last executing test programs: 7m54.619966332s ago: executing program 0 (id=3388): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="4f3bf583db157556fecc11ce8b9dd7ff0000000000000021d6958c7800e1e1f14f1b257f47", 0x25}, {&(0x7f00000000c0)='(', 0x1}], 0x2) 7m54.417878138s ago: executing program 0 (id=3392): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random="0000dc00"}) 7m54.237559254s ago: executing program 0 (id=3395): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) 7m54.080095529s ago: executing program 0 (id=3398): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m53.468273249s ago: executing program 0 (id=3406): r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) 7m52.850456359s ago: executing program 0 (id=3415): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 7m52.430422952s ago: executing program 32 (id=3415): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 3.374416933s ago: executing program 1 (id=10414): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) 2.411301234s ago: executing program 1 (id=10425): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4048004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.113887993s ago: executing program 2 (id=10429): add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.981393367s ago: executing program 5 (id=10431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x178, r1, 0x1, 0x4, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xfffffffffffffd61, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.952738208s ago: executing program 1 (id=10432): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) connect$inet(r0, &(0x7f0000001040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) 1.917218079s ago: executing program 3 (id=10433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) 1.792946853s ago: executing program 5 (id=10434): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010000", 0x7) 1.792369263s ago: executing program 2 (id=10435): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write(r0, &(0x7f0000000240)="240000005a001fde4907f4b900238400d9cf934d08000500020100020800038005004008", 0x24) 1.749600115s ago: executing program 4 (id=10436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2c, 0xffffffff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x28}}, 0x80) 1.600881039s ago: executing program 2 (id=10437): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 1.58383836s ago: executing program 4 (id=10438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002440), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000000)={0x3c, r1, 0x3, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x7e4e77d786546189}, 0x0) 1.513620732s ago: executing program 5 (id=10439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 1.408799345s ago: executing program 4 (id=10440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.317346158s ago: executing program 3 (id=10441): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae93700000000fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000001cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002580)=ANY=[@ANYBLOB="1600000002000000"], 0x0) 1.294861029s ago: executing program 4 (id=10442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x20) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x100, 0x2b}) 1.183426552s ago: executing program 5 (id=10443): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x1, 0x477, &(0x7f0000001040)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) 1.129591894s ago: executing program 2 (id=10444): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000400)={0xb0, 0x0, 0x3, [{{0x0, 0x2, 0x6, 0x9eae00000000000, 0xffff, 0x1ff, {0x5, 0x1, 0x6, 0x0, 0x7, 0x7, 0xfffffffd, 0x1, 0x0, 0x6000, 0x59b1, r1, r2, 0x5, 0x2}}, {0x1, 0x0, 0x6, 0x3, 'source'}}]}, 0xb0) 1.129397995s ago: executing program 4 (id=10445): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x10040, &(0x7f00000083c0)={[{@utf8}, {@utf8no}, {@fat=@quiet}, {@fat=@sys_immutable}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@gid}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}]}, 0x26, 0x347, &(0x7f00000006c0)="$eJzs3T9oJNUfAPDvZpJsLnC/TfGDQ6vVTpDjErHQKuE44TCFniz+awxezj/Z9SCLC7HIXhrFUrERtLK7QsurxULEzsLWE+RUbLzu4IIjuzvZ2dndmATcPT0/nyJ8+b73nffezJCZJOTtK6uxdXkurty+fSsWFkoxu3p+Ne6UYilmIomeawEA3E/upGn8nvYUGpJxvT9cPIjmpzA3AGAyus//107nifK9nA0AMA2H/vxf9MzY7NWJTQsAmKCR5//DheahX/PPjv+zAADwr/Lciy89vbYecalaXYhovNeqtWrxZN6+diXeiHpsxrmoxH5E70Wh97bQ+frUxfUL56odPy9FrVPRqkU02q1a701hLenWl2M5KrGU1af9+qRTv9ytr0bEtXZ3/GiUWrW5WMzG/2ExNmMlKvH/kfqIi+sXVqrZAWqNg/p2xF4sHCyiM/+zUYnvXo2rUY/L0anN57+7XK2eT9cL9a3r5W6/I8xN5KIAAAAAAAAAAAAAAAAAAAAAAHDfO1vtW+rvf5M22q13Lw13WCrsj1PrNWf7A+3FYlRiPy0f7M7zfjK8P1Bxf55WbTZm7unKAQAAAAAAAAAAAAAAAAAA4J+juTMfG/X65nZz552twaA9kHnrm8+/OhXDfd5M8kzM9g5X6JPlYqAqiX552i9Pk0KfLEgi8s7Xb2THmikMUe6vYqS8E5RHmkrZnDbq9dMP/fTJuKo/8kwSI6elGJSy8QeaGv/rpf6i6vBg5Yg+N9M0Pax89+PRqihFzI5cuL8j+PrW6w881jzzeDfzZbbpwyOPVp6/+dFnv25t1CM7NfX6/HZzPz3JEKudsvwS5PdGKTvPB2f96APu5Zm97ebORvL9by88+MG3Q52T8fdPOph5+/CxvhjOzPeCzjSPs+S5MTf/+ODlu/279+QX7synqxs3dn/85bhVA98kbNQBAAAAAAAAAAAAAAAAAABTMfC/4ifwxLOTmxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATF/++f8Dwd5I5jjB3XaMNpU3t5uHDn5qqksFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/7M8AAAD//8jnd14=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 1.009476838s ago: executing program 2 (id=10446): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x8) 927.238581ms ago: executing program 3 (id=10447): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) 904.344471ms ago: executing program 1 (id=10448): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30}, {0x4, 0x4}, {0x69}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24044854}, 0x0) 700.683198ms ago: executing program 3 (id=10449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x22c, r1, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_PEERS={0x204, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x1d8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xfffffd94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0xffffffffffffff36, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 586.970372ms ago: executing program 1 (id=10450): timerfd_create(0x8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x229) 537.549363ms ago: executing program 5 (id=10451): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0x0, 'ip6gretap0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x11}, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x30, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0x0, 'ip6gre0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x29, 0x0, 0x25}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) 388.625288ms ago: executing program 3 (id=10452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x1c}}, 0x8800) 301.746161ms ago: executing program 1 (id=10453): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000180)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0xffffffcd, 0x0, &(0x7f00000005c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) 241.972233ms ago: executing program 4 (id=10454): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x28, {0x28, 0x23, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 181.645835ms ago: executing program 5 (id=10455): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x804810, &(0x7f0000000680)=ANY=[], 0x3, 0x2ef, &(0x7f0000000880)="$eJzs3b1PFE8cx/HP7N3B8YPwWx4MiaVKQmUUG2ODMfwZakTuTAgXTAATsZFYGmPofOgs7KyNjaU90dpoZWUP3ZqZ3T32wj7ccXAL+n4ld1luZ2a/s7u3+51LlhGAf9atxR/vr/2yLyNVVJF0Q/Ik1aWqpHOaqT9a21zZbDUbeQ1VXA37MgprmkNllteaaVVtPVcj4tu/qhpLfoaTEQRB8PNbJb/M/wMLByVx3/4UnjTsLgeR+gBjOknbZQdQMrOvfT3WeNlxAADKZe//tTDxt3nAWJS/e540G932XX5wdu7/+Vnr/uACOZUS9383ygqMPb5ul5mD8Z4bwtn1XjxKzGkxc82QwkSyI8E0RaNKF4s38mCl1by8/LDV8PRMC5FEsWn33lAySVVBtBdygk1R3PcsrsdezfZhPiP+qaNs8VXvobTtBWbX3DW+3qrRzv+qgdsj7kj5Lm6/XSGM/0p2i6P2zRhXKqOXE24j56Mt6NOHLnpZTx+RtOOciE/dp+GHfhznzlBOrUl1/qwQ9u5qdu9cranUWvNp5RN7cjpZK7pyRmdz9vZ69nwnGWkh89LYgr/1UYuJ/N+ze3vWFYh3e06QxpWMzozc/lRdSb+LwLyMTfEr0NHUcte+0H1d1/jG1pPVpVarud7twufvPRQ+roU378KFSj/txD0/tKqqfiMMhsOmT2on9B9hNwvxCTPAgxsfk4GfUSUvqO92KhrWanzNPLbAosOxvbrUCpfSE6WRfq5LOEUSl8eZ22UHgzLYa4gJx38ukw+zuptunf36+y5PryktTw+KGnctvr6zGw4fEmODg2R10r3/19MIbjR7BJfoQ+6Y6+KcdClni186m/WjOP8SZlFfdY/f/wEAAAAAAAAAAAAAAAAAAM6awgcD9oL1ja3o8ZYjPhlSchcBAAAAAAAAAAAAAAAAAAAAADjzsub/rcZzZBbM/xs/GZAx/+9cx3/1Lp7/d8E2lDH/b/4ktQB69icAAP//PDxxKA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 57.551368ms ago: executing program 3 (id=10456): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002"], 0x0) 0s ago: executing program 2 (id=10457): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) kernel console output (not intermixed with test programs): 07][ T4323] usb 4-1: USB disconnect, device number 32 [ 648.104828][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.219218][ T4319] usb 2-1: USB disconnect, device number 33 [ 648.609986][T22762] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8421'. [ 648.970943][T22774] tmpfs: Bad value for 'mpol' [ 649.281870][T22787] overlayfs: missing 'lowerdir' [ 649.751658][T22804] loop4: detected capacity change from 0 to 1024 [ 649.823024][T22804] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 649.902043][T22804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 650.010004][T22804] EXT4-fs (loop4): unmounting filesystem. [ 650.332988][T22827] device bridge4 entered promiscuous mode [ 650.388969][T22833] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8455'. [ 651.118011][ T8997] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 651.297940][ T8997] usb 3-1: Using ep0 maxpacket: 8 [ 651.307202][ T8997] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 651.346193][ T8997] usb 3-1: config 179 has no interface number 0 [ 651.376647][ T8997] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 651.406013][T22869] netlink: 45 bytes leftover after parsing attributes in process `syz.4.8473'. [ 651.414151][ T8997] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 651.421832][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 651.421848][ T26] audit: type=1326 audit(651.373:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22872 comm="syz.1.8474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 651.440155][ T8997] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 651.523454][ T8997] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 651.536227][ T26] audit: type=1326 audit(651.443:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22872 comm="syz.1.8474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 651.559905][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.587441][ T8997] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 651.629665][ T26] audit: type=1326 audit(651.443:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22872 comm="syz.1.8474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 651.666883][ T8997] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 651.696703][ T8997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.718703][T22849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 651.748408][ T26] audit: type=1326 audit(651.443:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22872 comm="syz.1.8474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 651.979234][T22882] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8479'. [ 652.002182][T22886] loop1: detected capacity change from 0 to 256 [ 652.094680][ T8997] usb 3-1: USB disconnect, device number 24 [ 652.100781][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 652.100834][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 653.038815][T22915] loop3: detected capacity change from 0 to 512 [ 653.041915][T22918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.071339][T22915] EXT4-fs: inline encryption not supported [ 653.129341][T22915] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 653.170871][T22915] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 653.202652][T22915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 653.408204][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 653.867879][ T8997] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 653.988397][T22953] netlink: 'syz.5.8513': attribute type 21 has an invalid length. [ 654.006658][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8513'. [ 654.087841][ T8997] usb 2-1: Using ep0 maxpacket: 8 [ 654.094880][ T8997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 654.106856][ T8997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.131299][ T8997] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.160096][ T8997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 654.218431][ T8997] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 654.237994][ T8997] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 654.247233][ T8997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.309570][ T8997] usb 2-1: config 0 descriptor?? [ 654.318370][T22938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.763223][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 654.763621][ T8997] usb 2-1: USB disconnect, device number 34 [ 654.981944][T22985] netlink: 'syz.4.8529': attribute type 6 has an invalid length. [ 655.004144][T22985] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8529'. [ 655.212156][T22993] xt_TCPMSS: Only works on TCP SYN packets [ 655.587915][ T4323] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 655.758089][ T4319] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 655.790102][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 655.815598][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 655.858043][ T4323] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 655.867160][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.907897][ T4323] usb 4-1: config 0 descriptor?? [ 655.914508][T22997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 655.928981][T22997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 655.966100][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 655.983732][ T4319] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 656.036492][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.075506][ T4319] usb 5-1: config 0 descriptor?? [ 656.084101][T23026] netlink: 'syz.5.8549': attribute type 1 has an invalid length. [ 656.084611][ T4319] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 656.131792][T23026] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8549'. [ 656.413937][ T4323] usb 4-1: USB disconnect, device number 33 [ 656.451557][T23035] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8553'. [ 656.499811][ T4319] gspca_nw80x: reg_r err -71 [ 656.504629][ T4319] nw80x: probe of 5-1:0.0 failed with error -71 [ 656.540649][ T4319] usb 5-1: USB disconnect, device number 36 [ 656.893811][T23051] netlink: 272 bytes leftover after parsing attributes in process `syz.2.8561'. [ 657.222457][T23062] netlink: 276 bytes leftover after parsing attributes in process `syz.4.8568'. [ 657.391948][T23068] gfs2: not a GFS2 filesystem [ 657.978162][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 658.148193][ T8987] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 658.337918][ T8987] usb 6-1: Using ep0 maxpacket: 8 [ 658.345259][ T8987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.378009][ T8987] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 658.407849][ T8987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.437570][ T8987] usb 6-1: config 0 descriptor?? [ 658.475406][ T8987] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 658.889103][ T8987] gspca_vc032x: reg_w err -71 [ 658.897993][ T8987] vc032x: probe of 6-1:0.0 failed with error -71 [ 658.973374][ T8987] usb 6-1: USB disconnect, device number 20 [ 