: Invalid uid value -1 [ 451.342072][T18166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.568525][ T26] audit: type=1326 audit(451.607:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 451.641100][ T26] audit: type=1326 audit(451.617:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 451.652744][T18170] hfsplus: walked past end of dir [ 451.723405][ T26] audit: type=1326 audit(451.617:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 451.824495][ T26] audit: type=1326 audit(451.627:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 451.878431][ T26] audit: type=1326 audit(451.627:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619bf79 code=0x7ffc0000 [ 452.035168][T18189] EXT4-fs: Ignoring removed nobh option [ 452.142791][T18189] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.5961: invalid block [ 452.189699][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5964'. [ 452.225249][T18189] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5961: invalid indirect mapped block 10 (level 1) [ 452.257129][T18189] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5961: invalid indirect mapped block 8 (level 1) [ 452.314903][T18189] EXT4-fs (loop4): 1 truncate cleaned up [ 452.320952][T18189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 452.553388][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 452.683581][T18213] set_capacity_and_notify: 3 callbacks suppressed [ 452.683599][T18213] loop5: detected capacity change from 0 to 1024 [ 452.786845][T18213] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.5973: lblock 2 mapped to illegal pblock 2 (length 1) [ 452.900480][T18223] device bond_slave_0 entered promiscuous mode [ 452.906839][T18223] device bond_slave_1 entered promiscuous mode [ 452.913115][T18223] device netdevsim0 entered promiscuous mode [ 452.930424][T18213] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.5973: lblock 0 mapped to illegal pblock 48 (length 1) [ 452.950187][T18213] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.5973: Failed to acquire dquot type 0 [ 452.971358][T18223] device macsec1 entered promiscuous mode [ 452.978030][T18213] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 452.994885][T18223] device bond0 entered promiscuous mode [ 453.002901][T18213] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.5973: mark_inode_dirty error [ 453.041465][T18223] device bond0 left promiscuous mode [ 453.047311][T18213] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 453.051424][T18223] device bond_slave_0 left promiscuous mode [ 453.066005][T18223] device bond_slave_1 left promiscuous mode [ 453.072262][T18223] device netdevsim0 left promiscuous mode [ 453.072662][T18213] EXT4-fs (loop5): 1 orphan inode deleted [ 453.082101][T18217] loop1: detected capacity change from 0 to 32768 [ 453.095018][ T11] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.127196][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 453.140171][T18229] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.5981'. [ 453.145641][T18213] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 453.239373][T18217] JBD2: Ignoring recovery information on journal [ 453.272611][T15486] EXT4-fs (loop5): unmounting filesystem. [ 453.291766][T15486] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 453.368347][T15486] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 453.403294][T18217] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 453.464946][T15486] EXT4-fs error (device loop5): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 453.789619][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 454.389871][T18273] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6000'. [ 454.425936][T18273] nbd: couldn't find device at index 64 [ 454.636174][T18284] loop0: detected capacity change from 0 to 8 [ 454.711398][T18284] SQUASHFS error: xz decompression failed, data probably corrupt [ 454.735121][T18284] SQUASHFS error: Failed to read block 0x108: -5 [ 454.741575][T18284] SQUASHFS error: Unable to read metadata cache entry [106] [ 454.813517][T18284] SQUASHFS error: Unable to read inode 0x11f [ 455.319022][T18280] loop4: detected capacity change from 0 to 32768 [ 455.429948][T18280] XFS (loop4): Mounting V5 Filesystem [ 455.547838][T18280] XFS (loop4): Ending clean mount [ 455.574021][T18280] XFS (loop4): Quotacheck needed: Please wait. [ 455.579654][T18323] loop1: detected capacity change from 0 to 512 [ 455.649257][T18280] XFS (loop4): Quotacheck: Done. [ 455.660535][T18292] loop6: detected capacity change from 0 to 32768 [ 455.676623][T18321] loop0: detected capacity change from 0 to 8192 [ 455.687967][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 455.687982][ T26] audit: type=1800 audit(455.728:314): pid=18280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6005" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 455.798306][T18323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 455.817526][ T4276] XFS (loop4): Unmounting Filesystem [ 455.837744][T18292] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 455.913190][T18292] XFS (loop6): Mounting V5 Filesystem [ 456.119545][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 456.260884][T18292] XFS (loop6): Ending clean mount [ 456.280305][T18292] XFS (loop6): Quotacheck needed: Please wait. [ 456.417209][T18292] XFS (loop6): Quotacheck: Done. [ 456.470223][T18343] loop0: detected capacity change from 0 to 128 [ 456.532158][T18343] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 456.574285][T18343] hpfs: filesystem error: improperly stopped [ 456.580335][T18343] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 456.665313][T18343] hpfs: You really don't want any checks? You are crazy... [ 456.707578][T18343] hpfs: hpfs_map_sector(): read error [ 456.744230][T18343] hpfs: code page support is disabled [ 456.749781][T18343] hpfs: hpfs_map_4sectors(): unaligned read [ 456.847650][T18343] hpfs: hpfs_map_4sectors(): unaligned read [ 456.853731][T18343] hpfs: filesystem error: unable to find root dir [ 456.907271][T18353] loop4: detected capacity change from 0 to 2048 [ 456.946207][T15878] XFS (loop6): Unmounting Filesystem [ 456.964414][T18353] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 457.000868][T18353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.346947][T18363] loop0: detected capacity change from 0 to 128 [ 457.650957][T18345] ERROR: (device loop1): dtSearch: stack overrun! [ 457.650957][T18345] [ 457.676443][T18372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6038'. [ 457.700999][T18345] ERROR: (device loop1): remounting filesystem as read-only [ 457.719954][T18345] btstack dump: [ 457.723930][T18345] bn = 0, index = 0 [ 457.733220][T18345] bn = 72c, index = 96 [ 457.750903][T18372] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.779391][T18345] bn = 0, index = 0 [ 457.790703][T18345] bn = 72c, index = 96 [ 457.809801][T18345] bn = 0, index = 0 [ 457.823962][T18372] device bridge_slave_1 left promiscuous mode [ 457.838373][T18372] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.858808][T18345] bn = 72c, index = 96 [ 457.863014][T18345] bn = 0, index = 0 [ 457.880448][T18345] bn = 0, index = 0 [ 458.197514][T18385] set_capacity_and_notify: 2 callbacks suppressed [ 458.197531][T18385] loop5: detected capacity change from 0 to 4096 [ 458.269331][T18385] NILFS (loop5): invalid segment: Checksum error in segment payload [ 458.286138][T18385] NILFS (loop5): trying rollback from an earlier position [ 458.328784][T18385] NILFS (loop5): recovery complete [ 458.370475][T18396] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.367781][T18440] loop0: detected capacity change from 0 to 512 [ 459.405769][T18440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 459.451942][T18440] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.6069: invalid size [ 459.466902][T18440] EXT4-fs (loop0): Remounting filesystem read-only [ 459.467014][ T14] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 459.494115][ T7807] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 459.517041][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 459.574230][ T7972] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 459.666270][ T14] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 459.674773][ T7807] usb 6-1: Using ep0 maxpacket: 16 [ 459.680293][ T14] usb 5-1: config 0 has no interface number 0 [ 459.687209][ T14] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 459.698781][ T14] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 459.710603][ T14] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 459.710725][ T7807] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 459.730734][ T14] usb 5-1: config 0 interface 2 has no altsetting 0 [ 459.737799][ T7807] usb 6-1: config 0 has no interface number 0 [ 459.744193][ T7807] usb 6-1: config 0 interface 48 has no altsetting 0 [ 459.752543][ T14] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 459.761792][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.770113][ T14] usb 5-1: Product: syz [ 459.774438][ T7972] usb 2-1: Using ep0 maxpacket: 8 [ 459.780173][ T7807] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 459.789541][ T14] usb 5-1: Manufacturer: syz [ 459.794832][ T7807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.802910][ T7807] usb 6-1: Product: syz [ 459.807315][ T14] usb 5-1: SerialNumber: syz [ 459.812327][ T7972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.823677][ T7972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.834811][ T14] usb 5-1: config 0 descriptor?? [ 459.840315][T18428] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 459.840550][ T7807] usb 6-1: Manufacturer: syz [ 459.851437][T18428] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 459.852240][ T7972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.874301][ T7807] usb 6-1: SerialNumber: syz [ 459.879799][ T7972] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 459.889847][ T7807] usb 6-1: config 0 descriptor?? [ 459.895134][ T7972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.911384][ T7972] usb 2-1: config 0 descriptor?? [ 460.111742][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.123624][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.145121][ T48] Bluetooth: hci1: Unknown advertising packet type: 0xd49b [ 460.145197][ T48] Bluetooth: hci1: Unknown advertising packet type: 0x1bb5 [ 460.153308][ T48] Bluetooth: hci1: adv larger than maximum supported [ 460.158926][ T14] usb 6-1: USB disconnect, device number 7 [ 460.163178][ T48] Bluetooth: hci1: Malformed LE Event: 0x0d [ 460.321217][ T4354] usb 5-1: USB disconnect, device number 30 [ 460.324205][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.349850][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.360260][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.367634][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.376175][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.383334][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.391042][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.398448][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.406236][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.413396][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.420643][ T7972] logitech 0003:046D:C293.001B: unknown main item tag 0x0 [ 460.431296][ T7972] logitech 0003:046D:C293.001B: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 460.442714][ T7972] logitech 0003:046D:C293.001B: no inputs found [ 460.542172][ T4354] usb 2-1: USB disconnect, device number 30 [ 460.974205][ T6601] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 461.168088][ T6601] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 461.201322][ T6601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.228941][ T6601] usb 1-1: Product: syz [ 461.233153][ T6601] usb 1-1: Manufacturer: syz [ 461.264004][ T6601] usb 1-1: SerialNumber: syz [ 461.276873][T18468] netlink: 'syz.4.6081': attribute type 15 has an invalid length. [ 461.287163][ T6601] usb 1-1: config 0 descriptor?? [ 461.334501][ T6601] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 461.337029][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6082'. [ 461.373474][ T6601] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.407751][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6082'. [ 461.412735][ T6601] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 461.438661][ T6601] usb 1-1: media controller created [ 461.447195][T18470] netlink: 'syz.1.6082': attribute type 15 has an invalid length. [ 461.478752][ T6601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.697487][ T6601] DVB: Unable to find symbol mt352_attach() [ 461.818185][T18462] loop5: detected capacity change from 0 to 32768 [ 461.854887][ T6601] DVB: Unable to find symbol nxt6000_attach() [ 461.868493][ T6601] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 461.879431][T18462] ialloc: diAlloc returned -17! [ 461.928389][ T6601] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 461.990176][ T6601] dvb-usb: schedule remote query interval to 1000 msecs. [ 462.012580][ T6601] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 462.047974][ T6601] dvb-usb: bulk message failed: -22 (7/0) [ 462.055874][ T6601] dvb-usb: bulk message failed: -22 (7/0) [ 462.072383][ T6601] usb 1-1: USB disconnect, device number 42 [ 462.194631][ T6601] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 462.200703][T18494] loop0: detected capacity change from 0 to 64 [ 462.277831][T18494] hfs: bad catalog entry type 0 [ 462.525438][T18500] devtmpfs: Too few inodes for current use [ 463.071704][T18528] loop4: detected capacity change from 0 to 164 [ 463.409595][ T26] audit: type=1326 audit(463.448:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.6.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453599bf79 code=0x7ffc0000 [ 463.472469][ T26] audit: type=1326 audit(463.448:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.6.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453599bf79 code=0x7ffc0000 [ 463.564066][ T26] audit: type=1326 audit(463.448:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.6.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f453599bf79 code=0x7ffc0000 [ 463.630594][ T26] audit: type=1326 audit(463.448:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.6.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453599bf79 code=0x7ffc0000 [ 463.738677][ T14] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 463.779808][T18520] loop1: detected capacity change from 0 to 32768 [ 463.955879][ T14] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 463.984932][ T14] usb 6-1: config 0 has no interface number 0 [ 463.991184][ T14] usb 6-1: config 0 interface 29 has no altsetting 0 [ 464.021353][T18520] blkno = 0, nblocks = 40 [ 464.026691][T18520] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 464.026691][T18520] [ 464.063448][ T14] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 464.095623][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.128663][ T14] usb 6-1: Product: syz [ 464.129062][T18556] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 464.154832][ T14] usb 6-1: Manufacturer: syz [ 464.180399][ T4267] BUG: Bad page state in process syz-executor pfn:605c3 [ 464.185772][ T14] usb 6-1: SerialNumber: syz [ 464.199263][ T4267] page:ffffea00018170c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x605c3 [ 464.222494][ T4267] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 464.245669][ T14] usb 6-1: config 0 descriptor?? [ 464.269984][ T4267] raw: 00fff18000002046 ffffea0001cb6488 ffffc90003e57960 0000000000000000 [ 464.304855][ T4267] raw: 0000000000000004 ffff88802e65d000 00000000ffffffff 0000000000000000 [ 464.323430][ T4267] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 464.332505][ T4267] page_owner tracks the page as allocated [ 464.349690][ T4267] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 18520, tgid 18519 (syz.1.6107), ts 463800708326, free_ts 463593254626 [ 464.369536][ T4267] post_alloc_hook+0x173/0x1a0 [ 464.374397][ T4267] get_page_from_freelist+0x1a1e/0x1ab0 [ 464.380094][ T4267] __alloc_pages+0x1ec/0x4f0 [ 464.386138][ T4267] folio_alloc+0x1c/0x60 [ 464.390682][ T4267] filemap_alloc_folio+0xdb/0x480 [ 464.395792][ T4267] do_read_cache_folio+0x1bb/0x760 [ 464.401078][ T4267] do_read_cache_page+0x32/0x220 [ 464.406106][ T4267] __get_metapage+0x316/0xfa0 [ 464.410929][ T4267] dbAllocCtl+0xd4/0x9b0 [ 464.415283][ T4267] dbAllocAG+0x1e7/0xfe0 [ 464.419652][ T4267] dbDiscardAG+0x2c5/0x8e0 [ 464.424372][ T4267] jfs_ioc_trim+0x42b/0x660 [ 464.428948][ T4267] jfs_ioctl+0x28f/0x3b0 [ 464.433414][ T4267] __se_sys_ioctl+0xfa/0x170 [ 464.438648][ T4267] do_syscall_64+0x4c/0xa0 [ 464.443115][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.449438][ T4267] page last free stack trace: [ 464.454435][ T4267] free_unref_page_prepare+0x8b4/0x9a0 [ 464.460001][ T4267] free_unref_page_list+0xbb/0x8e0 [ 464.465405][ T4267] release_pages+0x1fa6/0x2220 [ 464.470502][ T4267] tlb_flush_mmu+0x105/0x220 [ 464.475428][ T4267] tlb_finish_mmu+0xbd/0x1c0 [ 464.480181][ T4267] exit_mmap+0x384/0x960 [ 464.484650][ T14] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 464.493775][ T4267] __mmput+0x118/0x3c0 [ 464.498054][ T4267] exit_mm+0x1fe/0x2d0 [ 464.502243][ T4267] do_exit+0x905/0x2480 [ 464.506867][ T4267] do_group_exit+0x217/0x2d0 [ 464.511609][ T4267] __x64_sys_exit_group+0x3b/0x40 [ 464.516773][ T4267] do_syscall_64+0x4c/0xa0 [ 464.521689][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.528578][ T4267] Modules linked in: [ 464.532583][ T4267] CPU: 0 PID: 4267 Comm: syz-executor Not tainted syzkaller #0 [ 464.540146][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 464.550305][ T4267] Call Trace: [ 464.553586][ T4267] [ 464.556673][ T4267] dump_stack_lvl+0x188/0x24e [ 464.561392][ T4267] ? show_regs_print_info+0x12/0x12 [ 464.566601][ T4267] ? swiotlb_print_info+0x60/0x60 [ 464.571631][ T4267] bad_page+0x14b/0x170 [ 464.575889][ T4267] free_unref_page_prepare+0x42a/0x9a0 [ 464.581612][ T4267] ? percpu_ref_put+0x19/0x180 [ 464.586377][ T4267] free_unref_page_list+0xbb/0x8e0 [ 464.591550][ T4267] release_pages+0x1fa6/0x2220 [ 464.596326][ T4267] ? lru_cache_disable+0x30/0x30 [ 464.601293][ T4267] ? mlock_page_drain_local+0x75/0x490 [ 464.606744][ T4267] ? mlock_page_drain_local+0x75/0x490 [ 464.612235][ T4267] ? mlock_page_drain_local+0x289/0x490 [ 464.617788][ T4267] __pagevec_release+0x6d/0xe0 [ 464.622554][ T4267] truncate_inode_pages_range+0x352/0x1090 [ 464.628363][ T4267] ? mapping_evict_folio+0x520/0x520 [ 464.633651][ T4267] ? jfs_alloc_inode+0x60/0x60 [ 464.638409][ T4267] ? evict+0x834/0x8d0 [ 464.642492][ T4267] ? do_raw_spin_unlock+0x11d/0x230 [ 464.647710][ T4267] ? _raw_spin_unlock+0x24/0x40 [ 464.652662][ T4267] ? iput+0x768/0x980 [ 464.656730][ T4267] dbUnmount+0x105/0x170 [ 464.660979][ T4267] jfs_umount+0x1fa/0x360 [ 464.665309][ T4267] jfs_put_super+0x88/0x190 [ 464.669812][ T4267] ? jfs_free_inode+0x20/0x20 [ 464.674482][ T4267] generic_shutdown_super+0x130/0x340 [ 464.679850][ T4267] kill_block_super+0x7c/0xe0 [ 464.684523][ T4267] deactivate_locked_super+0x93/0xf0 [ 464.689799][ T4267] cleanup_mnt+0x42c/0x4b0 [ 464.694227][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 464.699506][ T4267] task_work_run+0x1d0/0x260 [ 464.704099][ T4267] ? task_work_cancel+0x220/0x220 [ 464.709124][ T4267] ? exit_to_user_mode_loop+0x3b/0x110 [ 464.714583][ T4267] exit_to_user_mode_loop+0xe6/0x110 [ 464.719866][ T4267] exit_to_user_mode_prepare+0xee/0x180 [ 464.725502][ T4267] syscall_exit_to_user_mode+0x16/0x40 [ 464.730953][ T4267] do_syscall_64+0x58/0xa0 [ 464.735366][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 464.740038][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 464.744709][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.750595][ T4267] RIP: 0033:0x7faf06d9d1d7 [ 464.755021][ T4267] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 464.774619][ T4267] RSP: 002b:00007ffc99b3d588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 464.783024][ T4267] RAX: 0000000000000000 RBX: 00007faf06e31c3b RCX: 00007faf06d9d1d7 [ 464.790985][ T4267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc99b3d640 [ 464.798954][ T4267] RBP: 00007ffc99b3d640 R08: 00007ffc99b3e640 R09: 00000000ffffffff [ 464.806917][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc99b3e6d0 [ 464.814890][ T4267] R13: 00007faf06e31c3b R14: 000000000007146a R15: 00007ffc99b3e710 [ 464.822875][ T4267] [ 464.828581][ T4267] Disabling lock debugging due to kernel taint [ 464.834070][ T14] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 464.840267][ T4267] BUG: Bad page state in process syz-executor pfn:72d92 [ 464.847648][ T14] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 464.851528][ T4267] page:ffffea0001cb6480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x72d92 [ 464.863686][ T14] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 464.868603][ T4267] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 464.886683][ T4267] raw: 00fff18000002046 ffffea00008dc288 ffffc90003e57960 0000000000000000 [ 464.895880][ T4267] raw: 0000000000000003 ffff88802e65dd90 00000000ffffffff 0000000000000000 [ 464.906117][ T4267] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 464.913867][ T4267] page_owner tracks the page as allocated [ 464.919725][ T4267] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 18520, tgid 18519 (syz.1.6107), ts 463822624281, free_ts 463593241437 [ 464.939752][ T4267] post_alloc_hook+0x173/0x1a0 [ 464.950906][ T4267] get_page_from_freelist+0x1a1e/0x1ab0 [ 464.957182][ T4267] __alloc_pages+0x1ec/0x4f0 [ 464.961963][ T4267] folio_alloc+0x1c/0x60 [ 464.967973][ T4267] filemap_alloc_folio+0xdb/0x480 [ 464.973092][ T4267] do_read_cache_folio+0x1bb/0x760 [ 464.978501][ T4267] do_read_cache_page+0x32/0x220 [ 464.983523][ T4267] __get_metapage+0x316/0xfa0 [ 464.990261][ T4267] dbAdjCtl+0x144/0xa20 [ 465.000525][ T4267] dbAllocDmapLev+0x209/0x3c0 [ 465.007180][ T4267] dbAllocCtl+0x148/0x9b0 [ 465.011798][ T4267] dbAllocAG+0x1e7/0xfe0 [ 465.016160][ T4267] dbDiscardAG+0x2c5/0x8e0 [ 465.020580][ T4267] jfs_ioc_trim+0x42b/0x660 [ 465.025118][ T4267] jfs_ioctl+0x28f/0x3b0 [ 465.029363][ T4267] __se_sys_ioctl+0xfa/0x170 [ 465.034059][ T4267] page last free stack trace: [ 465.041524][ T4267] free_unref_page_prepare+0x8b4/0x9a0 [ 465.047590][ T4267] free_unref_page_list+0xbb/0x8e0 [ 465.052878][ T4267] release_pages+0x1fa6/0x2220 [ 465.057805][ T4267] tlb_flush_mmu+0x105/0x220 [ 465.062466][ T4267] tlb_finish_mmu+0xbd/0x1c0 [ 465.067102][ T4267] exit_mmap+0x384/0x960 [ 465.071443][ T4267] __mmput+0x118/0x3c0 [ 465.075621][ T4267] exit_mm+0x1fe/0x2d0 [ 465.079873][ T4267] do_exit+0x905/0x2480 [ 465.084167][ T4267] do_group_exit+0x217/0x2d0 [ 465.088779][ T4267] __x64_sys_exit_group+0x3b/0x40 [ 465.093874][ T4267] do_syscall_64+0x4c/0xa0 [ 465.098294][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.104370][ T4267] Modules linked in: [ 465.108288][ T4267] CPU: 1 PID: 4267 Comm: syz-executor Tainted: G B syzkaller #0 [ 465.113902][ T14] peak_usb: probe of 6-1:0.29 failed with error -22 [ 465.117282][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 465.117294][ T4267] Call Trace: [ 465.117301][ T4267] [ 465.117308][ T4267] dump_stack_lvl+0x188/0x24e [ 465.145002][ T4267] ? show_regs_print_info+0x12/0x12 [ 465.150212][ T4267] ? swiotlb_print_info+0x60/0x60 [ 465.155274][ T4267] bad_page+0x14b/0x170 [ 465.159426][ T4267] free_unref_page_prepare+0x42a/0x9a0 [ 465.164885][ T4267] ? percpu_ref_put+0x19/0x180 [ 465.169644][ T4267] free_unref_page_list+0xbb/0x8e0 [ 465.174771][ T4267] release_pages+0x1fa6/0x2220 [ 465.179561][ T4267] ? lru_cache_disable+0x30/0x30 [ 465.184494][ T4267] ? mlock_page_drain_local+0x75/0x490 [ 465.189971][ T4267] ? mlock_page_drain_local+0x75/0x490 [ 465.195416][ T4267] ? mlock_page_drain_local+0x289/0x490 [ 465.200956][ T4267] __pagevec_release+0x6d/0xe0 [ 465.205713][ T4267] truncate_inode_pages_range+0x352/0x1090 [ 465.211515][ T4267] ? mapping_evict_folio+0x520/0x520 [ 465.216813][ T4267] ? jfs_alloc_inode+0x60/0x60 [ 465.221586][ T4267] ? evict+0x834/0x8d0 [ 465.225654][ T4267] ? do_raw_spin_unlock+0x11d/0x230 [ 465.230870][ T4267] ? _raw_spin_unlock+0x24/0x40 [ 465.235710][ T4267] ? iput+0x768/0x980 [ 465.239679][ T4267] dbUnmount+0x105/0x170 [ 465.243915][ T4267] jfs_umount+0x1fa/0x360 [ 465.248239][ T4267] jfs_put_super+0x88/0x190 [ 465.252730][ T4267] ? jfs_free_inode+0x20/0x20 [ 465.257393][ T4267] generic_shutdown_super+0x130/0x340 [ 465.262837][ T4267] kill_block_super+0x7c/0xe0 [ 465.267503][ T4267] deactivate_locked_super+0x93/0xf0 [ 465.272772][ T4267] cleanup_mnt+0x42c/0x4b0 [ 465.277229][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 465.282439][ T4267] task_work_run+0x1d0/0x260 [ 465.287028][ T4267] ? task_work_cancel+0x220/0x220 [ 465.292054][ T4267] ? exit_to_user_mode_loop+0x3b/0x110 [ 465.297505][ T4267] exit_to_user_mode_loop+0xe6/0x110 [ 465.302781][ T4267] exit_to_user_mode_prepare+0xee/0x180 [ 465.308319][ T4267] syscall_exit_to_user_mode+0x16/0x40 [ 465.313764][ T4267] do_syscall_64+0x58/0xa0 [ 465.318185][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 465.322861][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 465.327525][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.333410][ T4267] RIP: 0033:0x7faf06d9d1d7 [ 465.337908][ T4267] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 465.357506][ T4267] RSP: 002b:00007ffc99b3d588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 465.365996][ T4267] RAX: 0000000000000000 RBX: 00007faf06e31c3b RCX: 00007faf06d9d1d7 [ 465.373957][ T4267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc99b3d640 [ 465.381915][ T4267] RBP: 00007ffc99b3d640 R08: 00007ffc99b3e640 R09: 00000000ffffffff [ 465.389882][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc99b3e6d0 [ 465.397857][ T4267] R13: 00007faf06e31c3b R14: 000000000007146a R15: 00007ffc99b3e710 [ 465.405838][ T4267] [ 465.408958][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.444452][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6125'. [ 465.452650][ T14] usb 6-1: USB disconnect, device number 8