659.528143][T23144] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 659.565162][T23146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8609'. [ 659.868705][T23160] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 660.079620][T23165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8619'. [ 660.107865][ T8987] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 660.320648][ T8987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 660.340120][ T8987] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 660.374734][ T8987] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 660.406274][T23177] loop5: detected capacity change from 0 to 512 [ 660.413231][ T8987] usb 2-1: config 63 has no interface number 0 [ 660.433927][T23177] EXT4-fs: Ignoring removed i_version option [ 660.441754][ T8987] usb 2-1: config 63 interface 66 has no altsetting 0 [ 660.474679][ T8987] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 660.495135][ T8987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.541677][T23177] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 660.578866][ T8987] usb 2-1: Product: syz [ 660.613592][ T8987] usb 2-1: Manufacturer: syz [ 660.645807][ T8987] usb 2-1: SerialNumber: syz [ 660.767149][T11723] EXT4-fs (loop5): unmounting filesystem. [ 660.916257][ T8987] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 660.935616][ T8987] usb 2-1: No valid video chain found. [ 660.949061][ T4319] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 660.963722][ T8987] usb 2-1: USB disconnect, device number 35 [ 661.148053][ T4319] usb 5-1: Using ep0 maxpacket: 16 [ 661.155419][ T4319] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 661.173595][ T4319] usb 5-1: config 0 has no interface number 0 [ 661.188848][ T4319] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 661.240013][ T4319] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 661.257626][ T4319] usb 5-1: config 0 interface 41 has no altsetting 0 [ 661.302797][ T4319] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 661.323026][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.332131][ T4319] usb 5-1: Product: syz [ 661.336523][ T4319] usb 5-1: Manufacturer: syz [ 661.341981][ T4319] usb 5-1: SerialNumber: syz [ 661.362124][ T4319] usb 5-1: config 0 descriptor?? [ 661.368290][T23190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 661.398798][T23190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 661.616244][T23190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 661.634248][T23190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 661.697052][T23212] loop5: detected capacity change from 0 to 128 [ 661.790725][T23214] overlayfs: missing 'lowerdir' [ 661.849720][ T4319] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 661.867401][T23192] loop3: detected capacity change from 0 to 40427 [ 661.888629][ T4319] usb 5-1: USB disconnect, device number 37 [ 662.098747][T23220] netlink: 'syz.2.8643': attribute type 21 has an invalid length. [ 662.296167][T23226] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8646'. [ 662.367572][T23224] loop3: detected capacity change from 0 to 4096 [ 662.398117][T23230] netlink: 'syz.1.8648': attribute type 21 has an invalid length. [ 662.417706][T23224] /dev/loop3: Can't open blockdev [ 663.134686][T23250] kAFS: unable to lookup cell '' [ 663.473031][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8664'. [ 663.845811][T23236] loop2: detected capacity change from 0 to 32768 [ 663.900856][T23277] netlink: 'syz.4.8671': attribute type 4 has an invalid length. [ 664.010427][T23236] XFS (loop2): Mounting V5 Filesystem [ 664.073135][T23289] netlink: 'syz.3.8673': attribute type 20 has an invalid length. [ 664.187478][T23236] XFS (loop2): Ending clean mount [ 664.213078][T23296] netlink: 'syz.5.8677': attribute type 33 has an invalid length. [ 664.221310][T23296] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8677'. [ 664.288223][ T4319] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 664.384180][ T4271] XFS (loop2): Unmounting Filesystem [ 664.498224][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 664.508625][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 664.572245][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 664.587329][ T4319] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 664.609691][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 664.637843][ T4319] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 664.676501][ T4319] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 664.706532][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.736788][ T4319] usb 5-1: config 0 descriptor?? [ 664.750269][T23284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 665.070940][T23314] overlayfs: failed to resolve './file0': -2 [ 665.233904][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 665.243238][ T6712] usb 5-1: USB disconnect, device number 38 [ 665.461910][T23324] loop2: detected capacity change from 0 to 1024 [ 665.620916][T23332] loop3: detected capacity change from 0 to 64 [ 666.034874][ T26] audit: type=1326 audit(665.993:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.4.8700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cdd9ce59 code=0x7ffc0000 [ 666.059115][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.138337][ T26] audit: type=1326 audit(665.993:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.4.8700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb6cdd9ce59 code=0x7ffc0000 [ 666.161875][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.175675][ T26] audit: type=1326 audit(665.993:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.4.8700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cdd9ce59 code=0x7ffc0000 [ 666.246632][T23353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.283684][ T26] audit: type=1326 audit(665.993:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.4.8700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cdd9ce59 code=0x7ffc0000 [ 666.307496][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.346972][T23353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.385769][T23353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.426371][T23353] device macvtap0 left promiscuous mode [ 666.455351][T23353] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 666.483700][T23353] device wlan0 left promiscuous mode [ 666.512081][T23353] device bridge1 left promiscuous mode [ 666.575194][ T8995] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 667.015564][T23375] usb usb8: usbfs: process 23375 (syz.3.8714) did not claim interface 0 before use [ 667.164743][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8717'. [ 667.458172][T23395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.658239][ T8995] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 668.017301][T23416] loop1: detected capacity change from 0 to 64 [ 668.306602][ T4321] kernel write not supported for file /input/mice (pid: 4321 comm: kworker/0:6) [ 668.858117][ T8987] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 669.078198][ T8987] usb 3-1: Using ep0 maxpacket: 16 [ 669.085625][ T8987] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 669.127827][ T8987] usb 3-1: config 0 has no interface number 0 [ 669.138423][ T8987] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 669.186790][ T8987] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 669.215737][ T8987] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 669.215770][ T8987] usb 3-1: Product: syz [ 669.215796][ T8987] usb 3-1: SerialNumber: syz [ 669.225028][ T8987] usb 3-1: config 0 descriptor?? [ 669.236946][ T8987] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input32 [ 669.470213][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.480626][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.487986][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.495234][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.518081][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.525286][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.548768][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.557057][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.568437][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.576767][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 669.594422][ T8987] usb 3-1: USB disconnect, device number 25 [ 669.619011][ T8987] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 669.738346][T23476] loop1: detected capacity change from 0 to 2048 [ 669.811232][T23476] loop1: p1 < > p3 [ 669.821686][T23476] loop1: p3 size 134217728 extends beyond EOD, truncated [ 669.967948][ T4321] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 670.180410][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 670.202105][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.240185][T17140] udevd[17140]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 670.250145][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.250196][ T4321] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 670.250223][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.285340][ T4321] usb 5-1: config 0 descriptor?? [ 670.301058][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 670.306545][ T4321] hub 5-1:0.0: USB hub found [ 670.347448][T23491] loop5: detected capacity change from 0 to 1024 [ 670.365490][T23493] netlink: 'syz.2.8771': attribute type 2 has an invalid length. [ 670.389701][T23491] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 670.408028][T23493] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8771'. [ 670.440805][T17140] udevd[17140]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 670.478874][T23491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 670.493594][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 670.506071][T23491] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.8772: missing EA_INODE flag [ 670.525674][ T4321] hub 5-1:0.0: 16 ports detected [ 670.526478][T23491] EXT4-fs (loop5): Remounting filesystem read-only [ 670.535516][ T4321] hub 5-1:0.0: insufficient power available to use all downstream ports [ 670.537506][T23491] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.8772: error while reading EA inode 11 err=-117 [ 670.560869][T23491] EXT4-fs (loop5): Remounting filesystem read-only [ 670.567667][T23491] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 670.632180][T11723] EXT4-fs (loop5): unmounting filesystem. [ 670.732825][ T4321] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 670.747827][ T4321] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 670.798138][ T4321] usbhid 5-1:0.0: can't add hid device: -71 [ 670.804191][ T4321] usbhid: probe of 5-1:0.0 failed with error -71 [ 670.898766][ T4321] usb 5-1: USB disconnect, device number 39 [ 670.927105][T23510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8779'. [ 671.161456][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8780'. [ 671.472743][T23504] loop3: detected capacity change from 0 to 32768 [ 672.006767][T23534] netlink: 'syz.2.8791': attribute type 29 has an invalid length. [ 672.023354][T23534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8791'. [ 672.034982][ T8987] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 672.138185][ T4321] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 672.235265][ T8987] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 672.254057][ T8987] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 672.258886][T23542] loop1: detected capacity change from 0 to 256 [ 672.297625][ T8987] usb 4-1: config 220 has no interface number 2 [ 672.326991][ T8987] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 672.349096][ T8987] usb 4-1: config 220 interface 0 has no altsetting 0 [ 672.356243][ T8987] usb 4-1: config 220 interface 76 has no altsetting 0 [ 672.357256][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 672.379242][ T8987] usb 4-1: config 220 interface 1 has no altsetting 0 [ 672.385339][T23542] FAT-fs (loop1): Directory bread(block 64) failed [ 672.396121][ T8987] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 672.415763][ T8987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.434444][ T8987] usb 4-1: Product: syz [ 672.439098][T23542] FAT-fs (loop1): Directory bread(block 65) failed [ 672.444544][ T4321] usb 5-1: not running at top speed; connect to a high speed hub [ 672.454637][T23542] FAT-fs (loop1): Directory bread(block 66) failed [ 672.462558][ T8987] usb 4-1: Manufacturer: syz [ 672.467291][ T8987] usb 4-1: SerialNumber: syz [ 672.475641][ T4321] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 672.477908][T23542] FAT-fs (loop1): Directory bread(block 67) failed [ 672.512562][ T4321] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 672.521266][T23542] FAT-fs (loop1): Directory bread(block 68) failed [ 672.538349][T23542] FAT-fs (loop1): Directory bread(block 69) failed [ 672.563436][ T4321] usb 5-1: config 4 has no interface number 0 [ 672.563506][T23542] FAT-fs (loop1): Directory bread(block 70) failed [ 672.579524][ T4321] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 672.608084][T23542] FAT-fs (loop1): Directory bread(block 71) failed [ 672.619187][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.627519][T23542] FAT-fs (loop1): Directory bread(block 72) failed [ 672.627596][T23542] FAT-fs (loop1): Directory bread(block 73) failed [ 672.673783][ T4321] usb 5-1: Product: syz [ 672.717894][ T4321] usb 5-1: Manufacturer: syz [ 672.719051][ T8987] usb 4-1: selecting invalid altsetting 0 [ 672.730117][ T4321] usb 5-1: SerialNumber: syz [ 672.749293][ T8987] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 672.775020][ T8987] usb 4-1: No valid video chain found. [ 672.835486][ T8987] usb 4-1: selecting invalid altsetting 0 [ 672.851837][ T8987] usbtest: probe of 4-1:220.1 failed with error -22 [ 672.882003][ T8987] usb 4-1: USB disconnect, device number 34 [ 672.992786][ T4321] usb 5-1: Found UVC 0.00 device syz (04f2:b746) [ 673.004153][ T4321] usb 5-1: No valid video chain found. [ 673.034897][ T4321] usb 5-1: USB disconnect, device number 40 [ 673.462397][T23568] ieee802154 phy0 wpan0: encryption failed: -22 [ 673.525240][T23570] loop3: detected capacity change from 0 to 512 [ 673.565462][T23570] /dev/loop3: Can't open blockdev [ 673.790642][T23576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 674.047165][T23585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8817'. [ 674.094663][T23585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8817'. [ 674.134976][T23585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8817'. [ 674.422442][T23596] loop4: detected capacity change from 0 to 1024 [ 674.467629][T23596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 674.518447][T23596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 674.577134][T23602] loop5: detected capacity change from 0 to 164 [ 674.585459][T23596] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.8822: missing EA_INODE flag [ 674.628487][T23596] EXT4-fs (loop4): Remounting filesystem read-only [ 674.642559][T23604] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 674.665791][T23596] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.8822: error while reading EA inode 11 err=-117 [ 674.700455][T23602] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 674.709332][T23596] EXT4-fs (loop4): Remounting filesystem read-only [ 674.889038][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 675.577179][T23630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.023891][T23643] loop3: detected capacity change from 0 to 256 [ 676.079232][T23643] /dev/loop3: Can't open blockdev [ 676.308056][ T4321] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 676.497978][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 676.509475][ T4321] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 676.547936][ T4321] usb 5-1: config 0 has no interface number 0 [ 676.566605][ T4321] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 676.606745][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.637834][ T4321] usb 5-1: Product: syz [ 676.656726][ T4321] usb 5-1: Manufacturer: syz [ 676.676988][ T4321] usb 5-1: SerialNumber: syz [ 676.694318][ T4321] usb 5-1: config 0 descriptor?? [ 676.716152][ T4321] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 676.761843][ T4321] usb 5-1: selecting invalid altsetting 1 [ 676.790763][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 676.807454][ T4321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 676.818864][ T4321] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 676.827202][ T4321] usb 5-1: media controller created [ 676.865517][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.928474][ T4321] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 676.955850][ T4321] zl10353_read_register: readreg error (reg=127, ret==-71) [ 676.973902][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 677.095972][ T4321] usb 5-1: USB disconnect, device number 41 [ 677.162524][T23672] loop3: detected capacity change from 0 to 764 [ 677.213234][T23672] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 678.100548][T23556] syz.2.8802 (23556): drop_caches: 3 [ 678.198433][T23703] bridge0: port 1(netdevsim0) entered blocking state [ 678.213480][T23703] bridge0: port 1(netdevsim0) entered disabled state [ 678.237307][ T4321] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 678.242894][T23703] device netdevsim0 entered promiscuous mode [ 678.333116][T23707] netlink: 'syz.4.8876': attribute type 1 has an invalid length. [ 678.440994][T23709] loop2: detected capacity change from 0 to 1024 [ 678.459962][ T4321] usb 6-1: config index 0 descriptor too short (expected 25975, got 119) [ 678.488049][ T4321] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 678.515410][ T4321] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.547892][T23709] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 678.557041][T23709] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 678.587992][T23709] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.8877: Failed to acquire dquot type 0 [ 678.607446][ T4321] usb 6-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 678.676198][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.711651][ T4321] usb 6-1: Product: syz [ 678.715925][ T4321] usb 6-1: Manufacturer: syz [ 678.739969][T23709] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 678.757092][ T4321] usb 6-1: SerialNumber: syz [ 678.834282][T23709] EXT4-fs (loop2): 1 truncate cleaned up [ 678.860663][T23709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 678.931893][T23709] Quota error (device loop2): do_check_range: Getting block 64 out of range 0-5 [ 678.981095][ T4321] usb 6-1: 0:1 : does not exist [ 678.987334][ T4321] usb 6-1: BAAD GENERIC IO: no channels? [ 679.040395][ T4321] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 679.102773][ T4321] usb 6-1: USB disconnect, device number 21 [ 679.156653][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 679.379252][T17140] udevd[17140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.435098][T23732] loop4: detected capacity change from 0 to 4096 [ 679.600659][T23732] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 679.610546][T23739] netlink: 'syz.3.8891': attribute type 11 has an invalid length. [ 679.637993][T23732] ntfs3: loop4: Failed to load $Extend. [ 679.684107][T23739] netlink: 'syz.3.8891': attribute type 9 has an invalid length. [ 679.721152][T23739] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8891'. [ 680.014822][T23751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8896'. [ 680.281450][T23762] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8902'. [ 680.329419][T23762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8902'. [ 680.330792][T23763] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 680.351033][T23762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8902'. [ 680.637997][T23773] loop5: detected capacity change from 0 to 512 [ 680.695374][T23773] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.8908: iget: bad i_size value: 38620345925642 [ 680.791391][T23773] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.8908: couldn't read orphan inode 15 (err -117) [ 680.868314][T23773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 681.098956][T11723] EXT4-fs (loop5): unmounting filesystem. [ 681.491706][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8923'. [ 683.736128][T23891] loop1: detected capacity change from 0 to 736 [ 684.388021][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8975'. [ 684.813632][T23925] x_tables: unsorted entry at hook 2 [ 685.231691][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8990'. [ 685.244605][ T26] audit: type=1107 audit(685.203:355): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 685.281554][T23942] device netdevsim0 entered promiscuous mode [ 685.377985][ T4321] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 685.394918][T23946] xt_bpf: check failed: parse error [ 685.471182][T23948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8992'. [ 685.587893][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 685.597462][ T4321] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 685.644261][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.669604][ T4321] usb 3-1: Product: syz [ 685.678268][ T4321] usb 3-1: Manufacturer: syz [ 685.682919][ T4321] usb 3-1: SerialNumber: syz [ 685.713551][ T4321] usb 3-1: config 0 descriptor?? [ 685.733737][ T4321] gspca_main: sq930x-2.14.0 probing 2770:930c [ 685.901098][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.907502][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.952907][T23962] loop4: detected capacity change from 0 to 8 [ 686.002910][T23962] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 686.175123][ T4321] gspca_sq930x: ucbus_write failed -71 [ 686.181242][ T4321] sq930x: probe of 3-1:0.0 failed with error -71 [ 686.211774][ T4321] usb 3-1: USB disconnect, device number 26 [ 686.256572][T23967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.261296][T23968] loop3: detected capacity change from 0 to 512 [ 686.313051][T23968] /dev/loop3: Can't open blockdev [ 686.422578][T23952] loop5: detected capacity change from 0 to 32768 [ 686.479715][T23952] JBD2: Ignoring recovery information on journal [ 686.562807][T23952] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 686.661475][T23952] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 686.778059][T23952] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 686.803089][T23982] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 686.809736][T23952] OCFS2: File system is now read-only. [ 686.852510][T23982] overlayfs: missing 'lowerdir' [ 686.888585][T23952] (syz.5.8994,23952,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 686.897667][T23952] (syz.5.8994,23952,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 686.961595][T23952] (syz.5.8994,23952,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 686.987915][T23952] (syz.5.8994,23952,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 687.007945][T23952] (syz.5.8994,23952,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 687.027905][T23952] (syz.5.8994,23952,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 687.036151][T23952] (syz.5.8994,23952,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 687.068507][T23990] netlink: 'syz.3.9013': attribute type 10 has an invalid length. [ 687.076607][T23952] (syz.5.8994,23952,1):ocfs2_symlink:1941 ERROR: status = -30 [ 687.087451][T23952] (syz.5.8994,23952,1):ocfs2_symlink:2065 ERROR: status = -30 [ 687.261043][T11723] ocfs2: Unmounting device (7,5) on (node local) [ 687.302385][T23998] ieee802154 phy0 wpan0: encryption failed: -90 [ 687.565442][T24008] binder: 24007:24008 ioctl c00c6211 0 returned -14 [ 687.602708][T24010] loop1: detected capacity change from 0 to 128 [ 687.718602][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9025'. [ 688.180458][T24029] loop1: detected capacity change from 0 to 2048 [ 688.215198][T24029] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 688.270563][T24029] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 688.321968][T24029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 688.481316][T24041] netlink: 'syz.4.9037': attribute type 1 has an invalid length. [ 688.996291][T24061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9047'. [ 689.020279][T24061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9047'. [ 690.207855][ T4319] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 690.321199][T24113] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 690.397894][ T4319] usb 5-1: Using ep0 maxpacket: 16 [ 690.405290][ T4319] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 690.442443][ T4319] usb 5-1: config 0 has no interface number 0 [ 690.469430][ T4319] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 690.498456][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.527546][ T4319] usb 5-1: Product: syz [ 690.542164][ T4319] usb 5-1: Manufacturer: syz [ 690.557335][ T4319] usb 5-1: SerialNumber: syz [ 690.598824][ T4319] usb 5-1: config 0 descriptor?? [ 690.627372][ T4319] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 691.017945][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 691.032515][ T4319] gspca_spca1528: reg_w err -71 [ 691.057982][ T4319] spca1528: probe of 5-1:0.1 failed with error -71 [ 691.109523][ T4319] usb 5-1: USB disconnect, device number 42 [ 691.423068][T24146] loop1: detected capacity change from 0 to 4096 [ 691.455035][T24146] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 691.504927][T24146] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 691.535565][T24146] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 691.577884][ T4321] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 691.588015][T24146] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 691.628304][T24146] ntfs: volume version 3.1. [ 691.674139][T24146] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 691.737977][T24146] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 691.787270][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 691.792797][T24146] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 691.794413][ T4321] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 691.868951][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.870774][T24146] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 691.899186][ T4321] usb 4-1: config 0 descriptor?? [ 691.946050][ T4321] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 691.978399][T24146] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 692.024020][T24146] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 692.146115][ T4321] usb 4-1: Detected FT232B [ 692.329199][T24173] cgroup: none used incorrectly [ 692.358121][ T4321] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 692.368868][ T4321] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 692.414913][ T4321] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 692.473882][ T4321] usb 4-1: USB disconnect, device number 35 [ 692.552459][ T4321] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 692.590521][ T4321] ftdi_sio 4-1:0.0: device disconnected [ 692.707935][ T8995] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 692.917946][ T8995] usb 3-1: Using ep0 maxpacket: 32 [ 692.925077][ T8995] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 692.975188][ T8995] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 693.035164][ T8995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.068294][ T8995] usb 3-1: Product: syz [ 693.072546][ T8995] usb 3-1: Manufacturer: syz [ 693.103829][ T8995] usb 3-1: SerialNumber: syz [ 693.142832][ T8995] usb 3-1: config 0 descriptor?? [ 693.169305][T24178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.402935][T24178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.451532][ T8995] net1080 3-1:0.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 46:0a:d9:00:8c:32 [ 693.470925][T24212] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 693.602077][T24216] x_tables: unsorted underflow at hook 2 [ 693.682320][ T8995] usb 3-1: USB disconnect, device number 27 [ 693.698938][ T8995] net1080 3-1:0.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 694.451792][T24204] loop3: detected capacity change from 0 to 32768 [ 694.516627][T24243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.519833][T24242] program syz.2.9121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.539048][T17140] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 694.581755][T24247] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.9124'. [ 694.618925][T24247] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.9124'. [ 695.379319][T24273] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9136'. [ 695.846528][T24287] loop2: detected capacity change from 0 to 256 [ 696.045878][T24287] FAT-fs (loop2): Directory bread(block 64) failed [ 696.078797][T24287] FAT-fs (loop2): Directory bread(block 65) failed [ 696.085510][T24287] FAT-fs (loop2): Directory bread(block 66) failed [ 696.122417][T24287] FAT-fs (loop2): Directory bread(block 67) failed [ 696.146395][T24287] FAT-fs (loop2): Directory bread(block 68) failed [ 696.167234][T24287] FAT-fs (loop2): Directory bread(block 69) failed [ 696.210554][T24287] FAT-fs (loop2): Directory bread(block 70) failed [ 696.217159][T24287] FAT-fs (loop2): Directory bread(block 71) failed [ 696.264734][T24287] FAT-fs (loop2): Directory bread(block 72) failed [ 696.296777][T24303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9152'. [ 696.306895][T24287] FAT-fs (loop2): Directory bread(block 73) failed [ 696.735248][T24314] loop5: detected capacity change from 0 to 2048 [ 696.790934][T24314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.645397][T24352] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 697.810609][T24346] loop2: detected capacity change from 0 to 4096 [ 697.839978][T24346] __ntfs_error: 2 callbacks suppressed [ 697.839996][T24346] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 697.844440][T24358] netlink: 'syz.1.9177': attribute type 3 has an invalid length. [ 697.871118][T24346] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 697.894107][T24346] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 697.897890][ T8987] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 697.936896][T24346] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 697.981208][T24346] ntfs: volume version 3.1. [ 697.998724][T24346] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 698.027963][T24346] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 698.066133][T24346] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 698.118058][ T8987] usb 6-1: Using ep0 maxpacket: 8 [ 698.127338][ T8987] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 698.136931][T24346] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 698.165047][T24346] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 698.166976][ T8987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.228093][T24346] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 698.234137][ T8987] usb 6-1: Product: syz [ 698.270933][ T8987] usb 6-1: Manufacturer: syz [ 698.287884][ T8987] usb 6-1: SerialNumber: syz [ 698.327120][ T8987] usb 6-1: config 0 descriptor?? [ 698.353055][ T8987] gspca_main: se401-2.14.0 probing 047d:5003 [ 698.761587][ T8987] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 698.771070][ T8995] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 698.787890][ T8987] se401: probe of 6-1:0.0 failed with error -71 [ 698.811917][T24360] loop4: detected capacity change from 0 to 32768 [ 698.812601][ T8987] usb 6-1: USB disconnect, device number 22 [ 698.875165][T24360] JBD2: Ignoring recovery information on journal [ 698.934138][T24360] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 698.968063][ T8995] usb 4-1: Using ep0 maxpacket: 32 [ 698.975339][ T8995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.985231][T24360] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 699.015549][T24360] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 699.026541][T24360] OCFS2: File system is now read-only. [ 699.037488][T24360] (syz.4.9178,24360,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 699.045767][T24360] (syz.4.9178,24360,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 699.054123][T24360] (syz.4.9178,24360,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 699.059672][ T8995] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 699.077924][T24360] (syz.4.9178,24360,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 699.106272][ T8995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.107848][T24360] (syz.4.9178,24360,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 699.135311][ T8995] usb 4-1: Product: syz [ 699.140915][ T8995] usb 4-1: Manufacturer: syz [ 699.165983][ T8995] usb 4-1: SerialNumber: syz [ 699.197291][ T8995] usb 4-1: config 0 descriptor?? [ 699.200190][T24360] (syz.4.9178,24360,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 699.214335][ T8995] usb 4-1: bad CDC descriptors [ 699.237539][T24360] (syz.4.9178,24360,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 699.249721][ T8995] usb 4-1: unsupported MDLM descriptors [ 699.289312][T24360] (syz.4.9178,24360,0):ocfs2_symlink:1941 ERROR: status = -30 [ 699.307241][T24360] (syz.4.9178,24360,0):ocfs2_symlink:2065 ERROR: status = -30 [ 699.421730][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 699.451080][ T8995] usb 4-1: USB disconnect, device number 36 [ 699.561057][T24392] loop2: detected capacity change from 0 to 2048 [ 699.635998][T24392] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 699.689889][T24397] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.579992][T24427] loop4: detected capacity change from 0 to 8 [ 701.200884][T24446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 701.424780][T24415] loop1: detected capacity change from 0 to 32768 [ 701.542876][T24415] JBD2: Ignoring recovery information on journal [ 701.688180][T24415] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 701.823352][T24415] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 701.904892][T24415] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 701.957871][T24415] OCFS2: File system is now read-only. [ 701.977821][T24415] (syz.1.9204,24415,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 701.985794][T24415] (syz.1.9204,24415,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 702.066360][T24415] (syz.1.9204,24415,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 702.106565][T24415] (syz.1.9204,24415,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 702.139705][T24415] (syz.1.9204,24415,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 702.157846][T24415] (syz.1.9204,24415,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 702.167325][T24478] netlink: 'syz.4.9233': attribute type 1 has an invalid length. [ 702.176867][T24415] (syz.1.9204,24415,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 702.204083][T24478] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9233'. [ 702.217130][T24415] (syz.1.9204,24415,0):ocfs2_symlink:1941 ERROR: status = -30 [ 702.240386][T24478] NCSI netlink: No device for ifindex 0 [ 702.255017][T24415] (syz.1.9204,24415,0):ocfs2_symlink:2065 ERROR: status = -30 [ 702.346804][T24482] futex_wake_op: syz.3.9235 tries to shift op by -1; fix this program [ 702.396433][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9236'. [ 702.460800][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 702.543625][T24486] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 702.813390][T24494] CIFS mount error: No usable UNC path provided in device string! [ 702.813390][T24494] [ 702.868078][T24494] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 703.158095][ T8987] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 703.166312][T24505] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9246'. [ 703.357952][ T8987] usb 4-1: Using ep0 maxpacket: 16 [ 703.365578][ T8987] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 703.407578][ T8987] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 703.437647][ T8987] usb 4-1: config 0 interface 0 has no altsetting 0 [ 703.445738][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 703.445754][ T26] audit: type=1326 audit(703.413:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.483555][ T8987] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 703.504473][ T8987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.525478][ T8987] usb 4-1: config 0 descriptor?? [ 703.530936][ T26] audit: type=1326 audit(703.443:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.612008][ T26] audit: type=1326 audit(703.453:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.687472][ T26] audit: type=1326 audit(703.453:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.750782][ T26] audit: type=1326 audit(703.453:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.750859][ T26] audit: type=1326 audit(703.453:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.750896][ T26] audit: type=1326 audit(703.453:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.750932][ T26] audit: type=1326 audit(703.463:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.750999][ T26] audit: type=1326 audit(703.463:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.1.9253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd6abf9ce59 code=0x7ffc0000 [ 703.861116][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.900394][T24530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9258'. [ 703.926207][T24531] loop4: detected capacity change from 0 to 512 [ 703.962915][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.004957][T24531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 704.011258][ T8987] usb 4-1: USB disconnect, device number 37 [ 704.049081][T24537] device netdevsim0 left promiscuous mode [ 704.112997][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 704.113084][T24538] loop2: detected capacity change from 0 to 128 [ 704.276244][T24541] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 704.276261][T24541] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 704.276274][T24541] overlayfs: missing 'lowerdir' [ 704.463734][T24545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9264'. [ 705.011761][T24564] loop1: detected capacity change from 0 to 128 [ 705.655468][T24586] loop1: detected capacity change from 0 to 8 [ 705.760444][T24586] SQUASHFS error: Unable to read directory block [629:26] [ 705.810884][T24591] netlink: 388 bytes leftover after parsing attributes in process `syz.4.9288'. [ 706.282243][T24572] loop2: detected capacity change from 0 to 32768 [ 706.431972][T24572] XFS (loop2): Mounting V5 Filesystem [ 706.554475][T24572] XFS (loop2): Ending clean mount [ 706.570636][T24592] loop3: detected capacity change from 0 to 32768 [ 706.613521][T24572] XFS (loop2): Quotacheck needed: Please wait. [ 706.758334][T24572] XFS (loop2): Quotacheck: Done. [ 706.909021][ T4271] XFS (loop2): Unmounting Filesystem [ 708.151325][T24660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9318'. [ 708.550529][T24677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9328'. [ 708.559911][T24677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9328'. [ 708.891530][T24689] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9333'. [ 709.098852][T24689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.150608][T24689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.184188][T24689] infiniband syz1: set down [ 709.205249][T24689] bond0 (unregistering): Released all slaves [ 709.217581][T24692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9334'. [ 709.236738][T24692] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9334'. [ 709.256617][T24699] netlink: 'syz.2.9337': attribute type 8 has an invalid length. [ 709.400772][T24706] xt_ecn: cannot match TCP bits for non-tcp packets [ 710.460857][T24747] tmpfs: Bad value for 'mpol' [ 710.507973][T24751] loop2: detected capacity change from 0 to 256 [ 710.515267][T24751] exfat: Deprecated parameter 'utf8' [ 710.565966][T24751] exfat: Deprecated parameter 'namecase' [ 710.609406][T24751] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 710.706755][T24751] kAFS: unable to lookup cell 's@z0' [ 711.116116][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'. [ 712.320765][T24820] loop1: detected capacity change from 0 to 1024 [ 712.374362][T24822] CIFS: VFS: Malformed UNC in devname [ 712.445181][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9398'. [ 712.479774][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9398'. [ 712.534337][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9398'. [ 712.569195][T24824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 712.613011][T24824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 712.647014][T24824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 712.720769][T24826] netlink: 'syz.5.9399': attribute type 1 has an invalid length. [ 713.349399][T24818] loop3: detected capacity change from 0 to 32768 [ 713.356808][T24818] /dev/loop3: Can't open blockdev [ 713.448473][T17140] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 713.667995][ T8995] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 713.867972][ T8995] usb 6-1: Using ep0 maxpacket: 32 [ 713.875571][ T8995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 713.920522][ T8995] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 713.944305][ T8995] usb 6-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 713.978832][ T8995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.026747][ T8995] usb 6-1: Product: syz [ 714.055174][ T8995] usb 6-1: Manufacturer: syz [ 714.074724][ T8995] usb 6-1: SerialNumber: syz [ 714.075687][T24867] loop2: detected capacity change from 0 to 512 [ 714.088512][T24867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 714.172462][T24867] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 714.316855][ T8995] usb 6-1: MIDIStreaming interface descriptor not found [ 714.387551][ T8995] usb 6-1: USB disconnect, device number 23 [ 714.429711][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 714.668027][T24887] __nla_validate_parse: 100 callbacks suppressed [ 714.668051][T24887] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9427'. [ 714.822347][T24894] loop4: detected capacity change from 0 to 512 [ 714.896790][T24894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 714.913411][T24887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.922462][T24894] EXT4-fs (loop4): 1 truncate cleaned up [ 714.935723][T24894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 714.987049][T24887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.018609][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 715.077584][T24887] bond0 (unregistering): Released all slaves [ 715.679678][T24924] program syz.2.9442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.691881][T24926] loop1: detected capacity change from 0 to 64 [ 715.746435][T24924] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 716.396390][T24942] loop4: detected capacity change from 0 to 4096 [ 716.440495][T24942] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 716.504690][T24942] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 716.734227][ T5640] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 716.758089][ T4287] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 716.764483][ T4287] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 716.816036][ T4287] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 716.865258][ T5646] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 716.891146][ T4287] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 717.550793][T24989] tmpfs: Bad value for 'mpol' [ 717.740858][T24995] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9474'. [ 719.055265][T25008] loop2: detected capacity change from 0 to 32768 [ 719.165264][T25008] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9480 (25008) [ 719.233515][T25008] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 719.277972][T25008] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 719.318864][T25008] BTRFS info (device loop2): force zlib compression, level 3 [ 719.327563][T25008] BTRFS info (device loop2): turning on flush-on-commit [ 719.356376][T25008] BTRFS info (device loop2): max_inline at 4096 [ 719.376665][T25008] BTRFS info (device loop2): using free space tree [ 719.739279][T25008] BTRFS info (device loop2): enabling ssd optimizations [ 719.784286][T25040] loop5: detected capacity change from 0 to 32768 [ 719.839712][ T4271] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 719.850644][T25040] jfs_lookup: iget failed on inum 32 [ 719.856290][T25040] jfs_lookup: iget failed on inum 32 [ 719.999855][T25083] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9509'. [ 720.338963][T25089] loop4: detected capacity change from 0 to 256 [ 720.396718][T25089] FAT-fs (loop4): Directory bread(block 64) failed [ 720.443833][T25089] FAT-fs (loop4): Directory bread(block 65) failed [ 720.460498][T25089] FAT-fs (loop4): Directory bread(block 66) failed [ 720.470946][T25089] FAT-fs (loop4): Directory bread(block 67) failed [ 720.480409][T25083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.489780][T25089] FAT-fs (loop4): Directory bread(block 68) failed [ 720.496624][T25089] FAT-fs (loop4): Directory bread(block 69) failed [ 720.503860][T25089] FAT-fs (loop4): Directory bread(block 70) failed [ 720.510922][T25089] FAT-fs (loop4): Directory bread(block 71) failed [ 720.517669][T25089] FAT-fs (loop4): Directory bread(block 72) failed [ 720.525257][T25089] FAT-fs (loop4): Directory bread(block 73) failed [ 720.565890][T25083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.639010][T22261] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 720.649222][T25083] bond0 (unregistering): Released all slaves [ 720.847828][T22261] usb 2-1: Using ep0 maxpacket: 16 [ 720.855357][T22261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 720.874786][T25096] loop5: detected capacity change from 0 to 16 [ 720.901898][T22261] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 720.923295][T25096] erofs: (device loop5): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 720.937954][T22261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.942354][T25098] loop2: detected capacity change from 0 to 256 [ 720.951328][T22261] usb 2-1: Product: syz [ 720.957436][T22261] usb 2-1: Manufacturer: syz [ 720.970236][T22261] usb 2-1: SerialNumber: syz [ 721.000818][T25098] FAT-fs (loop2): Directory bread(block 1285) failed [ 721.037895][T25098] FAT-fs (loop2): Directory bread(block 1286) failed [ 721.044755][T25098] FAT-fs (loop2): Directory bread(block 1287) failed [ 721.080782][T25098] FAT-fs (loop2): Directory bread(block 1288) failed [ 721.137140][T25098] FAT-fs (loop2): Directory bread(block 1285) failed [ 721.165574][T25098] FAT-fs (loop2): Directory bread(block 1286) failed [ 721.200018][T22261] usb 2-1: MIDIStreaming interface descriptor not found [ 721.207685][T25098] FAT-fs (loop2): Directory bread(block 1287) failed [ 721.256937][T25098] FAT-fs (loop2): Directory bread(block 1288) failed [ 721.296655][T22261] usb 2-1: USB disconnect, device number 36 [ 721.307382][T25098] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 721.650624][ T4475] udevd[4475]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.035754][T25126] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.777127][T25157] loop3: detected capacity change from 0 to 24 [ 722.829625][T25157] /dev/loop3: Can't open blockdev [ 722.859461][T17140] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 723.748317][T25193] netlink: 'syz.4.9563': attribute type 6 has an invalid length. [ 723.783937][T25193] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9563'. [ 724.102746][T25206] netlink: 'syz.3.9569': attribute type 1 has an invalid length. [ 724.142560][T25206] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9569'. [ 724.213064][T25206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9569'. [ 724.221744][T25211] netlink: 'syz.5.9571': attribute type 1 has an invalid length. [ 724.260498][T25211] netlink: 'syz.5.9571': attribute type 2 has an invalid length. [ 724.315190][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9571'. [ 724.758128][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9581'. [ 725.787004][T25270] loop2: detected capacity change from 0 to 256 [ 725.792309][T25273] tmpfs: Bad value for 'mpol' [ 725.898511][T25270] FAT-fs (loop2): Directory bread(block 64) failed [ 725.905134][T25270] FAT-fs (loop2): Directory bread(block 65) failed [ 725.933477][T25270] FAT-fs (loop2): Directory bread(block 66) failed [ 725.971714][T25270] FAT-fs (loop2): Directory bread(block 67) failed [ 726.006265][T25270] FAT-fs (loop2): Directory bread(block 68) failed [ 726.047887][T25270] FAT-fs (loop2): Directory bread(block 69) failed [ 726.054662][T25270] FAT-fs (loop2): Directory bread(block 70) failed [ 726.096893][T25270] FAT-fs (loop2): Directory bread(block 71) failed [ 726.123725][T25270] FAT-fs (loop2): Directory bread(block 72) failed [ 726.152202][T25270] FAT-fs (loop2): Directory bread(block 73) failed [ 726.309899][T25285] netlink: 'syz.4.9610': attribute type 21 has an invalid length. [ 726.373801][T25285] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9610'. [ 726.399435][T25285] netlink: 'syz.4.9610': attribute type 5 has an invalid length. [ 726.427979][T25285] netlink: 'syz.4.9610': attribute type 6 has an invalid length. [ 726.458015][T25285] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9610'. [ 726.479032][T25290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9611'. [ 726.516790][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9612'. [ 726.779281][T25304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9617'. [ 727.016016][T25312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9622'. [ 727.514792][T25327] loop1: detected capacity change from 0 to 256 [ 727.669187][T25327] FAT-fs (loop1): Directory bread(block 64) failed [ 727.688283][T25327] FAT-fs (loop1): Directory bread(block 65) failed [ 727.737237][T25327] FAT-fs (loop1): Directory bread(block 66) failed [ 727.758580][T25335] libceph: resolve 'cÏœ†ñ' (ret=-3): failed [ 727.768094][T25327] FAT-fs (loop1): Directory bread(block 67) failed [ 727.818188][T25327] FAT-fs (loop1): Directory bread(block 68) failed [ 727.824802][T25327] FAT-fs (loop1): Directory bread(block 69) failed [ 727.868068][T25327] FAT-fs (loop1): Directory bread(block 70) failed [ 727.918958][T25327] FAT-fs (loop1): Directory bread(block 71) failed [ 727.947221][T25327] FAT-fs (loop1): Directory bread(block 72) failed [ 727.958587][T25327] FAT-fs (loop1): Directory bread(block 73) failed [ 728.394577][T25357] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9643'. [ 728.607959][T25363] SET target dimension over the limit! [ 729.211071][T25389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9656'. [ 729.287973][T25389] netlink: 580 bytes leftover after parsing attributes in process `syz.3.9656'. [ 729.309489][T25394] loop5: detected capacity change from 0 to 64 [ 729.872007][T25416] netlink: 200 bytes leftover after parsing attributes in process `syz.4.9669'. [ 731.117667][T25458] loop5: detected capacity change from 0 to 1024 [ 731.365022][T25424] loop1: detected capacity change from 0 to 32768 [ 731.543477][T25424] JBD2: Ignoring recovery information on journal [ 731.728983][T25424] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 731.913305][T25424] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 731.956205][T25424] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 731.985913][T25424] OCFS2: Returning error to the calling process. [ 732.005453][T25424] (syz.1.9673,25424,1):ocfs2_search_chain:1761 ERROR: status = -5 [ 732.048486][T25424] (syz.1.9673,25424,1):ocfs2_search_chain:1871 ERROR: status = -5 [ 732.048761][T25424] (syz.1.9673,25424,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -5 [ 732.048799][T25424] (syz.1.9673,25424,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -5 [ 732.048824][T25424] (syz.1.9673,25424,1):ocfs2_claim_new_inode:2226 ERROR: status = -5 [ 732.048848][T25424] (syz.1.9673,25424,1):ocfs2_claim_new_inode:2241 ERROR: status = -5 [ 732.048872][T25424] (syz.1.9673,25424,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 732.048897][T25424] (syz.1.9673,25424,1):ocfs2_mknod:385 ERROR: status = -5 [ 732.049055][T25424] (syz.1.9673,25424,1):ocfs2_mknod:502 ERROR: status = -5 [ 732.049102][T25424] (syz.1.9673,25424,1):ocfs2_mkdir:659 ERROR: status = -5 [ 732.230503][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 732.894306][T25513] __nla_validate_parse: 1 callbacks suppressed [ 732.894323][T25513] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9714'. [ 732.928110][T25513] bridge_slave_1: default FDB implementation only supports local addresses [ 733.091342][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9719'. [ 734.342352][T25570] loop5: detected capacity change from 0 to 512 [ 734.503141][T25570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 734.761722][T11723] EXT4-fs (loop5): unmounting filesystem. [ 735.413550][T25611] netlink: 'syz.3.9763': attribute type 1 has an invalid length. [ 735.421421][T25611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9763'. [ 735.744567][T25622] netlink: 'syz.1.9768': attribute type 4 has an invalid length. [ 735.766828][T25622] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9768'. [ 735.957355][T25626] loop3: detected capacity change from 0 to 4096 [ 736.047349][T25626] /dev/loop3: Can't open blockdev [ 736.127864][T17140] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 737.141672][T25672] loop3: detected capacity change from 0 to 2048 [ 737.284556][T17140] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 737.909705][T25701] loop3: detected capacity change from 0 to 1024 [ 737.979188][T17140] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 738.192927][T25713] loop5: detected capacity change from 0 to 256 [ 738.436738][T25721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9816'. [ 738.570049][T25723] loop2: detected capacity change from 0 to 512 [ 738.647301][T25723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 738.687830][T25723] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 738.779883][T25723] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 738.821475][T25723] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.9817: Allocating blocks 41-42 which overlap fs metadata [ 738.843726][T25739] ax25_connect(): syz.4.9824 uses autobind, please contact jreuter@yaina.de [ 738.921038][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9825'. [ 738.944851][T25741] loop1: detected capacity change from 0 to 1024 [ 738.968319][T25723] Quota error (device loop2): write_blk: dquota write failed [ 738.975791][T25723] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 739.004969][T25741] hfsplus: invalid length 32517 has been corrected to 255 [ 739.040260][T25723] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.9817: Allocating blocks 41-42 which overlap fs metadata [ 739.129841][T25723] Quota error (device loop2): write_blk: dquota write failed [ 739.137518][T25723] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 739.162891][T25723] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.9817: Failed to acquire dquot type 1 [ 739.194696][T25723] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 739.250123][T25723] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.9817: corrupted inode contents [ 739.277386][T25723] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.9817: mark_inode_dirty error [ 739.312293][T25723] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.9817: corrupted inode contents [ 739.326863][T25723] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.9817: mark_inode_dirty error [ 739.350496][T25723] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.9817: corrupted inode contents [ 739.383383][T25723] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 739.397901][T25723] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.9817: corrupted inode contents [ 739.417196][ T5648] hfsplus: b-tree write err: -5, ino 20 [ 739.443711][T25723] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.9817: mark_inode_dirty error [ 739.466542][T25723] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 739.484652][T25723] EXT4-fs (loop2): 1 truncate cleaned up [ 739.492313][T25723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 739.664100][T25759] loop3: detected capacity change from 0 to 256 [ 739.676289][T25723] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.9817: Allocating blocks 41-42 which overlap fs metadata [ 739.710751][T25723] Quota error (device loop2): write_blk: dquota write failed [ 739.751142][T25723] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 739.779524][T17140] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 739.827300][T25723] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.9817: Failed to acquire dquot type 1 [ 740.033250][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 740.458320][T25749] loop5: detected capacity change from 0 to 32768 [ 740.497975][T25090] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 740.528213][T25777] loop4: detected capacity change from 0 to 1024 [ 740.561119][T25786] loop3: detected capacity change from 0 to 8 [ 740.568459][T25786] /dev/loop3: Can't open blockdev [ 740.642141][T25749] XFS (loop5): Mounting V5 Filesystem [ 740.654634][T25777] hfsplus: invalid length 32517 has been corrected to 255 [ 740.700233][T25795] tmpfs: Bad value for 'mpol' [ 740.723828][T25090] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 740.775352][T25090] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 740.862000][T25090] usb 3-1: config 220 interface 0 has no altsetting 0 [ 740.902511][T25749] XFS (loop5): Ending clean mount [ 740.911705][T25090] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 740.956198][T25090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.979087][T25090] usb 3-1: Product: syz [ 740.979134][T25749] XFS (loop5): syz.5.9827 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 740.984263][T25090] usb 3-1: Manufacturer: syz [ 741.054089][T25090] usb 3-1: SerialNumber: syz [ 741.093939][ T5646] hfsplus: b-tree write err: -5, ino 20 [ 741.145808][T11723] XFS (loop5): Unmounting Filesystem [ 741.162764][T25803] netlink: 'syz.1.9853': attribute type 2 has an invalid length. [ 741.221042][T25803] netlink: 'syz.1.9853': attribute type 1 has an invalid length. [ 741.240220][T25803] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9853'. [ 741.278168][T25802] loop3: detected capacity change from 0 to 4096 [ 741.321160][T25802] /dev/loop3: Can't open blockdev [ 741.326063][T25090] usb 3-1: USB disconnect, device number 28 [ 741.959542][T25817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9860'. [ 741.988148][T25817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9860'. [ 741.997178][T25817] netlink: 'syz.1.9860': attribute type 6 has an invalid length. [ 742.031764][T25822] loop5: detected capacity change from 0 to 164 [ 742.295173][T25826] raw_sendmsg: syz.4.9863 forgot to set AF_INET. Fix it! [ 742.303955][T25828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9864'. [ 742.759391][T25841] loop4: detected capacity change from 0 to 256 [ 742.885875][T25811] loop3: detected capacity change from 0 to 32768 [ 743.088018][T25090] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 743.160494][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9877'. [ 743.173099][T25851] loop5: detected capacity change from 0 to 1024 [ 743.234610][T25851] hfsplus: invalid length 32517 has been corrected to 255 [ 743.297949][T25090] usb 5-1: Using ep0 maxpacket: 16 [ 743.307211][T25090] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 743.356337][T25090] usb 5-1: config 4 has no interface number 0 [ 743.373040][T25090] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 743.408046][T25090] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 743.473949][T25090] usb 5-1: config 4 interface 9 has no altsetting 0 [ 743.488742][ T5646] hfsplus: b-tree write err: -5, ino 20 [ 743.508903][T25090] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 743.535536][T25090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.577879][T25090] usb 5-1: Product: syz [ 743.582128][T25090] usb 5-1: Manufacturer: syz [ 743.617372][T25090] usb 5-1: SerialNumber: syz [ 743.635859][T25841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.676176][T25841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.700849][T25869] loop5: detected capacity change from 0 to 8 [ 743.753787][T25090] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 743.944234][ T5648] usb 5-1: Failed to submit usb control message: -71 [ 743.952234][T25090] usb 5-1: USB disconnect, device number 43 [ 743.967618][ T5648] usb 5-1: unable to send the bmi data to the device: -71 [ 744.021307][ T5648] usb 5-1: unable to get target info from device [ 744.061606][ T5648] usb 5-1: could not get target info (-71) [ 744.087472][ T5648] usb 5-1: could not probe fw (-71) [ 744.205757][T25884] xt_NFQUEUE: number of total queues is 0 [ 744.570869][T25893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 744.749711][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 745.141288][T25913] set_capacity_and_notify: 2 callbacks suppressed [ 745.141306][T25913] loop5: detected capacity change from 0 to 164 [ 745.378036][T25919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9905'. [ 745.723149][T25931] netlink: 'syz.5.9911': attribute type 10 has an invalid length. [ 745.723236][T25896] loop3: detected capacity change from 0 to 32768 [ 745.779238][T25931] bond0: (slave netdevsim0): Releasing backup interface [ 745.839539][T25931] batman_adv: batadv0: Adding interface: netdevsim0 [ 745.877999][T25931] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.972329][T25931] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 746.231441][T25943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9917'. [ 747.014874][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9934'. [ 747.348102][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.354552][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.890617][T26002] xt_CT: No such helper "netbios-ns" [ 747.922194][T26013] loop3: detected capacity change from 0 to 1764 [ 748.168125][T26021] netlink: 'syz.1.9955': attribute type 10 has an invalid length. [ 748.236965][T26021] device netdevsim0 left promiscuous mode [ 748.262778][T26021] bridge0: port 1(netdevsim0) entered disabled state [ 748.320406][T26021] batman_adv: batadv0: Adding interface: netdevsim0 [ 748.327075][T26021] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.427929][T26021] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 749.209885][T26030] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 749.302403][T26067] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 749.481850][T26076] syz.4.9980: attempt to access beyond end of device [ 749.481850][T26076] mtdblock0: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=256 [ 749.587021][T26078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9983'. [ 749.701282][T26083] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9984'. [ 750.320113][T26103] loop2: detected capacity change from 0 to 256 [ 750.583609][ T26] audit: type=1326 audit(750.543:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.3.9999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 750.591524][T26113] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10000'. [ 750.651226][ T26] audit: type=1326 audit(750.573:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.3.9999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 750.697943][T25090] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 750.732257][ T26] audit: type=1326 audit(750.573:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.3.9999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 750.754472][T26085] loop4: detected capacity change from 0 to 32768 [ 750.806038][ T26] audit: type=1326 audit(750.573:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.3.9999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 750.923014][T26085] XFS (loop4): Mounting V5 Filesystem [ 750.929101][T25090] usb 3-1: Using ep0 maxpacket: 16 [ 750.934602][T26125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10004'. [ 750.947520][T25090] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 750.999034][T25090] usb 3-1: config 4 has no interface number 0 [ 751.039959][T25090] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 751.097846][T25090] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 751.129290][T26085] XFS (loop4): Ending clean mount [ 751.138488][T25090] usb 3-1: config 4 interface 9 has no altsetting 0 [ 751.160505][T26085] XFS (loop4): Quotacheck needed: Please wait. [ 751.178547][T25090] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 751.198107][T25090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.206170][T25090] usb 3-1: Product: syz [ 751.241762][T26085] XFS (loop4): Quotacheck: Done. [ 751.276180][T25090] usb 3-1: Manufacturer: syz [ 751.292104][T25090] usb 3-1: SerialNumber: syz [ 751.337445][T26103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.347384][T26103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 751.418993][T25090] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 751.473477][ T4287] XFS (loop4): Unmounting Filesystem [ 751.622690][ T8987] usb 3-1: USB disconnect, device number 29 [ 751.630111][ T5640] usb 3-1: Failed to submit usb control message: -71 [ 751.665038][ T5640] usb 3-1: unable to send the bmi data to the device: -71 [ 751.689073][ T5640] usb 3-1: unable to get target info from device [ 751.703585][ T5640] usb 3-1: could not get target info (-71) [ 751.711791][ T4321] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 751.730623][ T5640] usb 3-1: could not probe fw (-71) [ 751.921615][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 751.939862][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.957838][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.980755][ T4321] usb 2-1: string descriptor 0 read error: -22 [ 751.987069][ T4321] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 752.017890][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.053348][ T4321] usb 2-1: selecting invalid altsetting 1 [ 752.078758][ T4321] usb 2-1: unit 3 not found! [ 752.149489][T26156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10010'. [ 752.164250][T26156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10010'. [ 752.265448][ T4321] usb 2-1: unit 0 not found! [ 752.367588][T17140] udevd[17140]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.527544][ T8987] usb 2-1: USB disconnect, device number 37 [ 752.592307][T26172] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10024'. [ 753.106374][T26192] netlink: 'syz.4.10034': attribute type 2 has an invalid length. [ 753.162732][T26194] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 753.185009][T26194] bond0: (slave lo): Error: Device type is different from other slaves [ 753.208330][T26196] Error parsing options; rc = [-22] [ 753.287984][ T4321] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 753.489811][ T4321] usb 4-1: config 128 interface 0 has no altsetting 0 [ 753.513733][ T4321] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 753.552013][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.798497][ T4321] comedi comedi5: could not set alternate setting 3 in high speed [ 753.807193][ T4321] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 753.842214][ T4321] usbduxsigma: probe of 4-1:128.0 failed with error -71 [ 753.856623][ T4321] usb 4-1: USB disconnect, device number 38 [ 754.052516][ T6705] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 754.249697][ T6705] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 754.268055][ T6705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.301579][ T6705] usb 5-1: config 0 descriptor?? [ 754.319784][ T6705] cp210x 5-1:0.0: cp210x converter detected [ 754.525957][ T6705] usb 5-1: cp210x converter now attached to ttyUSB0 [ 754.735652][ T6705] usb 5-1: USB disconnect, device number 44 [ 754.767653][ T6705] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 754.794034][ T6705] cp210x 5-1:0.0: device disconnected [ 754.878525][T26227] loop2: detected capacity change from 0 to 32768 [ 754.945298][T26227] XFS (loop2): Mounting V5 Filesystem [ 755.020953][T26227] XFS (loop2): Ending clean mount [ 755.139234][ T6705] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 755.217557][ T4271] XFS (loop2): Unmounting Filesystem [ 755.476071][T26273] loop4: detected capacity change from 0 to 164 [ 755.484675][T26273] ISOFS: unable to read i-node block [ 755.497849][T26273] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 755.570912][T26276] netlink: 'syz.5.10071': attribute type 3 has an invalid length. [ 755.860538][T26283] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10076'. [ 755.895330][T26285] autofs4:pid:26285:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 756.049885][T26289] loop4: detected capacity change from 0 to 128 [ 756.161213][T26292] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 756.653926][T26307] loop3: detected capacity change from 0 to 4096 [ 756.675734][T26303] loop4: detected capacity change from 0 to 8192 [ 756.688989][T26307] /dev/loop3: Can't open blockdev [ 756.729355][T17140] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 756.750733][T26303] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 756.831402][T26303] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 756.851756][T26316] netlink: 'syz.1.10091': attribute type 1 has an invalid length. [ 756.914965][T26303] REISERFS (device loop4): using ordered data mode [ 756.948303][T26303] reiserfs: using flush barriers [ 756.967159][T26303] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 756.967967][ T8987] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 757.038367][T26303] REISERFS (device loop4): checking transaction log (loop4) [ 757.074798][T26303] REISERFS (device loop4): Using tea hash to sort names [ 757.187798][ T8987] usb 6-1: Using ep0 maxpacket: 32 [ 757.213720][ T8987] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 757.232219][ T8987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.250669][ T8987] usb 6-1: Product: syz [ 757.254902][ T8987] usb 6-1: Manufacturer: syz [ 757.278677][ T8987] usb 6-1: SerialNumber: syz [ 757.299640][ T8987] usb 6-1: config 0 descriptor?? [ 757.448572][ T4321] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 757.541847][T26334] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10099'. [ 757.556161][T26334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10099'. [ 757.649140][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 757.663937][ T4321] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 757.704619][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 757.734318][ T6705] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 757.740964][ T8987] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 757.752307][ T4321] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 757.761972][ T8987] airspy 6-1:0.0: Could not detect board [ 757.779074][ T4321] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.784214][ T8987] airspy: probe of 6-1:0.0 failed with error -71 [ 757.804134][ T8987] usb 6-1: USB disconnect, device number 24 [ 757.826257][ T4321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 757.848486][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.867112][ T4321] usb 4-1: Product: syz [ 757.877313][ T4321] usb 4-1: Manufacturer: syz [ 757.882315][ T4321] usb 4-1: SerialNumber: syz [ 757.900470][T26322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 757.919460][ T4321] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 757.926989][ T4321] usbtest 4-1:1.0: Linux user mode ISO test driver [ 757.957068][T26341] loop4: detected capacity change from 0 to 4096 [ 757.965551][ T6705] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 757.983846][ T6705] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 757.994051][ T4321] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 758.004676][ T6705] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice=f5.01 [ 758.024134][ T6705] usb 2-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 758.033803][T26341] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 758.045667][ T6705] usb 2-1: Manufacturer: syz [ 758.064619][ T6705] usb 2-1: config 0 descriptor?? [ 758.088881][ T6705] usb-storage 2-1:0.0: USB Mass Storage device detected [ 758.146155][T26341] ntfs3: loop4: failed to convert "c46c" to maccyrillic [ 758.161069][ T8987] usb 4-1: USB disconnect, device number 39 [ 758.297532][ T4321] usb 2-1: USB disconnect, device number 38 [ 758.562497][T26358] overlayfs: unrecognized mount option "obj_type=@}\{" or missing value [ 758.852278][T26362] loop5: detected capacity change from 0 to 4096 [ 758.906114][T26362] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 758.915819][T26368] netlink: 'syz.3.10116': attribute type 2 has an invalid length. [ 758.966155][T26368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10116'. [ 758.985620][T26370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10117'. [ 759.092456][T26375] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10119'. [ 759.142513][T26375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10119'. [ 759.217481][T26375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10119'. [ 759.582093][T26392] wg1 speed is unknown, defaulting to 1000 [ 759.600960][T26390] openvswitch: netlink: Missing key (keys=40, expected=80) [ 759.612033][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.673091][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.704863][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.728152][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.756975][T26394] batman_adv: batadv0: Removing interface: netdevsim0 [ 760.945651][T26438] loop2: detected capacity change from 0 to 1024 [ 761.004355][T26438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 761.123544][T26448] netlink: 'syz.5.10155': attribute type 13 has an invalid length. [ 761.221049][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 761.487985][ T6705] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 761.696050][ T6705] usb 2-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 761.715357][ T6705] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 761.745757][ T6705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 761.775025][ T6705] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 761.794532][ T6705] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 761.821337][ T6705] usb 2-1: Product: syz [ 761.833084][ T4321] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 761.843044][ T6705] usb 2-1: Manufacturer: syz [ 761.861363][ T6705] usb 2-1: SerialNumber: syz [ 761.876586][ T6705] usb 2-1: config 0 descriptor?? [ 762.060140][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.087911][ T4321] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.123676][T26484] loop5: detected capacity change from 0 to 512 [ 762.137778][ T4321] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 762.170693][T26484] EXT4-fs: Ignoring removed oldalloc option [ 762.178134][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.195853][T26484] EXT4-fs: Mount option(s) incompatible with ext3 [ 762.208873][ T4321] usb 4-1: config 0 descriptor?? [ 762.314813][T26484] overlayfs: unrecognized mount option "\" or missing value [ 762.317678][ T6705] usb 2-1: USB disconnect, device number 39 [ 762.456894][ T4321] usb 4-1: USB disconnect, device number 40 [ 762.730227][ T5061] udevd[5061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 763.541833][T26522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10191'. [ 763.617289][ T4321] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 763.862036][ T4321] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 763.885691][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.907823][ T4321] usb 3-1: Product: syz [ 763.938213][ T4321] usb 3-1: Manufacturer: syz [ 763.943482][ T4321] usb 3-1: SerialNumber: syz [ 763.988246][ T4321] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 764.088111][ T4321] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 764.310632][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fef1) [ 764.385059][T26512] loop3: detected capacity change from 0 to 32768 [ 764.543577][T22260] usb 3-1: USB disconnect, device number 30 [ 764.652546][ T26] audit: type=1326 audit(764.613:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26544 comm="syz.3.10201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 764.676415][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.722902][T17140] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (17140) [ 764.745940][ T26] audit: type=1326 audit(764.613:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26544 comm="syz.3.10201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 764.849455][ T26] audit: type=1326 audit(764.643:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26544 comm="syz.3.10201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 764.977284][ T26] audit: type=1326 audit(764.643:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26544 comm="syz.3.10201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 765.086857][ T26] audit: type=1326 audit(764.643:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26544 comm="syz.3.10201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138039ce59 code=0x7ffc0000 [ 765.188112][ T4321] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 765.195192][ T4321] ath9k_htc: Failed to initialize the device [ 765.228051][T22260] usb 3-1: ath9k_htc: USB layer deinitialized [ 765.324649][T26561] lo speed is unknown, defaulting to 1000 [ 765.359837][T26561] lo speed is unknown, defaulting to 1000 [ 765.366095][T26561] lo speed is unknown, defaulting to 1000 [ 765.543440][T26569] loop2: detected capacity change from 0 to 128 [ 765.614389][T26569] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 765.686216][T26569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 765.739060][T26569] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 765.989384][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 766.127314][T26561] infiniband syz2: set down [ 766.132333][ T8995] lo speed is unknown, defaulting to 1000 [ 766.174527][T26561] infiniband syz2: added lo [ 766.343042][T26561] RDS/IB: syz2: added [ 766.388762][T26561] smc: adding ib device syz2 with port count 1 [ 766.395177][T26561] smc: ib device syz2 port 1 has pnetid [ 766.420317][ T8995] lo speed is unknown, defaulting to 1000 [ 766.426849][T26561] lo speed is unknown, defaulting to 1000 [ 766.864325][T26561] lo speed is unknown, defaulting to 1000 [ 767.302972][T26561] lo speed is unknown, defaulting to 1000 [ 767.610129][T26630] loop2: detected capacity change from 0 to 1764 [ 767.686743][T26561] lo speed is unknown, defaulting to 1000 [ 767.871236][T26644] netlink: 'syz.1.10249': attribute type 49 has an invalid length. [ 768.033663][T26644] device ip6gretap0 entered promiscuous mode [ 768.076812][T26643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10248'. [ 768.116453][T26561] lo speed is unknown, defaulting to 1000 [ 768.473392][T26645] loop5: detected capacity change from 0 to 32768 [ 768.646565][T26645] XFS (loop5): Mounting V5 Filesystem [ 768.716128][T26656] loop2: detected capacity change from 0 to 4096 [ 768.813530][T26656] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 768.931323][T26645] XFS (loop5): Ending clean mount [ 769.025199][T26645] XFS (loop5): Quotacheck needed: Please wait. [ 769.072728][T26656] ntfs3: loop2: failed to convert "c46c" to iso8859-3 [ 769.241594][T26645] XFS (loop5): Quotacheck: Done. [ 769.431152][T26687] x_tables: duplicate entry at hook 1 [ 769.511304][T11723] XFS (loop5): Unmounting Filesystem [ 769.735672][T26695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10267'. [ 770.356158][T26718] xt_CONNSECMARK: invalid mode: 66 [ 770.786803][T26732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.887007][T26732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.913957][T26732] batman_adv: batadv0: Removing interface: netdevsim0 [ 771.577454][T26753] loop5: detected capacity change from 0 to 2048 [ 771.686807][T26753] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 771.711794][T26753] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.10290: lblock 0 mapped to illegal pblock 2 (length 1) [ 771.761728][T26768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10297'. [ 771.771155][T26768] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 771.907554][T26773] netlink: 'syz.4.10298': attribute type 5 has an invalid length. [ 771.944151][T11723] EXT4-fs (loop5): unmounting filesystem. [ 772.417831][ T4321] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 772.620251][ T4321] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 772.639252][ T4321] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 772.679762][ T4321] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 772.700702][ T4321] usb 6-1: config 220 has no interface number 2 [ 772.729440][ T4321] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 772.772108][ T4321] usb 6-1: config 220 interface 0 has no altsetting 0 [ 772.807813][ T4321] usb 6-1: config 220 interface 76 has no altsetting 0 [ 772.827783][ T4321] usb 6-1: config 220 interface 1 has no altsetting 0 [ 772.880036][ T4321] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 772.905506][T26810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10314'. [ 772.928307][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.948902][ T4321] usb 6-1: Product: syz [ 772.953176][ T4321] usb 6-1: Manufacturer: syz [ 772.966920][T26810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10314'. [ 772.976363][ T4321] usb 6-1: SerialNumber: syz [ 773.005217][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10314'. [ 773.230078][ T4321] usb 6-1: selecting invalid altsetting 0 [ 773.243647][ T4321] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 773.260709][ T4321] usb 6-1: No valid video chain found. [ 773.345144][ T4321] usb 6-1: selecting invalid altsetting 0 [ 773.367786][ T4321] usbtest: probe of 6-1:220.1 failed with error -22 [ 773.403258][ T4321] usb 6-1: USB disconnect, device number 25 [ 773.534525][T26832] loop2: detected capacity change from 0 to 256 [ 773.597923][ T8987] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 773.787905][ T8987] usb 2-1: Using ep0 maxpacket: 32 [ 773.800364][ T8987] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 773.834202][ T8987] usb 2-1: config 0 has no interface number 0 [ 773.858197][ T8987] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 39163, setting to 1024 [ 773.907789][ T8987] usb 2-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 773.937847][ T8987] usb 2-1: config 0 interface 89 has no altsetting 0 [ 773.984636][ T8987] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 774.034358][ T8987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.087882][ T8987] usb 2-1: Product: syz [ 774.106883][ T8987] usb 2-1: Manufacturer: syz [ 774.119075][ T8987] usb 2-1: SerialNumber: syz [ 774.157099][ T8987] usb 2-1: config 0 descriptor?? [ 774.185252][T26826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.230478][ T8987] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 774.250914][ T8987] em28xx 2-1:0.89: Video interface 89 found: bulk [ 774.347874][ T4321] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 774.532045][ T8987] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 774.550358][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.587798][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.614018][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 774.620242][ T8987] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 774.642990][ T8987] em28xx 2-1:0.89: board has no eeprom [ 774.661356][ T4321] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.662746][T26867] No source specified [ 774.704291][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.715413][T26869] netlink: 'syz.5.10338': attribute type 2 has an invalid length. [ 774.726211][ T4321] usb 3-1: config 0 descriptor?? [ 774.731570][T26869] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 774.754253][ T4321] hub 3-1:0.0: USB hub found [ 774.757921][ T8987] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 774.769189][ T8987] em28xx 2-1:0.89: analog set to bulk mode. [ 774.798224][ T8997] em28xx 2-1:0.89: Registering V4L2 extension [ 774.838962][ T8987] usb 2-1: USB disconnect, device number 40 [ 774.859141][ T8987] em28xx 2-1:0.89: Disconnecting em28xx [ 774.955483][ T4321] hub 3-1:0.0: 9 ports detected [ 774.963528][ T4321] hub 3-1:0.0: insufficient power available to use all downstream ports [ 775.113120][ T8997] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 775.129923][ T8997] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 775.155928][ T4321] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 775.163551][ T8997] em28xx 2-1:0.89: No AC97 audio processor [ 775.163835][ T4321] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 775.216016][T26858] loop4: detected capacity change from 0 to 32768 [ 775.222545][ T8997] usb 2-1: Decoder not found [ 775.222625][ T8997] em28xx 2-1:0.89: failed to create media graph [ 775.222671][ T8997] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 775.268659][ T4321] usb 3-1: USB disconnect, device number 31 [ 775.323029][ T8997] em28xx 2-1:0.89: Registering snapshot button... [ 775.362637][ T8997] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input36 [ 775.418962][ T8997] em28xx 2-1:0.89: Remote control support is not available for this card. [ 775.469731][ T8987] em28xx 2-1:0.89: Closing input extension [ 775.508193][ T8987] em28xx 2-1:0.89: Deregistering snapshot button [ 775.718971][ T8987] em28xx 2-1:0.89: Freeing device [ 775.741253][T26884] loop3: detected capacity change from 0 to 4096 [ 775.789258][T26884] /dev/loop3: Can't open blockdev [ 775.851356][ T4368] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 776.080810][T26898] netlink: 'syz.5.10351': attribute type 21 has an invalid length. [ 776.616069][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.647831][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.659805][T26915] loop5: detected capacity change from 0 to 64 [ 776.686725][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.697835][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.725682][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.748148][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.777948][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.826075][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.846327][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.877868][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.897009][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.927419][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.937535][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 776.971458][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.007627][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.032250][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.049424][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.072900][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.087817][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.105586][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.127848][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.135319][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.176768][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.193028][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.207868][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.225604][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.245831][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.254809][T26902] loop2: detected capacity change from 0 to 32768 [ 777.273856][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.302594][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.318326][T26902] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 777.326806][T26903] loop3: detected capacity change from 0 to 32768 [ 777.345497][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.360920][T26902] JBD2: Ignoring recovery information on journal [ 777.403702][T26928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10366'. [ 777.433570][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.508121][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.516073][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.556148][T26902] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 777.578354][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.597832][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.605524][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.668971][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.676449][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.701864][T26902] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 777.732139][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.757987][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.768231][T26902] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 777.788648][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.807787][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.815406][T26902] OCFS2: File system is now read-only. [ 777.833029][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.848098][T26902] (syz.2.10353,26902,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 777.856509][T26902] (syz.2.10353,26902,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 777.876016][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.895922][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.937803][T26902] (syz.2.10353,26902,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 777.946669][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.968035][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.975574][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 777.987810][T26902] (syz.2.10353,26902,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 777.996124][T26902] (syz.2.10353,26902,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 778.024251][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.038818][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.066577][T26902] (syz.2.10353,26902,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 778.075058][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.104165][T26902] (syz.2.10353,26902,1):ocfs2_mknod:385 ERROR: status = -30 [ 778.111952][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.127870][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.135337][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.143249][T26902] (syz.2.10353,26902,1):ocfs2_mknod:502 ERROR: status = -30 [ 778.177744][T26902] (syz.2.10353,26902,1):ocfs2_mkdir:659 ERROR: status = -30 [ 778.208352][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.215833][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.248015][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.255519][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.285992][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.310736][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 778.327799][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.335409][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.371036][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.403567][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.418173][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.435849][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.456095][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.463915][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.481660][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.498169][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.515854][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.546436][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.566687][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.582972][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.588117][T26954] loop4: detected capacity change from 0 to 2048 [ 778.607908][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.642520][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.657329][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.675372][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.699130][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.728368][T26954] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 778.747310][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.753236][T26954] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #12: block 2: comm syz.4.10378: lblock 0 mapped to illegal pblock 2 (length 1) [ 778.767570][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.801377][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.828217][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.835699][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.872354][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.886257][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.900892][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.908909][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.917887][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.925390][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.932900][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.956256][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.965015][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.973184][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.981193][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.988695][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 778.996098][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.003570][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.011119][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.018581][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.025975][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.033487][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.040960][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.048641][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.056048][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.063958][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.071658][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.079670][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.087071][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.094552][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.102017][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.109604][ T8987] hid-generic 0100:0000:0000.0001: unknown main item tag 0x0 [ 779.131331][ T8987] hid-generic 0100:0000:0000.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 779.152860][ T6705] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 779.239247][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 779.344749][ T6705] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 779.372398][ T6705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.418967][ T6705] usb 6-1: config 0 has no interface number 0 [ 779.445492][ T6705] usb 6-1: config 0 interface 2 has no altsetting 0 [ 779.483512][ T6705] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 779.494093][T26970] fido_id[26970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 779.518535][ T6705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.547778][ T6705] usb 6-1: Product: syz [ 779.562236][ T6705] usb 6-1: Manufacturer: syz [ 779.566911][ T6705] usb 6-1: SerialNumber: syz [ 779.604848][ T6705] usb 6-1: config 0 descriptor?? [ 780.072145][ T4321] usb 6-1: USB disconnect, device number 26 [ 780.083064][ T4321] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 780.383805][T27011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.795407][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10408'. [ 781.492736][T27041] loop4: detected capacity change from 0 to 2048 [ 781.507847][T27052] netlink: 'syz.2.10418': attribute type 2 has an invalid length. [ 781.535280][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10418'. [ 781.746833][T27041] hpfs: filesystem error: improperly stopped; already mounted read-only [ 781.773354][T27041] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 781.787914][T27041] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000 [ 782.153472][T27068] bridge0: port 1(syz_tun) entered blocking state [ 782.201499][T27068] bridge0: port 1(syz_tun) entered disabled state [ 782.216123][T27072] loop5: detected capacity change from 0 to 164 [ 782.269517][T27068] device syz_tun entered promiscuous mode [ 782.684371][T27087] tipc: Started in network mode [ 782.703086][T27087] tipc: Node identity eaaf67d1d412, cluster identity 4711 [ 782.725463][T27087] tipc: Enabled bearer , priority 10 [ 782.732976][T27090] Bluetooth: MGMT ver 1.22 [ 782.939590][T27097] device ipvlan2 entered promiscuous mode [ 782.955403][T27097] bridge0: port 1(ipvlan2) entered blocking state [ 782.962724][T27097] bridge0: port 1(ipvlan2) entered disabled state [ 783.028462][T27099] tipc: Started in network mode [ 783.033702][T27099] tipc: Node identity e0000001, cluster identity 4711 [ 783.055132][T27099] tipc: Enabling of bearer rejected, failed to enable media [ 783.294109][T27105] loop3: detected capacity change from 0 to 1764 [ 783.339197][T27108] loop5: detected capacity change from 0 to 512 [ 783.352402][T27111] loop4: detected capacity change from 0 to 256 [ 783.370750][T27108] EXT4-fs: Ignoring removed nobh option [ 783.411699][T27111] FAT-fs (loop4): Directory bread(block 64) failed [ 783.420659][T27108] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 783.438424][T27111] FAT-fs (loop4): Directory bread(block 65) failed [ 783.445440][T27111] FAT-fs (loop4): Directory bread(block 66) failed [ 783.466274][T27111] FAT-fs (loop4): Directory bread(block 67) failed [ 783.482003][T27111] FAT-fs (loop4): Directory bread(block 68) failed [ 783.523397][T27108] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.10443: ea_inode file size=0 entry size=6 [ 783.538637][T27108] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.10443: iget: bad extra_isize 90 (inode size 256) [ 783.561584][T27108] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.10443: error while reading EA inode 11 err=-117 [ 783.569007][T27111] FAT-fs (loop4): Directory bread(block 69) failed [ 783.582085][T27108] EXT4-fs (loop5): 1 orphan inode deleted [ 783.582687][T27117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10448'. [ 783.592662][T27108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 783.607113][T27117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10448'. [ 783.632854][T27111] FAT-fs (loop4): Directory bread(block 70) failed [ 783.694211][T27111] FAT-fs (loop4): Directory bread(block 71) failed [ 783.722711][ T6705] tipc: Node number set to 1052600273 [ 783.740195][T27111] FAT-fs (loop4): Directory bread(block 72) failed [ 783.763973][T27111] FAT-fs (loop4): Directory bread(block 73) failed [ 783.850978][T11723] EXT4-fs (loop5): unmounting filesystem. [ 784.313121][T27138] loop5: detected capacity change from 0 to 64 [ 784.478858][T27138] [ 784.481255][T27138] ====================================================== [ 784.488281][T27138] WARNING: possible circular locking dependency detected [ 784.495391][T27138] syzkaller #0 Not tainted [ 784.499809][T27138] ------------------------------------------------------ [ 784.506825][T27138] syz.5.10455/27138 is trying to acquire lock: [ 784.513068][T27138] ffff888077c65bf8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 784.523968][T27138] [ 784.523968][T27138] but task is already holding lock: [ 784.531333][T27138] ffff88807b99a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 784.540664][T27138] [ 784.540664][T27138] which lock already depends on the new lock. [ 784.540664][T27138] [ 784.551085][T27138] [ 784.551085][T27138] the existing dependency chain (in reverse order) is: [ 784.560098][T27138] [ 784.560098][T27138] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 784.568132][T27138] __mutex_lock+0x12d/0xaf0 [ 784.573172][T27138] hfs_find_init+0x15b/0x1d0 [ 784.578296][T27138] hfs_extend_file+0x35d/0x13f0 [ 784.583681][T27138] hfs_bmap_reserve+0x103/0x420 [ 784.589060][T27138] hfs_cat_move+0x209/0xd90 [ 784.594097][T27138] hfs_rename+0x22c/0x320 [ 784.598958][T27138] vfs_rename+0xbe1/0x1100 [ 784.603907][T27138] do_renameat2+0x8e5/0xce0 [ 784.609022][T27138] __x64_sys_rename+0x82/0x90 [ 784.614228][T27138] do_syscall_64+0x4c/0xa0 [ 784.619180][T27138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.625608][T27138] [ 784.625608][T27138] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 784.634826][T27138] __lock_acquire+0x2d07/0x7d10 [ 784.640211][T27138] lock_acquire+0x1bb/0x4a0 [ 784.645245][T27138] __mutex_lock+0x12d/0xaf0 [ 784.650282][T27138] hfs_extend_file+0xfb/0x13f0 [ 784.655578][T27138] hfs_bmap_reserve+0x103/0x420 [ 784.660964][T27138] __hfs_ext_write_extent+0x1fa/0x470 [ 784.666868][T27138] __hfs_ext_cache_extent+0x6b/0x9b0 [ 784.672715][T27138] hfs_extend_file+0x39c/0x13f0 [ 784.678125][T27138] hfs_get_block+0x40f/0xc50 [ 784.683264][T27138] __block_write_begin_int+0x55d/0x1a80 [ 784.689351][T27138] block_write_begin+0x96/0x1e0 [ 784.694734][T27138] cont_write_begin+0x5ea/0x800 [ 784.700149][T27138] hfs_write_begin+0x87/0xd0 [ 784.705282][T27138] cont_write_begin+0x2ad/0x800 [ 784.710756][T27138] hfs_write_begin+0x87/0xd0 [ 784.715882][T27138] hfs_file_truncate+0x1c0/0xa10 [ 784.721359][T27138] hfs_inode_setattr+0x4ab/0x6f0 [ 784.726823][T27138] notify_change+0xc74/0xf40 [ 784.732044][T27138] do_truncate+0x1ac/0x240 [ 784.737089][T27138] do_sys_ftruncate+0x312/0x3c0 [ 784.742539][T27138] do_syscall_64+0x4c/0xa0 [ 784.747507][T27138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.753941][T27138] [ 784.753941][T27138] other info that might help us debug this: [ 784.753941][T27138] [ 784.764210][T27138] Possible unsafe locking scenario: [ 784.764210][T27138] [ 784.771666][T27138] CPU0 CPU1 [ 784.777298][T27138] ---- ---- [ 784.782754][T27138] lock(&tree->tree_lock/1); [ 784.787446][T27138] lock(&HFS_I(tree->inode)->extents_lock); [ 784.795988][T27138] lock(&tree->tree_lock/1); [ 784.803200][T27138] lock(&HFS_I(tree->inode)->extents_lock); [ 784.809192][T27138] [ 784.809192][T27138] *** DEADLOCK *** [ 784.809192][T27138] [ 784.817341][T27138] 4 locks held by syz.5.10455/27138: [ 784.822628][T27138] #0: ffff888045ffe460 (sb_writers#24){.+.+}-{0:0}, at: do_sys_ftruncate+0x27b/0x3c0 [ 784.832230][T27138] #1: ffff888077c677a8 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 784.842694][T27138] #2: ffff888077c675f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 784.853419][T27138] #3: ffff88807b99a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 784.863286][T27138] [ 784.863286][T27138] stack backtrace: [ 784.869177][T27138] CPU: 1 PID: 27138 Comm: syz.5.10455 Not tainted syzkaller #0 [ 784.876815][T27138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 784.886888][T27138] Call Trace: [ 784.890190][T27138] [ 784.893231][T27138] dump_stack_lvl+0x188/0x24e [ 784.897937][T27138] ? load_image+0x400/0x400 [ 784.902551][T27138] ? show_regs_print_info+0x12/0x12 [ 784.907766][T27138] ? print_circular_bug+0x12b/0x1a0 [ 784.912982][T27138] check_noncircular+0x296/0x330 [ 784.917946][T27138] ? arch_stack_walk+0xf2/0x140 [ 784.922803][T27138] ? look_up_lock_class+0x75/0x140 [ 784.927929][T27138] ? add_chain_block+0x940/0x940 [ 784.932877][T27138] ? lockdep_lock+0xf1/0x1f0 [ 784.937488][T27138] ? _find_first_zero_bit+0xcf/0x100 [ 784.942814][T27138] __lock_acquire+0x2d07/0x7d10 [ 784.947713][T27138] ? __kernel_text_address+0x9/0x30 [ 784.952960][T27138] ? unwind_get_return_address+0x49/0x80 [ 784.958621][T27138] ? stack_trace_save+0xf0/0xf0 [ 784.963499][T27138] ? verify_lock_unused+0x140/0x140 [ 784.968721][T27138] ? stack_trace_save+0xa6/0xf0 [ 784.973588][T27138] ? stack_trace_snprint+0xf0/0xf0 [ 784.978708][T27138] ? check_noncircular+0x189/0x330 [ 784.983836][T27138] lock_acquire+0x1bb/0x4a0 [ 784.988352][T27138] ? hfs_extend_file+0xfb/0x13f0 [ 784.993311][T27138] ? add_lock_to_list+0x191/0x280 [ 784.998454][T27138] ? __might_sleep+0xd0/0xd0 [ 785.003055][T27138] ? read_lock_is_recursive+0x10/0x10 [ 785.008440][T27138] ? __lock_acquire+0x28c4/0x7d10 [ 785.013518][T27138] __mutex_lock+0x12d/0xaf0 [ 785.018129][T27138] ? hfs_extend_file+0xfb/0x13f0 [ 785.023084][T27138] ? hfs_extend_file+0xfb/0x13f0 [ 785.028034][T27138] ? mutex_lock_nested+0x10/0x10 [ 785.032987][T27138] hfs_extend_file+0xfb/0x13f0 [ 785.037768][T27138] ? hfs_get_block+0xc50/0xc50 [ 785.042633][T27138] ? __mutex_trylock_common+0x155/0x260 [ 785.048188][T27138] ? trace_raw_output_contention_end+0xd0/0xd0 [ 785.054376][T27138] ? memset+0x1e/0x40 [ 785.058382][T27138] ? hfs_brec_find+0x197/0x500 [ 785.063170][T27138] hfs_bmap_reserve+0x103/0x420 [ 785.068042][T27138] __hfs_ext_write_extent+0x1fa/0x470 [ 785.073432][T27138] __hfs_ext_cache_extent+0x6b/0x9b0 [ 785.078738][T27138] ? hfs_find_init+0x15b/0x1d0 [ 785.083514][T27138] hfs_extend_file+0x39c/0x13f0 [ 785.088378][T27138] ? verify_lock_unused+0x140/0x140 [ 785.093605][T27138] ? hfs_get_block+0xc50/0xc50 [ 785.098383][T27138] ? memset+0x1e/0x40 [ 785.102370][T27138] ? lockdep_init_map_type+0x98/0x8d0 [ 785.107759][T27138] hfs_get_block+0x40f/0xc50 [ 785.112363][T27138] ? __lock_acquire+0x7d10/0x7d10 [ 785.117405][T27138] ? hfs_free_extents+0x430/0x430 [ 785.122455][T27138] ? do_raw_spin_unlock+0x11d/0x230 [ 785.127664][T27138] ? create_page_buffers+0x24f/0x4a0 [ 785.132970][T27138] __block_write_begin_int+0x55d/0x1a80 [ 785.138544][T27138] ? filemap_add_folio+0x188/0x3c0 [ 785.143680][T27138] ? xas_load+0x119/0x140 [ 785.148031][T27138] ? hfs_free_extents+0x430/0x430 [ 785.153070][T27138] ? page_zero_new_buffers+0x650/0x650 [ 785.158545][T27138] ? PageHeadHuge+0x8f/0x1c0 [ 785.163146][T27138] ? hfs_free_extents+0x430/0x430 [ 785.168184][T27138] block_write_begin+0x96/0x1e0 [ 785.173086][T27138] cont_write_begin+0x5ea/0x800 [ 785.178071][T27138] ? generic_cont_expand_simple+0x200/0x200 [ 785.184087][T27138] ? put_page+0xea/0x270 [ 785.188373][T27138] hfs_write_begin+0x87/0xd0 [ 785.193097][T27138] ? hfs_free_extents+0x430/0x430 [ 785.198139][T27138] cont_write_begin+0x2ad/0x800 [ 785.203008][T27138] ? generic_cont_expand_simple+0x200/0x200 [ 785.208919][T27138] ? mark_lock+0x94/0x320 [ 785.213324][T27138] ? truncate_inode_pages_range+0x3a9/0x1090 [ 785.219426][T27138] hfs_write_begin+0x87/0xd0 [ 785.224033][T27138] ? hfs_free_extents+0x430/0x430 [ 785.229073][T27138] hfs_file_truncate+0x1c0/0xa10 [ 785.234031][T27138] ? __up_read+0x2b2/0x6b0 [ 785.238629][T27138] ? hfs_extend_file+0x13f0/0x13f0 [ 785.243758][T27138] ? unmap_mapping_range+0x91/0x100 [ 785.248962][T27138] hfs_inode_setattr+0x4ab/0x6f0 [ 785.253904][T27138] ? security_inode_setattr+0xd8/0x140 [ 785.259459][T27138] ? try_break_deleg+0x79/0x120 [ 785.264318][T27138] ? hfs_evict_inode+0x100/0x100 [ 785.269265][T27138] notify_change+0xc74/0xf40 [ 785.273885][T27138] do_truncate+0x1ac/0x240 [ 785.278484][T27138] ? put_page_bootmem+0x2c0/0x2c0 [ 785.283517][T27138] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 785.288815][T27138] ? bpf_lsm_path_truncate+0x5/0x10 [ 785.294109][T27138] do_sys_ftruncate+0x312/0x3c0 [ 785.298968][T27138] do_syscall_64+0x4c/0xa0 [ 785.303483][T27138] ? clear_bhb_loop+0x60/0xb0 [ 785.308176][T27138] ? clear_bhb_loop+0x60/0xb0 [ 785.312865][T27138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.319393][T27138] RIP: 0033:0x7fedb139ce59 [ 785.323838][T27138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.343468][T27138] RSP: 002b:00007fedb2235028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 785.351897][T27138] RAX: ffffffffffffffda RBX: 00007fedb1615fa0 RCX: 00007fedb139ce59 [ 785.359875][T27138] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000004 [ 785.367857][T27138] RBP: 00007fedb1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 785.375831][T27138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.383814][T27138] R13: 00007fedb1616038 R14: 00007fedb1615fa0 R15: 00007ffd62eafc98 [ 785.391801][T27138] [ 785.476492][ T6705] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 785.506946][T11723] hfs: node 4:3 still has 1 user(s)! [ 785.657829][ T6705] usb 5-1: Using ep0 maxpacket: 8 [ 785.664668][ T6705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.664735][T27141] loop3: detected capacity change from 0 to 40427 [ 785.709315][ T6705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 785.723797][ T6705] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 785.750950][ T6705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.767140][ T6705] usb 5-1: config 0 descriptor?? [ 786.182482][ T6705] kye 0003:0458:5019.0002: unknown main item tag 0x2 [ 786.189320][ T6705] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 786.196012][ T6705] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 786.203684][ T6705] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 786.210422][ T6705] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 786.217158][ T6705] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 786.226068][ T6705] kye 0003:0458:5019.0002: hidraw0: USB HID v0.04 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 786.237204][ T6705] kye 0003:0458:5019.0002: tablet-enabling feature report not found [ 786.246019][ T6705] kye 0003:0458:5019.0002: tablet enabling failed [ 786.392178][ T6705] usb 5-1: USB disconnect, device number 45